python3-libsemanage-2.9-9.el8_6 > 6 6_6 3!pQp)Tξ7]mtZ`cW( ]mtZ`HGFbC܄|Z&Z޻eqt!܀-k'8O}ST2Hda!x:6ioײyH><$ BY8?]^7ʺ l*:DG}}I9!1'ܻ^`Z!:1*4^`78 .,ALe]~N<CqDVa0Gʯ5ԡk"֠sVpvn{ C|wcw"d'E8FFO"In5+Did i_bk*/XzĐW'Ð=IB']uGt]P QhaqKh[j0SP 915c7a060b27c3d6f75ee0910748268efdc9d9504e3e14c27bf48cb3570cbd79c9774e08a15d594f3739b50eb23eda756f70f3083|3!pQp)Tξ7]mtZ`cW( ]mtZ`1#E9p3pqN 51@#: "gsUUyY =af;v/` TVck#<Op v`^n-!7규AiNV/Ҫd+ tA0LO3 v/DlHb=K$leFq +s!yΏ/k.\ i|؝iOFF&s~nw&]ĤDʴmrXRdHKEGf.s@18DK'n^5N t4Z 끥ﳺTF|>?/C瘖Ɋ䚷>ExiҘ)&u)ߍ>]écy_3ʁᓤ"82@clhZ`k|_ \ԃP޽_MHMڥPbeTMMZ5z33<_It#3h q/M=ji`D)YXM""0~ᎄp?|?ld " M %1`fp     x((28<9 ::BGH$IDXLY\Zь[ѐ\ќ]Ѽ^sbdbegfjlltԄuԤvw՜xռy &hCpython3-libsemanage2.99.el8_6semanage python 3 bindings for libsemanageThe libsemanage-python3 package contains the python 3 bindings for developing SELinux management applications.cWord1-prod-x86build001.svc.aws.rockylinux.orgKojiRockyLGPLv2+infrastructure@rockylinux.orgUnspecifiedhttps://github.com/SELinuxProject/selinux/wikilinuxx86_64WӨӨ $AA큤cWcWcWcWcWcWcWcW05933feae1b6e79068063d7980144aede3265ac5aae5893e98a2073e367b51be05933feae1b6e79068063d7980144aede3265ac5aae5893e98a2073e367b51be88179f8f54d8c39ed24601861fab19cc7ad3fdd9ff8e296716d5aa9e2906536512aafbdd9e637858ecf9254ab43c439072104fdf29b7c6665a888ac99d8c2b9f91d78a3db0848cfac5b7638d6121462efc115857bf35a31fa0cdfa8bc05c0aae../../../../usr/lib64/python3.6/site-packages/_semanage.cpython-36m-x86_64-linux-gnu.sorootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootlibsemanage-2.9-9.el8_6.src.rpmlibsemanage-python3libsemanage-python3(x86-64)python3-libsemanagepython3-libsemanage(x86-64)@@@@@@@@@@@@     @/usr/libexec/platform-pythonlibc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libpython3.6m.so.1.0()(64bit)libselinux-python3libsemanage(x86-64)libsemanage.so.1()(64bit)libsemanage.so.1(LIBSEMANAGE_1.0)(64bit)libsemanage.so.1(LIBSEMANAGE_1.1)(64bit)libsemanage.so.1(LIBSEMANAGE_3.4)(64bit)python(abi)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PartialHardlinkSets)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)rtld(GNU_HASH)2.9-9.el8_63.63.0.4-14.6.0-14.0.4-14.0-15.2-14.14.3cEZb@b8`@_@_R^]µ\@\ @[%@[@[[Zz@ZK@ZZI@ZZ@Z}@Zz@Zu@ZTZfY@YyYJYV@Y@Yx@Y.XX @X@X@XJWH@W9W@Wk@W,@V@V@VIVɦV=@V9@UU@UUUa@UUQ@U+S@S@S @SSShS8@RRrF@R^RNRB@R@-@R:@R-@R)QdQ@QzQu&@QfQQ@P@PP@PQP@P@PP O@O0@Oĺ@OtNO;@OO@N@N@N@N@NNNw.Nw.Np@N\NLN1O@Md@MM)MQ0@Mt@MLuLF@KKsKKKf@K{@Ka|@KTM@K(K@KJJ@J@J$JJJ#J#Jyt@JjJW-@JS8J,@I@II2Io%@Ik0Ik0I7@I7@I1.HN@HN@HN@HǶH*H@H@HW@H=I@GOGOGOG@G[@G G@GGGW@GSGNG5@G0W@G'@FFFFIFIF&@FvFɂ@FFF` @F9F/BF/BE@E@EEɿ@EEEx@El$E4D@D@D@DC@DDD@D@D{DDX@D@D@Dhm@Dhm@Dhm@D_2D?D*vD*vDDCCi@CtC@C@CCC@CC @Cǖ@Cǖ@Cǖ@Cǖ@C@C[C[C @C @C,C @C @CCf@CqCC}@C+CBCYCYC{@Cx|@CtCtCqCp@Cp@CoACiCf@CbC`@C_oC^@C\CX@CWCTCTCTCP@COCLCJWCFc@CBnCA@C:C3@C1K@C/C(C@C Vit Mojzis - 2.9-9Vit Mojzis - 2.9-8Vit Mojzis - 2.9-7Petr Lautrbach - 2.9-6Petr Lautrbach - 2.9-5Vit Mojzis - 2.9-4Vit Mojzis - 2.9-3Vit Mojzis - 2.9-2Petr Lautrbach - 2.9-1Petr Lautrbach - 2.8-5Petr Lautrbach - 2.8-4Petr Lautrbach - 2.8-3.1Petr Lautrbach - 2.8-2Petr Lautrbach - 2.8-1Petr Lautrbach - 2.8-0.rc3.1Petr Lautrbach - 2.8-0.rc2.1Petr Lautrbach - 2.8-0.rc1.1Petr Lautrbach - 2.7-12Petr Lautrbach - 2.7-11Petr Lautrbach - 2.7-10Igor Gnatenko - 2.7-9Fedora Release Engineering - 2.7-8Igor Gnatenko - 2.7-7Iryna Shcherbina - 2.7-6Petr Lautrbach - 2.7-5Petr Lautrbach - 2.7-4Zbigniew Jędrzejewski-Szmek - 2.7-3Zbigniew Jędrzejewski-Szmek - 2.7-2Petr Lautrbach - 2.7-1Fedora Release Engineering - 2.6-6Fedora Release Engineering - 2.6-5Petr Lautrbach - 2.6-4Petr Lautrbach - 2.6-3Petr Lautrbach - 2.6-2Petr Lautrbach - 2.6-1.1Fedora Release Engineering - 2.5-10Charalampos Stratakis - 2.5-9Petr Lautrbach 2.5-8Petr Lautrbach 2.5-7Fedora Release Engineering - 2.5-6Petr Lautrbach - 2.5-5Petr Lautrbach - 2.5-4Petr Lautrbach - 2.5-3Petr Lautrbach 2.5-2Petr Lautrbach 2.5-1Petr Lautrbach 2.5-0.1.rc1Fedora Release Engineering - 2.4-6Robert Kuska - 2.4-5Petr Lautrbach 2.4-4Adam Jackson 2.4-3Petr Lautrbach 2.4-2Petr Lautrbach 2.4-0.6Fedora Release Engineering - 2.3-7Petr Lautrbach 2.4-0.5Petr Lautrbach 2.4-0.4Petr Lautrbach 2.4-0.3Fedora Release Engineering - 2.3-6Miroslav Grepl - 2.3-5Tom Callaway - 2.3-4Fedora Release Engineering - 2.3-3Kalev Lember - 2.3-2Dan Walsh - 2.3-1Dan Walsh - 2.2-3Dan Walsh - 2.2-2Dan Walsh - 2.2-1Dan Walsh - 2.1.10-14Dan Walsh - 2.1.10-13Dan Walsh - 2.1.10-12Dan Walsh - 2.1.10-11Dan Walsh - 2.1.10-10Dan Walsh - 2.1.10-9Dan Walsh - 2.1.10-8Dan Walsh - 2.1.10-7Dan Walsh - 2.1.10-6Dan Walsh - 2.1.10-5Dan Walsh - 2.1.10-4Dan Walsh - 2.1.10-3Dan Walsh - 2.1.10-2Dan Walsh - 2.1.10-1Dan Walsh 2.1.9-4Dan Walsh 2.1.9-3Dan Walsh - 2.1.9-2Dan Walsh - 2.1.9-1David Malcolm - 2.1.8-6David Malcolm - 2.1.8-5Fedora Release Engineering - 2.1.8-4Dan Walsh - 2.1.8-3Dan Walsh - 2.1.8-2Dan Walsh - 2.1.8-1Dan Walsh - 2.1.7-2Dan Walsh - 2.1.7-1Dan Walsh - 2.1.6-3Fedora Release Engineering - 2.1.6-2Dan Walsh - 2.1.6-2Dan Walsh - 2.1.6-1Dan Walsh - 2.1.5-4Dan Walsh - 2.1.5-3Dan Walsh - 2.1.5-2Dan Walsh - 2.1.5-1Dan Walsh - 2.1.4-2Dan Walsh - 2.1.4-2Dan Walsh - 2.1.4-1Dan Walsh - 2.1.3-2Dan Walsh - 2.1.3-1Dan Walsh - 2.1.2-1Dan Walsh - 2.1.0-1Dan Walsh - 2.0.46-6Dan Walsh - 2.0.46-5Dan Walsh - 2.0.46-4Fedora Release Engineering - 2.0.46-3David Malcolm - 2.0.46-2Dan Walsh - 2.0.46-1Thomas Spura - 2.0.45-6David Malcolm - 2.0.45-5David Malcolm - 2.0.45-4Dan Walsh - 2.0.45-3Dan Walsh - 2.0.45-2Dan Walsh - 2.0.45-1Dan Walsh - 2.0.44-2Dan Walsh - 2.0.44-1Dan Walsh - 2.0.43-4Dan Walsh - 2.0.43-3Dan Walsh - 2.0.43-2Dan Walsh - 2.0.43-1Dan Walsh - 2.0.42-1Dan Walsh - 2.0.41-1Dan Walsh - 2.0.39-1Dan Walsh - 2.0.38-2Dan Walsh - 2.0.38-1Dan Walsh - 2.0.37-1Dan Walsh - 2.0.36-2Dan Walsh - 2.0.36-1Dan Walsh - 2.0.35-2Dan Walsh - 2.0.35-1Fedora Release Engineering - 2.0.33-3Dan Walsh - 2.0.33-2Dan Walsh - 2.0.33-1Dan Walsh - 2.0.32-1Dan Walsh - 2.0.31-5Dan Walsh - 2.0.31-4Fedora Release Engineering - 2.0.31-3Dan Walsh - 2.0.31-2Dan Walsh - 2.0.31-1Dan Walsh - 2.0.30-3Ignacio Vazquez-Abrams - 2.0.30-2Dan Walsh - 2.0.30-1Ignacio Vazquez-Abrams - 2.0.29-2Dan Walsh - 2.0.28-1Dan Walsh - 2.0.28-2Dan Walsh - 2.0.28-1Dan Walsh - 2.0.27-3Dan Walsh - 2.0.27-2Dan Walsh - 2.0.27-1Dan Walsh - 2.0.26-1Dan Walsh - 2.0.25-3Tom "spot" Callaway - 2.0.25-2Dan Walsh - 2.0.25-1Dan Walsh - 2.0.24-1Dan Walsh - 2.0.23-1Dan Walsh - 2.0.22-1Dan Walsh - 2.0.20-1Dan Walsh - 2.0.19-1Dan Walsh - 2.0.18-1Dan Walsh - 2.0.16-1Dan Walsh - 2.0.15-2Dan Walsh - 2.0.15-1Dan Walsh - 2.0.14-5Dan Walsh - 2.0.14-3Dan Walsh - 2.0.14-2Dan Walsh - 2.0.14-1Dan Walsh - 2.0.12-1Dan Walsh - 2.0.11-1Dan Walsh - 2.0.10-2Dan Walsh - 2.0.10-1Dan Walsh - 2.0.9-1Dan Walsh - 2.0.6-2Dan Walsh - 2.0.6-1Dan Walsh - 2.0.5-1Dan Walsh - 2.0.4-1Dan Walsh - 2.0.3-5Dan Walsh - 2.0.3-4Dan Walsh - 2.0.3-3Dan Walsh - 2.0.3-2Dan Walsh - 2.0.3-1Dan Walsh - 2.0.2-1Dan Walsh - 2.0.1-2Dan Walsh - 2.0.1-1Dan Walsh - 2.0.0-1Dan Walsh - 1.10.1-1Dan Walsh - 1.9.2-1Dan Walsh - 1.9.1-3Jeremy Katz - 1.9.1-2Dan Walsh - 1.9.1-1Dan Walsh - 1.8-1Dan Walsh - 1.6.17-1Dan Walsh - 1.6.16-3Dan Walsh - 1.6.16-2Dan Walsh - 1.6.16-1Dan Walsh - 1.6.15-1Dan Walsh - 1.6.13-3Dan Walsh - 1.6.13-2Dan Walsh - 1.6.13-1Dan Walsh - 1.6.12-2Dan Walsh - 1.6.12-1Dan Walsh - 1.6.11-1Dan Walsh - 1.6.9-1Dan Walsh - 1.6.8-2Dan Walsh - 1.6.8-1Dan Walsh - 1.6.7-3Dan Walsh - 1.6.7-2Dan Walsh - 1.6.7-1Dan Walsh - 1.6.6-1Dan Walsh - 1.6.3-1Dan Walsh - 1.6.2-2Dan Walsh - 1.6.2-1Dan Walsh - 1.6-1Dan Walsh - 1.5.28-1Dan Walsh - 1.5.26-1Dan Walsh - 1.5.23-1Jesse Keating - 1.5.21-2.1Dan Walsh - 1.5.21-2Dan Walsh - 1.5.21-1Jesse Keating - 1.5.20-1.1Dan Walsh 1.5.20-1Dan Walsh 1.5.19-1Dan Walsh 1.5.18-1Dan Walsh 1.5.16-1Dan Walsh 1.5.15-1Dan Walsh 1.5.14-2Dan Walsh 1.5.14-1Dan Walsh 1.5.9-1Dan Walsh 1.5.8-1Dan Walsh 1.5.6-1Dan Walsh 1.5.4-2Dan Walsh 1.5.4-1Dan Walsh 1.5.3-3Dan Walsh 1.5.3-2Dan Walsh 1.5.3-1Dan Walsh 1.5.1-2Dan Walsh 1.5.1-1Jesse Keating Dan Walsh 1.4-1Dan Walsh 1.3.64-1Dan Walsh 1.3.63-1Dan Walsh 1.3.61-1Dan Walsh 1.3.59-1Dan Walsh 1.3.56-2Dan Walsh 1.3.56-1Dan Walsh 1.3.53-3Dan Walsh 1.3.53-2Dan Walsh 1.3.53-1Dan Walsh 1.3.52-1Dan Walsh 1.3.51-1Dan Walsh 1.3.48-1Dan Walsh 1.3.43-1Dan Walsh 1.3.41-1Dan Walsh 1.3.39-1Dan Walsh 1.3.38-1Dan Walsh 1.3.36-1Dan Walsh 1.3.35-1Dan Walsh 1.3.34-1Dan Walsh 1.3.32-1Dan Walsh 1.3.30-1Dan Walsh 1.3.28-1Dan Walsh 1.3.24-1Dan Walsh 1.3.20-1Dan Walsh 1.3.20-1Dan Walsh 1.3.18-1Dan Walsh 1.3.14-1Dan Walsh 1.3.11-1Dan Walsh 1.3.10-1Dan Walsh 1.3.9-1Dan Walsh 1.3.8-1Dan Walsh 1.3.7-1Dan Walsh 1.3.5-1Dan Walsh 1.3.4-1Dan Walsh 1.3.3-1Dan Walsh 1.3.2-1Dan Walsh 1.3.1-1Dan Walsh 1.1.6-1Dan Walsh 1.1.3-1- always write kernel policy when check_ext_changes is specified (#2129139)- Bump release to get around OSCI issues- Trivial style fixes - Free contents of modkey in semanage_direct_remove - Fix USE_AFTER_FREE (CWE-672) in semanage_direct_write_langext() - add missing include to boolean_record.c - move module hashing into libsemanage - move compressed file handling into a separate object - clean up semanage_direct_commit() a bit - optionally rebuild policy when modules are changed externally - add command-line option to detect module changes (#2049186)- sync filesystem with sandbox (#1913224)- Revert "genhomedircon: check usepasswd" (rhbz#1871786) - semanage.conf - improve usepasswd=False explanation (rhbz#1871786) - semanage.conf - expand list of ignoredirs (rhbz#1871786)- genhomedircon: check usepasswd (rhbz#1871786)- Fsync final files before rename (#1838762)- Add support for DCCP and SCTP protocols (#1563742)- SELinux userspace 2.9 release- genhomedircon - improve handling large groups- Fix RESOURCE_LEAK and USE_AFTER_FREE coverity scan defects- reset umask before creating directories - Include user name in ROLE_REMOVE audit events- Don't build the Python 2 subpackage (#1567359)- SELinux userspace 2.8 release- SELinux userspace 2.8-rc3 release candidate- SELinux userspace 2.8-rc2 release candidate- SELinux userspace 2.8-rc1 release candidate- build: Replace PYSITEDIR with PYTHONLIBDIR - direct_api.c: Fix iterating over array (#1557468)- Revert "remove access() check to make setuid programs work" (#1557468)- properly check return value of iterate function - Use umask(0077) for fopen() write operations - Return commit number if save-previous false - Allow tmp files to be kept if a compile fails - build: follow standard semantics for DESTDIR and PREFIX - Improve warning for installing disabled module - silence clang static analyzer report - remove access() check to make setuid programs work- Escape macros in %changelog- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild- Switch to %ldconfig_scriptlets- Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)- free genhomedircon fallback user - Rebuild with libsepol-2.7-3 and libselinux-2.7-6- Add support for listing fcontext.homedirs file (#1409813)- Add Provides for the old names without %_isa- Python 2 binary package renamed to python2-libsemanage See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3 - Python 3 binary package renamed to python3-libsemanage- Update to upstream release 2017-08-04 - Use 'sefcontext_compile -r' when it's run during SELinux policy build- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- Follow upstream and rename _semanage.so to _semanage.cpython-36m-x86_64-linux-gnu.so- Do not list duplicate port entries after setting a boolean (#1439875)- Fix FTBFS - fatal error (#1427903)- Update to upstream release 2016-10-14- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild- Rebuild for Python 3.6- Fixes bug preventing the installation of base modules - make distclean target work - Do not always print a module name warning - Use pp module name instead of filename when installing module - tests: Do not force using gcc - genhomedircon: remove hardcoded refpolicy strings - genhomedircon: add support for %group syntax - genhomedircon: generate contexts for logins mapped to the default user - Validate and compile file contexts before installing - Swap tcp and udp protocol numbers- Rebuilt with libsepol-2.5-9 and libselinux-2.5-11- https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages- Sort object files for deterministic linking order - Support overriding Makefile RANLIB - Respect CC and PKG_CONFIG environment variable- Fix multiple spelling errors - genhomedircon: %{USERID} and %{USERNAME} support and code cleanup- Enable expand-check by default (#1319652)- Use fully versioned arch-specific requires- Update to upstream release 2016-02-23- Update to upstream rc1 release 2016-01-07- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild- Rebuilt for Python3.5 rebuild- Save homedir_template in the policy store for genhomedircon https://bugs.gentoo.org/558686- Pass ldflags into the build so hardening works- semanage_migrate_store: use /usr/bin/python3 - move semanage_migrate_store script to libsemanage-python3- Allow to use compressed modules without a compression extension- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- add /var/lib/selinux/tmp directory- semanage_migrate_store: add -r option for migrating inside chroots- Update to upstream release 2.4- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild- Skip policy module re-link when only setting booleans. * patch from Stephen Smalley- fix license handling- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild- Rebuilt for https://fedoraproject.org/wiki/Changes/Python_3.4- Update to upstream * Fix memory leak in semanage_genhomedircon from Thomas Hurd.- libsemanage: fix memory leak in semanage_genhomedircon - Patch from THomas Hurd- Move semanage.conf man page from devel package to main package- Update to upstream * Avoid duplicate list entries from Dan Walsh. * Add audit support to libsemanage from Dan Walsh. * Remove policy.kern and replace with symlink from Dan Walsh. * Apply a MAX_UID check for genhomedircon from Laurent Bigonville. * Fix man pages from Laurent Bigonville.- Cleanup handling of missing mls_range to fix problems with useradd -Z - Fix auditing of login record changes, roles were not working correctly. Resolves: #952237- Fix errors found by coverity Resolves: #952237- Do not fail on missing SELinux User Record when adding login record- Add msg to audit records- Do not write error message to screen when looking for previous record for auditing. - Add mls_range from user record if the MLS range is not specified by the seuser add record. - Error out if seuser or mls range is not specified when adding user records- Create symlink from policy.kern to active kernel.- Unlink policy.kern when done to save space.- Move handling of role audit records into the library - Patch stops semanage from removing user record while in use- Remove dependance on selinux-policy, /etc/selinux should be owned by libsemanage, and selinux-policy can require it.- Allways build python3 version-- Fix test suite to build- Revert some changes which are causing the wrong policy version file to be created- Update to upstream * Add sefcontext_compile to compile regex everytime policy is rebuilt * Cleanup/fix enable/disable/remove module. * redo genhomedircon minuid * fixes from coverity * semanage_store: do not leak memory in semanage_exec_prog * genhomedircon: remove useless conditional in get_home_dirs * genhomedircon: double free in get_home_dirs * fcontext_record: do not leak on error in semanage_fcontext_key_create * genhomedircon: do not leak on failure in write_gen_home_dir_context * semanage_store: do not leak fd * genhomedircon: do not leak shells list * semanage_store: do not leak on strdup failure * semanage_store: rewrite for readability- Add selinux-policy as a requires to get /etc/selinux owned- Update to latest patches from eparis/Upstream - libsemanage: fixes from coverity - libsemange: redo genhomedircon minuid- Fix handling of missing semanage permissive -d foo, not failing correctly - Previous to this fix the first module beginning with foo would get deleted.- Update to upstream * libsemanage: do not set soname needlessly * libsemanage: remove PYTHONLIBDIR and ruby equivalent * do boolean name substitution * Fix segfault for building standard policies.- rebuild for https://fedoraproject.org/wiki/Features/Python_3.3- remove rhel logic from with_python3 conditional- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- Attempt to allocate memory for selinux_binary_policy_path and free memory - allocated by asprintf.- Fix asprintf within an asprintf call- Update to upstream * remove build warning when build swig c files * additional makefile support for rubywrap * ignore 80 column limit for readability * semanage_store: fix snprintf length argument by using asprintf * Use default semanage.conf as a fallback * use after free in python bindings- Apply patch from Sven Vermeulen to fix problem with python3 bindings.- Update to upstream * Alternate path for semanage.conf * do not link against libpython, this is considered bad in Debian * Allow to build for several ruby version * fallback-user-level- Check in correct patch.- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild- Add patch form Xin Ouyang to make library use private semanage.conf-Update to upstream * add ignoredirs config for genhomedircon * Fallback_user_level can be NULL if you are not using MLS- Rebuild with latest libsepol- Rebuild with latest libsepol- Add support for ignoredirs param in /etc/selinux/semanage.conf- Upgrade to upstream * regenerate .pc on VERSION change * maintain mode even if umask is tighter * semanage.conf man page * create man5dir if not exist- Fix handling of umask, so files get created with the correct label.- Add Guido Trentalancia semanage.conf man page-Update to upstream * Create a new preserve_tunables flag * tree: default make target to all not * fix semanage_store_access_check calling arguments- Add support for preserving tunables-Update to upstream * python wrapper makefile changes-Update to upstream 2.1.2 2011-08-17 * print error debug info for buggy fc * introduce semanage_set_root and friends * throw exceptions in python rather than return * python3 support. * patch for MCS/MLS in user files 2.1.1 2011-08-01 * Remove generated files, expand .gitignore * Use -Werror and change a few prototypes to support it- Update to upstream * Release, minor version bump- More fixes for disabled modules- Change libsemanage mechanism for handling disabled modules. Now it will only create a flag for a module indicating the module is disabled. MODULE.pp.disabled, it will no longer rename the module. This way we can ship active modules in rpm.- Add semanage_set_selinux_path, to allow semodule to work on alternate selinux pools- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- big reworking of the support-multiple-python-builds patch to deal with PEP 3149: the latest Python 3.2 onwards uses include paths and library names that don't fit prior naming patterns, and so we must query python3-config for this information. To complicate things further, python 2's python-config doesn't understand all of the options needed ("--extension-suffix"). I've thus added new Makefile variables as needed, to be supplied by the specfile by invoking the appropriate config tool (or by hardcoding the old value for "--extension-suffix" i.e. ".so") - rework python3 manifest for PEP 3149, and rebuild for newer python3- Update to upstream * Fix compliation under GCC 4.6 by Justin Mattock- rebuild with python3.2 http://lists.fedoraproject.org/pipermail/devel/2010-August/141368.html- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild- add python3 subpackage- Fix -devel package to point at the correct shared library- Move shared library to /usr/lib- Update to upstream * Add enable/disable patch support from Dan Walsh. * Add usepasswd flag to semanage.conf to disable genhomedircon using passwd from Dan Walsh. * regenerate swig wrappers- Allow disable of usepasswd- Update to upstream * Replace usage of fmemopen() with sepol_policy_file_set_mem() since glibc < 2.9 does not support binary mode ('b') for fmemopen'd streams.- Cleanup spec file- Splect libsemanage.a into a static subpackage to keep fedora packaging guidelines happy- Rebuild all c programs with -fPIC- Update to upstream * Move libsemanage.so to /usr/lib * Add NAME lines to man pages from Manoj Srivastava- Update to upstream * Move load_policy from /usr/sbin to /sbin from Dan Walsh.- Update to upstream * Add pkgconfig file from Eamon Walsh. * Add semanage_set_check_contexts() function to disable calling setfiles- Update to upstream * make swigify- Dont relabel /root with genhomedircon- Update to upstream * Change semodule upgrade behavior to install even if the module is not present from Dan Walsh. * Make genhomedircon trim excess '/' from homedirs from Dan Walsh.- Update to upstream * Fix persistent dontaudit support to rebuild policy if the dontaudit state is changed from Chad Sellers. - Move load_policy to /sbin- Add enable/disable modules- Update to upstream * Changed bzip-blocksize=0 handling to support existing compressed modules in the store.- Make sure /root is not used in genhomedircon- Revert hard linking of files between tmp/active/previous. - Enable configuration of bzip behavior from Stephen Smalley. - bzip-blocksize=0 to disable compression and decompression support. - bzip-blocksize=1..9 to set the blocksize for compression. - bzip-small=true to reduce memory usage for decompression.- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- Put check for /root back into genhomedircon- Update to upstream- Update to upstream * Ruby bindings from David Quigley.- Return error on invalid file- Fix typo- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild- Fix link to only link on sandbox- Update to upstream * Policy module compression (bzip) support from Dan Walsh. * Hard link files between tmp/active/previous from Dan Walsh.- Fix up patch to get it upstreamed- Rebuild for Python 2.6- Add semanage_mls_enabled() interface from Stephen Smalley.- Rebuild for Python 2.6- Update to upstream * Add USER to lines to homedir_template context file from Chris PeBenito.- Add compression support- Update to upstream * allow fcontext and seuser changes without rebuilding the policy from Dan Walsh- Additional fixes for Don't rebuild on fcontext or seuser modifications- Don't rebuild on fcontext or seuser modifications- Update to upstream * Modify genhomedircon to skip groupname entries. Ultimately we need to expand them to the list of users to support per-role homedir labeling when using the groupname syntax.- Update to upstream * Fix bug in genhomedircon fcontext matches logic from Dan Walsh. Strip any trailing slash before appending /*$.- Another fix for genhomedircon- fix license tag- Update to upstream * Do not call genhomedircon if the policy was not rebuilt from Stephen Smalley. Fixes semanage boolean -D seg fault (bug 441379).- Update to upstream * make swigify- Update to upstream * Use vfork rather than fork for libsemanage helpers to reduce memory overhead as suggested by Todd Miller.- Update to upstream * Free policydb before fork from Joshua Brindle. * Drop the base module immediately after expanding to permit memory re-use from Stephen Smalley.- Update to upstream * Use sepol_set_expand_consume_base to reduce peak memory usage when using semodule- Update to upstream * Fix genhomedircon to not override a file context with a homedir context from Todd Miller.- Update to upstream * Fix spurious out of memory error reports. * Merged second version of fix for genhomedircon handling from Caleb Case.- Update to upstream * Merged fix for genhomedircon handling of missing HOME_DIR or HOME_ROOT templates from Caleb Case.- Stop differentiating on user for homedir labeling- Update to upstream * Fix genhomedircon handling of shells and missing user context template from Dan Walsh. * Copy the store path in semanage_select_store from Dan Walsh. - Add expand-check=0 to semanage.conf- Fix handling of /etc/shells so genhomedircon will work- Allow semanage_genhomedircon to work with out a USER int homedir.template- Fix semanage_select_store to allocate memory, fixes crash on invalid store- Upgrade to latest from NSA * Call rmdir() rather than remove() on directory removal so that errno isn't polluted from Stephen Smalley. * Allow handle_unknown in base to be overridden by semanage.conf from Stephen Smalley.- Upgrade to latest from NSA * ustr cleanups from James Antill. * Ensure that /root gets labeled even if using the default context from Dan Walsh.- Upgrade to latest from NSA * Fix ordering of file_contexts.homedirs from Todd Miller and Dan Walsh.- Fix sort order on generated homedir context- Upgrade to latest from NSA * Fix error checking on getpw*_r functions from Todd Miller. * Make genhomedircon skip invalid homedir contexts from Todd Miller. * Set default user and prefix from seusers from Dan Walsh. * Add swigify Makefile target from Dan Walsh.- Upgrade to latest from NSA * Pass CFLAGS to CC even on link command, per Dennis Gilmore. * Clear errno on non-fatal errors to avoid reporting them upon a later error that does not set errno. * Improve reporting of system errors, e.g. full filesystem or read-only filesystem from Stephen Smalley. - Fix segfault in genhomedircon when using bad user names- Fix genhomedircon code to only generate valid context - Fixes autorelabel problem- Upgrade to latest from NSA * Change to use getpw* function calls to the _r versions from Todd Miller.- Upgrade to latest from NSA- Upgrade to latest from NSA * Allow dontaudits to be turned off via semanage interface when updating policy- Add ability to load a policy without dontaudit rules -- Rebuild to fix segfault on x86 platforms, swigify on each build- Rebuild for rawhide- Apply patch to fix dependencies in spec file from Robert Scheck- Upgrade to latest from NSA * Fix to libsemanage man patches so whatis will work better from Dan Walsh- Upgrade to latest from NSA - Merged optimizations from Stephen Smalley. - do not set all booleans upon commit, only those whose values have changed - only install the sandbox upon commit if something was rebuilt- Add SELinux to Man page Names so man -k will work- Merged dbase_file_flush patch from Dan Walsh. - This removes any mention of specific tools (e.g. semanage) - from the comment header of the auto-generated files, - since there are multiple front-end tools.- Upgrade to latest from NSA * Merged Makefile test target patch from Caleb Case. * Merged get_commit_number function rename patch from Caleb Case. * Merged strnlen -> strlen patch from Todd Miller.- Upgrade to latest from NSA * Merged python binding fix from Dan Walsh. * Updated version for stable branch.- Upgrade to latest from NSA * Merged patch to optionally reduce disk usage by removing the backup module store and linked policy from Karl MacMillan * Merged patch to correctly propagate return values in libsemanage- Apply Karl MacMillan patch to get proper error codes.- rebuild against python 2.5- Upgrade to latest from NSA * Merged patch to compile wit -fPIC instead of -fpic from Manoj Srivastava to prevent hitting the global offest table limit. Patch changed to include libselinux and libsemanage in addition to libsepol.- Upgrade to latest from NSA * Updated version for release.- Upgrade to latest from NSA * Merged patch to skip reload if no active store exists and the store path doesn't match the active store path from Dan Walsh. * Merged patch to not destroy sepol handle on error path of connect from James Athey. * Merged patch to add genhomedircon path to semanage.conf from James Athey.- Fix semanage to not load if is not the correct policy type and it is installing- Fix requires lines- Upgrade to latest from NSA * Make most copy errors fatal, but allow exceptions for file_contexts.local, seusers, and netfilter_contexts if the source file does not exist in the store.- Upgrade to latest from NSA * Merged separate local file contexts patch from Chris PeBenito. * Merged patch to make most copy errors non-fatal from Dan Walsh.- Change other updates to be non-fatal- Change netfilter stuff to be non-fatal so update can proceed.- Upgrade to latest from NSA * Merged netfilter contexts support from Chris PeBenito.- Rebuild for new gcc- Upgrade to latest from NSA * Merged support for read operations on read-only fs from Caleb Case (Tresys Technology).- Upgrade to latest from NSA * Lindent. * Merged setfiles location check patch from Dan Walsh.- Upgrade to latest from NSA * Merged several fixes from Serge Hallyn: dbase_file_cache: deref of uninit data on error path. dbase_policydb_cache: clear fp to avoid double fclose semanage_fc_sort: destroy temp on error paths- Handle setfiles being in /sbin or /usr/sbin- Upgrade to latest from NSA * Updated default location for setfiles to /sbin to match policycoreutils. This can also be adjusted via semanage.conf using the syntax: [setfiles] path = /path/to/setfiles args = -q -c $@ $< [end]- Spec file cleanup from n0dalus+redhat@gmail.com- Add /usr/include/semanage to spec file- Upgrade to latest from NSA * Merged fix warnings patch from Karl MacMillan.- Upgrade to latest from NSA * Merged updated file context sorting patch from Christopher Ashworth, with bug fix for escaped character flag. * Merged file context sorting code from Christopher Ashworth (Tresys Technology), based on fc_sort.c code in refpolicy. * Merged python binding t_output_helper removal patch from Dan Walsh. * Regenerated swig files.- Fix to work with new version of swig - Upgrade to latest from NSA * Merged corrected fix for descriptor leak from Dan Walsh.- Fix leaky descriptor- Upgrade to latest from NSA * Merged Makefile PYLIBVER definition patch from Dan Walsh. * Merged man page reorganization from Ivan Gyurdiev.- Make work on RHEL4 - Upgrade to latest from NSA * Merged abort early on merge errors patch from Ivan Gyurdiev. * Cleaned up error handling in semanage_split_fc based on a patch by Serge Hallyn (IBM) and suggestions by Ivan Gyurdiev. * Merged MLS handling fixes from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged bug fix for fcontext validate handler from Ivan Gyurdiev. * Merged base_merge_components changes from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged paths array patch from Ivan Gyurdiev. * Merged bug fix patch from Ivan Gyurdiev. * Merged improve bindings patch from Ivan Gyurdiev. * Merged use PyList patch from Ivan Gyurdiev. * Merged memory leak fix patch from Ivan Gyurdiev. * Merged nodecon support patch from Ivan Gyurdiev. * Merged cleanups patch from Ivan Gyurdiev. * Merged split swig patch from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged optionals in base patch from Joshua Brindle. * Merged treat seusers/users_extra as optional sections patch from Ivan Gyurdiev. * Merged parse_optional fixes from Ivan Gyurdiev.- bump again for double-long bug on ppc(64)- Fix handling of seusers and users_map file- Upgrade to latest from NSA * Merged seuser/user_extra support patch from Joshua Brindle. * Merged remote system dbase patch from Ivan Gyurdiev.- rebuilt for new gcc4.1 snapshot and glibc changes- Upgrade to latest from NSA * Merged clone record on set_con patch from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged fname parameter patch from Ivan Gyurdiev. * Merged more size_t -> unsigned int fixes from Ivan Gyurdiev. * Merged seusers.system patch from Ivan Gyurdiev. * Merged improve port/fcontext API patch from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged seuser -> seuser_local rename patch from Ivan Gyurdiev. * Merged set_create_store, access_check, and is_connected interfaces from Joshua Brindle.- Upgrade to latest from NSA * Regenerate python wrappers.- Upgrade to latest from NSA * Merged pywrap Makefile diff from Dan Walsh. * Merged cache management patch from Ivan Gyurdiev. * Merged bugfix for dbase_llist_clear from Ivan Gyurdiev. * Merged remove apply_local function patch from Ivan Gyurdiev. * Merged only do read locking in direct case patch from Ivan Gyurdiev. * Merged cache error path memory leak fix from Ivan Gyurdiev. * Merged auto-generated file header patch from Ivan Gyurdiev. * Merged pywrap test update from Ivan Gyurdiev. * Merged hidden defs update from Ivan Gyurdiev.- Break out python out of regular Makefile- Upgrade to latest from NSA * Merged disallow port overlap patch from Ivan Gyurdiev. * Merged join prereq and implementation patches from Ivan Gyurdiev. * Merged join user extra data part 2 patch from Ivan Gyurdiev. * Merged bugfix patch from Ivan Gyurdiev. * Merged remove add_local/set_local patch from Ivan Gyurdiev. * Merged user extra data part 1 patch from Ivan Gyurdiev. * Merged size_t -> unsigned int patch from Ivan Gyurdiev. * Merged calloc check in semanage_store patch from Ivan Gyurdiev, bug noticed by Steve Grubb. * Merged cleanups after add/set removal patch from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged const in APIs patch from Ivan Gyurdiev. * Merged validation of local file contexts patch from Ivan Gyurdiev. * Merged compare2 function patch from Ivan Gyurdiev. * Merged hidden def/proto update patch from Ivan Gyurdiev.- Upgrade to latest from NSA * Re-applied string and file optimization patch from Russell Coker, with bug fix. * Reverted string and file optimization patch from Russell Coker. * Clarified error messages from parse_module_headers and parse_base_headers for base/module mismatches.- Upgrade to latest from NSA * Clarified error messages from parse_module_headers and parse_base_headers for base/module mismatches. * Merged string and file optimization patch from Russell Coker. * Merged swig header reordering patch from Ivan Gyurdiev. * Merged toggle modify on add patch from Ivan Gyurdiev. * Merged ports parser bugfix patch from Ivan Gyurdiev. * Merged fcontext swig patch from Ivan Gyurdiev. * Merged remove add/modify/delete for active booleans patch from Ivan Gyurdiev. * Merged man pages for dbase functions patch from Ivan Gyurdiev. * Merged pywrap tests patch from Ivan Gyurdiev.- Patch to fix add- Upgrade to latest from NSA * Merged patch series from Ivan Gyurdiev. This includes patches to: - separate file rw code from linked list - annotate objects - fold together internal headers - support ordering of records in compare function - add active dbase backend, active booleans - return commit numbers for ro database calls - use modified flags to skip rebuild whenever possible - enable port interfaces - update swig interfaces and typemaps - add an API for file_contexts.local and file_contexts - flip the traversal order in iterate/list - reorganize sandbox_expand - add seusers MLS validation - improve dbase spec/documentation - clone record on set/add/modify- Add Ivans patch to turn on ports- Remove patch since upstream does the right thing- Upgrade to latest from NSA * Merged further header cleanups from Ivan Gyurdiev. * Merged toggle modified flag in policydb_modify, fix memory leak in clear_obsolete, polymorphism vs headers fix, and include guards for internal headers patches from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged toggle modified flag in policydb_modify, fix memory leak in clear_obsolete, polymorphism vs headers fix, and include guards for internal headers patches from Ivan Gyurdiev.- Upgrade to latest from NSA * Added file-mode= setting to semanage.conf, default to 0644. Changed semanage_copy_file and callers to use this mode when installing policy files to runtime locations.- rebuilt- Fix mode of output seusers file- Upgrade to latest from NSA * Changed semanage_handle_create() to set do_reload based on is_selinux_enabled(). This prevents improper attempts to load policy on a non-SELinux system.- Upgrade to latest from NSA * Dropped handle from user_del_role interface. * Removed defrole interfaces.- Upgrade to latest from NSA * Merged Makefile python definitions patch from Dan Walsh. * Removed is_selinux_mls_enabled() conditionals in seusers and users file parsers.- Add additional swig objects * Merged wrap char*** for user_get_roles patch from Joshua Brindle. * Merged remove defrole from sepol patch from Ivan Gyurdiev. * Merged swig wrappers for modifying users and seusers from Joshua Brindle.- Add additional swig objects- Upgrade to latest from NSA * Fixed free->key_free bug. * Merged clear obsolete patch from Ivan Gyurdiev. * Merged modified swigify patch from Dan Walsh (original patch from Joshua Brindle). * Merged move genhomedircon call patch from Chad Sellers.- Add genhomedircon patch from Joshua Brindle- Add swigify patch from Joshua Brindle- Upgrade to latest from NSA * Merged move seuser validation patch from Ivan Gyurdiev. * Merged hidden declaration fixes from Ivan Gyurdiev, with minor corrections.- Upgrade to latest from NSA * Merged cleanup patch from Ivan Gyurdiev. This renames semanage_module_conn to semanage_direct_handle, and moves sepol handle create/destroy into semanage handle create/destroy to allow use even when disconnected (for the record interfaces).- Upgrade to latest from NSA * Clear modules modified flag upon disconnect and commit. * Added tracking of module modifications and use it to determine whether expand-time checks should be applied on commit. * Reverted semanage_set_reload_bools() interface.- Upgrade to latest from NSA * Disabled calls to port dbase for merge and commit and stubbed out calls to sepol_port interfaces since they are not exported. * Merged rename instead of copy patch from Joshua Brindle (Tresys). * Added hidden_def/hidden_proto for exported symbols used within libsemanage to eliminate relocations. Wrapped type definitions in exported headers as needed to avoid conflicts. Added src/context_internal.h and src/iface_internal.h. * Added semanage_is_managed() interface to allow detection of whether the policy is managed via libsemanage. This enables proper handling in setsebool for non-managed systems. * Merged semanage_set_reload_bools() interface from Ivan Gyurdiev, to enable runtime control over preserving active boolean values versus reloading their saved settings upon commit.- Upgrade to latest from NSA * Merged seuser parser resync, dbase tracking and cleanup, strtol bug, copyright, and assert space patches from Ivan Gyurdiev. * Added src/*_internal.h in preparation for other changes. * Added hidden/hidden_proto/hidden_def to src/debug.[hc] and src/seusers.[hc].- Upgrade to latest from NSA * Merged interface parse/print, context_to_string interface change, move assert_noeof, and order preserving patches from Ivan Gyurdiev. * Added src/dso.h in preparation for other changes. * Merged install seusers, handle/error messages, MLS parsing, and seusers validation patches from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged record interface, dbase flush, common database code, and record bugfix patches from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged dbase policydb list and count change from Ivan Gyurdiev. * Merged enable dbase and set relay patches from Ivan Gyurdiev.- Update from NSA * Merged query APIs and dbase_file_set patches from Ivan Gyurdiev.- Update from NSA * Merged sepol handle passing, seusers support, and policydb cache patches from Ivan Gyurdiev.- Update from NSA * Merged resync to sepol changes and booleans fixes/improvements patches from Ivan Gyurdiev. * Merged support for genhomedircon/homedir template, store selection, explicit policy reload, and semanage.conf relocation from Joshua Brindle.- Update from NSA * Merged resync to sepol changes and transaction fix patches from Ivan Gyurdiev. * Merged reorganize users patch from Ivan Gyurdiev. * Merged remove unused relay functions patch from Ivan Gyurdiev.- Update from NSA * Fixed policy file leaks in semanage_load_module and semanage_write_module. * Merged further database work from Ivan Gyurdiev. * Fixed bug in semanage_direct_disconnect.- Update from NSA * Merged interface renaming patch from Ivan Gyurdiev. * Merged policy component patch from Ivan Gyurdiev. * Renamed 'check=' configuration value to 'expand-check=' for clarity. * Changed semanage_commit_sandbox to check for and report errors on rename(2) calls performed during rollback. * Added optional check= configuration value to semanage.conf and updated call to sepol_expand_module to pass its value to control assertion and hierarchy checking on module expansion. * Merged fixes for make DESTDIR= builds from Joshua Brindle.- Update from NSA * Merged default database from Ivan Gyurdiev. * Merged removal of connect requirement in policydb backend from Ivan Gyurdiev. * Merged commit locking fix and lock rename from Joshua Brindle. * Merged transaction rollback in lock patch from Joshua Brindle. * Changed default args for load_policy to be null, as it no longer takes a pathname argument and we want to preserve booleans. * Merged move local dbase initialization patch from Ivan Gyurdiev. * Merged acquire/release read lock in databases patch from Ivan Gyurdiev. * Merged rename direct -> policydb as appropriate patch from Ivan Gyurdiev. * Added calls to sepol_policy_file_set_handle interface prior to invoking sepol operations on policy files. * Updated call to sepol_policydb_from_image to pass the handle.- Update from NSA * Changed default args for load_policy to be null, as it no longer takes a pathname argument and we want to preserve booleans. * Merged move local dbase initialization patch from Ivan Gyurdiev. * Merged acquire/release read lock in databases patch from Ivan Gyurdiev. * Merged rename direct -> policydb as appropriate patch from Ivan Gyurdiev. * Added calls to sepol_policy_file_set_handle interface prior to invoking sepol operations on policy files. * Updated call to sepol_policydb_from_image to pass the handle.- Update from NSA * Merged user and port APIs - policy database patch from Ivan Gyurdiev. * Converted calls to sepol link_packages and expand_module interfaces from using buffers to using sepol handles for error reporting, and changed direct_connect/disconnect to create/destroy sepol handles.- Update from NSA * Merged bugfix patch from Ivan Gyurdiev. * Merged seuser database patch from Ivan Gyurdiev. Merged direct user/port databases to the handle from Ivan Gyurdiev. * Removed obsolete include/semanage/commit_api.h (leftover). Merged seuser record patch from Ivan Gyurdiev. * Merged boolean and interface databases from Ivan Gyurdiev.- Update from NSA * Updated to use get interfaces for hidden sepol_module_package type. * Changed semanage_expand_sandbox and semanage_install_active to generate/install the latest policy version supported by libsepol by default (unless overridden by semanage.conf), since libselinux will now downgrade automatically for load_policy. * Merged new callback-based error reporting system and ongoing database work from Ivan Gyurdiev.- Update from NSA * Fixed semanage_install_active() to use the same logic for selecting a policy version as semanage_expand_sandbox(). Dropped dead code from semanage_install_sandbox().- Update from NSA * Updated for changes to libsepol, and to only use types and interfaces provided by the shared libsepol.- Update from NSA * Merged further database work from Ivan Gyurdiev.- Update from NSA * Merged iterate, redistribute, and dbase split patches from Ivan Gyurdiev.- Update from NSA * Merged patch series from Ivan Gyurdiev. (pointer typedef elimination, file renames, dbase work, backend separation) * Split interfaces from semanage.[hc] into handle.[hc], modules.[hc]. * Separated handle create from connect interface. * Added a constructor for initialization. * Moved up src/include/*.h to src. * Created a symbol map file; dropped dso.h and hidden markings.- Update from NSA * Split interfaces from semanage.[hc] into handle.[hc], modules.[hc]. * Separated handle create from connect interface. * Added a constructor for initialization. * Moved up src/include/*.h to src. * Created a symbol map file; dropped dso.h and hidden markings.- Update from NSA * Merged dbase redesign patch from Ivan Gyurdiev.- Update from NSA * Merged boolean record, stub record handler, and status codes patches from Ivan Gyurdiev.- Update from NSA * Merged stub iterator functionality from Ivan Gyurdiev. * Merged interface record patch from Ivan Gyurdiev.- Update from NSA * Merged stub functionality for managing user and port records, and record table code from Ivan Gyurdiev. * Updated version for release.- Update from NSA * Merged semod.conf template patch from Dan Walsh (Red Hat), but restored location to /usr/share/semod/semod.conf. * Fixed several bugs found by valgrind. * Fixed bug in prior patch for the semod_build_module_list leak. * Merged errno fix from Joshua Brindle (Tresys). * Merged fix for semod_build_modules_list leak on error path from Serge Hallyn (IBM). Bug found by Coverity.- Update from NSA * Merged errno fix from Joshua Brindle (Tresys). * Merged fix for semod_build_modules_list leak on error path from Serge Hallyn (IBM). Bug found by Coverity. * Merged several fixes from Serge Hallyn (IBM). Bugs found by Coverity. * Fixed several other bugs and warnings. * Merged patch to move module read/write code from libsemanage to libsepol from Jason Tang (Tresys). * Merged relay records patch from Ivan Gyurdiev. * Merged key extract patch from Ivan Gyurdiev. - Initial version - Created by Stephen Smalley libsemanage-python32.9-9.el8_62.9-9.el8_62.9-9.el8_62.9-9.el8_62.9-9.el8_6.build-id5badbf2d8896e13aaffa96cc2f0d2b0ee56ac3b3semanage.cpython-36.opt-1.pycsemanage.cpython-36.pyc_semanage.cpython-36m-x86_64-linux-gnu.sosemanage.pysemanage_migrate_store/usr/lib//usr/lib/.build-id//usr/lib/.build-id/5b//usr/lib64/python3.6/site-packages/__pycache__//usr/lib64/python3.6/site-packages//usr/libexec/selinux/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protectioncpioxz2x86_64-redhat-linux-gnudirectorypython 3.6 byte-compiledELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=5badbf2d8896e13aaffa96cc2f0d2b0ee56ac3b3, strippedPython script, ASCII text executable R R R RRRRR R R R RRRR Rutf-8ce8160c3f875677a4eff16f85498598d2d9aa0811f6fad5854672bd06cb96bf9?7zXZ !#,!] b2u jӫ`(y.Ěfң kḐɍWO -t(X$ᤵU( -}7Jn(&!KˍIʬZjQwK6햚R0X6C(o5-H\][oYwÄrjdO[|l ,p׉|F&c:JG>ҲN^ tͲn,…:#!_eoֱc٢vLI [ /v[!6c@33+OC_\\d7ʱDZ^0~6P)Tϻy wK!~̖[گCoDmHn'l)eyQ? ̯^ô͛7Tɏ㥇`˖2hy]PvsJ_Il -)YU?f!VX{$hsS܎Lm n-\L]9OHOB3}%QG^ֹ8747Gw9OwWPk61BzJ@6艎Hҷ4~%Ƞj)3<ܴ1%Ѱ x 5]V oV0^bupe\(J t;hf-.S(RN}wsȹ'"5 e"*>w:&Nq3|4>},瘗 >ϵ`fA/zwA+0i`Dw6]GSAE8ӓ YCEjM YpK Ǧ?A%^ X$#j?;>#ѭ'[A =:VBOCfv ~hehj %+"^ӈn H˨p5bZLrW D't0?0;J $ɤɽmOow)v|m#T*W0|WԪ̑ĎTFT[mzZVEQC ȹ/m[ɨ"h1MmK$F< N"o9\dʵ7$/Q=66-;EO[;XBsyC8& bȴW7˿}.阰!IY kbr$5} cH-odlB23?`Dƀ%ݢQ4v#M̥.鿆bVzCu|[R/ |^r N SWxY'KXH$~$T8g^5j`C ud:Ku KC/ii Slk8=yЫDzfF"ȚysWy{/sL]Y9z Ω+p8P>;y65V܋#8zq2Ja\`x!əU>cNϼv#8EwԿN.!c 4,KRhLߴ@t\r6K '8v2d,/ QaMtw0Uz.zSU} IJxV{/|6bdՓFL r E2J2YY?4/d mK7oB >%+ezٳ_8+Ғx2)OӺ)/d򢩙 㩉cFH35>r)tuXN~BvfG[u ޒ'-;um|"+CgVd͕mIOcUS_Q# |HC3O ƘL&a-Ilp*y_kUb9@2"V90\Bl,dq"8ra$JKzhŒ?\[da+iR?p6 ϝ"{K%}xTOʋ]#!g< ڴ:k\UV,T1O)58Nyȭ&ZŨCA/jomjxfOc/!#kSnϰ3ڪSO~Jy ?B@qhAZ99*"^@XºJ۴d%A ̆5]Ӛ@!Y j&OוUi.`ZyroL|'Y]:JKaaٍg10an!C:y@J֌OmNKWgQ CLdЄ㦦ڽ;&/@ e5\&|y֥y L L:`@^c;ב6$-+w]"'˅gۍ~IvMkY|+*%(Q19r/ˇS: g=a/6gWRC+vnmVj!]~]Txs1ڴ7$MK;n F@Jq%LL%v}6c ˰>1Vfu  ʢV1i/NW=Gs1N$aUsKZ2^˾gxz~ k9)?9v:.--Og,sK(KQ2o¢f5F%T0N$_5Dbd#k)#N{jRwQQGE2d{N6)Sګ0*9M#wcr\bδ~nބLQ܇{SVΫ~i!v `pf64Mgx:RLji:[}:EfSMP 9=X|T@O&_䆓=ҏIx8RT w O~5ن違Ύk_@o-Mp2/Oi).^5P*H čvv[_  /N O"dqֺۃheQS@QX<戶8ƸǾ։׬L#aC҃8 $p)i|| Y%yUlJP;^VMV@ k[alfY=!ټ*cxƽI2ARehL"&NFA\]089ii[MBLDUY"?s%b0Re }a27dɃshMb-̃şq8v!LdQ~]w< {0XoLOgIРX-om(qiQpFl.6Vm J9 x QK DFs,CbaqX%vs '<>.1hӡA\KtRKczRIx/O:wjཫ>wtý~wlp/J5Z.<9.!_٬t=u!0' 5? {= OOi4C޿va(mq<1" z.8.G0|fT@2S^{ w!(?=/_! `ZC2wN6VC9R;af^գO<(((C.2uB=#u!qa2)u,j<3ד25۬ćNKq4 TFIKrċ^y#N:5h P='"atlqd"s8d%٧Gf֧遻?K#5#3jg9LUP@Wt ^6ZG׵Rݭ+J-Iu,CL#LdȦ5"&u6,;1z>Pُ)e}ǩQ]_ʱ3_:bnA4|o-|EL*)­F[h /T8^jұg,< ey* 4%l*Cr1Y5 EjC,z }bg@̖ȪDzΣ1`AG^oy uP;)湪:,q0j}߇z/{^BTZ\玽b\+vL0ªLHk틂K&Ɯڄ=@@KӪsj q芺_=""$֍:b'6 嘢v[jhlw<*CU_RHGA%hu bZ&>-b=+mܵXy%"c˛͛D܃&Ѳx)}~KQ!!xDNnfz ҵڸPKm%zƒ/jL{5|A/S刖5Gq&hcq;CE~oW}`fЏcwBDf\kSS>&̱&qHߘU2Tl^OxqXO~$ a6 PM2?Rwl +}2l׺|k m2bPq@iGƔ44B`SĨ" +5pӳ{-+%g nFޮ); EЀ!N^ȶV3 i4^8#ȗkITKS 6vEnO藐64 !-$jRJG^0)9}n'K݂AqDG^-W0*]oE&p]YO/T }=p {IZ=eJ"4$oi օ`ԡޖ-La!K-5eK߮AewvISX_jiQI_>mN (3+ X(},LӯxbKݲPYph #<3Xף^J7sكu Zhׯ73ja+uoӜ- ̞e |{:ź5YqZ[d7MrC[%fYH7x"rJHPcFp^.!l_ &]l)B%co|w/O;Rz!m!c4]Rߑh78~~ĹC{_{Q-ã[ӛˆHCߩ>A)+}שG+C+( VaB&s.)-s%?o:yF37`# B; OQ^BH&LĿ@'E3!o]mmN3j$KrrB`ɔHOyv@b-.29#V+z{C:ݪ) 7leg̾tHʸrtelJW-/:_s2?إ4[t$2DžNX@eIED(ׁqO4'ڟfs}ܢkS >& CK<0gVґ,D#"={+_ AEy$%B:NKÙa`YZ?^ xU0:NZvi3t9& ѨضT߮P]yqÆZʴ1b>2uNry jeb(q4 I@fsՆV0noŘ}h+Iwt5gfF*Q=xC"i0ÃNX5 bm:趚EұL#}z-DuZl<i^79 ׁ)Öeq3SբT̯]x!OJK+9B !? ?#ͷMˑP-h(+& 'CRj}УK` 7EMŊ< 茰XwS{c+b4܃ O]$>Z$>A{356S2pfWCoW ykBmjV[Ξa}a'Džv͝Hv; \I'NpbrP1K??ȉCm)ဠy:GAM^^`e0soPzM@~ ]`O95Z'lUbЩ Tkw\ yG61O;/>E=? oDb1Lຫ*mnW"B 9m,2Fx,m"r@XaZ䌥){EK^ U+:Wbvq4;z%:;Wi30TU&N}+}>>ؖ^]ZȂA2&/f B&`4͵8It1MkK$|5Qe~Vuӷ;n.aWB{OWl2+|XoTZSz8gY[OGCE.**ׄ;:ۃ6+c^NF_U…㵇pnV)jh\~"7HOo (03GsL:hK1UA~C_^ڶN iW]ҟ7ױy>%%}cRb:wPt'#PD5t, @n+Yŧ]MPyy{ZVȻef(h[[NW$9nS |OAͦ:9t{f߭l,/-$Y)EL $5GRB1? T2H?㺳)JP:?o5T\-`id~< (/WC~I5'g3(5z_%.R-JEj~p"r1$X͠s1 +8K PBtH 60jKW5BOõj /x#q9?%kTйm~Fof(=j+pu@!).\GsPԧ6NR lR8\ 9JQbвɚN0lS'C|6iF~וr%7ؘ:,+ެw/>Vk`V 3x /cfB9RFk*:$f+`=fW'FbuJ|Ϛ3{RnژuvwGX֣pmy,qfW0@+TɰE{b-ti,wZ[3p@;ZKeߚ4@37KPz8E [oӟ6v7P[6HƸGDF–NhaqKOXKLF`*k>̔p[:ig7ۥ)bC= tCM }VCFHr׉̌C{?{37WPJ&z]WʊQ*ffϛ>63~۟iPvĄdi9"/V%TwuW΁n-[D?r?otpSj#_CXnLX3;˧-'37%W{+SvBS[IZv3w׀PwJ3iո͞lLR`Z.PC.ZWW0x,v(FǚHx\V]tl%ɒqJ;{6f"Zm'dD^tGHfJ'0g~JkiH?U ݨ0(YKT&ۆu =_Y'ބ"A($_xLsA5bNmgY3=OU7gljI)2)=1" j\oIH-`]B"_Ϭ0 5[MޛqcR;S#b,:sV6, OGj~> b|μl}Ie3 b· EIgB#kGߒyX^pss(6ړ{C(s]z\B"Ը tR5kԯ5ifQSyb)2ivƘl>Ʌ4@6O$yqPQp$*x#m83- Nwh .D30gZ@, J5P؆epŒ nP"@@r؂h=iQW]#3ꔭ IΤ?nƈ,*6ƶ,墎,l),nW3Sf__>X[_NmJb@|WϏy1 ;eLAqr:4ȼ[8&Q^幖5NZ;43|5{. B21n0KX+iN)d!bC<_25؟6(tzh8yĀ&z/7MjA%xFzut_Jp==KfhX#sYtW8ޝ\ }fi"Rs0<-!Wz=|O1uL@#NgGt;N~>n29S-Ӄc`xLcM،*Rg_xoqfM+>fGnIDzQ:"W@X:J˒,S"}WNOD@[Zkߩ=M Fwv<|;*inVW:SfѮ\= J'AC{eO>4ѵ4=$)#9Ǟ=~6drVh D>o̖bT.n&!u$eM[H뇬17a ªE>n$eAx,, B?q{'׉*AN0.R-/~Kƒv3ezLZŮҡp[CwUYS#-)RJGgO &l 9p\E|9,3}G׳zTb6bR\qbMNXsHFW:r1-K)np|)?C*A#(S7\tcAW M)ʚī;Go<}6qH7xkymQjDǗDТ^beQn^8#0(jO<ۗ蘼=V,7j&Q+_D]=r 3,[,]q}ɠ0sC{"G(dAf"/:eoGJN .S, `V3ﺠ0jNBQt/ f"a͕up!#pw$6g'&PܼƮ L)NK`m`j|Y*9gt`> ̈@̡gm< fOk3KIF %7N>; >dg,M!5ynnʘHejfq>thf"ubL-KoHpbg *x9)_*x;}SU &'Ѻ7C.Qa=$^Vbcs$*N2=KQLvmooi#[P>ISz%}mU`ώR_EXG ]'|n ֿ=?&n ʼnY)Í-AUs(5eJ.Hx'.jr؆in,/%AkNJw}dA(Da3*,R IUX_֠W}mDh?Xb!;-yx:AiC6CKӉe\ oJ D\z|rH6W4\ފSg 2ֵ J*Z7{F>PYWؚC#&ZKU/lA'fQnx9 CX?H?rc Ηf+4Ğyؠik5 }KYtxXS1q 2E{ޥC3>SYߞGlMRyԛkLrG/>lYuaT0.)\K_P\CTaKcxs.ˡ*\ߵ}p `Hٜ[V n`fAwr@ϧFHj['Ѫ#&gOvU71KnտnlG QH=\A%9 K -GGo\)hc^:VI)=ׇLEP8H-#[gij|-Z'bPqoLgx}3xXZ' U#Û}Ć37 ] z\- #`}|A\=I5`PXsbDV q;SH^[g6SÖIK?{I&aOlKHLAWŧS?u)LH?ԥzR~cCX͚zga5Jnȳx ]yH+ 'jYF͠*K0*.X:^6 QFD^(P%6; j=d0530f\OICݟܔd1~dE2Yhb3-Azz0 1M%l#:Tu8xVT=mZf%qaL6QM.h]O22(4}odRݰy>',wV(z+SȩZ!Rfƥ7;@\X_+o 0EtD|] (b2xXNc9('߲4C F\lg%"$gLeY@'}R& _fS)Ca Y4@EJO##[֐읔0ՖhO^H{\ (WR= 6j60 z͍n1)g!}wF#P]Z++J-԰33ﴲbRm R8t,Cx߯_.HoMHfQQ@-˩yȞDs!YmU^q5m@ :5jiwtp_@am4%H吾4_v8ך̐B+_Ongc '-=$t\ oYX.U# CoP 7P8tR#EF8 eveZi%d$rR4\)ڦ+6QyhD~(/Rb%Wۃ<h^Dt>F`N7C)WNZ嘀J!  /fqUw\{P@b|LN&g48VMc%R ~jQh-mx \*ZHq9>UX[Mh+6Ui` N}é58Lx7J~gLe<:Q>[ (-[ "_]"ϰG >9 ʚ델b5b:,~Yd2; ls[ݎ?ſ8xf= YL`s|JFjUCk #@/VQODLT|}$fO ϕ1{e$~zC#W:~1hLsAXE|8T"n/NlG]6+f>Wx 8qKfrmi5]7F7ΥTҒ*սZOnRB~ /k.ݣyZgDX%}bPa2SU 5\S|_ϭaEikfs∅ZVx5}=?@+R@>DU{~?ӗGň(Epj-8Ye"ko0Gh ?/t ЌAA~\05Zq1)j:ђ0)N (6N͜]*c0[;/˂~/,tHFQƲf]VHp/=r.xAȼ&6o\Fw χO1YR+ouWy%h՛zJ/L{;H]ţboCR`(^YOBE94!E4oDv5zoTLrɤz[Uo4 7St<閚BK0wP‹Jq(ZA-]) 'R{-Q^ZxD^'WardU6cKQv2LF x+⍎S/vϗs)01ԟrA%?S#?,| YJ$C|=)^bq9<:h,&\7"aR "P0u&xh_j5FZűLAj(u -__W'nF4.^r`,iQwzS&f݉vi̗ƪ* e:h̽L%}NuNiyLc(=)-Mf1J'S<"h'ЈKI!;…KHbgP95p&yn؋=:phj}/PۣUĹ+1& j>WJN%;!ͳ&PoWJAd{&q:~񬌲i"㢫faZܱ6Xd22se7+EYC3+SSF,L/AxĨo2Nuɪyutl[HlEVPÿEjOgisa1;RڬUty#]|.e`_7ӌ;Nn w/~^< x0ohyxԒG?qhK8k_uɶTHzzkB-ZVU@ q[(P$$7 `흉ѹwi)L*"f_?Ń1F *E=C.(*gM& K\f7 ܈CsT` [`z+~=C<ҬB `XМ5}λҪJMg[VG VYa UNe9ْ"X@v44 xs!Ul4bF^5'׿G e1*s'>\q&# ^$*|ofF]זG˽==训2O=1sW'SMvga?X$zTR7h9 `𼧗P -|e# TgybW8&X>٪jCq-&@V:vOGB00i8KlqFN,_?7 6gR7zљ7,@|ūD{qǘ'`Ƙk0K$AYm6N*B1UҦȁ7šFR"Z:z\Xf{z]H=Gm[b)\Ü<; }hK'NğHn&c>6a/&g+eBN!w;0f:NRcxO*'9$ Q& UZI9;nNip0 +c qvp@NDZA-'3Cɽv2*4 2gtjV4wlA,B!cU0hCY ra!O!u6\xYD%D#]m|f`Zb>2IzdaDygQCf18 *&G~Ѳ$A-%v# *.gWqJ2Kʂ<択p?sAB*Y2xNΈo+8rhNkQ[bZs"IXPm 7 R M[3ty iE:n3g [^"kzq x>F1DFgT֋M )"KyH2L8FěbNh 55qUF|S  )&vWr* GZP 2T'龺bJ}*^TQ~zG`ݐЛ3P hެ#zfCIA`:-]ou].]3o`dP}C t']_^4'Wiy=4_oUjFhgG4?A…YttKpw$7}7 Mf^UjO"t̵7Ac7]Թ<[JugMЛ/ÃZ&mI.z Ѹټmn;'݋ъ9A!]CQBS)j0ˤM( <鼮>{;R'IYpUC7M\vѮo?s7?7364G !uwc@7E֚Ds}#AK8]KRd]Nj;+ vs{3GfåHYX:" iṥ19XA'r߂PomljhM¶ ͏teq>OgYM ~ALF?`!SU5pFˏ%8؅]@96}Dsp{wkpElC&?xD/0ďńf\߶X- &a(-̷58|+/ƍuxwdTzZʹ P&SLpwC8$)~LO^IcpՎ?9i42u@`'i#SܷLIK'2^iaFR LќfUs Vnxa @]z^&/oI0^4YȀ 7+'dNRU#8CpsS^rB E}^39s1.>Pߎ)Ufwg$$IU~*z[&u+[`) I2}y+"Ja=ew6,ָ2W4'–Js 3@Æ:;3G.\'zYmZ"lW=%]Wm϶$X-;Ӵe К_{R©oW=QlK6]h܄2gh$|jI_.0/,QHM8@2'A\Vu6L5ks0 3.yKC[//(՜Թ,F o)8[,<5'L ?zKGM'}>?{ o Lft;vU#no/2OEA`wպT, &+瀵׸Ps>BfR (O>?$5uhM#Sj3Λ_&"~$o lO ^loh}JsXf@[xI#[CswO Kh4!Cc9a* 5xy5I<,=пL3l` ӺMǀw3`a8X/bHնf#ÿV<:i֗CH| ,g&Yɤy90šm.A*ȪYBEA:\)Iڃ\;CX[t!ᏨY:焃zuFsoZ$ԧ":i^"WmuA9[E wֶSX5^^CI'#3 i)zPmKhQOֽa.S~I$ _\H,#9.֬ۗG(녜Wxo8t/_A Ǻ6%L CLLHOf}4-t$dތ" ,lpDɂW&HKV-{X- }^ƶ!ݜuJ.|q7:Nz2L"԰;2כ =tPrMO[QEfs-gyN#e1V*Y\-{b">P]c IV:ժN(D|JwȻ~nz^YBekZqy~3Ա"Ak!`Lyd3K"ϗ#]7T$SZꚬbd#i,Ǚù#E qX<`#f ban.!a؝HZ wE~$?;ObZ,@[r\&xsK->$Eq;3l;/!#fQnFKԳ29J m6XwMgg/n4`_,M5>f@.qG=͏%9Bɰ̏T/4?h䯨9F'K;t " *fpj㽐l ˴#n:遱'O\h:R f]N0paA+ .پfIX:t_Wʺ0;C.xsqqbl\!fBi~ԤHG5$m˞ #Z3 l?NnV @i `]ɵc߃J~Ea~(A=\,\Ñ rqvNW/%2@|ײ3e=Cl6ڼnQ"é7uæƝ ߇G AZv&2 <j78z*/_&n@/D%"PGH_٩X(b`[UAa֥vaom}wK9UPyг ז~_ji RFH"H$|ݺyXI}v:A䉼^ &8SWwsDzhtҁxʿ N{bȧ-,v9n&Orm㢠!@*+ i49CM &v@>lu<q4q芡v +w2ڣOSf2)}_ 5-$J+hK /EWn9?T_YPS) Q`]~wːyx#GAnGeߥ(Dٓ$T8W/yMFg)wڣQ]5|:I[,@܃ 1u] [\&,ikr|֭!e|jՕC Oew|#;wi\MVr_2l~6VHJ3o*fz/nYr#+foϸȺTm02^",.Z;ΝcR|k>qrngKDZ6u*gc*I/yAIEwVG-qЊcsQOu;AH+5TsGs]ߛZJ {[!`gΫ!m0ւMS}W )"prPxoo!n sT޻RkOXRPO5ӌ;aeN6W p_톀{/n[9؀0!GDHq}+I痆zP;/ L*5Iɪ*% r:ڃSW(q%%_{T@ hQ#Ra|A@aAr y^l",' s#E۞h'rQlz+[0Y[j%@HM@3+=;y%XvsTžr @o 39 G)2X1HtdWL/)7dbFQ{aO2^P!W뵁'J?5* q(" ԛ&/)ID3Liy,lXBU$ښ6^~VUYɂe<r3|'OIcy@Ttg^[rb2VO06"k#߱CN5OI(64Lׅb)q f²:]`w;ٳ[YknG[܊[K&kox>h{qUqZy+`xy'X. - ` Yjʡv jp(TJ.ܦ@zg|.SxZl(<(}hl-ST T)]n[ǵ8Ӿ~6bS+PYW#4%V}Wц߆5}Wj忛,bd s1tv>mX@Fs5yddmC:scإGCR¸U HER9;|2p8Cg "tgR?}RB'EK[V. E7_h)-v['})J"!L[@[^:t,DVg5SҲ 392ınϼef†3w+˜+mɥIF.c~Jc1C^V/Ekͼп?0rv^̘Sxe+nxw Dώa o O= rm~?,KDRqEPA%Pxr\jS%]lۉ=ct;QQho͈R7LA*0Z- S1p7M/iQ4@kiqXسUH}כ|hJuD[?kҾ*K,_V[OZwv j X٨ȁ}E8Blu FG틔I üUV@@+eǩxZQr&kTKw"UmA7M~/O8`Vo.Ba4 _V2>ĵ}o7ʒUS/^D"O5$90[WTDM 5ۻ@6ϏQq[EIs2"z^l545N #UyQuNPJNj)@>e1vQc 8f n QtѼw5 PIfhStf6ȡ1%mǗw%0LhTI5"+2VEڳh*#F{EAq¯/m:^Ean!b<č?"7v }qMO_ƶɴ|:)~_`Q6I,@%pX0cR6{RlJIB,8oӣ2K#5lpQSreFkc#|/I3lR̿~] q~WpϒdCVRHyC0~ v]#s_90YTö"B_@B>긥&R__˶$8 F$b gЄ,$gNyB -KGr.Ԅ`NYJ${'Ms{1nQ@,(~$\׈qVq5K<.u+2ruG2j&0%5# ݴF1Iq= @(k, g,X'ZM(aS?/asS&ջ4};̡W#V3k4)  SLk%B O|1L)%; .smlO_김_Xsd!Q~Tr"cJyH]@8"FAVj{%vyr7#k͜\/^Fs.cxk݀U?-댫66 GGȼЛ^̌3WVhMYX[@ˤxdH'`WR } 8'%}\Ca̜9oH@ΐ Jl>2 O>Œ^ yN28ANn8f»i{ kxVޚ%~gФoܡSd/jBPVpXjl:/5#\E"yj,@KE)pJ)\Rl_J(!Qṵ5@WV} I )oG@k@@ֳVjC\R8^(Bm;A=DN\#t~z,BQ`]kX;$ t.I(L" h .}ph;Lc{ں K<'AvS=.uiuL#F*]=RKd:Cj7Z+ƅ_RZO ?86= t?/KGr%i *pI^뾸Ccɴz_zX`6Qs%OEf ^\+qW"&j ;Kɰ]K!R<'nQV"T%91eH%b4Jo" J-%.8 So~^b<\d\4R,' 07#*wב "W EЅUB!nOtO&M{(:HjHclY`N(^FǥS!ݺNtV?UncUL&@VJ{!iY2D73M^ #d lo:%WjI)ֆ5[=wa3O*7#5=l˄ghG~2tS!J{YmM,a*׏u h; D[ qT`1bxTDRaD呻V%@ ^'6v˃M9<8gD1_OkC ^r~B+}ggC L!$[1YYEx[|h9=ː lmc{n>ڜrQ\O⌰)) cۦxfLN^AY{4vi%Eak ޖ34>diPOy$kPsAzAD3 |m)-V- Z㹵ɔ|EVT\¥}j0r_ +jy:|.u G}_ >#Wa@x R )R)b]oUIނkeiz=CLIc:8G `{#pr*ռ̷ )l>ùvL)W{YfHӑ>d|m;ImoyhB L.6͟d9,FUpiupx̑q&oYF3l&.Km@5CiɋN PVAd!,2٧!EJMPÿÈ8kœ[yˣ}zsyɔ$BEdRއ~-I{'fޅ)EPkYQ0h*޼Ɓѣ$xLV˜Qtl.TWR@siʙ<nM'-ObRNNy kl sß^ȕ1]jY)bP8 Os!UqFHy첡~1 !U'|H?/)^-a >ƊZ+)yB~f/6j@g,ۆ,_uuN~e[)2 0v+; ]T-d5\EmY=hQ.MbT;@+9q3Ơ5y?ÙIˮ:4: D/sWI >z rzˠ ,>W]w+J|`L+፷BdXzIgNDujZ +oI;9"wY>,tSq#·мfZ}wf9EubxL>*I+ٗ*3-9A-,PCAPwd +]߁o2y@;.6!zT]%r k&ױfS@crqCj7 rD ^t]9jWnkv;'$Gc5|uy45vH_R"ʎm؊i*ueɐ0m; nئ*-7~\*&ˡ{_7+{Xym*9vm' nPN>JOhf~Mx\s=:5M%?k_贯X;C]| @;# Si5Yp,30 @T#)R1'u[b?=ګLoWl^x #MK7~N#뷜Nq/՛=V8(PkTbk8$+ʇ|=0i jx7!0R¸)롛>(6mN.܂9xDOYS13@.FkF 4'{L!{RKu.ʽ,#w}JiKCuهE+J@t}^YVO62]#)UhfI$1޲?K4fV7oO}>3V:#QKi6}J~}EO? rP2APmxQ%ڰYX ( &ϒ~Cpf8q)H]`O˶%KUB|Zd ]m2+kg² }hܓ}p ^_:F*9}ًwES}i#ڬxh(D |]B#vաX͵\b_oZ0w6+o1AT wEev!ZSM{n[ aPgD)[ c=l#hwQeQ(~rOXȺ Bא2PLPZq1 ] ][c*IeDָ?jN<yp]3A,|gK oUgHwm 9P7O=q 7X`"!FвdPF‹I(iohm}37>2eA5Y*ݫ{ AJjK0x%(+X lXM'~&(AP Cuv#,}52%tb̻w-(4\nͤvěD/:n,ZD,5OR @ e-\i7NSS(ğv'˽G\yL44}DxIo4XMq{FPL3:]D+Qwyg= Ti&wI 2-} %SfCY\U&4&>M n⥰ak9pT(ܼ^ΔOn7dQ8WUS9! <9CD`5P5c K9w+X9 FsrṕKov}Z×^У$9#u' {j{Xzx#kޝyBz9%9BxqWu*D> lKtD;tc\A uV⌅ Şٝ'l2 ;g¾Aޟ+w.Ў4+vD h.yH{#Q h1& o$RGܼĥ-jԁ( Yeq)B<`< -m^|0W{Ѓ{yy)cdL_0GF^/@˞Ih*h/KqOSe. 2 {l,P*rzfuPA(buL4\UrOH'ѓŽd&+CsWqzlO)MƯ 2Ωf&6F-}-nh1|S|~6Zڰ ̻ZdENJ ^Q1f80IP1_b\FLC1ǽ,\ !Ay%,|`4*3ml;#@b'efbcK/AߥVܷ Rl/#TؾNQ&hcA/>]BH@lE 2vXmM7ЇuN$/^Sh8cL!נaRQt|TL>ua$n抾+DyFpv7o  /_x!]BhT,ԨſL{d-0.XLj`cΨ o' +jG6ρfx0i8Hl* R2&QJNL-ַ*|c O(tT5H֔+\4fP%SlxWqۂQ v9o u-l]o/Vg4&:n( j\_wSփ\3֨kaP9G5P:A1XSnꚟQx(ѷo;W]-N]CvcU}_1`l2_d3!SDY[vLm cZ6D gu8K /`LYE#DP+1CGh2@yX6-0[yKbHz08 |u/ƈX1mRإ37!nxfnW^1OaUF%povu4ISnhR^E -5U!ʳ|ESF@kn{ Qʧ+(ʶ!b^sɆ fvNЅ'.uo ')G `OG uD$b.Ί J5Ԗ;ڱS(r`48y7Ũ;1h|+R#" /xn57em+/M#>q &T#dnʺ-__4O/z 03n Z}^iۗ6WdFY05ae5S !l:.>>%B-^Lq4vX)PqF{QcK5D)Ϲ7R9g VNGobQjfͳVK&*yK7eIhXeb_t[fTqeu7 qSKU.#E~"2~Dࢆv4m)[:]҉=l]Usw$v;OB7-f PMp>9eGeװGݤV[^[[QF+yBudK!)Z sHx|v "3qHn_Kr-l;FiŨxY#~ce|/R=E&Q{OD"}-"#0+fG*+&,?sjYO{jydY&,F\nL:GF۹uWLSkY-76vD)\lG@+-mn+" oعBՏAS,qǍ9YpLȍz[f 3fbWeaůz|rrr;\QUh;s}( gTs-xKX{c<ц?SeڴJ+iXfyU[w MV<-&Uӱj>t-ԖtN}d:z%WfߘDA"nM8{Bg7#yrHSӨ@Dm`LX/&Y~Nc, :巻Q`*<8B\>^,P$ Bߛq. hߊpYwZi^a۱O IFͦ1M-|9BDcn!ŠtgVθ#. JBCXU+.=`{oP-q@0`h<tA;#jQ^m<)6]mgdh][2q[ݤ<3fcmz lFhB' D,_osm:'⺲)n΀30"0ºG33Y p5y:鰾 ^["TrKWϲ㹋GXŶ]>o> R"ȬǻFp\g|nK2)q=7"[s~bϠo7%MIƐA=﯃w' 2K]3 sVH.ΞH)=(<$ CnPx{z*E(Ӄ G QEdxЮ>[ꍍ] sNr{|KuFJ<Uv,%/N6B-KipN"~@vN#e" ˁ G.@WyF/~o5,FT3ĀL1&w׽Oi+]ZV}pLOD # (_wSrb ߤ( cP'L9Rvf7MM:E'$qj] :|߄G$lo2Mz;?܁P%QJOuQt&iJa% <[~@_=|UV?߫t T4o Dl1:x-aNm\-:d *|0D_J&k87нb7z<0KRҋcрQAj%GUh2=iAF}w㺮zP;\~^V{^5|3o8!U FAהyVeũTDyE=Ш\k=#RFĤ_O ݱ[wt $.I(M & ɲ{. ŢasF|PH ԲB]*/.T)7 -vѻ))_鱦{:R I˙E۝+Ss=̄}g|˽+ƭ(T+XU-A5K· 'Ic,qvkp!W؇'4P[`YhGV n֚0Gzu!Y*O|r=Jw@{Fb=1@eL0;wiP-.!HL-NZ弎5ڰT Y()YC[fݯi$-j۔8@LhفS)xq^\vٌ\q,O>$ŋ>/`8B@YP5.ulW%){E: ZB6/&g'nݍ>#1q @N/^^˘:!5Vm ؆޸HMk:H N +&qw'x<{O:3LБtq8+>6(vWs=~bG ۍwEu+G!ETΨ"-,^TހDqC:ݳ]ҙ:# Wg4'v ]"HLu}l:Sr1I{8%שqjsٓT@(_0]3BJM ?ܗz5v<ӤDJ+lRJ gp[& ߋLt_<^T>+Z_p.ws/\WO[?ShZ)sԪT/|h)Hx'_2z2 qjP nE-.O-"k޵0+ґg V8Sy ؍bq }H  IMb{LOrs fvF_f4'JW{)P!wu]u"Mrv?piuiH8/aIׅ'#Ϧ$߲j)8oPM!miy_C(K7 67B5ǘA'B:DM. \]!%TL6=|]fKˍRwAΖ*#+'.|ծg𭯝=~;&$A&!e+ :$U3NwlH[ʆn%Noqec :ӆr{ K,lqGw,b].:cj+Lkx[6nۜM6PGP9 Q/ӵݲ<ͧ3X6|@=*w0ذpOx/#joo }a#L]I mCs veEs5'q7O~EBWV@wp0 S 7QK$΋}#3u L7Eìg7wɣ-6m8,|CY@I2U+𹆸؇%pG/s&0~Y6ϪPOnfIOubethf̌d-ʹq#AB~쑩KŽJ:fB<_{%6o&m)%݀79IiC1Oqrr'"fSO|k܄#apjPq}7nV|=Z6=uX5k"u x6fNc?|<>l ΦlPsj'ö5CU&aP+  .[R.> x}3"X}0Fz R'=j7 uWJ-߶J ?pR'WMֻV5xq*֞cBRo8!rO>JSfxmԢE)-7|˶k&fjR.j{k}p->a9A7[Jw(|wCk/?w_ȨP^tyI2m"m"9:!gDv.ᏽSC魰VFҔj̔5_jyTq`+3s` ʔ<O`r*;/KvԎ(^-O/uf84x7@P_f嵓 @̲S[Hk~{EKwf@fiN-1w.'Y\h8A],Z#/3.-Bi_Ool"J]1ǿJu/8Z/x+v%ب)gYHTKxpq2geMZr؝ Y3۸Oa:U!,s;#?)6a-ECk}>y!m+Ŭ2$Ӡdb3la9iRڌ/,oO+X׵nAq˸Ʌ}\^ZcY+ha) ndw~mhFA+:olCGxۘPv\PzLYvӓV`HvO~斴@˔3da*ZqNw@8J B?|H=edVbxb=ѲI|&+NrV xX[ٳI[LH)z>oX C2$OeK^[d)# 5˅v (C2i^j ;F' + VB|2xz69!Ghx-a$Hȩ)ĿٙD ZFw3iqYMwjI9ܟGO'r=2gꖤJ?喣'xгSt9ʴ Q5'H=&6A8`R=.nzǰ)QgUZٛM/ٹ."2qhPn& A~& ^U]3y1ru~wX'fd;KZ~P׵t㓟_25Sj^dI2p/9e¶9S Wm1>)Jfd7R"fF`C#\)qE=Z-@,Rh`୊]?cGwa*%@.2X|x-Has`,afFCJ44Zʮz5oO,`3s$x|fl Yr˄yZ"+e@JF3 ${,yIA @dMpX1\G/g.}Rabw=T)?v'/yvi {z.lx1[X+PbUGtEr*>- _΁=Uu (ʥqH+jV[f dВp6{ʎ6 Ċ|e9wvQv' 9u9kkg TwZ6j~0g:=P.x`GQYD~p͛_ىYA5Iݞ7}Qq:/0̆|^@%nq^Q4ֲDKm1WgʆjC|C {"vؽ %CŇk/ƪwDF@ *AIRxM7??yf91I?J9'a6{eq:4m\|wS9emBA1]i8sY? .ޓi8 ش< M>+.Kg X?8]@oXJaVY={ m uɔwE3YQ=mP tLţTfV*li"ɥX#mFb;c]h:ZChE5掉g_coģpa~q M aJF[ұ\%˯vfnȜ@_{S:;)13/@]6ЗX/D_?qGyoĢhu\K ELn6o4m5<8}M9-ΝiD$?/K1yA˰HĤ@Gu)异UPoШI5]|C, #:^ZF,AD gaSQBܜ%z>4è4DS[v7&p;hEI{+ve_j |PluD&!4)"+tX3/cD)[]gF˨G+cҩ+4@/9,Rd^qgγ~4Y^3?O`j 9hr,QC,7C~z"bJbFX'odg6b:9SPSCw--Sܩ͌x[D\r#9u1r%\ܖ=)eeԫtx CPQ^!qɔ:Z( &0WP#O:Vo:Ep@oIm7Lb21`>Ý`Ql}a;r^(K2))&A&膍D'sx3_}{c]Fvk3"Ͱ./7~&n&<q.F6Du0:Ы5wfNwG  ʞQFx^Mݢ \*Mo"r6`lǂq`Vܷ8暴G%Ӓr!\2"X6gYgLRRʙ8Wy*'t8Go33N-qڄO)F({ }^V&$9^c%{,l=P\?ׯ|xO=c/lnfnP *Vb"gRX-c Pt6w)f(|8)c7."*ߊ^(h6zPo&5. p*F/jb0"hCuhWs@a`B{~:u&%J0#_i^1't>#Q2GT :T߫G (vZ&t(=U굉!mDxWU%haaFgSPS4OQ)e O2n>S?D 7j.O@g9-)IV5u.ox 0p>l 68mZ]`@oeX1֌0C40èTsv* Ƣ OB88'ٌ?C9:Jz(W2!oSl \v0DNz#„wz L ɶNNt OyҀً6ƣFt \QHn6(2t75Og&?(Ꙑ!%b׺?0SZI ZU2X.1kt͢E_PۄTƃl1X %%Q91X+*Abj\Ѽaهs fNw=sEl.lr7\fݭS'&$7N4J<4 P4 l&+ X#~IOB+oڲqgCJ MAD^E<)'"avp1n@[e%>lDnGCs~5v+}gY[/ Y!\qԣNvE i?fF?xaAKrĮ}7YtIş9'V=pDB&x C#"v&5BD3^kB65a\Q5EJuG\(),>_XzHyE 17xd(9By0q5 \> AT- '#q5<3'<^pÑ` X  XPЁSM9E*Gh)ǟw=9M:XŮ}&(:6Y0l.o_Fp|= S3(@u 趟ȹ@D?R^{w&b=·M:$~aoω}vCʊ!&kkX3Z賻ك 1sтQp5D.to\yDYWD,A{Ay߫G! {ފ鑱rY]Ȧ=][ڞ0X_}]*Y?,*"Lș[!O 7l.d76J2ݓ3藍wJPq2MaԚ[Lgp4dg^1WxCybR4;G0-wF\GсwP\ l5CȅUj/HUC.u<@Cc;v['b? "8 3 s2 qfhzzWW&_TW 4{oe椲Ȭۚ߿Ssm^ mOUW9# yl`STW|2x8i8.?jhN2wQr^AD]8}Hb+k#pI3=&ѣiA[6#Ru\da)#nA^oh)ktyU 1nʊaBW8`\x@{_asޑSko$&*؃oj3?պ/({*QP7[F4q۔`FjcFia8̵d *f@-} fpB5‚.>XYY`=Dzų"+B-Tqo" ڡiEy- Džw/8%iYk\V} 4?ï(B _Ř %J~xov3t/Pp6x:; .E{HTzQH~ q-WG|s\=n\o2+[G\Q4ΏhwR3hAV|rx[£޲]tDK9ݵhj\5nE!H U~^.vQwm0P-ݟkKټ&a!*e}+{q+HR_83cU 095 TYP$K vRZW"ɢ뻱{U#s~ 38BpήDhR VM׮MT|@n1#ư\;ѡDut'ajOxXm^*w-hPNץ"S͑tC&KDNƐeJZAr&={?*MXdJEuKIG<_ r+pų{f #yJ~ ]& % "Gwxp#RLX`hsa&7ђt}:=vhw ~ ‹_[}*JVkփt 03>AnZZUHuek宏p 46nEk36 z8ԙ#II kK*aVIYq} d382$Wi!$Yr~n_ $*i= Jd xSo~3T)2P*?yg}f{IvVr XlAټ!iCG\Tzrϧi^Sx<9y@xmφb/f OPu|]3~?L!-#̏1 RW\Ƀa_YW1a] 'TsG4h1@ֈ-@tތ |/2Gھ+@ \ ﯑3t=ɏ;ƥJ_|C=ߤqeͣ)J`|tbˡM+שȜ'BklݨS1AB!@}6eDX7pJgw<5EgG-t%˲cmƻzề[k;u;"kqz!s5 ̭zZ SwǀOm6E\w0NR9˄\)1ZRa~B D+B?|eWC`8uEڳ)㱻 \+8uGP#<\<@W#NH < G&!$ou".fBň$aNp=-J#PGeaȖ81h*E 7o=i\ܻ&ҋre*wEi*ϳhWve=j3 7? g+}:WmN~ff %7lām vF3\ $QaXdY֫,l mjIP0Ut xrbh:ŬY>vȫZp?xwd)kK2CX翖wKy5%I֚OfuhAw ' TwbbheDyZA%TܻpJ"ln_"NT7N&)k܎?~D<ֆw'Hwd ȉz-ɤəh<@(+ Ԋ )ζnPPL݋{)JGG[OS X돭Pczx q!V Z/Y,9Ei\ g>/v*8#.ʸC,hz qH>*s͕gƌo qГ 9x(Fg<%oAfF[IK)2Dцb:)uh+3>T@<#ػ rZ¨u:c oE ,?ĺ|!fmP6KLPfng[iJ0UJlYλ&J9^GDR@+ݼQe(Aޫ4u}: 2)M i*O4s+jb4h~'EK3!@|S^d`yN`/9D_F-0g{ҙ"8֦rٝ >ks'v@RunK-AZGE\Pa,o3QJ( 9v*K!1n 91ڷ& ; ~Y n zHm={GF}~).?՘02[i$}CȠKZubԉ4JܟCfOHwBc[菗^]:v ߁&;Hn[N ,aĻ=f6XEKNx}byGERnx c_ &E=WLKʩ.!ҦoȮEW,.MM1Q|ϙЃE/QG!r.$8t:mu(n*s7 `Tїjnj%&P"qÜ3S2#BBiap4zYzHTB.`5%~Yf#GV=e[$)QD CR%yCo>@r!Гf#O!ύ IQbZ"8c曻a-~(:-졮R;`Zciw~iͲ`V_)6BЂkWk(K-C\yR^%-)W쓬ݢAyo20i<;w6u,X"LV$H6[O:ԟO/_X=qAZ(wx 65+Ird YshY l,DgD$`x AHo2am[$Sc@ժ_${ 88wB0Rj,>ɘE3U8R-tE_p7?ecƧ5afu[@n\sz|p۝ !F5Z3wxʇ:[qАVB($dWTgD2DoUxҮkxһdSm$>,;LS%/+6g>&LOQdyBϝ?maCY;B"t(̓trXT9y y1|[ѧ?Q>?Zzl zYLHGi3:;(26q# qȖŽlbj.*NB}\>_7Z`Ơ `h^?;{{ הWS!r?|K2=0R$rW ^~k~!Ҡ]e5 )`?QN6?mj#/bF.$xNJ1$ %,'|5*MǤLr{N t(\l :;;WyrW?]6H?y=?떞ZY{~j, sTDGdk8 dD{2O`$ d-x́8 +ǻͦkHcP;eƫe zO\1aGoW:ia2.<<c0hwU"K:le/w Gj??MU+Y~˗Vڹe̙`N_Z#USi fMN+UsKnϷ]B 0Ip3j<`3$QI$PvC;VuI/bC9q}Oit?JPL6GMoqXFoC*-\#f܎(S.ÝR]ziH_Q@h FA%cõ` :J[[Vx6ƺz=(rHZbnxܣ(pl&@~KxzĈr"DZd5;#w: ]!UD M\r 78d^}xxdKs>niFu46iW3xD-gM`D5';dg) m_x`#9"ѥ7TiOXDFT2,a8=67sm&NncW{أ|=\I66bz$}Lߧ`/kb9ppώU`ȆZY1p5  蚜7t ϫn/Ph٨)$#4Ʒfq5T5#z 2#"k'tʼ伺!ugv {+_Y8lzF=,q\Cɿ&ѵ.NL`M!- =S+,Qф ub|-¼";OcI' d}{Ύ#I<8HRLʼn{9࿑{`r;}9QpD^4qPU;:qh9dɖN:D,ab;(PdYFasPV~vzxɆ[M!kӢ7@bi=2(z~L2҇T 3a,S}M@| x4W!AQ+CިĜF5s]JP44葩K4ewQ?i/?0*A\/n5عXv <(GL ʣI'ku7 \@\ }?n=OI xy9Cĺwx9Y{*ߌ4c2l@b˩-d&v+wiC>L{" x>/t_ggk{˥k=tqxQL T9+<FPE pdlr(~gA{n.XcZf aRWQOp]H|)`2i2u(^}M\kIO[v6-~G6z䞌ȑ=S{sD֮q:#l^&sϽn\#wX=г`Wz+1K+E?GCT× ۚ?<-]iJR8mHV~;؞eo1ڗxQdN) W.neAsH'ü}>& cq uXhӠ+m(e N^ c, fe{"hŎMHKmr~+=>|`(|'!S!?Jˇ|de@N ON~ ۩tG*s$X16־LSAx̦?Qa@zpѝ"vJxÊvU\vCV$.m:F dIGw| @9ICck_M%eZa?#)bTolDc67eXZvoI"w K=X"m~!{ToqmkNsji/l艏 ^,DtHFO43$[`%*g)|n &>92QfFjzVUQJ$?}mxN)ŐET+| 4I LE*yd \]ljɼ*Xfk=q3f8ƭ=ޞ1Is 0i8=?4vss{w(٩I"2 iϷ^dD*ƙNae^ٵt˪WL+(n$goZ74}nY`^-wl3aplzY 1AĄ.\ip݆6= Vv{Bn$0|AT?Zem1{`݊۔u[QXVSo$_eEVdFA';0oIG찕 ̆\zs/jD啘_WhyT}=QNA!o žBJgL_aPW!B;H}:J8p4h ٵφ0֒_P{\ϕف$lPhRmT(Hts]hcf]1k2O聎F RjyO񑠱/4ZWT<7ɸv)3hdM͋Snۓs"~^Y07-r"_0LFS)WDևu5ܴB;чlTydRKpKi:@prmF/d4[4q(Ďrj%'xiFՅ)E)6k.v V;g\}Mwȶ@E$Z䌆x$?/|jK!G69b ucqrdm,[Þz_Q~yC*0y["P,if~"r"nHnrEZKO9-go%Ǩ| 0T ^Oh;ۏ>Yj>iγ郹ΜGu6Nf2h *RA9^e5T3aA}y?Y%/Y74n\MrHӡPqcl(/_sF}emWM1 h: {*v(!l+Ey.0 Q88=GڊIlȗue+}o¿HxO ,dN%]7W@ob K\FU1(NQ_Txѓݩ lw2Z0i {v1>$Qt6ٱP/y>= 0%k[+kȢ+`*#\蚝q4xa$OIuI4(1yb9Hk֜9  Po.:W.1plaX,Cxh"]~U8҅'(T1yT~J5b_L㉲JYw~"ǔ+[Q3”'*FAh~ҏ!E KM$YAD&JxE8t eT̹ޤ0C?KcC]p\on'2Uu_ᑍْ9Zu2[? eEJ~7exy([Cl5V.7߭ڇ cN ETv.l%8hwf1Kض?.Tbȹf++r&REDnFWnr 3u%Q/S~@KKF겺fQ#N2-^i?\H]c;Vj Q*ݯu7_lx[2c-xr` %}vljؽ kz/fp/lf@#"Q@Mt%GJv$&7ۿ^#OCQF\yn\5[K$=07%s'$@?&&kSeT ] cpJPH;Ǭw>nL1ʔl\<"~dƳ3;/l4ڊcX̋s 2#ċuy>erxN-8B$إTO`_9cz麟N 1 UOبB݉^Q^fti_"m?MIăpDdVŪĎOf(E?=3>̉g &5*XM^M) Px$NoqTÂeF^z{oDxA|W|gwTүUL- H" G!x]QnD5IӾ~"8b ה, |3V +ɑ<ͷNHA32Y->ط"yFgз!01c5M>`q^1eˮGN[q͙O^2X֋+|vsI޴ck4,\ J pL׃LQ%4hKْTu8!suAz~I4`?p'kD-)/f:OC&~n X\LKY@5v,b+6**t؅V#< .6g͡543'=F@'w 1"*H̶h{zCQ]:ݿ8(eșy_ TLeT9\T`ߏ]A?/|J>=wXKz]K,2h $5wRXpL$6*׎bRiWb!'HLwׁ*/6^bTjfUDž^λB耇تrޠ޽;A1+&jnmnu'E,e﮻b(Qa6mPԅC>!Iӌ?㫉lB*C6s]ʨ$zħŹ"?2ܐ,e ;LRױ:_ SX5Gq#RT\_Y26L?NcvQ`8KRop\Fd}@'<ߊi]v= A\e\vg;-4 ZHR7HTV^4Ϡ#{QB現 G˒MvKb[8 G/4fVOӻ?O '\JŸdFlH@ݜ>c9<ʎ{yy )7ȺhAaaA*#!׊soY[tӀ/ {yG5oלݳq;D/MbYfOSK:OWRQaUȫĎfȟ&ϕ:QA3\*J hz; ZDA?*/̛ӼecyISgRlkg!6%?v8#H_`S=߭Esaء7 ld>`$/ A]N͕NFDž:m wۭ]pFqxI`NaU:weAaABnmt#-3ǯ1F?:+){bKkIc]dӊFᤀ>Bj59{ZƵ9W!05%`^nY;t`lC*s8ㅮ>ju5ee#i6q7"地5< [_2 z"/أL-gf^hr9=%/*%|:? %mlXQ>+y,O4kv*q֛e1]&5Mo5(rĬx> ⟃!ơ-]o;Xl|@%\O}`Z , R<sXv]OoL?ϙ[p1W^;Vx]CO^hҒzmr\ѫ@/ubKJHJ?~:UL}BΗEd <=ʽ;V%#yl kT.! HMg#%!D!?MwRKubJCJ.:rfB^AHUǹGA}Qܻ3Gҡk;xEEѻs{Jj]-͒\:JWYN #IfفxeZ`.jy%PF \|2đ ~QMW GknܽR\[W>dI=HT@Jhtf=jϴ[I4|ETsrc>W#lD--;Sjv7e]>(1qspeYF{qUߙQ+Rvh1Z/n͡jJϽ\\F[$;XF(C2.Uf,݈}eA??i<VQ~Nӯk7ڒCX I޼9au)tCLD<}U@nh'IH&dFV`v3pnڌ(9^n$rOjI 0XFA6@ dOҘd(PϘy;)v`mZNC5b~vʝM 0+'s'aʢtՃW7ay >mt(  ySi惻4h7d&=2vj(2[9"m/ru~(zSD\)7%V ^CH[0ss8o}/Bdb*wr.2Z+iQbx#yz?oP2Ie,$䲕r=d#u(+zR3du^gScv`2 d)KXԒ%k"0`&a? veG=Vcg!e -5}_xcy6\PIuȂqvqB >s8"ۨxܺgC) '9O ӫ{RH' RYAiXjL | /T$UM-JVbi~Lt2;K~*/7 mCfp%p(IPumA!;ʕ3np:G>CI( K04L@p̐)K([ˬddx 2eGT=y Lu'EўByQ8[rTp05 iu]iB0QHJBp-Yon+O bSSG(f)W+J0^i'-y$krÃ&L58ϷLDJ@R3vs^'XtAׂ ;~yNe4n wϗ9NVoGI sְX;u*>\31'1\V40hm m( E6Cq*{ >lQ4)Ei7fo bwk\[yԉ7Jj|Is.@JWn%*HW_lbcŭD~v,t4+z 4sڜ7?/WX?&2G J1 Գo-^d2uł{lp}>BKDtZkd4 Th Hآi2e$& ^"pF3;[{a"7QYsKpS VJXZ6m`.rF_z-1n ,mI V{ۀ"o5p vxԠ?X\H9֞#`IV}gly>L<32DI~ޠJh Ko򖼘qU`jŖ0FD때qz6tP]_SCn [.ģI7%o5?r MpgěP/[f)=T'j낱6L~0NҼP,z&L_ajkD:X*J S^S3eYhrM Qb`D֞`yS=BPȟ{ε1#|ڴ=2d~Q;#3O|3 :GqfGJz'g9#VFgWH_&ig}RLN>7s2=o:Nmf$'by]X\8wNSDwAK9FĨ1z"zPOUR,s8+I"\!z}ALNӣ5l{$ 3b} U҂<RYޫP[|qC#ű٨vn"*RHdE9&AB.eחP)s(0&.ܿb+l JlM^rq]WRWQM)D%wK 0eA`lJH28fRWhMʈzIH>iՂiLus8knkᓱN)}9f'@^BFֆU%KVqOFn[΁!@:rbtzWsx Û3ƿx *A nSOFЉ ^lrZ-Q#s!(0gf^>\oV0컨N1÷y瘙f˂XMy *jtubz(!ύ}΄ H$a&8f_Hx3uZw%Y::oS,AMBsƒ^äz˼D%R]E!bHc*3[U}e(ec!v5cn78?{U=.qG 2]tw=dd,m}Fظ: ߎO[ӷnY9A!ýNg4I2y׹%(9f܆'cv^un'uh"ZEt857O1es+uUTd"M„kY 1Ũ#ͭY#LgE*e Nt6G1$gĸdtS W.<=wT䗷b/tI/DeBJ0RD)KÝe$KՇzVWИZ붢.<1{t;ѯqnɘ< cΞ6%GQB}eliȎf_UPa/4 s lX:섯RzjqL_%u)aiGg&={w:IɘQ_/L.K%FMBK&UVZ@.ݮa'(f)!O|6{{1ڜ75Jŝ$9Yt{kw%$hk.- ^.?.}Է Ƽ%,o;'ۋjX!Cf@D[Nq1ѣ+Іq'\r Mfd&[0^aCuYhvΚ0u42AE'"FkO_se;SaIEluA24fvJ"ܭ7YϓX app̝<#0˦hc'C1g?=ɬ#E7Ubl3@c{#%DuY7i"A)Ǖ8۰鵒H^&F ^yY,Bv\w/G_^r8t}I ϫkfG6;uֶLJX7he QJ5𬍐^xsPn%Du~Z@}ll9e383iޏ0p-ɾyp7ErVNaXG~)~߯`2©rJ[M5H%%Gl%!~$R~DEXɝ-I٧ pK;T]yC!xnj8 }5]fYc O(㛥 rϪfu8}M`*ahV93O4:rTo 5}MDJ:MVMcXk ={ۻ dʵfr\GŅц $#m) !lZ_h}>sQsHV^"ItdY:91YakAtp~JIh"]èE}OQj+^?3B}'&ƅa+t` ?5*̴xNrNURdv\I= 91ZDt=^LJi`"ЉvdyјP Tm˂{yGByf\da@4w]vzD)ˁWa*:iT`& ˆ1T= s hWđ$ۡ$ YZ