libselinux-static-2.9-8.el8 > 6 6_6 3!pQp)Tξ7]mtZ`c\1 ]mtZ`L5 At!y(;oP%H*![N$-TzEqϺUn3 EL}"IдܮOޡ0ZT.8um U|p]ۋm_^I ba8 (݇G~* a4c^tG-pf~&# [,<+"7dEQH^gfs"qs;XrZxjDz4`v?⽏_KG@TOirkoi6 d*g))oo='(6wVH=5sjQbHh!Wl9nO3SH`ɼ`Iahs絗*>1"ꔗlCIRHѽaG~FmI3*<a-p3f@=mf(Fd|fV Zq?O ~ 1Q,E ^c'Ow٨tԀabc5b1ec247c30589d8b678b92c4894025f3f2f5b14288922876fe89390370b1d492608a69337d2cf8dc5dde585160f39d1101d3唉3!pQp)Tξ7]mtZ`c\1 ]mtZ`d}?=bJJOskS-?*W/lI,#sMkrh_Ni?Th0Tuwj; ^6r(ҌYT/DlHnp)>w qF)$svCavd.jj/-ǗCTĻyox qm[1 4+̼]aᵚ!QwY  ,q $ Ym@Klj痢JG'9 oΉm2f@3ZXzrL& :fFݟY;RxISc%SLZ&\*ˢOYd3UP`Tz 5QJr+d }q %Dȇf]WA4?Õa_oj UIH%ྥWT X>p9[,?[d  E +Z`hl n p t  ,(8N9 N:kpNGYHY IY$XY(YY0\YD]YH^YUbYadZeZfZlZtZuZvZZZZ[Clibselinux-static2.98.el8Static libraries used to build SELinuxThe libselinux-static package contains the static libraries needed for developing SELinux applications.c"ord1-prod-a64build004.svc.aws.rockylinux.org TKojiRockyPublic Domaininfrastructure@rockylinux.orgUnspecifiedhttps://github.com/SELinuxProject/selinux/wikilinuxaarch64 Tc"f967cb794e36e5c9de1734b2435853722bb4b1e7df90167d68bae0e057c1e10drootrootlibselinux-2.9-8.el8.src.rpmlibselinux-staticlibselinux-static(aarch-64)    libselinux-devel(aarch-64)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)2.9-8.el83.0.4-14.6.0-14.0-15.2-14.14.3c@c.b_@_l@]X]@\@[@[ā@[ @[,[@[Zz@ZK@ZZZI@Z@Z}@Zz@Zu@ZTZOhZfY@Y˒Y(@YJYV@Y@Y|xY{'@Yx@Y.X-Xg@X@X @XN@X@XXx@Xv@XJX43@WH@W9W@Wq@Wm Wk@W,@W'A@W#LW@VяVIVɦV=@VVii@V@V UU@U4@Ua@UQ@U8U6;UTS@S@SSShShSXS 4@S@R@RUR&RʚRkR%R@RMUM@M@M@M@MlMQ0@MGM5ML@L-@L@L*@LLq@LN@LF@L$@KKKrK@KKqK}+KTM@KA@K@JJJJG@JG@JG@JjJS8JS8JB@J@JMIܑI@IԨIbI̿I@IV@III@I@I2I@IcGIcGIcGIG@IG@IBR@I1.I!\I!\I-HHHe@He@He@He@H@HHH@Ht@HsVHgy@H^>H^>H-w@H!H @H@G@GG#GF@G@GGƢ@GƢ@G­G@GGD@G@G@G@G,@G,@G@GG@GZ@GZ@GeGeG|@G|@GO@GO@G<4G<4G0W@G'@FF@FIFFFFF&@FF@FvFFS@FF@FF]F@FtFFzh@Fw@Fm9@F` @F; @F-@F,F@F@FF*FF @F @FoE@EE@E4@EE?Eɿ@EEEEElEx@E&E=E=E@Ex@EvEnEYEK/@E>@E4EE EgEgEDfDDDDq@D@DB@DB@DB@DB@D{DDX@D4D4D4DD@D@D~D~D|3DvDu@Dr@Dr@DlaDk@DiD`@D_2D_2DX@DWID?D;@D'Dj@C@CCC-Cǖ@Cǖ@C[CCC8@C@CC @CCqC @CCCC@CBC@C@C|pC|pC{@CyCp@Cp@CoACkM@CiCf@C_oC_oC^@C^@CX@CWCS@COCFc@CFc@CECECBnCA@C;@C:C*C&@C&@C%mCC@CC C a@C a@C&B=BۙB@B@Br!Br!Br!Bn-@BgB] B] BZfBS@BQ,@BIC@BAZ@B9q@B9q@B06B-B$Y@B#BB@B@B LB LBBAA)@A@A@AA@A@A@AyAҜ@AJA@A`A`AA@AA@Ak@AAA@AvA@AAoA]FA]FAQi@AN@AI@AF@AF@AA@A>@A>@A7 @A7 @A5A4h@A3A3A/"@A-A+-A(A$@A!@A A A@A@@@q@7@@@@6@@@A@)@@@@@@@@@~y@@~y@@~y@@}'@s@@s@@s@@l@@ia@@b@b@b@O@@O@@Dw@@9@@,@@ @/@@???E@?E@?٭???q@??@?@?@?}d?z?a@?M?D@>S@Vit Mojzis - 2.9-8Vit Mojzis - 2.9-7Vit Mojzis - 2.9-6Vit Mojzis - 2.9-5Vit Mojzis - 2.9-4Vit Mojzis - 2.9-3Petr Lautrbach - 2.9-2.1Petr Lautrbach - 2.9-1Petr Lautrbach - 2.8-6Petr Lautrbach - 2.8-5Petr Lautrbach - 2.8-4Petr Lautrbach - 2.8-3Petr Lautrbach - 2.8-2Petr Lautrbach - 2.8-1Petr Lautrbach - 2.8-0.rc3.1Petr Lautrbach - 2.8-0.rc2.1Petr Lautrbach - 2.8-0.rc1.1Petr Lautrbach - 2.7-14Petr Lautrbach - 2.7-13Petr Lautrbach - 2.7-12Igor Gnatenko - 2.7-11Fedora Release Engineering - 2.7-10Igor Gnatenko - 2.7-9Iryna Shcherbina - 2.7-8Mamoru TASAKA - 2.7-7Petr Lautrbach - 2.7-6Petr Lautrbach - 2.7-5Petr Šabata - 2.7-4Zbigniew Jędrzejewski-Szmek - 2.7-3Zbigniew Jędrzejewski-Szmek - 2.7-2Petr Lautrbach - 2.7-1Fedora Release Engineering - 2.6-10Florian Weimer - 2.6-9Petr Lautrbach - 2.6-8Fedora Release Engineering - 2.6-7Petr Lautrbach - 2.6-6Petr Lautrbach - 2.6-5Petr Lautrbach - 2.6-4Petr Lautrbach - 2.6-3Petr Lautrbach - 2.6-2Petr Lautrbach - 2.6-1Fedora Release Engineering - 2.5-18Stephen Gallagher - 2.5-17Vít Ondruch - 2.5-16Petr Lautrbach - 2.5-15Charalampos Stratakis - 2.5-14Petr Lautrbach - 2.5-13Petr Lautrbach 2.5-12Petr Lautrbach 2.5-11Fedora Release Engineering - 2.5-10Petr Lautrbach - 2.5-9Petr Lautrbach - 2.5-8Petr Lautrbach - 2.5-7Petr Lautrbach - 2.5-6Petr Lautrbach - 2.5-5Petr Lautrbach - 2.5-4Petr Lautrbach - 2.5-3Petr Lautrbach 2.5-2Petr Lautrbach 2.5-1Petr Lautrbach 2.5-0.1.rc1Fedora Release Engineering - 2.4-8Vít Ondruch - 2.4-7Petr Lautrbach - 2.4-6Robert Kuska - 2.4-5Petr Lautrbach 2.4-4Petr Lautrbach 2.4-3Adam Jackson 2.4-2Petr Lautrbach 2.4-1.1Fedora Release Engineering - 2.3-11Petr Lautrbach 2.3-10Petr Lautrbach 2.3-9Petr Lautrbach 2.3-8Than Ngo - 2.3-7Vít Ondruch - 2.3-6Miroslav Grepl - 2.3-5Fedora Release Engineering - 2.3-4Fedora Release Engineering - 2.3-3Kalev Lember - 2.3-2Dan Walsh - 2.3-1Miroslav Grepl - 2.2.2-8Vít Ondruch - 2.2.2-7Dan Walsh - 2.2.2-6Dan Walsh - 2.2.2-5Dan Walsh - 2.2.2-4Dan Walsh - 2.2.2-3Dan Walsh - 2.2.2-2Dan Walsh - 2.2.2-1Adam Williamson - 2.2.1-6Dan Walsh - 2.2.1-5Dan Walsh - 2.2.1-4Dan Walsh - 2.2.1-3Dan Walsh - 2.2.1-2Dan Walsh - 2.2.1-1Dan Walsh - 2.2-1Dan Walsh - 2.1.13-21Dan Walsh - 2.1.13-20Dan Walsh - 2.1.13-19Dan Walsh - 2.1.13-17Fedora Release Engineering - 2.1.13-17Dan Walsh - 2.1.13-16Dan Walsh - 2.1.13-15Dan Walsh - 2.1.13-14Dan Walsh - 2.1.13-13Dan Walsh - 2.1.13-12Dan Walsh - 2.1.13-11Dan Walsh - 2.1.13-10Dan Walsh - 2.1.13-9Dan Walsh - 2.1.13-8Dan Walsh - 2.1.13-7Dan Walsh - 2.1.13-6Dan Walsh - 2.1.13-5Dan Walsh - 2.1.13-4Dan Walsh - 2.1.13-3Dan Walsh - 2.1.13-2Dan Walsh - 2.1.13-1Dan Walsh - 2.1.12-20Dan Walsh - 2.1.12-19Dan Walsh - 2.1.12-18Dan Walsh - 2.1.12-17Dan Walsh - 2.1.12-16Dan Walsh - 2.1.12-15Dan Walsh - 2.1.12-14Dan Walsh - 2.1.12-13Dan Walsh - 2.1.12-12Dan Walsh - 2.1.12-11Dan Walsh - 2.1.12-10Dan Walsh - 2.1.12-9Dan Walsh - 2.1.12-8Dan Walsh - 2.1.12-7Dan Walsh - 2.1.12-6Dan Walsh - 2.1.12-5Dan Walsh - 2.1.12-4Dan Walsh - 2.1.12-3Dan Walsh - 2.1.12-2Dan Walsh - 2.1.12-1David Malcolm - 2.1.11-6David Malcolm - 2.1.11-5Fedora Release Engineering - 2.1.11-4Dan Walsh - 2.1.11-3Dan Walsh - 2.1.11-2Dan Walsh - 2.1.11-1Dan Walsh - 2.1.10-5Dan Walsh - 2.1.10-4Dan Walsh - 2.1.10-3Dan Walsh - 2.1.10-2Dan Walsh - 2.1.10-1Dan Walsh - 2.1.9-9Dan Walsh - 2.1.9-8Dan Walsh - 2.1.9-7Kay Sievers - 2.1.9-6Dan Walsh - 2.1.9-5Harald Hoyer 2.1.9-4Dan Walsh - 2.1.9-3Dan Walsh - 2.1.9-2Dan Walsh - 2.1.9-1Dan Walsh - 2.1.8-5Dan Walsh - 2.1.8-4Dan Walsh - 2.1.8-2Dan Walsh - 2.1.8-1Dan Walsh - 2.1.7-2Dan Walsh - 2.1.7-1Dan Walsh - 2.1.6-4Dan Walsh - 2.1.6-3Dan Walsh - 2.1.6-2Dan Walsh - 2.1.6-1Dan Walsh - 2.1.5-5Ville Skyttä - 2.1.5-4Dan Walsh - 2.1.5-3Dan Walsh - 2.1.5-2Dan Walsh - 2.1.5-1Dan Walsh - 2.1.4-2Dan Walsh - 2.1.4-1Dan Walsh - 2.1.0-1Dan Walsh - 2.0.102-6Dan Walsh - 2.0.102-5Dan Walsh - 2.0.102-4Dan Walsh - 2.0.102-3Dan Walsh - 2.0.102-2Dan Walsh - 2.0.102-1Dan Walsh - 2.0.101-1Dan Walsh - 2.0.99-5Dan Walsh - 2.0.99-4Dan Walsh - 2.0.99-3Dan Walsh - 2.0.99-2Dan Walsh - 2.0.99-1Fedora Release Engineering Dan Walsh - 2.0.98-3Dan Walsh - 2.0.98-2Dan Walsh - 2.0.98-1Dan Walsh - 2.0.97-1Dan Walsh - 2.0.96-9Dan Walsh - 2.0.96-8jkeating - 2.0.96-7Adam Tkac - 2.0.96-6Dan Walsh - 2.0.96-5Dan Walsh - 2.0.96-4David Malcolm - 2.0.96-3Dan Walsh - 2.0.96-2Dan Walsh - 2.0.96-1Dan Walsh - 2.0.94-1Dan Walsh - 2.0.93-1Dan Walsh - 2.0.92-1Dan Walsh - 2.0.91-1Dan Walsh - 2.0.90-5Dan Walsh - 2.0.90-4Dan Walsh - 2.0.90-3Dan Walsh - 2.0.90-2Dan Walsh - 2.0.90-1Dan Walsh - 2.0.89-2Dan Walsh - 2.0.89-1Dan Walsh - 2.0.88-1Dan Walsh - 2.0.87-1Dan Walsh - 2.0.86-2Dan Walsh - 2.0.86-1Fedora Release Engineering - 2.0.85-2Dan Walsh - 2.0.85-1Dan Walsh - 2.0.84-1Dan Walsh - 2.0.82-2Dan Walsh - 2.0.82-1Dan Walsh - 2.0.81-1Dan Walsh - 2.0.80-1Dan Walsh - 2.0.79-6Dan Walsh - 2.0.79-5Dan Walsh - 2.0.79-4Dan Walsh - 2.0.79-3Dan Walsh - 2.0.79-1Dan Walsh - 2.0.78-5Dan Walsh - 2.0.78-4Dan Walsh - 2.0.78-3Dan Walsh - 2.0.78-2Dan Walsh - 2.0.78-1Fedora Release Engineering - 2.0.77-6Dan Walsh - 2.0.77-5Dan Walsh - 2.0.77-3Dan Walsh - 2.0.77-2Dan Walsh - 2.0.77-1Dan Walsh - 2.0.76-6Dan Walsh l - 2.0.76-5Dan Walsh - 2.0.76-4Ignacio Vazquez-Abrams - 2.0.76-2Dan Walsh - 2.0.76-1Dan Walsh - 2.0.75-2Dan Walsh - 2.0.75-1Dan Walsh - 2.0.73-1Dan Walsh - 2.0.71-6Dan Walsh - 2.0.71-5Dan Walsh - 2.0.71-4Dan Walsh - 2.0.71-3Dan Walsh - 2.0.71-2Dan Walsh - 2.0.71-1Dan Walsh - 2.0.70-1Dan Walsh - 2.0.69-2Dan Walsh - 2.0.69-1Dan Walsh - 2.0.67-4Dan Walsh - 2.0.67-3Dan Walsh - 2.0.67-2Dan Walsh - 2.0.67-1Dan Walsh - 2.0.65-1Dan Walsh - 2.0.64-3Dan Walsh - 2.0.64-2Dan Walsh - 2.0.64-1Dan Walsh - 2.0.61-4Dan Walsh - 2.0.61-3Dan Walsh - 2.0.61-2Dan Walsh - 2.0.61-1Dan Walsh - 2.0.60-1Dan Walsh - 2.0.59-2Dan Walsh - 2.0.59-1Dan Walsh - 2.0.58-1Dan Walsh - 2.0.57-2Dan Walsh - 2.0.57-1Dan Walsh - 2.0.56-1Dan Walsh - 2.0.55-1Dan Walsh - 2.0.53-1Dan Walsh - 2.0.52-1Dan Walsh - 2.0.50-1Dan Walsh - 2.0.49-2Dan Walsh - 2.0.49-1Dan Walsh - 2.0.48-1Dan Walsh - 2.0.47-4Adel Gadllah - 2.0.47-3Dan Walsh - 2.0.47-2Dan Walsh - 2.0.47-1Dan Walsh - 2.0.46-6Dan Walsh - 2.0.46-5Dan Walsh - 2.0.46-4Dan Walsh - 2.0.46-3Dan Walsh - 2.0.46-2Dan Walsh - 2.0.46-1Dan Walsh - 2.0.45-1Dan Walsh - 2.0.43-1Dan Walsh - 2.0.42-1Dan Walsh - 2.0.40-1Dan Walsh - 2.0.37-1Dan Walsh - 2.0.36-1Dan Walsh - 2.0.35-2Dan Walsh - 2.0.35-1Dan Walsh - 2.0.34-3Dan Walsh - 2.0.34-2Dan Walsh - 2.0.34-1Dan Walsh - 2.0.33-2Dan Walsh - 2.0.33-1Dan Walsh - 2.0.31-4Dan Walsh - 2.0.31-3Dan Walsh - 2.0.31-2Dan Walsh - 2.0.30-2Dan Walsh - 2.0.30-1Dan Walsh - 2.0.29-1Dan Walsh - 2.0.24-3Dan Walsh - 2.0.24-2Dan Walsh - 2.0.24-1Dan Walsh - 2.0.23-3Dan Walsh - 2.0.23-2Dan Walsh - 2.0.23-1Dan Walsh - 2.0.22-1Dan Walsh - 2.0.21-2Dan Walsh - 2.0.21-1Dan Walsh - 2.0.18-1Dan Walsh - 2.0.16-1Dan Walsh - 2.0.14-1Dan Walsh - 2.0.13-2Dan Walsh - 2.0.13-1Dan Walsh - 2.0.12-2Dan Walsh - 2.0.12-1Dan Walsh - 2.0.11-1Dan Walsh - 2.0.9-2Dan Walsh - 2.0.9-1Dan Walsh - 2.0.8-1Dan Walsh - 2.0.7-2Dan Walsh - 2.0.7-1Dan Walsh - 2.0.5-2Dan Walsh - 2.0.5-1Dan Walsh - 2.0.4-1Dan Walsh - 2.0.2-1Dan Walsh - 2.0.1-1Dan Walsh - 2.0.0-1Dan Walsh - 1.34.0-2Dan Walsh - 1.34.0-1Dan Walsh - 1.33.6-1Dan Walsh - 1.33.5-1Dan Walsh - 1.33.4-3Dan Walsh - 1.33.4-2Dan Walsh - 1.33.4-1Dan Walsh - 1.33.3-3Dan Walsh - 1.33.3-2Dan Walsh - 1.33.3-1Jeremy Katz - 1.33.2-4Dan Walsh - 1.33.2-3Dan Walsh - 1.33.2-2Dan Walsh - 1.33.2-1Dan Walsh - 1.33.1-2Dan Walsh - 1.33.1-1Dan Walsh - 1.32-1Jesse Keating - 1.30.29-2Dan Walsh - 1.30.29-1Jeremy Katz - 1.30.28-3Dan Walsh - 1.30.28-2Dan Walsh - 1.30.28-1Jeremy Katz - 1.30.27-2Dan Walsh - 1.30.27-1Jesse Keating - 1.20.26-2Dan Walsh - 1.30.25-1Dan Walsh - 1.30.24-1Dan Walsh - 1.30.22-2Dan Walsh - 1.30.22-1Dan Walsh - 1.30.20-1Jeremy Katz - 1.30.19-5Jeremy Katz - 1.30.19-4Dan Walsh 1.30.19-3Dan Walsh 1.30.19-2Dan Walsh 1.30.19-1Dan Walsh 1.30.15-5Dan Walsh 1.30.15-4Dan Walsh 1.30.15-3Dan Walsh 1.30.15-2Dan Walsh 1.30.15-1Dan Walsh 1.30.12-2Dan Walsh 1.30.12-1Dan Walsh 1.30.11-2Dan Walsh 1.30.11-1Dan Walsh 1.30.10-4Dan Walsh 1.30.10-3Dan Walsh 1.30.10-2Dan Walsh 1.30.10-1Dan Walsh 1.30.8-1Dan Walsh 1.30.7-2Dan Walsh 1.30.7-1Dan Walsh 1.30.6-2Dan Walsh 1.30.6-1Dan Walsh 1.30.5-1Dan Walsh 1.30.3-3Dan Walsh 1.30.3-2Dan Walsh 1.30.3-1Dan Walsh 1.30.1-2Dan Walsh 1.30.1-1Dan Walsh 1.30-1Jesse Keating - 1.29.7-1.2Jesse Keating - 1.29.7-1.1Dan Walsh 1.29.7-1Dan Walsh 1.29.6-1Dan Walsh 1.29.5-2Dan Walsh 1.29.5-1Dan Walsh 1.29.4-1Dan Walsh 1.29.3-2Dan Walsh 1.29.3-1Dan Walsh 1.29.2-4Dan Walsh 1.29.2-3Dan Walsh 1.29.2-2Dan Walsh 1.29.2-1Dan Walsh 1.29.1-3Jesse Keating Dan Walsh 1.29.1-1Dan Walsh 1.28-1Dan Walsh 1.27.28-2Dan Walsh 1.27.28-1Dan Walsh 1.27.26-1Dan Walsh 1.27.25-1Dan Walsh 1.27.23-1Dan Walsh 1.27.22-4Dan Walsh 1.27.22-3Dan Walsh 1.27.22-2Dan Walsh 1.27.22-1Dan Walsh 1.27.21-2Dan Walsh 1.27.21-1Dan Walsh 1.27.20-1Dan Walsh 1.27.19-1Dan Walsh 1.27.18-1Dan Walsh 1.27.17-4Dan Walsh 1.27.17-2Dan Walsh 1.27.17-1Dan Walsh 1.27.14-3Dan Walsh 1.27.14-2Dan Walsh 1.27.14-1Dan Walsh 1.27.13-2Dan Walsh 1.27.13-1Dan Walsh 1.27.12-1Dan Walsh 1.27.9-2Dan Walsh 1.27.9-1Dan Walsh 1.27.7-1Dan Walsh 1.27.6-1Dan Walsh 1.27.4-1Dan Walsh 1.27.3-1Dan Walsh 1.27.2-1Dan Walsh 1.27.1-3Dan Walsh 1.27.1-2Dan Walsh 1.26-6Dan Walsh 1.26-5Dan Walsh 1.26-3Dan Walsh 1.26-2Dan Walsh 1.25.7-1Dan Walsh 1.25.6-1Dan Walsh 1.25.5-1Dan Walsh 1.25.4-1Dan Walsh 1.25.3-2Dan Walsh 1.25.3-1Dan Walsh 1.25.2-2Dan Walsh 1.25.2-1Dan Walsh 1.24.2-1Dan Walsh 1.24.1-1Dan Walsh 1.23.11-1Dan Walsh 1.23.10-3Dan Walsh 1.23.10-2Dan Walsh 1.23.10-1Dan Walsh 1.23.8-1Dan Walsh 1.23.7-3Dan Walsh 1.23.7-2Dan Walsh 1.23.7-1Dan Walsh 1.23.6-1Dan Walsh 1.23.5-1Dan Walsh 1.23.4-1Dan Walsh 1.23.2-3Dan Walsh 1.23.2-2Dan Walsh 1.23.2-1Dan Walsh 1.23.1-1Dan Walsh 1.22-1Dan Walsh 1.21.13-1Dan Walsh 1.21.12-1Dan Walsh 1.21.11-2Dan Walsh 1.21.11-1Dan Walsh 1.21.10-3Dan Walsh 1.21.10-1Dan Walsh 1.21.9-2Dan Walsh 1.21.9-1Dan Walsh 1.21.8-1Dan Walsh 1.21.7-1Dan Walsh 1.21.5-1Dan Walsh 1.21.4-1Dan Walsh 1.21.2-1Dan Walsh 1.21.1-3Dan Walsh 1.21.1-2Dan Walsh 1.21.1-1Dan Walsh 1.20.1-3Dan Walsh 1.20.1-2Dan Walsh 1.20.1-1Dan Walsh 1.19.4-1Dan Walsh 1.19.3-3Dan Walsh 1.19.3-2Dan Walsh 1.19.3-1Dan Walsh 1.19.2-1Dan Walsh 1.19.1-6Dan Walsh 1.19.1-4Dan Walsh 1.19.1-2Dan Walsh 1.19.1-1Steve Grubb 1.18.1-5Dan Walsh 1.18.1-4Dan Walsh 1.18.1-3Steve Grubb 1.18.1-2Dan Walsh 1.18.1-1Steve Grubb 1.17.15-2Steve Grubb 1.17.15-2Dan Walsh 1.17.15-1Dan Walsh 1.17.14-1Dan Walsh 1.17.13-3Dan Walsh 1.17.13-2Dan Walsh 1.17.13-1Dan Walsh 1.17.12-2Dan Walsh 1.17.12-1Dan Walsh 1.17.11-1Dan Walsh 1.17.10-1Dan Walsh 1.17.9-2Dan Walsh 1.17.9-1Dan Walsh 1.17.8-2Dan Walsh 1.17.8-1Dan Walsh 1.17.7-1Dan Walsh 1.17.6-1Dan Walsh 1.17.5-1Dan Walsh 1.17.4-1Dan Walsh 1.17.3-1Dan Walsh 1.17.2-1Dan Walsh 1.17.1-1Dan Walsh 1.16.1-1Colin Walters 1.16-1Dan Walsh 1.15.7-1Dan Walsh 1.15.6-1Dan Walsh 1.15.5-1Dan Walsh 1.15.4-1Dan Walsh 1.15.3-2Dan Walsh 1.15.3-1Dan Walsh 1.15.2-1Dan Walsh 1.15.1-3Dan Walsh 1.15.1-2Dan Walsh 1.15.1-1Dan Walsh 1.14.1-1Dan Walsh 1.13.4-1Elliot Lee Dan Walsh 1.13.3-2Dan Walsh 1.13.2-1Dan Walsh 1.13.1-1Dan Walsh 1.12-2Dan Walsh 1.12-1Dan Walsh 1.11.4-1Dan Walsh 1.11.3-1Dan Walsh 1.11.2-1Dan Walsh 1.11-4Dan Walsh 1.11-3Dan Walsh 1.11-2Dan Walsh 1.11-1Dan Walsh 1.10-2Dan Walsh 1.10-1Dan Walsh 1.9-1Dan Walsh 1.8-1Dan Walsh 1.6-6Dan Walsh 1.6-5Dan Walsh 1.6-4Dan Walsh 1.6-3Dan Walsh 1.6-2Elliot Lee Dan Walsh 1.4-11Elliot Lee Dan Walsh 1.4-9Dan Walsh 1.4-8Dan Walsh 1.4-7Dan Walsh 1.4-6Dan Walsh 1.4-5Dan Walsh 1.4-4Dan Walsh 1.4-3Dan Walsh 1.4-2Dan Walsh 1.4-1Dan Walsh 1.3-2Dan Walsh 1.3-1Dan Walsh 1.2-9Dan Walsh 1.2-8Dan Walsh 1.2-7Dan Walsh 1.2-6Dan Walsh 1.2-5Dan Walsh 1.2-4Dan Walsh 1.2-3Dan Walsh 1.2-2Dan Walsh 1.2-1Dan Walsh 1.0-1- restorecon: Fix memory leak - xattr_value (#2137965)- Restorecon: Ignore missing directories when -i is used (#2137965)- Describe fcontext regular expressions (#1904059) - Strip spaces before values in config (#2012145)- Deprecate security_compute_user(), update man pages (#1879368)- Eliminate use of security_compute_user() (#1879368)- Fix mcstrans secolor examples in secolor.conf man page (#1770270)- Use Python distutils to install SELinux python bindings (#1719771) - Move sefcontext_compile to -utils package (#1612518)- SELinux userspace 2.9 release- Fix RESOURCE_LEAK coverity scan defects- selinux_restorecon: Skip customized files also without -v - man pages fixes- Build libselinux-python when %with_python2 macro is set to non-zero value- Build libselinux-ruby (#1581322)- Don't build the Python 2 subpackage (#1567358)- SELinux userspace 2.8 release- SELinux userspace 2.8-rc3 release candidate- SELinux userspace 2.8-rc2 release candidate- SELinux userspace 2.8-rc1 release candidate- Do not build libselinux-ruby- build: Replace PYSITEDIR with PYTHONLIBDIR- Correct manpages regarding removable_context - build: follow standard semantics for DESTDIR and PREFIX- Escape macros in %changelog- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild- Switch to %ldconfig_scriptlets- Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)- F-28: rebuild for ruby25- Rebuild with libsepol-2.7-3- Drop golang bindings - Add support for pcre2 to pkgconfig definition- Enable the python3 subpackages on EL- Also add Provides for the old name without %_isa- Python 2 binary package renamed to python2-libselinux See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3 - Python 3 binary package renamed to python3-libselinux- Update to upstream release 2017-08-04- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild- Rebuild with binutils fix for ppc64le (#1475636)- Always unmount selinuxfs for SELINUX=disabled- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- Don't finalize mount state in selinux_set_policy_root() - Follow upstream and rename _selinux.so to _selinux.cpython-36m-x86_64-linux-gnu.so- Fix setfiles progress indicator- Fix segfault in selinux_restorecon_sb() (#1433577) - Change matchpathcon usage to match with matchpathcon manpage - Fix a corner case getsebool return value- Fix 'semanage boolean -m' to modify active value- Fix FTBFS - fatal error (#1427902)- Update to upstream release 2016-10-14- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild- Add missing %license macro- Rebuilt for https://fedoraproject.org/wiki/Changes/Ruby_2.4- Rewrite restorecon() python method- Rebuild for Python 3.6- Fix pointer handling in realpath_not_final (#1376598)- Fix -Wsign-compare warnings - Drop unused stdio_ext.h header file - Kill logging check for selinux_enabled() - Drop usage of _D_ALLOC_NAMLEN - Add openrc_contexts functions - Fix redefinition of XATTR_NAME_SELINUX - Correct error path to always try text - Clean up process_file() - Handle NULL pcre study data - Fix in tree compilation of utils that depend on libsepol- Rebuilt with libsepol-2.5-9- https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages- Clarify is_selinux_mls_enabled() description - Explain how to free policy type from selinux_getpolicytype() - Compare absolute pathname in matchpathcon -V - Add selinux_snapperd_contexts_path()- Move _selinux.so to /usr/lib64/python*/site-packages- Modify audit2why analyze function to use loaded policy - Sort object files for deterministic linking order - Respect CC and PKG_CONFIG environment variable - Avoid mounting /proc outside of selinux_init_load_policy()- Fix multiple spelling errors- Rebuilt with libsepol-2.5-5- Fix typo in sefcontext_compile.8- Fix location of selinuxfs mount point - Only mount /proc if necessary - procattr: return einval for <= 0 pid args - procattr: return error on invalid pid_t input- Use fully versioned arch-specific requires- Update to upstream release 2016-02-23- Update to upstream rc1 release 2016-01-07- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild- Rebuilt for https://fedoraproject.org/wiki/Changes/Ruby_2.3- Build libselinux without rpm_execcon() (#1284019)- Rebuilt for Python3.5 rebuild- Flush the class/perm string mapping cache on policy reload (#1264051) - Fix restorecon when path has no context- Simplify procattr cache (#1257157,#1232371)- Export ldflags into the build so hardening works- Update to 2.4 release- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- is_selinux_enabled: Add /etc/selinux/config test (#1219045) - matchpathcon/selabel_file: Fix man pages (#1219718)- revert support for policy compressed with xv (#1185266)- selinux.py - use os.walk() instead of os.path.walk() (#1195004) - is_selinux_enabled(): drop no-policy-loaded test (#1195074) - fix -Wformat errors and remove deprecated mudflap option- bump release and rebuild so that koji-shadow can rebuild it against new gcc on secondary arch- Rebuilt for https://fedoraproject.org/wiki/Changes/Ruby_2.2- Compiled file context files and the original should have the same permissions from dwalsh@redhat.com - Add selinux_openssh_contexts_path() to get a path to /contexts/openssh_contexts- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild- Rebuilt for https://fedoraproject.org/wiki/Changes/Python_3.4- Update to upstream * Get rid of security_context_t and fix const declarations. * Refactor rpm_execcon() into a new setexecfilecon() from Guillem Jover.- Add selinux_openssh_contexts_path()- Rebuilt for https://fedoraproject.org/wiki/Changes/Ruby_2.1- Fix spelling mistake in man page- More go bindings - restorecon, getpidcon, setexeccon- Add additional go bindings for get*con calls - Add go bindings test command - Modify man pages of set*con calls to mention that they are thread specific- Move selinux.go to /usr/lib64/golang/src/pkg/github.com/selinux/selinux.go - Add Int_to_mcs function to generate MCS labels from integers.- Add ghost flag for /var/run/setrans- Update to upstream * Fix userspace AVC handling of per-domain permissive mode. - Verify context is not null when passed into *setfilecon_raw- revert unexplained change to rhat.patch which broke SELinux disablement- Verify context is not null when passed into lsetfilecon_raw- Mv selinux.go to /usr/share/gocode/src/selinux- Add golang support to selinux.- Remove togglesebool man page- Update to upstream * Remove -lpthread from pkg-config file; it is not required. - Add support for policy compressed with xv- Update to upstream * Fix avc_has_perm() returns -1 even when SELinux is in permissive mode. * Support overriding Makefile RANLIB from Sven Vermeulen. * Update pkgconfig definition from Sven Vermeulen. * Mount sysfs before trying to mount selinuxfs from Sven Vermeulen. * Fix man pages from Laurent Bigonville. * Support overriding PATH and LIBBASE in Makefiles from Laurent Bigonville. * Fix LDFLAGS usage from Laurent Bigonville * Avoid shadowing stat in load_mmap from Joe MacDonald. * Support building on older PCRE libraries from Joe MacDonald. * Fix handling of temporary file in sefcontext_compile from Dan Walsh. * Fix procattr cache from Dan Walsh. * Define python constants for getenforce result from Dan Walsh. * Fix label substitution handling of / from Dan Walsh. * Add selinux_current_policy_path from Dan Walsh. * Change get_context_list to only return good matches from Dan Walsh. * Support udev-197 and higher from Sven Vermeulen and Dan Walsh. * Add support for local substitutions from Dan Walsh. * Change setfilecon to not return ENOSUP if context is already correct from Dan Walsh. * Python wrapper leak fixes from Dan Walsh. * Export SELINUX_TRANS_DIR definition in selinux.h from Dan Walsh. * Add selinux_systemd_contexts_path from Dan Walsh. * Add selinux_set_policy_root from Dan Walsh. * Add man page for sefcontext_compile from Dan Walsh.- Add systemd_contexts support - Do substitutions on a local sub followed by a dist sub- Eliminate requirement on pthread library, by applying patch for Jakub Jelinek Resolves #1013801- Fix handling of libselinux getconlist with only one entry- Add Python constants for SELinux enforcing modes- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild- Add sefcontext_compile.8 man page - Add Russell Coker patch to fix man pages - Add patches from Laurent Bigonville to fix Makefiles for debian. - modify spec file to use %{_prefix}/lib- Fix patch that Handles substitutions for /- Handle substitutions for / - semanage fcontext -a -e / /opt/rh/devtoolset-2/root- Add Eric Paris patch to fix procattr calls after a fork.- Move secolor.conf.5 into mcstrans package and out of libselinux- Fix python bindings for selinux_check_access- Fix reseting the policy root in matchpathcon- Cleanup setfcontext_compile atomic patch - Add matchpathcon -P /etc/selinux/mls support by allowing users to set alternate root - Make sure we set exit codes from selinux_label calls to ENOENT or SUCCESS- Make setfcontext_compile atomic- Fix memory leak in set*con calls.- Move matchpathcon to -utils package - Remove togglesebool- Fix selinux man page to reflect what current selinux policy is.- Add new constant SETRANS_DIR which points to the directory where mstransd can find the socket and libvirt can write its translations files.- Bring back selinux_current_policy_path- Revert some changes which are causing the wrong policy version file to be created- Update to upstream * audit2why: make sure path is nul terminated * utils: new file context regex compiler * label_file: use precompiled filecontext when possible * do not leak mmapfd * sefcontontext_compile: Add error handling to help debug problems in libsemanage. * man: make selinux.8 mention service man pages * audit2why: Fix segfault if finish() called twice * audit2why: do not leak on multiple init() calls * mode_to_security_class: interface to translate a mode_t in to a security class * audit2why: Cleanup audit2why analysys function * man: Fix program synopsis and function prototypes in man pages * man: Fix man pages formatting * man: Fix typo in man page * man: Add references and man page links to _raw function variants * Use ENOTSUP instead of EOPNOTSUPP for getfilecon functions * man: context_new(3): fix the return value description * selinux_status_open: handle error from sysconf * selinux_status_open: do not leak statusfd on exec * Fix errors found by coverity * Change boooleans.subs to booleans.subs_dist. * optimize set*con functions * pkg-config do not specifc ruby version * unmap file contexts on selabel_close() * do not leak file contexts with mmap'd backend * sefcontext_compile: do not leak fd on error * matchmediacon: do not leak fd * src/label_android_property: do not leak fd on error- Update to latest patches from eparis/Upstream- Update to latest patches from eparis/Upstream- Try procatt speedup patch again- Roll back procattr speedups since it seems to be screwing up systemd labeling.- Fix tid handling for setfscreatecon, old patch still broken in libvirt- Fix tid handling for setfscreatecon, old patch still broken in libvirt- setfscreatecon after fork was broken by the Set*con patch. - We needed to reset the thread variables after a fork.- Fix setfscreatecon call to handle failure mode, which was breaking udev- Ondrej Oprala patch to optimize set*con functions - Set*con now caches the security context and only re-sets it if it changes.- Rebuild against latest libsepol- Update to latest patches from eparis/Upstream - Fix errors found by coverity - set the sepol_compute_av_reason_buffer flag to 0. This means calculate denials only? - audit2why: remove a useless policy vers variable - audit2why: use the new constraint information- Rebuild with latest libsepol- Return EPERM if login program can not reach default label for user - Attempt to return container info from audit2why- Apply patch from eparis to fix leaked file descriptor in new labeling code- Add new function mode_to_security_class which takes mode instead of a string. - Possibly will be used with coreutils.- Add back selinuxconlist and selinuxdefcon man pages- Fix segfault from calling audit2why.finish() multiple times- Fix up selinux man page to reference service man pages- Rebuild with fixed libsepol- Update to upstream * Add support for lxc_contexts_path * utils: add service to getdefaultcon * libsemanage: do not set soname needlessly * libsemanage: remove PYTHONLIBDIR and ruby equivalent * boolean name equivalency * getsebool: support boolean name substitution * Add man page for new selinux_boolean_sub function. * expose selinux_boolean_sub * matchpathcon: add -m option to force file type check * utils: avcstat: clear sa_mask set * seusers: Check for strchr failure * booleans: initialize pointer to silence coveriety * stop messages when SELinux disabled * label_file: use PCRE instead of glibc regex functions * label_file: remove all typedefs * label_file: move definitions to include file * label_file: do string to mode_t conversion in a helper function * label_file: move error reporting back into caller * label_file: move stem/spec handling to header * label_file: drop useless ncomp field from label_file data * label_file: move spec_hasMetaChars to header * label_file: fix potential read past buffer in spec_hasMetaChars * label_file: move regex sorting to the header * label_file: add accessors for the pcre extra data * label_file: only run regex files one time * label_file: new process_file function * label_file: break up find_stem_from_spec * label_file: struct reorg * label_file: only run array once when sorting * Ensure that we only close the selinux netlink socket once. * improve the file_contexts.5 manual page- rebuild for https://fedoraproject.org/wiki/Features/Python_3.3- make with_python3 be conditional on fedora- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- Move the tmpfiles.d content from /etc/tmpfiles.d to /usr/lib/tmpfiles.d- Revert Eric Paris Patch for selinux_binary_policy_path- Update to upstream * Fortify source now requires all code to be compiled with -O flag * asprintf return code must be checked * avc_netlink_recieve handle EINTR * audit2why: silence -Wmissing-prototypes warning * libsemanage: remove build warning when build swig c files * matchpathcon: bad handling of symlinks in / * seusers: remove unused lineno * seusers: getseuser: gracefully handle NULL service * New Android property labeling backend * label_android_property whitespace cleanups * additional makefile support for rubywrap- Fix booleans.subs name, change function name to selinux_boolean_sub, add man page, minor fixes to the function- Fix to compile with Fortify source * Add -O compiler flag * Check return code from asprintf - Fix handling of symbolic links in / by realpath_not_final- Add support for lxc contexts file- Add support fot boolean subs file- Update to upstream * Fix dead links to www.nsa.gov/selinux * Remove jump over variable declaration * Fix old style function definitions * Fix const-correctness * Remove unused flush_class_cache method * Add prototype decl for destructor * Add more printf format annotations * Add printf format attribute annotation to die() method * Fix const-ness of parameters & make usage() methods static * Enable many more gcc warnings for libselinux/src/ builds * utils: Enable many more gcc warnings for libselinux/utils builds * Change annotation on include/selinux/avc.h to avoid upsetting SWIG * Ensure there is a prototype for 'matchpathcon_lib_destructor' * Update Makefiles to handle /usrmove * utils: Stop separating out matchpathcon as something special * pkg-config to figure out where ruby include files are located * build with either ruby 1.9 or ruby 1.8 * assert if avc_init() not called * take security_deny_unknown into account * security_compute_create_name(3) * Do not link against python library, this is considered * bad practice in debian * Hide unnecessarily-exported library destructors- Add selinux_current_policy_path to return /sys/fs/selinux/policy if it exists - Otherwise search for policy on disk- Change selinux_binary_policy_path to return /sys/fs/selinux/policy - Add selinux_installed_policy_path to return what selinux_binary_policy_path used to return - avc_has_perm will now return yes if the machine is in permissive mode - Make work with ruby-1.9- avc_netlink_recieve should continue to poll if it receinves an EINTR rather- use /sbin/ldconfig, glibc does not provide /usr/sbin/ldconfig in the RPM database for now- Rebuild with cleaned up upstream to work in /usr- install everything in /usr https://fedoraproject.org/wiki/Features/UsrMove- Add Dan Berrange code cleanup patches.- Fix selabal_open man page to refer to proper selinux_opt structure-Update to upstream * Fix setenforce man page to refer to selinux man page * Cleanup Man pages * merge freecon with getcon man page- Add patch from Richard Haines When selabel_lookup found an invalid context with validation enabled, it always stated it was 'file_contexts' whether media, x, db or file. The fix is to store the spec file name in the selabel_lookup_rec on selabel_open and use this as output for logs. Also a minor fix if key is NULL to stop seg faults. - Fix setenforce manage page.- Rebuild with new libsepol- Fix setenforce man page, from Miroslav Grepl- Upgrade to upstream * selinuxswig_python.i: don't make syscall if it won't change anything * Remove assert in security_get_boolean_names(3) * Mapped compute functions now obey deny_unknown flag * get_default_type now sets EINVAL if no entry. * return EINVAL if invalid role selected * Updated selabel_file(5) man page * Updated selabel_db(5) man page * Updated selabel_media(5) man page * Updated selabel_x(5) man page * Add man/man5 man pages * Add man/man5 man pages * Add man/man5 man pages * use -W and -Werror in utils- Change python binding for restorecon to check if the context matches. - If it does do not reset- Upgrade to upstream * Makefiles: syntax, convert all ${VAR} to $(VAR) * load_policy: handle selinux=0 and /sys/fs/selinux not exist * regenerate .pc on VERSION change * label: cosmetic cleanups * simple interface for access checks * Don't reinitialize avc_init if it has been called previously * seusers: fix to handle large sets of groups * audit2why: close fd on enomem * rename and export symlink_realpath * label_file: style changes to make Eric happy.- Apply libselinux patch to handle large groups in seusers.- Add selinux_check_access function. Needed for passwd, chfn, chsh- Handle situation where selinux=0 passed to the kernel and both /selinux and-Update to upstream * utils: matchpathcon: remove duplicate declaration * src: matchpathcon: use myprintf not fprintf * src: matchpathcon: make sure resolved path starts * put libselinux.so.1 in /lib not /usr/lib * tree: default make target to all not- Switch to use ":" as prefix separator rather then ";"- Avoid unnecessary shell invocation in %post.- Fix handling of subset labeling that is causing segfault in restorecon- Change matchpathcon_init_prefix and selabel_open to allow multiple initial prefixes. Now you can specify a ";" separated list of prefixes and the labeling system will only load regular expressions that match these prefixes.- Change matchpatcon to use proper myprintf - Fix symlink_realpath to always include "/" - Update to upstream * selinux_file_context_verify function returns wrong value. * move realpath helper to matchpathcon library * python wrapper makefile changes- Move to new Makefile that can build with or without PYTHON being set-Update to upstream 2.1.4 2011-0817 * mapping fix for invalid class/perms after selinux_set_mapping * audit2why: work around python bug not defining * resolv symlinks and dot directories before matching 2.1.2 2011-0803 * audit2allow: do not print statistics * make python bindings for restorecon work on relative path * fix python audit2why binding error * support new python3 functions * do not check fcontext duplicates on use * Patch for python3 for libselinux 2.1.1 2011-08-02 * move .gitignore into utils * new setexecon utility * selabel_open fix processing of substitution files * mountpoint changing patch. * simplify SRCS in Makefile 2.1.1 2011-08-01 * Remove generated files, introduce more .gitignore-Update to upstream * Release, minor version bump * Give correct names to mount points in load_policy by Dan Walsh. * Make sure selinux state is reported correctly if selinux is disabled or fails to load by Dan Walsh. * Fix crash if selinux_key_create was never called by Dan Walsh. * Add new file_context.subs_dist for distro specific filecon substitutions by Dan Walsh. * Update man pages for selinux_color_* functions by Richard Haines.- Only call dups check within selabel/matchpathcon if you are validating the context - This seems to speed the loading of labels by 4 times.- Move /selinux to /sys/fs/selinux - Add selinuxexeccon - Add realpath to matchpathcon to handle matchpathcon * type queries.- Update for latest libsepol- Update for latest libsepol- Fix restorecon python binding to accept relative paths-Update to upstream * Give correct names to mount points in load_policy by Dan Walsh. * Make sure selinux state is reported correctly if selinux is disabled or fails to load by Dan Walsh. * Fix crash if selinux_key_create was never called by Dan Walsh. * Add new file_context.subs_dist for distro specific filecon substitutions by Dan Walsh. * Update man pages for selinux_color_* functions by Richard Haines.- Clean up patch to make handling of constructor cleanup more portable * db_language object class support for selabel_lookup from KaiGai Kohei. * Library destructors for thread local storage keys from Eamon Walsh.- Add distribution subs pathAdd patch from dbhole@redhat.com to initialize thread keys to -1 Errors were being seen in libpthread/libdl that were related to corrupt thread specific keys. Global destructors that are called on dl unload. During destruction delete a thread specific key without checking if it has been initialized. Since the constructor is not called each time (i.e. key is not initialized with pthread_key_create each time), and the default is 0, there is a possibility that key 0 for an active thread gets deleted. This is exactly what is happening in case of OpenJDK. Workaround patch that initializes the key to -1. Thus if the constructor is not called, the destructor tries to delete key -1 which is deemed invalid by pthread_key_delete, and is ignored.- Call fini_selinuxmnt if selinux is disabled, to cause is_selinux_disabled() to report correct data- Change mount source options to use "proc" and "selinuxfs"- Update to upstream * Turn off default user handling when computing user contexts by Dan Walsh- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- Fixup selinux man page- Fix Makefile to use pkg-config --cflags python3 to discover include paths- Update to upstream - Turn off fallback in to SELINUX_DEFAULTUSER in get_context_list- Update to upstream * Thread local storage fixes from Eamon Walsh.- Add /etc/tmpfiles.d support for /var/run/setrans- Ghost /var/run/setrans- Rebuilt for gcc bug 634757- rebuild via updated swig (#624674)- Update for python 3.2a1- Turn off fallback in to SELINUX_DEFAULTUSER in get_context_list- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild- Turn off messages in audit2why- Update to upstream * Add const qualifiers to public API where appropriate by KaiGai Kohei. 2.0.95 2010-06-10 * Remove duplicate slashes in paths in selabel_lookup from Chad Sellers * Adds a chcon method to the libselinux python bindings from Steve Lawrence - add python3 subpackage from David Malcolm* Set errno=EINVAL for invalid contexts from Dan Walsh.- Update to upstream * Show strerror for security_getenforce() by Colin Waters. * Merged selabel database support by KaiGai Kohei. * Modify netlink socket blocking code by KaiGai Kohei.- Update to upstream * Fix from Eric Paris to fix leak on non-selinux systems. * regenerate swig wrappers * pkgconfig fix to respect LIBDIR from Dan Walsh.- Update to upstream * Change the AVC to only audit the permissions specified by the policy, excluding any permissions specified via dontaudit or not specified via auditallow. * Fix compilation of label_file.c with latest glibc headers.- Fix potential doublefree on init- Fix libselinux.pc- Fix man page for selinuxdefcon- Free memory on disabled selinux boxes- Update to upstream * add/reformat man pages by Guido Trentalancia . * Change exception.sh to be called with bash by Manoj Srivastava - Fix selinuxdefcon man page- Update to upstream * Add pkgconfig file from Eamon Walsh.- Update to upstream * Rename and export selinux_reset_config()- Update to upstream * Add exception handling in libselinux from Dan Walsh. This uses a shell script called exception.sh to generate a swig interface file. * make swigify * Make matchpathcon print <> if path not found in fcontext file.- Eliminate -pthread switch in Makefile- Update to upstream * Removal of reference counting on userspace AVC SID's.- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- Update to upstream * Reverted Tomas Mraz's fix for freeing thread local storage to avoid pthread dependency. * Removed fini_context_translations() altogether. * Merged lazy init patch from Stephen Smalley based on original patch by Steve Grubb.- Update to upstream * Add per-service seuser support from Dan Walsh. * Let load_policy gracefully handle selinuxfs being mounted from Stephen Smalley. * Check /proc/filesystems before /proc/mounts for selinuxfs from Eric Paris.- Add provices ruby(selinux)- Update to upstream * Fix improper use of thread local storage from Tomas Mraz . * Label substitution support from Dan Walsh. * Support for labeling virtual machine images from Dan Walsh.- Update to upstream * Trim / from the end of input paths to matchpathcon from Dan Walsh. * Fix leak in process_line in label_file.c from Hiroshi Shinji. * Move matchpathcon to /sbin, add matchpathcon to clean target from Dan Walsh. * getdefaultcon to print just the correct match and add verbose option from Dan Walsh.- Update to upstream * deny_unknown wrapper function from KaiGai Kohei. * security_compute_av_flags API from KaiGai Kohei. * Netlink socket management and callbacks from KaiGai Kohei.- Fix Memory Leak- Fix crash in python- Add back in additional interfaces- Add back in av_decision to python swig- Update to upstream * Netlink socket handoff patch from Adam Jackson. * AVC caching of compute_create results by Eric Paris.- Add patch from ajax to accellerate X SELinux - Update eparis patch- Add eparis patch to accellerate Xwindows performance- Fix URL- Add substitute pattern - matchpathcon output <> on ENOENT- Update to upstream * Fix incorrect conversion in discover_class code.- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild- Add - selinux_virtual_domain_context_path - selinux_virtual_image_context_path- Throw exeptions in python swig bindings on failures- Fix restorecon python code- Update to upstream- Strip trailing / for matchpathcon- Fix segfault if seusers file does not work- Add new function getseuser which will take username and service and return - seuser and level. ipa will populate file in future. - Change selinuxdefcon to return just the context by default- Rebuild for Python 2.6- Update to Upstream * Allow shell-style wildcards in x_contexts file.- Eamon Walsh Patch - libselinux: allow shell-style wildcarding in X names - Add Restorecon/Install python functions from Luke Macken- Update to Upstream * Correct message types in AVC log messages. * Make matchpathcon -V pass mode from Dan Walsh. * Add man page for selinux_file_context_cmp from Dan Walsh.- Update to Upstream * New man pages from Dan Walsh. * Update flask headers from refpolicy trunk from Dan Walsh.- Fix matchpathcon -V call- Add flask definitions for open, X and nlmsg_tty_audit- Add missing get/setkeycreatecon man pages- Split out utilities- Add missing man page links for [lf]getfilecon- Update to Upstream * Add group support to seusers using %groupname syntax from Dan Walsh. * Mark setrans socket close-on-exec from Stephen Smalley. * Only apply nodups checking to base file contexts from Stephen Smalley.- Update to Upstream * Merge ruby bindings from Dan Walsh. - Add support for Linux groups to getseuserbyname- Allow group handling in getseuser call- Update to Upstream * Handle duplicate file context regexes as a fatal error from Stephen Smalley. This prevents adding them via semanage. * Fix audit2why shadowed variables from Stephen Smalley. * Note that freecon NULL is legal in man page from Karel Zak.- Add ruby support for puppet- Rebuild for new libsepol- Add Karel Zak patch for freecon man page- Update to Upstream * New and revised AVC, label, and mapping man pages from Eamon Walsh. * Add swig python bindings for avc interfaces from Dan Walsh.- Update to Upstream * Fix selinux_file_context_verify() and selinux_lsetfilecon_default() to call matchpathcon_init_prefix if not already initialized. * Add -q qualifier for -V option of matchpathcon and change it to indicate whether verification succeeded or failed via exit status.- libselinux no longer neets to telnet -u in post install- Add sedefaultcon and setconlist commands to dump login context- Update to Upstream * Fixed selinux_set_callback man page. * Try loading the max of the kernel-supported version and the libsepol-supported version when no manipulation of the binary policy is needed from Stephen Smalley. * Fix memory leaks in matchpathcon from Eamon Walsh.- Add Xavior Toth patch for security_id_t in swig- Add avc.h to swig code- Grab the latest policy for the kernel- Update to Upstream * Man page typo fix from Jim Meyering.- Update to Upstream * Changed selinux_init_load_policy() to not warn about a failed mount of selinuxfs if selinux was disabled in the kernel.- Fix matchpathcon memory leak- Update to Upstream * Merged new X label "poly_selection" namespace from Eamon Walsh.- Update to Upstream * Merged reset_selinux_config() for load policy from Dan Walsh.- Reload library on loading of policy to handle chroot- Update to Upstream * Merged avc_has_perm() errno fix from Eamon Walsh.- Update to Upstream * Regenerated Flask headers from refpolicy flask definitions.- Update to Upstream * Merged compute_member AVC function and manpages from Eamon Walsh. * Provide more error reporting on load policy failures from Stephen Smalley.- Update to Upstream * Merged new X label "poly_prop" namespace from Eamon Walsh.- Update to Upstream * Disable setlocaldefs if no local boolean or users files are present from Stephen Smalley. * Skip userspace preservebools processing for Linux >= 2.6.22 from Stephen Smalley.- Update to Upstream * Merged fix for audit2why from Dan Walsh.- Fix audit2why to grab latest policy versus the one selected by the kernel* Merged audit2why python binding from Dan Walsh.* Merged updated swig bindings from Dan Walsh, including typemap for pid_t.- Update to use libsepol-static library- Move libselinux.a to -static package - Spec cleanups- Put back libselinux.a- Fix memory references in audit2why and change to use tuples - Update to Upstream * Fix for the avc: granted null message bug from Stephen Smalley.- Fix __init__.py specification- Add audit2why python bindings- Add pid_t typemap for swig bindings- smp_mflag- Fix spec file caused by spec review- Upgrade to upstream * matchpathcon(8) man page update from Dan Walsh.- Upgrade to upstream * dlopen libsepol.so.1 rather than libsepol.so from Stephen Smalley. * Based on a suggestion from Ulrich Drepper, defer regex compilation until we have a stem match, by Stephen Smalley. * A further optimization would be to defer regex compilation until we have a complete match of the constant prefix of the regex - TBD.- Upgrade to upstream * Regenerated Flask headers from policy.- Upgrade to upstream * AVC enforcing mode override patch from Eamon Walsh. * Aligned attributes in AVC netlink code from Eamon Walsh. - Move libselinux.so back into devel package, procps has been fixed- Upgrade to upstream * Merged refactored AVC netlink code from Eamon Walsh. * Merged new X label namespaces from Eamon Walsh. * Bux fix and minor refactoring in string representation code.- Upgrade to upstream * Merged selinux_get_callback, avc_open, empty string mapping from Eamon Walsh.- Upgrade to upstream * Fix segfault resulting from missing file_contexts file.- Fix segfault on missing file_context file- Upgrade to upstream * Make netlink socket close-on-exec to avoid descriptor leakage from Dan Walsh. * Pass CFLAGS when using gcc for linking from Dennis Gilmore.- Add sparc patch to from Dennis Gilmore to build on Sparc platform- Remove leaked file descriptor- Upgrade to latest from NSA * Fix selabel option flag setting for 64-bit from Stephen Smalley.- Change matchpatcon to use syslog instead of syserror- Upgrade to latest from NSA * Re-map a getxattr return value of 0 to a getfilecon return value of -1 with errno EOPNOTSUPP from Stephen Smalley. * Fall back to the compat code for security_class_to_string and security_av_perm_to_string from Stephen Smalley. * Fix swig binding for rpm_execcon from James Athey.- Apply James Athway patch to fix rpm_execcon python binding- Move libselinux.so back into main package, breaks procps- Upgrade to upstream * Fix file_contexts.homedirs path from Todd Miller.- Remove requirement on setransd, Moved to selinux-policy-mls- Move libselinux.so into devel package - Upgrade to upstream * Fix segfault resulting from uninitialized print-callback pointer. * Added x_contexts path function patch from Eamon Walsh. * Fix build for EMBEDDED=y from Yuichi Nakamura. * Fix markup problems in selinux man pages from Dan Walsh.- Upgrade to upstream * Updated version for stable branch. * Added x_contexts path function patch from Eamon Walsh. * Fix build for EMBEDDED=y from Yuichi Nakamura. * Fix markup problems in selinux man pages from Dan Walsh. * Updated av_permissions.h and flask.h to include new nscd permissions from Dan Walsh. * Added swigify to top-level Makefile from Dan Walsh. * Fix for string_to_security_class segfault on x86_64 from Stephen Smalley.- Apply Steven Smalley patch to fix segfault in string_to_security_class- Fix matchpathcon to set default myprintf- Upgrade to upstream * Fix for getfilecon() for zero-length contexts from Stephen Smalley.- Update to match flask/access_vectors in policy- Fix man page markup lanquage for translations- Fix semanage segfault on x86 platform- Upgrade to upstream * Labeling and callback interface patches from Eamon Walsh.- Refactored swig- Upgrade to upstream * Class and permission mapping support patches from Eamon Walsh. * Object class discovery support patches from Chris PeBenito. * Refactoring and errno support in string representation code.- Upgrade to upstream - Merged patch to reduce size of libselinux and remove need for libsepol for embedded systems from Yuichi Nakamura. This patch also turns the link-time dependency on libsepol into a runtime (dlopen) dependency even in the non-embedded case. 2.0.17 2007-05-31 * Updated Lindent script and reindented two header files.- Upgrade to upstream * Merged additional swig python bindings from Dan Walsh. * Merged helpful message when selinuxfs mount fails patch from Dax Kelson.- Upgrade to upstream * Merged build fix for avc_internal.c from Joshua Brindle.- Add get_context_list funcitions to swig file- Upgrade to upstream * Merged rpm_execcon python binding fix, matchpathcon man page fix, and getsebool -a handling for EACCES from Dan Walsh.- Add missing interface- Upgrade to upstream * Merged support for getting initial contexts from James Carter.- Upgrade to upstream * Merged userspace AVC patch to follow kernel's behavior for permissive mode in caching previous denials from Eamon Walsh. * Merged sidput(NULL) patch from Eamon Walsh.- Make rpm_exec swig work- Upgrade to upstream * Merged class/av string conversion and avc_compute_create patch from Eamon Walsh.- Upgrade to upstream * Merged fix for avc.h #include's from Eamon Walsh.- Add stdint.h to avc.h- Merged patch to drop support for CACHETRANS=0 config option from Steve Grubb. - Merged patch to drop support for old /etc/sysconfig/selinux and - /etc/security policy file layout from Steve Grubb.- Do not fail on permission denied in getsebool- Upgrade to upstream * Merged init_selinuxmnt() and is_selinux_enabled() improvements from Steve Grubb.- Upgrade to upstream * Removed sending of setrans init message. * Merged matchpathcon memory leak fix from Steve Grubb.- Upgrade to upstream * Merged more swig initializers from Dan Walsh.- Upgrade to upstream * Merged patch from Todd Miller to convert int types over to C99 style.- Merged patch from Todd Miller to remove sscanf in matchpathcon.c because of the use of the non-standard format (original patch changed for style). - Merged patch from Todd Miller to fix memory leak in matchpathcon.c.- Add context function to python to split context into 4 parts- Upgrade to upstream * Updated version for stable branch.- Upgrade to upstream * Merged man page updates to make "apropos selinux" work from Dan Walsh.- Upgrade to upstream * Merged getdefaultcon utility from Dan Walsh.- Add Ulrich NSCD__GETSERV and NSCD__SHMEMGRP for Uli- Add reference to selinux man page in all man pages to make apropos work Resolves: # 217881- Upstream wanted some minor changes, upgrading to keep api the same - Upgrade to upstream * Merged selinux_check_securetty_context() and support from Dan Walsh. Resolves: #200110- Cleanup patch- Add securetty handling Resolves: #200110- Upgrade to upstream * Merged patch for matchpathcon utility to use file mode information when available from Dan Walsh.- rebuild against python 2.5- Fix matchpathcon to lstat files- Update man page- Upgrade to upstream- Add James Antill patch for login verification of MLS Levels - MLS ragnes need to be checked, Eg. login/cron. This patch adds infrastructure.- Upgrade to latest from NSA * Merged updated flask definitions from Darrel Goeddel. This adds the context security class, and also adds the string definitions for setsockcreate and polmatch.- Upgrade to latest from NSA * Updated version for release.- rebuilt for unwind info generation, broken in gcc-4.1.1-21- Upgrade to latest from NSA * Merged av_permissions.h update from Steve Grubb, adding setsockcreate and polmatch definitions.- really make -devel depend on libsepol-devel- Add sgrubb patch for polmatch- Upgrade to latest from NSA * Merged patch from Steve Smalley to fix SIGPIPE in setrans_client- have -devel require libsepol-devel- Upgrade to latest from NSA * Merged patch to not log avc stats upon a reset from Steve Grubb. * Applied patch to revert compat_net setting upon policy load. * Merged file context homedir and local path functions from Chris PeBenito.- rebuilt with latest binutils to pick up 64K -z commonpagesize on ppc* (#203001)- Upgrade to latest from NSA * Merged file context homedir and local path functions from Chris PeBenito. * Rework functions that access /proc/pid/attr to access the per-thread nodes, and unify the code to simplify maintenance.- Upgrade to latest from NSA * Merged return value fix for *getfilecon() from Dan Walsh. * Merged sockcreate interfaces from Eric Paris.- Fix translation return codes to return size of buffer- Upgrade to latest from NSA * Merged no-tls-direct-seg-refs patch from Jeremy Katz. * Merged netfilter_contexts support patch from Chris PeBenito.- Upgrade to latest from NSA * Merged context_*_set errno patch from Jim Meyering.- only build non-fpic objects with -mno-tls-direct-seg-refs- build with -mno-tls-direct-seg-refs on x86 to avoid triggering segfaults with xen (#200783)- Rebuild for new gcc- Fix libselinux to not telinit during installs- Upgrade to latest from NSA * Lindent. * Merged {get,set}procattrcon patch set from Eric Paris. * Merged re-base of keycreate patch originally by Michael LeMay from Eric Paris. * Regenerated Flask headers from refpolicy. * Merged patch from Dan Walsh with: - Added selinux_file_context_{cmp,verify}. - Added selinux_lsetfilecon_default. - Delay translation of contexts in matchpathcon.- Yet another change to matchpathcon- Turn off error printing in library. Need to compile with DEBUG to get it back- Fix error reporting of matchpathcon- Add function to compare file context on disk versus contexts in file_contexts file.- Upgrade to latest from NSA * Merged patch from Dan Walsh with: * Added selinux_getpolicytype() function. * Modified setrans code to skip processing if !mls_enabled. * Set errno in the !selinux_mnt case. * Allocate large buffers from the heap, not on stack. Affects is_context_customizable, selinux_init_load_policy, and selinux_getenforcemode.- Add selinux_getpolicytype()- Upgrade to latest from NSA * Merged !selinux_mnt checks from Ian Kent.- Check for selinux_mnt == NULL- Merged matchmediacon and trans_to_raw_context fixes from Serge Hallyn.- Remove getseuser- Bump requires to grab latest libsepol- Add BuildRequires for swig- Upgrade to latest from NSA * Merged simple setrans client cache from Dan Walsh. Merged avcstat patch from Russell Coker. * Modified selinux_mkload_policy() to also set /selinux/compat_net appropriately for the loaded policy.- More fixes for translation cache - Upgrade to latest from NSA * Added matchpathcon_fini() function to free memory allocated by matchpathcon_init().- Add simple cache to improve translation speed- Upgrade to latest from NSA * Merged setrans client cleanup patch from Steve Grubb.- Add Russell's AVC patch to handle large numbers- Upgrade to latest from NSA * Merged getfscreatecon man page fix from Dan Walsh. * Updated booleans(8) man page to drop references to the old booleans file and to note that setsebool can be used to set the boot-time defaults via -P.- Upgrade to latest from NSA * Merged fix warnings patch from Karl MacMillan. * Merged setrans client support from Dan Walsh. This removes use of libsetrans. * Merged patch to eliminate use of PAGE_SIZE constant from Dan Walsh. * Merged swig typemap fixes from Glauber de Oliveira Costa.- Change the way translations work, Use setransd/remove libsetrans- Add selinuxswig fixes - Stop using PAGE_SIZE and start using sysconf(_SC_PAGE_SIZE)- Upgrade to latest from NSA * Added distclean target to Makefile. * Regenerated swig files. * Changed matchpathcon_init to verify that the spec file is a regular file. * Merged python binding t_output_helper removal patch from Dan Walsh.- Fix python bindings for matchpathcon - Fix booleans man page- Merged Makefile PYLIBVER definition patch from Dan Walsh.- Make some fixes so it will build on RHEL4 - Upgrade to latest from NSA * Updated version for release. * Altered rpm_execcon fallback logic for permissive mode to also handle case where /selinux/enforce is not available.- bump again for double-long bug on ppc(64)- rebuilt for new gcc4.1 snapshot and glibc changes- Upgrade to latest from NSA * Merged install-pywrap Makefile patch from Joshua Brindle.- Upgrade to latest from NSA * Merged pywrap Makefile patch from Dan Walsh.- Split out pywrap in Makefile- Upgrade to latest from NSA * Added getseuser test program.- Upgrade to latest from NSA * Added format attribute to myprintf in matchpathcon.c and removed obsoleted rootlen variable in init_selinux_config().- Build with new libsepol- Upgrade to latest from NSA * Merged several fixes and improvements from Ulrich Drepper (Red Hat), including: - corrected use of getline - further calls to __fsetlocking for local files - use of strdupa and asprintf - proper handling of dirent in booleans code - use of -z relro - several other optimizations * Merged getpidcon python wrapper from Dan Walsh (Red Hat).- Add build requires line for libsepol-devel- Fix swig call for getpidcon- Move libselinux.so to base package- Upgrade to latest from NSA * Merged call to finish_context_translations from Dan Walsh. This eliminates a memory leak from failing to release memory allocated by libsetrans.- update to latest libsetrans - Fix potential memory leak- rebuilt- Update to never version * Merged patch for swig interfaces from Dan Walsh.- Update to never version- Fix some of the python swig objects- Update to latest from NSA * Added MATCHPATHCON_VALIDATE flag for set_matchpathcon_flags() and modified matchpathcon implementation to make context validation/ canonicalization optional at matchpathcon_init time, deferring it to a successful matchpathcon by default unless the new flag is set by the caller. * Added matchpathcon_init_prefix() interface, and reworked matchpathcon implementation to support selective loading of file contexts entries based on prefix matching between the pathname regex stems and the specified path prefix (stem must be a prefix of the specified path prefix).- Update to latest from NSA * Change getsebool to return on/off instead of active/inactive- Update to latest from NSA * Added -f file_contexts option to matchpathcon util. Fixed warning message in matchpathcon_init(). * Merged Makefile python definitions patch from Dan Walsh.- Update to latest from NSA * Merged swigify patch from Dan Walsh.- Separate out libselinux-python bindings into separate rpm- Read libsetrans requirement- Add python bindings- Update to latest from NSA * Merged make failure in rpm_execcon non-fatal in permissive mode patch from Ivan Gyurdiev.- Remove requirement for libsetrans- Update to latest from NSA * Added MATCHPATHCON_NOTRANS flag for set_matchpathcon_flags() and modified matchpathcon_init() to skip context translation if it is set by the caller.- Update to latest from NSA * Added security_canonicalize_context() interface and set_matchpathcon_canoncon() interface for obtaining canonical contexts. Changed matchpathcon internals to obtain canonical contexts by default. Provided fallback for kernels that lack extended selinuxfs context interface. - Patch to not translate mls when calling setfiles- Update to latest from NSA * Merged seusers parser changes from Ivan Gyurdiev. * Merged setsebool to libsemanage patch from Ivan Gyurdiev. * Changed seusers parser to reject empty fields.- Update to latest from NSA * Merged seusers empty level handling patch from Jonathan Kim (TCS).- Rebuild for latest libsepol- Rebuild for latest libsepol- Change default to __default__- Change default to __default__- Add selinux_translations_path- Update to latest from NSA * Merged selinux_path() and selinux_homedir_context_path() functions from Joshua Brindle.- Need to check for /sbin/telinit- Update to latest from NSA * Merged fixes for make DESTDIR= builds from Joshua Brindle.- Update to latest from NSA * Merged get_default_context_with_rolelevel and man pages from Dan Walsh (Red Hat). * Updated call to sepol_policydb_to_image for sepol changes. * Changed getseuserbyname to ignore empty lines and to handle no matching entry in the same manner as no seusers file.- Tell init to reexec itself in post script- Update to latest from NSA * Changed selinux_mkload_policy to try downgrading the latest policy version available to the kernel-supported version. * Changed selinux_mkload_policy to fall back to the maximum policy version supported by libsepol if the kernel policy version falls outside of the supported range.- Update to latest from NSA * Changed getseuserbyname to fall back to the Linux username and NULL level if seusers config file doesn't exist unless REQUIRESEUSERS=1 is set in /etc/selinux/config. * Moved seusers.conf under $SELINUXTYPE and renamed to seusers.- Update to latest from NSA * Added selinux_init_load_policy() function as an even higher level interface for the initial policy load by /sbin/init. This obsoletes the load_policy() function in the sysvinit-selinux.patch. * Added selinux_mkload_policy() function as a higher level interface for loading policy than the security_load_policy() interface.- Update to latest from NSA * Merged fix for matchpathcon (regcomp error checking) from Johan Fischer. Also added use of regerror to obtain the error string for inclusion in the error message.- Update to latest from NSA * Changed getseuserbyname to not require (and ignore if present) the MLS level in seusers.conf if MLS is disabled, setting *level to NULL in this case.- Update to latest from NSA * Merged getseuserbyname patch from Dan Walsh.- Fix patch to satisfy upstream- Update to latest from NSA - Add getseuserbyname- Fix patch call- Fix strip_con call- Go back to original libsetrans code- Eliminate forth param from mls context when mls is not enabled.- Update from NSA * Merged modified form of patch to avoid dlopen/dlclose by the static libselinux from Dan Walsh. Users of the static libselinux will not have any context translation by default.- Update from NSA * Added public functions to export context translation to users of libselinux (selinux_trans_to_raw_context, selinux_raw_to_trans_context).- Update from NSA * Remove special definition for context_range_set; use common code.- Update from NSA * Hid translation-related symbols entirely and ensured that raw functions have hidden definitions for internal use. * Allowed setting NULL via context_set* functions. * Allowed whitespace in MLS component of context. * Changed rpm_execcon to use translated functions to workaround lack of MLS level on upgraded systems.- Allow set_comp on unset ranges- Merged context translation patch, originally by TCS, with modifications by Dan Walsh (Red Hat).- Apply translation patch- Update from NSA * Merged several fixes for error handling paths in the AVC sidtab, matchpathcon, booleans, context, and get_context_list code from Serge Hallyn (IBM). Bugs found by Coverity. * Removed setupns; migrated to pam. * Merged patches to rename checkPasswdAccess() from Joshua Brindle. Original symbol is temporarily retained for compatibility until all callers are updated.- Update makefiles- Update from NSA * Merged security_setupns() from Chad Sellers. - fix selinuxenabled man page- Update from NSA * Merged avcstat and selinux man page from Dan Walsh. * Changed security_load_booleans to process booleans.local even if booleans file doesn't exist.- Fix avcstat to clear totals- Add info to man page- Update from NSA * Merged set_selinuxmnt patch from Bill Nottingham (Red Hat). * Rewrote get_ordered_context_list and helpers, including changing logic to allow variable MLS fields.- Update from NSA- Add backin matchpathcon- Fix selinux_policy_root man page- Change assert(selinux_mnt) to if (!selinux_mnt) return -1;- Update from NSA * Fixed bug in matchpathcon_filespec_destroy.- Update from NSA * Fixed bug in rpm_execcon error handling path.- Update from NSA * Merged fix for set_matchpathcon* functions from Andreas Steinmetz. * Merged fix for getconlist utility from Andreas Steinmetz.- Update from NSA- Better handling of booleans- Update from NSA * Merged destructors patch from Tomas Mraz.- Update from NSA * Added set_matchpathcon_flags() function for setting flags controlling operation of matchpathcon. MATCHPATHCON_BASEONLY means only process the base file_contexts file, not file_contexts.homedirs or file_contexts.local, and is for use by setfiles -c. * Updated matchpathcon.3 man page.- Update from NSA- Update from NSA * Fixed bug in matchpathcon_filespec_add() - failure to clear fl_head.- Update from NSA * Changed matchpathcon_common to ignore any non-format bits in the mode.- Default matchpathcon to regular files if the user specifies a mode- Update from NSA * Merged several fixes from Ulrich Drepper.- Fix matchpathcon on eof.- Update from NSA * Merged matchpathcon patch for file_contexts.homedir from Dan Walsh. * Added selinux_users_path() for path to directory containing system.users and local.users.- Process file_context.homedir- Update from NSA * Changed relabel Makefile target to use restorecon.- Update from NSA * Regenerated av_permissions.h.- Update from NSA * Modified avc_dump_av to explicitly check for any permissions that cannot be mapped to string names and display them as a hex value. * Regenerated av_permissions.h.- Update from NSA * Generalized matchpathcon internals, exported more interfaces, and moved additional code from setfiles into libselinux so that setfiles can directly use matchpathcon.- Update from NSA * Prevent overflow of spec array in matchpathcon. * Fixed several uses of internal functions to avoid relocations. * Changed rpm_execcon to check is_selinux_enabled() and fallback to a regular execve if not enabled (or unable to determine due to a lack of /proc, e.g. chroot'd environment).- Update from NSA * Merged minor fix for avcstat from Dan Walsh.- rpmexeccon should not fail in permissive mode.- fix printf in avcstat- Update from NSA- Modify matchpathcon to also process file_contexts.local if it exists- Add is_customizable_types function call- Update to latest from upstream * Just changing version number to match upstream- Update to latest from upstream * Changed matchpathcon to return -1 with errno ENOENT for <> entries, and also for an empty file_contexts configuration.- Fix link devel libraries- Fix unitialized variable in avcstat.c- Upgrade to upstream * Removed some trivial utils that were not useful or redundant. * Changed BINDIR default to /usr/sbin to match change in Fedora. * Added security_compute_member. * Added man page for setcon.- Upgrade to upstream- Add avcstat program- Add lots of missing man pages- Fix output of getsebool.- Update from upstream, fix setsebool -P segfault- Add a patch from upstream. Fixes signed/unsigned issues, and incomplete structure copy.- More fixes from sgrubb, better syslog- Have setsebool and togglesebool log changes to syslog- Add patch to make setsebool update bool on disk - Make togglesebool have a rollback capability in case it blows up inflight- Upgrade to latest from NSA- Changed the location of the utilities to /usr/sbin since normal users can't use them anyways.- Updated various utilities, removed utilities that are for testing, added man pages.- Add -g flag to make - Upgrade to latest from NSA * Added rpm_execcon.- Upgrade to latest from NSA * Merged setenforce and removable context patch from Dan Walsh. * Merged build fix for alpha from Ulrich Drepper. * Removed copyright/license from selinux_netlink.h - definitions only.- Change setenforce to accept Enforcing and Permissive- Add alpha patch- Upgrade to latest from NSA- Add selinux_removable_context_path- Update from NSA * Add matchmediacon- Update from NSA * Merged in matchmediacon changes.- Update from NSA * Regenerated headers for new nscd permissions.- Add matchmediacon- Update from NSA * Added get_default_context_with_role.- Clean up spec file * Patch from Matthias Saou- Update from NSA * Added set_matchpathcon_printf.- Update from NSA * Reworked av_inherit.h to allow easier re-use by kernel.- Add strcasecmp in selinux_config - Update from NSA * Changed avc_has_perm_noaudit to not fail on netlink errors. * Changed avc netlink code to check pid based on patch by Steve Grubb. * Merged second optimization patch from Ulrich Drepper. * Changed matchpathcon to skip invalid file_contexts entries. * Made string tables private to libselinux. * Merged strcat->stpcpy patch from Ulrich Drepper. * Merged matchpathcon man page from Dan Walsh. * Merged patch to eliminate PLTs for local syms from Ulrich Drepper. * Autobind netlink socket. * Dropped compatibility code from security_compute_user. * Merged fix for context_range_set from Chad Hanson. * Merged allocation failure checking patch from Chad Hanson. * Merged avc netlink error message patch from Colin Walters.- Update from NSA * Merged second optimization patch from Ulrich Drepper. * Changed matchpathcon to skip invalid file_contexts entries. * Made string tables private to libselinux. * Merged strcat->stpcpy patch from Ulrich Drepper. * Merged matchpathcon man page from Dan Walsh. * Merged patch to eliminate PLTs for local syms from Ulrich Drepper. * Autobind netlink socket. * Dropped compatibility code from security_compute_user. * Merged fix for context_range_set from Chad Hanson. * Merged allocation failure checking patch from Chad Hanson. * Merged avc netlink error message patch from Colin Walters.- Update from NSA - Add optflags- Update from NSA- Add matchpathcon man page - Latest from NSA * Merged patch to eliminate PLTs for local syms from Ulrich Drepper. * Autobind netlink socket. * Dropped compatibility code from security_compute_user. * Merged fix for context_range_set from Chad Hanson. * Merged allocation failure checking patch from Chad Hanson. * Merged avc netlink error message patch from Colin Walters.- Latest from NSA * Autobind netlink socket. * Dropped compatibility code from security_compute_user. * Merged fix for context_range_set from Chad Hanson. * Merged allocation failure checking patch from Chad Hanson. * Merged avc netlink error message patch from Colin Walters.- Latest from NSA- New upstream version- Latest from Upstream- Fix man pages- Latest from Upstream- Latest from Upstream- Add man page for boolean functions and SELinux- Latest from NSA- Latest from NSA- uppercase getenforce returns, to make them match system-config-securitylevel- Remove old path patch- Update to latest from NSA - Add fix to only get old path if file_context file exists in old location- Update to latest from NSA- add nlclass patch - Update to latest from NSA- rebuilt- Fix selinux_config to break once it finds SELINUXTYPE.-Update with latest from NSA- Change to use new policy mechanism- add man patch- Update with latest from NSA- Update with latest from NSA- Add changes for relaxed policy - Update to match NSA- Add relaxed policy changes- Sync with NSA- Remove requires glibc>2.3.4- Fix selinuxenabled man page.- Upgrade to 1.11- Add memleaks patch- Upgrade to latest from NSA and add more man pages- Update to match NSA - Cleanup some man pages- Upgrade to latest from NSA- Add Russell's Man pages- Change getenforce to also check is_selinux_enabled- Add ownership to /usr/include/selinux- fix location of file_contexts file.- Fix matchpathcon to use BUFSIZ- rebuilt- add matchpathcon- rebuilt- Add rootok patch- Updated getpeernam patch- Add getpeernam patch- Add getpeercon patch- Put mntpoint patch, because found fix for SysVinit- Add remove mntpoint patch, because it breaks SysVinit- Add mntpoint patch for SysVinit- Add -r -u -t to getcon- Upgrade to latest from NSA- Fix x86_64 build- Latest tarball from NSA.- Update with latest changes from NSA- Change location of .so file- Break out into development library- Move location of libselinux.so to /lib- Add selinuxenabled patch- Update with final NSA 1.2 sources.- Update with latest from NSA.- Fix to build on x86_64- update for version 1.2- Initial version2.9-8.el82.9-8.el8libselinux.a/usr/lib64/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protectioncpioxz2aarch64-redhat-linux-gnucurrent ar archiveutf-86c3cd35bfa83db0360066cc5964932020bc50d711fbf96ecff1622c6893dda02?p7zXZ !#,Oa] b2u Q{LUXΪLEwQʣ hՈ,&9 k`>t:tB8 ?sf<7h&O;2ȹQ|4#bdIC"&Z>btZ4`mDnj p9L:kLs!+2 *JL<\imYKɁBc|ҎBժ }^R,/w6BE 7V6rf#6oZEƆ!kHWGvvo=.o̕#[AE aۑ+MsA{ArF/e눭i 7c$^ݰ<;w: 3䖖(@!=6'3aqP?wJmp#XM2}F) )z`{JTJiAH[.ui'FPw`y~~fJJq@v6Ůu},{PG?I="p ۅS >a^ògK=*=^ hFDϦՌq*\S` 杯(UQjjɖBt늱<24ha ׼ܼD!e!80{^ad8tfp=?CРbզzW]>M!ÿs|\m0&:HqhyI$V x.SvQS}#-LMq=ekdFգ,uT3{u17Ntmrd]o19li$kZJy=i*u:Jb2jYРus? OG1\KL6x+c{:z #s"~X8&FSÀ3ѫS0BQ(x`u"G?8d@,uSR4, noGJYac㛄PpѲOV J ^Dt$7:f7L (M˧ )F =Q\Fd/|"'jVqL5:m,5J4_l?TU;5KgƍRB1lj^"7$\S}2ʦ!C0Jw^" s AZ4KNrG^f0z%/A\]@q&"7"cnrQ4zQ V1Mqǎ>J;WV+8{l[y%`B-TaIV 3[;}~?si+GOjvsn'1=O`g& ?gf{|V5F*s(#Mpzm]h [8^^I $7V9ƕ,r.ˎ6qØŚ]$O9Y LsS&OiE<0ֲ&` `/;k¼F%k27_N:s|;8n2JJ/ ոAs2ſfԆ5}S$#Sbct ?(Na # ^[M\ry׉Z(6Uį3g#K&ٹHH} S?'~ƲU璜92%'-zs}-u)EF:NFsԯ("ǻR; XCk(Cˈ"Ci7A|rH9^x9"62Bn΋9iQ `}T䈐W9@'4+YJ1{wOAPp̓ 37s6 n26-4Kgo ͱ}ӶX&W"UyW^>.0o[~z zCźNWyK`θFi+ɲo(vdžAG_zV3R5˭ X)ӱ5B^"j>V[ЧLb`@a.L2&B;K(. 7UYܞQwJ @@CzpvҰɄjؒJEN 흧b]Ճ=p&g B%})>s%[;~&]XU?Z'P%bd՞|5=zx>A׎lƚn6z Z|rR(גxl:ѼC!-ht UA:&ВIUt90\ɍ+UƸ4uTL)G Hrf _2H󂊱~5>f$l*un tjzd?ϸ|FںċEu\@X\[1-'-ts! Ԭ bM YOmHn?UJ98'gJ"Wc:? Lde`kka$iy^2HBlP[Z$^C,  .!Z#)PXzə;w!aj]L9bb3.V60&X9)% i|j #ڭu_4Y;-XG dE]<3y,"<}pi,uR,;z]3b*_juߦ Z+[ El+u+g! Nr_#@%UyêУ[Mqc#I01  -6fz͜1~/h{e5 HmI۟VhF =fC?ll(ِ ~U^%>=lfQ#髚'=p0bs "7svϢ21E0G d;Z=\(a.rC==N Țx1R|R?LNX/[l^}x״:h^x&h0ߝ /+|[4PUcKo=IJ̐ʊ챣C.LOZKSݰ e݌q1@ll^Ff^C$H{c?ϠiI%uL{TLw.1:Y)ۀL( [M_[Vyw3a-ӯYoCQ, 0&E/袆sX_4l)z`oZ_\tHW̛KѴ!aY^pROX{O!ހ8m1*p"=0әCsRK`"^v/0et fmDFL|C._+~&?x{L8%9xid+·O?g%sDa2í$۫gtnte d$.xzlK@9fz~ƉuHk!6 *^OK8ɜ^y#lq K:J7&= GܦK 9⵿AB7S%/Rq_fKq"4}ⶲŐu"RpC ioh  RԒ݂!wϤܮ@L2GB_v"̡7qGs)FZNkj7t@R6H)v6é;uW!A=ւ K%&vJ:!?l׮2•_n_ObJH Kz\w~of8 nΟgtʤWLXwW+;QQoE 1#mi&$fzAz/oc o>`і0qOǺ|<e߄K譌S ʿ}KS:Z*M:: {X҇K>VgTRG E؝xg84ZSo_bpP k4$mmK ZZ a+߮#g.f7R[a!WQe@`|qckf-a!1+8̞F>yqZɒ3k}]/|O>"X 2o@4"賣כ5ɺƏi,U-$?0.tW JZ4$쨈 20 gfbJEuy5USޫGOQ-~]lu, ڌQ4=?SP9H0nKAGт#hBNEA,xշ._> NPW?HSnR&8oW#F5-904!S #I^9 #쓖ē)) )V(NV 0|M){7Ej)谻^bDs5o/Έ YQ n4 n4IKxGViGS爌F4H| ?nT_gᢿֱ^=fzg VmW6JN)w=8J Vq 쩯Jg+/+a{+[u5QØ(_h֙gi{͂=dLG"''wkEpx|bݍh!߄YF\GqўgrjF2{gùkcsO+ydծɔTt?H3P/]I5 Q%y!.V(E E_O4G Ϫ^ƕV]2A~pt_@sߍ-,+D:5qH-XzxV%7UopT-yjTjƄ$#6עlW!aOYvD zEbVU{&S_Lk"zU~4ipCMdzeÃrmsmxsD ;=fV-ִĨ]Y[H`sYR-+Y0ЭF^ 5rθ&u$Qڵ83j稁饐FF'W.p/TNZ7K մq:8"Fwt?ʈaWЃT iT-.v?֟Vgۉ t0%#4P/;߁, \O92 G:~fPRPR2d$mcuM[7%'fj ;cZL?@;Z=&BS`y|*Ɨo%JbɕrM77d;\tyɴ6O CuyUWbLZK4/HlS3URa%JBd kf/w&-eL4@PD]jkI")#~ELf+' R뙓)u6%199Q61ZXM'ihδ:vQDɘ VA=5(fލFa>i̓sz-HUG$<6n]xQƖfa ba#QjnNpsq9%>,k.Pl;cKv/\c)':=wmE[UٿDB䅅,= q >` %z~:7$0bnZJF3q\)_eF-" ^4gkqdxMW8yYUnu/QU\=M5qykH1h5>"IQYVl˱l JO':H}>4iz.lC+>m,c_"+)NZA&3Z"cbvI.('U44[4;6MH&fU '[7ZA83CX_G5|&=k?4dxhPP4$`l*.ز(4w%~-6{CЍhpioHA66de :J֙v,A0Z3Ñ$C+c "^Ei# 98/֌(IR2o!C|؃3Mᛯ%^BvGv2pk = ̽.=E`J)Gʀ[tD GA^UkƲ]^PQ4-[yxIO{ 1P/٨ Hz1:k@'-T8}q,`BU^x,wvO/(X}]y/YW0CMisZDZ:pr%eJۭޚw`lM,ZՎQ8D41U!(c\o5ӄ;0 gWF !cDovP̑Dvx=kD!%v$taa;:r9Sc`8I"ƁSՁfjoޒS/N9FU+b@h0 )oCPnPGK>O΋t5Mh NLtǽ|WV,U=мzAi0{O/F.~l(E0S$3Wv*VA1JcN5w |KOwY٪4KVqa2OR.#ad HBqeavsJm,yoT.s2}:%`#& iUOa9I$˧I*Ҫ'%y$!?[_ siJ 4 &0%@?ClX@^, ᢡAV~Joq ZH:fa/ߔbmU+3JMw!ZfrF9-|ۓvm)7qW,F[\]lr;dX"".PGޒ1{>mѵJG |-ֆv{KݏXnŒx.e{.A+S.#ND\ , PKA85p^>w%97R&ɸ撬O:=×,4 ^1wɭ$!ʥ}VKPh3?݌Bl'n3̈QΑs/T!!Ӡb=gF5 uYl;hu?^wqμH/`1' hC0w4'YE_zrݙV2c; Yε @z"'2hjoypë.2r׍ 7xvB\|u[[7ԫ nͬp8VO Psϳ4M']F=P910 쩀F օ{^1=g^Yq}on %}"c!R@q=Qt*c9|c2FEe|߫6ӓݼ11=%[T`{q@3 \c~YF8JRk.N\`@T[{N, 8(Z\ "?ش83ՍƛΜEUi)gA*+_?#ifQsiqKY;`[-_ȁ "~ť|),,EO@Iv%p:C5ywQP~zM}cܮ~-Á韦¬_M_!ԙ@K O\FΙeX&EM& .PW8vHKшA`h6 9ݟmĹ'CJ{ySefNB$M q{S[ 7Tx:$KpGri!a,7d(ѬsFfuQM&e8v@9,= ~,t]º2r:KVڄT(Ȓ*!6cϒ:=EF_n O'G%84GEȶK1qp4QeD!Dz>?=WջUt_ &~R_$ vCŸ}N+|l y7\e`rhI׍sCڙ(f "1FVP+ d0 ~6:H_,(OCXEji%GSg>M~v{.+DN77R/;zl#jVX5X8ϑ:iR=Ҳ ۻ#ǎLͱGs ~`w_!8quњ-Peű۝K͡y?Fްb=rm1E]Gk-b&z|ihhY 7]|Y3_dN}f>-`WjD#Q9B&*犔~ =;Zlp@"Oז&dOXT8n@vS2ņ6p]UCJ20LIzFTB@dSVfn (Go })+ej 0lLF|?]$S'J3sC?Ӎ!:]֛H" 3Sp߆ao3B/.5F6F$ d( 'nVL-`; ۇ$\#5O$ $*]k~UAM`ʜl1?k~&ڌUqzFꏨ P9@j ]_r แI}C$>|"ݯaDž`[D  wPdjD ߦJV- ~\rT {_S,a ?'7k+|<%\ 4p6I:3D0T:dA_0WWe?zp8в6jr V ]o/aE~Dٴ CixiE 29 z$R_*knwmV$=CsQNav.rUl%$6O/n~!Ԁ~ ŹY F ӽSt s~ IqDU FPfā\Ιmtx^pefүY’J/L/3UoM0 rs/h@cS;3Gb!y&)w[yT@A^rGP|<.(X%Y\`z0@d.^ hA!I ߥ"l랞1]̡$k(ϼJng|`Jy BPQTpؑPF< B?sxDZ^ )Lgwы R# KjC&>)醽;A r-i&Ts(~Xh[';t@U* =CR #)F !v; l`d-tĵEMX-h!ҠsQA<1-Լ7p}=m}oi' faa1hbS'UAT2j#ⵘ[D~mFC1upZE?~vLp\ Ƀ2}hLzkL/Mw鑆T2wt9ĕϏ݈ 10H!][U:a1<_8>Cd&fIy~+av#-D̚R|"㡉ҞpE@cfT{g9vU]@׫*qPa`ܒOvx.<òBu!T 3lgBkugU--J^F,D3x#Nq~wdLvN"ub M$lIm ﹪7okլ)ş֝5V%*+sQ"$iv)hHvcV G2GXFUxqʐZ$J.yxkdjYpګk#yxWe 7Q|+!^XY\73g1lݳ{MV/^&lFvyy)o"@̍8qxTo]|,l7)̺* E )Ev;6+-vMFeų3n2;>3b a|` /8Nt7[t|M!|cUc{KcyJYyVE7L3 tJc<=~hHog._2\,(㒧S.:eFy㮅LmGXO:?' ?N{dJvڟ ( {Ƃ*X`χc~?c~t qڑua%%E޸pnQg" FG܉BWRFQ;*hśP S*ρ)*{.Sc2Ki -֋Q2?UsM@^!g."liLy,HM \j oalj )_5>V.ac^\6^"Ɍ=3{ƒ_"վ,ԠvB=]aJhMj5' uQgoY+~m #roھJF~a&nN] = f /A!)<-Flj8` c',Ho}@;ir>vnQ{m:-Jb2K8,p`G5d?ѵyG}d qsgN.#B</ $^n@}`H.j td4ӱZƽIEzii1%Պq_MJiXX6lxe-z˔F3.-ʫR|w*ATz$jbϥf曄T~IUD 0aWbZJgPLLJU5鉌p;+t2{GQ܈xEcC".heS; zAqrA=VEFwjX@5Dm%w y5кm)OlR\%A>HK&MP1d!ZwnQҵ\bo~&gӌm)Hxi󙂊13c]'f2-=On:t.2@1ED8kt7i,4ŀi^-[+{6,[p \@IIVe|ɑ'$eVYsv . `=cK9|y-K:oā-$>oQ$V8(k^ K|P`̃}T4aӄ߹L C~(+s9ޟ`$C!2k5Cʵ( h O"b9Zx-2*``eWQ {X2\}| h! tHZ)@V|"#`+ CR NnHL~v㭽sgO7} _>35֙ň 9hsk.\jӗʪbs8*7Wa\?Ժڝߤ9e<=ll\f=K7 .![#zcD*fiZꂁ1M:p{/K%{k{?%?4Ra,$~6QqVOL_FUl.JV}F$rl!1h NiS#Nk /Cdr4PI9 1N ]>ﰍ&IoϘ'}'Zt`gϜb,?d!0y'm\~<]lmgD쇱i"ןn=M'M\Gi!E!AM j#'廚w݂\z7F'hpmtDS1`}ireJe_G[(7Yvv^wXp1E;s퐄%@vEFg71*r.7b"y䅓/|0v QԑS}ݾn%x݀A3pz} )'ޔrmqpva4ƯFx}2 hf;RmzE]D+:|ZṞ$,/v% T慎??0!t,(^ /:235>\ZlصScLIj2bi="̓ܯ#B%CSrttXׯDW2ɛw˔HA;M7o* `Cs[2cK| ʒJvIK&Hr\*D5@6pݓ55LG[0 h_47%в"EZK;vYFs _9TO)GM+2ȅ0ƪ]"JeHך X}2E"jiH"e82P$ =T2}r:ś,Ccu^6rul̻4^1ʁeOYeMﺵ8ݕhkJb$mXrK$hak#op.MÌg^a8JHшwk9o?6RRQbo59|V7YK\ a%Wlܟ<_a+L!!=YipY z7eWN$`nZ;Esv}#G2J !d8]t L{,=;V0GXCаvP/` EaX_qzh0i YR=p\}h!ӫm7#ċU1 HҼ6@fͺiSG |@`BPA\ 2Y=8~q} !J~c3RwC}Sê#Bhʘu AHY3cҬiN ne.N^9qɬm)?ۑa ) ),xhb/IjA% N^t+א*w2{uYt"͎40 K#XD), A{]N$R$RB#wN ,s"DqrldCFO ޥ),S-h$<,#[$;iǠB,FJGtqa~g1^--(w.@r|k*.EPI~4heX0_ Ǟ?ܟؿ=öOe/ (d0vrMUBxSE\> yȾhMp\OagiOHK&s8FE. Su T,$jڛ2#kx%Lkj/D'+ #v H7]* bHդb#Iq*@< Hkq krŮ ~3QMrLZ:;ϐ>0FJl:E/ÏnWjeZ h : r7ZtXss rKR5beFkhBT$taUy_GNv"jO+QƎ9xRtbiمvH/_;M<*m͞+>bC<0J$VdNQ2,1c-Q@aEm#`ԿTRO@J0ҾwKќ0cwbNaTҾs㣵j):#)$TCA&f6¦vy\XYT<89GNѯȻV~ŵ>AgYqߙخހoum5@a/(0 {5wFJҚޑ7]ش8l@2ݭqu3s<ŸY,h TY*^?Z &/_Q*" < /^깃.-g35MۉہǬ*@8Y4I ׽&U4n=5! ٝU$mDBhCEH[8wMiGϧO5pњ5%hfNX6OT\K=yDB{8d$27:cXLpSr5;s\Qi ao5' ؈¦Mz73C :GJ$-pl."wO ZP[@VPhߪ`]&ߪI$UC,K7T` 7 ^lq-Z}(W^ԓ9;KyTmV?ZVgfm]"(ݐ>K9VD&L}NCǸ)m_\5:Qukg[#Fq5-;8LB{)3}]1J?Ǜh)[}8f) ϤBDSJ ~S|]ŁI7VJ_9k9VPWՒĪŚhތ|xBi5NL*މqfg|p|UUyRڣYi$=HBTAeuӼ[XO!6`RO~wx7+~?`O_~Ԩ*_+ ?Ue:a:4Ƅ.`fi3I %5t^ $*B-.Pϊ8*LUGٰqݡ#fx(/_mnPd弎;Pσ'{M*5/y ljBៗ64 CHۻMZ[/4Fzn.iTVsܧCG#y=gVdgRH9)9i<7瑞gi69<5C>ntzFïHEYԕ?'HH~u!G1b:qٮ*}S e yskQ~ É+^ʇ̹.׫yґB;Is lǢW?;Î;mdYFǙ $ڍHmE}Pׯd09 $22-^:mOiY=YP%bty(hyq/hf+nSUI$pʟ`հO6]7f!MlsaT _nM/iZ}fJa;RR<>4ֶXj ES;>״ a&秌SouKk_iR\6 l4qfζ' 27$}yt_GW0GCKvNGqN;Tu!G4>2qϣ :v'w{=^$Dr&}jJc< -& D,lv,f1fBOD[^^$Y ;R$XVh45 qe=}Ro/h57`;Lg5QNWphFߵÿ>db]mR7hs !@3% ;`W+L}eLy [~k6+I@D[\BET&י!w:Mmt5tG!j¯M~-;$fՇB(84kfݹ^C^ܷ ǒSc-O#P%Ӷ>ߨ%jT/V\V'nm*cF:` .ȅ; T Eis }iؼk:>!KXVgqa>Y&pQDo?M9w= 1G̵5_˷QZw |;r"ID3{,-2vUÖZAg){B 叹"P5dΆiH|=(y/Ʋ|#!"dX Θ!Q]vM _ekKh6l+8GaT_̚n/[9K(~DH#kUWs! z>vDDfcl@8Ű loҡۢ@U{V'ӹ!0%:C|M% GD1^;F=a/R`K+@GwvG<>d>pv6).BdnN Ѡ|qD[xObSPk"QpZTxNހ[ćT Ks֏J[PWs\sF51=_rBfژJb$+{:mHK@zN*u[J`͊xh5Őwc| ʌȐexŖEEC|vI,v6dMTK M/A}X:ZR,Oⱓ]ŁjOj0#"{ۊliC8a6Xb%Mmx)ߌFncP1gJ;PЎV즩HzfxqXX1lb(HO_y 0cl-=KU,l Tju#񟙘о Fe̐u:QRvrϐkYh3ly"/*h=&ԉ梖Z{l*s_ _ 'tr~. ukc@$`f(0EjmA[[:^zKQ)=f_ r6}2?bJ U~Y" {N'f~]1t jB(ϯeU<[L4Ԉ]l 6|$zeH&Ԑ D)``CFIg4̈u[q@d|m\}7͕"Q*h7@B/!E`F)AL6Xx]Iיeq~JchАFϭ %th7KxP?0q+ {PW1P5B9+IP=!C@^tǼ}A Y52T8Lgs[1d|7|XlE52j4s!bS#vjZNΥ\PO5 IFi߭f^5c`)vom~WeQ=.K%|R;_uMOR(7 M?ā;;0VT%I[f0쉟d*z;ŘIޅϮPj3U#{t/>G黔@XŇ @kA.Q@ϴv t`H ORssInbfcSgm_q5כhZsgDѬNƓ? ߚijPDV &0u|1](zYmSp;邢2ݰC뵙8DFZRR#3e/L@G"heQRƔSs0+6T=%i))QO2 *zO,=XX7եG$VOqP5dx,`Tj^>o{7QZ_/:!>xyBe]uLx6fVNK@U(# 3V: Օ~Z#:`WIߛb7 GO{ I$!~(H$ j-_WŘLI o=(<ȽGӈVA48/T9QojY5Hӯ1vFu~]'o8it~qu_>C-[{A?CPU h¾ 2 1H "2Rp=?6Hs>jt,0Ԙ^p%Pgy8Y9 tNZ--3DlSouk=z{|ַ-cHY!;)2ΩKu78Q6To}((cPAL}.LfjRzˌI'{!Cp=4,l5h:Xy,U~ )XxKxqry:ThTԍ_[ykZAJfig?-3ޗM =am?IZЌPE.y-OS,6 W0Gx:=T5 ̙aÃnLt 0!;=vHlYO'ۧYGR| bsz,%*,.-FB1#,s*|Q"xyQmvv$dFlذ~ʋ=Ĵe&m((R@doX}8z_EAV+Rk .ƿ J#YӒH)"gv hEdkԊA!Z+Zm( };>4$I6oVzư'}H֙sb v4?XE=*@bCMm"X[t1GkC/{],eV5HN2Cr0F-'sli8["iY}fKf|d)a-G鋦9”.Fq@8,< Wc{M@p΂J[_BZF/P[>'Pc\І=ͤ7j?1 Jd| ٓ"SNUTzsc#gspq 4@6 w2̼ߢEVC(|ۣe{_XV.Y n:'-xoT m Շ / A4|Lr4^> Eعw%V=L,  ƊD. =6|QG͡˯?DWĊx aF,'h#=FR8s Vv`iK")-{Lhx\ٵo/0i)S |oJ֤Fo<(^/e1,TиqeC$Tmk-AtЭ7@cR؇7v -'S*kC5zq2bU< Qy/)0"z}j|.+"ȷVu\pg%rb4ȴDw]@fh&TVoTиT80NT@辨:5ւ"H%^㙿8ürסׇI8Ds4vk/ R牽?@ٯ*{2}DkҪUM(Y ƊD>a2A<Yg{wy٪`xqكpհ;RX2bK_HpNjPORkG,6g:Ӻ2N chǾҥ?=%/0v ДQbP4Vjbj#2{l;{b6)7 D^aDnʸ?m~PN"B=W޲~Ƃ5~! )"i53}nHB^(@a Mrh~1i=wY+"%:Mr1 02tNR9{C8ÍS75iWϵ^fmVkVĔ~L"'4•ZP5I2tO&E D;LA'D/{ PJbо:U/Vywƣ xhe4|l0?BBeAq(QX,~DjzUL SC z\ke/>QtƕڝK,NK |@BO'ޢp>̳U*Sl%XMt|Re; co*JF4F <ˀ{?ؒx>K8%8j)B[íR@aGvAs[ o*Z!Ξfr6 Xt(@T`9Z}Pa ?ؼ5NV"vWfb /G*ũW1঄hnOae&HW'Mb'-Y 3Hhǫ{ ͽvK|аj%(3}O4 3*]6"ac7ieA4"sտ@:ILs;AےP+V2~zW$=۹d4<ܝx%!Ig@o51f#"̿hٳkúDL 4RΎ"_/>vZC.5WoBzk3 5IcMsIR'0@t"!U}fM s, x"c15H=+G.hy\x8Ȥ;<2]/X5mCW8G>hqc<=S,筳A0R7ugj6zU,dh#yO4핍q|1uK+هp!yHefa=U +_o'sz;+Dat!RZ_j WьIDݫ'Y|@B= sso5  q&ׇ>^rb< u23^|8OO1yUy߈_="#DS"<.FˑN4aqoTGLmw< ^vQȇ59wq.y 'OTOe(lBA;9BMՍRbDn^x&(;?n eG g߯qI|Za類73% r4*'uGjޢ577~FB׵Ҭ,6O,q(%_GOLjqG_سĥ!]3Mb , [0unPN,V =Z%v{̂M |8O9KXh@,$3mTS!O#0aI߫uw*5]^H5瘀jq-5l}WXظO w_ ^n tc.01˶0Ni01&3)l$ /8T%b4ki,GGE-F}P,cz*Gm<0FZS??U)2a y69`u+I9@+Y&t:͛yc++cfE FԞcQU%@+^r«ScKQvc.CE+ O_qM4$v{ltOq3h|c eӬ& o׆W\`_<'wΔP19UYW+nJr(?k=!ZPCrSSDH?F4芑̧{;:WOOHv~n.aPL/T>e&qu̱#¹"9@Oui@RudcM-ki]Nb]>SʃUu,ԛZqsAd.R}am˛3K[EB gQ-;Ip!a[` ?;մ ͸%J-'24S =Ѷyq;U,Κ6}6fDG?ļ[YaAwOۂm=EB7bA>>3Hrz`njcSѿn/%e4%g3c⻹:`M0;F-xrC?Bϓ3fƷc,]$>iŮiXuپPQOv;Lt[Zphl?WHbPn)^Vˢt%50a /w+Bpw5ȫu?jH)5Xb|=p @TEP<# ݢ +m0z0LorjR%~(Қ~"pG`z3EϝLuu9T wk#fcJvC=$~T) z7AoIH2TGvύ>TsȈl+B}Z8~ti`5?١~c* qc 1K 8*Wٷ Ӏ;T_r5b 5-mKb?K' 0j 撚*M;9^B5,+^ ֏5L$,wCH=zEm&%?\3_<\&2o"T3 AXh鴵 cH@XًJ3S[P6o J!qpX "emٱfRx `S?ւﲣ=]/gfE0uz%?c:!=3w&+DMäP*B h[γR+o(c=rNݼ @꙳OBrz?:B{D2wp"YT' 9IsȵŪE3 3KeGN?,,Z'Ey{PU^W+ V㔡B+s]ff s"g^ja;Cg"c%/aܰ=>סKP9 dDRfi!Iۻsc祥n[XmQ]aK.&eJ<5N͂S1SWsb"^bφ/nɕGQFW˾2Kn?Uǫ1+iч(X! " w R}^g~Y_~I@yX\*.<x!\+tA y* rρ|\ᦸLpĈʣu{w4 c`l[ #5y XÛ9'SIXA##CtO8\uyeޅϕP˺G?a$*m,6@!&}&ɦIb9nw;>3pl+Yv%bs'iQ\Dxy>Ky'm'fJa顎7Lˏi P,ua*7[fJahhdiV/_-%͉L,Hl2']5@ 9"Xsg%=30*؎P U;ht'B,w*5 gGB B7uA+1\&_5s:&N)ϝ%9C)]ɩ$lKߩq;RBٙ+rfY@_L O<0(B1nXL-KYA]cka8*ݜɗk=)>*@A!\ZBޏ 3R{&4l "_CT1>{==9 Kςژ)qi 2)q::`uZv><uړm8deY]_՗t&Ў:;z˅5! V0.`|& cp[l>S.MWg>_^Ȳ=0#ȧ6{h{;ڔ_n dRPRpTYs *8:gX?%4bïjoD@/5v e^ M)H zR~;xd~X=J]\߶ C~Ls^8j*\$ G֋Dwh-?gԷ}QTFǓ@i}Jԡ}dGU^sAPasDxMp׫bC h-%vёv4 shC'.TIRy{rn:@2`͘4\\y'|30TpFtPYElIU4E+ 8`´n2bRB}J nuc*x'.ޙN|޲] g9T뷓CDrXMBO4aǃ퐍s;vD!d6 J= [~`h=^3oZc^ q`~+?ܠr򱆍ŷ0)7JY#܁{ ibIqU|N'9b_w +_tV̩X5ӯO;hK*,f;ek냌jgC2->;x3AFn9mӁ SRaV?AJ\ dWd\{2XMGi)bE7+ [A@l)(~“49,ePDSU; XJMV^me*]mݫ]ڈEXDnQp0PWp]B@|>@,* jI`R gƝQd!٢gU־^dZs*'xr{&P2󴆂']{18oB`9?^' {G6'wY&Ӧ$Hp<\9(7iUgy%9ŜlTiu9vR|_rpj%ū#K]3eI0.HEg2MkޘqAWzi'ōenL[lwM9k<ґfC:~ X{$t@H%h^ygi?U"(Tج3CBwov?u}\'ˏw#Ҥ^UX^2a3SB7Tq`n(y+[xy%6z~z˟ 0MD 3'T RxMMpt4FjX͓ +"*Q/&ɋYՋ ԪUx,x"M(cNkC)T:;nwAb޿N9:z9P#y?L3tMy/X%of g|?5A|P&$o0/;eH' qYC5+k[׍(~mDN2xM1*\T>|w_\nqY[v*ˆRn CT (\E ۤK3@QW=cyr6ʟ\ؠ ̝pJnGq;Lkxz{lTb9L!-FwG֤ٸMug3P$upךi;m8`"(LFòmY`vH˽-Eu1(/3E)hhOoFսBf2UuDUTE(k0^p(F"K`ǧhk\>H 7 ~|MVmfԗ5; 5 >/7=vp>xE^o58En3W*z*Bx4YQ"c S9Pzmy.4ĵ{fm7aj==*_,\+ 3@-qstmj ]ȕ]:܇8ǿ8WFV]z푆H?8urz.$:Xd5tsZy~@ŋ̛JI-L]>)ư3pr?iQI n_t,++IX?;^8ҋ&{R2cԔN]&\16C Zb[:wt{"'@ ey-\/鈫 unf*0l|Cz8wa_>uwr_p9P',LhK0HL.n˛]De>8X>m9D{ nixՃ zDƥ#LOUߐġ+GЫRl(6vV4B|zʤr1&i|iMh_g4iK/؝H~v$CB#Q<^0˫ne_zw7CwH\ܤL3U e=DUiMQ) Sļ}]@=sk@e8u#V|] ^;Y 0 7[a]+DFA-2㢢T1eeM9X_6S9a@JF:IЗJњPDUḂ'EE jTቼtP+P_4z?K~6agq\3!Z}.uJb* #~P0_%xڊWHtw7Nc q\C`/9iakي""LRƕ5=Nay[Bq".F,xo;4s/mU6mwS8 h Oځ9MF[gu,}= o0 c6 L:kWaos$C>`~?Kq渮tQ=U ,t_8# Tg # &5,OL&B 5Hnj߹4Ӄiֆ )Vw~&5J Lt@֡ BdI!m"ѽx?+K C<U{)`=dЇ@4Lg \f!/){[-eq@DtR LƟtrfxZ#t|z8: ^sڃ,C6՚ qx4+vW\@LYoy(|"b>GlhHWq{;pMINi-^Dqoc%iUWI.J .A=T ˝=vA&ǜ*O#jzz)$#+!b 8aq'gr5%ЕCɈ/j/0HT1F*8Y BJ:$]+M7!;(-9/6o֍0G, K* s~Vh]w?~ )[84HBɬN,=hx9ʿ]#') >a^\[~l&hzic*$۬زߜVG}F3yb8O'.Bv/8pȟX;G~ =">0"RT@ yDKYǜ08f晞j׹Ѡ2#6MPN=) ú{O;6d,Lhg|@u?`u69G8viS?E؉i:~MXk~J϶ZJ(g%+@^D`N~Or!ڠ0`OF{ >,~›~}W3$ߌk+w8*ˣ?OR`VqprfZJc0gZ('tz:1P6q%R cN TK5pBq" M4Aj淇Byo7t8N ܋%SMos̺L0m0\9O% 0PgWÈ (]?IH~kHX؇7y şL\g/+ZEV!W ȏ5NpaU>i=mDkP=r/;#f9N!Q&r 3 űOZgK{tվcF '\T}"1yBYC'cG'9|4"ȱs:8k$Jg~`>0$&p>bΝT a//v߆.|5e fT`+ KTuR=WtZmEl}Oxg2 l]_fν'5Q^_ ff*/XCc-]^N#ΥpѨ%.\:[I;Th8wn+נ脟@ڧ22k!0u5V)'#( /Yd">A%|yEװuk]>goTkMw1n߰,a9j>DH[C6EXRڡ7K@}8ڿ/C/IgU)a4,]e 13q?WS'4mqۇaI;O`cV}y~!sD᳄xcMLU3pQOW{tGQd~ya^?s;6s< X‰.-ٟ{U f.3ue Gm6ِ޶ +H"U 9zP3 DuUD^V>'ؽbu t(@Sg`?\|9ֻ{,(~~گ5eTl'vҤAvSABL--rkhV!e2lzzjI.CCs`/, V j1j*<.%@͋/7(FyƊ.!3Qk,l+'"C6$k*⃄[3 ν)}Q8$Jl 7QLUiu:"8)_>2٭;>{ߴɧSG'}{Y\+y 0n :2-T@ @;\AcULR@?0Z^z ןR},mJ]ΝEx_:]`t<r4>#br~3t*P'KUs ʤ!4{xyA8hoLs#ļ~O2gc (rӃwÙωH|{KhUW٧cJHTB~`r vo;nj 7^}Gmv P dA'㔩J g|\X[g%R^y.sJ4DiR9' 6~z;ƪٳqR9鶜4kx3OTN_9Y$${eۥA1͉5<N* ͏L{=ۘ'j6pTP$g| ԂU˝}?bow-oQ^ϊ,fA^j/kPjD]NWK^E"6 yQW&FRSpH<](wۉ+%~c4 j3q4`ڊ~12<'8m,8sKsoHY=[;gJ8lWU/ìsg, TװދʱGۯAF }Cƚ~Tȥ F˪m,h*2 eb;mE$)tߦ %C-Y z"mүD[Eʸ#c}O3.r_xk9g:07g╧wc$?눙Z{ݘ!%(㡜>Wm^vQ~P:ڙG߱P%!g4MvL|e5f/|cZr`͓UW@JwBeLMf[9|?lФJ6y* ).6sP`V9vo're1}pl[ESQJHY\QAaOoM%ZTR=nN ~J\YAa:gT"9Gg`ZOWz"t3}묕>uX7( ;OxGK083.[5 ~M&dz-xJb-J\K'ZU#?W+О׋j_CZ-}W\n2 q7"w"4F3BG5Sշ!oxދ_2a*hB)mQ^ ~nI^^;e@g]Mr؟&[}zt<s49\Aأ9c;MM>wp !(`JV~GĐQ'l8--A.]KuM= Ҭ mJb2Cu)z|d+F+[lN65p\PTM&52EN:oMx > gI^ްoY6ޛegF gң2xVx7`VwMOO(t(۵ SM^J/rmdM]՚)Q=Iyi0_cvØjwa( 3 [!=đ qԛgv'NwfP# 6;+U5癆Vyхr=O"W_ 3(.Ks3vZ8c V[Y;J"7`#^c_IKyH'TS|T@|JʝPAmIžP|/YM--e~u,Hȝb^wfD m$4զBRkdYX")ؼTvg$zf<unƽO[磶Q(TAZg0n/hk$B~5 ة@D0$qζR 5aUh.TaϤ$O r*77^~'uv8-ї -k7Th hk(wNW]գshm˶нh?@717 |~ $jqLJJC1P[Ush<7vTz$ ?J7D.5d=K -ل 䌰6dǴ!]Ak~s;hCaժrcģA5C8 Y"gؽNN}1EnQv-^pWŠ8e&ũѝx^=fmY4c;4#Gp .hV0Y<>W<>y&(;CO)HN,FW1X*NQl"Dh}@f/GNՉ#`~JI,w 5Z=:{n5Uo Է7WbވjX]9g̳haV'aU]^Kp&;+,DV#X\38N!QcvC{עq]y/9(݉ (C2KFpE6|/+abw{*)(.F1N l[4T ʖ-:Fq׵i֣]3wh ryHoTȧ `N4eWpݿ~ot:Xj$-O\?j'J*cCp:/:?|A70jyo8Cb 8aj.YSdDYꈀ<6!#V@RuELMuJFp\TqjFALGeɼJ)Z.vN0Vz˵7$wZb^HWC 7ƓD[m+J©i9[>G﫥|,geIBdmQxCBGP;%~EjtNx,&CP4q1 ]iHՍgg.FٲCN;5+/ωHɀ$WqR^M~x1x!QǢe#h[vkmG1lZpjv1^x?cG|iVǓԓ:P,̖$rۣ0ֲ$7 @! /!!HWTt)oh?b* ٸM>}<#qXJs. O 6qӢS?eHc!TU`k<6IjgP˸Sr?WuuܫRgu^ |i>,ߦ&GOCDFm2۞ALs[ DHjFSZɐW<\syKb 6٬ 8}z. Ll񷥔1/"!^ u|^-<._D)OSdY<ͤK-vVzI[n]a 5e" fG;p0Kt?Śx2Ph(,1״%N7D-W4~[I!@$6?2\INh fe̵HH~59!x`"!sBt0y4l_g& :Y?rf|:vvQi KO|73L$EHs9dLJ0^S /G럝Hgʡo~o?G@ ]J>?ɌF8}0$fmne/mw> "zkbMhq`XDWthpio2”Njl<́ğ+NLBo4nV{y~R(ǰ=@fӍb$g!NfK-P'])3/l =M,7@mocLt1!KxrځM*mAPrFs /I&v) WVڝEhO {Qd7>+˲<ض8 _0in u\w\GdK,Y~@Dqj`Z":q]#QAlcY 4H$UzkSFmyAMh-H/F =O vPyE כuu߿O5KdX &Mz5ĔeFpepb>KHo\ϭ[vw ҙ@!Vdp yNc\ SOa: |˸73#38ٯg!s,TRaW} 7hg+a@5+΅njsZ]!2vdš!ʟ =^v<ێƝPʷjF }7 f{Uܤ1 US_%a̾F$Q WK#bnP?{ۭYKhcn5v+ȹ"BTخfm$$zLROӎlBiY2\B33Ӓ]WȨ過( $:<{Zp٥2~}$WF}XDgS*om<`Yl䣻{xu)oq c'IJBF*}4J\M]zþ 垛TA߁ae}6>ӵ(HL'(s_}~wjA:ȭ~)uoi2ocފEނ _2xuꬕЉT=!zt&ijϦ׹2{IlıyeJ(m..Cpw2#, fK-joޒhnGgD@]\Sp^C k@g@;.)r$WlUk8d ؘ6l(-Z?܈pLyA\%d5]rҞ9Ι@517?_]Q|!1`u.D^&ܙ|#s=oUYmp1Ċ(ԠNQaXdus?^%4j{Iޤqgg+@7k}#,{`$VY&,g8Qs2B<"V=(,*)E P jAZ "?~/M0e\b`CC M>иAm+`Om= z8҈K39ou^0x m U0D].#8&lx-?zW_RajVgo,1h'\}Kc$e™˲dq&?Qͷ  j׋JK.gy#Lۅw?vrs(IƳOI+Ew9eŜy+,ۢ{~L3?8oi~#+j)2qF׿ΟvOy}/LG+8!^* WJ[{Ǐ"N~%{ph$}W܁"¤l.@РL\O 5섑Bu\" 6FOTR?m6V)=rBnJRL07@ n$r^V؈9G>yD3F̏hxӡGTuWv|==D.:#W?k]|82c:hx2kz^ɿ%bY rOD,!. ?!l/|XIvɡ3& L#V!j?mu[P0-S+}gCQՍmJVQ72 bAއZ%egW/-)bųXZ"+;7Zl!3yXպci`hzeuv\z Z%GBcQL][tVc `a u1t6'qJGqPůo .'Ek[i~ 6랝K BkxG;Z|,ięɮYh V)"q>;=#̓cl*:s#WU넼V lDӯO+J). </L`GhiR9M]x_YeI9碀?6p-y,nJ!x5B@z W`s/`{+O^lˇ3ĸ~55#?:&j"֧BAFZ -gM9hP @*#dӡ2طqXCs"Ų6P<}D7 7 [Y(CQfw @j;٪O-[XxPmRUk*v5чo-__ݫ\y=@ɞ) 2iBB t4.3 xN7 A<p0xj6D4pdE0 Lb# Sxbf1g4JeXŎ>bS@l2ES$%PN;#&AOppސ(J"q S+y,9GG6O<Au-(#&1VlNHp"r7?В-Z ƽrCቑeajd4^-/kv" oo,{@=/褄gaIt٣轝ygbFcdJ'[~'K |-_ra5Q@RUqa>Y SD.XaC| v"*Cr9N9b= ZجdGM7 i seRC1RAOvc Y)ߨ2 C+~ !'Q! rRc{DlVfRBUjF!ez?Rμ<=L8ER;Ĝ搎:ˠDlr>M֎\4eM'8)1aI~"g<wvJ79%{2abAɱ&-x}h 4quCӜ$b>C$v! wGu6(+WKqpCo 4:7A@y^HabsG+nem6߉|'qG\fk4D0Ȭ@g+aenɱhĂE?2Y$-Ήs8c7¤ Ά-lUVD0Je לVoV@]W 9YūKyJ!"VJ8jh K'S\i|Q?[Ӭ3'\_SL~,T2ŗL\iu+F<2OGmϵQc_V͖BJUv%R O[13q>'44/ 'B#Im34(3.x*#B;mĨ1(r\N,KWj mOǽ5[y\i:W=Wjar }{.n6aBψ0 3I'Χ #^B bd ^Q )2HO'uJ%J >&{ّ4YVl+zƢ9O aJH6PЏ^g̭vOK_td;>}l(1TgiH䘆7{f^NTFZpvp]K)ݲUL>{L5L6q2IRZv/y77 Ao@RT8XCNC*23~*8f6qJf!![0\:!=^wz\T⢳ƌ5dh6#qGdh z7VwCMo5z)&l0 v= )#مTcmT  r&O4.g* z*~% x3dF(1}m56._)q"?mJ#.&{ܿhtʼ%g;i?fI|u8SP^< R[Jy݈."{ ˣHR1WNow(cv1-#lhMfZ㩐Gվƺ%%4pmBFx|Y#)gޚY֔M Cnɖ+GPXRrnǘ7`fxkP4E*]^ΰ[+F" .zy}&?Ӏdh4h,:2  Snrc Y= #Q,i4DMʔmVR\!x0W0sUY'N` g5Mޤ r?n.Gm ]M΂/H&R73>p.碍cq{'? ]Ci<Cs-V"lN5U:ŧY/>g|5sŸX{9d{2[6m(#'UdȾpI9wwTnlzKr*>:΂Kd9{rA+ y/6?Q դ(O;}3Q/o' $ߋ4b}iHCzpR'w{+pi!G}UlU5ZuL7# -mO[~ceM%88qK%̔@  ~~#??@FV:! ͽ zt Ep49=0QϋON 3- eEPJrFZ EA96Ed:Hb6j!$%d1jQ@w&:uD4Q $qBm-Kt䑌%q_z芺̤9HtYq]]3:#\n%~|~;XK}(GsCXixS igt&YI'HA~|*SN8DĤ X[7Ҩk nj|mLYhpTBzY;l|\J4l˕q%!%x:Mo]ZaUJU;k{:AWa \|%&4 ?e~lRIلy2 j^f A#Dx9^ΐs ?w 6 .Kb@T;,:{Q&|<y<; ?@_Hb17 |8Ygm)ASa$Q$lFj15MғdW3wRc^M(;b#,EpEPl!bVz-YNQ00躗JL[SV`2e/?3.-O*Z7p0J4j_kz̎7?!qX8:l$w]Vp./ 4 Q*:ށd~$ۢV&P /DF'ǒ3dM5*#$H8/HymۢZ !UD9:fki^s^O4; $x@1|gu )?7Sm l~8j{ ߁aq@JI%8@(I$;fn `q$6/}[U!tQ1x*l.lk""V'MVSf$9pHNO]{o0kn|ݦ4~{a[dQ6iYfIGgD'?]W @t&oMX[%`v6zxӜ\"mA+mTsxv<6Pl,YU}A'cU-~v wEݔ%7}Fx,g헤G[HmlAz/3ɘ *z$b2)V/W\d-MoXޡ7%_%$%U*].6¤c,k&{N7igFz ͤp7@MmT#4@AF"RHD6U*KNeXȴs4Izf)\l՘jaѰ8,QI},fILz?kElࣉMl5ɂ>4ݎfS ĚK{ V4s:hpF@PNf?4M}v-h!)7SCl4{˺s@N͠GŦsU@3+覺u RtSӃs..;z\>RjJQ'<;j> Q*Iftk1xz}S۵̇%e(cEFe6IL`XSh Y#Qw+dyKR OGPczMa}*1]Wj͖On"hg-Mô@~|W#|mٚ4;+#Lf2:>H֋ ύwG"ZE}QcXo.` \6c, ȝ=kTՋ!s"YѴ&hp\)ZMTX咵*4JHa17<}>s[u,"#?T*%IT5!fnY7H8j\bd>__ ,w]/EDNBHqYZP@qd #^ZKqx9+|\|6 Jy 6#8C w:%v;>a,D.yE8UO|>|ы]i46Ս0Mt!Ǒ].iY9OmD>Y.eG/H} ":uع$ o +jܨO \PTE*:paz݉ɾf2}I28ť&J G;_6yI(^@,%^=@d/}1g>lrGF_oxO쵏_vS'9J|H#Ī%PAX)NRd.A37鸞I_-j*A'Cɾ!eNgIȢjd $rAXA_ M^ Hǵ*Q$?DU՝5Ek;0c4IY'jeF`-PMIc}R^4`q2> `d(DI-17шݒۧ^Cy!)uv^qP/4,S>˚Čr&0ɡ,ՈO|HͿĽMvkͳXJSzn YZ}WQ ?E.x8Xd:4irOH-ë'ô7v?l* Dfн݊,. @p[ɳ4XD [ЃXL9>"q&q긕~MDSrre" w|ǦB}2'b1l+ڳ÷_=$ɥIA<͟Y΀kGk+%8 i*ZwfR X^G@G@ΧMe3*d8= άv[ac^<853anw) f57R7?d Q ds($/!u{Ͽ2& HgK*<*}f#8^mJ+$1DyS:3raI'JFzok$`q`%Lx *QFvת4M 9=zۙoklx=H3D#\i53!E=Vؘ:v>m H krRӷH-t hE09q hDȪ}Lx{Ƥx W,+ܯK 7} B($I }h}!L5ֆK9bm/ cp^27p$6;rGsOSMØe&p50 <7 Q: U*us V l~b_fIo=95[vx}-0,=+x缁 sK9͕1u"?6qZuX7[qV檹$ؚ.O<4g|v˻2dE Qg$tY`EV]DŽLA !XEXpZWaYM֎qLT;t ȕ6VB`ӾG *ؖ7'7e?wN4l:~E/'Y&1eްbÂl9|Kl&#C?,Мlp,wf 85]nf[F|3?+w[N Ũ.z lW,Ш\ؤin6ڲHעv7KqM&~Du|]+ŽjHS1F"v{Mp&K WK§q.2:X{q2Tַ԰.ĉ7NOQ ʭ=%׈GNrv/bhzeDAf-vvx` .NOYlטyd_Fa*՘EZ\^IaSg>nU j٤$&mTq ՏTuZ*Ds l1ĮP9fBt8Jj_=-_1H%G99}E?zpg2s1fYH^0s+J y!B4S!3W/{Psfo2PCj 'PWLUX ?h:i)lmEw5 dBߜ kpy_ p8*T cAbNB\?y?€zN4Aϧg:h#բДOnР6e켺ܱj(U@pV}"v_^ dDݭ_^>&%`)^H2Q?ݺ͆9Mz4Q{8RmJﴂT/1&r\Z8J,0 olǟxyۅ\A _cihɌ<@LFd! O}Sh<,uQ+Y*(DLz~RM$զHu`5gQiS'hiE~y{>uۻFvAgwwsj|EَtD7%Ry%˂b);E`b8^Tt vաɀ͝1ʌ"'!&yI‘n87KO՗%tË*Fe.VlwĥZ8x,s"גp~!;L4No </eJwK#-~O04}k{Ⅴ`B[j k3TO)(}\m}# jв$#isPCՁ9ZhSvPf(Nn0fi}U[)cA`\7!fBPY.#ӬQ|g^5JW&(zQ}5? JJ +#csUV3;+>MM.طQkWmR5c!H)Zv= ~t㢎3BS$xūwgKf-`۾\TpQ2P2V~Ejץ&36 "yp@߿t/,KAvf [뮙e8UݞI}\̡pyx3- 7l= /ExF"՝#ĎguMb3Q, B]Mi8NUfS1-j&.|:Ez%r|"{W"+34:ڧh(ρ\MQRz{mNPG_>ƪRhH4-8^qHԨ|.F֤n^!AXH=2d D~5Ba;۫EN@u76un,l.t]cf}ͷiEltK4}ʦHs(Z(3h@NX.V z'CVTgP :?d[/-.c@#hr{.v2>! Ԃ6Δl9ĐS[CELOYIVkjr?% dp>sWgJ0ˣUu"<<}g4PeWƄ٦\m&hlDmg9;*tb7WԥAd}7QzFp ͸x`DކLdҭVOKbSN Ա\r͸Z΃.EO1xNj+Fz)cĽ{Ԧ`Ҳ=Z߭%DYEE5_/O  wjACᑖ{/tk2R,}=(J`f h2P=m)S;](w^ϘcTBVݷs5'CT#wp\;!Z@b)|j 5Xr S||׳2,͵h$j4K"ǧc6ĥ*L 팄k^\"C|tO6ej Nɗ( dDW6޳C:鳰nA*5l"RUf.J>CU w&-p|rFv"H{YK[ϕtXvri"to}s֮a(vAK Ws7D|3zti8aC+QȻmw/ׄ>64&)5oF&o^و  ģoU^@>Pԩ'oept]T'/x6`$ܻjM2q4|ƽ5/`%`?.O@[mDkk -xk_-Oc{8iZSdVR n(Zy;zq B|9 ․('i507n/ӥ\.-e,|:B.y]3a|L*˜bpB^ltǞn \)7GOL6~#XՌ;|ǫCd\U9NE8@c>pzg YʊH#g$ [;Рl5JYIɃu7wsUlo3>]u\^ p_Bۇ1Gɲiq!%\SiSXM]2(GUS 1neΈ*lZ(6V0GiFe 46ND}? / "kDM+MF <- R0|':Fv*e;20DZ)E_fƃR3 q' *T7#5KL'&Ċ(D &'p{:mcH-Qm}PL;Dȅ:U j́mY-,qIM!Ue#,IQ72Aznnu| [nyl9 hbkG20=)zvvKkY0{hZq. KE]/kvT}wNdZE0$P*ن% ^WBDCkewIHv B~<(k>.%+ w{{3~m3\'Kӏ))w,2v:5-ȐaH~# d042H4q-)R F_oөhOW܊KWB_UITQAJ&7gx\/ K\qD,'cV+f̵{6:BJ%1`bo׮Bð-)F1d#aLFa م*p&&DRGyeР yS؃l}} Y.ub(Y-[gi*;-AUa0uKxͻ)|,ޏsϩ`s. p~h[+XаNd]^ fy:sD!+.H{J[@Wa&$n@L'} ̚@#:/tSt;ujL;rQw)T&J6:D- ;,~%?f;4H#*.:p] ^磿p(ϟ7uw^cC$:bvŜ]'c⨖G41:mFء>S!x@Pdt!;mEPV-~V@vO `:c;-=1QkfPs4&n^SppE? %t:;r|'Qm Be6d/]a·XD"ڌ@"5GdIбQ85D+$FBgMa!7tn++e沸vRC-|E+Ƕ3ͻiPyJGP3j3c0~hfOUYu@ԙ#0Q )}Fg5Ŗ8SSYüT⡣8lza}`f,1oӓ` l8nIC"O %gald/Gt-߯ QFuVB;vsMmtEi5 D /7 pڳʌaSqP}p{UNuIPRe> (_74#p[~uވh́O$CgxWj" m֓2gFw`ȷ8r~ g`:"bHXIg?PVɲ>ٵk6{ڈ=r  G2]%(/3.(I [<.]]ץS3qΛPcP;'1FH]\Lۓ[85b݅-D$٬pD&ўHV^ϻEcFgeșLۘNyHCV˰[h:]QL7+ j{:7y@Q.}FTJ@ =*/ESJBpqPZLtSBҧZյ'n/TÉ2O7' [$u,o1Vi˴-n yq v hxǙ=kz'v!i4߳|,a+a Ǥ#:UQSV!0 &bd\ mQM <w!;ώcU~2z,k_AS%vcۈiIH' C@{Y w]Qm޿ *L`0 8.d˙pjzE3LBDo@)\'_$zl;˩;JI,CR} zc `/a๓cN*7I ˶!h&QG\7ۤPJ1ʵSznQs E7YB]VѠ }ugi$&er~b`c̡<lT8cw+Co7²:X HݿnqO8Bm Sio~B>%؇^~Puı2Hc%J7xSjG닥ލD ã\~b^[\7OPO/aNc {>pYҥ. oOO`׺NR4264;D*ז{5fÄZEGW7[AꊀIej3mۖVL> kb= dd#Z|PTdի׺uծ$?{D;UUeSN00K!gD8O}7YlS*X)RYid(3s \upKxsЎfx]*fU9)bA4,Sgx0z6}(߅i.먚enϜ,'u?J:dыX0CTpybz3m֮B~,Q4Cy5Iڅ .-sX^.: [k nRf4ܧ6!>aSܛsCր4G: M4'f#)lǽ T>j#?9 U~̾SƲ_j:zq\  534J5;}7jG6a;NtPϝN9XiB;|LdNKT)ql;c Mg8#(o/bv(2 F0Dqeoy::C9-a…Dp\Zn/isf yχ€{yfy磼ٰ ?2i Ji*U |`$pVQCv09f*zV %S11xe;MPA+;?B'FM}GC>u>0j?A:Ȧ*u[/L z>*$p>mH ipV+cAҁ$(uny*.9_Y3yoS1ȉs g"yǨMh**-cVv Ghr"?5DwYed3DB5YcfM Q[OafKOׯEϱ tELtnYl•^ Ah{,SD =n|{,^A( X9Γ `O;(_kz&T HP-u}'¥/ ֶA0P<_?U~ 5*^!;71m|`xCpcOf i@<<p e E7 fiM(1F}d 43$G0H ʤ4_rϣwoIٿ2,G+pb|"5o#Ƽ9S-:C71yp4'O"VںeYC%@E, [4 XXH (Q e Sb *f79Vi8e$z܇e &o+ Cu8ϯpa/zubd,˪HȆ9Eac;*微=y'>85<8h]4ڻZLY.W~fZzJ/5LsvZcO), Ņ3mnr|ERD ܣ(v,XޫdT׃ʼpHj_~mv\H`ri8KX8} bП;Վ?yp 18dto9EN_:Ѽ| 4"q {I.o"nЇ˱:d;%1=7iUh"~b!O.g1kH[VʦX]$'v7۸*7k ;% ŞxmoN2J|fy<= f|erxq*{uh47y&yAym8E`.qFvó.lG 8ŔZBkyCuꐤ\g}Ӂ_vlG6ҚBfRSWw:dp& .v$}!\Ql3%vޒ|7$>m8i,!Sќ_k5ȯy?΂F}Emo,^elv!:d8i|GZkǸ c F}w? >0an2p@Iٙfۑqg);/КݕPtj/Û81 [%AedLD5m*]䴃|^[ioC *gBB r< 4TLzĻVLV$.]sl1|$.vΌǍŴ7†njIҕ+rvp*YPo3R/xI٦oe|;σwOD[ԿA@/Y/Y4seFm%9۹|;FSˁ 9skF#Ͷ fuk!j,z>namz_0TJLG=ݵӸ(Ve FD<۫5ǝH,c3nDž0Kjb+1ce\,'JǠLZ'I&P1__:_3$eLlOr-ny"[~4sUGJ{EᰭTq(r;1 {Abݖ8UKl(&.辁zK$/B)PH/Ⱥg1yYGK> l\#,-xj?eGk 0u7p8Y)iPANZ](:&o|;<4dA( OroF'U6ǣw_c/3W"P95QZS)ϊ=cau1?#T f&:K )+.!EcL#cckkʅ7D%HBm߃/xL,dY.|js<0___fy$q{r',/1gR'qmѓ1tlfuH#D@ѳ݀D >9z `tPV07y{vN5)~\\~-ScC`{_ KrU;sH):H !IbQv8!bH%1LvyTk$[p;a[T٣b{[WFgqrƊי 8UC-*,Jk!n.W☄B$'YGWb1N^p;0f7WUpO^V0m^ NbF ӳ 57,6ks+m]6F3`r!U͞Cҙ(P=|(1l6=bq]!2/9 gnsCnxle}R-N ;^ķ qU`vO4ۖQj_B;+_:v1wG tcIvAݜo$cN)qal9'jٙ.; (.PDRMY5L'4 YykG0џ(/XX8a"}*tGGxQ@Wuf!H¡:v }velZTITKm"BmN?ElCs/ ן+E̯G`3{}]?}2]%>22U8e[Zp$Shs<\b;Jz J&qTԮuʉ n?5[>Zw2Z̓QNh0HЌ": Bx֪^{W0#,>y[s`N$c9L 2 yI7^~x U9~Ϸf%t9ŃED항 62 5:VVNZJC0iiO6Qq3ɽ?9jH>>Hs\r?>t ̜>:9$^p9c4d'j*y7\$~|q@_/zp gośQu4!>eQܵh Ţ@yi[t&_nRE`VmШF~P.@1Q?p-_A߄Z"m-!ٔ OQt,g_Y 6}^s@">m=Wnڠg[`VŷOӢ7OCin0 T>%\dWw{ .9͊U³JPO`5˪򏢶,{ 2W!\igjR LspvK|ahۂ0CgJ6 M$CPΣG?4e^d 1e]`B]|} s.q 3KOylvt j~$ηZc눾̐T_Xp\z ;ޙ M}FVsU@3YɌ1 z +i=OOf<:oo+DU}bKȯٳe9~x;<+{EBE2Lw3Kms@\ӹdSzȠ:#V1esctjTgEXa݁X/UtBiH[rGO0tVsSxJ;!%p*kf^8ҴHg뿗th2w'ܢ?e0<9`w^,CΡ.' o?9ђ=4'FjReZgzψoV4gw_2osl:F @iFK) ZфW@ڰ,>ǔ4jьWه\E8l@G ? QܛЉ״ < hɺ3I& !,ڂ*sY%ħ4eoyRcǓ1 \b@*r6vT$Ob773Ռc}c*JqS[<XyFe־᝗6v}/hrI *k,4Br[}MP$'X١tGY֪691yYo-jD#>K9_'_NN"3: @x wvJnWqG)F;`xI*xK@?Uɖ>dgqF%Rn@4XMT+h䀰sʧ=u`G&uz[udV(Rix2F~h\ >}0z1\a+*U4D1-Y6SL<伦[Mw86v:tOvJsM~N`Z+2n spOnO8t;U_ e/UZOr ~.wm,֭ a.ԻV4inlp]5dNԋy&WOc  ܿ֒.FqsIW%ZxN,{o/Lx6s+??/PI-̗QG1P9 FA5HG.~<K53<9[٫ ~Q$rtCO4rFk |cߴ6U0Ld)]K"b>jԻI^M2.y?.α| O驡2"S1Y5`%BDZkB3#l~*6S㙷912BZ``YZ {!|y^?>5 Reuh }sy*W5ȒN& ?t< VFRC}L#{3yf>ZЩ .q]TZ/cƱ'fA36WNφ3%:4:cA腈Upr}VL36 [C6+:@u(grј'B_SWƑy95ͥ'![y6:D.bX }ޕϋSyhJ>-$" oBy7Բ \}Ht %&J|q|hzf,oa\z;ۼV0W 'wx^P%a, [59F<͞h 3q8KkaiJw ! f 4 ^v'SGOdxcn9H:%aG0WQ-j=em#EG2,a[8BD#>gL?g&bbwY}O֝[E J.;ن<;aVde{X]6p}y"?kB& E\[JiY93sBt L{A2!|:f 4x;6(\X QKRm9Tbzc 4퉧 "`^v8xAlẊބ]p=髦9C_L2 prB ERh]x2.(`"' V}sSi5p|Iz H'ZExlg8k&ÕO\4{O&Upܲ $-aYBJ.ɳZ:cuů܇hh ; YϮDfIߝEs4֞;x%2h͋"/ף#ϡucr1[.5-|̸wW /Q+4a=T$j2(^U<} aTu '捚ӰƚZLw)M{t>r64@T N-m=ɱ1Պn3x X빗)=~jdTtZw]D.+K,+ÈHAuW;a}uK592?Qf?VlF!N[6^YH%z9U ZŒtu3sώGXrChxwv2qǥc2+N5:Sɳ/ : Q7NN+}TIm&ĕ<<`&ep1/o9ǂb!k H(/1P5Du" {s P1k?K@3C ,-N#}_@QqNtG*"pXOkD+ Os&Ůz[<28V2q1xWݾ2c/3 IC)f}Td,vlB{42hy9ۗQ.)i}̗Rɨ.Ph/bγh//1HJ Q-9v1)2bxPbq>>d0-*GĢ.'e8Zp+z+^; "?QO4N@6Cy-S(cRoKPw!?ؠn'FH`$,{-PƝOT;F]8܎#Ef5+l<;6 B t [oZv\R$`uԮ[$y[ OX?6q D5Z2&ZtRd J|C^lQo[!F7J*gaavd0u&ѹW=C6hW0HrLeO` Kr̡4 !=۶ `SDuӣRHDɎ蠎T 5l=fQtc $3\ϵ;4ݜL FTyMNVvP3>W{WgElvARϺ ˞|P.|T6fRs+b 5L eo0+4+f~l"vu>Ԑ2cH~SOh>صttE6ej>Ӫ*v):}:WQ )ʲ VJim0T+"qJm]<6~N ӑP=|(y[ Fզzp=q7$q]sc6G@ L.fU/\:;i߫f3=cxrkO Ҁ7\J ;ikvc:ԈxsƍFǧϟ]"ku{9wU2?ffqxt!Vk3zQ g_ 6ӭ`5>h]k~{4p@g{:5Dm{ϒ8aj5-6[a[1X݂5o O(!oߦ I;#`wOn@}>zivrQfg0$I[)TQJ)2A@L;O(BAx! p?3n߬.@)f>ze9ca$'LIN[;8Wѷ(Fy1z t"SSqi=/LX{ jVٌc򴻺O;(ͷBgu)F Ji+W!Ks@*)_{#`2(tg6uYW]2b9Nge_w| `B_<7)DR/ TxiQ./;ɸ!e.SWxT *ʹ6- ?~OEVzVhU ֦떯5ufڑJܵԮv㍣|̐""o'##YI3Gp̕>ruB?e~XX-:*aYlH&8Ld%O~R !r! e:^1owNLp|-S;oj^ eH/AҧL6LUޥX%%fl,W)lI#ч(z5\V5Q{>7 _E#X3#޾Bs$pU©Nrgn_2X_[M0 6'_yCa*N!k̔`A^'NbQ|N03UЌ cĨiȀ*Q a[ُjjl9Bd?jjZډ`@~HqMKRbZ5F9%[ nޡ~8oJ/Pӏ~u-͌t?q0%~ k7p#ʗūz%?$F)Ap145*vJT%wMQMCrYK PU\d'!4.ʒa'tFR'kH&JMod\vA HG%vn֬oMe utgAǟṭhƄLj%XԼ9BL16ɋ-~F*x|Uú:byb'sߘn G@w`E)"^5Ga K-?%b.(Ë-lmAȂ߱06Hy* 70:{=,_Is r 3ӕW~ݿ=jeQJ.] H6b0wb/Dt(O4{_qMV&L^;N*d[aRv(DyiSJWYη3=x,B g6>2Tm;TI?˄\ {i&jlG䆢tqNp00' ǜQҕޜ}r{1EaYۮ œ0QB]-@ihD{?{G&y0ė2p и.Mu1GTi?Dp׶{5a{, aRdWK!,dwx '3ܮ^Vie=U $fHk~ɞ*Y`:d\twlIVr aI|.3zw`1,5R}%x9{@0~U3T}<?Ğ{1k8#E{4m5bG@6 ] T[2K,TB,Z-T4%gY$I@3oSmWs*9$E 3;&oġw\$1u L~;?!Ҽ5D^\5^xl8xcXɝu-[6+]W* bR>2f&-RRaDI #!ҙUWUЮH~ygdMb3 ]d!" *B^}80-(u(; *C/LBpf BZUwJVj(\XRVBFqg' ]87?. VO9Or Dc$k#)BO͘vD&uIz$ykq3:KF:_KwoݵN<$oV=n D 9 5u),Ay)]T>oM*}~PӦl]%|Ew\ ~Zci_[k}0}_w4 ru<"^e83zۺrj_Έ,VP-+$!i*IL 5Eb!==j;m}|WYDAK&z\Y&һl GW[~l zTH5)4oކașBa='w^F,V*$ҭcj}' /O(Br<؇JL 7@\+^nwIk&3 Q6f6l2ͮ~͜A@}]+zSobz4jOӝadBY}O8gǾRƦ~{݊}ҼviOsy!B.,CBxA?@aY0 t( Cno 32HpY6nV̡I}WSY]>_gN[Y?8OIĎ"hc6rEL9*aHX?4qjIZ)y^qNalCol$O<[BHl|!p8fqnG ѤΩe_U'ޞvN9ګMOPfPBތ =)t h2B(6hG2}RYÒբѺ)$RN.BJGW䄸Ge/ƲKy3 vuvzMWLii˅D9y OZn;m0~u$TזP9p+:_Rx% Uăalz| ˈ4ݴ c~,|?:礞v[ur'ANwg*qMA_!0 1d _ǝ|V:>Z`M!E(Jr [!AKks9A/zJL!F Uu$*Pah|zP$A}z-gPtˊЊIt۳IdҸz76M/+`ՁI{[δ{P6M~i'2~FhU03G{6i`cE>uڛo*bmnQ=rT{QV^@ͅWu hO?KUNF墳et׻E߲;H/o3.i!h?s/p|,iu^k7͊Ҭ5=#Ȳ=7 vu/7GQŹV-'΋T ؊BZ(k.zng_>@<}9 tiix֟rc]/Хzqpޡ)Ys`^gϸP5Lm/oF$Cs! ]dW>tF-qpQ#! 0dهiWP)UT챮zn6)[@0i;L*TMd! GݨF*yaG`HWܙ'a5^Vhg:S|}0> -2r-f _Q\[ c0ΛWT '^F}h_رӱ64w(i'UlѮ,n8gMa׵WU(:[%tob:\Qo/|{bzQ-{\5!4wfP>=? >"Tw&Qn xP#ģy){Gj3m@#f*{J(/خ,ے舩d/JZ jvM, ' (g I-ބ,o{K֢f xPmnϚJNXmkFx54{#-"ʟփ&pe.EMyr.]uwB73NW*bLAN,멷 ڈyQhR4R0*)0NPWfC`#2֤c\}yޛj$TB"nF94y%YNJtr  [ƾ]4WNQ>"~̀~ yCpռ5AR'R`! gRB@^?IO<0ع NwW eUa 97/nNjҨߖWaኀuS*1&+gk!V {5%>Z:|jKt=)r=|'kD,m$Uhc,m}7\L=eBL(qBhXb~I=E _HS6;s#F O1;6Qh蘳L7R'L0+ua!_y#KuJ:XJo{njiV?!7n$K&eCG=1yNN-9I;^6KQ̦ʆQrr'k@>tF.\>2!546 oW;{@WvR]rG<4mo`S ,}fסo'^N7㑘В](.s@+[ w%ܹ iXC6v]_sZa+ σs6L-56?A9 R|v2Jx*iN9{yJ.Jǰ= HN}_30sai*Uy&/>Wd8W,PoLhpk a-ۚ(!;/{*{&_ ;%zTSen;}6>zr!#n'Sya,mxrsEq+F ߜ!|@( Hw4q )rv-- 5{wjTe~_ A!V}~ʭ $uz@͙~b[dJ:|/ko`iMb >CYMHկ7]SM p4 n;1g?;Shv}aۮR8kD)wpzA@741yO2KXWٜ{\3jc/^ MFc3DB3t"G3Ġ*nX +@f ˭+s4'gmΔwV:ܿ8uۭQL @8d}DWZnK=V;̙}F5YvwdVߒ؉(挙u|Ϟӷ1v I(I)>=8o)8@ߥ\[Lf8>Qo% sߘp;]kmf̗SXpWo_"~)KR10JtP#VSmdoK(T@~R!SbS;e}XSYߜO"Bh-pI~H H+c52%5L^xYxA&lO,Nle0BGٱy_ZDU CȜPuiENS\U\x[HE[Opd /n`A*@ޭk(6٭*;#rigj¤zu"! pLI彧3Nh_YE}FwI]o tES.}##7- p_67n\{!:xb9O9ow7?ɕڐy!48f9}`~aO H iiiQipGX7C&q_ū;IYz'3!'|܇Emq(Q{{D-\ɯhDE*4wUrU{P >wbLeuA~5{#PJҞ]'c/0-<]J*7PI>W;Ovsӣ#hvK_""o Tt.xYꗃWO  c6W}Gl57΍ͳ8>unG*.0mNRQFxز_3|ԫVs[ҪGaA%̓7B~It#bUz·i<*') BEbF-b}~A;iJsiKGYjS1[c\d}@=gۣ>3H)эZs$0R"X[Oi$돮:{wEp=Ô D,;I%iZ * Posv +47,jz H\wl-pqݩTWTCH!nTŎlN4q{k$w+w}}RAϭCihGwb+ ?gEIBMxZ;(ZW&X2Q GO9 $0 x$n-0i}RRMQÞotŏLSS$_p{ '4"$^wwY άE/^MA513vfYV' HQ0yK4t! cϙK-,tS~Q"rUwd:"Vf'h2NI(LrD3M2Q(up5$(O2$ZcVX#_^R#"ѣ9kUR*qq I%b5!ɫ<)/GFj U4}͟M(ZVJ(=jcЀˤqJ@ A ʵ4j'KOEX/w`]:eTK;ـ.hQU|O=#zԟe5h9$F $)UGxS:6lc>kxpW:֖ls4d '͕0'yp{k\O $UWX<up!$*6@󰹁@;u~GAw`DvPqqЋ7k'WZv` |w$ 1 za C]3@a"% Q80L 8 UKO?J-cD KepKv#ƌ1 %R]x}Y/s`Q,rK?-U6~wK0 9&jVM8_ }E3M-0ޣcQ,kzEE\ B_w4+_fMVXB'gkItF>!0iq3$g B%_s.%/*܂a~Ygn]א1}[Y$v78K ƑtYu&lH&ņ:s4Vqw$7UHgf(%o\B\,ĄvZF~hwԎ$ߨja:j i#vg 9Le*Zto-S*ro$G[GPfyk7D׈|g? #Տ!%I]O`n#xEÿ;ԊR ЁJ[ALH+ %Zh,T$F^ř%7q?7cᲂ~FصZZދ?ΗI1qQHXӉ [6?deFƫtl{ӨD -n+rPlaڵV-=](EBZC|eSk}DDMpk~@N6Y$4~\3;|Lz6F21 wb|r3|ӛFlYFGYA%tba*][c"_宻H#of8+ᆁ 4|{! \1W3XZt|Uf7%~;Hg\TɇsI$v A#pbٰgԧcX'n\CX2jtv=!E%r{2d!J (qmZ1*I'NLcqԋe6y#d 6Y}Z:~jXt5[ȆHZ _Ǎ'jujl)(_Q֦5Lx,)y-ov}O7PqЄ?VHb?uŵ Fj U{>&xѪ*UիZoiyԻ68Zt[^ 5nAʥ[H'6K[FRz?- ^g{MFnXEcЖ0g:OrUĞ+%"?qa\mV]f\/ˉѓA㹅# FXj/pd "U{Z -''Dz%#iuXFig󙖬nل=M4܈k<+F1*]ҷ*2r.ZF3CF[u< tb %֎>+ g76o2R#ns7JF'lvm\{:&*i#8'ǀ|D,_c+zk͚cLY#wI$.i]'7$MOnTٖM.1 mahr<ɻ " Q=VϓV2̳ gt|jq[}h鷱^9LD} <8rt_=F]+6dI"2Ya` =``3M!嘑[Y̴ml2^TFF )B8.,$qѪ2OuS818bJ XK[ު"6Kˍ>K F~ (;Js߾򼑘#\Ԁ}U˪~fүAKyFb#odWc?>RsR6UeVYެfɾ+ⲍ1p7W7tnib*a]bGJuT9y+lԣ*^F9}RB.2A) 0dh c{Z?^yȇw-*w& Buo0 4q,U)|,^0?=f)'W\M%J~= _CNu(78xLv\_Z1zcD uf{۠2ڗ /|zc%Tgolq1;Uǟ b7G!AJMdEbZ1U܆KT>Mm{+tށvT^B NHŕZq94ۉ_[.j[cV0SQ)}n H}@˚eJ`ղDKeiS%z~S}8Mҵ|f3 ca#zgų)> zҠlEU!#[3`E&LsR&/X`h.|2~=h;Q74& e3%- ,P1riμ"P.㓹"IOSk4mD]]$$A 6xd1-  “m";a-;f_ (w9E]ќŶ-lҋ8.߱JÅePuoWR`jA o/kMC^۷Y0a+bYRikg%[Of~B@.N'MAcGDUFO?fn\b3͡JN 2i+4O kvV>hv z<6P_vQn_0e` ^l홖25vձHXz%יB6ɮzOAG3' Ңils|ļ4Zh򥥀]-&uӍd:5Jf'%8N`.Q't gziK뷇hS)0_zV|&)ٗ!w1wX wnoLۓKƫ }YAoCW鄯et#%\!eO vCSD9JwΜe Dx瀭ޡ̍+ =tϿi%΅޸sd!Ǟ*x(G@Fl_rnLzEwH #sa9*L2՗!)-з]? _*$I̤=WH8[{V VסL=3 #YTRñ[7leFŽt@kwcb 8^^=+-hUF: yD>8Lc*h3-;?. .61 UVA2ߥ!dٟa)I*fmV X0s\cL#U\iQa`7YʘoՐK]#1_oEaɷ8-g*"0@;s!S`WnoI.LɵgH %Uhuzfw0["wbdʞ3{p>0`]tpXkORId /x{'aL@J)?>ˬm%,&FzMzLM[Oii:Y>S+mm5_dܷqw ֖t šXe[/ quN&|DIZP؈+a!6HFsH\[GxJM[sίzX)2{7Cƻ'C+ڄ1%|6kL@oä۲/5lΛ7Ya)dE]Ң╆ f,|tWXFYwVxaג "yV[QT;n6g0?.z-cd;!`q$F9r9ꧽ$Y}Q>ٜ̾ZE_A/%odh/ [n1"HDҝ)Cr2Ć*8agkc.hmkҝKуai.Cnܨ$Wr)׳)b"د?*ACrw`Ayx_[SΆ"fC0ڑUЄe h]>i訅hMb:6"Mp>5;FEZl'?]XsBª^cfeNҸ?LeB9RkD7]K|QECGa$A=&Myx8[o+:pda>'O*5YzcNy"vEz^Ld"(C1 ' Mi>GJKl\ W3Գ0"Aďĺ9E:y֐~R2Ux,Y[7g2cGXbj.dp&B{4/݂Su>M;b'h?Ӳ$\nm}`O%6834-ZR O+oK -[iƠ:|<2[-T<yTh)S'fkx *O#nA-,6XK44My<2-W%) tHM5>t*$}S#/!ַ~;3aGHvthjߵ$C^Jdo0~gT݇L5 {aVjmS> 0{ k=닟]ܸ!%f4z?$#ƋƧiVw #~i E26C!6N{0SFΚ+Ԍg]<2*$E7J#6X%w$V3d"Jb"3R6bq>˷ךr#@"r$^V9Xټ7Pw#Vjk{m9C 2/r3gddAңf̗ *յbS7ByڅbqQ㴁iR)Q5^6EdZ{씑/N-/OM+/UGP@֗w|O 4Q*/W}%晊BdU\EʑɵB^VClX&Wwк!F&˂&O5=e8]N=scK]C3ɼ*>tG1+c1~=HHlpמfV&;cCҡɪsOXg"CrD)0O=lա6jM1ݎHyAm:|)L;ȅ9BI2p7bq(v0m 7f(:RdS-Sy@Ғ/h?֣ZJAgLkNͥe)cu-P߽Ӿ&c:PZ)Sd;~`L@9; t~c__?] S!GQ328&qIIͰg 0Dm& dQxbWzX=U8j"ʥRo9e|;+"6'zr: U+6 {|-=PR7,F/Rᣲ@$uؖҒ S v?g O n*hu_O/5W놨zXқIEV,sL_|'p.ԏ0Cuim_~IJ!nc=VjQ?.r)Ae܍xqֵI!0tXe~/c8;ygHNj<5f ~_mB=]5*)56-&X~uQ 5@gA\~Pט.;>%FkISk:FMjjr5"?@)?'].6wA5;7Ky733nøY%g@W B_{fߵL 2)HxwLBЎpo>K$O%[&,͢L$qǨYEZ+1I,~npJʿĆnޓOܗ5] }:qc~qƓwao T8|xJhj5Ԯ3lj'n(H}RǺc|Rߓ] U [70-# ;%| n1ߩ@@F'-:B?jvg\_BRxpߖQeN2fG Z+Vg@|;;vJ5%9r(MBC,) ̰U~qn9q53G_ڈ֘N.$`Mr-o/,r-_pmp ],w}y9-aT._gsa_W(y8y|g(kWu4a= &]w)i3W'mH\ztU>F:&&P AŽ0@@"FPFzT[CSsāvE/ 71Hҹ>%Q^$==jykG5͝zuZU#6Y>@D5oq&q9C]Rqr^IUNe*`c.)y^Mǜo<[}] C=5OX { L~KO}jvpRfӿ5YmXʰ19CݍClJf~z _(0-ֵ,7i9HfKӍiD"$e3__GMk{WwLqDB'-A03 {s9vZy_HHgT 9ZMԈ\IxV 1o [Fϓd),$9fyTQjzLdk0u#P)J2uŋpL*ͬ?3M}=CCln}T zj] kF:!ҡśʼ'$6T_o]X*s RnY #W$,dzr+D\8*ϝ~M,3mmG-yxG" 1$ yKud@Vxv"DndNC(Zpdpo a}"a|e<(jr÷;SCGKïU;s;w/MGx$iAH,$ qixi?rs;28p|޻ٖGlõ#Bhʥo+Cj0l(l]6X DPf(Z|*gKʆO; h2%P)>zkPpDQȜ,H7=>/pD)bOےEyĦѝ+m,;؆5屨DUН$͢_h)Όpa1W ޫB`ɢY?3d9Y }цn驏f{\+MqJ}սMs/~R'|] Ø]&xSҊ,P@)RЅ,e8r6NÙm8IHdYqI* >1ͥ0e6W(?j3\|ss oY:_E+Mt"Xb`&*d9t-YldKypɃ@3Ξˏe1ģW%U0lK䴍i`1ߢf |aѥsc-QNvq{$7mS)8/$Je&PW]ESm]l >@&+6\PYs}.LQFT_ Q8,6 0ԠoQ.IPf,D2p{Z,Trľs>>~DΧUh1EـjaWߤv@7MxʟJ^gdz6R3!0}+ѣuUi9{1Vf?E-GrxDqv~QKX<  # yfEj*bTEE8hez kY3[إ{AqzzA]DMK؀pĞch7aP}˜&莮)$|M UU_Z-"hy~NkN~|zCͼQ>\UMMC=\VAۈO/[U7W1&loiG3r"4Eľ|6DW|#=]-JvbխP@ ;dZ MM!]vL/6V!ē=9S88]j)z|Ԃu`SO_ܻ4*Wy3^Nl59070% [5,LzXy]m +*a976LGM+T |#~bp&P%O& am:;"Ri/W5K8 -6jhgQul>$;&I8\7ςJin59Ql {i0{Q1o\mLOڐR]do*SSYo)f>W'%0hhRVBE{X8 Ǘt|| BOy\ͤxh!8zo!tgYM,=R; ܝ1"ENO!"ٸvOgWFd)sG\T{2 UO¡}n[Z݇jP`/^(d:s^#gJnTD'~D2js͜7)$6l ᦌU72l`\n[>cкA^ >?vU C S-3= Q#jN9jJ AV<H,=*t WisΛ/n.dP#Vtv,4Qk~a0c||=įh{k$yL^i &A.UN%U|S6g4A0@ӃᣙƒaֲF~aZ{3?d|Px^:i%7F"w>`;lR;9qbbnW)UM +A]( Q 0BږzӺiUsNok^xzRE:< -,Y,- ˂q6w_qg5.>r=A* К8Y {*-G9V;x"5 .Q{I7L>0t&P,hݗ~ %a|@^阭+Tiٳ-qX(|4>?10!Ty?X*U.^ۦ 禕h~%6oQOfP?m|# zV 25[jpO?=9hzg" M^b%uO]=] NYOSQfipqwrAC%E)dYSE5&~"'!?Nō %6E!罣##o$9@^SpjO?jf0)'G68"g0h%lR[I)=T %cxfs˫9яYVKTLkQ+0vi6Z%VNQT_80ÄSX~$YVtZI4,(*u/A[s+/IlByzƪ12> SWT$*al+K%G=C7VE(l_Z& vEw*v2|@䈎 iQUǴ@Cd2+dٛ/kB}zrW2΀AF'߸pَ;~ 2x)Y`Q4.;QSlB`& S ) gja^"x]JbH/~-鶾F"mr/Vt j8ŏ!J)b$]!XC\t}!UH:_zR] O?<(sfVk!؃N\s^_Oà+IT?#pdx:ou>iD{9%##4njy;0DKIW"GYCS1 bT FQ7jڏ_݆Ekl@Nf|xKWLOw5t"+/:ry/`_Xuqk)#I%ّ#_X*Xz n~Z3J *3?/VJNE_8 w>Yʼn89c6Y0@P蘑e5F^oo$Ij`^ 369j.VN۾bY- $x <&UrrLoH$@wVh6A&ѤEc}Vel؁T#)BX=6=S6Qa6OZuimкDPo9ktV#9MD]uM?p\PQ#ʇg[sq>g Ն`u(qHϷ0-[fъr!H`8h~5@ /Y &^(y t|zb8{#lp6Cye=367ͅd9^>6Y+DCJD Q@aGANTmYaP?4>(u[&_T4mGw4O#BVl_00Z`?WHk5>Hc̖GѾ}QmmX ƥVlY{,N]҇}޴ndr_]R$PYUرXM= :UiT!|g?qA$gIv0܃jTc}'R% F)m-J-8Jtžb3IO|F(^4G_# x#\Y77j"`M# bEuNz zl:CJ'Gy:N [\n^ݯ,l&TPbwtpo?Im:-nPPģ~kf4(L-0XrhYLJy_L?2Sw$&uM)N{A{dU<ܳ[ [amrw6El=aInd[]48>ʭG E漅sⅣ~WxxW%bۑ4BnN*FA@gW%A1|MM B`g_X Xr/~YmwC"@zģ:obA2oB3Ŀ|#ܡhIv|5۠XĵZP.Ǟ^O4Aq|ց4<8XFF$Tsz=<?z4l+Q联{km1K5*:Q_\1ɧϠ`zh 6J"EVq({NnPR>5땺.JXN/U 4 EwGW:Ga5r0[]Qkn/~mKn4K3mny \pEELEHrVF2]#`[C,Gd{ U7NT3!2;Q/3k] ܯ_k~$@pn"հ~roiTsB|Z}H"j0GpǼ!0\vDUr#.  ڤ5jҬ1- mF1ქȔv_5S#;ܶ'[DJaۿ"Nkk~|=n,D>t D㱵.~&N KFX)3yqbF.(R߹d2>> OwIuZ׽4Hj$;ަлhʆ tY 8^4COrA>-1MξQd_2c#^__JaacD)C/ξ)̥-I1k~Ҵ4x3]~Lg'azX L}(]bPȈ ^c.#2A&'^qV Mh^bFToGQcAa Z?)ӓآ/d:uciγKBzX:烟̬ 6ðFDWiVC@m_8ͫlXla<kR?y 2te '=XPO02^ͳ%?kjNP41Nn/U7):g<' 4]2 ĭnlR4Av*rWmyZ6dׄH6=J2V{UK`TXyҕziw=fWq&<,VmQ2H&]UaL6f$!PX4ލ_D6 {w 6Y17:F|(THpRMGne!k|< p91eOho_O]ۈX#,0)a"$Vq*cquS&Byog{F6ۦ(?:e$Q8ԞT(YzmUv txøWҐW>{7G\U #/(ycɚ@Cnᦍ]4't@ cbH"r.,rtV,: ~Hk6g[TQ[e!^K؟aEբ&J٦"5MJTٗ7~򉡎!Pz"t_R8/ Z, ,7o ʯȈ3.3;Gi^dy]kJόnx7 ftA}I͋TQkļ(V }L8&)GXn f_*]BjCr81B} JMvJ=h-#h\׮#_׃ `-GhhS@`F.PAȆ3{l.l|: "1?K,XB*s>;=HDm楴8? q}BKze ç9_FsUQcC<70mwQ3Ã]eJN_&#3+ YZ