libselinux-static-2.9-9.el8_10 > 6 6_6 3!pQp)Tξ7]mtZ`gax ]mtZ`PiFg@O6..x`] 3:r,/ц`+;ʹ=Xod\KWI:kڟ) w|r-pY *O|7QY)>)sJA[p^ʆRk#T6V]v<I_gľ ^2,WrVX)񢯱@FqVb0A8q7x!mr<Mu3TBϞܿG rdz 44=d] A7BdquN=j4`~TJAo0=L#`|HDPZ 8;g9BIk\Bw}߮aWUnK)mJ2{9Cys~᪈qa%ۙG:xFf]Kbx#P#%;DgYA@j̶XyА6GلHRXSvNOB 865597574b6244b40fe7e0990f25943aa64f02c46711bbbf73ad9f4e352a17e1588a3dc47fe3c7891dec0fae458011798b868713<3!pQp)Tξ7]mtZ`gax ]mtZ`'[ܓ >!QbRqv nqm1RsѿevCKDӁ4徺e$k2Tjh@.M9`a=c]LZYE"=OrLL2%l-?<7+o[v6vڅfb~(9:VpRB^H kH,L?GgEk ƌ\۴"GoGqir{i6[mG@al~ ;X'-"ͰATa Ώ>ۈ;bf jCSq{6K$( `i׫1 grf.'_1."P 3 +$[Sj;nmhxrf֤(g*:E2PM]1Tglϸ9£9_gDOH@K7eGA>GZ1dLFa2(b|2/knj2$ь% X>p9[?[d ! H +Z`hl n p t  ,(8O9 O:kOGY|HYIYXYYY\Y]Y^YbYd[e[f[!l[#t[<u[@v[D[X[\[b[Clibselinux-static2.99.el8_10Static libraries used to build SELinuxThe libselinux-static package contains the static libraries needed for developing SELinux applications.gaord1-prod-x86build004.svc.aws.rockylinux.org TKojiRockyPublic Domaininfrastructure@rockylinux.orgUnspecifiedhttps://github.com/SELinuxProject/selinux/wikilinuxx86_64 Tga4963cb1df7a21dbee3c52b28c891cebfb50e6bb58d2bd2471fb863394885eb0drootrootlibselinux-2.9-9.el8_10.src.rpmlibselinux-staticlibselinux-static(x86-64)    libselinux-devel(x86-64)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)2.9-9.el8_103.0.4-14.6.0-14.0-15.2-14.14.3f@c@c.b_@_l@]X]@\@[@[ā@[ @[,[@[Zz@ZK@ZZZI@Z@Z}@Zz@Zu@ZTZOhZfY@Y˒Y(@YJYV@Y@Y|xY{'@Yx@Y.X-Xg@X@X @XN@X@XXx@Xv@XJX43@WH@W9W@Wq@Wm Wk@W,@W'A@W#LW@VяVIVɦV=@VVii@V@V UU@U4@Ua@UQ@U8U6;UTS@S@SSShShSXS 4@S@R@RUR&RʚRkR%R@RMUM@M@M@M@MlMQ0@MGM5ML@L-@L@L*@LLq@LN@LF@L$@KKKrK@KKqK}+KTM@KA@K@JJJJG@JG@JG@JjJS8JS8JB@J@JMIܑI@IԨIbI̿I@IV@III@I@I2I@IcGIcGIcGIG@IG@IBR@I1.I!\I!\I-HHHe@He@He@He@H@HHH@Ht@HsVHgy@H^>H^>H-w@H!H @H@G@GG#GF@G@GGƢ@GƢ@G­G@GGD@G@G@G@G,@G,@G@GG@GZ@GZ@GeGeG|@G|@GO@GO@G<4G<4G0W@G'@FF@FIFFFFF&@FF@FvFFS@FF@FF]F@FtFFzh@Fw@Fm9@F` @F; @F-@F,F@F@FF*FF @F @FoE@EE@E4@EE?Eɿ@EEEEElEx@E&E=E=E@Ex@EvEnEYEK/@E>@E4EE EgEgEDfDDDDq@D@DB@DB@DB@DB@D{DDX@D4D4D4DD@D@D~D~D|3DvDu@Dr@Dr@DlaDk@DiD`@D_2D_2DX@DWID?D;@D'Dj@C@CCC-Cǖ@Cǖ@C[CCC8@C@CC @CCqC @CCCC@CBC@C@C|pC|pC{@CyCp@Cp@CoACkM@CiCf@C_oC_oC^@C^@CX@CWCS@COCFc@CFc@CECECBnCA@C;@C:C*C&@C&@C%mCC@CC C a@C a@C&B=BۙB@B@Br!Br!Br!Bn-@BgB] B] BZfBS@BQ,@BIC@BAZ@B9q@B9q@B06B-B$Y@B#BB@B@B LB LBBAA)@A@A@AA@A@A@AyAҜ@AJA@A`A`AA@AA@Ak@AAA@AvA@AAoA]FA]FAQi@AN@AI@AF@AF@AA@A>@A>@A7 @A7 @A5A4h@A3A3A/"@A-A+-A(A$@A!@A A A@A@@@q@7@@@@6@@@A@)@@@@@@@@@~y@@~y@@~y@@}'@s@@s@@s@@l@@ia@@b@b@b@O@@O@@Dw@@9@@,@@ @/@@???E@?E@?٭???q@??@?@?@?}d?z?a@?M?D@>S@Vit Mojzis - 2.9-9Vit Mojzis - 2.9-8Vit Mojzis - 2.9-7Vit Mojzis - 2.9-6Vit Mojzis - 2.9-5Vit Mojzis - 2.9-4Vit Mojzis - 2.9-3Petr Lautrbach - 2.9-2.1Petr Lautrbach - 2.9-1Petr Lautrbach - 2.8-6Petr Lautrbach - 2.8-5Petr Lautrbach - 2.8-4Petr Lautrbach - 2.8-3Petr Lautrbach - 2.8-2Petr Lautrbach - 2.8-1Petr Lautrbach - 2.8-0.rc3.1Petr Lautrbach - 2.8-0.rc2.1Petr Lautrbach - 2.8-0.rc1.1Petr Lautrbach - 2.7-14Petr Lautrbach - 2.7-13Petr Lautrbach - 2.7-12Igor Gnatenko - 2.7-11Fedora Release Engineering - 2.7-10Igor Gnatenko - 2.7-9Iryna Shcherbina - 2.7-8Mamoru TASAKA - 2.7-7Petr Lautrbach - 2.7-6Petr Lautrbach - 2.7-5Petr Šabata - 2.7-4Zbigniew Jędrzejewski-Szmek - 2.7-3Zbigniew Jędrzejewski-Szmek - 2.7-2Petr Lautrbach - 2.7-1Fedora Release Engineering - 2.6-10Florian Weimer - 2.6-9Petr Lautrbach - 2.6-8Fedora Release Engineering - 2.6-7Petr Lautrbach - 2.6-6Petr Lautrbach - 2.6-5Petr Lautrbach - 2.6-4Petr Lautrbach - 2.6-3Petr Lautrbach - 2.6-2Petr Lautrbach - 2.6-1Fedora Release Engineering - 2.5-18Stephen Gallagher - 2.5-17Vít Ondruch - 2.5-16Petr Lautrbach - 2.5-15Charalampos Stratakis - 2.5-14Petr Lautrbach - 2.5-13Petr Lautrbach 2.5-12Petr Lautrbach 2.5-11Fedora Release Engineering - 2.5-10Petr Lautrbach - 2.5-9Petr Lautrbach - 2.5-8Petr Lautrbach - 2.5-7Petr Lautrbach - 2.5-6Petr Lautrbach - 2.5-5Petr Lautrbach - 2.5-4Petr Lautrbach - 2.5-3Petr Lautrbach 2.5-2Petr Lautrbach 2.5-1Petr Lautrbach 2.5-0.1.rc1Fedora Release Engineering - 2.4-8Vít Ondruch - 2.4-7Petr Lautrbach - 2.4-6Robert Kuska - 2.4-5Petr Lautrbach 2.4-4Petr Lautrbach 2.4-3Adam Jackson 2.4-2Petr Lautrbach 2.4-1.1Fedora Release Engineering - 2.3-11Petr Lautrbach 2.3-10Petr Lautrbach 2.3-9Petr Lautrbach 2.3-8Than Ngo - 2.3-7Vít Ondruch - 2.3-6Miroslav Grepl - 2.3-5Fedora Release Engineering - 2.3-4Fedora Release Engineering - 2.3-3Kalev Lember - 2.3-2Dan Walsh - 2.3-1Miroslav Grepl - 2.2.2-8Vít Ondruch - 2.2.2-7Dan Walsh - 2.2.2-6Dan Walsh - 2.2.2-5Dan Walsh - 2.2.2-4Dan Walsh - 2.2.2-3Dan Walsh - 2.2.2-2Dan Walsh - 2.2.2-1Adam Williamson - 2.2.1-6Dan Walsh - 2.2.1-5Dan Walsh - 2.2.1-4Dan Walsh - 2.2.1-3Dan Walsh - 2.2.1-2Dan Walsh - 2.2.1-1Dan Walsh - 2.2-1Dan Walsh - 2.1.13-21Dan Walsh - 2.1.13-20Dan Walsh - 2.1.13-19Dan Walsh - 2.1.13-17Fedora Release Engineering - 2.1.13-17Dan Walsh - 2.1.13-16Dan Walsh - 2.1.13-15Dan Walsh - 2.1.13-14Dan Walsh - 2.1.13-13Dan Walsh - 2.1.13-12Dan Walsh - 2.1.13-11Dan Walsh - 2.1.13-10Dan Walsh - 2.1.13-9Dan Walsh - 2.1.13-8Dan Walsh - 2.1.13-7Dan Walsh - 2.1.13-6Dan Walsh - 2.1.13-5Dan Walsh - 2.1.13-4Dan Walsh - 2.1.13-3Dan Walsh - 2.1.13-2Dan Walsh - 2.1.13-1Dan Walsh - 2.1.12-20Dan Walsh - 2.1.12-19Dan Walsh - 2.1.12-18Dan Walsh - 2.1.12-17Dan Walsh - 2.1.12-16Dan Walsh - 2.1.12-15Dan Walsh - 2.1.12-14Dan Walsh - 2.1.12-13Dan Walsh - 2.1.12-12Dan Walsh - 2.1.12-11Dan Walsh - 2.1.12-10Dan Walsh - 2.1.12-9Dan Walsh - 2.1.12-8Dan Walsh - 2.1.12-7Dan Walsh - 2.1.12-6Dan Walsh - 2.1.12-5Dan Walsh - 2.1.12-4Dan Walsh - 2.1.12-3Dan Walsh - 2.1.12-2Dan Walsh - 2.1.12-1David Malcolm - 2.1.11-6David Malcolm - 2.1.11-5Fedora Release Engineering - 2.1.11-4Dan Walsh - 2.1.11-3Dan Walsh - 2.1.11-2Dan Walsh - 2.1.11-1Dan Walsh - 2.1.10-5Dan Walsh - 2.1.10-4Dan Walsh - 2.1.10-3Dan Walsh - 2.1.10-2Dan Walsh - 2.1.10-1Dan Walsh - 2.1.9-9Dan Walsh - 2.1.9-8Dan Walsh - 2.1.9-7Kay Sievers - 2.1.9-6Dan Walsh - 2.1.9-5Harald Hoyer 2.1.9-4Dan Walsh - 2.1.9-3Dan Walsh - 2.1.9-2Dan Walsh - 2.1.9-1Dan Walsh - 2.1.8-5Dan Walsh - 2.1.8-4Dan Walsh - 2.1.8-2Dan Walsh - 2.1.8-1Dan Walsh - 2.1.7-2Dan Walsh - 2.1.7-1Dan Walsh - 2.1.6-4Dan Walsh - 2.1.6-3Dan Walsh - 2.1.6-2Dan Walsh - 2.1.6-1Dan Walsh - 2.1.5-5Ville Skyttä - 2.1.5-4Dan Walsh - 2.1.5-3Dan Walsh - 2.1.5-2Dan Walsh - 2.1.5-1Dan Walsh - 2.1.4-2Dan Walsh - 2.1.4-1Dan Walsh - 2.1.0-1Dan Walsh - 2.0.102-6Dan Walsh - 2.0.102-5Dan Walsh - 2.0.102-4Dan Walsh - 2.0.102-3Dan Walsh - 2.0.102-2Dan Walsh - 2.0.102-1Dan Walsh - 2.0.101-1Dan Walsh - 2.0.99-5Dan Walsh - 2.0.99-4Dan Walsh - 2.0.99-3Dan Walsh - 2.0.99-2Dan Walsh - 2.0.99-1Fedora Release Engineering Dan Walsh - 2.0.98-3Dan Walsh - 2.0.98-2Dan Walsh - 2.0.98-1Dan Walsh - 2.0.97-1Dan Walsh - 2.0.96-9Dan Walsh - 2.0.96-8jkeating - 2.0.96-7Adam Tkac - 2.0.96-6Dan Walsh - 2.0.96-5Dan Walsh - 2.0.96-4David Malcolm - 2.0.96-3Dan Walsh - 2.0.96-2Dan Walsh - 2.0.96-1Dan Walsh - 2.0.94-1Dan Walsh - 2.0.93-1Dan Walsh - 2.0.92-1Dan Walsh - 2.0.91-1Dan Walsh - 2.0.90-5Dan Walsh - 2.0.90-4Dan Walsh - 2.0.90-3Dan Walsh - 2.0.90-2Dan Walsh - 2.0.90-1Dan Walsh - 2.0.89-2Dan Walsh - 2.0.89-1Dan Walsh - 2.0.88-1Dan Walsh - 2.0.87-1Dan Walsh - 2.0.86-2Dan Walsh - 2.0.86-1Fedora Release Engineering - 2.0.85-2Dan Walsh - 2.0.85-1Dan Walsh - 2.0.84-1Dan Walsh - 2.0.82-2Dan Walsh - 2.0.82-1Dan Walsh - 2.0.81-1Dan Walsh - 2.0.80-1Dan Walsh - 2.0.79-6Dan Walsh - 2.0.79-5Dan Walsh - 2.0.79-4Dan Walsh - 2.0.79-3Dan Walsh - 2.0.79-1Dan Walsh - 2.0.78-5Dan Walsh - 2.0.78-4Dan Walsh - 2.0.78-3Dan Walsh - 2.0.78-2Dan Walsh - 2.0.78-1Fedora Release Engineering - 2.0.77-6Dan Walsh - 2.0.77-5Dan Walsh - 2.0.77-3Dan Walsh - 2.0.77-2Dan Walsh - 2.0.77-1Dan Walsh - 2.0.76-6Dan Walsh l - 2.0.76-5Dan Walsh - 2.0.76-4Ignacio Vazquez-Abrams - 2.0.76-2Dan Walsh - 2.0.76-1Dan Walsh - 2.0.75-2Dan Walsh - 2.0.75-1Dan Walsh - 2.0.73-1Dan Walsh - 2.0.71-6Dan Walsh - 2.0.71-5Dan Walsh - 2.0.71-4Dan Walsh - 2.0.71-3Dan Walsh - 2.0.71-2Dan Walsh - 2.0.71-1Dan Walsh - 2.0.70-1Dan Walsh - 2.0.69-2Dan Walsh - 2.0.69-1Dan Walsh - 2.0.67-4Dan Walsh - 2.0.67-3Dan Walsh - 2.0.67-2Dan Walsh - 2.0.67-1Dan Walsh - 2.0.65-1Dan Walsh - 2.0.64-3Dan Walsh - 2.0.64-2Dan Walsh - 2.0.64-1Dan Walsh - 2.0.61-4Dan Walsh - 2.0.61-3Dan Walsh - 2.0.61-2Dan Walsh - 2.0.61-1Dan Walsh - 2.0.60-1Dan Walsh - 2.0.59-2Dan Walsh - 2.0.59-1Dan Walsh - 2.0.58-1Dan Walsh - 2.0.57-2Dan Walsh - 2.0.57-1Dan Walsh - 2.0.56-1Dan Walsh - 2.0.55-1Dan Walsh - 2.0.53-1Dan Walsh - 2.0.52-1Dan Walsh - 2.0.50-1Dan Walsh - 2.0.49-2Dan Walsh - 2.0.49-1Dan Walsh - 2.0.48-1Dan Walsh - 2.0.47-4Adel Gadllah - 2.0.47-3Dan Walsh - 2.0.47-2Dan Walsh - 2.0.47-1Dan Walsh - 2.0.46-6Dan Walsh - 2.0.46-5Dan Walsh - 2.0.46-4Dan Walsh - 2.0.46-3Dan Walsh - 2.0.46-2Dan Walsh - 2.0.46-1Dan Walsh - 2.0.45-1Dan Walsh - 2.0.43-1Dan Walsh - 2.0.42-1Dan Walsh - 2.0.40-1Dan Walsh - 2.0.37-1Dan Walsh - 2.0.36-1Dan Walsh - 2.0.35-2Dan Walsh - 2.0.35-1Dan Walsh - 2.0.34-3Dan Walsh - 2.0.34-2Dan Walsh - 2.0.34-1Dan Walsh - 2.0.33-2Dan Walsh - 2.0.33-1Dan Walsh - 2.0.31-4Dan Walsh - 2.0.31-3Dan Walsh - 2.0.31-2Dan Walsh - 2.0.30-2Dan Walsh - 2.0.30-1Dan Walsh - 2.0.29-1Dan Walsh - 2.0.24-3Dan Walsh - 2.0.24-2Dan Walsh - 2.0.24-1Dan Walsh - 2.0.23-3Dan Walsh - 2.0.23-2Dan Walsh - 2.0.23-1Dan Walsh - 2.0.22-1Dan Walsh - 2.0.21-2Dan Walsh - 2.0.21-1Dan Walsh - 2.0.18-1Dan Walsh - 2.0.16-1Dan Walsh - 2.0.14-1Dan Walsh - 2.0.13-2Dan Walsh - 2.0.13-1Dan Walsh - 2.0.12-2Dan Walsh - 2.0.12-1Dan Walsh - 2.0.11-1Dan Walsh - 2.0.9-2Dan Walsh - 2.0.9-1Dan Walsh - 2.0.8-1Dan Walsh - 2.0.7-2Dan Walsh - 2.0.7-1Dan Walsh - 2.0.5-2Dan Walsh - 2.0.5-1Dan Walsh - 2.0.4-1Dan Walsh - 2.0.2-1Dan Walsh - 2.0.1-1Dan Walsh - 2.0.0-1Dan Walsh - 1.34.0-2Dan Walsh - 1.34.0-1Dan Walsh - 1.33.6-1Dan Walsh - 1.33.5-1Dan Walsh - 1.33.4-3Dan Walsh - 1.33.4-2Dan Walsh - 1.33.4-1Dan Walsh - 1.33.3-3Dan Walsh - 1.33.3-2Dan Walsh - 1.33.3-1Jeremy Katz - 1.33.2-4Dan Walsh - 1.33.2-3Dan Walsh - 1.33.2-2Dan Walsh - 1.33.2-1Dan Walsh - 1.33.1-2Dan Walsh - 1.33.1-1Dan Walsh - 1.32-1Jesse Keating - 1.30.29-2Dan Walsh - 1.30.29-1Jeremy Katz - 1.30.28-3Dan Walsh - 1.30.28-2Dan Walsh - 1.30.28-1Jeremy Katz - 1.30.27-2Dan Walsh - 1.30.27-1Jesse Keating - 1.20.26-2Dan Walsh - 1.30.25-1Dan Walsh - 1.30.24-1Dan Walsh - 1.30.22-2Dan Walsh - 1.30.22-1Dan Walsh - 1.30.20-1Jeremy Katz - 1.30.19-5Jeremy Katz - 1.30.19-4Dan Walsh 1.30.19-3Dan Walsh 1.30.19-2Dan Walsh 1.30.19-1Dan Walsh 1.30.15-5Dan Walsh 1.30.15-4Dan Walsh 1.30.15-3Dan Walsh 1.30.15-2Dan Walsh 1.30.15-1Dan Walsh 1.30.12-2Dan Walsh 1.30.12-1Dan Walsh 1.30.11-2Dan Walsh 1.30.11-1Dan Walsh 1.30.10-4Dan Walsh 1.30.10-3Dan Walsh 1.30.10-2Dan Walsh 1.30.10-1Dan Walsh 1.30.8-1Dan Walsh 1.30.7-2Dan Walsh 1.30.7-1Dan Walsh 1.30.6-2Dan Walsh 1.30.6-1Dan Walsh 1.30.5-1Dan Walsh 1.30.3-3Dan Walsh 1.30.3-2Dan Walsh 1.30.3-1Dan Walsh 1.30.1-2Dan Walsh 1.30.1-1Dan Walsh 1.30-1Jesse Keating - 1.29.7-1.2Jesse Keating - 1.29.7-1.1Dan Walsh 1.29.7-1Dan Walsh 1.29.6-1Dan Walsh 1.29.5-2Dan Walsh 1.29.5-1Dan Walsh 1.29.4-1Dan Walsh 1.29.3-2Dan Walsh 1.29.3-1Dan Walsh 1.29.2-4Dan Walsh 1.29.2-3Dan Walsh 1.29.2-2Dan Walsh 1.29.2-1Dan Walsh 1.29.1-3Jesse Keating Dan Walsh 1.29.1-1Dan Walsh 1.28-1Dan Walsh 1.27.28-2Dan Walsh 1.27.28-1Dan Walsh 1.27.26-1Dan Walsh 1.27.25-1Dan Walsh 1.27.23-1Dan Walsh 1.27.22-4Dan Walsh 1.27.22-3Dan Walsh 1.27.22-2Dan Walsh 1.27.22-1Dan Walsh 1.27.21-2Dan Walsh 1.27.21-1Dan Walsh 1.27.20-1Dan Walsh 1.27.19-1Dan Walsh 1.27.18-1Dan Walsh 1.27.17-4Dan Walsh 1.27.17-2Dan Walsh 1.27.17-1Dan Walsh 1.27.14-3Dan Walsh 1.27.14-2Dan Walsh 1.27.14-1Dan Walsh 1.27.13-2Dan Walsh 1.27.13-1Dan Walsh 1.27.12-1Dan Walsh 1.27.9-2Dan Walsh 1.27.9-1Dan Walsh 1.27.7-1Dan Walsh 1.27.6-1Dan Walsh 1.27.4-1Dan Walsh 1.27.3-1Dan Walsh 1.27.2-1Dan Walsh 1.27.1-3Dan Walsh 1.27.1-2Dan Walsh 1.26-6Dan Walsh 1.26-5Dan Walsh 1.26-3Dan Walsh 1.26-2Dan Walsh 1.25.7-1Dan Walsh 1.25.6-1Dan Walsh 1.25.5-1Dan Walsh 1.25.4-1Dan Walsh 1.25.3-2Dan Walsh 1.25.3-1Dan Walsh 1.25.2-2Dan Walsh 1.25.2-1Dan Walsh 1.24.2-1Dan Walsh 1.24.1-1Dan Walsh 1.23.11-1Dan Walsh 1.23.10-3Dan Walsh 1.23.10-2Dan Walsh 1.23.10-1Dan Walsh 1.23.8-1Dan Walsh 1.23.7-3Dan Walsh 1.23.7-2Dan Walsh 1.23.7-1Dan Walsh 1.23.6-1Dan Walsh 1.23.5-1Dan Walsh 1.23.4-1Dan Walsh 1.23.2-3Dan Walsh 1.23.2-2Dan Walsh 1.23.2-1Dan Walsh 1.23.1-1Dan Walsh 1.22-1Dan Walsh 1.21.13-1Dan Walsh 1.21.12-1Dan Walsh 1.21.11-2Dan Walsh 1.21.11-1Dan Walsh 1.21.10-3Dan Walsh 1.21.10-1Dan Walsh 1.21.9-2Dan Walsh 1.21.9-1Dan Walsh 1.21.8-1Dan Walsh 1.21.7-1Dan Walsh 1.21.5-1Dan Walsh 1.21.4-1Dan Walsh 1.21.2-1Dan Walsh 1.21.1-3Dan Walsh 1.21.1-2Dan Walsh 1.21.1-1Dan Walsh 1.20.1-3Dan Walsh 1.20.1-2Dan Walsh 1.20.1-1Dan Walsh 1.19.4-1Dan Walsh 1.19.3-3Dan Walsh 1.19.3-2Dan Walsh 1.19.3-1Dan Walsh 1.19.2-1Dan Walsh 1.19.1-6Dan Walsh 1.19.1-4Dan Walsh 1.19.1-2Dan Walsh 1.19.1-1Steve Grubb 1.18.1-5Dan Walsh 1.18.1-4Dan Walsh 1.18.1-3Steve Grubb 1.18.1-2Dan Walsh 1.18.1-1Steve Grubb 1.17.15-2Steve Grubb 1.17.15-2Dan Walsh 1.17.15-1Dan Walsh 1.17.14-1Dan Walsh 1.17.13-3Dan Walsh 1.17.13-2Dan Walsh 1.17.13-1Dan Walsh 1.17.12-2Dan Walsh 1.17.12-1Dan Walsh 1.17.11-1Dan Walsh 1.17.10-1Dan Walsh 1.17.9-2Dan Walsh 1.17.9-1Dan Walsh 1.17.8-2Dan Walsh 1.17.8-1Dan Walsh 1.17.7-1Dan Walsh 1.17.6-1Dan Walsh 1.17.5-1Dan Walsh 1.17.4-1Dan Walsh 1.17.3-1Dan Walsh 1.17.2-1Dan Walsh 1.17.1-1Dan Walsh 1.16.1-1Colin Walters 1.16-1Dan Walsh 1.15.7-1Dan Walsh 1.15.6-1Dan Walsh 1.15.5-1Dan Walsh 1.15.4-1Dan Walsh 1.15.3-2Dan Walsh 1.15.3-1Dan Walsh 1.15.2-1Dan Walsh 1.15.1-3Dan Walsh 1.15.1-2Dan Walsh 1.15.1-1Dan Walsh 1.14.1-1Dan Walsh 1.13.4-1Elliot Lee Dan Walsh 1.13.3-2Dan Walsh 1.13.2-1Dan Walsh 1.13.1-1Dan Walsh 1.12-2Dan Walsh 1.12-1Dan Walsh 1.11.4-1Dan Walsh 1.11.3-1Dan Walsh 1.11.2-1Dan Walsh 1.11-4Dan Walsh 1.11-3Dan Walsh 1.11-2Dan Walsh 1.11-1Dan Walsh 1.10-2Dan Walsh 1.10-1Dan Walsh 1.9-1Dan Walsh 1.8-1Dan Walsh 1.6-6Dan Walsh 1.6-5Dan Walsh 1.6-4Dan Walsh 1.6-3Dan Walsh 1.6-2Elliot Lee Dan Walsh 1.4-11Elliot Lee Dan Walsh 1.4-9Dan Walsh 1.4-8Dan Walsh 1.4-7Dan Walsh 1.4-6Dan Walsh 1.4-5Dan Walsh 1.4-4Dan Walsh 1.4-3Dan Walsh 1.4-2Dan Walsh 1.4-1Dan Walsh 1.3-2Dan Walsh 1.3-1Dan Walsh 1.2-9Dan Walsh 1.2-8Dan Walsh 1.2-7Dan Walsh 1.2-6Dan Walsh 1.2-5Dan Walsh 1.2-4Dan Walsh 1.2-3Dan Walsh 1.2-2Dan Walsh 1.2-1Dan Walsh 1.0-1- restorecon: Include (RHEL-50830)- restorecon: Fix memory leak - xattr_value (#2137965)- Restorecon: Ignore missing directories when -i is used (#2137965)- Describe fcontext regular expressions (#1904059) - Strip spaces before values in config (#2012145)- Deprecate security_compute_user(), update man pages (#1879368)- Eliminate use of security_compute_user() (#1879368)- Fix mcstrans secolor examples in secolor.conf man page (#1770270)- Use Python distutils to install SELinux python bindings (#1719771) - Move sefcontext_compile to -utils package (#1612518)- SELinux userspace 2.9 release- Fix RESOURCE_LEAK coverity scan defects- selinux_restorecon: Skip customized files also without -v - man pages fixes- Build libselinux-python when %with_python2 macro is set to non-zero value- Build libselinux-ruby (#1581322)- Don't build the Python 2 subpackage (#1567358)- SELinux userspace 2.8 release- SELinux userspace 2.8-rc3 release candidate- SELinux userspace 2.8-rc2 release candidate- SELinux userspace 2.8-rc1 release candidate- Do not build libselinux-ruby- build: Replace PYSITEDIR with PYTHONLIBDIR- Correct manpages regarding removable_context - build: follow standard semantics for DESTDIR and PREFIX- Escape macros in %changelog- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild- Switch to %ldconfig_scriptlets- Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)- F-28: rebuild for ruby25- Rebuild with libsepol-2.7-3- Drop golang bindings - Add support for pcre2 to pkgconfig definition- Enable the python3 subpackages on EL- Also add Provides for the old name without %_isa- Python 2 binary package renamed to python2-libselinux See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3 - Python 3 binary package renamed to python3-libselinux- Update to upstream release 2017-08-04- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild- Rebuild with binutils fix for ppc64le (#1475636)- Always unmount selinuxfs for SELINUX=disabled- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- Don't finalize mount state in selinux_set_policy_root() - Follow upstream and rename _selinux.so to _selinux.cpython-36m-x86_64-linux-gnu.so- Fix setfiles progress indicator- Fix segfault in selinux_restorecon_sb() (#1433577) - Change matchpathcon usage to match with matchpathcon manpage - Fix a corner case getsebool return value- Fix 'semanage boolean -m' to modify active value- Fix FTBFS - fatal error (#1427902)- Update to upstream release 2016-10-14- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild- Add missing %license macro- Rebuilt for https://fedoraproject.org/wiki/Changes/Ruby_2.4- Rewrite restorecon() python method- Rebuild for Python 3.6- Fix pointer handling in realpath_not_final (#1376598)- Fix -Wsign-compare warnings - Drop unused stdio_ext.h header file - Kill logging check for selinux_enabled() - Drop usage of _D_ALLOC_NAMLEN - Add openrc_contexts functions - Fix redefinition of XATTR_NAME_SELINUX - Correct error path to always try text - Clean up process_file() - Handle NULL pcre study data - Fix in tree compilation of utils that depend on libsepol- Rebuilt with libsepol-2.5-9- https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages- Clarify is_selinux_mls_enabled() description - Explain how to free policy type from selinux_getpolicytype() - Compare absolute pathname in matchpathcon -V - Add selinux_snapperd_contexts_path()- Move _selinux.so to /usr/lib64/python*/site-packages- Modify audit2why analyze function to use loaded policy - Sort object files for deterministic linking order - Respect CC and PKG_CONFIG environment variable - Avoid mounting /proc outside of selinux_init_load_policy()- Fix multiple spelling errors- Rebuilt with libsepol-2.5-5- Fix typo in sefcontext_compile.8- Fix location of selinuxfs mount point - Only mount /proc if necessary - procattr: return einval for <= 0 pid args - procattr: return error on invalid pid_t input- Use fully versioned arch-specific requires- Update to upstream release 2016-02-23- Update to upstream rc1 release 2016-01-07- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild- Rebuilt for https://fedoraproject.org/wiki/Changes/Ruby_2.3- Build libselinux without rpm_execcon() (#1284019)- Rebuilt for Python3.5 rebuild- Flush the class/perm string mapping cache on policy reload (#1264051) - Fix restorecon when path has no context- Simplify procattr cache (#1257157,#1232371)- Export ldflags into the build so hardening works- Update to 2.4 release- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- is_selinux_enabled: Add /etc/selinux/config test (#1219045) - matchpathcon/selabel_file: Fix man pages (#1219718)- revert support for policy compressed with xv (#1185266)- selinux.py - use os.walk() instead of os.path.walk() (#1195004) - is_selinux_enabled(): drop no-policy-loaded test (#1195074) - fix -Wformat errors and remove deprecated mudflap option- bump release and rebuild so that koji-shadow can rebuild it against new gcc on secondary arch- Rebuilt for https://fedoraproject.org/wiki/Changes/Ruby_2.2- Compiled file context files and the original should have the same permissions from dwalsh@redhat.com - Add selinux_openssh_contexts_path() to get a path to /contexts/openssh_contexts- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild- Rebuilt for https://fedoraproject.org/wiki/Changes/Python_3.4- Update to upstream * Get rid of security_context_t and fix const declarations. * Refactor rpm_execcon() into a new setexecfilecon() from Guillem Jover.- Add selinux_openssh_contexts_path()- Rebuilt for https://fedoraproject.org/wiki/Changes/Ruby_2.1- Fix spelling mistake in man page- More go bindings - restorecon, getpidcon, setexeccon- Add additional go bindings for get*con calls - Add go bindings test command - Modify man pages of set*con calls to mention that they are thread specific- Move selinux.go to /usr/lib64/golang/src/pkg/github.com/selinux/selinux.go - Add Int_to_mcs function to generate MCS labels from integers.- Add ghost flag for /var/run/setrans- Update to upstream * Fix userspace AVC handling of per-domain permissive mode. - Verify context is not null when passed into *setfilecon_raw- revert unexplained change to rhat.patch which broke SELinux disablement- Verify context is not null when passed into lsetfilecon_raw- Mv selinux.go to /usr/share/gocode/src/selinux- Add golang support to selinux.- Remove togglesebool man page- Update to upstream * Remove -lpthread from pkg-config file; it is not required. - Add support for policy compressed with xv- Update to upstream * Fix avc_has_perm() returns -1 even when SELinux is in permissive mode. * Support overriding Makefile RANLIB from Sven Vermeulen. * Update pkgconfig definition from Sven Vermeulen. * Mount sysfs before trying to mount selinuxfs from Sven Vermeulen. * Fix man pages from Laurent Bigonville. * Support overriding PATH and LIBBASE in Makefiles from Laurent Bigonville. * Fix LDFLAGS usage from Laurent Bigonville * Avoid shadowing stat in load_mmap from Joe MacDonald. * Support building on older PCRE libraries from Joe MacDonald. * Fix handling of temporary file in sefcontext_compile from Dan Walsh. * Fix procattr cache from Dan Walsh. * Define python constants for getenforce result from Dan Walsh. * Fix label substitution handling of / from Dan Walsh. * Add selinux_current_policy_path from Dan Walsh. * Change get_context_list to only return good matches from Dan Walsh. * Support udev-197 and higher from Sven Vermeulen and Dan Walsh. * Add support for local substitutions from Dan Walsh. * Change setfilecon to not return ENOSUP if context is already correct from Dan Walsh. * Python wrapper leak fixes from Dan Walsh. * Export SELINUX_TRANS_DIR definition in selinux.h from Dan Walsh. * Add selinux_systemd_contexts_path from Dan Walsh. * Add selinux_set_policy_root from Dan Walsh. * Add man page for sefcontext_compile from Dan Walsh.- Add systemd_contexts support - Do substitutions on a local sub followed by a dist sub- Eliminate requirement on pthread library, by applying patch for Jakub Jelinek Resolves #1013801- Fix handling of libselinux getconlist with only one entry- Add Python constants for SELinux enforcing modes- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild- Add sefcontext_compile.8 man page - Add Russell Coker patch to fix man pages - Add patches from Laurent Bigonville to fix Makefiles for debian. - modify spec file to use %{_prefix}/lib- Fix patch that Handles substitutions for /- Handle substitutions for / - semanage fcontext -a -e / /opt/rh/devtoolset-2/root- Add Eric Paris patch to fix procattr calls after a fork.- Move secolor.conf.5 into mcstrans package and out of libselinux- Fix python bindings for selinux_check_access- Fix reseting the policy root in matchpathcon- Cleanup setfcontext_compile atomic patch - Add matchpathcon -P /etc/selinux/mls support by allowing users to set alternate root - Make sure we set exit codes from selinux_label calls to ENOENT or SUCCESS- Make setfcontext_compile atomic- Fix memory leak in set*con calls.- Move matchpathcon to -utils package - Remove togglesebool- Fix selinux man page to reflect what current selinux policy is.- Add new constant SETRANS_DIR which points to the directory where mstransd can find the socket and libvirt can write its translations files.- Bring back selinux_current_policy_path- Revert some changes which are causing the wrong policy version file to be created- Update to upstream * audit2why: make sure path is nul terminated * utils: new file context regex compiler * label_file: use precompiled filecontext when possible * do not leak mmapfd * sefcontontext_compile: Add error handling to help debug problems in libsemanage. * man: make selinux.8 mention service man pages * audit2why: Fix segfault if finish() called twice * audit2why: do not leak on multiple init() calls * mode_to_security_class: interface to translate a mode_t in to a security class * audit2why: Cleanup audit2why analysys function * man: Fix program synopsis and function prototypes in man pages * man: Fix man pages formatting * man: Fix typo in man page * man: Add references and man page links to _raw function variants * Use ENOTSUP instead of EOPNOTSUPP for getfilecon functions * man: context_new(3): fix the return value description * selinux_status_open: handle error from sysconf * selinux_status_open: do not leak statusfd on exec * Fix errors found by coverity * Change boooleans.subs to booleans.subs_dist. * optimize set*con functions * pkg-config do not specifc ruby version * unmap file contexts on selabel_close() * do not leak file contexts with mmap'd backend * sefcontext_compile: do not leak fd on error * matchmediacon: do not leak fd * src/label_android_property: do not leak fd on error- Update to latest patches from eparis/Upstream- Update to latest patches from eparis/Upstream- Try procatt speedup patch again- Roll back procattr speedups since it seems to be screwing up systemd labeling.- Fix tid handling for setfscreatecon, old patch still broken in libvirt- Fix tid handling for setfscreatecon, old patch still broken in libvirt- setfscreatecon after fork was broken by the Set*con patch. - We needed to reset the thread variables after a fork.- Fix setfscreatecon call to handle failure mode, which was breaking udev- Ondrej Oprala patch to optimize set*con functions - Set*con now caches the security context and only re-sets it if it changes.- Rebuild against latest libsepol- Update to latest patches from eparis/Upstream - Fix errors found by coverity - set the sepol_compute_av_reason_buffer flag to 0. This means calculate denials only? - audit2why: remove a useless policy vers variable - audit2why: use the new constraint information- Rebuild with latest libsepol- Return EPERM if login program can not reach default label for user - Attempt to return container info from audit2why- Apply patch from eparis to fix leaked file descriptor in new labeling code- Add new function mode_to_security_class which takes mode instead of a string. - Possibly will be used with coreutils.- Add back selinuxconlist and selinuxdefcon man pages- Fix segfault from calling audit2why.finish() multiple times- Fix up selinux man page to reference service man pages- Rebuild with fixed libsepol- Update to upstream * Add support for lxc_contexts_path * utils: add service to getdefaultcon * libsemanage: do not set soname needlessly * libsemanage: remove PYTHONLIBDIR and ruby equivalent * boolean name equivalency * getsebool: support boolean name substitution * Add man page for new selinux_boolean_sub function. * expose selinux_boolean_sub * matchpathcon: add -m option to force file type check * utils: avcstat: clear sa_mask set * seusers: Check for strchr failure * booleans: initialize pointer to silence coveriety * stop messages when SELinux disabled * label_file: use PCRE instead of glibc regex functions * label_file: remove all typedefs * label_file: move definitions to include file * label_file: do string to mode_t conversion in a helper function * label_file: move error reporting back into caller * label_file: move stem/spec handling to header * label_file: drop useless ncomp field from label_file data * label_file: move spec_hasMetaChars to header * label_file: fix potential read past buffer in spec_hasMetaChars * label_file: move regex sorting to the header * label_file: add accessors for the pcre extra data * label_file: only run regex files one time * label_file: new process_file function * label_file: break up find_stem_from_spec * label_file: struct reorg * label_file: only run array once when sorting * Ensure that we only close the selinux netlink socket once. * improve the file_contexts.5 manual page- rebuild for https://fedoraproject.org/wiki/Features/Python_3.3- make with_python3 be conditional on fedora- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- Move the tmpfiles.d content from /etc/tmpfiles.d to /usr/lib/tmpfiles.d- Revert Eric Paris Patch for selinux_binary_policy_path- Update to upstream * Fortify source now requires all code to be compiled with -O flag * asprintf return code must be checked * avc_netlink_recieve handle EINTR * audit2why: silence -Wmissing-prototypes warning * libsemanage: remove build warning when build swig c files * matchpathcon: bad handling of symlinks in / * seusers: remove unused lineno * seusers: getseuser: gracefully handle NULL service * New Android property labeling backend * label_android_property whitespace cleanups * additional makefile support for rubywrap- Fix booleans.subs name, change function name to selinux_boolean_sub, add man page, minor fixes to the function- Fix to compile with Fortify source * Add -O compiler flag * Check return code from asprintf - Fix handling of symbolic links in / by realpath_not_final- Add support for lxc contexts file- Add support fot boolean subs file- Update to upstream * Fix dead links to www.nsa.gov/selinux * Remove jump over variable declaration * Fix old style function definitions * Fix const-correctness * Remove unused flush_class_cache method * Add prototype decl for destructor * Add more printf format annotations * Add printf format attribute annotation to die() method * Fix const-ness of parameters & make usage() methods static * Enable many more gcc warnings for libselinux/src/ builds * utils: Enable many more gcc warnings for libselinux/utils builds * Change annotation on include/selinux/avc.h to avoid upsetting SWIG * Ensure there is a prototype for 'matchpathcon_lib_destructor' * Update Makefiles to handle /usrmove * utils: Stop separating out matchpathcon as something special * pkg-config to figure out where ruby include files are located * build with either ruby 1.9 or ruby 1.8 * assert if avc_init() not called * take security_deny_unknown into account * security_compute_create_name(3) * Do not link against python library, this is considered * bad practice in debian * Hide unnecessarily-exported library destructors- Add selinux_current_policy_path to return /sys/fs/selinux/policy if it exists - Otherwise search for policy on disk- Change selinux_binary_policy_path to return /sys/fs/selinux/policy - Add selinux_installed_policy_path to return what selinux_binary_policy_path used to return - avc_has_perm will now return yes if the machine is in permissive mode - Make work with ruby-1.9- avc_netlink_recieve should continue to poll if it receinves an EINTR rather- use /sbin/ldconfig, glibc does not provide /usr/sbin/ldconfig in the RPM database for now- Rebuild with cleaned up upstream to work in /usr- install everything in /usr https://fedoraproject.org/wiki/Features/UsrMove- Add Dan Berrange code cleanup patches.- Fix selabal_open man page to refer to proper selinux_opt structure-Update to upstream * Fix setenforce man page to refer to selinux man page * Cleanup Man pages * merge freecon with getcon man page- Add patch from Richard Haines When selabel_lookup found an invalid context with validation enabled, it always stated it was 'file_contexts' whether media, x, db or file. The fix is to store the spec file name in the selabel_lookup_rec on selabel_open and use this as output for logs. Also a minor fix if key is NULL to stop seg faults. - Fix setenforce manage page.- Rebuild with new libsepol- Fix setenforce man page, from Miroslav Grepl- Upgrade to upstream * selinuxswig_python.i: don't make syscall if it won't change anything * Remove assert in security_get_boolean_names(3) * Mapped compute functions now obey deny_unknown flag * get_default_type now sets EINVAL if no entry. * return EINVAL if invalid role selected * Updated selabel_file(5) man page * Updated selabel_db(5) man page * Updated selabel_media(5) man page * Updated selabel_x(5) man page * Add man/man5 man pages * Add man/man5 man pages * Add man/man5 man pages * use -W and -Werror in utils- Change python binding for restorecon to check if the context matches. - If it does do not reset- Upgrade to upstream * Makefiles: syntax, convert all ${VAR} to $(VAR) * load_policy: handle selinux=0 and /sys/fs/selinux not exist * regenerate .pc on VERSION change * label: cosmetic cleanups * simple interface for access checks * Don't reinitialize avc_init if it has been called previously * seusers: fix to handle large sets of groups * audit2why: close fd on enomem * rename and export symlink_realpath * label_file: style changes to make Eric happy.- Apply libselinux patch to handle large groups in seusers.- Add selinux_check_access function. Needed for passwd, chfn, chsh- Handle situation where selinux=0 passed to the kernel and both /selinux and-Update to upstream * utils: matchpathcon: remove duplicate declaration * src: matchpathcon: use myprintf not fprintf * src: matchpathcon: make sure resolved path starts * put libselinux.so.1 in /lib not /usr/lib * tree: default make target to all not- Switch to use ":" as prefix separator rather then ";"- Avoid unnecessary shell invocation in %post.- Fix handling of subset labeling that is causing segfault in restorecon- Change matchpathcon_init_prefix and selabel_open to allow multiple initial prefixes. Now you can specify a ";" separated list of prefixes and the labeling system will only load regular expressions that match these prefixes.- Change matchpatcon to use proper myprintf - Fix symlink_realpath to always include "/" - Update to upstream * selinux_file_context_verify function returns wrong value. * move realpath helper to matchpathcon library * python wrapper makefile changes- Move to new Makefile that can build with or without PYTHON being set-Update to upstream 2.1.4 2011-0817 * mapping fix for invalid class/perms after selinux_set_mapping * audit2why: work around python bug not defining * resolv symlinks and dot directories before matching 2.1.2 2011-0803 * audit2allow: do not print statistics * make python bindings for restorecon work on relative path * fix python audit2why binding error * support new python3 functions * do not check fcontext duplicates on use * Patch for python3 for libselinux 2.1.1 2011-08-02 * move .gitignore into utils * new setexecon utility * selabel_open fix processing of substitution files * mountpoint changing patch. * simplify SRCS in Makefile 2.1.1 2011-08-01 * Remove generated files, introduce more .gitignore-Update to upstream * Release, minor version bump * Give correct names to mount points in load_policy by Dan Walsh. * Make sure selinux state is reported correctly if selinux is disabled or fails to load by Dan Walsh. * Fix crash if selinux_key_create was never called by Dan Walsh. * Add new file_context.subs_dist for distro specific filecon substitutions by Dan Walsh. * Update man pages for selinux_color_* functions by Richard Haines.- Only call dups check within selabel/matchpathcon if you are validating the context - This seems to speed the loading of labels by 4 times.- Move /selinux to /sys/fs/selinux - Add selinuxexeccon - Add realpath to matchpathcon to handle matchpathcon * type queries.- Update for latest libsepol- Update for latest libsepol- Fix restorecon python binding to accept relative paths-Update to upstream * Give correct names to mount points in load_policy by Dan Walsh. * Make sure selinux state is reported correctly if selinux is disabled or fails to load by Dan Walsh. * Fix crash if selinux_key_create was never called by Dan Walsh. * Add new file_context.subs_dist for distro specific filecon substitutions by Dan Walsh. * Update man pages for selinux_color_* functions by Richard Haines.- Clean up patch to make handling of constructor cleanup more portable * db_language object class support for selabel_lookup from KaiGai Kohei. * Library destructors for thread local storage keys from Eamon Walsh.- Add distribution subs pathAdd patch from dbhole@redhat.com to initialize thread keys to -1 Errors were being seen in libpthread/libdl that were related to corrupt thread specific keys. Global destructors that are called on dl unload. During destruction delete a thread specific key without checking if it has been initialized. Since the constructor is not called each time (i.e. key is not initialized with pthread_key_create each time), and the default is 0, there is a possibility that key 0 for an active thread gets deleted. This is exactly what is happening in case of OpenJDK. Workaround patch that initializes the key to -1. Thus if the constructor is not called, the destructor tries to delete key -1 which is deemed invalid by pthread_key_delete, and is ignored.- Call fini_selinuxmnt if selinux is disabled, to cause is_selinux_disabled() to report correct data- Change mount source options to use "proc" and "selinuxfs"- Update to upstream * Turn off default user handling when computing user contexts by Dan Walsh- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- Fixup selinux man page- Fix Makefile to use pkg-config --cflags python3 to discover include paths- Update to upstream - Turn off fallback in to SELINUX_DEFAULTUSER in get_context_list- Update to upstream * Thread local storage fixes from Eamon Walsh.- Add /etc/tmpfiles.d support for /var/run/setrans- Ghost /var/run/setrans- Rebuilt for gcc bug 634757- rebuild via updated swig (#624674)- Update for python 3.2a1- Turn off fallback in to SELINUX_DEFAULTUSER in get_context_list- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild- Turn off messages in audit2why- Update to upstream * Add const qualifiers to public API where appropriate by KaiGai Kohei. 2.0.95 2010-06-10 * Remove duplicate slashes in paths in selabel_lookup from Chad Sellers * Adds a chcon method to the libselinux python bindings from Steve Lawrence - add python3 subpackage from David Malcolm* Set errno=EINVAL for invalid contexts from Dan Walsh.- Update to upstream * Show strerror for security_getenforce() by Colin Waters. * Merged selabel database support by KaiGai Kohei. * Modify netlink socket blocking code by KaiGai Kohei.- Update to upstream * Fix from Eric Paris to fix leak on non-selinux systems. * regenerate swig wrappers * pkgconfig fix to respect LIBDIR from Dan Walsh.- Update to upstream * Change the AVC to only audit the permissions specified by the policy, excluding any permissions specified via dontaudit or not specified via auditallow. * Fix compilation of label_file.c with latest glibc headers.- Fix potential doublefree on init- Fix libselinux.pc- Fix man page for selinuxdefcon- Free memory on disabled selinux boxes- Update to upstream * add/reformat man pages by Guido Trentalancia . * Change exception.sh to be called with bash by Manoj Srivastava - Fix selinuxdefcon man page- Update to upstream * Add pkgconfig file from Eamon Walsh.- Update to upstream * Rename and export selinux_reset_config()- Update to upstream * Add exception handling in libselinux from Dan Walsh. This uses a shell script called exception.sh to generate a swig interface file. * make swigify * Make matchpathcon print <> if path not found in fcontext file.- Eliminate -pthread switch in Makefile- Update to upstream * Removal of reference counting on userspace AVC SID's.- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- Update to upstream * Reverted Tomas Mraz's fix for freeing thread local storage to avoid pthread dependency. * Removed fini_context_translations() altogether. * Merged lazy init patch from Stephen Smalley based on original patch by Steve Grubb.- Update to upstream * Add per-service seuser support from Dan Walsh. * Let load_policy gracefully handle selinuxfs being mounted from Stephen Smalley. * Check /proc/filesystems before /proc/mounts for selinuxfs from Eric Paris.- Add provices ruby(selinux)- Update to upstream * Fix improper use of thread local storage from Tomas Mraz . * Label substitution support from Dan Walsh. * Support for labeling virtual machine images from Dan Walsh.- Update to upstream * Trim / from the end of input paths to matchpathcon from Dan Walsh. * Fix leak in process_line in label_file.c from Hiroshi Shinji. * Move matchpathcon to /sbin, add matchpathcon to clean target from Dan Walsh. * getdefaultcon to print just the correct match and add verbose option from Dan Walsh.- Update to upstream * deny_unknown wrapper function from KaiGai Kohei. * security_compute_av_flags API from KaiGai Kohei. * Netlink socket management and callbacks from KaiGai Kohei.- Fix Memory Leak- Fix crash in python- Add back in additional interfaces- Add back in av_decision to python swig- Update to upstream * Netlink socket handoff patch from Adam Jackson. * AVC caching of compute_create results by Eric Paris.- Add patch from ajax to accellerate X SELinux - Update eparis patch- Add eparis patch to accellerate Xwindows performance- Fix URL- Add substitute pattern - matchpathcon output <> on ENOENT- Update to upstream * Fix incorrect conversion in discover_class code.- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild- Add - selinux_virtual_domain_context_path - selinux_virtual_image_context_path- Throw exeptions in python swig bindings on failures- Fix restorecon python code- Update to upstream- Strip trailing / for matchpathcon- Fix segfault if seusers file does not work- Add new function getseuser which will take username and service and return - seuser and level. ipa will populate file in future. - Change selinuxdefcon to return just the context by default- Rebuild for Python 2.6- Update to Upstream * Allow shell-style wildcards in x_contexts file.- Eamon Walsh Patch - libselinux: allow shell-style wildcarding in X names - Add Restorecon/Install python functions from Luke Macken- Update to Upstream * Correct message types in AVC log messages. * Make matchpathcon -V pass mode from Dan Walsh. * Add man page for selinux_file_context_cmp from Dan Walsh.- Update to Upstream * New man pages from Dan Walsh. * Update flask headers from refpolicy trunk from Dan Walsh.- Fix matchpathcon -V call- Add flask definitions for open, X and nlmsg_tty_audit- Add missing get/setkeycreatecon man pages- Split out utilities- Add missing man page links for [lf]getfilecon- Update to Upstream * Add group support to seusers using %groupname syntax from Dan Walsh. * Mark setrans socket close-on-exec from Stephen Smalley. * Only apply nodups checking to base file contexts from Stephen Smalley.- Update to Upstream * Merge ruby bindings from Dan Walsh. - Add support for Linux groups to getseuserbyname- Allow group handling in getseuser call- Update to Upstream * Handle duplicate file context regexes as a fatal error from Stephen Smalley. This prevents adding them via semanage. * Fix audit2why shadowed variables from Stephen Smalley. * Note that freecon NULL is legal in man page from Karel Zak.- Add ruby support for puppet- Rebuild for new libsepol- Add Karel Zak patch for freecon man page- Update to Upstream * New and revised AVC, label, and mapping man pages from Eamon Walsh. * Add swig python bindings for avc interfaces from Dan Walsh.- Update to Upstream * Fix selinux_file_context_verify() and selinux_lsetfilecon_default() to call matchpathcon_init_prefix if not already initialized. * Add -q qualifier for -V option of matchpathcon and change it to indicate whether verification succeeded or failed via exit status.- libselinux no longer neets to telnet -u in post install- Add sedefaultcon and setconlist commands to dump login context- Update to Upstream * Fixed selinux_set_callback man page. * Try loading the max of the kernel-supported version and the libsepol-supported version when no manipulation of the binary policy is needed from Stephen Smalley. * Fix memory leaks in matchpathcon from Eamon Walsh.- Add Xavior Toth patch for security_id_t in swig- Add avc.h to swig code- Grab the latest policy for the kernel- Update to Upstream * Man page typo fix from Jim Meyering.- Update to Upstream * Changed selinux_init_load_policy() to not warn about a failed mount of selinuxfs if selinux was disabled in the kernel.- Fix matchpathcon memory leak- Update to Upstream * Merged new X label "poly_selection" namespace from Eamon Walsh.- Update to Upstream * Merged reset_selinux_config() for load policy from Dan Walsh.- Reload library on loading of policy to handle chroot- Update to Upstream * Merged avc_has_perm() errno fix from Eamon Walsh.- Update to Upstream * Regenerated Flask headers from refpolicy flask definitions.- Update to Upstream * Merged compute_member AVC function and manpages from Eamon Walsh. * Provide more error reporting on load policy failures from Stephen Smalley.- Update to Upstream * Merged new X label "poly_prop" namespace from Eamon Walsh.- Update to Upstream * Disable setlocaldefs if no local boolean or users files are present from Stephen Smalley. * Skip userspace preservebools processing for Linux >= 2.6.22 from Stephen Smalley.- Update to Upstream * Merged fix for audit2why from Dan Walsh.- Fix audit2why to grab latest policy versus the one selected by the kernel* Merged audit2why python binding from Dan Walsh.* Merged updated swig bindings from Dan Walsh, including typemap for pid_t.- Update to use libsepol-static library- Move libselinux.a to -static package - Spec cleanups- Put back libselinux.a- Fix memory references in audit2why and change to use tuples - Update to Upstream * Fix for the avc: granted null message bug from Stephen Smalley.- Fix __init__.py specification- Add audit2why python bindings- Add pid_t typemap for swig bindings- smp_mflag- Fix spec file caused by spec review- Upgrade to upstream * matchpathcon(8) man page update from Dan Walsh.- Upgrade to upstream * dlopen libsepol.so.1 rather than libsepol.so from Stephen Smalley. * Based on a suggestion from Ulrich Drepper, defer regex compilation until we have a stem match, by Stephen Smalley. * A further optimization would be to defer regex compilation until we have a complete match of the constant prefix of the regex - TBD.- Upgrade to upstream * Regenerated Flask headers from policy.- Upgrade to upstream * AVC enforcing mode override patch from Eamon Walsh. * Aligned attributes in AVC netlink code from Eamon Walsh. - Move libselinux.so back into devel package, procps has been fixed- Upgrade to upstream * Merged refactored AVC netlink code from Eamon Walsh. * Merged new X label namespaces from Eamon Walsh. * Bux fix and minor refactoring in string representation code.- Upgrade to upstream * Merged selinux_get_callback, avc_open, empty string mapping from Eamon Walsh.- Upgrade to upstream * Fix segfault resulting from missing file_contexts file.- Fix segfault on missing file_context file- Upgrade to upstream * Make netlink socket close-on-exec to avoid descriptor leakage from Dan Walsh. * Pass CFLAGS when using gcc for linking from Dennis Gilmore.- Add sparc patch to from Dennis Gilmore to build on Sparc platform- Remove leaked file descriptor- Upgrade to latest from NSA * Fix selabel option flag setting for 64-bit from Stephen Smalley.- Change matchpatcon to use syslog instead of syserror- Upgrade to latest from NSA * Re-map a getxattr return value of 0 to a getfilecon return value of -1 with errno EOPNOTSUPP from Stephen Smalley. * Fall back to the compat code for security_class_to_string and security_av_perm_to_string from Stephen Smalley. * Fix swig binding for rpm_execcon from James Athey.- Apply James Athway patch to fix rpm_execcon python binding- Move libselinux.so back into main package, breaks procps- Upgrade to upstream * Fix file_contexts.homedirs path from Todd Miller.- Remove requirement on setransd, Moved to selinux-policy-mls- Move libselinux.so into devel package - Upgrade to upstream * Fix segfault resulting from uninitialized print-callback pointer. * Added x_contexts path function patch from Eamon Walsh. * Fix build for EMBEDDED=y from Yuichi Nakamura. * Fix markup problems in selinux man pages from Dan Walsh.- Upgrade to upstream * Updated version for stable branch. * Added x_contexts path function patch from Eamon Walsh. * Fix build for EMBEDDED=y from Yuichi Nakamura. * Fix markup problems in selinux man pages from Dan Walsh. * Updated av_permissions.h and flask.h to include new nscd permissions from Dan Walsh. * Added swigify to top-level Makefile from Dan Walsh. * Fix for string_to_security_class segfault on x86_64 from Stephen Smalley.- Apply Steven Smalley patch to fix segfault in string_to_security_class- Fix matchpathcon to set default myprintf- Upgrade to upstream * Fix for getfilecon() for zero-length contexts from Stephen Smalley.- Update to match flask/access_vectors in policy- Fix man page markup lanquage for translations- Fix semanage segfault on x86 platform- Upgrade to upstream * Labeling and callback interface patches from Eamon Walsh.- Refactored swig- Upgrade to upstream * Class and permission mapping support patches from Eamon Walsh. * Object class discovery support patches from Chris PeBenito. * Refactoring and errno support in string representation code.- Upgrade to upstream - Merged patch to reduce size of libselinux and remove need for libsepol for embedded systems from Yuichi Nakamura. This patch also turns the link-time dependency on libsepol into a runtime (dlopen) dependency even in the non-embedded case. 2.0.17 2007-05-31 * Updated Lindent script and reindented two header files.- Upgrade to upstream * Merged additional swig python bindings from Dan Walsh. * Merged helpful message when selinuxfs mount fails patch from Dax Kelson.- Upgrade to upstream * Merged build fix for avc_internal.c from Joshua Brindle.- Add get_context_list funcitions to swig file- Upgrade to upstream * Merged rpm_execcon python binding fix, matchpathcon man page fix, and getsebool -a handling for EACCES from Dan Walsh.- Add missing interface- Upgrade to upstream * Merged support for getting initial contexts from James Carter.- Upgrade to upstream * Merged userspace AVC patch to follow kernel's behavior for permissive mode in caching previous denials from Eamon Walsh. * Merged sidput(NULL) patch from Eamon Walsh.- Make rpm_exec swig work- Upgrade to upstream * Merged class/av string conversion and avc_compute_create patch from Eamon Walsh.- Upgrade to upstream * Merged fix for avc.h #include's from Eamon Walsh.- Add stdint.h to avc.h- Merged patch to drop support for CACHETRANS=0 config option from Steve Grubb. - Merged patch to drop support for old /etc/sysconfig/selinux and - /etc/security policy file layout from Steve Grubb.- Do not fail on permission denied in getsebool- Upgrade to upstream * Merged init_selinuxmnt() and is_selinux_enabled() improvements from Steve Grubb.- Upgrade to upstream * Removed sending of setrans init message. * Merged matchpathcon memory leak fix from Steve Grubb.- Upgrade to upstream * Merged more swig initializers from Dan Walsh.- Upgrade to upstream * Merged patch from Todd Miller to convert int types over to C99 style.- Merged patch from Todd Miller to remove sscanf in matchpathcon.c because of the use of the non-standard format (original patch changed for style). - Merged patch from Todd Miller to fix memory leak in matchpathcon.c.- Add context function to python to split context into 4 parts- Upgrade to upstream * Updated version for stable branch.- Upgrade to upstream * Merged man page updates to make "apropos selinux" work from Dan Walsh.- Upgrade to upstream * Merged getdefaultcon utility from Dan Walsh.- Add Ulrich NSCD__GETSERV and NSCD__SHMEMGRP for Uli- Add reference to selinux man page in all man pages to make apropos work Resolves: # 217881- Upstream wanted some minor changes, upgrading to keep api the same - Upgrade to upstream * Merged selinux_check_securetty_context() and support from Dan Walsh. Resolves: #200110- Cleanup patch- Add securetty handling Resolves: #200110- Upgrade to upstream * Merged patch for matchpathcon utility to use file mode information when available from Dan Walsh.- rebuild against python 2.5- Fix matchpathcon to lstat files- Update man page- Upgrade to upstream- Add James Antill patch for login verification of MLS Levels - MLS ragnes need to be checked, Eg. login/cron. This patch adds infrastructure.- Upgrade to latest from NSA * Merged updated flask definitions from Darrel Goeddel. This adds the context security class, and also adds the string definitions for setsockcreate and polmatch.- Upgrade to latest from NSA * Updated version for release.- rebuilt for unwind info generation, broken in gcc-4.1.1-21- Upgrade to latest from NSA * Merged av_permissions.h update from Steve Grubb, adding setsockcreate and polmatch definitions.- really make -devel depend on libsepol-devel- Add sgrubb patch for polmatch- Upgrade to latest from NSA * Merged patch from Steve Smalley to fix SIGPIPE in setrans_client- have -devel require libsepol-devel- Upgrade to latest from NSA * Merged patch to not log avc stats upon a reset from Steve Grubb. * Applied patch to revert compat_net setting upon policy load. * Merged file context homedir and local path functions from Chris PeBenito.- rebuilt with latest binutils to pick up 64K -z commonpagesize on ppc* (#203001)- Upgrade to latest from NSA * Merged file context homedir and local path functions from Chris PeBenito. * Rework functions that access /proc/pid/attr to access the per-thread nodes, and unify the code to simplify maintenance.- Upgrade to latest from NSA * Merged return value fix for *getfilecon() from Dan Walsh. * Merged sockcreate interfaces from Eric Paris.- Fix translation return codes to return size of buffer- Upgrade to latest from NSA * Merged no-tls-direct-seg-refs patch from Jeremy Katz. * Merged netfilter_contexts support patch from Chris PeBenito.- Upgrade to latest from NSA * Merged context_*_set errno patch from Jim Meyering.- only build non-fpic objects with -mno-tls-direct-seg-refs- build with -mno-tls-direct-seg-refs on x86 to avoid triggering segfaults with xen (#200783)- Rebuild for new gcc- Fix libselinux to not telinit during installs- Upgrade to latest from NSA * Lindent. * Merged {get,set}procattrcon patch set from Eric Paris. * Merged re-base of keycreate patch originally by Michael LeMay from Eric Paris. * Regenerated Flask headers from refpolicy. * Merged patch from Dan Walsh with: - Added selinux_file_context_{cmp,verify}. - Added selinux_lsetfilecon_default. - Delay translation of contexts in matchpathcon.- Yet another change to matchpathcon- Turn off error printing in library. Need to compile with DEBUG to get it back- Fix error reporting of matchpathcon- Add function to compare file context on disk versus contexts in file_contexts file.- Upgrade to latest from NSA * Merged patch from Dan Walsh with: * Added selinux_getpolicytype() function. * Modified setrans code to skip processing if !mls_enabled. * Set errno in the !selinux_mnt case. * Allocate large buffers from the heap, not on stack. Affects is_context_customizable, selinux_init_load_policy, and selinux_getenforcemode.- Add selinux_getpolicytype()- Upgrade to latest from NSA * Merged !selinux_mnt checks from Ian Kent.- Check for selinux_mnt == NULL- Merged matchmediacon and trans_to_raw_context fixes from Serge Hallyn.- Remove getseuser- Bump requires to grab latest libsepol- Add BuildRequires for swig- Upgrade to latest from NSA * Merged simple setrans client cache from Dan Walsh. Merged avcstat patch from Russell Coker. * Modified selinux_mkload_policy() to also set /selinux/compat_net appropriately for the loaded policy.- More fixes for translation cache - Upgrade to latest from NSA * Added matchpathcon_fini() function to free memory allocated by matchpathcon_init().- Add simple cache to improve translation speed- Upgrade to latest from NSA * Merged setrans client cleanup patch from Steve Grubb.- Add Russell's AVC patch to handle large numbers- Upgrade to latest from NSA * Merged getfscreatecon man page fix from Dan Walsh. * Updated booleans(8) man page to drop references to the old booleans file and to note that setsebool can be used to set the boot-time defaults via -P.- Upgrade to latest from NSA * Merged fix warnings patch from Karl MacMillan. * Merged setrans client support from Dan Walsh. This removes use of libsetrans. * Merged patch to eliminate use of PAGE_SIZE constant from Dan Walsh. * Merged swig typemap fixes from Glauber de Oliveira Costa.- Change the way translations work, Use setransd/remove libsetrans- Add selinuxswig fixes - Stop using PAGE_SIZE and start using sysconf(_SC_PAGE_SIZE)- Upgrade to latest from NSA * Added distclean target to Makefile. * Regenerated swig files. * Changed matchpathcon_init to verify that the spec file is a regular file. * Merged python binding t_output_helper removal patch from Dan Walsh.- Fix python bindings for matchpathcon - Fix booleans man page- Merged Makefile PYLIBVER definition patch from Dan Walsh.- Make some fixes so it will build on RHEL4 - Upgrade to latest from NSA * Updated version for release. * Altered rpm_execcon fallback logic for permissive mode to also handle case where /selinux/enforce is not available.- bump again for double-long bug on ppc(64)- rebuilt for new gcc4.1 snapshot and glibc changes- Upgrade to latest from NSA * Merged install-pywrap Makefile patch from Joshua Brindle.- Upgrade to latest from NSA * Merged pywrap Makefile patch from Dan Walsh.- Split out pywrap in Makefile- Upgrade to latest from NSA * Added getseuser test program.- Upgrade to latest from NSA * Added format attribute to myprintf in matchpathcon.c and removed obsoleted rootlen variable in init_selinux_config().- Build with new libsepol- Upgrade to latest from NSA * Merged several fixes and improvements from Ulrich Drepper (Red Hat), including: - corrected use of getline - further calls to __fsetlocking for local files - use of strdupa and asprintf - proper handling of dirent in booleans code - use of -z relro - several other optimizations * Merged getpidcon python wrapper from Dan Walsh (Red Hat).- Add build requires line for libsepol-devel- Fix swig call for getpidcon- Move libselinux.so to base package- Upgrade to latest from NSA * Merged call to finish_context_translations from Dan Walsh. This eliminates a memory leak from failing to release memory allocated by libsetrans.- update to latest libsetrans - Fix potential memory leak- rebuilt- Update to never version * Merged patch for swig interfaces from Dan Walsh.- Update to never version- Fix some of the python swig objects- Update to latest from NSA * Added MATCHPATHCON_VALIDATE flag for set_matchpathcon_flags() and modified matchpathcon implementation to make context validation/ canonicalization optional at matchpathcon_init time, deferring it to a successful matchpathcon by default unless the new flag is set by the caller. * Added matchpathcon_init_prefix() interface, and reworked matchpathcon implementation to support selective loading of file contexts entries based on prefix matching between the pathname regex stems and the specified path prefix (stem must be a prefix of the specified path prefix).- Update to latest from NSA * Change getsebool to return on/off instead of active/inactive- Update to latest from NSA * Added -f file_contexts option to matchpathcon util. Fixed warning message in matchpathcon_init(). * Merged Makefile python definitions patch from Dan Walsh.- Update to latest from NSA * Merged swigify patch from Dan Walsh.- Separate out libselinux-python bindings into separate rpm- Read libsetrans requirement- Add python bindings- Update to latest from NSA * Merged make failure in rpm_execcon non-fatal in permissive mode patch from Ivan Gyurdiev.- Remove requirement for libsetrans- Update to latest from NSA * Added MATCHPATHCON_NOTRANS flag for set_matchpathcon_flags() and modified matchpathcon_init() to skip context translation if it is set by the caller.- Update to latest from NSA * Added security_canonicalize_context() interface and set_matchpathcon_canoncon() interface for obtaining canonical contexts. Changed matchpathcon internals to obtain canonical contexts by default. Provided fallback for kernels that lack extended selinuxfs context interface. - Patch to not translate mls when calling setfiles- Update to latest from NSA * Merged seusers parser changes from Ivan Gyurdiev. * Merged setsebool to libsemanage patch from Ivan Gyurdiev. * Changed seusers parser to reject empty fields.- Update to latest from NSA * Merged seusers empty level handling patch from Jonathan Kim (TCS).- Rebuild for latest libsepol- Rebuild for latest libsepol- Change default to __default__- Change default to __default__- Add selinux_translations_path- Update to latest from NSA * Merged selinux_path() and selinux_homedir_context_path() functions from Joshua Brindle.- Need to check for /sbin/telinit- Update to latest from NSA * Merged fixes for make DESTDIR= builds from Joshua Brindle.- Update to latest from NSA * Merged get_default_context_with_rolelevel and man pages from Dan Walsh (Red Hat). * Updated call to sepol_policydb_to_image for sepol changes. * Changed getseuserbyname to ignore empty lines and to handle no matching entry in the same manner as no seusers file.- Tell init to reexec itself in post script- Update to latest from NSA * Changed selinux_mkload_policy to try downgrading the latest policy version available to the kernel-supported version. * Changed selinux_mkload_policy to fall back to the maximum policy version supported by libsepol if the kernel policy version falls outside of the supported range.- Update to latest from NSA * Changed getseuserbyname to fall back to the Linux username and NULL level if seusers config file doesn't exist unless REQUIRESEUSERS=1 is set in /etc/selinux/config. * Moved seusers.conf under $SELINUXTYPE and renamed to seusers.- Update to latest from NSA * Added selinux_init_load_policy() function as an even higher level interface for the initial policy load by /sbin/init. This obsoletes the load_policy() function in the sysvinit-selinux.patch. * Added selinux_mkload_policy() function as a higher level interface for loading policy than the security_load_policy() interface.- Update to latest from NSA * Merged fix for matchpathcon (regcomp error checking) from Johan Fischer. Also added use of regerror to obtain the error string for inclusion in the error message.- Update to latest from NSA * Changed getseuserbyname to not require (and ignore if present) the MLS level in seusers.conf if MLS is disabled, setting *level to NULL in this case.- Update to latest from NSA * Merged getseuserbyname patch from Dan Walsh.- Fix patch to satisfy upstream- Update to latest from NSA - Add getseuserbyname- Fix patch call- Fix strip_con call- Go back to original libsetrans code- Eliminate forth param from mls context when mls is not enabled.- Update from NSA * Merged modified form of patch to avoid dlopen/dlclose by the static libselinux from Dan Walsh. Users of the static libselinux will not have any context translation by default.- Update from NSA * Added public functions to export context translation to users of libselinux (selinux_trans_to_raw_context, selinux_raw_to_trans_context).- Update from NSA * Remove special definition for context_range_set; use common code.- Update from NSA * Hid translation-related symbols entirely and ensured that raw functions have hidden definitions for internal use. * Allowed setting NULL via context_set* functions. * Allowed whitespace in MLS component of context. * Changed rpm_execcon to use translated functions to workaround lack of MLS level on upgraded systems.- Allow set_comp on unset ranges- Merged context translation patch, originally by TCS, with modifications by Dan Walsh (Red Hat).- Apply translation patch- Update from NSA * Merged several fixes for error handling paths in the AVC sidtab, matchpathcon, booleans, context, and get_context_list code from Serge Hallyn (IBM). Bugs found by Coverity. * Removed setupns; migrated to pam. * Merged patches to rename checkPasswdAccess() from Joshua Brindle. Original symbol is temporarily retained for compatibility until all callers are updated.- Update makefiles- Update from NSA * Merged security_setupns() from Chad Sellers. - fix selinuxenabled man page- Update from NSA * Merged avcstat and selinux man page from Dan Walsh. * Changed security_load_booleans to process booleans.local even if booleans file doesn't exist.- Fix avcstat to clear totals- Add info to man page- Update from NSA * Merged set_selinuxmnt patch from Bill Nottingham (Red Hat). * Rewrote get_ordered_context_list and helpers, including changing logic to allow variable MLS fields.- Update from NSA- Add backin matchpathcon- Fix selinux_policy_root man page- Change assert(selinux_mnt) to if (!selinux_mnt) return -1;- Update from NSA * Fixed bug in matchpathcon_filespec_destroy.- Update from NSA * Fixed bug in rpm_execcon error handling path.- Update from NSA * Merged fix for set_matchpathcon* functions from Andreas Steinmetz. * Merged fix for getconlist utility from Andreas Steinmetz.- Update from NSA- Better handling of booleans- Update from NSA * Merged destructors patch from Tomas Mraz.- Update from NSA * Added set_matchpathcon_flags() function for setting flags controlling operation of matchpathcon. MATCHPATHCON_BASEONLY means only process the base file_contexts file, not file_contexts.homedirs or file_contexts.local, and is for use by setfiles -c. * Updated matchpathcon.3 man page.- Update from NSA- Update from NSA * Fixed bug in matchpathcon_filespec_add() - failure to clear fl_head.- Update from NSA * Changed matchpathcon_common to ignore any non-format bits in the mode.- Default matchpathcon to regular files if the user specifies a mode- Update from NSA * Merged several fixes from Ulrich Drepper.- Fix matchpathcon on eof.- Update from NSA * Merged matchpathcon patch for file_contexts.homedir from Dan Walsh. * Added selinux_users_path() for path to directory containing system.users and local.users.- Process file_context.homedir- Update from NSA * Changed relabel Makefile target to use restorecon.- Update from NSA * Regenerated av_permissions.h.- Update from NSA * Modified avc_dump_av to explicitly check for any permissions that cannot be mapped to string names and display them as a hex value. * Regenerated av_permissions.h.- Update from NSA * Generalized matchpathcon internals, exported more interfaces, and moved additional code from setfiles into libselinux so that setfiles can directly use matchpathcon.- Update from NSA * Prevent overflow of spec array in matchpathcon. * Fixed several uses of internal functions to avoid relocations. * Changed rpm_execcon to check is_selinux_enabled() and fallback to a regular execve if not enabled (or unable to determine due to a lack of /proc, e.g. chroot'd environment).- Update from NSA * Merged minor fix for avcstat from Dan Walsh.- rpmexeccon should not fail in permissive mode.- fix printf in avcstat- Update from NSA- Modify matchpathcon to also process file_contexts.local if it exists- Add is_customizable_types function call- Update to latest from upstream * Just changing version number to match upstream- Update to latest from upstream * Changed matchpathcon to return -1 with errno ENOENT for <> entries, and also for an empty file_contexts configuration.- Fix link devel libraries- Fix unitialized variable in avcstat.c- Upgrade to upstream * Removed some trivial utils that were not useful or redundant. * Changed BINDIR default to /usr/sbin to match change in Fedora. * Added security_compute_member. * Added man page for setcon.- Upgrade to upstream- Add avcstat program- Add lots of missing man pages- Fix output of getsebool.- Update from upstream, fix setsebool -P segfault- Add a patch from upstream. Fixes signed/unsigned issues, and incomplete structure copy.- More fixes from sgrubb, better syslog- Have setsebool and togglesebool log changes to syslog- Add patch to make setsebool update bool on disk - Make togglesebool have a rollback capability in case it blows up inflight- Upgrade to latest from NSA- Changed the location of the utilities to /usr/sbin since normal users can't use them anyways.- Updated various utilities, removed utilities that are for testing, added man pages.- Add -g flag to make - Upgrade to latest from NSA * Added rpm_execcon.- Upgrade to latest from NSA * Merged setenforce and removable context patch from Dan Walsh. * Merged build fix for alpha from Ulrich Drepper. * Removed copyright/license from selinux_netlink.h - definitions only.- Change setenforce to accept Enforcing and Permissive- Add alpha patch- Upgrade to latest from NSA- Add selinux_removable_context_path- Update from NSA * Add matchmediacon- Update from NSA * Merged in matchmediacon changes.- Update from NSA * Regenerated headers for new nscd permissions.- Add matchmediacon- Update from NSA * Added get_default_context_with_role.- Clean up spec file * Patch from Matthias Saou- Update from NSA * Added set_matchpathcon_printf.- Update from NSA * Reworked av_inherit.h to allow easier re-use by kernel.- Add strcasecmp in selinux_config - Update from NSA * Changed avc_has_perm_noaudit to not fail on netlink errors. * Changed avc netlink code to check pid based on patch by Steve Grubb. * Merged second optimization patch from Ulrich Drepper. * Changed matchpathcon to skip invalid file_contexts entries. * Made string tables private to libselinux. * Merged strcat->stpcpy patch from Ulrich Drepper. * Merged matchpathcon man page from Dan Walsh. * Merged patch to eliminate PLTs for local syms from Ulrich Drepper. * Autobind netlink socket. * Dropped compatibility code from security_compute_user. * Merged fix for context_range_set from Chad Hanson. * Merged allocation failure checking patch from Chad Hanson. * Merged avc netlink error message patch from Colin Walters.- Update from NSA * Merged second optimization patch from Ulrich Drepper. * Changed matchpathcon to skip invalid file_contexts entries. * Made string tables private to libselinux. * Merged strcat->stpcpy patch from Ulrich Drepper. * Merged matchpathcon man page from Dan Walsh. * Merged patch to eliminate PLTs for local syms from Ulrich Drepper. * Autobind netlink socket. * Dropped compatibility code from security_compute_user. * Merged fix for context_range_set from Chad Hanson. * Merged allocation failure checking patch from Chad Hanson. * Merged avc netlink error message patch from Colin Walters.- Update from NSA - Add optflags- Update from NSA- Add matchpathcon man page - Latest from NSA * Merged patch to eliminate PLTs for local syms from Ulrich Drepper. * Autobind netlink socket. * Dropped compatibility code from security_compute_user. * Merged fix for context_range_set from Chad Hanson. * Merged allocation failure checking patch from Chad Hanson. * Merged avc netlink error message patch from Colin Walters.- Latest from NSA * Autobind netlink socket. * Dropped compatibility code from security_compute_user. * Merged fix for context_range_set from Chad Hanson. * Merged allocation failure checking patch from Chad Hanson. * Merged avc netlink error message patch from Colin Walters.- Latest from NSA- New upstream version- Latest from Upstream- Fix man pages- Latest from Upstream- Latest from Upstream- Add man page for boolean functions and SELinux- Latest from NSA- Latest from NSA- uppercase getenforce returns, to make them match system-config-securitylevel- Remove old path patch- Update to latest from NSA - Add fix to only get old path if file_context file exists in old location- Update to latest from NSA- add nlclass patch - Update to latest from NSA- rebuilt- Fix selinux_config to break once it finds SELINUXTYPE.-Update with latest from NSA- Change to use new policy mechanism- add man patch- Update with latest from NSA- Update with latest from NSA- Add changes for relaxed policy - Update to match NSA- Add relaxed policy changes- Sync with NSA- Remove requires glibc>2.3.4- Fix selinuxenabled man page.- Upgrade to 1.11- Add memleaks patch- Upgrade to latest from NSA and add more man pages- Update to match NSA - Cleanup some man pages- Upgrade to latest from NSA- Add Russell's Man pages- Change getenforce to also check is_selinux_enabled- Add ownership to /usr/include/selinux- fix location of file_contexts file.- Fix matchpathcon to use BUFSIZ- rebuilt- add matchpathcon- rebuilt- Add rootok patch- Updated getpeernam patch- Add getpeernam patch- Add getpeercon patch- Put mntpoint patch, because found fix for SysVinit- Add remove mntpoint patch, because it breaks SysVinit- Add mntpoint patch for SysVinit- Add -r -u -t to getcon- Upgrade to latest from NSA- Fix x86_64 build- Latest tarball from NSA.- Update with latest changes from NSA- Change location of .so file- Break out into development library- Move location of libselinux.so to /lib- Add selinuxenabled patch- Update with final NSA 1.2 sources.- Update with latest from NSA.- Fix to build on x86_64- update for version 1.2- Initial version2.9-9.el8_102.9-9.el8_10libselinux.a/usr/lib64/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protectioncpioxz2x86_64-redhat-linux-gnucurrent ar archiveutf-81dff0924840d166fe8c5ad5fa1b24713bce12539c5ab0c35ff2fe1296b178033?p7zXZ !#,Y] b2u Q{LZW |<_X2`+4:qI??îM7D0%!>.pCy-E ^p`{+bF*-՛aZCGS]qҁ%H=$B3_0a`2 /4w]zl;q9H)Z'01B0!Ǒ Rx#@"2JfWH.$YWd$'&}i^4)Bf@5T YB9НZCA-g. `^MBsT_w$e!}_Z_("O6QmwBov!NR+yY1Hm\WolG+(?1vn` wt|sHJaƴޔQM[pj7x;[<9B{ c :.۽' JM " ӹb4ReXp:'’(w6 oT.=H뿧gg]L^l+{SAĆH1\L1BcU|s+߁Mm+u A'@0ya0AIT̖xG!If~N–e6^ ً+(?U Zhbl^+k wExacGbmޣNc=au˲cJL SцBBE8$p#=V\HAtBr[#FTWPSUP: 6? ͕Ą>U%prldd-x]O<ʣU6 έ~bNl:ݚ0DFU%nNjcGAlæ 5:sWJ0khQH1d13B&uTn-^,p9Hj-il!Mx`r@*՗dg{}3uAe=6U/'&OeŭH<ߌ_W\$KF g0GaR*dm0DBlj}%FԀ!(WLj PÂ=,0UhC+/"6D88n˲Zlt>,I!\G%RlC0o(޶ VJpT)1>s,X?̒!&} &)͕>vwVH}l-TR90(sV9,8nkpNFj@dAsX(#-%0V@>90͎A 6xT#T(gUGqO.iwHO#Ȑ6U͙|er.Y!3U4{fx n^$ۡncs "]<lZD[Z4f6%ue谏-7cqeUuݡbε KdN&NU=uɊN9nE<ќ}:;]f«lͱզ8䬬5o:hkB.?K2$gt>+alcھ9&ʮ}M}Ʊ:}ZzJu%MD%lKɢ >}qw"7n2}){5"{vY߂we覹%Lr?UP3DrLxP{e\|m1`&GY0CA-UPQ!RI1po6Kh8w<@P8^;uՠ+O=t@{N7 ]9w`L쪟}OT"lrEI.J{HmO ٽ+3~ cA j+*Q 2*)jiT@w9Vr:$Z.J ׯX~jX$8' 2{o%Qչ7My-1\m7:۱latw%AxH'Sa*O{Wxz#aI:;:w;>3s$bwҪI@Bkw@mAwP +vm4|; $3[tn"yi+b;P6Xq fQlN2)ֲUGWV f8%LjcAͤg<4i>޹Zu#cᔒgJ^ܪo1}!1BeSrMgxno`{јƴ:$}gm}CS+Mk߯^BȡM03&* #gDW| Up0֘mxq;F^V:gF*OCc*i.k#z%SѤuN(b`]G~ qǚq H!Ɵ +C_p%V&mg'̼|pG\-44xIKtX;L5BUe8-7NKL®9R{NA}? 겥zН]ؿԱ\. $k m-Q:Nw I?f{ sphKW-;Ӿab"vu3mRx D!A:&fg=wW(A.Q,=@Ӫrg qV%5[[ 6YOîv[+i%(GЊNbzݸYhcod&૟hiG(h/_]ZD<ܭQY4n*'"wS:uٽo:(pďYlWLVNOa ?P3w4]NRn*Fil1VTΌa::&`}/NdIlfX֚nBB).1f4F=t!ˆucld&-XA4GkŠZn N-opuC]TBț/-ǫoQYݰ|ѿR;mx%l;ox;m &]砀 [҉vƘWSBէcHxuyU@rS!,+4|"s>QI`:ȾEKR\8md˃G|A_urE }䠔0~=R\βO(dǴ}.>)f'v[e^I$<O 8Gka"'Ec5|o%,@:ʘ˟#/2_ w 6gz/cKs`\];{h7[ijEwvc#K2r\,#/HTij+$^`ۯ!ubLNsz*I#}b l|HE"j"C,l10 Y/Pzbv*-|8 Rd謙51xqi8ۂiz܎E6&9e+*Z98 ]UycIEߪz6=—o+umغ%!rF n%hE~1.bOV'!W|].\M@cpc< VKߥ0XE4J4(n\ibiw LIȫBY{NڠS1Ìp SemS _%cdtp=a}?6L"-*;ʻ\)C5{N9NJLjbR۪<9**C(Aea砟٦d G#9|6WD=0zY9s2'=EAJJ1'2G?b_ 4#aaHF_>3JbҚQs 4v_ ;peqvZ2D ڟ-;+c쯼-{iku&**.+ Lv{Ǐ07hV 253bݠ2 XJS\TI)86{,1X]@uIQ65L4'Ҵ%30!^Y;C21%>l`м=F3! ySHjen5lIgx.XOI |HI)QyY^4u-4g+k'+~,ݜͭO?~'3rF)[_PHv`]p񮮢XOw_SAEګSs DmA ? &]s}g UfL$qDx"hTRI"(;רu(̳,Nή6xa Ź??!޳4\Ԉ ),>Իv,Im|uΜ'1'ؾVFH+"AE@m(EDl;!! QV+xV|E*(ՠKR@)9y0.2F!{^Vbݥs~Ks3?0OS#]ݹs``8BAo@ObC[FL2Pm{O R L`6Saֱ3oi$#[?3*:J/wf,yNWj+DůJsõdj] les]NnG}p4m L*JZ ;,|НMУfK! bG~IR&Hsӹ)qs;R֩TA뎥#2wq :-tY:CvV$`>Ցu, k_Upww4 z ! ')xR~'n⟐hFUh%tnPZP@q2@16e&:'L>)M4 B2D7i=Tt`מl{Kz*EӑKW|6FĖ Dw ӽtxih{/[ŮpXL<fF|FiTZ:4f3ٙ#&Z&s14ҥլ#/N Rܾ&5ͿHn[~q@#QuOD يt'wЯ~3aqX0݆wI1LI2>jnqc5c+@Az ɣolzypa",Pym(?8 Mje5'a+C蛚KB R jHo bMjb$i4x.hP]Un=,9 9=##L7[,x&rJ} _V OkCx/*Qi>š}{7p{H#<L8X>;ll@ˎʓ]hvC]1H,scŠ{晬?4Bmrz@Z}Q>NWoxbk>X"\GSHK,q|SH2PUYOd3nx#i`AѦW! h#}!|蟛ª&ky/<ΣFj B@b @)B'k"* ZTc[a\V;zP{wMK*Gi&0L>S^?Qo>~#X)rL4;d͚7҃nqe^IkOn:OXDi)"[sWFޅ&Or7dniQ?;=nn`#W FWыk.z$yVX7U5-sn 0$r+npvW7 zwE%ՁGQΰ2LcRڞ;0+1V>puɅ4xLīgLϴ$WJtA94h%S't|<Y AT龚z-svp䎗hbG )q䏶k$ݷG&kaᚻWqkAKq'JlZ53ONz]c= kXB35Y<-E:۫5'Cz#Yxo.2[_%J݂S>ą ]I`9l*M8HBe$?P EV<^بQhr2X5.g6!G|<9=YWD7ky8={wH8(]eȿ/H~KO]O)-; `Ob >g҈H=-ҹX Hq^c[}ĒV_܀{:}FGs? $cIxvAրN~&+WU &/?Pwߛ 0/r{R#KE[e1tpa:;`s;e*s}FNQ](04B9$i`\D V+1 'H[obHAA &/>9pyq+JQ5VBР7c?\SP+p3 rHk+iú[w扗5OkR`ky_ELI|+Qݧieb~;FT==.Cʋf_rXHkV9^EgD-*7FHSYi7?enwpΪ Kjfx:huuHEG"S3Q0Ыv-$L7UE=mW)*< nN8#=g{i!kTYn$EOQe| (eػ`X?k]qcfhє.<~=B^Ůj#4[oWEmePBB -hscsDΤ i'xuJ͍p|s3̯rgFr!ş>:aԄ$ /TʱF +̔T`&Vxh '\I)g6 )KغJBȺG`x\478ֹ%$%-HTq?,^r/ qh`Y*CnQR,NoF9[oF-JC|O {&%Ӧ;}b2DZÄ%ɪͤ;޻fA8p̄]G~P:t„ӄoJHY (ܜؐ;ƇM&q9־Q~`C.hz#[a/u"z6cf!${MFut//F?WYxj',# kQv +ȁ֝ pnksBA9sFD_VWkEJFi{,EvKΟk A06AnS;+H)_bmz.DqZ1Lr:. ^:`c>ҵNM8dl)|WuRw(,o y 8hkJ0+N"7M=οO+e6Dܧ;'i/nCT ?b:߿1)Xز3vT7W[M/nzуNcZ6V5ho$\Na!sC& }y~Tų Bh-RD-^ Bx#pAsk}'Ye4)8BDAg_&XMr'Bs]jF0Ҥ5wP 6,˒pPIӆb]M]3$Pip*RRZH)ʲC8NDctu݊ugfȠ9Xht9K{` wdbДyED\Ge!ʥ1pM)Un>J}RdzwGՉ+bip -m [\XF uI6 g2g>`a)s&HN:cqYUYQzx.ؗeؽ0Ʈi)@W'CyF<!>Hz+Lvs̔M5ć 0Ŏtiu-`OCdDlߴpEfhTDʆ &_[yH;)[b=ɔTr߄$bKv>kX8Q[,I Pd^}|<(0~o'X.wk~@9~ϥ@?v<[$k<%];:OQڎ{yhW\FMRpgKwl!9TULet!hhf$F*<޵C-71bHB~sj)+lr}\{|P`|lQy %{qTo˟wL$|li +N͡<Ʉ\7S,|}ߗa;>/b\Xi<&" fJɹ-B?ŲR9(O3N_3䌶[eMU*b0ݲ&duj(fO~3md5O&U3p v/s,8ͥ*[6z>qdZ%z:&R?(#V4>劧'xpnj]9k (gY?HXƄ^$L#AVbj=O\e2Ӊf|r2@ZF, >cS,pqqF; 2_ҧGq x4VD)V"Zڻ6ME_Zz~X;?9&Uӛ`>I…2u=@=N.*pRY`[fjjl^`urC0|f(fwx2TޣQ)=A-ՔD"tyq &.!o*#BPDX|RBtYn9 SZ~V| *v{x}xti$]rX̲T <\|L7SL^LxxQ:B,0MSonczI3SWɴP 1]$ce(-Nj0ͫ^ZvO2J7Y+ҴD5Wފ},kj"!(W1ݦf1TY/I%q;!~) 'ZXG(H<VvUz lTg'5X0Kx~ ,:z7g2"3ʆcp~ ,Kuz)O8?ovMyk!\_ja Qc[?Q|OFlYԚdVq*2a0e￨D:QˎPp2nRc{jy Ej>΋䈅B԰<ԟf%wube_<qieV4˜Ky,k4:Jvjk)섙,wtGϤX2dxFΉbJL\;͚G [)Y焞<_(fG,FH"l9W~Z[90:n>xjLj6jEXyeԣb.>gyDN1GKy v HM!@*}Cۦ|%@$}"Ek05];@]z!8B9)]-zhNj*BW,c:e3/v`0}hߏXF,R V_}RaxV@T-AN[*tzYC B0-T2w:swC%xt6l鶦,iw"Z4,G7;LS"E{%nX礹]O9`d㰛!iSC3 AFyZӌcEJn>D]Rc_. Hˎ٣k/3-p׻ ]o7.XaDvEv?ԛUrVU.+νMU r}wP,ynj`JVi]MU c{p#ɌW߽N>0u kY8eE6P r,{X73J lz$:bRwmHD<#,5;(r7Mյ_"&puANx\Aͣ?mHGԅyL bF܃qQBH(;|m,sfWW/91gyn P\d`R#ވX( L{-ۂe!e&G.f'+Ns4C+I<E\k6*h#NouS;~,28? u֡ l68wn^jeCXR"%dVk˖; r@_d3چ Ifb#qigD6 O๢ P(IX DO ÷A,* >oҩ@ҾP48\̀pgb0tY1^2̮!z2F__:Q4 ]-!r1<ѽ+fc9ڻZt$?:ض3RSwYNݪ`Xk>[!#/-ylt_G4l|frUk0C⚂9P4ܡ oTΰy: zJ21=wi<k>}V{f[0]1RH$C_?d.5= UKZhA|:`0*eqJa[T S RDU&`N WVV f^.4sحs`?6$&^_Ѷ5~*bAAIJ K%'8nG-~q (L_s\{0f 3_:'qOhrI-;ZK?:Y}F^a0|,ʅ^D2L{s#ol)'7j-ڍMPLm7EŶ7ԅ43g=hJk˒*XG`UR{_oo'M]^ӃV36D9^@i8.$^]MיcVg``5Dő//;{rًS=M[̛_90q$x{Waey-P.⇨(+ӯg}K2hg2in'TMfԶ^zߛv[P졷L ΒGQɹ+0Qk7Is/UTbn OTpkiR-4 H=N.vX7HIrٺ19?'VIieoļ+9 E1 !\INnI@H;BTNIͺG{fh[@eۈ(L :-$ uoO4WDں<2OS]wbIMS:ity?#Yo݌@|]HPMS%`ǐXq ²&eSxc(\x~I :SsX~2wTC&I]`0kr<_#av443lME&x2~Z4gF`$H]qH8zY+ `ؔ=x>10{*ڸȹRno݌X BhRK{ЊxJ~y{G6=!Vg׏W _dLʽ-c13 ޟwdNғjB`B&3G'-s,UuIs[@>{y&ޣZ>YYʺK4M9sKEGjc~+wsh΂aN_b$Wxc^.ʅ:X` ͦAzWtMrȾTR r&,Nb/սH̸zaIOW*FˑھS߽eE%Ru>ΐ^e566(pr|6g6Zl?RwqV"i7OװF'I{2oe܋ 4K4d uiIrYNeXJ=\35,h˘A2mtx"2h !B1vς{k.+&0Arz} (Z#ŗ c(R~`I6Uv"atxGi,h?zزۡXDjj!u  18^繱~8aS ģF!r^3(%a$r'pd%Y-,74%494{ع+/G3ʵ'jHW4ݏMR>ڎ {cAeS[z0D_gP{Gk [e1VO <%݃M]׿{ԃq #Zx:qb={)C$Άr\*im履ncǮg XC"$pLXd`ΜG*%lu xλk|Mo߀60i s,g(tXCIE3@L)lRfzUMqx?l6+3F`< Oe5~X2Prv%E׋|h.$ĭ#*7o)Yߖ )!rN\i;cK2j&qxVn5[mm1ܻQj=歟H cmlU%2`3&ҩ["0蝺6Scd Q%C:!mh=Z>MP[(|[嬌޲"w3<{FEc#{ZE|'~?WPP!jHYeGDXq_1"..YPH,E鍑Dz0X7m6&C.NP8>Wنj`Ã$V1yN#GYZ~QS 7/zDTMrX# &a0 g!-"AHF:;"Gj=(^s @üvRAGx KvF2TZ8ӦmOhXe9i.CWiuEY;폒WFNAX5J?F]Jn#o>#X䟩(QoK;ѿt4 jNWDn'7mtԏtE"114~dͥUmmu.]w}whͤY`g6#U.]Qkl+g ⶨL'`IŲaņ5":Spa$#70AQ!iX@3y٠HbӅϦaTzJ''v@lhf5Ÿsc!.Y3͸ȇ&EfwE"4 _=`by}Xrx 䠳K ñW^Ù볮OflHJոIݭq7~Mhl\*B.$>cG0NǟNB KG ̨|JSt̮MOFxAR5 Cpѝ9+v8)d} f`o{5ۜ`]l,ʲ(}tk abb_"x?!'$/C(zn=/2~(_iA,X߱2hv Ӫ+$ɚ4x=|[gxh9+ugt2^N[ԟ7,X 1\D8B$ZAKqhջj |Wrp5L35?XovI2O'>nx$f2zS#{6pK/#(ԂzK*+eo|qO᭄1h uj4mU>) a՛@Ϡ'dDeooĤCx%g wboEvQ/ɗ*t~%,m isRFX@F+Rehϫ(`^M$qk*Tm8T{^%!B.LX%fy+F$t<5֧2Ć4,9Pm܎J)X42#"˱Hʧ3Xzn%%"ZwG>W`zJhn L$@xHe9j Ϫ<_TҐcR3zȲځ 6( I8r4O9W`o.xƐ26C {Ěz&5'8g' ^䕿s 6V6k~KȥF:>YEbjs 7aȥV7LQdXQkI4R}L Pq_WVe*P9jHG'e7dЍ\EQ4}NP1Դ¦ QQ6m{ћ=P|Qqc]-ţ:u{qG1Ӳ;=:a+=Q'H{qRkڿmhہ> i<^YE 2hrt87b_7:kV:M?\AN{uJw\qtlJ?ѬM]HGF*N&# & iMK*g2djN2=6g6H.IE ؐWH2P.5 Vv!{1t@HM@dB7J@U,%}AZrjLӅ=R3bj ЊûCh>n_)<,[L}מ86ͻ=D T`Lv3 4+_|Xdz7 NW|6'P[ "skĬ w2&$uhuݡW&߲M<-VR /F^Dn~POoZ( r1e0¥B\.qʯX|r.ZMjM^ygh!De}xkEݕmu68h(L!fgR Q%*֢J;*!}~3JT$mJB=UEc@KZ1Pی: (fCvt>&rnz+gS^36}2bX x&!&hP@?GUxךH?^OzznbO ˚P߹1}Xbf CY,JNzIݡ0b$X8 钌Mi\>!f͕O[Ӳ$@j`0TNlkf)IMh?<ݘJVo⇠}J1^ry[[x Źk+41:hxKP㖧eo_U83A#Nܫ[!ItY^dy3 ]ʸ'#TE7Sl5`((h`p#:>}Ka,G!䲏hꄙg񊽘Gwc+߸/cm +|-˲π&0eo Q K!/li'*<'ܩBK*AǴW-aDgiRu9m+e=ؾ;˗)Vϻk].~MyI՗J8J=VnX2RGh}ꏰZ\E0(ͲkGuOKYwqqMR- ԃ݇+?[ ](<4r1kD['W==KUbI}$nRBn=.{FG_!*v3B )U.*$=Sz]Żط (4F# |;M:Z a\)uNjJ\Vh^gǍ֓5Dwl2 D֠KXf:cx&E!4ٛ%s3`t(4iXV2Ca%(ʯ;"NWVRyu](ZȠ!-6+{Y.RwwP&#W^3jc/p,-5k0.+٢  9fXr4rXd%^fܺ8ĔE=h{3rJǖ.8_Ec MXK, dvdp8\r{ED€Ch rKR|!CϤoX/>i2v A c uKQtxj3`qWo)`Go ZSqwN&ȇ`AU$,@,(knˉ`,:ydHS4Yfy]BڗHMG}dU:dr mMα`TyMJ$ %hnݓfQARt>þSnR2vg4tvyv(iG~#ߛL{/;{wnZj"3ۧn ľ f rkD+|ōc+sđWh$xp0 {ǠY>"}m^?KTCH $֩fg Kp%Oy໢Jql;~T#7 /C6~㸣Ml#)E~uk9׼S|~йoNKנUYS I|J(؝j<<+y`đ>NԸuP7᳋rgrN6LycaOK8C/rsaZ[suQQ4&Ğ"G*﫵Ǻh*ZdJ  R1z~6ܾ3~qǟWvl]F)Rv4ω/`\Je~'Bpj!#5 QoeS[ / aphԚ"EԒ4Gű%ԸzɎ=0,n Ң/Ԅ}ƞd35fjcE\EnTllM%- \q\Ϗʮ_EY, .ߓcllo7'd+]B kW0ozrjQtIvx)3(\(f܋P_MC4a _jo!=&*r7/J ƿU>8Q]nQ &~]Ii9Z93U0̷"%#s>͍&ᶑJ9L8;ՖtCb U4^"_-+EzQQz{O/nJx\m:a2Kׇ3DͶI B9peΗqi/x:AΆ׳V#3 _;)j3ǐsM:4vr鏃uf:o/}W|PG;e3id[W+12Ѣh&>-"}5xԚ$Me'pJjTm as߻dۂYK"RO^@~!5^clD:'dPÖzi0 (f:*`( :2 ~=1I &{l'xźͥ[x;2 ՠ ,?N8 G"ĔR :VNZXNԦ~{[y&>3Dkx!L8XK1710F,@c*sfTE=,/=_nakerM('>AzrߔDʳ{E-jEfUQ0In&jJ=1츓{eA!K 0V|Ebd[ [7f0F;! &[\*NFH+o"`/aY-yp}UmTX6ި偌0H[d@㱿5ˊk X0- t6۠֊RS>U>se0V(‰HLJ~O]f*NϖУluY`k:UY@ybSv)೤M4] ش[o9`53%ֺܢ}dzB;\_]CizQ5 Wgwx%ÒyU K `>k﨡w_Ch]yd㤅&H(_m2DIׄ-@~Gd I#ps;$GUi)lq$U"}(jF[OEDh&.tp 5\+Pq-6-p&|}@އ~Rճ|nF&*Hx]ĞSUj%(vr[>xӀ#y"3" W.P(YzB#U;>d\U<j,E'M[Wc  J}M!HFCйm,ЀYj AB;6^L鯻lnAkig;GoݜWj1_ܿ,÷ jZ  MQwdI+b. ;v`kgUP<!JwIF^C:T{ܳdLm1[2IA_;ܛԨi'S՞Wz)6"jR"xuP먺&!b,Ӱ]K,^[,spJɵ(aT]"d"]r\{ɋ(m7y=XfWlmR .-ҧĎXL+TΦ\h!ay1q芕I*ZW0JOk&4Qjֻ9mЎX}ͭ_KəA!>mx,@7d6 {44f e>vnZ`Z`[zxq'n'6#Ke%|"s0tyZ%/DMN1nJ JBm2[zewRʧ` w`7 &7ZIGg6z^sӚovD0dtW,0Ow<``3) l(M"s,ɤၨ67nY$k DiUvbwb*lGEUϦ LtrϞZkjapJ XthP3s(X5Fw!B^ٰ9>٣ {f7e6i"%~2p?0 %d%PJsa/'/ߘ'h-MhsWrĉ9? J2uQ/{0l'YʱP .uHP.*rX9U&!'QqU&==YdU5A@Z>kUؘC\${FPgXm9, [TtZ>r0Q\zݪ$KMmċ~ 4 hVF3$U0~e#ZݞW?:MVkmt]-T+eaƆ HwVmdW$(7SStm#( R0_ˋ2z|"Wږ`=<Mi5phw$WO$d?woP_V0k3O0ݰb99 Y_Olx][y#羓%2ms=>}2gJEsA8rc\ WȺ6#"#Q8Q[6MsCr>҈3(ϣmd"' v'\pJRiw.,f3TUM/}%qB%NZ1N(> 'w(V_MφjiI=Hկ;-}hZvRQdKs1Am;|H$ZH1Acd~6rM<\F!M?5fs(rO M\AҚ,\ayR>TSW6ثuz؀w2ʙGxߞ(}pW?.0OnF$v $<_ \{&TmnHɭ`-*w ރoLlZ'[ÚnKF2PLL`ZfO-B(A#ՇW2 kU+]4\yO Vڴ f-kj-Y; X%e(6_W cdnS!r]qaEqjw6=2-hD\(p 5i!T8TSk">'_=21%%7ܖsVM^bH`l+9EKBO)^"Ǜr]#٥1v-VVD0_f?''oC*UQVfuQQ*?ٲW7TݹaaUK*+@6:)GC}͒z,-o<~eVc}V9OeNPCB.dΞxbeU]T*?k 6gтMIع{ s^VF]@QPTMS-/\A4l"f ʙ%ZQ1g.U1 {z_8sM W*S>/zv2URJ'Y@0?F+}j[r2 iߟ]QґjNDkk?4_u90Z 漹F?Ƣ9'9 9ʮ4miNL>%,$u4Z9a]R< yV<ȿ '\ 22KM2`*t}$%H<((eo ta wB~6G`Ur60~;1nIlXM8[a z!sA.s0*̊#5vٗCXU&yCݽ$}j?Op代۪:'6E'&g?1MK?Nn k`v,d a1HDVMD"ns,[Q' Y+jKsxߤ;@RI5 A:  bBաș;5k q^q7HToM{=mc:%15b o|8qfi*tTC,T- Yd;[AŴNN4dB7.$<^dEPYä+Tgi9w uji59T`,zoNSWWI:LdZPKqV¯580l^&Hc![/_]ے=m2Hf&B?5g4%g͒a/b@.~br% taqag̞'D ur;1e:NQN{Y &Ӑ<%e[ш^UAHjeKa%z@y巩XS/{%(st"e4کcP:,st}\)8Pu@cdۧ"OсcqRLǾ3`_L! .#: /s_wW"Ka&  WNWtVH0DJlį, i,P1"$'zW~V3FQZ׎G; 7 ƏJrjxϳ-]:Rc$ ѶʲC3h]q~*Ojba jeȮvPK͗OS5G˧WUd=oe\ Q(k;>_6{(\[y5IUoݮ5=P_?ښ4NT)951|\K}r%YS V̺-މ`3j l%ȗMS ҖXsnx4zL= X'KKO xBz8M 5M )'oO2T3r vqQG,؏l %;1-BHHvhO;0Fyr@vRЩ}Ql5ec*=xX<9~ьUS5n.;nJs@߉VdbwSʔnx O4l)@p\aFGi*@`׸ݔl>٩9=& Kz~f}͎C~_o3g!Aut@. Ⱥ=SG%܋Kd0z*]BMMvlNcYC@-RWhεid75mGte{9$ˤO( >Mi2 fuWk bVC|]C2;^=jXpH<\< _զ,Dc܅HG"H!H~@%3 Ln_ڞCDv;7]6 /=d l(x!b`{^?Mn~?s9MiԴ 2(ݲ6TY.($<D.3'㣧w[iy1]]lN,G_{eb ,䟓t}jz(// D.{XmBՔ†8`b3i#N3럁:xuw`"%#g'dL}y} HՁ\ pRܭ~3K讦+M1s,ݙ[ʹ\_݊_ * L뛖 <Ԑ4{Ca)vFg6ۭВTX+Ȳ"׿+-?Xi߫2By/"tk>*''֦`c@|BS~n}La躆XcQЮbX; v ^TmAV@@$1~FRAve=|ƘE|ez`3)N=NQ]E^ +7:k͉+;<0(Qꨠ.OZtcҧ$Z@ %26`N_TSB/zt'Dh(63H~fLJ~`\}h ?%W' hewą ؎!5sS |ɆY % P4*呛p^8PA B;<0CR JM#2^@qB+ hFMҨ>}QY|sͅ.@`ZhTɌ\{{(@9vborY3!ΓcU#=fAD6!1> !z|s胎Mfzvf'?t &~9]FE/9N]oWB1DScH&I9w9z}OMĭ놬mf#7#%Pe[jI m(|-eF0uM isb ²|R (]~s@|3_ߣX/Laq7ظ/xPr7d=Dyd3%}=t*qIЯ@2^4`ebh_T}gVkKs"bA-{ɗt 7+l4B(s&*pTcj?1j k F$H;=:?T~' >UmF]!)"']qf@80mog*]ցdL/~'D p;;m\C l4;*4<. KpbzncknｔlApgL"`pXq_ONqWTov!mOF6g ?1 .ݪPe?Oy?- G-u03VvjϹhz8Am!v4ܒsF]|73n`U==sMo2nmA VA_?xrC?kJ ;z])t\k^dSah*$Q*9B YZ=WoxJG+T/Qw+AD i.y1}_p]+Ty4wa .AM3?r<)V! X*Eޭ'%? pHM4jAwq2XYB?սi("03];>dY0j50H64[ !? i>"x,aΎŪyggqRM/= 1u0:׉DH耝yj'T\Gɘ-?2P  )h5%M?-aQt@σQ!t2\v U[u h_~l_naW+0F벼=ӧ]4lԓ! kwcO(Dfmˎ& @ۻ&|<"8N ŷ$})##B@i\2\4ǔY-T개TlHEt"Zۡ!z͋{IԵ#xW`I^iu!5p'"ڟͱPxpvO:"\,f, v/$%簇%\uGM>TЋ>>(S S$S|8R.DBNvt9=>R^cЬEj$ %Or?u%(o վ(!_ͯy4rV'~cAI!tdi&#o*+Ed1Nw#v s8myY=C{޾fxC\VB+I 9+dS<"h \Uv$Y2{Y)Mn) Lc*Ra- D Z..Uͧ KuکH/zkn փ+KeR<4Wӥu8WO$J&`d= .!43X⤎D6ZܞD#Xldx~Wy(_a4;"+hH"[uPLcppp- pm_Dv6dzH_y4a=)xK|n#uojs 3!3f2GNh;Ӌw|1 TDQ~+Hzj~Ǻdmp%KՑ"*ut {Р( sXG{׿ eBln %]DVL='徤mίu;v$ ,.ᗩކIp(C e_컩-ScqWQ1I>yN(N?1o ]rW zyQuʼn $Dc}&֪'(e:ov{X){vWp]y;AA4H}f @^H r^6B#ByjP|HU5w7@r=쒄|GĮ7؄pdt} 6vFTc3_Td ;m6;{}Z5-E,ط4oBz]5 ))3 , njMɥO[+s cп9f$5]&pB{CݍKzSfu‡SD`$RBp7.eCJl ( I}":\>Qu3ōGn+Na؀>xV6De BVj={bL6o]W`|*MB+@vج`/w󅭅Ya>|!y(k}&Lqӧh_Wj{72w?) 63-H[M_W#}=!Xa 5*ABR,*f=ɉD(i Kk NEu, ʓz%:imggAAډkr߉++- v%4NW/ }:0rVr|" { 읨Z S^&*Rc@c.qrHԁ4Uٳ) r}Hr鶴*d> &ޕ+EO,3bVb4k9 $`+ȷ@=kE >rM,LylB< $/8O9Lx8o@!0V+/yh6ŸC;D.i hqIfvmͻ&Fv.29YsS0;(7 Y4`08=7bUՃnC#4)%:{Xg|/uj B~5O`׭)$)2 c@+K=v: فc^ooZ1X)NKPh& )aZ+_]htG= Y1X:Ll1LvngV_c?W X}uE2lgP>B |#5%P=[Rtib>kˬ„E0 Q59R)Ľh/F/}@uu+EL\1 ){ޓ-SwON&cU,E 纾64aAm,ukNQA@ \Y-MB16pWA{4LBϭ\ɆIik~f G•O Ga$ (qoIo,,+z Ǖm*:<^Lg+;w\_b@cǺ\cz,r¥'BxlrzSHlƲ3:P0j`mbs)_[l]⟎x%X@ԣtyJ'¼*ʧoOʳ&܌9E`ԓt6GFx;RZ2IsusڋrlI\!R"SB6o/O'|^ys41U5a qU`I?4]pk$!(l(kP %QOV͠o0,NeOɲ؂\$Jz:|{!̫Y3 zP.ы IAYSr$oB(46Rq|lwe8^F]|1:Q|\R MxMsw`؄WڦCQ sdhqfoF x wd 䗘6| p!ֽ>l,24'I4f:9<0U~yI_qdO֍4]"*9xd8jL^C $ḿPv6M?;`|"= d0|$hAG^a Yqt6Gڄ#E)- > U[P(sW*8p.J w=&qtQujB ;ZR;}sJB' S Xs&,p5+͉wҷ-VO$p[) =k^ gi >0 5&{&C6 F`_j:o"ٿ02( CCa7ٮURbp@H͒(qXᆍ,3a~wXؓ]1"w4im(["0Q,;p_]lDԣ^ )$[!MnE5UER))ت3wB(맾܇sCnwI`GjZD.H0k ‹jF` ˟m\"qGj7}Y@8 ܪ{ջ$ qi[zמ X:R؛6C_1T9ƈp{3gHk>c=o؜wյGnCn%}򽅊k >՛{T-9Ű͸ә4X \jVwZ)Իn Zcf̒|<K=\^?9HeH>ݶ>q@2}$6D6BVJ8|V}zJZFk,ZwNdRj/ȰS 霆4{6/J^p_=by1VI ݩ(jMP4Ppo<g#\)Er1y|nu MjY.k)ziqh|R35ҙ᧒<)Dem)n%?Bʋmg `4*a jt9 1#,p6s*#и#)if]Ȏebzo\ ̕B#VtBD=cI]G+ R_a0ܝt܃hsM]yRgp2@RZE{9χ֍0E;aN?ѼAWwNP~}DR 2XhQSDh;K`{oH4'hL,  wIOêۀ):|WzdJ :8ϛubm/`P9 .a %<˗]iw硇R(Nҿ;#&$$)\\'+/.8y(N;';~e_Hgf]J-Sb [6(B·j86.FSK_4oWbH=2o<2>ӾqXGR&dd5aS6bp7P%msRlP}"W4츤y NyzF2*e7 kyJF?@| b`D_h4NI{r pp6%7Ȣ27 %3fE!-!3Ҁ`M.)5z>Phu(ݔc^#UgUtOY5I6 ^H : Znr \h@u@ 4˗^ČlW60s2P@؝'Jh{g>{k~!DxIH*[CMf5/|lPAܷlܭvjkHC.}b) `.8gysTEM@=]rb, _qWn)Sh[ء@C en}+ow^$vm63uVDa? 5;yhT=~%0wg?+9%TA]B}G,V'\;XV-N&}ML]a*1]W HIbX<`B~|G}w]A&,f] 2'<gh]wD1J{|^fP-~\L)Ml7DfxXJTU<RCD@WM(~5/L&D#?o7p͂L)k$?5>pnZ6UӹR]J)6H]Xۊ,xm7eKwjkHuR9~Ǣp)ר ֌l*pY=1^qf2傝zHCsx/Ig ԭI!J H~`<^5K \ݫB6mnTfb^rDfZ`kл *N[UeUb8Ղ#R Fo,oBnOnk=Ži{+5`ǝ_% 4+F QVʽv5GMXC?JVsʲ^ZIq&BDD5V7Ԟ6Z:A SiVQSc2= -$gZSLWl5RCϽ"kFǞH'S *1ѨJ+4CZھhL+rWOcv M,{!c鉢,EErhG]wuðWS6td4ٚ.&Ai(|lQA pJ/=5|yyo6uXĵ>hdCe-f"Tj_J-O+.Dm~vC|B-EY'ڜBƨm=ɜh(uk41HJHq [QZQݑ rC˄>(.߀a 80 ~M{O5Lc+OlVhiZ̕k7ZȾߢu!ȟo`;w=.A!LI^ie̜R @`X@ 3qR8%h5b[kT{a2s+NR oLˏn {h9 e鎣D5T9qcqwrMt0i\btMi?g#_5=b_2Yk]7=v?W7^WHpJ>ZNqCiߖp ŪS6rf#[! p3WŽWXQt U K-4{ v#'& `"d)I1ºd'S%p$~ԎRlQ3S'8GىOE8MŚwTг4ޭa@Ss^ꩧ|oz) 0IhGj`JOgF cЬ#`/؋jERW+b=[w봮esf6ݤGe\v).f6p[GL@':#fvo]wYr\&ll.Nzs-zl_F~o]z$nh^~׻hrH I_{9_ H 4ı0˿H{drӒ1JXKl#sH[ SЏ("CAMcujAiIxBiHү)WB>JrovmlldN%hX2c$0\\@'!:C^ LCR[-v4ضݏZ{;1/=xzMg_{+. sKA c+;fle*Nw<Qy#6X3-M] `iF1E}!9,;>X^m菶'fe=sL.)RN_7~ ɫ\|W< .GA>.]5Vxni/o 9GHEDphd2=D|7J7YW`# QEHj\lҫ,gkJgT_d>cFs=əS_ڕRv 0^Q)OiŤM1`sW 0x}~Y՛cTh>`6 (2T݈SV0~(brOǢ j |H5j* 1RNDy>j姐FҘIkp7gxR j@ Via0+4;Fg%Lq"EhL! ޮqqWO3L@ x3 DZnW0akSّ4_%9p=)C dϬ$ JyNtҌk\߇f5ga[ꨘfLb4@wݑOYeB<&u ݋*YZ2sxOi>"jFI'L5h  fŅ[W#3ˎl#-@p m3[".:3;ǾMȑ~:wpiBaϋ&ZYtQ" v )U~? 7K^>LbC`]:n91t7 Ơ("В!imU&G~C45a8'[xDvZ14}w%֤2CwEEy'qIIA X=`כ7ON($1~Ĉ_'Ptޕ~A@y9RdL5NK Z{kq~պfqY6] ׾zO__^@\lӤޅD+a3'}f!%<ؘqR q_;ž66prk A?$Q :~i3MTT)bu͑.Pz'B\ :w=:bfv`'❄žf\#۹- ^O B kz gvP{}" lo~4/I 9SrYLir+iU`Jn(w%I谠Zm}¶䑇Ph7j} cF"8W~œ"j$ɞDVd]i(;%}0,ĝ/۽ͩ@]VȨϔkymy,0``BFkůf&a˸צH%9hmp:X 4~$&HKŽ[ p?D\BkNgE*&gEUKZaoyهlUlޡUg9 1Rh߿m 4`W!)Q}ߍ?r٫ Z>O0V5]vHj)xιܔfď@G_h'tfR}$ƤB9ֽ߽(17;ncI'p.zN"٭9ϼ/GQ B`II 'eY$7O1E8B. W4zƤ%mC: '-ԡ)@ݽkUc2[N"xBkmr=FgYG}ܣFQNֶ,:LsYL{Zo$@Zn9DuK> ҝfIRT.P#| `6\ 3d;ʴ{^u 2ç@3y-)#vG, YxgEe-jylFIJ'`%"OlAD!4u!l(KӓŊ=M0C(ޕ& ]JHwm:k"@wZ0;WuyF8p/ȆgB/Ө}ɦv?%t%J을?\[v~R4ŖNv4E{7>6"3J. ̚/%f3' b >Ua'k0u;Ip )ތ{65d;S.df_-a?Tmbʄ?6˴j(R`m1@f>%F6NnWu6/Ze"7*P/ӳ5莢?U7dg]O>D]zԸ/\^V4DUn _N5qO3Z; (Ru2QІT_(&%*Z8.^l'W1\X3D&J~mʌm/6ՊY26\=!jy(8dOzyB() ''ŞPޭ7-cH_R2r,\ɖi U%l5^m_<p{a"Ù250~h Z qsw'Eˣ5g^5Oa⽣{}si~"EO Rυ6 u^M+'5xW(5Dz xQl8Xla2aF&|D9ᢞTL'<[ϕUnDɣEQ5 . 70TuzO v]qMan $YbzR@{}O] |7ֻ;'O윘ғ,<\ҀBlhj)P oV(_֠$o{{͵݈'k*lkrC!<˛ME<0QTU jxQdoz')gFBVċXT%JQ,6zJ[^[\VtȑCNҗqd@N0|t5Io|v1+ũΗ#3W95z1g%Ed,^y,{3`>8D+q7go$ yEUWE$(Y]i8;bXwKp()UmVqe?9?^Hĝƫu;*e72h#RQ*jfz.?<.Q}%\\w 7HFM^۝ 6たDqw .8%<%Tܧe(/2^PSGg70La;X,58E0*%z^a.& YFNa$|d#VAɍ]qVcP870@+K' 7۸xߞ2!ɫE $42>3}p5'TT.I`EOtJ@@2?TҢŒ͟pEF<kCt WڍyPH#-T.eLe8y{\Rp[&y۷ BvB涍~Kv8{\Zuȇv*h0(S#*_Wab%:'/=-Jf?pP:ERf/h/~Q#GǦL}zdL4w Zk;koN $2x$'r o>684u+N©V(Vptn[-t@(^!xE ~%gl8{cBa1vnkLIL)sƜvK.Uoob7ZIeƝ.J#t,0lTn>TQ 2,:"Kq7 oVi" 3npDa]ߊw+~]Ԏ &O5IWܐ#1MX2 _!cT1]olȳQN}X,Cp;xgI}I PU;20#:F{dpʎJF4PbD眄K}B, ğHgKEBTFXkS;bwHFP [@rd 1︮%g]7+`.3ѣ >iFmWY)ŀse5S;6>n^U^nKos(=z0nyf1|~S,(?/A8:NidRVnK x{`- zvK+o-HcQ:0=&5d<*3EzB]%%^[#Qh0`jµ'%Z̔7lxZU;Oec53b j Z T(cT (KTR̾GkfMNU'XsL粥Lz}#t Ƨ=| bQ{*Z-7 }8ۇpi]#R5qqzjv[?^=vB>@Y}ޕsrm=A4 -m,H ) 6@eJQ27>6v0ΔP;q$1aPb^fq7VFkH,2΄`.s=2rJI³\6kw2{LCzXb BE`8̀L_ E-f!6ttsZ8}bΒ>6<-^n5>*Z0nJgpfdbso^HzIt& 'k~IwXg̥xh?QƁ* XּB)yS*鯺zG?h"^]$02m[N#l.4:÷hOu,:HOO*zuZ c0o{ca{ɜ*u~9dʻH Qq+.P2!I [Qu'xz> TI7)g?J+r=XyHO}?,g{ʦ%8MΑOY?eÌv2q:l_xn4.Tjsi:Lkvv(DTHY1Jǒ9+[J/doix@2$6}{Ęt-6 y&CrXYZJ/n\ҿexXKAU\-sV<JIY 'pC9|{"8~?[giT#=N{Ӵ_7,\ʾp= $3 $Io׵h9 eRf^)DOެ~-QT"ʑJVS9<;ZcB|S ZH{s-)y#Q8%$gV9K6kWMz#kM˧>w3v6e>A1l_^л1ʽlݪf`N*'fb$^T`ǝ4XB\B(1̿ULOc \WZ] _}ה*7! eU"Uձ>Y;GnJ]VmlIXF~&\- x_L) hgmIdwqr}r_'7clg&9,AIJˇe(=띞-ɇ"OzBuΩ (=XF u=3V[\be4U  'oyC!2N瀏 '+K"pL^KbЄ* n?"'C= b+WLa2\Wep0q%}lQ7zrAAiGj.XB(%#Zo;em.J&MxAjd1fQh)R8:U/lD[:zb'_[JLf;;H6s"3n622e 7$5zMKSRh%jY 8F>DQY%jBdۀYqLbS0R1P1b|,6E?vpHNб$g*=20i eA4O%#= " ~\3Êsy&osOU?iX^ۯ/fa1^ OW3uPA$HԪ@[g@i4n믰c,~5uBYêV|V7~'UpK1cJHwޮ -X%u$݈ȶ$7IH#eojZN,)1(\/C "[0JP"Kz-sEļw^pzb @8~]1#<,̀$i׺LtoX&(F^!ӻBy e8"mYcKBrz-c_&&_gR=`ʴ \DW3Wq,o}sS472ŬˆwLbĩѦMw@n0Aɇ]CLMتdBvv4;n첩UNO<-6b h}Y ^ Q?JDx"J.d7h׈ĈJ?n93d"q)3̏x 9_a_:3ٵbKXi 7qEj 8)6c!;1'6sn* bsP8Tp"A.AG;Zz|W &\9@u0nqafԹ`-rhc9{GbM`4Qk9Ώy~j,xDBҵ4ܒ}h8hpTLtJ+\-B]aOw`DrX'fYg"4-Ba.|\Yj^IcNvfT͐Pwg+onLӴn0`< Uyگ=g,)yPUCf} R2QhQ0—a#?:{d D&53[;Du$jqm1AIq\+)i ?OKӸH&ܫlߞ,Ob-jFL{7''{ y~1J]ڱ;=a9 >V4Q#GwQdT; ̂>Au3L({C TgX:C6suڂeٍ՜;c;f6LFmzy I:rwB,X0=g&-Hq.Fz9 (R^sxƏ}I \E@8$&;:R:07 p֦?;91 g4JT.9A$ m?#U}9Py\Qsu}BwoSU:7NNM3E 0>Xuj$bMKZz&oN`Od-KV}< 8ǣ@T]>Ȗ:rW "UrtP sݔh4+MXmZ@m[@l3DU?ROvxWȎsrrNێ=}ݚb:2#*?8)pJL2NO0൴.feyM /sGc۞7bF 嘴֘=ޗ޽8o_zh!q$^9h"J٠/視@B2al\F. >{)dv՟coNCihr̿u 1[ #"UIi'*—reb հHuKCz"Rhpi*6_уZubY N r3Юs>쯈R smtdH( ;G ɱAk3|3&"NC =H[ "E6;ؑ;@PV>݊כMM^ej#>YTT8mf)B׃2H],jv:q^WY{=X}*Ttԅ̓Bni`YڍzހXSALR9#9oc ZwZiLKiP\H+:;ze{$؞T3.eY\]hY _\qNcdW55J2m'A-k0Ň"F^ZU*ը YlV}oK21p=.+H 4Í !({GSɂ+d=G >+k)S/;+hfFNC韅 o"k%}IS0vM!N EF Ʋ5<)sG&tγŻt]pA29sFS'uR se0ZH:'Oœ(ndjV{xѵbN맑B=/ tLV·xRt@3iP%2ywU#q4Iװ並!I5†W[ό zpu8VDl)8x)kďnA-<7c#XmLF50Y4v9<}}Ɓ{-?~)>5!_~_b OW=sB+ɳloၐ}rMؘ0nt[$+\d_:~3/$-ľ…gAs|LU!i~s">74 <-H NCra D,FVW?k ˓dmE5D- mEϹ)J=h~&eZ2wCfMsV'0*S{wVBop:.GLL~fض100P"ϣSZyb'Q5}NS#}Ϫ wohod S]x >w 'LݥIO]},g7MGORjӪ#Q+aN 15ثRDssۻIY_tML??l&pxR{ƄMsϕ#c%!}}VqI߼VTAjzح\s(Z *ڹ|i2a[T>_W#AԻm!UY)3rc+ ;l!F%}}ɔ$:&*TJrXhyyė7xGVCi 47!@ &óFPz6) 1+(}ԭ[,^E6t덗fx@wףCX5 #+ ggЀ6[C]3t7-س{(Bkx\D%Ә <-\r 8?ZS<~vqgȞu(+!Di3|:5tny}mrʴVaL60m daiٖ)4BBHngl>cBAV6_8xkqO.$HXRR-ga馘Mfu'ˏ7NJʉ21 ʜ m$!x JNsA׃[.]v`ʲ\hXf1veLq\`Xv çIW-ghR%QYv~-ԯiGdU'%uCYLd{hŊ~n= M0!POsAv~Y³ut_;j[0 qe>:K&n޷Hf!e@~3}H xP'Ȅ89j,h(yk>0ثm˳~>咝R<'gd|q@aucVv{cm9DL1Q669is 3:Qc\ć OORh47j ^+O Þ4`;dbX9 KcÛEȘsdNc|"VQt4b'O+ FP&K}TiثJVNb}8`rDm$W|'aw50QFH!颊Xԗݭ13!q=p1VxaVQd=,Ŝ+J†8b*|z΂obHrOCS jQ "H;eAl5__F-ּn|Ces;M 9Ɏ fhgZ.UL[~6꽫i2T״2p ERSӈ0J Ab#R21ZjGԓ+| Z&fobX| #~Eqɂ<~уti %{!~NƚSmf7Gc\3N/oJ_I4[B~0 <[bECGW;_VN6LɜƟY|,l}&A Qx Mר0@v=,U,ԇ4Dp͸XQc=Gz)/: ^hM^Uw}̪^awIZ\v8wR>5-aլ8/H>UA0$E\}{)AgZ/| "sv!rF:koCPSPA*`#$lcWP|sd 1c8Ab[kq]6I&NU{XeZ+ kO#/DwV ԃ @ps"1eW^I?|s#'MES:ń'gڙǼu:T*x<ڽPm{qQ^R$z'7gHXh\nhs?#R ow)\TrjۺOM]u+/)5 @Yb4RվmhqDs3yi" Z6ա3s K زH3$QvBJqۂ*Qȁ"8jxCHr<aexurJFuC[ .0ӉʳΟ< )h~!%"& )Z!K&3/ ,OE3V7].T6ƈ`NBTzisLJ`\>o֓zfA h8=B@XX>Sޠ@nM2a糢x1Kt=3k|0N6g5Rv p_J063A̳8]4Tu?_4iL"wQ~BEBOZ1?jkjCR@~9h9TqOo<. <]*qԓ=$В J Rɘ{NH2o޶$ >xBkn̠e b]A6z$R$]|.J|w>6n_Vt'H2z&z`w(Uƿj{teTʿ:(&nL៛2]5AalWl6>"FBGGUWsѿ.jN3ݸi(CFnxݡ=4s61Pvo0?0UпAc vxj+] zz \G1'Yol!|mJ)>C*A>˞~3J\쬛췡nަnVr"81t({C[V5-fIR꿲  @Ydǥqc`ږ7סG^cҞۆwiiC,$W5le?LmoSQo' W$Գ6Z; +t{)rڮTԻ_.% f)FpSƖ쳱͐ ĠL49vI܏Û` -AK[WBBҍVEK[##>mqv6*Ε_ht,mi<Ǧ3F ZELj +fe^ biӽ?sA Kc7J g?!9LN=adnӢC/`hӃa*Ebu2쁨<R"+Gsyzyѝ26Cl ݲ('!s/Ղ}Eo-͂T)yLa{0Js% "t|8TpL BnRW؞k EV>pLIwRꑖn:Znt#ĪZ _`}p]!Tmw^u4|#j>z v/svfmLmov(( Z""dVs_ K525FQ!ŁqF_e>CsTö¨msup^8-K>- [m$ XrpjyiC?B@ڔn4}z(J(E(|Umb٫ 6硄Z/8G~!-%8|k;GYF8=K y?]Zu@E2l^fzvPP[RKbT$/f8.5l0 j`~s4 J CvDWX^$֘sTxFȬ۶D66ǻ1+_YsXݚضSEJ'Х베׃t X5(G7WycτWpOF ,oI1B%yL* #-oyӸcSBaã}'BI/jDIGcq'C$f4^k+3 1nOcR+=",f`y!?QKAE|^k!yj6*Z9{X|S^~E#i`jD ujM$Y<8FAeJy Q\Onf._H#|>tTiJgg r '8Nڦ,;e0 Η+ :mM1ݬ=Ӊ ],{mc׃w5W+}P9-&WOk"9Q_tQU̗NA|r{OH|txt:eAY7[QlY"YAND>Bx4wg2Ԅ:~ KS=ZATT¡b9dH(~xQe(Fp@X ?J``B/sUA,*5}D0&6V |>GDmyIZ6E;mx泒ݲsoґ 4k#l3v(N ~ >eɇA66} 4ח6ܕJ󎲯TK=C5Ǡy[;+,> w\>23z{el dPڪ3utTTn<11mC>я*$ "V^-?,{*76 -#jy]"/yğEWv0JN 2E$NOp _ A$~FkmtETcNѝUp̷ _4>k1b3ÌPDaaeO.Fy|2nӚ'ĉ1-h hKlU I!U%t;i>[i^nN5$U(7AO"9Lu<bWጶ/SU96=DEGMqu &6-F 7 s{;.S:׾k)gJHf!51_5Dx Fu(stYDFː# <8 #\v;R%n*auҬf =(7glaE`m$lBL4_s#PrmsNm5;]4Bɖ/ܝ޺-R; 3鵞֙//5ׂjgא`^AA.~LI=BJK۳daFr:# )Wܺy{S;:۴dLJLB 83L߿M/  "91wOHfP*&&Af(3ÿ]똞a_<{GFhL'IA]8Z q\xfT|K!'-a:"?WS?7Q%Rfu6cV^8A^c&Dp]4?*HxԘ3wq  u}s5P"oۨpF/t2e¤"Mh*W97lEwǍ(Y i!Z iB1A4g=p 7gdcŅCŹ$*6hdLV9?DhfJl_=Lh^ןȰ>:󰖒)+3ef .7 ]tJ/e J68ɡvL+Ml&l,I $aʐl V zE2? |d*҆Q,j_xx3Lڌ`PRn0YAh'rB1^ bo3cz sb@K.Pav$).h@g~M>1 2'. lblmgj>JQ4RsGI oT",OÞFN⚇.>~o/ BbglݿŸF:jC}q}cA{Js]GG}拴6<;O1:7HoSȋsAY- {*X+& ;=A\xɝuA|&{k >qFM uKh!n7VΈ M|͞rŃ0~**E&FGE?Ï5_!KPE\_\02i=>2 X V+S%6Ny5} s>B0Xt(Z%S&#W(tERvքQYڳDI;Ԙ W'$J׼X?ƶн|,X9 ^`6,t++c#P9"2<8_<<,pe4ֆm7sLAt|mn\\ ۞剐~ಙ.QdmXZ~gzN5R/T^PgNðO.v( 닅Hy0| Y!u8h">2TTU}3#kȀ1abhR*3~tۂo>  RZ6F1 8KY%2~HjVD%^6dpznv0cC*sYH,j9]<-XcBGϡ{f`o8;lb;1 u$NL{ИVa<+C\;=ͭzvMo}=X<ig:6|%0ʮ ⨫ڃAagHQkC^&zrɊ-nJ`'l>~w;s̼OTՋ0P b[al|闆|CWŹ…-D=.|  Oz ՘Asi\i 0ܤa*~(uykZT])C7Dvfm|1Ku4QS-~(gZٙ_kmH(S(o+d(]x׿*)fp2?<7(kYEP(>?:e/E,zFy `e>0/Ix|0Ϯά삾!6]z/Ō)Y(]Id.biU~=+> =2Mr|X˶ڦs:&ߵK=C0 ^ƞEjpo]ʰہ-i*{l:>'X32V?08 t Z[@U1?NW?'"-GߝF(z2E^yE=o+T&iX'H͍b[oTg#t޸/]!nWA=ͨ3{څTrW.C8snF+ ~&8S>Q b#ګ, ߘ<ظ'*wᴹ>WAfÜX6\9Rw96gJDEPsKBPDa;rQP,PVwDE27RGl["4.=2W[zWP}:B0b|K.kfԒlOAOKPV,JI+\z \o8ͤh{9U|J&RC}WVSIINnʘ7O$IO[HsVȫBB;nH"Ҕ*C_ t ѫ4J-r`5+ WRҢ]X/*U[~x+$Aۗ\rT92ĪEj/EZeMd lhroIW` O ekvDdDQGq^s[GAa|DXSga;+HJQP9gV}i 3XQAPIES ANls =aiOy20$[I5q`8_71@ףT>=< Dwxlvl z!M { 3*Rݎ\|!8oͺ-dq}(%q1<@&{DUʹtѲ_sɝB#$HʵK5,Q7!ފُ\{/W45h)5 DPS(:z=n+:CʧV?0͒E__ٱG|KmjLDX/wu1o1n.Ft3C-ƩvN ǃ:an<ݐg@]$;9! -|&X5 =y^Zt)Jr-51ς.G@P5bڱD%j*uṚzo܏"u4דs9K<6)kF$9=IR_+;O![.\>lkzc {Շd9&5lp0yPfT>p,yiB Pp'k",,z(>s&!W6#^C.JtGPNxH ,#5BSGGPR6N.&ދǎѤސ[s{A\lh&+uxFh!-R! ծjwb [0kci '=POd'p՜я*b:Xà4͜UBjeWe3%Rr}ʠqb`aCX| 4f1 GIwb1@%(!]]ʪ]nje<heH /"s 6YPr/9tNU_\ޢ)=x j]7K|J>e,KéEdc%ZFR qQfY:{&Ca:M7և7*+ & ס8(m i/L[KD7 F8 }r<bHl!!&稣gv5$)Lj(ZApͬƣ:l9I^'2:(Zp%ɴu(.9 !-6$ xOV!+j\uLRB3R$5U>Xh#? \+ u d 4z 7ؒљy] 6[YJbUqtaLK켐ߦJ:321i*1=ՕDF(݉"U MyFV3:"(at"_hKc/zI SdtrkPhF-!w?KL Zw񷄮g=k sWO" #v &"C}Je ǸOzpDh^Ԕyفk[mZveO#Jc)|8nє\`}ANm><<+qq9iHw[RԜ0$H fVPU2&84]ɖ"eRTfP'Eq6?~S}*OJS2o/}r06,Fn T;#( ͥ涶-kdqJ/2G`)QyBt$86Vn}ٛ9M) )|Bqo>{$j>0֩Ǎ5B $*'d_pdM `cI;l  d1a?\<_Cvf|~H4G.H(zK, p㺷4}3`;|jXB̄*U+,ٿԻgtη!㑉 bX򉔞P[cC>Ç~NJod.|LA7;6Q `ϸN& _G}lX/7d"9eFVE8vӳ/|Q{չ"/g)>zcވi"{]V-9)E\J=!RNNOb(l]?AhЧHX.VThv~(%('n7`&ݘ9$l { a됓ѝtNugO(GZ8at3~\IS{x$)R4=o>3Ġ43Di1pg_NM@%QOV.(C3EέliU,3ר_n}u|v}TyFvkƃ_׾vhS[S堖b W͍a mϭ`זvQv2z "חU5(<^KTݩXy&Gr( ?t. Q䙃]QS 9ai^ OBԀHGq\@(aby5j#XQ_$դFvmg#XU˅2l=:g>YX[?;P% 4zTһrGN.f~`D*qoN)J!8K3Q RSif y$P9. q"tK5\b0M vVf9:͆JJ&ȇWPr$"fw:F /eI+c=]Dkbk֙$v:NMrQ/Yߝ"M? nTn"EzVOd+\i UB?~Ox =KV\OD<ڴcŭ ӛZgzעو{0"+*A;A6@beͣwnfo|I YJV7zƸ =>$ P&)/vOy~,!yg;dz BU5]'{u 1i*6Tv ()<v{H$iN`kF !{kfr=TkRHx"NP36BoJ3-) c~d$*ԒMvE/Ug=/R%ڂhKh9d~Yoz~/R#dzpȒ) 1uĮBs3WC-8/1H*}gâEffxv@6CX,/ P4Cᗿ "Ω(a!Ni#ٯ 1di_7F%1[NTV\:Vg4(Ņ,^Pڗa$vi(,*v=ܱ}`^HK_}EoւJ{ X1B| $EDQT^2ěh5Х!,8y?_+&\o"* =|7t$eyae&?rl7QQV`lktq%j sWpN(FwO\&DR9 X'vģ@A5b-W#wZ `hND|"zm0TL w&,clU"DE:H9WzeSV4l[qe&VAxCB%KtL`}ջtpl-0CMp˄rnCg:`ػh[I'u%nUJpd2mxyriJmvvTx(8NW%AT ݈*MQedrmKo 2^aq|7 ?:W[@/[ 8H͆n|8C1 _ªiV5YǾ="s,y7@g_`{Ω#d B1B\Ø-L`C$V#)hsۡs֒‘13 *Щ@A~C6-P7*t~9;w״4)HF9bLwř'q)`a)ÏS͕qS\ʹ~XkG85;ZCNM$M5e&_#r|=;'>a_Qh A2k˹%Lqe/ȅCYEdʰ.ב9uP Jy~ږY0;hm cM*- 8*(8SXqf_| fzGԑ.O\Zߟftka<,e\a:n՟ =?e 9Gz y)B> 8eb{cjh藑(^.OY^Pf-ͨS4Эҽ3Ue5.rzTqxH7 dHOJeClދ2P;HWk\"H`4)2 /M2]sY= dQto.inY{ #TTU3(%+4^"AB o'q=hL7TV{UٚtL)kܭ]Q8%$7ϩ+]XW{~ERwS)G-61ڋw1 &[{M'sBXZT90~xDrWU^1?GNCc5LM73XQ~%@\g:uH Xdm_Lk'kB kJ/E"ܾBZH>. ]Ȣ\tÊ%b{Z[W2TXjV I ODh K `bA ML]셋x_mUW/7qXza9hjƓ^A0krb5<[o/`5*e1G=WEZnO)nVI׉JJg!ã_""G1mA(mQoKb,}#`eK q|tYC_RɅ#'eI(Oys { ѡs47Vj,ZncFպZ|*-R_ KT%v~4#'L1P-; EK<Fk#)L[$1LFeO=n8jA?ߊ&Kvgɜ9`/?k<G|ľ_{m\d+{"3i2{^J hdD@niVe!7Y2cleUF2K!)$8yp1oѴ(êem"$g܁e\YelL0 elȦpWw=+%uGvA:," a>ya:gRCs$ F5 ic  w#l8Qd`0Yi "b6>A9?tZ"M7o蒧pi6hVr60RM۪rEcvOJ>ZKDvI] U MѬ=Y 0k^'HD[Y)l܆_yÖFy]hUe2H$CћcoK@7 8yW(ȞD \*ms%e? ͗`2-e5}-}rLyH;7]kiVUWiDbN;aRr6,zr$!$Ȉx8g!8ŽFZEL 4[ SFzt>5Wh0tf=ta;\Ҍfn:<ؿ=%jU_K_PHs 3m| scbʼfH^)Pc1cLw!Ll8uLO6zG)U |Vtߞ s],? >2.-r~( f;і4, @ СCM 4)5aN K=d+N4>Oh䦰BM+cIeB_=T r+(5z$YD&(oPA-Wge_'3cm҂<+¼K^[2T& 9"heՋC7E c.cytg8)26^<2QMAP΍TD[eDd@5Wex =-wHK:y^IwuԿN 7%7R1&PR˨#L` >NmH1q FĹWA-1,6{6 r4ڔjP$kW2/FvtA"$:#6Ǡ-T[RToʧ$LdOrvAˋC4~\xohAd.e0OԖn"^OB芍\Eۥ"cj~ZK3G`=9l!TO$#,;ʛ#dru'؜.Oj۰tݲ>7f-1K@Gm;\/ohK\CyK]u<7B5,|8H9®a{&aZ$+DZ0νgU@4@m&%ry#(ͽi6Ò;Jo&n]N=WBZU0Rc84w !vLne{ӆ'u=pENC𝫠num6Iq^ Wҷ0(TN@T@rBB?R =i>a|( ۋ;!`|tf8-=$D*٫pwz>4JK#0N:=71$u!79N .,q7ТT*^Lbu$_P%Hg$AYwIˠ'%Po7%uV&mW&Y a^uRn"ŶF@8'Bs[2,uR[ˠ44d)̶yj}#aݎ716\4uݲ*WTjak' |ǰ)&}ri>\\"C6=ƥGnN説]`R=D a!-uNYP2YY>cؤ|SmoR /f+(_GWZ9-i>&aI]h0a/7k046i2 1FnKXuBUrS^=yg~~K kEmi͘Ͳµ/g{i0B5/&ٳQ"g le1[[yO\E˒-o1UB5f'f\iEc8қ,^b@A<6(vl4s-:Dxgxapa{҈ڿ*~QH^/(QNWs'O0G_ ޭr{dEgݥ-GmɤspwHr"-0%y$LMI>[E'WͿe$PVT±(X#l yaܾy0"tt`~`'1Yɠٸ,cKnw a !BU_ZM`/Tim(~HH!9HџL@;o?ņ Hm~Ӽ+0S7Fݢ̡4?6U9C,?tf}J3r8@j>giC$lw3F;B2 9r^;t5a7|V5ԧ:m nA4,N %8q/Y8?d]}w 9j>@ſs‚ziXu'T3P/DP.CG@2ߓm^9f5t]yCd"8 4J2 n hftZFx0뺞ln4TV$i`!7\v7@Q㜳E@πtZhFN7.h=kۙ^*(i^7nx-T'ܕF2۝1t)W["z.kU`ccmdtg^PmM)5YQUhЙX]p^QKUVW _ mU~ NDf8ڑPg[0?J6:arThi AOޝrK|,s9t2nAHs(hd셷` [:,)]¿>FcܖX7 gi  )\\-CdGHW-#f Fw^nEkX"w?8޺#e rUOB:>3'*e##leKf~Y LCwza^%55&Ǣa4$6kBRqMbO"`Ƿh"a(aB G#^ ~]:>iM_ д&;fD80"&O <|!sH)-lkL fvNO3Nx[r9 Z[(/Y!콰!2d&ËlP n>Z`gX:m] ; -jڿgY<ڳml?gv'mnO 甬[٦y3:T8.mΒ$ .Tf+ ZDXK;a]!+c4 Dž, ŭD>Юhk)]vܽ`ƕ_{YglT z솘eH|@xT:A.t5 >|fٰh.x;v!A=NGmP7"k霍H4Q[](f>C~FW,*2zxSG1Zư'y ͛Z`͒1mt=??uCTm̻c^^\U % T#F/wɊuI.Y \:6\-ٷJ+J>?@~b~/L#(>?\~Exs 1)3ݞ?mșұ4 2 d9Ą'H'~:ol3vx?$7tHR4zFχ )#{x g q9:nlr*}GbwiY-Ѩ<ȣE";ŏ|ܛê4qs7%TTl1Jj~*:݉F^ an^ %:%ӈXA9j6|?5d9V<~89S?-).^Us_xq},ᝮD"y[OaP/R!!h[cY%v6m^Bxe&dž=#/-+u3c>H7,܎9>&+o3kh>$h;$]PKUM,ԾJRkHKUY2xe`Zvm!s+eC INlRSCTfE+ T$-/s(沦B z0ԃɲ!&ЋP Nr,+ 36ިYy JdS2PA<֯ksp k8SkU,eb4e߮B5cZPc$SH{#߰}r0+*m0bٔbA`˙?qϚ^j񏀦"p*@TAi)zՅjf C',wP(r5>tz_=?׿S_j-8Wo]q3G;Qow!Ua)!A(ڢ3)-\@80IN*"cLA)mR ӑ% |nO !N OIeLI^E$g%[o_rG3D( ihuK '%>2q Z\/QH' ~cu(S#l/p幷hRZ~B"oOX;T2TvԄdd/zOajt&{W;>i $WÚۭնX)U2ӖV~rE7#v=.q>݈{Y,D ABY0CW#v%10ge.n\ 'ؗVOՏDڼ҂<.TfnYM|sM+WEqaװV͞":*%SF >wSG$Xt1tH4G*h_<2eaIGKNj~(@Ͽ -#Z55$$W)~sݰϲEf]DKXk8@(oem _V7ݴ[x0lҀS86v~_me^N$'מ9paf?c%n& / ->dp덕ה M \aәh$w] |P87>:0OLgkuNr0J *yĂ`zj|D 'BFfo!AuH͂~(F("Lfr[T,PD́E8J*#Ak(TfJ<}d2=Ē BdihxwCsu 7kݲl5]")dnd騼2$"Öy%my'l.~Cz[fm2T7DvʂX3L:{Z]tVۯA_D:>uÔ 5LM\xF=H|-Ĺg>PխpVDc9ps$Ms :z1z'oF؁q. gW%6s-mX^?v={gga(mߧ;σ;ZenK룵tG%!0LmXnA|OS tP܌4j||wKt]N4P!֬t\Vᕽ# b/ }3+R@ $1`!p!rGG*TVDK[B~J 0T~.sq2>rl̰T>iӷھt@fk]#cxV=ɊUi.bдРQۆē yÄ.>󉢯!^eRģ&Nkdċ3E6yZAB4J!.!~r#&̃+蜕 x;G=#y05^Vu!F ֗Y-0I7d'4u]Pj/>sKu}k~3.Qg =mU"^q ӫɇ>~)oyTkhw oym( B ( Wg @$-"0-&A~DQǛ8gV  L63fmJO>1z)pC?t='uK^ZW3sC8i;d\>skngE<;C`E[ɖ4گPeBм?iuBj)1~* _.otG8φ2+\KE-(CP49kX 2dSk+M` \2yH#eēlE⇵ m*ov;IJ!v;r+KW߰Vbiڛ%RT݄/TP\wL`YC/Zp]8Ez=, .^5<s臃G/<XS~vt$g UH}*/Ϩ,%[T%72z5憯s@4j2|RLַ͜qt#W(7}:{.d!nl؏:*J._Vj"MrZq\l(4mb  %ݫpwW+A(DE{a ӗ#>_n 6y}S7 ={\?MdIeZ͹, @xW0>ٴz6zZ/ݬ];<$Tw~ lr0ը|_XMN@eMWF)љOT+ԕfCI 9ȗj"3¹"T?x+F38ܱAod#)Za6Y̱U ^kjjp#[/ρ' 78^Lo8¾[kA`ڧ=h{l|}H98o. z:]u.@!iwdzDM <5AOOV#aauS'v(P3}_:"GgGڌEu- Rulž*vy,ȿ%_]06 Y$d;#U{a;Ԯ@SɵVlWbUئq~.!f3IMB9hv\#-"ˢ#WiTmݮգr{2.s Zdc:Y ôbQtרxwhմ}!^ `S}2èѴ8r;–-Kok|8@jܿGmťyZlUҲW,(9!BGDD‚ *(#'o"exs#A66} d M *ub R$Ƕנ8L϶vF!a)5Li?-tY{R(XWϽۑ CGin94cR&)pZMA߹֊G[+axzTNZUo_!=M]u_4 9ơ)%Œxk>tў8 BQ-N ^^hw [Ǵsxw&H ?X#SjʘQ:Mu=7F;ޒ D'ʭ yX֤GҿWI+~+2q1MqŝJ7}eR/~v;U2r"ڏÉ{#dGtPLz8ŴŃ 5m'u %`()T G[S(M@g1JLhf\c@jo\l9^]؆q+v _u26p<"R;Dw*6Ԛ)dž],pO!Ѭ)!YsOv!em~ U)Pc|_ao2V1 z Zi6lj2#՞*!뇺UPFRd2~hJ9яW$)D"37SmwIdrc~8'- |=tY6 ת8ÖfȗgC$2G9Win10]xU8r+:נv ǯt߻Zmvs^:]|/J/lm RCE8O- SJvjճo1T"A>Azr09!G#YK)@n.u]&u3n[xҧoc9<631,z*zTlef56M5ll?VB`!3ejj= 3D7(zC}1ܚ RͺQsL;_5xQz(^3+.َ/U3<x4 q͓n_jZݜ%RM3tќ3-M00皉Cf {[ _*qJW8a ŗ1/["4Ww '!TxyT{Oyxoc u+4A?S0FZՀ[ʚ+M3U@SlT@|Rg3q@uޑ2qΓL_$3PߴSEQ;i@W%v@Ft3E6>N=$qWgۥ+y7P*UM){0coG`{}|#N":M}hS%vtƼD;gh3윖([rgb}'{@Y2P3YQƗTP] _a ^OX;qt8Bhk$Zk2p,o 'V,:O#L\vgI΍6g-}ne~,ȝf?RIH9yu3$Gq$Her(qɄ8L4%Tf|T$^l w|`䬏7 G8.?^N,asm[^Bro32BuԋZY:kt G6잗a@ >" *@9^W-X??uFE0 ߭. Ų@V6`4LGA,q'ʏ)pLFz ~Es7L8:GjQo=:LucP$Qs[ #eeLIr@X&[JQ:c"y4^(2=↝/e0GQ}J 1lX{P<6骫!eߍ @jM*4nU wד؇#0edH pUiȷx udBɦS%cQN:^G9ު.*f?uE;:D!{$*c cAV۬X ׌6x5b#XUV퐛ŷ6|.b1nj؛!G eY0Zk88RS!׹ &;Pl;)H1%+⏏k׊/SmRe:5dx[ p.}NwVy+޹dS;\;G lf){ 9KԾaHvFu/ D|k_֎78b ϢbP-B7i!\Uټyg$1WC4V9mg 8YTI6#|Lbj){0t]Ypz+ܛQ&~N~D4*ZX\7<m" ʱx-fDl"qE?H{NB@UѐlדoFt]hOfd6+LjN%+8\ă5YF م* j$)^z44Q>`轄' 'edKz*=",nj5 f뺭F@5') ro^F=ذʙь FlP 71)bGA Fq6&޲2ip+#jVz6'is$pjh$M󳣘]r*4iv+ă0HJcM1t!*=ۀ\W2&S\4d95 v>[ ȳ[*@#!ne@a"GQb@Y~}Zj1Ko_2L *oL](ƈ#sT۞:T5#!r"}cT_![%jk}ղy@SY$PծνM8}KTz4krjfLM>XfH칃xgfm8F}M) O?ֵD@]S]XW+A3e3ł!; őCݺwS R)sͳ? I*Pl#;_4nyn<ﻗTU[:$*!obupA-ﭢBY`{=HTh4tW+룩F%$)(&Z1/ALjr06B$#ΌP4nL/0ktM4O gD#eKY GW\c授ف&}er!r0 }f͵߁ஓ^zMߓkҗOePK b<%[CG ჈H >}Հӌ]sY:%|VMOjkTB~rIv#䄍%Ax 6GCc;{;m UeLgν+v8xp{  ?5zO(:Oyx/aIlY+eL=$ E+y3e%Sy>tpq%l.]`b$XPVMqm,4g3?) ӎ"'%-1w6`FRNz/!;F>κkKh9=)Pq7dpK{P bw<#Z#vp?DbX17R^ 4M˜͞_3cC'i>-?hgU3q\ٕLG"N7&rH/SJfX,j`zј}` B^f4AHIv*3R1xkkp!S4wu9kT2$ȲhEw4.c]6g{ro_ vsc1mdiGk_6 zlZZOn*4Zw|@5?{Hm e{Fe m{<#qIS1ޤ7uOdWBL%U94[ O7zID^r Gp⳧(a5e\B!s0.X 9zI D+?3W5Y? vu>!fF|@UކnDZ*'_lmnS?4j ޒ&ΖZV@""hrYS[llDĺjQ1*5B Ľ~3#{Lʭ_?7!OL|*NOPdvp' bjx_I37e\QգŭȞ5׊ֲ!cZv*iZ_C5n#* 7;P'1;,jD߇!aՊ Q ӦXSn{WYT*刢c[ . cisOF8".oG(ו6C)<&1hCfy08aE#;)s%saJE5b#'3RQy-CCUW, gT" ZCO+N ӑSNVuf@$X;wrP]Gˊasr(n_f7e `kywS~@OU8e[ĸ*!uSa4H/îSed`X}ĆRxLq]ư1md a7Epd;b[iip<-$tԆA1מF4fY-O NYw0ND'ZL < 3ym-G'C}Fx6= G?@,*ՆNTYgx]}|$C%fi{$+ " a:њrE(Q INݼГ-\'NLda<P (|$SJC'{dI*W?š!Jf_:A ZP~"BM`-%&YWͳ a02K>׳KBo Y;ݵ>^ g̋cʘ5ѶIAꍧS8Y֦6+葥̧&QbxG7CLypvmrЭ菻e܈79ȳlTe5m0Њ?_e rES ܮK'3+evsr|ޖ]D)P.p˖p0I̩yP}QC$/fF?D\ٸ4ms&ci1&RD"qE*Bvߕ+\܍6'T(ȎZ9Ǹ:F S4{YBE %?ҷCP^^lVЂZcIq_ 6#ž_آ!'Tguop36 쵟(6lYP<S b|ۤ)͏} GOwvPޯpvz l` //ּ٬Uϋ!U8˝ VTK( IoJO3X\qAv zKy5b7-Օ9rLYIM:Ѧoұ n D%us2Y @ctiљvOsE:R\sWME) >F<g+_ rwmo2R98#I`Toi߂PZ)st;f鈉Ir¿L0e)l7Bx]Ctukpd݌.wT.O]0`86{3fpG 'h&D"2ޓJpBmr`';*i4fw۷SdK& XcGsT=: N*bgW=q\ct[Ɯ[qhg6^]~ZB5I=Md( ,uG g'؝Ȁ}xՃW[; =9ڴwn3ot+Qe`P9Gk玥4)qhgҳ #:B>l qhC&í@6jy紨tm.qӝl[.8 aγ* KV-p^d˜ˢb-I^*bq#%#~HCE8 eR|C]2b y\Ca S)Pa2rO|-8uS$7V9=  z(ζ_#%*tgpEQN=物8ʑP_}x.G+1¦"O~Qp#.mʹն& cy!\ y߹8 [}/ecjܧHY 6m:`ɓxt3y:]QQ.ꔜzկъC3 -XYߢLJN`M$۲IZ B+Y6#s O , 9yj&{1AV<3;w?lY^bxzkYy+9΁Aeylq}Y%q : `#crCͲ=ȖZɫ:a|Fa>5G S#S/A> uM2>=k$%$QY"P U8y o]c#.ӱQ!ʲIsF Φ:y-,<= Ǡ+:Vmg{6EQR60Z`>;$#c X^5,MnՓ"P+R ;y>Z;k+ۿdGgp!]ҺN͙aU~ No2l (}N^LVOTy|#oﷇF=/FdiXiϣ,!2#FuA* 4(1 5TsjpU]ZgK*%];S[}WayS[}Uu;UPf lH%REdJ&Kə'` _I2uWtN@i'[!%:<*պS>gj=";ϜWҺj47@ͥA4YamƱ]*,k5dAxU 5H(S˚-Riń~N܁'Tt҃G)ay;Zd2hi@O}t|m.F 5 !2/ c:>6Y=j@sS0˜_.9doBaC{]Wh&@W|ﲙr.ipmrW&cJ`808oyo0"Ռvvju=fs)Ck) =;^~|PD_br.ܓh4yLr6ZI>Bq^^φF m6L3I_a4WaPfC"<"}rmi=!9*iNs \L|qNTYx"cwg!^;,kF^yw@aӫ5|rgЗ(sHo3 .wiI[vZ?3jjr b:GR1PP%C عmmm0Ib`ά } ,C`BFCׯc`@?8 H\6dI H~(icWF056>mv&Ǔm}@2kOARPyYY80T ]c:bE0Xdg.,LXHpyCT+瓇d`Ğcu.fH/G:=ݗk)4W.T ?D6y\!2!FA̚g5>3ԴhG\-4IıQbW1C B6C2If?O y0Ί⯷I^EIEG%LmOM2h#D;L >fie6Da[,2q&c8CnhZޚɀ`&W' J#eYɏBNZ-k8&8Q[_*:+TB }ÑY}xC1ȱ=3$]` ڔ̒z4{3A;mvJ#]jFk74f{4@OuW e*2#if134  YZ