libselinux-static-2.9-9.el8_10 > 6 6_6 3!pQp)Tξ7]mtZ`gab ]mtZ`{!p#V'U {lލ(Icc,1^J⌧JV?Nap$h !NO8ĈbdT|C^rVG+C0m:}v U XXƣ?D[ "]t-F!%o=9P?Abo갶 Yv-uk(>޷E◨QL-Ԃ8HgHЁ_zܙ^>~66?EYJ5)Ƿf;Kڹs0Әg~Z ]N`˜] =d[HzJҩ]I-|jP.EqE |"=:W7%z 9c1f87f9e19a1d2748f824d1d8c45740c7897ca0a63762b7650dc5f697f656032d086baca1f1747a8d652f039eb0ae78827195fb ܉3!pQp)Tξ7]mtZ`gab ]mtZ`æϼ̉ot͑ bDT'5;ݴ0x,\8n>"V7$nr^ 45@fJ 'f"~\y1:}_m@˱]aY!Gfk|s\N+8qZ`UabiׅM.ܦhA_ pɁƆ%''Qxݨ';Byi8[tloG,$K*]DX Սf$ "McYTeL5Q߯ X(L %ҰU~z.jRhAv4 EFl> !Maxf%iӦ XtΐH%cUn)S3uw?t^ ^/j=FZ~mmodpio[O'Ÿԯ}@A@`[SJWN.s0_۔SuL,%_ a/%뢵i0 9,h.p9[?[d ! H +Z`hl n p t  ,(8O9 O:kOGY|HYIYXYYY\Y]Y^YbYd[Ae[Ff[Il[Kt[du[hv[l[[[[Clibselinux-static2.99.el8_10Static libraries used to build SELinuxThe libselinux-static package contains the static libraries needed for developing SELinux applications.ga ord1-prod-x86build001.svc.aws.rockylinux.org KojiRockyPublic Domaininfrastructure@rockylinux.orgUnspecifiedhttps://github.com/SELinuxProject/selinux/wikilinuxi686 ga 4886237a92c8bdb831a121e6a38f050b9c6266ace28c807d948fbd741bfb317arootrootlibselinux-2.9-9.el8_10.src.rpmlibselinux-staticlibselinux-static(x86-32)    libselinux-devel(x86-32)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)2.9-9.el8_103.0.4-14.6.0-14.0-15.2-14.14.3f@c@c.b_@_l@]X]@\@[@[ā@[ @[,[@[Zz@ZK@ZZZI@Z@Z}@Zz@Zu@ZTZOhZfY@Y˒Y(@YJYV@Y@Y|xY{'@Yx@Y.X-Xg@X@X @XN@X@XXx@Xv@XJX43@WH@W9W@Wq@Wm Wk@W,@W'A@W#LW@VяVIVɦV=@VVii@V@V UU@U4@Ua@UQ@U8U6;UTS@S@SSShShSXS 4@S@R@RUR&RʚRkR%R@RMUM@M@M@M@MlMQ0@MGM5ML@L-@L@L*@LLq@LN@LF@L$@KKKrK@KKqK}+KTM@KA@K@JJJJG@JG@JG@JjJS8JS8JB@J@JMIܑI@IԨIbI̿I@IV@III@I@I2I@IcGIcGIcGIG@IG@IBR@I1.I!\I!\I-HHHe@He@He@He@H@HHH@Ht@HsVHgy@H^>H^>H-w@H!H @H@G@GG#GF@G@GGƢ@GƢ@G­G@GGD@G@G@G@G,@G,@G@GG@GZ@GZ@GeGeG|@G|@GO@GO@G<4G<4G0W@G'@FF@FIFFFFF&@FF@FvFFS@FF@FF]F@FtFFzh@Fw@Fm9@F` @F; @F-@F,F@F@FF*FF @F @FoE@EE@E4@EE?Eɿ@EEEEElEx@E&E=E=E@Ex@EvEnEYEK/@E>@E4EE EgEgEDfDDDDq@D@DB@DB@DB@DB@D{DDX@D4D4D4DD@D@D~D~D|3DvDu@Dr@Dr@DlaDk@DiD`@D_2D_2DX@DWID?D;@D'Dj@C@CCC-Cǖ@Cǖ@C[CCC8@C@CC @CCqC @CCCC@CBC@C@C|pC|pC{@CyCp@Cp@CoACkM@CiCf@C_oC_oC^@C^@CX@CWCS@COCFc@CFc@CECECBnCA@C;@C:C*C&@C&@C%mCC@CC C a@C a@C&B=BۙB@B@Br!Br!Br!Bn-@BgB] B] BZfBS@BQ,@BIC@BAZ@B9q@B9q@B06B-B$Y@B#BB@B@B LB LBBAA)@A@A@AA@A@A@AyAҜ@AJA@A`A`AA@AA@Ak@AAA@AvA@AAoA]FA]FAQi@AN@AI@AF@AF@AA@A>@A>@A7 @A7 @A5A4h@A3A3A/"@A-A+-A(A$@A!@A A A@A@@@q@7@@@@6@@@A@)@@@@@@@@@~y@@~y@@~y@@}'@s@@s@@s@@l@@ia@@b@b@b@O@@O@@Dw@@9@@,@@ @/@@???E@?E@?٭???q@??@?@?@?}d?z?a@?M?D@>S@Vit Mojzis - 2.9-9Vit Mojzis - 2.9-8Vit Mojzis - 2.9-7Vit Mojzis - 2.9-6Vit Mojzis - 2.9-5Vit Mojzis - 2.9-4Vit Mojzis - 2.9-3Petr Lautrbach - 2.9-2.1Petr Lautrbach - 2.9-1Petr Lautrbach - 2.8-6Petr Lautrbach - 2.8-5Petr Lautrbach - 2.8-4Petr Lautrbach - 2.8-3Petr Lautrbach - 2.8-2Petr Lautrbach - 2.8-1Petr Lautrbach - 2.8-0.rc3.1Petr Lautrbach - 2.8-0.rc2.1Petr Lautrbach - 2.8-0.rc1.1Petr Lautrbach - 2.7-14Petr Lautrbach - 2.7-13Petr Lautrbach - 2.7-12Igor Gnatenko - 2.7-11Fedora Release Engineering - 2.7-10Igor Gnatenko - 2.7-9Iryna Shcherbina - 2.7-8Mamoru TASAKA - 2.7-7Petr Lautrbach - 2.7-6Petr Lautrbach - 2.7-5Petr Šabata - 2.7-4Zbigniew Jędrzejewski-Szmek - 2.7-3Zbigniew Jędrzejewski-Szmek - 2.7-2Petr Lautrbach - 2.7-1Fedora Release Engineering - 2.6-10Florian Weimer - 2.6-9Petr Lautrbach - 2.6-8Fedora Release Engineering - 2.6-7Petr Lautrbach - 2.6-6Petr Lautrbach - 2.6-5Petr Lautrbach - 2.6-4Petr Lautrbach - 2.6-3Petr Lautrbach - 2.6-2Petr Lautrbach - 2.6-1Fedora Release Engineering - 2.5-18Stephen Gallagher - 2.5-17Vít Ondruch - 2.5-16Petr Lautrbach - 2.5-15Charalampos Stratakis - 2.5-14Petr Lautrbach - 2.5-13Petr Lautrbach 2.5-12Petr Lautrbach 2.5-11Fedora Release Engineering - 2.5-10Petr Lautrbach - 2.5-9Petr Lautrbach - 2.5-8Petr Lautrbach - 2.5-7Petr Lautrbach - 2.5-6Petr Lautrbach - 2.5-5Petr Lautrbach - 2.5-4Petr Lautrbach - 2.5-3Petr Lautrbach 2.5-2Petr Lautrbach 2.5-1Petr Lautrbach 2.5-0.1.rc1Fedora Release Engineering - 2.4-8Vít Ondruch - 2.4-7Petr Lautrbach - 2.4-6Robert Kuska - 2.4-5Petr Lautrbach 2.4-4Petr Lautrbach 2.4-3Adam Jackson 2.4-2Petr Lautrbach 2.4-1.1Fedora Release Engineering - 2.3-11Petr Lautrbach 2.3-10Petr Lautrbach 2.3-9Petr Lautrbach 2.3-8Than Ngo - 2.3-7Vít Ondruch - 2.3-6Miroslav Grepl - 2.3-5Fedora Release Engineering - 2.3-4Fedora Release Engineering - 2.3-3Kalev Lember - 2.3-2Dan Walsh - 2.3-1Miroslav Grepl - 2.2.2-8Vít Ondruch - 2.2.2-7Dan Walsh - 2.2.2-6Dan Walsh - 2.2.2-5Dan Walsh - 2.2.2-4Dan Walsh - 2.2.2-3Dan Walsh - 2.2.2-2Dan Walsh - 2.2.2-1Adam Williamson - 2.2.1-6Dan Walsh - 2.2.1-5Dan Walsh - 2.2.1-4Dan Walsh - 2.2.1-3Dan Walsh - 2.2.1-2Dan Walsh - 2.2.1-1Dan Walsh - 2.2-1Dan Walsh - 2.1.13-21Dan Walsh - 2.1.13-20Dan Walsh - 2.1.13-19Dan Walsh - 2.1.13-17Fedora Release Engineering - 2.1.13-17Dan Walsh - 2.1.13-16Dan Walsh - 2.1.13-15Dan Walsh - 2.1.13-14Dan Walsh - 2.1.13-13Dan Walsh - 2.1.13-12Dan Walsh - 2.1.13-11Dan Walsh - 2.1.13-10Dan Walsh - 2.1.13-9Dan Walsh - 2.1.13-8Dan Walsh - 2.1.13-7Dan Walsh - 2.1.13-6Dan Walsh - 2.1.13-5Dan Walsh - 2.1.13-4Dan Walsh - 2.1.13-3Dan Walsh - 2.1.13-2Dan Walsh - 2.1.13-1Dan Walsh - 2.1.12-20Dan Walsh - 2.1.12-19Dan Walsh - 2.1.12-18Dan Walsh - 2.1.12-17Dan Walsh - 2.1.12-16Dan Walsh - 2.1.12-15Dan Walsh - 2.1.12-14Dan Walsh - 2.1.12-13Dan Walsh - 2.1.12-12Dan Walsh - 2.1.12-11Dan Walsh - 2.1.12-10Dan Walsh - 2.1.12-9Dan Walsh - 2.1.12-8Dan Walsh - 2.1.12-7Dan Walsh - 2.1.12-6Dan Walsh - 2.1.12-5Dan Walsh - 2.1.12-4Dan Walsh - 2.1.12-3Dan Walsh - 2.1.12-2Dan Walsh - 2.1.12-1David Malcolm - 2.1.11-6David Malcolm - 2.1.11-5Fedora Release Engineering - 2.1.11-4Dan Walsh - 2.1.11-3Dan Walsh - 2.1.11-2Dan Walsh - 2.1.11-1Dan Walsh - 2.1.10-5Dan Walsh - 2.1.10-4Dan Walsh - 2.1.10-3Dan Walsh - 2.1.10-2Dan Walsh - 2.1.10-1Dan Walsh - 2.1.9-9Dan Walsh - 2.1.9-8Dan Walsh - 2.1.9-7Kay Sievers - 2.1.9-6Dan Walsh - 2.1.9-5Harald Hoyer 2.1.9-4Dan Walsh - 2.1.9-3Dan Walsh - 2.1.9-2Dan Walsh - 2.1.9-1Dan Walsh - 2.1.8-5Dan Walsh - 2.1.8-4Dan Walsh - 2.1.8-2Dan Walsh - 2.1.8-1Dan Walsh - 2.1.7-2Dan Walsh - 2.1.7-1Dan Walsh - 2.1.6-4Dan Walsh - 2.1.6-3Dan Walsh - 2.1.6-2Dan Walsh - 2.1.6-1Dan Walsh - 2.1.5-5Ville Skyttä - 2.1.5-4Dan Walsh - 2.1.5-3Dan Walsh - 2.1.5-2Dan Walsh - 2.1.5-1Dan Walsh - 2.1.4-2Dan Walsh - 2.1.4-1Dan Walsh - 2.1.0-1Dan Walsh - 2.0.102-6Dan Walsh - 2.0.102-5Dan Walsh - 2.0.102-4Dan Walsh - 2.0.102-3Dan Walsh - 2.0.102-2Dan Walsh - 2.0.102-1Dan Walsh - 2.0.101-1Dan Walsh - 2.0.99-5Dan Walsh - 2.0.99-4Dan Walsh - 2.0.99-3Dan Walsh - 2.0.99-2Dan Walsh - 2.0.99-1Fedora Release Engineering Dan Walsh - 2.0.98-3Dan Walsh - 2.0.98-2Dan Walsh - 2.0.98-1Dan Walsh - 2.0.97-1Dan Walsh - 2.0.96-9Dan Walsh - 2.0.96-8jkeating - 2.0.96-7Adam Tkac - 2.0.96-6Dan Walsh - 2.0.96-5Dan Walsh - 2.0.96-4David Malcolm - 2.0.96-3Dan Walsh - 2.0.96-2Dan Walsh - 2.0.96-1Dan Walsh - 2.0.94-1Dan Walsh - 2.0.93-1Dan Walsh - 2.0.92-1Dan Walsh - 2.0.91-1Dan Walsh - 2.0.90-5Dan Walsh - 2.0.90-4Dan Walsh - 2.0.90-3Dan Walsh - 2.0.90-2Dan Walsh - 2.0.90-1Dan Walsh - 2.0.89-2Dan Walsh - 2.0.89-1Dan Walsh - 2.0.88-1Dan Walsh - 2.0.87-1Dan Walsh - 2.0.86-2Dan Walsh - 2.0.86-1Fedora Release Engineering - 2.0.85-2Dan Walsh - 2.0.85-1Dan Walsh - 2.0.84-1Dan Walsh - 2.0.82-2Dan Walsh - 2.0.82-1Dan Walsh - 2.0.81-1Dan Walsh - 2.0.80-1Dan Walsh - 2.0.79-6Dan Walsh - 2.0.79-5Dan Walsh - 2.0.79-4Dan Walsh - 2.0.79-3Dan Walsh - 2.0.79-1Dan Walsh - 2.0.78-5Dan Walsh - 2.0.78-4Dan Walsh - 2.0.78-3Dan Walsh - 2.0.78-2Dan Walsh - 2.0.78-1Fedora Release Engineering - 2.0.77-6Dan Walsh - 2.0.77-5Dan Walsh - 2.0.77-3Dan Walsh - 2.0.77-2Dan Walsh - 2.0.77-1Dan Walsh - 2.0.76-6Dan Walsh l - 2.0.76-5Dan Walsh - 2.0.76-4Ignacio Vazquez-Abrams - 2.0.76-2Dan Walsh - 2.0.76-1Dan Walsh - 2.0.75-2Dan Walsh - 2.0.75-1Dan Walsh - 2.0.73-1Dan Walsh - 2.0.71-6Dan Walsh - 2.0.71-5Dan Walsh - 2.0.71-4Dan Walsh - 2.0.71-3Dan Walsh - 2.0.71-2Dan Walsh - 2.0.71-1Dan Walsh - 2.0.70-1Dan Walsh - 2.0.69-2Dan Walsh - 2.0.69-1Dan Walsh - 2.0.67-4Dan Walsh - 2.0.67-3Dan Walsh - 2.0.67-2Dan Walsh - 2.0.67-1Dan Walsh - 2.0.65-1Dan Walsh - 2.0.64-3Dan Walsh - 2.0.64-2Dan Walsh - 2.0.64-1Dan Walsh - 2.0.61-4Dan Walsh - 2.0.61-3Dan Walsh - 2.0.61-2Dan Walsh - 2.0.61-1Dan Walsh - 2.0.60-1Dan Walsh - 2.0.59-2Dan Walsh - 2.0.59-1Dan Walsh - 2.0.58-1Dan Walsh - 2.0.57-2Dan Walsh - 2.0.57-1Dan Walsh - 2.0.56-1Dan Walsh - 2.0.55-1Dan Walsh - 2.0.53-1Dan Walsh - 2.0.52-1Dan Walsh - 2.0.50-1Dan Walsh - 2.0.49-2Dan Walsh - 2.0.49-1Dan Walsh - 2.0.48-1Dan Walsh - 2.0.47-4Adel Gadllah - 2.0.47-3Dan Walsh - 2.0.47-2Dan Walsh - 2.0.47-1Dan Walsh - 2.0.46-6Dan Walsh - 2.0.46-5Dan Walsh - 2.0.46-4Dan Walsh - 2.0.46-3Dan Walsh - 2.0.46-2Dan Walsh - 2.0.46-1Dan Walsh - 2.0.45-1Dan Walsh - 2.0.43-1Dan Walsh - 2.0.42-1Dan Walsh - 2.0.40-1Dan Walsh - 2.0.37-1Dan Walsh - 2.0.36-1Dan Walsh - 2.0.35-2Dan Walsh - 2.0.35-1Dan Walsh - 2.0.34-3Dan Walsh - 2.0.34-2Dan Walsh - 2.0.34-1Dan Walsh - 2.0.33-2Dan Walsh - 2.0.33-1Dan Walsh - 2.0.31-4Dan Walsh - 2.0.31-3Dan Walsh - 2.0.31-2Dan Walsh - 2.0.30-2Dan Walsh - 2.0.30-1Dan Walsh - 2.0.29-1Dan Walsh - 2.0.24-3Dan Walsh - 2.0.24-2Dan Walsh - 2.0.24-1Dan Walsh - 2.0.23-3Dan Walsh - 2.0.23-2Dan Walsh - 2.0.23-1Dan Walsh - 2.0.22-1Dan Walsh - 2.0.21-2Dan Walsh - 2.0.21-1Dan Walsh - 2.0.18-1Dan Walsh - 2.0.16-1Dan Walsh - 2.0.14-1Dan Walsh - 2.0.13-2Dan Walsh - 2.0.13-1Dan Walsh - 2.0.12-2Dan Walsh - 2.0.12-1Dan Walsh - 2.0.11-1Dan Walsh - 2.0.9-2Dan Walsh - 2.0.9-1Dan Walsh - 2.0.8-1Dan Walsh - 2.0.7-2Dan Walsh - 2.0.7-1Dan Walsh - 2.0.5-2Dan Walsh - 2.0.5-1Dan Walsh - 2.0.4-1Dan Walsh - 2.0.2-1Dan Walsh - 2.0.1-1Dan Walsh - 2.0.0-1Dan Walsh - 1.34.0-2Dan Walsh - 1.34.0-1Dan Walsh - 1.33.6-1Dan Walsh - 1.33.5-1Dan Walsh - 1.33.4-3Dan Walsh - 1.33.4-2Dan Walsh - 1.33.4-1Dan Walsh - 1.33.3-3Dan Walsh - 1.33.3-2Dan Walsh - 1.33.3-1Jeremy Katz - 1.33.2-4Dan Walsh - 1.33.2-3Dan Walsh - 1.33.2-2Dan Walsh - 1.33.2-1Dan Walsh - 1.33.1-2Dan Walsh - 1.33.1-1Dan Walsh - 1.32-1Jesse Keating - 1.30.29-2Dan Walsh - 1.30.29-1Jeremy Katz - 1.30.28-3Dan Walsh - 1.30.28-2Dan Walsh - 1.30.28-1Jeremy Katz - 1.30.27-2Dan Walsh - 1.30.27-1Jesse Keating - 1.20.26-2Dan Walsh - 1.30.25-1Dan Walsh - 1.30.24-1Dan Walsh - 1.30.22-2Dan Walsh - 1.30.22-1Dan Walsh - 1.30.20-1Jeremy Katz - 1.30.19-5Jeremy Katz - 1.30.19-4Dan Walsh 1.30.19-3Dan Walsh 1.30.19-2Dan Walsh 1.30.19-1Dan Walsh 1.30.15-5Dan Walsh 1.30.15-4Dan Walsh 1.30.15-3Dan Walsh 1.30.15-2Dan Walsh 1.30.15-1Dan Walsh 1.30.12-2Dan Walsh 1.30.12-1Dan Walsh 1.30.11-2Dan Walsh 1.30.11-1Dan Walsh 1.30.10-4Dan Walsh 1.30.10-3Dan Walsh 1.30.10-2Dan Walsh 1.30.10-1Dan Walsh 1.30.8-1Dan Walsh 1.30.7-2Dan Walsh 1.30.7-1Dan Walsh 1.30.6-2Dan Walsh 1.30.6-1Dan Walsh 1.30.5-1Dan Walsh 1.30.3-3Dan Walsh 1.30.3-2Dan Walsh 1.30.3-1Dan Walsh 1.30.1-2Dan Walsh 1.30.1-1Dan Walsh 1.30-1Jesse Keating - 1.29.7-1.2Jesse Keating - 1.29.7-1.1Dan Walsh 1.29.7-1Dan Walsh 1.29.6-1Dan Walsh 1.29.5-2Dan Walsh 1.29.5-1Dan Walsh 1.29.4-1Dan Walsh 1.29.3-2Dan Walsh 1.29.3-1Dan Walsh 1.29.2-4Dan Walsh 1.29.2-3Dan Walsh 1.29.2-2Dan Walsh 1.29.2-1Dan Walsh 1.29.1-3Jesse Keating Dan Walsh 1.29.1-1Dan Walsh 1.28-1Dan Walsh 1.27.28-2Dan Walsh 1.27.28-1Dan Walsh 1.27.26-1Dan Walsh 1.27.25-1Dan Walsh 1.27.23-1Dan Walsh 1.27.22-4Dan Walsh 1.27.22-3Dan Walsh 1.27.22-2Dan Walsh 1.27.22-1Dan Walsh 1.27.21-2Dan Walsh 1.27.21-1Dan Walsh 1.27.20-1Dan Walsh 1.27.19-1Dan Walsh 1.27.18-1Dan Walsh 1.27.17-4Dan Walsh 1.27.17-2Dan Walsh 1.27.17-1Dan Walsh 1.27.14-3Dan Walsh 1.27.14-2Dan Walsh 1.27.14-1Dan Walsh 1.27.13-2Dan Walsh 1.27.13-1Dan Walsh 1.27.12-1Dan Walsh 1.27.9-2Dan Walsh 1.27.9-1Dan Walsh 1.27.7-1Dan Walsh 1.27.6-1Dan Walsh 1.27.4-1Dan Walsh 1.27.3-1Dan Walsh 1.27.2-1Dan Walsh 1.27.1-3Dan Walsh 1.27.1-2Dan Walsh 1.26-6Dan Walsh 1.26-5Dan Walsh 1.26-3Dan Walsh 1.26-2Dan Walsh 1.25.7-1Dan Walsh 1.25.6-1Dan Walsh 1.25.5-1Dan Walsh 1.25.4-1Dan Walsh 1.25.3-2Dan Walsh 1.25.3-1Dan Walsh 1.25.2-2Dan Walsh 1.25.2-1Dan Walsh 1.24.2-1Dan Walsh 1.24.1-1Dan Walsh 1.23.11-1Dan Walsh 1.23.10-3Dan Walsh 1.23.10-2Dan Walsh 1.23.10-1Dan Walsh 1.23.8-1Dan Walsh 1.23.7-3Dan Walsh 1.23.7-2Dan Walsh 1.23.7-1Dan Walsh 1.23.6-1Dan Walsh 1.23.5-1Dan Walsh 1.23.4-1Dan Walsh 1.23.2-3Dan Walsh 1.23.2-2Dan Walsh 1.23.2-1Dan Walsh 1.23.1-1Dan Walsh 1.22-1Dan Walsh 1.21.13-1Dan Walsh 1.21.12-1Dan Walsh 1.21.11-2Dan Walsh 1.21.11-1Dan Walsh 1.21.10-3Dan Walsh 1.21.10-1Dan Walsh 1.21.9-2Dan Walsh 1.21.9-1Dan Walsh 1.21.8-1Dan Walsh 1.21.7-1Dan Walsh 1.21.5-1Dan Walsh 1.21.4-1Dan Walsh 1.21.2-1Dan Walsh 1.21.1-3Dan Walsh 1.21.1-2Dan Walsh 1.21.1-1Dan Walsh 1.20.1-3Dan Walsh 1.20.1-2Dan Walsh 1.20.1-1Dan Walsh 1.19.4-1Dan Walsh 1.19.3-3Dan Walsh 1.19.3-2Dan Walsh 1.19.3-1Dan Walsh 1.19.2-1Dan Walsh 1.19.1-6Dan Walsh 1.19.1-4Dan Walsh 1.19.1-2Dan Walsh 1.19.1-1Steve Grubb 1.18.1-5Dan Walsh 1.18.1-4Dan Walsh 1.18.1-3Steve Grubb 1.18.1-2Dan Walsh 1.18.1-1Steve Grubb 1.17.15-2Steve Grubb 1.17.15-2Dan Walsh 1.17.15-1Dan Walsh 1.17.14-1Dan Walsh 1.17.13-3Dan Walsh 1.17.13-2Dan Walsh 1.17.13-1Dan Walsh 1.17.12-2Dan Walsh 1.17.12-1Dan Walsh 1.17.11-1Dan Walsh 1.17.10-1Dan Walsh 1.17.9-2Dan Walsh 1.17.9-1Dan Walsh 1.17.8-2Dan Walsh 1.17.8-1Dan Walsh 1.17.7-1Dan Walsh 1.17.6-1Dan Walsh 1.17.5-1Dan Walsh 1.17.4-1Dan Walsh 1.17.3-1Dan Walsh 1.17.2-1Dan Walsh 1.17.1-1Dan Walsh 1.16.1-1Colin Walters 1.16-1Dan Walsh 1.15.7-1Dan Walsh 1.15.6-1Dan Walsh 1.15.5-1Dan Walsh 1.15.4-1Dan Walsh 1.15.3-2Dan Walsh 1.15.3-1Dan Walsh 1.15.2-1Dan Walsh 1.15.1-3Dan Walsh 1.15.1-2Dan Walsh 1.15.1-1Dan Walsh 1.14.1-1Dan Walsh 1.13.4-1Elliot Lee Dan Walsh 1.13.3-2Dan Walsh 1.13.2-1Dan Walsh 1.13.1-1Dan Walsh 1.12-2Dan Walsh 1.12-1Dan Walsh 1.11.4-1Dan Walsh 1.11.3-1Dan Walsh 1.11.2-1Dan Walsh 1.11-4Dan Walsh 1.11-3Dan Walsh 1.11-2Dan Walsh 1.11-1Dan Walsh 1.10-2Dan Walsh 1.10-1Dan Walsh 1.9-1Dan Walsh 1.8-1Dan Walsh 1.6-6Dan Walsh 1.6-5Dan Walsh 1.6-4Dan Walsh 1.6-3Dan Walsh 1.6-2Elliot Lee Dan Walsh 1.4-11Elliot Lee Dan Walsh 1.4-9Dan Walsh 1.4-8Dan Walsh 1.4-7Dan Walsh 1.4-6Dan Walsh 1.4-5Dan Walsh 1.4-4Dan Walsh 1.4-3Dan Walsh 1.4-2Dan Walsh 1.4-1Dan Walsh 1.3-2Dan Walsh 1.3-1Dan Walsh 1.2-9Dan Walsh 1.2-8Dan Walsh 1.2-7Dan Walsh 1.2-6Dan Walsh 1.2-5Dan Walsh 1.2-4Dan Walsh 1.2-3Dan Walsh 1.2-2Dan Walsh 1.2-1Dan Walsh 1.0-1- restorecon: Include (RHEL-50830)- restorecon: Fix memory leak - xattr_value (#2137965)- Restorecon: Ignore missing directories when -i is used (#2137965)- Describe fcontext regular expressions (#1904059) - Strip spaces before values in config (#2012145)- Deprecate security_compute_user(), update man pages (#1879368)- Eliminate use of security_compute_user() (#1879368)- Fix mcstrans secolor examples in secolor.conf man page (#1770270)- Use Python distutils to install SELinux python bindings (#1719771) - Move sefcontext_compile to -utils package (#1612518)- SELinux userspace 2.9 release- Fix RESOURCE_LEAK coverity scan defects- selinux_restorecon: Skip customized files also without -v - man pages fixes- Build libselinux-python when %with_python2 macro is set to non-zero value- Build libselinux-ruby (#1581322)- Don't build the Python 2 subpackage (#1567358)- SELinux userspace 2.8 release- SELinux userspace 2.8-rc3 release candidate- SELinux userspace 2.8-rc2 release candidate- SELinux userspace 2.8-rc1 release candidate- Do not build libselinux-ruby- build: Replace PYSITEDIR with PYTHONLIBDIR- Correct manpages regarding removable_context - build: follow standard semantics for DESTDIR and PREFIX- Escape macros in %changelog- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild- Switch to %ldconfig_scriptlets- Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)- F-28: rebuild for ruby25- Rebuild with libsepol-2.7-3- Drop golang bindings - Add support for pcre2 to pkgconfig definition- Enable the python3 subpackages on EL- Also add Provides for the old name without %_isa- Python 2 binary package renamed to python2-libselinux See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3 - Python 3 binary package renamed to python3-libselinux- Update to upstream release 2017-08-04- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild- Rebuild with binutils fix for ppc64le (#1475636)- Always unmount selinuxfs for SELINUX=disabled- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- Don't finalize mount state in selinux_set_policy_root() - Follow upstream and rename _selinux.so to _selinux.cpython-36m-x86_64-linux-gnu.so- Fix setfiles progress indicator- Fix segfault in selinux_restorecon_sb() (#1433577) - Change matchpathcon usage to match with matchpathcon manpage - Fix a corner case getsebool return value- Fix 'semanage boolean -m' to modify active value- Fix FTBFS - fatal error (#1427902)- Update to upstream release 2016-10-14- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild- Add missing %license macro- Rebuilt for https://fedoraproject.org/wiki/Changes/Ruby_2.4- Rewrite restorecon() python method- Rebuild for Python 3.6- Fix pointer handling in realpath_not_final (#1376598)- Fix -Wsign-compare warnings - Drop unused stdio_ext.h header file - Kill logging check for selinux_enabled() - Drop usage of _D_ALLOC_NAMLEN - Add openrc_contexts functions - Fix redefinition of XATTR_NAME_SELINUX - Correct error path to always try text - Clean up process_file() - Handle NULL pcre study data - Fix in tree compilation of utils that depend on libsepol- Rebuilt with libsepol-2.5-9- https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages- Clarify is_selinux_mls_enabled() description - Explain how to free policy type from selinux_getpolicytype() - Compare absolute pathname in matchpathcon -V - Add selinux_snapperd_contexts_path()- Move _selinux.so to /usr/lib64/python*/site-packages- Modify audit2why analyze function to use loaded policy - Sort object files for deterministic linking order - Respect CC and PKG_CONFIG environment variable - Avoid mounting /proc outside of selinux_init_load_policy()- Fix multiple spelling errors- Rebuilt with libsepol-2.5-5- Fix typo in sefcontext_compile.8- Fix location of selinuxfs mount point - Only mount /proc if necessary - procattr: return einval for <= 0 pid args - procattr: return error on invalid pid_t input- Use fully versioned arch-specific requires- Update to upstream release 2016-02-23- Update to upstream rc1 release 2016-01-07- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild- Rebuilt for https://fedoraproject.org/wiki/Changes/Ruby_2.3- Build libselinux without rpm_execcon() (#1284019)- Rebuilt for Python3.5 rebuild- Flush the class/perm string mapping cache on policy reload (#1264051) - Fix restorecon when path has no context- Simplify procattr cache (#1257157,#1232371)- Export ldflags into the build so hardening works- Update to 2.4 release- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- is_selinux_enabled: Add /etc/selinux/config test (#1219045) - matchpathcon/selabel_file: Fix man pages (#1219718)- revert support for policy compressed with xv (#1185266)- selinux.py - use os.walk() instead of os.path.walk() (#1195004) - is_selinux_enabled(): drop no-policy-loaded test (#1195074) - fix -Wformat errors and remove deprecated mudflap option- bump release and rebuild so that koji-shadow can rebuild it against new gcc on secondary arch- Rebuilt for https://fedoraproject.org/wiki/Changes/Ruby_2.2- Compiled file context files and the original should have the same permissions from dwalsh@redhat.com - Add selinux_openssh_contexts_path() to get a path to /contexts/openssh_contexts- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild- Rebuilt for https://fedoraproject.org/wiki/Changes/Python_3.4- Update to upstream * Get rid of security_context_t and fix const declarations. * Refactor rpm_execcon() into a new setexecfilecon() from Guillem Jover.- Add selinux_openssh_contexts_path()- Rebuilt for https://fedoraproject.org/wiki/Changes/Ruby_2.1- Fix spelling mistake in man page- More go bindings - restorecon, getpidcon, setexeccon- Add additional go bindings for get*con calls - Add go bindings test command - Modify man pages of set*con calls to mention that they are thread specific- Move selinux.go to /usr/lib64/golang/src/pkg/github.com/selinux/selinux.go - Add Int_to_mcs function to generate MCS labels from integers.- Add ghost flag for /var/run/setrans- Update to upstream * Fix userspace AVC handling of per-domain permissive mode. - Verify context is not null when passed into *setfilecon_raw- revert unexplained change to rhat.patch which broke SELinux disablement- Verify context is not null when passed into lsetfilecon_raw- Mv selinux.go to /usr/share/gocode/src/selinux- Add golang support to selinux.- Remove togglesebool man page- Update to upstream * Remove -lpthread from pkg-config file; it is not required. - Add support for policy compressed with xv- Update to upstream * Fix avc_has_perm() returns -1 even when SELinux is in permissive mode. * Support overriding Makefile RANLIB from Sven Vermeulen. * Update pkgconfig definition from Sven Vermeulen. * Mount sysfs before trying to mount selinuxfs from Sven Vermeulen. * Fix man pages from Laurent Bigonville. * Support overriding PATH and LIBBASE in Makefiles from Laurent Bigonville. * Fix LDFLAGS usage from Laurent Bigonville * Avoid shadowing stat in load_mmap from Joe MacDonald. * Support building on older PCRE libraries from Joe MacDonald. * Fix handling of temporary file in sefcontext_compile from Dan Walsh. * Fix procattr cache from Dan Walsh. * Define python constants for getenforce result from Dan Walsh. * Fix label substitution handling of / from Dan Walsh. * Add selinux_current_policy_path from Dan Walsh. * Change get_context_list to only return good matches from Dan Walsh. * Support udev-197 and higher from Sven Vermeulen and Dan Walsh. * Add support for local substitutions from Dan Walsh. * Change setfilecon to not return ENOSUP if context is already correct from Dan Walsh. * Python wrapper leak fixes from Dan Walsh. * Export SELINUX_TRANS_DIR definition in selinux.h from Dan Walsh. * Add selinux_systemd_contexts_path from Dan Walsh. * Add selinux_set_policy_root from Dan Walsh. * Add man page for sefcontext_compile from Dan Walsh.- Add systemd_contexts support - Do substitutions on a local sub followed by a dist sub- Eliminate requirement on pthread library, by applying patch for Jakub Jelinek Resolves #1013801- Fix handling of libselinux getconlist with only one entry- Add Python constants for SELinux enforcing modes- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild- Add sefcontext_compile.8 man page - Add Russell Coker patch to fix man pages - Add patches from Laurent Bigonville to fix Makefiles for debian. - modify spec file to use %{_prefix}/lib- Fix patch that Handles substitutions for /- Handle substitutions for / - semanage fcontext -a -e / /opt/rh/devtoolset-2/root- Add Eric Paris patch to fix procattr calls after a fork.- Move secolor.conf.5 into mcstrans package and out of libselinux- Fix python bindings for selinux_check_access- Fix reseting the policy root in matchpathcon- Cleanup setfcontext_compile atomic patch - Add matchpathcon -P /etc/selinux/mls support by allowing users to set alternate root - Make sure we set exit codes from selinux_label calls to ENOENT or SUCCESS- Make setfcontext_compile atomic- Fix memory leak in set*con calls.- Move matchpathcon to -utils package - Remove togglesebool- Fix selinux man page to reflect what current selinux policy is.- Add new constant SETRANS_DIR which points to the directory where mstransd can find the socket and libvirt can write its translations files.- Bring back selinux_current_policy_path- Revert some changes which are causing the wrong policy version file to be created- Update to upstream * audit2why: make sure path is nul terminated * utils: new file context regex compiler * label_file: use precompiled filecontext when possible * do not leak mmapfd * sefcontontext_compile: Add error handling to help debug problems in libsemanage. * man: make selinux.8 mention service man pages * audit2why: Fix segfault if finish() called twice * audit2why: do not leak on multiple init() calls * mode_to_security_class: interface to translate a mode_t in to a security class * audit2why: Cleanup audit2why analysys function * man: Fix program synopsis and function prototypes in man pages * man: Fix man pages formatting * man: Fix typo in man page * man: Add references and man page links to _raw function variants * Use ENOTSUP instead of EOPNOTSUPP for getfilecon functions * man: context_new(3): fix the return value description * selinux_status_open: handle error from sysconf * selinux_status_open: do not leak statusfd on exec * Fix errors found by coverity * Change boooleans.subs to booleans.subs_dist. * optimize set*con functions * pkg-config do not specifc ruby version * unmap file contexts on selabel_close() * do not leak file contexts with mmap'd backend * sefcontext_compile: do not leak fd on error * matchmediacon: do not leak fd * src/label_android_property: do not leak fd on error- Update to latest patches from eparis/Upstream- Update to latest patches from eparis/Upstream- Try procatt speedup patch again- Roll back procattr speedups since it seems to be screwing up systemd labeling.- Fix tid handling for setfscreatecon, old patch still broken in libvirt- Fix tid handling for setfscreatecon, old patch still broken in libvirt- setfscreatecon after fork was broken by the Set*con patch. - We needed to reset the thread variables after a fork.- Fix setfscreatecon call to handle failure mode, which was breaking udev- Ondrej Oprala patch to optimize set*con functions - Set*con now caches the security context and only re-sets it if it changes.- Rebuild against latest libsepol- Update to latest patches from eparis/Upstream - Fix errors found by coverity - set the sepol_compute_av_reason_buffer flag to 0. This means calculate denials only? - audit2why: remove a useless policy vers variable - audit2why: use the new constraint information- Rebuild with latest libsepol- Return EPERM if login program can not reach default label for user - Attempt to return container info from audit2why- Apply patch from eparis to fix leaked file descriptor in new labeling code- Add new function mode_to_security_class which takes mode instead of a string. - Possibly will be used with coreutils.- Add back selinuxconlist and selinuxdefcon man pages- Fix segfault from calling audit2why.finish() multiple times- Fix up selinux man page to reference service man pages- Rebuild with fixed libsepol- Update to upstream * Add support for lxc_contexts_path * utils: add service to getdefaultcon * libsemanage: do not set soname needlessly * libsemanage: remove PYTHONLIBDIR and ruby equivalent * boolean name equivalency * getsebool: support boolean name substitution * Add man page for new selinux_boolean_sub function. * expose selinux_boolean_sub * matchpathcon: add -m option to force file type check * utils: avcstat: clear sa_mask set * seusers: Check for strchr failure * booleans: initialize pointer to silence coveriety * stop messages when SELinux disabled * label_file: use PCRE instead of glibc regex functions * label_file: remove all typedefs * label_file: move definitions to include file * label_file: do string to mode_t conversion in a helper function * label_file: move error reporting back into caller * label_file: move stem/spec handling to header * label_file: drop useless ncomp field from label_file data * label_file: move spec_hasMetaChars to header * label_file: fix potential read past buffer in spec_hasMetaChars * label_file: move regex sorting to the header * label_file: add accessors for the pcre extra data * label_file: only run regex files one time * label_file: new process_file function * label_file: break up find_stem_from_spec * label_file: struct reorg * label_file: only run array once when sorting * Ensure that we only close the selinux netlink socket once. * improve the file_contexts.5 manual page- rebuild for https://fedoraproject.org/wiki/Features/Python_3.3- make with_python3 be conditional on fedora- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- Move the tmpfiles.d content from /etc/tmpfiles.d to /usr/lib/tmpfiles.d- Revert Eric Paris Patch for selinux_binary_policy_path- Update to upstream * Fortify source now requires all code to be compiled with -O flag * asprintf return code must be checked * avc_netlink_recieve handle EINTR * audit2why: silence -Wmissing-prototypes warning * libsemanage: remove build warning when build swig c files * matchpathcon: bad handling of symlinks in / * seusers: remove unused lineno * seusers: getseuser: gracefully handle NULL service * New Android property labeling backend * label_android_property whitespace cleanups * additional makefile support for rubywrap- Fix booleans.subs name, change function name to selinux_boolean_sub, add man page, minor fixes to the function- Fix to compile with Fortify source * Add -O compiler flag * Check return code from asprintf - Fix handling of symbolic links in / by realpath_not_final- Add support for lxc contexts file- Add support fot boolean subs file- Update to upstream * Fix dead links to www.nsa.gov/selinux * Remove jump over variable declaration * Fix old style function definitions * Fix const-correctness * Remove unused flush_class_cache method * Add prototype decl for destructor * Add more printf format annotations * Add printf format attribute annotation to die() method * Fix const-ness of parameters & make usage() methods static * Enable many more gcc warnings for libselinux/src/ builds * utils: Enable many more gcc warnings for libselinux/utils builds * Change annotation on include/selinux/avc.h to avoid upsetting SWIG * Ensure there is a prototype for 'matchpathcon_lib_destructor' * Update Makefiles to handle /usrmove * utils: Stop separating out matchpathcon as something special * pkg-config to figure out where ruby include files are located * build with either ruby 1.9 or ruby 1.8 * assert if avc_init() not called * take security_deny_unknown into account * security_compute_create_name(3) * Do not link against python library, this is considered * bad practice in debian * Hide unnecessarily-exported library destructors- Add selinux_current_policy_path to return /sys/fs/selinux/policy if it exists - Otherwise search for policy on disk- Change selinux_binary_policy_path to return /sys/fs/selinux/policy - Add selinux_installed_policy_path to return what selinux_binary_policy_path used to return - avc_has_perm will now return yes if the machine is in permissive mode - Make work with ruby-1.9- avc_netlink_recieve should continue to poll if it receinves an EINTR rather- use /sbin/ldconfig, glibc does not provide /usr/sbin/ldconfig in the RPM database for now- Rebuild with cleaned up upstream to work in /usr- install everything in /usr https://fedoraproject.org/wiki/Features/UsrMove- Add Dan Berrange code cleanup patches.- Fix selabal_open man page to refer to proper selinux_opt structure-Update to upstream * Fix setenforce man page to refer to selinux man page * Cleanup Man pages * merge freecon with getcon man page- Add patch from Richard Haines When selabel_lookup found an invalid context with validation enabled, it always stated it was 'file_contexts' whether media, x, db or file. The fix is to store the spec file name in the selabel_lookup_rec on selabel_open and use this as output for logs. Also a minor fix if key is NULL to stop seg faults. - Fix setenforce manage page.- Rebuild with new libsepol- Fix setenforce man page, from Miroslav Grepl- Upgrade to upstream * selinuxswig_python.i: don't make syscall if it won't change anything * Remove assert in security_get_boolean_names(3) * Mapped compute functions now obey deny_unknown flag * get_default_type now sets EINVAL if no entry. * return EINVAL if invalid role selected * Updated selabel_file(5) man page * Updated selabel_db(5) man page * Updated selabel_media(5) man page * Updated selabel_x(5) man page * Add man/man5 man pages * Add man/man5 man pages * Add man/man5 man pages * use -W and -Werror in utils- Change python binding for restorecon to check if the context matches. - If it does do not reset- Upgrade to upstream * Makefiles: syntax, convert all ${VAR} to $(VAR) * load_policy: handle selinux=0 and /sys/fs/selinux not exist * regenerate .pc on VERSION change * label: cosmetic cleanups * simple interface for access checks * Don't reinitialize avc_init if it has been called previously * seusers: fix to handle large sets of groups * audit2why: close fd on enomem * rename and export symlink_realpath * label_file: style changes to make Eric happy.- Apply libselinux patch to handle large groups in seusers.- Add selinux_check_access function. Needed for passwd, chfn, chsh- Handle situation where selinux=0 passed to the kernel and both /selinux and-Update to upstream * utils: matchpathcon: remove duplicate declaration * src: matchpathcon: use myprintf not fprintf * src: matchpathcon: make sure resolved path starts * put libselinux.so.1 in /lib not /usr/lib * tree: default make target to all not- Switch to use ":" as prefix separator rather then ";"- Avoid unnecessary shell invocation in %post.- Fix handling of subset labeling that is causing segfault in restorecon- Change matchpathcon_init_prefix and selabel_open to allow multiple initial prefixes. Now you can specify a ";" separated list of prefixes and the labeling system will only load regular expressions that match these prefixes.- Change matchpatcon to use proper myprintf - Fix symlink_realpath to always include "/" - Update to upstream * selinux_file_context_verify function returns wrong value. * move realpath helper to matchpathcon library * python wrapper makefile changes- Move to new Makefile that can build with or without PYTHON being set-Update to upstream 2.1.4 2011-0817 * mapping fix for invalid class/perms after selinux_set_mapping * audit2why: work around python bug not defining * resolv symlinks and dot directories before matching 2.1.2 2011-0803 * audit2allow: do not print statistics * make python bindings for restorecon work on relative path * fix python audit2why binding error * support new python3 functions * do not check fcontext duplicates on use * Patch for python3 for libselinux 2.1.1 2011-08-02 * move .gitignore into utils * new setexecon utility * selabel_open fix processing of substitution files * mountpoint changing patch. * simplify SRCS in Makefile 2.1.1 2011-08-01 * Remove generated files, introduce more .gitignore-Update to upstream * Release, minor version bump * Give correct names to mount points in load_policy by Dan Walsh. * Make sure selinux state is reported correctly if selinux is disabled or fails to load by Dan Walsh. * Fix crash if selinux_key_create was never called by Dan Walsh. * Add new file_context.subs_dist for distro specific filecon substitutions by Dan Walsh. * Update man pages for selinux_color_* functions by Richard Haines.- Only call dups check within selabel/matchpathcon if you are validating the context - This seems to speed the loading of labels by 4 times.- Move /selinux to /sys/fs/selinux - Add selinuxexeccon - Add realpath to matchpathcon to handle matchpathcon * type queries.- Update for latest libsepol- Update for latest libsepol- Fix restorecon python binding to accept relative paths-Update to upstream * Give correct names to mount points in load_policy by Dan Walsh. * Make sure selinux state is reported correctly if selinux is disabled or fails to load by Dan Walsh. * Fix crash if selinux_key_create was never called by Dan Walsh. * Add new file_context.subs_dist for distro specific filecon substitutions by Dan Walsh. * Update man pages for selinux_color_* functions by Richard Haines.- Clean up patch to make handling of constructor cleanup more portable * db_language object class support for selabel_lookup from KaiGai Kohei. * Library destructors for thread local storage keys from Eamon Walsh.- Add distribution subs pathAdd patch from dbhole@redhat.com to initialize thread keys to -1 Errors were being seen in libpthread/libdl that were related to corrupt thread specific keys. Global destructors that are called on dl unload. During destruction delete a thread specific key without checking if it has been initialized. Since the constructor is not called each time (i.e. key is not initialized with pthread_key_create each time), and the default is 0, there is a possibility that key 0 for an active thread gets deleted. This is exactly what is happening in case of OpenJDK. Workaround patch that initializes the key to -1. Thus if the constructor is not called, the destructor tries to delete key -1 which is deemed invalid by pthread_key_delete, and is ignored.- Call fini_selinuxmnt if selinux is disabled, to cause is_selinux_disabled() to report correct data- Change mount source options to use "proc" and "selinuxfs"- Update to upstream * Turn off default user handling when computing user contexts by Dan Walsh- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- Fixup selinux man page- Fix Makefile to use pkg-config --cflags python3 to discover include paths- Update to upstream - Turn off fallback in to SELINUX_DEFAULTUSER in get_context_list- Update to upstream * Thread local storage fixes from Eamon Walsh.- Add /etc/tmpfiles.d support for /var/run/setrans- Ghost /var/run/setrans- Rebuilt for gcc bug 634757- rebuild via updated swig (#624674)- Update for python 3.2a1- Turn off fallback in to SELINUX_DEFAULTUSER in get_context_list- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild- Turn off messages in audit2why- Update to upstream * Add const qualifiers to public API where appropriate by KaiGai Kohei. 2.0.95 2010-06-10 * Remove duplicate slashes in paths in selabel_lookup from Chad Sellers * Adds a chcon method to the libselinux python bindings from Steve Lawrence - add python3 subpackage from David Malcolm* Set errno=EINVAL for invalid contexts from Dan Walsh.- Update to upstream * Show strerror for security_getenforce() by Colin Waters. * Merged selabel database support by KaiGai Kohei. * Modify netlink socket blocking code by KaiGai Kohei.- Update to upstream * Fix from Eric Paris to fix leak on non-selinux systems. * regenerate swig wrappers * pkgconfig fix to respect LIBDIR from Dan Walsh.- Update to upstream * Change the AVC to only audit the permissions specified by the policy, excluding any permissions specified via dontaudit or not specified via auditallow. * Fix compilation of label_file.c with latest glibc headers.- Fix potential doublefree on init- Fix libselinux.pc- Fix man page for selinuxdefcon- Free memory on disabled selinux boxes- Update to upstream * add/reformat man pages by Guido Trentalancia . * Change exception.sh to be called with bash by Manoj Srivastava - Fix selinuxdefcon man page- Update to upstream * Add pkgconfig file from Eamon Walsh.- Update to upstream * Rename and export selinux_reset_config()- Update to upstream * Add exception handling in libselinux from Dan Walsh. This uses a shell script called exception.sh to generate a swig interface file. * make swigify * Make matchpathcon print <> if path not found in fcontext file.- Eliminate -pthread switch in Makefile- Update to upstream * Removal of reference counting on userspace AVC SID's.- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- Update to upstream * Reverted Tomas Mraz's fix for freeing thread local storage to avoid pthread dependency. * Removed fini_context_translations() altogether. * Merged lazy init patch from Stephen Smalley based on original patch by Steve Grubb.- Update to upstream * Add per-service seuser support from Dan Walsh. * Let load_policy gracefully handle selinuxfs being mounted from Stephen Smalley. * Check /proc/filesystems before /proc/mounts for selinuxfs from Eric Paris.- Add provices ruby(selinux)- Update to upstream * Fix improper use of thread local storage from Tomas Mraz . * Label substitution support from Dan Walsh. * Support for labeling virtual machine images from Dan Walsh.- Update to upstream * Trim / from the end of input paths to matchpathcon from Dan Walsh. * Fix leak in process_line in label_file.c from Hiroshi Shinji. * Move matchpathcon to /sbin, add matchpathcon to clean target from Dan Walsh. * getdefaultcon to print just the correct match and add verbose option from Dan Walsh.- Update to upstream * deny_unknown wrapper function from KaiGai Kohei. * security_compute_av_flags API from KaiGai Kohei. * Netlink socket management and callbacks from KaiGai Kohei.- Fix Memory Leak- Fix crash in python- Add back in additional interfaces- Add back in av_decision to python swig- Update to upstream * Netlink socket handoff patch from Adam Jackson. * AVC caching of compute_create results by Eric Paris.- Add patch from ajax to accellerate X SELinux - Update eparis patch- Add eparis patch to accellerate Xwindows performance- Fix URL- Add substitute pattern - matchpathcon output <> on ENOENT- Update to upstream * Fix incorrect conversion in discover_class code.- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild- Add - selinux_virtual_domain_context_path - selinux_virtual_image_context_path- Throw exeptions in python swig bindings on failures- Fix restorecon python code- Update to upstream- Strip trailing / for matchpathcon- Fix segfault if seusers file does not work- Add new function getseuser which will take username and service and return - seuser and level. ipa will populate file in future. - Change selinuxdefcon to return just the context by default- Rebuild for Python 2.6- Update to Upstream * Allow shell-style wildcards in x_contexts file.- Eamon Walsh Patch - libselinux: allow shell-style wildcarding in X names - Add Restorecon/Install python functions from Luke Macken- Update to Upstream * Correct message types in AVC log messages. * Make matchpathcon -V pass mode from Dan Walsh. * Add man page for selinux_file_context_cmp from Dan Walsh.- Update to Upstream * New man pages from Dan Walsh. * Update flask headers from refpolicy trunk from Dan Walsh.- Fix matchpathcon -V call- Add flask definitions for open, X and nlmsg_tty_audit- Add missing get/setkeycreatecon man pages- Split out utilities- Add missing man page links for [lf]getfilecon- Update to Upstream * Add group support to seusers using %groupname syntax from Dan Walsh. * Mark setrans socket close-on-exec from Stephen Smalley. * Only apply nodups checking to base file contexts from Stephen Smalley.- Update to Upstream * Merge ruby bindings from Dan Walsh. - Add support for Linux groups to getseuserbyname- Allow group handling in getseuser call- Update to Upstream * Handle duplicate file context regexes as a fatal error from Stephen Smalley. This prevents adding them via semanage. * Fix audit2why shadowed variables from Stephen Smalley. * Note that freecon NULL is legal in man page from Karel Zak.- Add ruby support for puppet- Rebuild for new libsepol- Add Karel Zak patch for freecon man page- Update to Upstream * New and revised AVC, label, and mapping man pages from Eamon Walsh. * Add swig python bindings for avc interfaces from Dan Walsh.- Update to Upstream * Fix selinux_file_context_verify() and selinux_lsetfilecon_default() to call matchpathcon_init_prefix if not already initialized. * Add -q qualifier for -V option of matchpathcon and change it to indicate whether verification succeeded or failed via exit status.- libselinux no longer neets to telnet -u in post install- Add sedefaultcon and setconlist commands to dump login context- Update to Upstream * Fixed selinux_set_callback man page. * Try loading the max of the kernel-supported version and the libsepol-supported version when no manipulation of the binary policy is needed from Stephen Smalley. * Fix memory leaks in matchpathcon from Eamon Walsh.- Add Xavior Toth patch for security_id_t in swig- Add avc.h to swig code- Grab the latest policy for the kernel- Update to Upstream * Man page typo fix from Jim Meyering.- Update to Upstream * Changed selinux_init_load_policy() to not warn about a failed mount of selinuxfs if selinux was disabled in the kernel.- Fix matchpathcon memory leak- Update to Upstream * Merged new X label "poly_selection" namespace from Eamon Walsh.- Update to Upstream * Merged reset_selinux_config() for load policy from Dan Walsh.- Reload library on loading of policy to handle chroot- Update to Upstream * Merged avc_has_perm() errno fix from Eamon Walsh.- Update to Upstream * Regenerated Flask headers from refpolicy flask definitions.- Update to Upstream * Merged compute_member AVC function and manpages from Eamon Walsh. * Provide more error reporting on load policy failures from Stephen Smalley.- Update to Upstream * Merged new X label "poly_prop" namespace from Eamon Walsh.- Update to Upstream * Disable setlocaldefs if no local boolean or users files are present from Stephen Smalley. * Skip userspace preservebools processing for Linux >= 2.6.22 from Stephen Smalley.- Update to Upstream * Merged fix for audit2why from Dan Walsh.- Fix audit2why to grab latest policy versus the one selected by the kernel* Merged audit2why python binding from Dan Walsh.* Merged updated swig bindings from Dan Walsh, including typemap for pid_t.- Update to use libsepol-static library- Move libselinux.a to -static package - Spec cleanups- Put back libselinux.a- Fix memory references in audit2why and change to use tuples - Update to Upstream * Fix for the avc: granted null message bug from Stephen Smalley.- Fix __init__.py specification- Add audit2why python bindings- Add pid_t typemap for swig bindings- smp_mflag- Fix spec file caused by spec review- Upgrade to upstream * matchpathcon(8) man page update from Dan Walsh.- Upgrade to upstream * dlopen libsepol.so.1 rather than libsepol.so from Stephen Smalley. * Based on a suggestion from Ulrich Drepper, defer regex compilation until we have a stem match, by Stephen Smalley. * A further optimization would be to defer regex compilation until we have a complete match of the constant prefix of the regex - TBD.- Upgrade to upstream * Regenerated Flask headers from policy.- Upgrade to upstream * AVC enforcing mode override patch from Eamon Walsh. * Aligned attributes in AVC netlink code from Eamon Walsh. - Move libselinux.so back into devel package, procps has been fixed- Upgrade to upstream * Merged refactored AVC netlink code from Eamon Walsh. * Merged new X label namespaces from Eamon Walsh. * Bux fix and minor refactoring in string representation code.- Upgrade to upstream * Merged selinux_get_callback, avc_open, empty string mapping from Eamon Walsh.- Upgrade to upstream * Fix segfault resulting from missing file_contexts file.- Fix segfault on missing file_context file- Upgrade to upstream * Make netlink socket close-on-exec to avoid descriptor leakage from Dan Walsh. * Pass CFLAGS when using gcc for linking from Dennis Gilmore.- Add sparc patch to from Dennis Gilmore to build on Sparc platform- Remove leaked file descriptor- Upgrade to latest from NSA * Fix selabel option flag setting for 64-bit from Stephen Smalley.- Change matchpatcon to use syslog instead of syserror- Upgrade to latest from NSA * Re-map a getxattr return value of 0 to a getfilecon return value of -1 with errno EOPNOTSUPP from Stephen Smalley. * Fall back to the compat code for security_class_to_string and security_av_perm_to_string from Stephen Smalley. * Fix swig binding for rpm_execcon from James Athey.- Apply James Athway patch to fix rpm_execcon python binding- Move libselinux.so back into main package, breaks procps- Upgrade to upstream * Fix file_contexts.homedirs path from Todd Miller.- Remove requirement on setransd, Moved to selinux-policy-mls- Move libselinux.so into devel package - Upgrade to upstream * Fix segfault resulting from uninitialized print-callback pointer. * Added x_contexts path function patch from Eamon Walsh. * Fix build for EMBEDDED=y from Yuichi Nakamura. * Fix markup problems in selinux man pages from Dan Walsh.- Upgrade to upstream * Updated version for stable branch. * Added x_contexts path function patch from Eamon Walsh. * Fix build for EMBEDDED=y from Yuichi Nakamura. * Fix markup problems in selinux man pages from Dan Walsh. * Updated av_permissions.h and flask.h to include new nscd permissions from Dan Walsh. * Added swigify to top-level Makefile from Dan Walsh. * Fix for string_to_security_class segfault on x86_64 from Stephen Smalley.- Apply Steven Smalley patch to fix segfault in string_to_security_class- Fix matchpathcon to set default myprintf- Upgrade to upstream * Fix for getfilecon() for zero-length contexts from Stephen Smalley.- Update to match flask/access_vectors in policy- Fix man page markup lanquage for translations- Fix semanage segfault on x86 platform- Upgrade to upstream * Labeling and callback interface patches from Eamon Walsh.- Refactored swig- Upgrade to upstream * Class and permission mapping support patches from Eamon Walsh. * Object class discovery support patches from Chris PeBenito. * Refactoring and errno support in string representation code.- Upgrade to upstream - Merged patch to reduce size of libselinux and remove need for libsepol for embedded systems from Yuichi Nakamura. This patch also turns the link-time dependency on libsepol into a runtime (dlopen) dependency even in the non-embedded case. 2.0.17 2007-05-31 * Updated Lindent script and reindented two header files.- Upgrade to upstream * Merged additional swig python bindings from Dan Walsh. * Merged helpful message when selinuxfs mount fails patch from Dax Kelson.- Upgrade to upstream * Merged build fix for avc_internal.c from Joshua Brindle.- Add get_context_list funcitions to swig file- Upgrade to upstream * Merged rpm_execcon python binding fix, matchpathcon man page fix, and getsebool -a handling for EACCES from Dan Walsh.- Add missing interface- Upgrade to upstream * Merged support for getting initial contexts from James Carter.- Upgrade to upstream * Merged userspace AVC patch to follow kernel's behavior for permissive mode in caching previous denials from Eamon Walsh. * Merged sidput(NULL) patch from Eamon Walsh.- Make rpm_exec swig work- Upgrade to upstream * Merged class/av string conversion and avc_compute_create patch from Eamon Walsh.- Upgrade to upstream * Merged fix for avc.h #include's from Eamon Walsh.- Add stdint.h to avc.h- Merged patch to drop support for CACHETRANS=0 config option from Steve Grubb. - Merged patch to drop support for old /etc/sysconfig/selinux and - /etc/security policy file layout from Steve Grubb.- Do not fail on permission denied in getsebool- Upgrade to upstream * Merged init_selinuxmnt() and is_selinux_enabled() improvements from Steve Grubb.- Upgrade to upstream * Removed sending of setrans init message. * Merged matchpathcon memory leak fix from Steve Grubb.- Upgrade to upstream * Merged more swig initializers from Dan Walsh.- Upgrade to upstream * Merged patch from Todd Miller to convert int types over to C99 style.- Merged patch from Todd Miller to remove sscanf in matchpathcon.c because of the use of the non-standard format (original patch changed for style). - Merged patch from Todd Miller to fix memory leak in matchpathcon.c.- Add context function to python to split context into 4 parts- Upgrade to upstream * Updated version for stable branch.- Upgrade to upstream * Merged man page updates to make "apropos selinux" work from Dan Walsh.- Upgrade to upstream * Merged getdefaultcon utility from Dan Walsh.- Add Ulrich NSCD__GETSERV and NSCD__SHMEMGRP for Uli- Add reference to selinux man page in all man pages to make apropos work Resolves: # 217881- Upstream wanted some minor changes, upgrading to keep api the same - Upgrade to upstream * Merged selinux_check_securetty_context() and support from Dan Walsh. Resolves: #200110- Cleanup patch- Add securetty handling Resolves: #200110- Upgrade to upstream * Merged patch for matchpathcon utility to use file mode information when available from Dan Walsh.- rebuild against python 2.5- Fix matchpathcon to lstat files- Update man page- Upgrade to upstream- Add James Antill patch for login verification of MLS Levels - MLS ragnes need to be checked, Eg. login/cron. This patch adds infrastructure.- Upgrade to latest from NSA * Merged updated flask definitions from Darrel Goeddel. This adds the context security class, and also adds the string definitions for setsockcreate and polmatch.- Upgrade to latest from NSA * Updated version for release.- rebuilt for unwind info generation, broken in gcc-4.1.1-21- Upgrade to latest from NSA * Merged av_permissions.h update from Steve Grubb, adding setsockcreate and polmatch definitions.- really make -devel depend on libsepol-devel- Add sgrubb patch for polmatch- Upgrade to latest from NSA * Merged patch from Steve Smalley to fix SIGPIPE in setrans_client- have -devel require libsepol-devel- Upgrade to latest from NSA * Merged patch to not log avc stats upon a reset from Steve Grubb. * Applied patch to revert compat_net setting upon policy load. * Merged file context homedir and local path functions from Chris PeBenito.- rebuilt with latest binutils to pick up 64K -z commonpagesize on ppc* (#203001)- Upgrade to latest from NSA * Merged file context homedir and local path functions from Chris PeBenito. * Rework functions that access /proc/pid/attr to access the per-thread nodes, and unify the code to simplify maintenance.- Upgrade to latest from NSA * Merged return value fix for *getfilecon() from Dan Walsh. * Merged sockcreate interfaces from Eric Paris.- Fix translation return codes to return size of buffer- Upgrade to latest from NSA * Merged no-tls-direct-seg-refs patch from Jeremy Katz. * Merged netfilter_contexts support patch from Chris PeBenito.- Upgrade to latest from NSA * Merged context_*_set errno patch from Jim Meyering.- only build non-fpic objects with -mno-tls-direct-seg-refs- build with -mno-tls-direct-seg-refs on x86 to avoid triggering segfaults with xen (#200783)- Rebuild for new gcc- Fix libselinux to not telinit during installs- Upgrade to latest from NSA * Lindent. * Merged {get,set}procattrcon patch set from Eric Paris. * Merged re-base of keycreate patch originally by Michael LeMay from Eric Paris. * Regenerated Flask headers from refpolicy. * Merged patch from Dan Walsh with: - Added selinux_file_context_{cmp,verify}. - Added selinux_lsetfilecon_default. - Delay translation of contexts in matchpathcon.- Yet another change to matchpathcon- Turn off error printing in library. Need to compile with DEBUG to get it back- Fix error reporting of matchpathcon- Add function to compare file context on disk versus contexts in file_contexts file.- Upgrade to latest from NSA * Merged patch from Dan Walsh with: * Added selinux_getpolicytype() function. * Modified setrans code to skip processing if !mls_enabled. * Set errno in the !selinux_mnt case. * Allocate large buffers from the heap, not on stack. Affects is_context_customizable, selinux_init_load_policy, and selinux_getenforcemode.- Add selinux_getpolicytype()- Upgrade to latest from NSA * Merged !selinux_mnt checks from Ian Kent.- Check for selinux_mnt == NULL- Merged matchmediacon and trans_to_raw_context fixes from Serge Hallyn.- Remove getseuser- Bump requires to grab latest libsepol- Add BuildRequires for swig- Upgrade to latest from NSA * Merged simple setrans client cache from Dan Walsh. Merged avcstat patch from Russell Coker. * Modified selinux_mkload_policy() to also set /selinux/compat_net appropriately for the loaded policy.- More fixes for translation cache - Upgrade to latest from NSA * Added matchpathcon_fini() function to free memory allocated by matchpathcon_init().- Add simple cache to improve translation speed- Upgrade to latest from NSA * Merged setrans client cleanup patch from Steve Grubb.- Add Russell's AVC patch to handle large numbers- Upgrade to latest from NSA * Merged getfscreatecon man page fix from Dan Walsh. * Updated booleans(8) man page to drop references to the old booleans file and to note that setsebool can be used to set the boot-time defaults via -P.- Upgrade to latest from NSA * Merged fix warnings patch from Karl MacMillan. * Merged setrans client support from Dan Walsh. This removes use of libsetrans. * Merged patch to eliminate use of PAGE_SIZE constant from Dan Walsh. * Merged swig typemap fixes from Glauber de Oliveira Costa.- Change the way translations work, Use setransd/remove libsetrans- Add selinuxswig fixes - Stop using PAGE_SIZE and start using sysconf(_SC_PAGE_SIZE)- Upgrade to latest from NSA * Added distclean target to Makefile. * Regenerated swig files. * Changed matchpathcon_init to verify that the spec file is a regular file. * Merged python binding t_output_helper removal patch from Dan Walsh.- Fix python bindings for matchpathcon - Fix booleans man page- Merged Makefile PYLIBVER definition patch from Dan Walsh.- Make some fixes so it will build on RHEL4 - Upgrade to latest from NSA * Updated version for release. * Altered rpm_execcon fallback logic for permissive mode to also handle case where /selinux/enforce is not available.- bump again for double-long bug on ppc(64)- rebuilt for new gcc4.1 snapshot and glibc changes- Upgrade to latest from NSA * Merged install-pywrap Makefile patch from Joshua Brindle.- Upgrade to latest from NSA * Merged pywrap Makefile patch from Dan Walsh.- Split out pywrap in Makefile- Upgrade to latest from NSA * Added getseuser test program.- Upgrade to latest from NSA * Added format attribute to myprintf in matchpathcon.c and removed obsoleted rootlen variable in init_selinux_config().- Build with new libsepol- Upgrade to latest from NSA * Merged several fixes and improvements from Ulrich Drepper (Red Hat), including: - corrected use of getline - further calls to __fsetlocking for local files - use of strdupa and asprintf - proper handling of dirent in booleans code - use of -z relro - several other optimizations * Merged getpidcon python wrapper from Dan Walsh (Red Hat).- Add build requires line for libsepol-devel- Fix swig call for getpidcon- Move libselinux.so to base package- Upgrade to latest from NSA * Merged call to finish_context_translations from Dan Walsh. This eliminates a memory leak from failing to release memory allocated by libsetrans.- update to latest libsetrans - Fix potential memory leak- rebuilt- Update to never version * Merged patch for swig interfaces from Dan Walsh.- Update to never version- Fix some of the python swig objects- Update to latest from NSA * Added MATCHPATHCON_VALIDATE flag for set_matchpathcon_flags() and modified matchpathcon implementation to make context validation/ canonicalization optional at matchpathcon_init time, deferring it to a successful matchpathcon by default unless the new flag is set by the caller. * Added matchpathcon_init_prefix() interface, and reworked matchpathcon implementation to support selective loading of file contexts entries based on prefix matching between the pathname regex stems and the specified path prefix (stem must be a prefix of the specified path prefix).- Update to latest from NSA * Change getsebool to return on/off instead of active/inactive- Update to latest from NSA * Added -f file_contexts option to matchpathcon util. Fixed warning message in matchpathcon_init(). * Merged Makefile python definitions patch from Dan Walsh.- Update to latest from NSA * Merged swigify patch from Dan Walsh.- Separate out libselinux-python bindings into separate rpm- Read libsetrans requirement- Add python bindings- Update to latest from NSA * Merged make failure in rpm_execcon non-fatal in permissive mode patch from Ivan Gyurdiev.- Remove requirement for libsetrans- Update to latest from NSA * Added MATCHPATHCON_NOTRANS flag for set_matchpathcon_flags() and modified matchpathcon_init() to skip context translation if it is set by the caller.- Update to latest from NSA * Added security_canonicalize_context() interface and set_matchpathcon_canoncon() interface for obtaining canonical contexts. Changed matchpathcon internals to obtain canonical contexts by default. Provided fallback for kernels that lack extended selinuxfs context interface. - Patch to not translate mls when calling setfiles- Update to latest from NSA * Merged seusers parser changes from Ivan Gyurdiev. * Merged setsebool to libsemanage patch from Ivan Gyurdiev. * Changed seusers parser to reject empty fields.- Update to latest from NSA * Merged seusers empty level handling patch from Jonathan Kim (TCS).- Rebuild for latest libsepol- Rebuild for latest libsepol- Change default to __default__- Change default to __default__- Add selinux_translations_path- Update to latest from NSA * Merged selinux_path() and selinux_homedir_context_path() functions from Joshua Brindle.- Need to check for /sbin/telinit- Update to latest from NSA * Merged fixes for make DESTDIR= builds from Joshua Brindle.- Update to latest from NSA * Merged get_default_context_with_rolelevel and man pages from Dan Walsh (Red Hat). * Updated call to sepol_policydb_to_image for sepol changes. * Changed getseuserbyname to ignore empty lines and to handle no matching entry in the same manner as no seusers file.- Tell init to reexec itself in post script- Update to latest from NSA * Changed selinux_mkload_policy to try downgrading the latest policy version available to the kernel-supported version. * Changed selinux_mkload_policy to fall back to the maximum policy version supported by libsepol if the kernel policy version falls outside of the supported range.- Update to latest from NSA * Changed getseuserbyname to fall back to the Linux username and NULL level if seusers config file doesn't exist unless REQUIRESEUSERS=1 is set in /etc/selinux/config. * Moved seusers.conf under $SELINUXTYPE and renamed to seusers.- Update to latest from NSA * Added selinux_init_load_policy() function as an even higher level interface for the initial policy load by /sbin/init. This obsoletes the load_policy() function in the sysvinit-selinux.patch. * Added selinux_mkload_policy() function as a higher level interface for loading policy than the security_load_policy() interface.- Update to latest from NSA * Merged fix for matchpathcon (regcomp error checking) from Johan Fischer. Also added use of regerror to obtain the error string for inclusion in the error message.- Update to latest from NSA * Changed getseuserbyname to not require (and ignore if present) the MLS level in seusers.conf if MLS is disabled, setting *level to NULL in this case.- Update to latest from NSA * Merged getseuserbyname patch from Dan Walsh.- Fix patch to satisfy upstream- Update to latest from NSA - Add getseuserbyname- Fix patch call- Fix strip_con call- Go back to original libsetrans code- Eliminate forth param from mls context when mls is not enabled.- Update from NSA * Merged modified form of patch to avoid dlopen/dlclose by the static libselinux from Dan Walsh. Users of the static libselinux will not have any context translation by default.- Update from NSA * Added public functions to export context translation to users of libselinux (selinux_trans_to_raw_context, selinux_raw_to_trans_context).- Update from NSA * Remove special definition for context_range_set; use common code.- Update from NSA * Hid translation-related symbols entirely and ensured that raw functions have hidden definitions for internal use. * Allowed setting NULL via context_set* functions. * Allowed whitespace in MLS component of context. * Changed rpm_execcon to use translated functions to workaround lack of MLS level on upgraded systems.- Allow set_comp on unset ranges- Merged context translation patch, originally by TCS, with modifications by Dan Walsh (Red Hat).- Apply translation patch- Update from NSA * Merged several fixes for error handling paths in the AVC sidtab, matchpathcon, booleans, context, and get_context_list code from Serge Hallyn (IBM). Bugs found by Coverity. * Removed setupns; migrated to pam. * Merged patches to rename checkPasswdAccess() from Joshua Brindle. Original symbol is temporarily retained for compatibility until all callers are updated.- Update makefiles- Update from NSA * Merged security_setupns() from Chad Sellers. - fix selinuxenabled man page- Update from NSA * Merged avcstat and selinux man page from Dan Walsh. * Changed security_load_booleans to process booleans.local even if booleans file doesn't exist.- Fix avcstat to clear totals- Add info to man page- Update from NSA * Merged set_selinuxmnt patch from Bill Nottingham (Red Hat). * Rewrote get_ordered_context_list and helpers, including changing logic to allow variable MLS fields.- Update from NSA- Add backin matchpathcon- Fix selinux_policy_root man page- Change assert(selinux_mnt) to if (!selinux_mnt) return -1;- Update from NSA * Fixed bug in matchpathcon_filespec_destroy.- Update from NSA * Fixed bug in rpm_execcon error handling path.- Update from NSA * Merged fix for set_matchpathcon* functions from Andreas Steinmetz. * Merged fix for getconlist utility from Andreas Steinmetz.- Update from NSA- Better handling of booleans- Update from NSA * Merged destructors patch from Tomas Mraz.- Update from NSA * Added set_matchpathcon_flags() function for setting flags controlling operation of matchpathcon. MATCHPATHCON_BASEONLY means only process the base file_contexts file, not file_contexts.homedirs or file_contexts.local, and is for use by setfiles -c. * Updated matchpathcon.3 man page.- Update from NSA- Update from NSA * Fixed bug in matchpathcon_filespec_add() - failure to clear fl_head.- Update from NSA * Changed matchpathcon_common to ignore any non-format bits in the mode.- Default matchpathcon to regular files if the user specifies a mode- Update from NSA * Merged several fixes from Ulrich Drepper.- Fix matchpathcon on eof.- Update from NSA * Merged matchpathcon patch for file_contexts.homedir from Dan Walsh. * Added selinux_users_path() for path to directory containing system.users and local.users.- Process file_context.homedir- Update from NSA * Changed relabel Makefile target to use restorecon.- Update from NSA * Regenerated av_permissions.h.- Update from NSA * Modified avc_dump_av to explicitly check for any permissions that cannot be mapped to string names and display them as a hex value. * Regenerated av_permissions.h.- Update from NSA * Generalized matchpathcon internals, exported more interfaces, and moved additional code from setfiles into libselinux so that setfiles can directly use matchpathcon.- Update from NSA * Prevent overflow of spec array in matchpathcon. * Fixed several uses of internal functions to avoid relocations. * Changed rpm_execcon to check is_selinux_enabled() and fallback to a regular execve if not enabled (or unable to determine due to a lack of /proc, e.g. chroot'd environment).- Update from NSA * Merged minor fix for avcstat from Dan Walsh.- rpmexeccon should not fail in permissive mode.- fix printf in avcstat- Update from NSA- Modify matchpathcon to also process file_contexts.local if it exists- Add is_customizable_types function call- Update to latest from upstream * Just changing version number to match upstream- Update to latest from upstream * Changed matchpathcon to return -1 with errno ENOENT for <> entries, and also for an empty file_contexts configuration.- Fix link devel libraries- Fix unitialized variable in avcstat.c- Upgrade to upstream * Removed some trivial utils that were not useful or redundant. * Changed BINDIR default to /usr/sbin to match change in Fedora. * Added security_compute_member. * Added man page for setcon.- Upgrade to upstream- Add avcstat program- Add lots of missing man pages- Fix output of getsebool.- Update from upstream, fix setsebool -P segfault- Add a patch from upstream. Fixes signed/unsigned issues, and incomplete structure copy.- More fixes from sgrubb, better syslog- Have setsebool and togglesebool log changes to syslog- Add patch to make setsebool update bool on disk - Make togglesebool have a rollback capability in case it blows up inflight- Upgrade to latest from NSA- Changed the location of the utilities to /usr/sbin since normal users can't use them anyways.- Updated various utilities, removed utilities that are for testing, added man pages.- Add -g flag to make - Upgrade to latest from NSA * Added rpm_execcon.- Upgrade to latest from NSA * Merged setenforce and removable context patch from Dan Walsh. * Merged build fix for alpha from Ulrich Drepper. * Removed copyright/license from selinux_netlink.h - definitions only.- Change setenforce to accept Enforcing and Permissive- Add alpha patch- Upgrade to latest from NSA- Add selinux_removable_context_path- Update from NSA * Add matchmediacon- Update from NSA * Merged in matchmediacon changes.- Update from NSA * Regenerated headers for new nscd permissions.- Add matchmediacon- Update from NSA * Added get_default_context_with_role.- Clean up spec file * Patch from Matthias Saou- Update from NSA * Added set_matchpathcon_printf.- Update from NSA * Reworked av_inherit.h to allow easier re-use by kernel.- Add strcasecmp in selinux_config - Update from NSA * Changed avc_has_perm_noaudit to not fail on netlink errors. * Changed avc netlink code to check pid based on patch by Steve Grubb. * Merged second optimization patch from Ulrich Drepper. * Changed matchpathcon to skip invalid file_contexts entries. * Made string tables private to libselinux. * Merged strcat->stpcpy patch from Ulrich Drepper. * Merged matchpathcon man page from Dan Walsh. * Merged patch to eliminate PLTs for local syms from Ulrich Drepper. * Autobind netlink socket. * Dropped compatibility code from security_compute_user. * Merged fix for context_range_set from Chad Hanson. * Merged allocation failure checking patch from Chad Hanson. * Merged avc netlink error message patch from Colin Walters.- Update from NSA * Merged second optimization patch from Ulrich Drepper. * Changed matchpathcon to skip invalid file_contexts entries. * Made string tables private to libselinux. * Merged strcat->stpcpy patch from Ulrich Drepper. * Merged matchpathcon man page from Dan Walsh. * Merged patch to eliminate PLTs for local syms from Ulrich Drepper. * Autobind netlink socket. * Dropped compatibility code from security_compute_user. * Merged fix for context_range_set from Chad Hanson. * Merged allocation failure checking patch from Chad Hanson. * Merged avc netlink error message patch from Colin Walters.- Update from NSA - Add optflags- Update from NSA- Add matchpathcon man page - Latest from NSA * Merged patch to eliminate PLTs for local syms from Ulrich Drepper. * Autobind netlink socket. * Dropped compatibility code from security_compute_user. * Merged fix for context_range_set from Chad Hanson. * Merged allocation failure checking patch from Chad Hanson. * Merged avc netlink error message patch from Colin Walters.- Latest from NSA * Autobind netlink socket. * Dropped compatibility code from security_compute_user. * Merged fix for context_range_set from Chad Hanson. * Merged allocation failure checking patch from Chad Hanson. * Merged avc netlink error message patch from Colin Walters.- Latest from NSA- New upstream version- Latest from Upstream- Fix man pages- Latest from Upstream- Latest from Upstream- Add man page for boolean functions and SELinux- Latest from NSA- Latest from NSA- uppercase getenforce returns, to make them match system-config-securitylevel- Remove old path patch- Update to latest from NSA - Add fix to only get old path if file_context file exists in old location- Update to latest from NSA- add nlclass patch - Update to latest from NSA- rebuilt- Fix selinux_config to break once it finds SELINUXTYPE.-Update with latest from NSA- Change to use new policy mechanism- add man patch- Update with latest from NSA- Update with latest from NSA- Add changes for relaxed policy - Update to match NSA- Add relaxed policy changes- Sync with NSA- Remove requires glibc>2.3.4- Fix selinuxenabled man page.- Upgrade to 1.11- Add memleaks patch- Upgrade to latest from NSA and add more man pages- Update to match NSA - Cleanup some man pages- Upgrade to latest from NSA- Add Russell's Man pages- Change getenforce to also check is_selinux_enabled- Add ownership to /usr/include/selinux- fix location of file_contexts file.- Fix matchpathcon to use BUFSIZ- rebuilt- add matchpathcon- rebuilt- Add rootok patch- Updated getpeernam patch- Add getpeernam patch- Add getpeercon patch- Put mntpoint patch, because found fix for SysVinit- Add remove mntpoint patch, because it breaks SysVinit- Add mntpoint patch for SysVinit- Add -r -u -t to getcon- Upgrade to latest from NSA- Fix x86_64 build- Latest tarball from NSA.- Update with latest changes from NSA- Change location of .so file- Break out into development library- Move location of libselinux.so to /lib- Add selinuxenabled patch- Update with final NSA 1.2 sources.- Update with latest from NSA.- Fix to build on x86_64- update for version 1.2- Initial version2.9-9.el8_102.9-9.el8_10libselinux.a/usr/lib/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m32 -march=x86-64 -mtune=generic -mfpmath=sse -mstackrealign -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protectioncpioxz2i686-redhat-linux-gnucurrent ar archiveutf-8c3a4be5e962f41175798d9cb3be33dac1f692fa763d69478247669697d3c8603?p7zXZ !#, ] b2u Q{LZX_ѝ0nA$K%y43# Q;FDؑëcݣΡ lMQ쭞f )n&ZF4˅%J3zi)Gs\'`ylO'am;Ӆv::P!F5o#)tt!*n@8 w?07L\Zx{:Mdf06S uaˑuOZZuGT<e O2aS1b^Ӡ7|[@X _cF6ީLlR? LЎa{coCYm:gV`t̃'⩦UnBҙDW9,tN%0z/UZW7aU y$<`UE2#iࣥ$@mlMB m0"ʊ8*KF<+]a36yAdSNF9LpSl;C6h ը߇e$C6宪h0nv"ߧxꇽA$PNByS:iXZ8 7M\Vͥ=T\;pKU.p4:-"*1xVV1SYkڞ@΃\5E30gbMH*hH>PÖC]]*#}^~E`ʛJ"@SUMQn0}tۋ>K'ϼ('<4VFIw0cn aAL*&>"åFOJH=kE>5cO潍$)6>u5\1aAnn*XI`Z~W΢ΖU+G7)T51Q-ݗs}D JTD9esXQR 4gbBn>ݪ--_!Q]2ÁnT $Fq,,!Gbg6[pO_Qީa+w:p]# ֍u cJ!GZI }xwwwwGr;hTPՎ2vK,2aD!OETOUY@bFؾB5ZBKzY? ˊK9=8NY3)ҥ w;i*]b=) 1nSV8X;:T"B,dPVKrn@KB'.n Cݾ~3[!rK}Z5v3A)ۅC(:@ ![JaX/īD yPG֬h&dnd dzjNetQ,0NFn/;'@=K9s?\Z x.liݳ~ނ+_’ܺ""Ȳ]]TSfXqMh;szsY0YF9$!8S*쐈Yx-VO#"K!8*:3}-宩 KY+WUy~0 6 ]bXǦ& (L!1Oehi ݪ hX`0]n60 L1j0uvl̂fcz-B*+V$g6ۍ}.Nrm~٭uٹޯ kZI@_Lg9ɽWT` Jrtzi0a1hƋ]h) ;¥hlVD|#|3c`ef7\l~F*+o?=B'$ p%HOf". R`oKG7F"KqX샨x~LhfAYNNͫ|8![kxDfLSMU&@16ʊUG`!r|LǑTdzm~+8d4|/k,o%99?79OyIA h=+F,?w(]@S,Z]i*$5{kO ` †]K(F{I 6xpPY_f왯aZ.А傫$np(K]ƝUֱ޵]`L#`;՗0v!,Yy NfF n3FJRld $dʧT8@ ϣiI!ʎP}X^JM[ ٺg67}nk IO@m u6ɸ-Ơ97w-m#, XsN=nI5ޯ^Uz޲g:8kF_AFOeVE`SHfnL)Ld]Dcsܟ5]dcss;׍̱`9LF#9+dqyK5NI,рj=̫mӄ0‚A43`s,:).RDkgVj8W@kHŸ\Otd.avL:Z-A0 wiZz+7X6K3s K!~%8O6zZgH $^LUPR!jtlړ%8n$Y0 }WBm2l(F`Hս.'+D!Ku4 )ƕJxFQ6ƌQu^!e(ʑZ$po?X vA$aˌ^Qm`zgln+Jq{xK;G}dpỳm)Y7s38>N̥jƸM׹;H_IRݷ v/&5TDNr9^J8jrpr-/(tM#DO|@}.3@wp]{_ml}nz3m"c)c;vqwHQoQUmY96r:OL }QDx26YFL'[ɊcOFN%(t8GVllL_u؋'`M h[ ~,P@`S Q&_a05r+}U$Ni,0S:W["dO b3Ea K찯?9̛9sP ߺcޛ~ӝ  `_T*;Hb*0^8E' ?B:wGrㅘNFl{N9;(OrGۣyo f ?C.2Yd=d#Năס%R*v8Xܗ#V)iLk*jRE_1gq303]>]|D|γ[Z9ᖉ76L}x6) D+Z:?z]8-̋7I:DՋ7CXKP;}\ZY$҂_<d5X /ŠY,5 8HѫV;L+eHD>$~ڄzpȞAL`WTuӜC: hUr{Fː1p{N:V'td*/׭l.83`R:ffyYuL?#at0W,t 4HmQUX,L@_u 3F9NH##jJξ`{ƈqi z|900kGMa ʯTK*Faa'e [~*4|T^j4+:DYnrA(Qcck&sDѓA?mSc8'C0{5^|eM遍T3ITfof3=?c%uU#sOR_M}3i!kQGRRf ]y7%'Ee yl bf XxmDpvy>%8b;nY:MƁ/3`Fx?'YHsP([ԩwgqs-1-6/F!V'(}(*k a/B̞JL6V?Sr/!G<Lp "(_n2lE ?Q'Y^x|T}j-F "P&4uL%\YY_|dN+VH2muG| k,i ء>MM 0i>󀸲_Z;y[] yp+J ܊^$8gF>&VqmXL{EL׍IO'-G8~ ~w1 dm?Dޛ,) KHlj]׹u\ڷ{.CĦ1d'b֋vWv^ } I%D׮lt 6ُ⑒W7q?ژ6݌7E"IJ++l"~0Bqx m`@+ķayYﵓU_lA)W W`dBp9W6&1?j>R{&i JliaZZLJsrB~-3uD^_!Ǚkq-f¤2'"woAߌ(P#y^xs'V]3,YyZ䛽[F^reqp*7wzCڳ@% VVnê _[EDQAvsPmDP}ihf;nC`G!ߏK9ҙ\oDٿ4 =!r'^wuZ(9*hęhb<˼(W&/Ŗ5Rg S3֝{ T@;8) vJNwo0 b睷5r+u\J/@]%7ڞi]|GOyh/ `$XkhQTlSeABa'0| l !*pvpQ9FS05m.ly[ \y85vۇrߠG)B݂:.Ήu} #8kvQV|]cK]+dp@Tk3>jSCoCpI QX8izmT|ab#pAFDOҽvq$PֹH(>JzksDbi9w- 0#)}|^^sN>sE7f߃1GP.zP'*eGie|% 6Qez؃bb ˥[vFV~]7VCk7><|9reCF<"7M, 9>XxDn?= E7aVponr:|̼6ʛ}CTkRK D*]XUUp䍚RQ> 1UqW8B }l>c#ü7? 5$_j!hXu~x? =b'~WrذOT[Ğ\-|&Spn{`|YDA B^#Dl*dS_ QDzS/݉= TQcM^a@܉Ĵ2j/Aa-#Aaa3-JX4E`s gU)F%XSo-{י֗ ?[8\ީ=WJH9-=zco&tvt<;i%8Y3ٵ04TaCtV669ӄ`oUURgVC_z];) 1 q+*B?|Q?BO+/|CN;f*ҠYDz*V95\l<{?ϣ#{AoP`$h~BO',fVc)OFXau! >!+ M?򪎜RVweXUiMo<'|@X?6i(r:Ki 1|{g]_2>MXwyтxh ؔgZ&N LIJ~$Ksfh/H?qX U.~-T}dFe0o*qgY8ˠ&F;y벌З&y B~W VI?e eP84"8~ &Sq8(|>k|E( ;'#/bkvD%A.AXPw1 vs#?E GeT._'fOCVʢ8Q)Mw~ԸV)nLsڮmkչb\28j5Z_>םGDan"8#]Gq:5hAИ߮dEpmhmZ0N"FbH״`yP5K-hvoV\Y-O4R6n5/:rVdNn_* ?&q9 (om?zӪmq[=q/9!Pse|'["S\z3Li_`uUqcpVᖒ=}sDO=TZ|S"؉G-MMsF KuZ JuXȊuY& ݿs.#KQ!❃<1Dۧ5}zAf<6Tb=M+6"X~Cu 僱pԀBZ ]0¸,0mz.K_G*iu@\O]0K8It˫n\WoeOt3KC(\\C]OGr>MJ2Kv ^֚>mykuɖD8S؊r9_I%b{|楏u6ZEmO(0oMK U<W"x9<JF! CĨWB$jCJ l+܏sԊ);1 i2>l}^xN&ҳ^~n[D)SH$9wYc>+q'D(4D չ'qR_=ƺ!9R j5GAtP%w9+e,9LO:_OV$ ʕYQe2vC-QZ&spnkh!cb^|5ZUI(.R;^MkE_y3#"|KpWHĔ4/K f/|.dF,6 VC :Y pjLGG|Bp481w.W6TD|%4hY̡n[ f5nEJ[Ra"%CT# O!f8<9]g^_ -[8V(R/^uj&Σ+6 J)1ډ5f`;JsE\_C#Ԅq/J$~#l.(_GCS󏪺Oy+$03^%V;/@Bcڀ#_T?$ƤUa8;6n񌠧C+U ׅ&Çu|=ȑ%)Wm5v2(y+L&by܌WXWVU6}DjB+qPx!Kzװatr5CܾqR'PXql7{w(6y6p,V B)LLVjXh {P[Lϩva "JGqm|hzjz |@_ )K D$8NEX,T%IRuM1`Hr їߗ`C*OBue/^QٿgHۈWxw;њ%[j)ZN]uV\";vIO,ߎQ(` j d1(x^ zľ]|"҃A,~rد&MO;Abn.FwD ˽G+80 $#kkѨ%+.F9tAU$\&s'@ln,GSt% D.垞CTeTtarx֒ jEib1ȳhc7+)"T)AbmˋTI{'gT5 *yyDn]`>o(s]J=ݥ2W7lS"68L؏vYI[.9V1eѲz$FaC٦@ȮAOu={KsĤ9thSCHW~[Bph\첌@Lw5z9=բ9rv'1(`m!2cW;mNMfw?5!ζt\Vڜjhw)ѠX Y>CW\4MU H/gGcLjS P>& 5R&̍`(7`7AqS\ͥ.9ܫ}fudՁX#9k =JN4V{ed *Y^DdMsoC'[}җ_pт5n]+ɈuKlvj bd҃s_^Xp jN"ʨՉc2rX)`׎>h.i׈X#^AQU1yXKigU(BQ)^h98zMJoט9axle).sfr#_:uG&rΐh&Qs RabA H xr*ȴz44wV!99,[׮Nzf͍vmhm(i5_~6`%+^BOG2| jNҲaY!Pfja5D44M"L)sXף,cpn%-sXWk]!]z$ FteBw%3"AH龙#W>>]#I^.K%_fnRB}Z6?gGu&}ĸз麮ʧҫto3P"Y3on80&L<%us&`?}G+ږ <ƃ.:~8և,&3BOwg*LBpɢ4+8@Akc߅e+9=34j$:>A` :i#]I '{gyNR> vZVzr-l*1PR$:H:%[O>qr-XXZm]~˟#b2>Z\K~f[K0&`ꮲ_JE2}^} j+ t994;ͫ1@XkrAÂo ҈C+sNa* .Ql"wkP"ikD-5~\ HhO jz]錃$d#Sq* `As5g\<b90/r׷dpR$qFQV%ش}]b(2oO9 pk^DJztٕǂS3bd)KÕ*-Qu6>?|* BOMR uKs9(ڪ/&-!;=("ko'`jh!P`}eu\aljM:N7ҽÒ07Qi) 8&T`(lg;D,i "~DW<)qfн~QZ!g-M[ծGqKL!tOʾĬɯ gETj587NC6GJVs(~I\>& \^4CD$^ lklw2ЖI,5<qAfh_O3=^q t7eƬmrym=\ψ*Tڇ1Scâ^4sRg<Bn] 0:r%3u--VHo"[24jJ챹s[z/:UzM;'g5NmyTQ5%ƺ(qT;gTuu3ȧ@BWKe8fWR)Mb#{`ڙQYvGQ$EPs8{dc1bP6"E26կ1hup=LzOjr'K P՝{n6&m'~YՒK@c߬/ah2 23:ÃLB &Ys1t4wyt`[Md[US էQKW9 jN_X )tD!+QNԾk܃.̝H>%:,M8ѵ L^RfeTFo Z5^<^YФ0FzI A&t蝐m\dw8Ϧ9=*g:veRNg#D) *oZ#D'`ҐVhfB^RGoHֻW~,u5?noԢ #:]+rp%u !TU0$VЭ u{U /Ϙ_#ӌ/A^Iv見ea$ip92c{6 ϟ ifw d ״lTlǼ er@nn6j2 1EhFXOǢNa[*%bu\aT ٝ9 qsJ6}f& yϼGىі Fpmp7K++Uo-:_3 EvRtHuyfVtHʽQNFUʷ]?FYz6Hw\ޜŻ")@PIk!DepUݑ+~p;Ւ %˪Ѡ:WC?=w(p[T-ɳ2Ʉݔaz%+DIXV[.YQx%S L)2f,Z|9Ryc"Q*w{32e}{ܩba{~Л ȓReG~~ S}PtɆ^/I0\DnrlN.Ir,^?wZ~>u-Fd/z)ѦQݺ3責)#;WG%PWyxKSk?zKgHRmx]6]U{e/x ;B0)פ,swj<](W}їɑn+vo),5 -Kj$ )TkM0G P+-NT'pr_H]0`o#西jlCKvE>q"" L A/.J<㉌TJ",D+; dQTNMQcy_F4j~fe4^qZh*6f^e20ӯ6-HEO=YL\.*ƍK=1IOY8Nd]2u;@]ׇшjwb&A;>P,1sSW? Y<_)Ȕ6[8 ѵ03zyD'Ifu` y_z@kߦҽ\Hަ>CH .5:䭠J^Z$`4N pN).KCջw(dOHaŇG 8&yd;t=f(XS$3TC)P"W}Pf>smF(޲4dZ0 ~`7Іls C !u%mPR& uK󼎰!#^/lE3_!X5ON)F~8 Os? dIP^i)T%qWy0ICksX_S)o#nɵFߗ:X:57ennu]ԕvi>c׼Ƹ5:AVF^;*QLw$l* x 70iPQ=Ǫ $^x.e :eX1<*:E`zAr>^G:ۭaVcv(a..$;=_@~-É{ ǖ-i[XC[oP*%pEOw|7$ꯔR%Lu#’1dlB6!I6b]>.#_dG.#\sZIas`IݏlفpfTG-r !J% >2Txܺ )lp-?pp˴CW Qċg{߼ #<\sJ=}O З-<]SG!li;,( ɗ0 ٳ D!P=NlZ=3Oz04ܸnɶ_#p H=?J5.ECaVx6,e;)VNBԎ6G~뾚OIs8/糧<"R^y/!p~iƨCpp8B_YԱdAWC5Nd ;Z]usRNxkK_ʅO^Fw",Q0'͎a׮sz,*YSԧk`szPӲYrCmjyXōI??-gY0v8Xf%uV:*X}ө| ;[/*fLK6{SѤ[mfݳ=HPa1ۋgf`:K\U 9sř6ι!^)8'4DX>G^KaWf Ӑx;8 YJ?#>d͌l Ǐ}1o-& O'GP΋*${$uL!rFhA.3* Be ɵU'kYva39|nA"o't ">pn!$MԠ9"VbI׀G$BM;w-h{`%Z`yU4YNSfIoˡ3>Mj胁Ħ%c(E'a^9U#a X\ONQ zin'?G<:HDv㛱̈0h,6LGګˤ!~{U46&?(Ď/:>G,Z0< ;ߩlA3%|Tr)Y٥A3//$F 9z 8޺P{*?wؚ YMMU_,p\r *=pU4NA56QW,gd: gz rBהĩ7#zf{5>wj`d,Sy~-юЎQ$Ρ&:!]oر0xX(@ԣ"s5EMBáH«%5: ?bŒG: G~p l5E; L'&Lсڒ_3JC}^8_žU"l7d/d)X`ZCpBsG')v LIwĦA{R-A g'{ـ{=v%Hn䞲b %몴IZ8-uZ[P;ۗ\gHQ=7VWݥRy6UXJVUX˭36D>.Y(͊Ҷ(kt-rD~7m\nEJ,VMX9'ټpmOAC!P א1tQ9ƩB=uRrMeQx?->GtOF 8 th͗Ȋ xSǧ 58GUr.8h,,WPn󏩁fFHm}lHjC2.VjBa'638YX+`*k3Vt'o@|5nm]\cEAf]q.0"wȎɺ-5Bj]#}J6J¹q3,4JP*\D,v Ufi!:}0|ݜٽWa~d!9NuD wXis w1 qzOۜ&K9Z s*le"DžsN?!g/*IW9i?T ;0|"q_ ˵(+̗#m .ZFuCv/K!Vn9ډUXOWCITKmߢUb+.A.#4 hy k\xWջDYtRc E۰ջ ;4)a#w u4%QL(xvz$TaA{6e?V?Cc5~:Pu0\͡[m7/ J oy%l5!}`x᥌ ڬoCK 5;}3()V n}6oO>uM[RDQSPՇZăoH{ҩt  )v].i"[ѸZ\F@.|qgˆA'5~FXSJxK_L(~;Le˜ʆ bɏdJ"1ոN7As$1ɼ*r)M4@0|Х:j1XR 1.Wダ *׌)O*'%,Y=a?BWʛSTpھ@>/-B *#AbP6 FN {\3RH)#!`u&΢"3x]ݟ挓 23Äk饚1E\.SOOGeb=Rxͅ $a^C4>n@mѐjsF. /˟Cи7Ξ,/h(z@S2S I0ڸm9KZI;RJsM{x[5hD <B|u%Z٨OID.+=r +4< ĩZhrq+3c[\3z[ȁ5}Iaؗ#/k`c mF{ V#6¯S4ОYI>Ԡ6m98#&dV+o^<_@iň}0YJבAnM)>3X[b+e #) Er$ QeXcKsCa^~T>plSEהpVs9N|윢w ,l 3"S/ak)Z 9(dXgXdiҦ@n{ 5mDļWEЉ?ߺY mT|EY9ClZx򽣴jv0rhsDWBn״_V@]Pk.@SSa}+wpo!멀|u{ tCQ\Z6Ҍa>렄(2aK,\}@QNs$lL})P-s.(Ag90SkXoq'5"U韩ûkTk4ӊ͉ Αt-7օCt0 @ao/W8ܧ#HIUaO wMֱ-|^ &VN`hZ$|_Ԧ-VDh-FRg:B THO=˕ Ӊ<=46J8c3C'{qI͡x36mڰQwDp4|gS4ur@@EJd%~S\*rً%c0" 9;X?΀~S)MfHp3ǰ#DI8a{D9*D:+c1iNKɒWH aBksDt譍 "9`p ]}\#R9ki3lEu)hrbȂ,rU(աL+u^z5\U=qLyf*A#x8E´Xj@1a]W۩I'AJ&Đ@J\LBvSjM8b*>'4P׽=q_,n4Y=V)Vn**PûӂJa7Xҟ;GCY/@"`|@Ó>Tnp"ٻ/}=m@Mchٙ(v-q Oh!6_wճ1q8B iqH^+]9V@񐽶Y^G/:dmYUbҚXg6¨5geMVk\iQ͑-Z3{КZЋYjaG4:W\(nȏ!c"v|Ϛ#J.\l|89S&E^PmSµJ,Dݭ3->݄}?9&oE(u~N jE E$nC@OGAp'‡7<%qK`1MlPn܆b(ɞqMiu .7 l); 1qz%R٪ӄ :UW~FkM:{bZ2]_oXu~J|mkNSH)p;ֲ`ePu¡qbͻͬP@O|5di u9_fe@| O:7lu!x#FS( B\APayE}AK;ڒ )&l>oN !8!ڸ#ŵk] +]VceS5әi`Pe0RethC*6 `r~*u6v'Т aM؁FnXppi>E̾7)\^&N=e'/oYA22r,&MgHhʪƒZݨ |uv9FvEBHW--&Orz|{]lNLYթȗqZ8>mzF~zV`\ [ەn9` !'V"q>@U6@T$h؅)395]HyU`E>Dw2%nou1^H%LqGM^\ʆE͋s1%W=q(WȽqU<tk?pF[Z|/о'5Nò&ŨG\{?JiR̅uNM0f;k>}Cم<*MLjwǔj*DAs -~KQ9.03!u` b[Omx2 I:V)BNek“_^;_4qe[`EOo{mrg(ve;#kzo (XfiD;hh*Ei 0[|ՙT %1]S F 5ږEJn9<^'޴Gu"EJ޺G+ qTA9׽ԩvQ iۛ3f Gk$".>jsz7slF ,AODxsjPmUwgcT:[mغg;\= 5d"_ؗ1UD}pNm.mԁ U ;ً:1(bW \eg뛋EBDxW+@ț.(ӣ /t&sNV5##w̧` EfN 3*/^Ms2tTG"Gx ըp, $elrY4eA>[c PKh^-F PI֑<1,v>Kè?-pn_x=V\)w ,G,V,Vr7)@fH=+czQty+$\Eh2dU1MʪV=Gs"c4 UqF xu#s:)]8Jik/̋ U,3۞;xV*Ut>Þѵvdi2Fd$ byn&@aX:$>q&Vko4`fRf+]JA@B@ 7EPq9vmϣA+vrGT628,s?̵N)ƃ)UiBkC4VG fpB9]~,L螋TF+{^Jzэ5lUjyS\6nL"_ȓ=oFUӥM ncϵYnϣ&M)1zru<3̧kb+3`-߷vKuAby10b|!p5K<51$px$Z㡔)~b|$6(VE/M8ź|3J ?l6UˣX9Ý=3u2 .%ҙ ҡ1R- ,bI2O' s>uX:CD~ݶ,ey}a$#,פ2.瀯 f2ku^k$giĘ{>z^Ga,Ι/zUxĨvZ!%@{&brJ͎Ff`JfߪA*j$]!.j 9ڬ7gD+Cvu&[][( ^"^A QQ6^XwYE DuE\/d{(¯C}Uߴ; af#ظղb:91j׭2+Z3f_c-lr*;ƂuЈF5Q "6UcFD?~ѻki`|Fa#9Hz^?EfԘZ1J 4=.pIɒXn]E~8Nъ^u8*V+lڸcZBIZ@kJQi,ŏA>quUXա/àc9B.h13 YG^ݍ\];SEJ$F, )f:}A4p±5-6uGs >E QKd~c7!2ڐjGM͸ulqckwi0L[$BlH?/́,^x?x7k|_Vhj8B 1!{]ywJ_- <{?^9l:&7I#튏욏$|>?i◊*NXw y-u Q](y4Nm(D'Ռ˜O Q}(h2 ĭMC@+}'Ԁ8gi  )=}A׬#Yvyh1DW0Y}mz ps(Eqq{e8 pƩ/AL,G3>#EHQ9[uSvv3S.{QkoڛVV y,[ Z-[%"k~ ! 36tQN ݎ)`A_[ǑƧJ 0a\G,~SrһX\ZςPT;sQg,1[ՏPk.Ed_pol='g\n13OFRCL$ ib b$7L1Yh-b'fil%Fk1-? '@N|9+zbz-r/5r9k|E %=?K7֧;~ vH<_Y'm,77 dT _ZC4t}/$ē$ ؇&!5zUw?XrW ~;jTz kM*oIqKl3%OC\?:ܸ X{Vl\F+s׼ތJ:߱zcJQHőAhPn#^Z s;{ьT"͂ N~Wm<\e :3TU0RNyY6AaM2$ֵ(plɱ=Y+z*%!J6@-ݡd-D1]j}SUh{}2!Cvf4_нMShƑﰽe$R(*䟦@gadBK[3R#MUۢd VZxR)F&"@<yBXI[w1TP}gc= z+#nZ^t6zO>fMQCI<+B71u eDF; #Nb^Qi8N ||$كwA[bX1αFSmN宔|́pu-?ݫ~р;^b(S1ȲiP }N15ȍ%AzcֿK2vdrDŦ:gWٝ{P*P+]ܶMj|}4VgoS[S w,>ecy)1FZb) s*o6]TmR"'$HkqckFfN~7#PnB^н1cSqepѪ2T70j2otʌ[^ /r6cqiք^k"P^!8'p2,$'?Dd2+]'E(_( =A/\be0Hh2洝L _4.bf&П/{=+h'nڹd/&4/rĪo%F5051KѨ*G95 Eqh Jߟ[˴d?CncP%Ҭv?bI*l\_Y6`0ߛOÈuK ^m..,<vW8+ [FODY/$G7fb[2 q-*9J! Qg[hR2X Eڧ'+FX|p> [i Y&c1GBF@.UӴԵ)ͯ,v-̱ʺ:~U'Xr@Q䝴f ,h~1.'sZ)-N,W"Ն-2uJ^13?;̯s> _Ix_ g>M| TOC&޴'gFh7lzD$m+%U:mn(z3CK.#^c'D,_.*ǎ1Emu} % Te>^TY='=u mIKI ԗ_ eݶu/݈Ґx*Ì$1_,0:{-_ *cF#Zڇ5 /fI]PkݩR};YnUc}d_=E`;)#2U{}T/t*u_I>"N+; !#_ እl[1=QУG"}?U2~ k%$Z+'(JxNVa'jm3#=G1uEw)Jg ifALfJa!Ymi i(.x#sZԬq)E V0D=ֶ8(I9ӕ/&5`ؤIo<YXZXwNkɬ%1z#/Ƌ ׻N Htn]W,#xV?p0 R+7{q_ Y1*5M 眹ugLsLZm0΋n<aQDM9_S%'l{k$BC^\j2f H~ =" -joYiP7'Pa5aH<]a6>nG1!.v: 䄂F{^G*q\v|L w:i _[(/JO6ɬ/ ǵP:2x1 @p+Azq#hkn#Q*\#Ѻ?Y#Cu.LJL-j/ȁē|oyBn/?]COm@wEզ!JkoWQN)DA^ ,PBieŒ7+v1AC²8g.lLj%=rTuP k'1]\˪'x|2-+oK^(^ySP?L$Ќz5 u2`ߤc>E6|G{Zm}ɨ# qOk5=,H~n(zXh /H1")]ەwF(C\㢻o8K~lO {)3s4I8]T$']YfeKͪR{ ,^5 EBdW:yy矬y !]7yƃ-TNV}8,fC u#E=Tz@z 5@ [@mZ?D7wuЁ "YSPǚ-RȺhCڗnׁBdnEyfsEˋ紺 ߾E&&0v+//S#_âOGA172t%_:Ta*i@;-DEU~uQ @6+ϕ`@[AK^zX67|Hw³FuDV FOO𳻊-IC~N{m[al{KGˑ؀ɶqw{6^dh.CQX3?ρG2< TyuMi*eDߧH\F}ϿhWK-D̛d!ፊt .5b#,OJXN6]Za7_AfSZw)Uʅ|62;@Oҟ_,>LXX+QKbK{R^ 8qܐpX)maWkF`}}yd6wE"i"tl{udM{n/79єܼF73*!MMMtfq6}$: 5f5!h_nj8AoKbkܻB;\<),4TUNw4-4ޮc[}R5Tᄻ#KeHU\|$pĩYweB=!WQ+/N>93 &BAzխr"6fpiDw v:3kO"p*V$gl;s+S$Ild@5'nD/ZV%"3)n<߯zȅ͡M|mU S):lRhⳕxZxf6ȘXXi(h0H<-rM-J~o0!?]OQS7njx=RᝐDda;5tG7mAo)>6qs# )5LBd{uLiYܙоW+.f?Ϟ-2jpP-ĝSAoic, ?Ԣ;|ؙ$BL`jmqcx/u|:N0%p0t!~}E8 ":GʦU\p\i~&:!x%+Wt-X6Y}ַR1gضc?$K8sM:5NSrSqZ ]4je1u-7"V NGVT ~|Cӑ DgsBEHP Ss*}NIQq;'NU$KN;3X-mll!ʼn;ظ}MCfWey;1fЭ~ɴCFc͐!YuiK:HdpT]r#.;{/nk}qK γc!aXxH]lsЗw]'-k<5TMB1+ƪF: 6h;YTi/3>#MItFHL[JF3#5 6}A귦9A(sۂ!%zQ:ݥOD>~soHgDx~AsՍN,*gilhkM]ejt"ɯ^1*c,Qk| ٺ;5JM#uOG; ^;92_9{d}]ɴpT CM<1nU '^ J6SsrdF'ʂT:TBjV[;(6ԇ%% Qaj|[*@MyG?G0!Ei#r Vm-#O`aR8gk'YGZv3J**wddJ.*³0yYHÐ \7߳NU( Z[/[t\lG;qմ#( e.yb.ۀ;[)fֶ&!oDnj\YD"b|FFVo9ߴb|\T}ʹd3ZQ8gC.TF`,R1X6BYw<'4-eejE®-xp|>VV,,S!uNW]#ɹ({$D$[[y(OJq?4xjWf߸Rgəe(O-VӬ+:YY?QLXvi 5:E|>QiN|OKazNgjϣmYIݺ]mϭiESqaTVGsM n~/>ނv+D- -iC1̦!4~soR,5 R^B3a$%\:di&=$A/:4e_PgÀ&%i* ڄ?掔Qjn[N*4,#j-#`¡l oShdqwe5jU|lKnTFEzF&;?u \@;u_.Q#zU0acƭF-KHQ:]WVVW8v9n_ˏXq/qmjΛD$tP@^^.++@~:|[-͵5QYp+m-9BK쟊"=?}.k<ݜځ 9hzx؅!TY뢛}Ԩ7#WWHRf?l=;¨`X0SS|Sǒ@ILPЏ)iB'׺ t?AYY(eǯ}Zo?`ZTl_f2,&\5s63e|t7sf8TqnY.ɔ* \yFV &4ugҡe%5=uSeuaf9t2&ȚoޏLM)xltBu|^U険"bKnx ĔqZ1;EcN#;$)r=)(xA2@#=hI<m*ѷHFwK,sSEp)o9uaAi[zPk ; cH3%"h]ڑF(2 f&ǝeT>؃"$Yhw2SAI^MrzJzsNwZ]4` }).l=??M)ziRKOh. 8⨯qĆ <)UqzZR5zVme,T&sBq4CP} +q pY-#g:H~z3HoL1bLY#ܝ]wP$w~dO󭲍;*uB,fmkB>.}E+]<9d*;B9k RlM 6XT~U̢L>SiߋM]C.FW>.n(RΚo#`hX+v:Ԃҡe ǫ\&w)';fEGˈ>Bv}EL>x9 vnNVe5&0'|< 𬗼*mP}6rb^j0O Ify~)`~=*r[J#\34;f)<Awpy!#(.u1>o,zpe?DlإkQYQtuL6zLQ̂L <5;ʌ@"3zJFN/H|BI\+[bM]$b'j0Uҽ3NǐfDftB֍ 1ɪ8Y:)KEmd]w.e,6潛^獥_Š Q%wtpgvC2nU#Ds_ҶRPc79h}ʽ'$)[䠱f%b+?O0z)Ү 9rRzbW$Bdxf]8VO|5|$1/Mr~a$@q=i!rs\ZSv˗ Lᦜ-Z!N̔,5:I eS3r~BbrNϠ 7K,vu Clf9HKF}O{6ظ؞ڍ:: "_yc 8Akҗgap }U*ZٓveD˂[6KhWߘnAU)"ĸ%..{b\^UOIX:PXxa Qw{LJBehy-a+i'?#hFO[t4bNgB](?ks|;jq.Wނ8rWу] lJh]5Ѐr%b˶M.̇FૅluT*vHm5ag͙_hf̓C rقH"ʰ{g?nFɧS<,HY։`vj- GϡBl{0'v M|Z3%淣Տ3;) =ŦRQ%BzVv*tC4xk7* K\B3ė"08uڧ6ND3|5Ĵ=b_293^/  .I{,)fSOOM@x'wALâ\bO8mX~b9Ճg1(%G[AۯjiMvZFǎ@D!+Y8AuA<p%9/ -n>k kȖz8bYe,ixHL jL%=uf†+lgۉ~KsE5ǿ |$J+NQUG xxмS)x[4BV2֝7|R*hwr $"7>P[/5ڤ\03TnlA:#IԞBb Ղ݉toj)~EF/?6¹vԯ~UDF ],(!.frdMsh,^*(6K[:O!:SO@՛~n.'#·(e߮Eل+wTF8WHC"4˪s;rWԸo`Td{Z{:kD FbnO,v׉J=$uQEo˜Sq@y9gL'fȊK2 cs1P.z干-M/)E=d+ӥ0.'2*fkXKx Gz" يr ]B%blGyi/.yW}ObzNY}: ͌=8ʪUH#P2PdgLrɐO`F}j9tH/7k6g^1K mp`K! Ӫ) .z Be%S SS{X>HA$C稞Fxf=Y$^(qfzgxMڶo ލl+ ڎ(R+}usoв~hyCP<6H+^Rd;PANt4E s2lq,5AZs#TxڤVϩmOMJ% b2cRĎ" D {b <Uw+; ;hڏAr3S12 ` ô=1ŸY9aoڦ}k4E6q^H)WPLrv(T:å"ibEFHv'm`w?9aZޯCLW#h!S/$bY)|. oyTz9GKid xW@hZN3Y? m+ Ļ & v?ȏRUM4>jw!f 4#.q_83cNYm0[yceZrnؘ[oƊ)q.,&H}QT;B(#8IG-9y1lϕOMz0iJ(HDD`S@41=j.f>[d94,E9THɿY$!kX /Rk9*:zVZ8/Ey<͝͵WR]V\oJS^ 0Aʨ' u "\曽RЮyک/Vz^?ǿ(B!骺;?EwJ,/ͼiV6 *߇o Ї}bųa&ŸÍ9:gO#Ӹ*{PP]ǠӡHnw~HSaq4.&}3lp/'63VXǡ{ [T&+",1f'X]*Z(*GocF1Y'u"Ӥ Eq'~fz1=2DFlѸ_E7.&᷸'í}uT{&Nl^JD0d>Գp=~D> 9< ǎeBl[J*䣎=/(gWc7Ux&!n D,l b)l1f a { c^8)դ[jQKnd)sc?8s$g/cmױV)Wm~XЪ|dWlPhu蒲|PCH9nQ>L,﷙^ߩ٠E `(uZ,B-p$>TI)=xoF Ԧ>)4!w|d+ىlk'Mw0]pjZ䒨9J'l^Z7th#z rB:;L_ڗ~~Qc#2Q=yKT\hT tt4j#F*G@y׶ A*ְl}H>+ħ̯yIXy\-Et_kCJv(J $ }!p(yQg]+;{O2,6/xL/[rrJo&~; v T[ 1`&\}@Y|;βG)6P"waz\+4| ǧg6N\shg.JEw[zG{ -B,,N^"/a5XT-2RàM&,u)A#s[h M񦕪C%g?"〖XռpO{lשv`6s+Js}kFʢ;ݑx)pzq6N}"7™bAIʱKz&k4F?dpo EnoU-w2 eth_ypi-l~UjJD|Y|4O)nћ}a,lV)庘͆+P{Lw,FsDyicp9yZ<,Zp^rJH"s8gB?&%uM'Ah͂6`/W2m |_Kx4YoP6@݉RV*JfW4=EMr? M h9{1((~Q=4TAkSz'|@q絺C5P$ ?dK-қ$lL›2\Muȱ't%G+72$>}mk ӎqcKfs|c^b@#E kIDB.!:ɖֿN>3Dcvx~f6f{m&s_nMƂP¦jF+vpԧ4,~ >/\]~ :I}v|Ƅ)eZ 0݁6)F~f2zw^q*$&)Əlo+gͶq[->K[BsĸkeL<]qV8XYǨ! #BepwC$F Ϡ U ,{/xG5 BB%hw;6bK0CKnc 0mHr]xK)"ܤ9_,Ŧq_R88O\F[-aw0K! SryŪ (֑'Q{#4YRKo9Y&.os'KO(Eq8s-'Y|)̤ϊƣ: ޒe!@z5 *\k@ڽE`)Md-v2Lm1kٶa ѿڋyh,jyQo8f>gݟS"51ǒ`O,㘂2)##`R;z+d_{eK* (ދp6 tHDII.H/[BUKi޳@K8,fB;gtɱVzG:L$q_\'H9ϒ,x0:\$N)s8E{AN򢒝I oAżߕ(> sgFFJwPYhN`Kߩ/p|2mXnՆbMv ÷lFr k Ho4.Uba@(C2N%cb8h?3xzgG%>=nҧ&^7ΨUQGb/iJXst5"i`JY9OJT{r4&#ܟ" <2)DP Ϙ32`$sQ' Y&_sje*ZE-Z]-,*ܟpi5:H/<`s(N TI8f2 c{j-q#Z)!e7|ES+lVa< ?xʖP %mD3#n*!Mp, _Z]XksaykM~G̉ĭ8GD.MktWe6 V Η!J /ѣ6BXUD`{&{{rBU$Fpo!zeWqNdN1&ܺB$eEtQ8b T)i[,W:|zӨ% J;]ر̔UߦZDӄD\X=&-A ʹ:T .9Pܚ$Lp#puMbov/(L7nw\n 7m$h$;0mtݬh ~MOfl..alęP3##wˣ\5+4ZrucvOK1YYOں`5E,l;Ij {Tq60 ىi͔1e:F^^X sAZyyavrׇ)XofCll'fʦS*3Y>ຌKC2faj6Ils+5.ot\}uL4gN9#n#79cS٘g`99I`r$oҘ3Ձ!B A2X |\LB; qɴ<VLmb _}A-?L20ؠvRi#2@ Mk0)opw^O!??̨%UFsf PRY,UW29". ))r,lOQ͇zaS6з/ ֳ1>&T?j~8SG Q HYϞ)qw_BOy'Oћ{Vr~4uJ96'&%S-^U:=d HhRaI{cOl}~lnŃs?/P"⪙DbEad!IzQz[ #[,#3; ]\}#2&F&}ћX%~=8kdUMw?!*]?Gxe=,pw]j<7e=Ӑ"$B^Gp]衟Keo?꺈̻ur]<#Cq#'׃0!`A;D#r1ʣ9Ťf:_4k2éǧ07Wsh_H/[B9Kh d$\3kC3&Z3zhŞ_nYFӭ{3Ʈ6jePB!= ri\E%/s ݹ+z@j)DX6uFv-9v'@_oSvVP%:?'Q Ria DZ&8k[.#kUS"+%ն*ڨ<cM.R`Uv}Zo{u'89*RDlxFKt hd|q|[M)xʶ1kqxrwn nⱒ)Dޟ3_u+[;e. s- x.JN~w~Jwl#Ab|bV zZw''lh|9ԕ'hv޻ˏP(kĿ%a|gca*jەyp|IP.#R[_3Uzor,牿WE6賠̠Dn2,x"ʅFnXԳhJH 3nk5L בºueRp),BautC.ꩠ߂6A~"zeq%aݻ}S憗iYl?hj`7fI>>/üD(q2Dؔ^YϨYJ;3e60@*ԏ|:Ѱ+O׎:y*Uc /02. >Umf_&6@ }G;KSeqT_pB֍_^@[s43\s 2˹YcvBtPXڵlP:C }<}C8A[6KO1Ae paEvevŃ}ABف):fetL)*u-=v"+IM +9(+4:]*.\{oQKP<"J&8ð y*4 "*6ۢl@vZ $V,/:c@ϣD-,$͍S{JuvEA0D*MFV_39Ng+|.Mo| G꫚JX<hZON9.[m7|y8tDcsz 7a : @U7tF_KBr>b<|,1bްew}n0;F2?z-Ltrh`/ XcjPy]eQ!UZݑH;g_VBX&!>GGlbr'ȵM7"rZ3}fT/*ܡ!¯2>#0{lHR|-?(H<P-bc'0A67s\zte n_.TۻyOVCˆԡ%mh%ЂDTx#xߜZ#Z "lVgCx|ٴ1k-݅ xڦG0R<p8?7; T-XNރ TS^ԁV>NE: cMqȗ%%+D~s=-)/3NúzZ{/Ƽ g: -M-k{d1kA6D+ө%3#(A/w=Ŏ'U&>Sn0@<'k K36or !1# NQv30)3wpKFMtkQgp݃PR2v2lMm ^iJ\%#.=\!P Dž>4GܱCZp ?ˁDnxLt,n0ۋϸzhJG^hE:)4v fNzaϦShք5IּїW0YhĔ'W)8i? 9'2QL:o'2V"GBKK ZgeL<ن9ˢ7/D)| O6<3TZ ;EںxBi>K_5iR Gk~d%;Ց)єgRۄeAs1B?{r%ahyE.z6Q%R䑓+w)g} H\A|ficMRVs4qsI:?oMeAa- +ky/m[/o&b|ϲ( ,RI$;si|d;nr'rjS'j~25K ѿfZdd:f' P53'`qw gS (+.QG**<3@/c|>|s̼CTCjz{ҥ% T>`=.gVEmur6@vF 餧-Tw{:;Y.ؕ6XGD}}/o05Ī $ o-^1"'hJ3@\*w˜9խG~cc ܯ/siIW`Ű',u8׽"E YzS"7cgpB 5Qӡ-В4r0Oep0G5@/1Z&Ϝ9@\ b[|8(];v#~ ȵ]ttKV8,kxNbGNo(Hʵb"`7 Idzz5%|Lꨬ#H,e2{lв')+ R$fWx#B( ϧFtE ej7D$2 bvqz_ Lt |YVƛlQET,ٞfD_h*^YY7LemL!sHHSc !K*Ͽ)LWWBrTZ?0RPƢ8q4=rܱ~!o܆"Z h"g5: ЫoKnBAVY tэ&3Mxj`n*H[PulԗÞ(< .^&FT[nmԔl9Rsݐ "tD|;oL׫Se`eaڲ'!~CKOGx*3C_pSPo^m˶ i>å2pp>S)$OhddxW-5&f[%RAO&{G]|@#O QXSF.|a­hDZ3O:z Dz:Z EmX8Dj?F67;"uFs ƙRA|b+玤wjPZ̐2D!Fb(פwh 8Զ&'#^3aҀj/+/uk#"CE\5`))bvG)Q2GOw$0j.&Kmhjf`F]=ZxAb8P.ABm7~!Z7!maIVs($= P-_+vC=iZ0TSʇ=*/|~mQ:*mklo倾sm"ʈ|iOC̫9ߨ9mf4y2):>V:N-5Q"#]M1&h*TKDЈWφ ]v6Jǭ1$qiN~fL'ή+]0Kq睿ԿBڈnppoeMd?u,ajsR6|9n.8'{SV̙ Ì|į0,FJlq"IWnY+( btW }=(ر#FE^[2 /ߎV92}_{J/({33BgHfFVo4-n)mi9%f3l{kA%D*pOTr$O1yT$ܳV>xiFUT:`]nzb.pS] `[5|fu{3uu[i7yJ]8KT hlX!݂Ԥ޲Zoۭ[+[*A.2OY@YP8+Kl%~P;fmS G7seau6un!0_m3a^8z34B?6@NڠU:mgYA-u?D٢<$[ [1-o 0Mૺ;kɱVj /XɳraAo±-^XjTʍOA<)<ޚJ30ضC8n*C"=5Lg; ֍k^RR}^u9i>Wv^S-yu_/N&g@g@GF RS SԅmahNTooS.td;S^=]sbCE9ݯ2cǧ_P%ѷg |7-i[>d AAMd~  =iylO59)&зA!VSeEY09}0ŵ#؛hVʼ3!ń늵}[-7S֌rв7Cg*/4)mʥ@-4N&bVp\Z}nͿ,m#DpʉuAWP1}]e?yFp6V3z*Z\0B m̗gr8Y:i 2^5`F{ Y4b q`.zFkzŽ@38/Ue"=Mษ`{찃n'H8X+oM"=˒.EZcs+ҫ}9B醿Lj]7gzʝ6+67"V͢7`#,'Fvxޛ3T>vA4/k+pewWC Q5 * `+!w9ۭP3 q`@մ΀ Ɛ #j+Њ@a:-Pn> [T0h/o#鶛pވ%_Y[A-ܹ`oUߢr8ޣ'.C4FUjv."/JV[Cy1 %ϳmtַӕ +G*/JMi$5fmC5mV zm HK(ݨ8B{ͷ7.ICژ` 9-GEXz?CL{/[,ce7O8q(0߶^Kuv M2m?4tjт#1qXm(6Mw׏=֨)b*ѽ\6+mi4A9J#D %|leOI[d޽,++3oD5L+Rf?dj G':x|ow `o'"ՙ`rg׿1ԡ< 46+2rrsv$* ΁7Kf ɃG 0;_"MU ҁ$s/A.׋uoL#uq(-Ho>G/X aVFXP">S]+QM v9a\:(JA$3G Gwkq~x荵sy(9sk uG&Mӟiyw*CX7"|jC(2NeJ56A{mpt'"h?ŗhO_ٙt^QQU%a<{ , JvUi_K*yXr 8s,Rg_ 5!PC,^m#:=Ǧ'o?v a$o)[S G4[Ԣv40c8Dݠ,Xo(4aNY ٩)|M?Dr- YĢN0A UIs\zTZ+5 )ij4lxұ;b+JaeNoQeڨy.RE1αq EY[t+)dH\.Ή*Q2m}Tf aw{KM20X;%b3DkUs_` gY0p53 6?eoK,M@ GWJsm12r~ b՘"i&w6K"f0-dN؜LA5{rE^!vD<L)Z2e{?ʔ0 Ɍ+i41}[B|tvJz=P;l+'xȠ0D!r`ƽU ++\ q]5)>E;"yQ@ +%sUHUQ[?SK ~ k6X᤹D[([+N2pm_N*|qA,&¨˿WrpsGg(LC"rf\{-^^ZJqCˀ4ϻ1,&L|E'3 xz~-H֏c'Q"i17 ]u'.0q/!>q9v3 E=Eϳ!^($qI㪿9X \@P-XeF>+Zu|RʠJ02Ȍ S0y;`kp>lMmHfYހ!=s5E!=OimM:w;:C,U8WnK)%kBB7Zwt DHE͔<)Nu:Q$cC$0qCr  T81aqFftr0}@,lbVHJ ' +si:wtepڍlky|aADK8.(;ldo.m |nVBC{6#DƂuۚim]]aC ĭ J2b,p7Ri.]NFُCL&gpg))I%fIY`7 c#iGhlM_e\ V1Xfo)D@Ӡ20'5U$ L ỊN/+&h ͜Ŭm2s6$p*6j4 mr, BĺeP̓n[]F[42Q^oy.'K4/)ɷyGٗ) lid?I++)4C]p3eX=WГ9ԭ}l Ԙ KKfFToh<ہK O 645hyl[8nŮ(yFQ＾5u0]`&k^$}?GKK'&Q I$SJק m)%K/Nx8|,3S\m#cS7jLhB#/#5%,6e+51)#_&UK8a$$HY /n+V+M'L ;B`BLE{ B <>=;P sN L6X&pG L [I߼E.!MnНڼhMB.h]Mop?)=?fVF.DץgUiRa叺|f xMR(JH]zj3CV.1|ؖ zcE2y3)#Td舨9oBCr'sMomE%*$Zk!T5p^E ?cb63;JrlPҘf6aSw-vě냲m=i4("`EEtL"K=kEfɝ3$C&F;%K6yN[T*kɄՃylL HĩwHL,a@r'N7H7LJѰFRlI[rU~H`!*mH{/|O(&y2˯Cn֟^+1i: T}[X흝[-#QU 49Xf$[ysOiEsϜ4'"'5 Uj@V/;Z?䯡=0Uovr2F8+B!')۱PN>;3&xaO|`XW_ծ! }^b7A3ݶwmY2x N{DzEfc8$Wx>FH};!0E;u\@\@VЍ9<>q4 Mnr÷ceʸϸ۔WRC" 7沍57?@!cJ(䦳1& `sM>PSuX<}=%|6\F{! A{o\TeV@B!&Sg-*L(]@aYy1#Nbyd(iJHT‘@Poڸ%SUZNJDg d-B‰!x@-Fչzph˧P*avkjXIs=0#@0tA'Qzg&r T؊U ucUNϼ[?" WqL7=) DcDu','2%O.+ V׎TE@'7Ѣ;߿JU MCX /yRP~'ӉY;prqhaJ~$\ql%\7 6h΀=a+cmh|_`Lx~ +>e#, VE;6F .MX$swwSR9\S201}VBݷ?X|y__ꇮ)m2U t<>7U2<￱xFؠh tn<(̩#(d#i 03SN_VֿDf|Ⱦ ģˮ%h?b-qxdLOăX c;1 !(>:b$ mPS-.JUq&PO٦F2}.[2recnp>'ucwPT9?1 x;nq2ztcIFG%za?bE)XRnpXY+˧4ĥ]Kѱ;.i;Ox{WL%\TJ&2Zq c*Iz2׃cZPe&j]DILGe Ca}Kz?b6uoghe6Q 4g W?S..`3HA, ï=27E;@,L ǽbCn?`Zt9<[J%{  !6h["viCCQ`"|VI[Sc!FC5 MLGJKmmljN!#^W:"酏$Ul ]aY0 x Jmy;"!eFk0]ܥyF9hܰ ,B|A/ՔSb1VK/5{m0 :B>hV$_%hiUe?kߑ㌡ pO(e>3^`̑a&cX7UΒᕌI:E%ux&!1:֤ 1Q?@)> F'ɐO%6nTvO2;TaQ[VR/;m 2Va$cn8 >`y8h*/`2[tUAS}#;,X"wQBc29cpPh{AM!cqB`υK^[665j4gA1? ծ'Rs]bC115vCm0SZ,<((MKNZrLYD&=AB)Dbjh4Um&R >]%m$IDqOI Sؠ6d1qjzlnmˎ}WXyp*0VX◂'߸h3H7#||Ae|إ}?y8Gۋo%BWi=4اP$0ZA3*T,iI`3ْ^šO2Z%d$wGnhGaJkt&%r1[ (8jsa7RVLSR-׫I :U@ү:A0J@" ؁Zp\pjhuC 0MK6vx" ScfV,70@6NZiHȮp2%]M) 0[WhD19M:B&aӊ6aN +`}DrO'?#cOKp02V #vYX4ȤP%:eJvXmrT¥[3b#o*jE?IaijT#{U~݁UM=ZyXVGXJwȂ(KtϟfvK6V,\3'&Evn;r80LҥwPZkNր9uJ҉<] g=_뒩rg(7[Kա~$_Zn],FG5,aK4Akf1{~rʙCB:6;/@Z4-Xi2M0;e[w x{6}sO.fPLC8̓lXR|b;%2XHx%0@ՖarA#Rkmn|ذ ]}"Py]f (lݦgӮS=Yw~HV`)q hzE {rpĎZE= #*տ~笝`B,O>" uJ~pFJ!yV->12$+¼>B7W҇ ɟkZY(لw*7TqH0 ^F 1 tX׍`Cj9> @7&t'iSx0㒄qPkj\%(5hձiNJϓ}xo. .ROZ],`MpLOyl֔dL)MEA7&7 (45C.KQ|`Hl>G'c &f6[U=n=G86G Ay9FMkƙ$[=#8u+)#CB۠T#0SFظu4/ "uv;W:kMP#uB;D8!5U 2U*Mmp(i ݼ_a @(Jw*#C~f ˲PiZJx|&ZĨMU+*cڑӚ~Hb&I'B{:\cl$/uFQKk.)X\o?lɒc@ʏoy7s9 N/clsjrwa,NB7ޜvTr`5e3[PS'eb%984PRDUh2-snLֶhQ9g #L'TR,&1kCV[LGF^D93;&QWkfkeIȹ1nxm"W>̛T/h w X38Vǯgot {hk-f~3Tvo+oVP?%4B~P&&ZY?M9@jl&LI=,i﫾jmS e%MesPlᖆSwze¶J Ʊ~5ZÂVJz7ݳe@9\Z3ǂkWߏ}Kv%ꆟ,9h4| ~]f=^/iߞ]Ca3/}a!|n&1&D΃V,Zr55E+Ȭ]Ͽw3=sM-g".&ap.: $Z:t'|U>kۙmXҷ{FZqtkg;ڇy7fsr&tTgۓٺF=v=?9\:K[{iSv׬6!A%S\ق?EBV,sUîhu MZ2'jjAslxvґZx(V$zkǺm%oq% 60-7E~]%t0ݿ ~Vs7˞l)LO,vޛ{}&׼?<(S"x]3,Q7FkFwbnªSXz "zFŠZmN,QK;$z]XrapNӢ).9B]O*>Ywך:Qp0Ci>W?] x 8DWUzX`u(<;]%1EVѪ1 퐵`~e̴S-;uae6c#mBv~t:6;}srAQ!%.iμ ̮ڢ/B`" vLhg<"S06uB'spMZCka a=o۽y NB\>]߇$+,2>u6xp2KMx,4#Q^x!όʎK@Yu=aZS[XiK\]ІhQw\kmA`}6lC 'P![퓟&Ĥ<|)L%;TȰX?䬢5sq&z#>qo"楘{ wfr!}ǵҽx on#A--}[^; K2(cEt9dUԦ:h!l, G؉"w22k "{:&A] !11utn{t\ŧBhxG}$>ʟ5K$hAmZf&NS@A7liAM`C`uS#T%SȢCoʾ+i0`8] ݻ& M.l!7Տ_ly8 7%7AG>i%m|$mm@lmTzp9uNHZD~Xi]c sduLZ7A 4#{"83+o y$v.76QM,8v˻/dTK_zŅ BR:i^yYVU㦩[ʩ&=xIR0] $ldt蛊|{?g^EkphpNgۺ&0/H@N~T~R=W* Q?Å3GZI[+9쏲)8U3bNNO-[@[~bƋ#BzGފeYt* +G3Y}5. x*|%6&nȵ5f|+K[*y_B]so- 4k*E~㝶EvAFg9rSy[QF("ZsвwfӵTIrࢴ 9b[E:&d_MÒ}W/Jz5)q+GA3@Q_5DG#nZţ)e%VAm[&Ʒq-yk#)Nu=on!7r_iפ#=J ٤9iKHK:1ePVm-%MYQd*_2v6eޝJ/ﭸQʒw7 Q>l  lV;/]$꒼#?Ɗ.)TY`NÎb+=u2IAZsx2P7Ipi8O94E8T:$tj96>Xrn_`N7m+koSԈ&6%bשKzd+b~wfۦD'wB JFe@-92 `6 Jð% U}M#E#Z^rҔmE$ fZqu?aAGP؞2rڶe]xh\ĝ/f gC^}k:(slSCSR4^Qhx%pUD) Zx`Le>CID[wK󙫶.<9SNQ'(J}@+,MzY6<΋Q߆K) '| rBs;SfKLP7.oҝv6 $HQAg(2Ga$l`7K!rxH|(XG=7?9(ڬjB|}jЈQ2n @Zrɋ/Qcqdh~gϠ"D9F2$j(d^?!wV}mv2GXVډ2v>DtJsmwaٞh[Q揊XN|to_J\㚞$;[-A\Lˀ-lDL:g=N^^FJ;g`PLnWP\}hcblL7whXiv. wt E`uF}0OIi} _h^q=ɡci~Zd_뻿&Z?G֜zGPfePY{a(XX==$Z8v 浺kRsMdk~Қ#x ~{mX w)&@Ќ쳋Q /ΉLFR gyXՆک+!f >FJC(ya5^ջ+;h-2..zrtיW< Fh ;釘_9DՑ;4i x>=ָ)<`GKU%B^KKuE̛!BiSD*:|*z32> 4' X٧E7|~~PkLƒʒ7lW Xc3vWb{\,8LU(@8x6-lq6͉eY8]re2|vކJzQ?p B`>>Dz:`#8 ~so Fzp/E9b " 3TCj,Д ^gN9k%(N6OxE)]roVS>޷/5m_]Te&U>ryñH|UdQe;K Sv_NqɚϏȐ&~9[P)M9Y=-jѲ^rdZǢˢ`U r"tٞPA=4=cɰ96a(ѩ! M){]c$ŧp P|d>swuקq3čNH$\~c܇ 3GNfsEpoFnIuלE@׿HFfqEL;Oz Xpb"w׵U9xyBTZIy ,g el]o=eu2/ (Ms eywnUCTu78|=IP^LYs~P!sdCcbrC]$jaa= ػQZhVۄJq{u>A97%Lx9-1>c>-DZd]J}m fzNf&2ƻ|Wơ=LI/Ӥ+^Q~Uъ9]=~ImI!>. Tr>_cDy2` 0c}Ja =Q1'+'. 4D@ug[ ^e`k=thL[)$ `*.5;jUl_řSg3f訾`F;x_Re+K"3غ^1iF_Y [jC8G(ҋ+!w_f`-nL j?51 zȪ?-~-Xgl0sA6~nqZY`^E0X?_G>B1H@nܦ݇B/pnBu/WNjmF"I},]~ap7umse\9Z3=⽓Y|cE p.!7ڪcPq@RQs&Xw2L5|(g^zݺ Za}@20H,5Ibb+J^ѣr;&rC|T̐t<.T҃ݷA0~&P`x`EJwG`mgJXy w b %-y]%hAӜ!z/~*}Li6<X1x?C$_eX$\yP/B 5LR<oRn8uX3}éDC=y]X֤)YN  Q(IݿjfErDgE6h:쎕kf Rj!P~E/.I=9#J Nk>m SVMJR1#c[(\uĿf'[ԣ!+#@'oݠ)_P B hɗv9ߠ+eإ"E<~ rb z(L qW煉Υx4?Ρu))FX[ 24R!Ryxtr`_e^'Rw_J l-&}F.JvX_"]1]8t5 HJt>*Axi9moV!YixeBFVl&H 3l~t5Fޫ%xW` BU]?EAS! 8ԃRs"Te-2*MUv)XDp(j$Tf ر@$  aL1%lR#U)'o3.S H,q*kt3+*HVfaZB4lVYX}>})TfX_4 ߟXTFM!-JqXs_<EtISԶFp":LW[5[T8pmE_(x!KzFQ?!AH4y;nͼ<0MMLkw]O(7 ʇ4 x6MyŞDZ{yT/N}d2pU4UI{K݈/o._lOJ_pq'{TY1oa!y k~-fҘXr2,0#h /t"!3JS[u]t=` rE{ɏ 6q~E$ qsmzET$k:#^49@ME:>_պZQ@<0EKC{nՏH735^5\Pw.PBv o{[L.JFs(;jT idUw7<#mgDGkVK \%hj`+t/˅Yb.2/ڑcWfMDgPvLTg C`=y((Juaf.E0d2;fG@*/0gtcaaD w,!aƒ : ,G@aJϮ\$VPS! ;{5Cig`BIcl9]CCAq|=H'y? n+ (;b4,;dNqNF|tcdļg\x7*dnK!.nw 6&bPWyk? d^F3yg4xk(8:)߲ :o/)@9q̷=iQqrUʅ'hfnsT[#W.04]tqd\rh3W02Ǝ|oRsQ`8ZK*l4,a{hD MEn]b{\8w== ٺg[5l7*93{AzMkW#N.dh5{I0_}]ߥGC*l==tK ;ic@\ݲւ0,`{is.:fqI[3{JVJ)pTGsuqf~:s,5qȨn+S뽹q._dfY3X,z_v>Wb%h#JMT*8'TȒG>٢ɨ#"7-xDxmX9Ӧoևc=bc㛳xc4;X&jnNٴNEn<~J/ϼۦЬc(}7:x.qx#RBǭmQ%lVβ8SDF#[z7)rD^u˄*akEnzut5ISg_"~}r 1:v#avq#'S2lܽԏ$d5Pb$vWE6k\FW,pBi3TAhzl++E!f.=dj+<}34C*'ĝߔ쮕[b}_ӒNf"#x3u4UZP ǒX b9G<)&h`^:P_*#MI L[.Z:;*ItV2p>SXnɴv D/қ=N#<7 Csn 5OX;⭜y0,Hk9t2H&qdŦR8[Q{1f;X:*Di l3 y1l߂C ñW$:dMF*$p z&1YbW 0@+8fӓI㴧srEESVD$Q'ґaVch%קfZFuYhz' {LDS=.A֝r]`>Q!S0Jｮ\%P>ݼ[l=}PNSuʯKۣp{).Y<goּ9h3IOZ[} V{-+e|}5X佞-({n' M7|퇅8⪧0xYs:fQɬQCm&vCdwB 3*-kɶ"8ͥ͜qD~iw[;fƏ ?inFd/HJ)g2%6c[6xk"`s07S23^=b_A{{ـ[c~R͡ l{Gktä =u;5<#}^BHAs_Lr度( 1v^Fi0utAm}/m_Q=y;/6 "--r9O%nPbO gQjS*3`q SC('}Ф iI;޾RWu%:ܬ`Dksߥ9\ ["wow/޼Ey>,1@_vY+?1GP9kSu$*C?voݾ6dł4`Mrrt* VRل.P/s2Li1.r7=$J +_`]%dAK\o9b [(IK%=6=h,qdi^eѠ0v)U"l5w.1NAiAQt'=C k?OJ$A޻qu tĎ?kbKkoFD1*h1Ʒ֞oW9.ml0DW*H\AU|'=gL\ԣ#CW rO8wehzC4B=4\qQDl Y'=K"Ui'O7!rV'2rd{l~ ݍl !7׊5sƆY+.7]6 +> ؓ9~ `|2Yz/ڸ[A70 +ZS9d)N vwf1lu⫽aZ߈16tYQrp3L6e`橽smTMU4{+L6_v* QnLkПr.FGJ ?'QK7tA uGdiw3Pd}c9y)hg5~+u_/9rߨOKVOkfd"MC9ZQB&]}y:t<薪ZgOv({\zS0Qa4l #j5B *Coo ,P*~zِܤ¨$Z rKBOlE=&T^&̸shEoX3̢5m drʧeJ9K߰U?!V~J.Ȕw) +PZpSmУֲjc"ZR|Џ I ]筟\\ ;2aqbeȿ'Y/Ֆ Wk8RD [W[] V[78dEKÑɒB<]:ͬfyFPpȘvB^VZY=xFK7 AݗX TLZ}81={8w#e=i#C0_052ǏsqE5b.3X z#Y< Iud0,V#n 4zR)?_;$"晻[Or :yCmN.;̃McbhU3hOdl:>'owX\He3z8Er|\WW @(bX3o&)o2-G汄9L9h+CVs(Jb,'{]\@#! }k.\js"\yC,`@"q,WiKJh|IMi0K"K"WUAP#ОPfCMn &+VZIQ=s=tjQ;rufV8lL9 "*GB\m vNj(ɪtR(viE؍#_.Qa?O}7O$^Apz=~ůD{aH4wY~"&:bؑ_zZ1` ]w6;J氀 Di:mɻ,Ä}5\sԋlojcdUU}o_alQ|ro;LslE'"0{YVA eǷ3j TLndU]}@(" Z+TĖ,O&,eCaՙqD5[5dZHO5|ƃk:Q+KRY(脌Ƈʛ%7×і9D#r\L&o:N X8;EF lH jҢ(T9dʔb52? &sԧsmh" q&bk'qjw׶Ԫ<6 [ȋKC^]WYQGtkÓ>llڤ>`s0m%^LUP'Dz!+Ǽ4S8S]JYg}pAyKDfe,4l5^Hn qc-ޛЎp5PI]iZm، d?$И0u8{ Fhh 31TA:t扞JԤ~ݱƎK_11 `VE6< Җ.`Fǿ&ͅI;]KuEeSE-ryJ{B @߷ 7nlq98Dldn&d I0{TDRq]ɽ{oW1̙և ` YN]ћ0!"ۗ.3TibpA ְ {@ڊHɇ \Xop_:4f̓#n-iġΫyg9'X4")rw.>_oX 52APv[@jJ~DgМy&|RR&~f'% ``3}TL+[ IR[rY)2LzK~4c)Dne2^Ƙ:kH{VI0`G+`/QQ( I_3'-mS/'/RE wmYIa1C̵pdi50N/M?a7A{e!imU6pW2q{6%5]1Rc3isu*k*RG+=0;{]̓kӵm°(N>A^|Aݐ~M#hH{@3sIuy\ 6ĵ᭓S-Wh-h=QAR~=͛pz .[l;z+vgPb^ȡdrCi5Sdʬo 3#"wۚSIF0fF#豙lDr>*PciK\uĨCÑ_W>4W4N& ys+>="RE)B`)N`g*'g6@$g!QƊAR?IQR>GKOYhfO6T;0w>hXw' ۚllFq2}sض1;#۝4j(-d\JAYy9\6rE;أmM&zύA7}g6ZF?jG͹z ==9YW ,#c 6c`"W~ bEJܾrv7ҢV nS|=LԶ~^>Y [+\Jox=%Z׿*vD/;J޸TYVj4sc;!]y*c6y_2b&א@ -dJTɢ5Ȁ 1##?A>ӌ _E2"9 BMފޣ`ic bR3iBɃXE>!ls6 g+<*jvlp=-/\ ȘuLY[ᄟv$:M1Q|xrM*vƻ0!RtɸaLk3U 4ƛMi7ND+cc͋I(U,ﯲ],K+| a/0þ4i=t &IBh!"k#kx6Qӆ6e EwL:|d&>`:VAH?7;1F=YiC>g8k ٫\\Y)MC `Vșh0E-ZtN}iTIfa[PbQS)tE ]<( o1VQAQծ1;=b6T ĭBkR]<>}t`Ҿ$>02,Cp @(yuuwP׻ұGg~~@G O*6ly˚4X^[DE5-=''h(q5"Vب%^*/G(U7 gA#d"-ORZbl<=Ƹ(+ȽOMO锎' ʤYY@+ u[N~ɌF:OJ+DLھ.jD1'MH<.-ŝ[Taisec<'t-T[F8 DgL 9^kbeH: j#:yZWtĊ 1-sdZi@2 8qTL[#tüi[.I:XE /7GxC'1#:-fZbl l[ \D7p?%!3d-9l~sץDn8rKbW] Ruu Nz PG}"/lž~0",/oy DRF#\EåDϮ '?(lvZ-cˇc"[jkoID$DɈ8ۮ+J]g<.=;pj O/uoWgtQldT\`Npv$ a$c|ve`8xR:guA)?D0妬tx֯U(R[Tq)@rkC3?^F_N x$̘:ǎscqlYK\?gO|-tD {2@t83!IDXu@c=IH#nՙ8}cNwа:p2UPE`RSjbd[sɰwZp ?-K:4])O=RgŒGdB&XX^Y2g׮ (W}݊zENT/2UVL'*hji[;m0 kO2BĚ }.jG咇ɬ;T쐽e*]Yԣ^eRWWxcGxJMäpBGDF փq-ee/'-d)%; >.>+ _V8GcimN‘}QSǭ#2i|'@"su B&:x^b"Jތ¿QNuIةNL450YEi,I%~TYA GpG/R $?e|Ure<%RAQ]wby}xnw~Q9 -aqr7i/rgȪJS"͞40dIJȸC)$*.I*\no1r`aVQӃ"G=٠q|̷bQAy򴨻)23w?$>7GsD{^v|c;Rbꖺ-8g6?IΓ۪.Sָ@Iy`,Yo͒8ڻ?W,ˆ4Iփ`S@uݺ*A'#PF Y*@uWF`' oxc6>[%I`0/Ƅ-v K$v2eOٮBHbDžqRuCoC &f 0pocD~Jxg(nbUK[. :y"#S sT|SE耽V&ӟÉ Ȼ\bCVPS4$fT^.b&J!s28l>iL}*zRM%Ŭܩ斡lo5  >+%~@$ ǎ}'+˨vl K1IF(/|b@ٲ̖l b˝)3 u 6ҽQ"I⭄5QHݍ}RKD{iT](GmXkٰLPx<# (;]Gp':Q).N20g%F @QgRMh`bԱ jGÞQBT`g#ֲõЊӘnRM׻ff yy4 z^);,kt$BY/zrrpoviU10T/nCz~ZdA׎\쳦nK(et uೆՏ> {w^[ґ&ѿt3`E̎|}X2,P|15ٜ+V q"-.'K+JxPgr[翦dsUs=,InU7LA;p"^J v&P+f^؋w8~6,]tF:#&4A`j`hZ%T_J}R /?5xH9vZӿ<M~n!$xk6z:U: ^RA󛝨-<{N 65ܳMwjNwÀׅd3bxstwigI)#ZnߺEyQgjj V5'X'G/?EPYC*ٝG"gz`9Wb12GL'{H#2P/f[\$d4m1Ԋ5tf2cE{_g=qQLItʿ1>t%y< eN4x5>jYs?_{%{i"=Fs:h'Hj2: s5-lN+l}R~[FxJyۖg(NXYHM? v2q8$%R>MtNq U:]m B"9ؖߣZWe0=:3ANg]t9v+$*齅}X#dQ.Pv躝MJq?URa#T2ųN;bFd{ixdNvY 茇 cM_~'8QhY",Գ'TZ)Ćrh!e@;:2lFQzfw|p昂 )T0m~, ^GχUĤS ~E*5!MܭGU-:4M2mCBxEGn/PjPsuKDߑ+b,Þc|3#^R"Eo/鞄rk<ᎼHQ(KZ_`VmjO& vqlG25~#F3BL'/rY#ҋ'P6N+f"s@,KqG㵠h xFOOBk3𠃇zW7Ț,oG az/IqoL-]Tm~o176Y*Ya?rG4}zaGIGw6F&=,25^k dNZ#YBr'n,nrqqP$Y:ݥ[ .S ^Gn?*/ q~縁2@eEn2m HP_>ƠHdF̕,G#0%o:웫!F\1_[|)8u iHEF b,E[i6H$)/Ǯ3;|xi{A(ʀ 3t?e*B}?uF-?)~͠ϔy`NaA34H[RM\,*JW6%K*Lr"ܽP}/2&{FA)M>G#᧡tM@.#gDB>.l&uaP؎MgRøt7 -JBY(H,QXJw k+VGԹg䉢׳ <,/+%emFk9> +nځZe{&g>;U9:gF=] ֽmC0M3/H5NB1EM5e1jZ%PQ%]HEo| UZ] 9*aa]GHER;}e7*CْJ&Z"y(MĊV>`]iax9J+MC% t< -=S_nqٹH^{h,\gTw4Agh,]/ IР@?Jr~b˭N7rT #?B<.*Mbxq\~$T arY.c;LxɬjRVrE< ZW[D#u..7d?kI"yEJvIbE~T4޹?Gd/i[6n?}@%lc,^ FȄS.}`MIg|VmɡzaAE^l/HX:!౐]*b]F &3'i grtx)#hcIp5 ^QH~ؘE"D뀝C~]&y'x2rو3(MxX@GcjW2Cn+m^9J5'NOY7śX j{AEXW'?ݨ#M4͇uB wcxg)Hy1KE;N.k ¼-里Y"ȣh®c$ y 6k%+\:3rlsc¸˒ 2tܫJEa(Lr5Ru+8j׋?ﳳr t|wt+KS< ]ȗlH^kcEg$>(-N+:kV_6Ex.~Eޚhe`@\(!=6;Pp ( ӧ'nl~7Q .u@ bC:í@g0c%MFG6<$ű9Uf*F <]x_)6Uh0׸R(s=Gy?wOqkm\Ԩ2pq['mOUCsA~2;jR`QT*\'oa=(&uik{jc'o+5-GR1/ )C ~yB5v>#!P0}y"GĢ?GlvE>bqC' tw=[VӎĤ/ +yu}pc^98pysV>nAYRg>Wwp y+#Pu5eZ¾W2t'H`wGAɲ,6w4 YR:ͷR1wA?vO]P|+絽qk]Jnͱ&]vcJ,Hr$d\N$y ky;p? aϓ'/QW kuZ 5Kx%Se:e.4 &\10BO3p}ʂO8$^]WmK],G?uRi;TZ%ae^|y.X2伌o(Q3 mLTnG(:YUK PVWZiI"qWlZhɱoDQÔIK5,btj5{2dWogidZjϪ85rw8D4FiA]n:VJXܕ)z\,)ToEÍ Yaq5 Ta҂+Cs^WW? 07m>AFcm.Ϗb ؘ8'2¸&[Z2xYC.v^swPN[0A'D5jGJlP_=@3 ФD4#$=6ܗ:_nKV4Z8ވ7n$r,RCZ"+_MV5$"T_cpL;MND.u*78s1!f+RI8 @6Tj/so-^(awXV5xqcQj0dIy$yXߗ*`*IEDrW@hSŊcz*f~|K fiqj;(~U "u%ȸEGNSFg.uwxri ~L&d}-?k,:^Qy|YI\<%UvMlZ_j?`޻&DMI֩^T#;"q)B__E`CIqx ILq>ʱZ Am1r/j5׺V2d\xENBf|XϢ6y]KO'[Hn@k*Q:>um&p @5ΩݵEy&fw?0PiC9O;esejB1ui#-$8#;^N)4@OE)Z99Ն)%~ Dt-^({y5d2+z9.۾u|JTMoݐ'7~4daAS2Ƨ{@:!˫\ve=;qPt[8}yت:6ab>PkU Zwk7f&Uڽ4i)*љI .]LDeN GBD-"G /y aATԀ},\o$VI[Qj{:̉ΡHrՔffxd6x31tOryc+ jpJ/VB|Dbݸ|r^n u5xfv/0VK>vCp\^J;$/GІB(Ȑ|hI3r1GRR!ؚ{|KR];“s2HS+M߮gmDg${hy0>ٯBvF.RZ4g#dtpM Us()wi݊HCGAXoRfth]zО]I; T7\Ls!^1D<-u, P-.WC@ ~TKXˎ AKڬ)FξEĘƚ(0-'iauvg ,, BLF~6!縷o8W^b$hv? ҡ`^fڑE07h&dyS @yȃ$! p:EM}wx+)CD~='NMK͌U~'NlX Ʊwoe$ybjp%/IL^{X)&JRv <ɥ FK4lVGi2ey[BM[U}֦&3Z  ;(}Ju]2Lg3'#wv7BFfb[ee*v&>0]ޮ1ayd [sQCDm9[ eVVfmWH"|aœ8ҦY~a)hb_t\D>L LEU74&I?7(- 8a۝yH-Wg]`^ EnFJpVlZXEP^@ɰs KCkYݬi#k:W'G].\,?.~z{;? [^rQh}ĕC̥>aoU\$ p^]ȩ䔕eO|D+ͺCM'ǔO3[ܜJ!5ޢuGX4WRIς\ xs0WPfg]T)rwJ˴l%gO%{+כh^TG)qYRQrqu, ŵuzp}GlXgZ3K&NvB ,s.>m9qhe1w,K=&*־zDlZz:KR+:+j`_'j%,ƝҿqX= ',Rq ׄS~MѺ <!D0kA(S-\6/M R?F*?\h0Tl'4gz Q9sa◥#KR+5d~`f{ 8Js3)n HTq-Ug#cvlkc+ XsE|sAY&R &~&\FNx $XY~+Ԋ,j;MWÓKvW:Ca-b/,/8>4=98cx7dz  >!P9 (4-lY+Pam ]7ϙ9 k=cLTyot`4m\zF*bZ; pAiu8?sSqS(%rɠ3ݵل: +(Gfտ.!0GHp?4hȅBEY_]91( K8ݶ_1OuId loڑ~RKUpThLIf֚;4r!@"nf hL(?X UsO j7-=q>>6/P$E THa⫱MGWM,ا,{7Ŭ\o4/Gv{q#PXo+ 1uhrAKc#v}fp}EWm=/>ƕ|Z(dؗeyBe#{98p1n:ūbb40k5%a(/.Ȓxz(do>eLR^3HЏ`gv-\ W$Oгm$/vBeTs·0j[a &-@+Kї;̷C> t@3qM*/f*<NA`MD+4 VipK6.zr:]tQ9xdq<օ/Z.R[A6̘h>ъMU0KX,lZؾgbTaДye&o./]%ahVF0B]ްUrRh4~f2$ۏǜO|V(f8"*c7h^N{7ꃪl4D׃2kB7hGY0q,$@0ӐM5 ANnF^a2:ZZ R}5'F q뤥u =x'^9Ѷ38;lqf9M-m/MfNƥGc'tjRsVr.2cI:%=8Z[:^DWt i[͞ĄKr4O5ay3Nlk0J-Vnn@C? UouǪ(AШ٠'0D? CLwIi^(Vm*hM y3UJ\Wyn-a!v`(zӿ-r;LLư~@ 9ū?@UV#e60p߇TGE H',!&4!'"D: ?h2 kx& zx_j1K[t-={_XQK-VO:*~U S -.(PT8ew[_Q aV"*׎~E7|L.CnIɆo:vܠD5PS@PE#C|֛=mS ÙexIW/[o^9Һ"Nb ٠+5 l67q*2*CTwNfk|ѠsgF}Q^`b W.S,c59 'pc<į!\M |+%-R|7eO̐}, Os44]b& ̍1QD\trZ(0 o10N2XfaeFKu#y^Qc!O%k&u%Sp x'r5?)HV8kzER|P•W`H?kumucSfFuzx/%֓3H# MFosm嶺-p17ٸؼֳzLxn0;2vG1RaUO? \7Jg^ۋb|94`Ϧ"}gz .t=Գq)^7l+AE=aеcT+R !98E-ئ@@; q+S\&ߎ'5|Q`N&&&7cDnW2@!2!1SE&d 9<\6,^O l&iGm$8kߣ\N\x٩nֺ xT&wWH.Z!I\ Bqnه =cf i^McF4%Gflp!M6aOGc$\%nUT:_dNX*)5;V)qdcs7qųϏӺX2Vϓ`@: v+^[O; "DA icԡvhh g.KTlc0pBa\jVZԉ^[VU!: ]}4]Úmd U G7 , xc=0^\ 3r}(O1%*[1m>^E<JtaHX!п,Mۛ̍Nゆ-n?hdzc"k}̊xW;D7ל9>=|<$SvȿH1㻫0OjQR1*~IY+J՜ 2 . Uq3ryWԤbmhSszϭs=1]| n3c0V'5!·]q iXiRRƊvo^[vc95ݫ\;zKnPR6N1x:\gYĢ=v^DBgp!(tŸȤJEٖϺN`-9~#.c0UK2"L癙.PLF'^('abWVRyPOg}z1<,kWHx[@Iu"g|Luŏ5$3?%X,N+ɐ$ƹ?wkօVפt'+#uLxGg(!i#-$@s]]z^4(zx)桻_V dkЯttͳϿ*)QRDCqO4d_S0`rZ*VUB0>&J`kBػ uIKnU0d/Ϩ勮 .*:xMƛK/>gﶒ%T?E7b-nq.ԕ{u)- :FC51 N ba)nQMGIu0kjhwv.|eRaJQ ƞ"1,Bn"\j۞A+:\N \A!D ݲo:؁@x|@As@h%k/+6?LbJx5YcZZ8[Z=93բEК {<$X_69vhK ރovn%X\c&;i ?,T=qh"72#HUΤ2I^ 2:wEXƴCT8FoX7 1s*Cc)1GQɰ r{4vE].fhzK9-peE^@)HƨviT>mP>"DƳd °902BaURC̑!&Λ%T_jn7sq 7:dZ'`!ߌSH` t!w8WQsB[;ڐ[W`.Yä!Ln%{kRMWkj[$$5PX pƻReBl}nf;Bk _'&9xl"ۍMv`I@JrҤ _ȯx~N.=8"I{a^ym8't-)TFg+V;@2fwLQ2;#&;4=~M/}4|2vS"kL >o:0IJ΢a %7y<4McJˣsNX7(kJe#d:̶oXi>qkUrڢFCDzvw[䭋#")5t>U=RĩG~5ǴG]QEs ž~dnJ&]n"{Aj޸C/>@@W5/JUOi8A^m PdIy@^CXpŹ*]|q3j0rXPЂb7V)8cUr={ḍ0>1Ӿ57NV݌Ka&#Fmkf2Rc7sGvlZtCL\p_ɴ<ɂ>0,9 1!b09'ϖSErG9M봸§1c+|K9)0vEbZ*h\Fmv>rβIN ƿf HY 'Ϋ:'gotS{R 4{Ε5UZ'x! dM A'bˣhөlPe8[Vi_ @jW@-!+q"Q'yl4C[81(g#T $t̤q\)&΅K¸rӴTi|pBmcm?oZϞyrmV#`𥼤fxjI Kpz.nTt[f;Wyv/(/Ѝ7U<2F4* H S^j:l3ExL5b4(`di#h^DP9.?էxs{[Z rJks{J8u 62)!\9.@ʌ|) -*# O9DVE(]HobBrzWa^4OmI*XR5[i*sp{YgRTh(Dz D}vMnPفrUt. A[xVIF &-3iWT:$. sL{ 1 r ˝~\`Z,VPfuyp}οWJaǔbzq),n#<π*E $홨8dKF-XX29k$+s.ȭʼn/\r'{9h8).ݘ9CrXͬ&vNGlyp*="u52}ipZl޺kOu#o\2>mq~:{fgVw 'M>qj< y nLF&Vi[ėލ 3?ڧw (Q0\;ə\K,0~M;J,sʝF 5rd-5[vѫ|Ex&*Ki VB,OG[H Rƿ +wWS%_i$E^.G8 ڸ~v$'fX" l3{' '4yj/t1ύ+}k_xۺUs 8i3Xn)M͗`b!TG%j):q_!Dx6ds 6-Vum'T?\\m)/@x mp'|76Lh{3!I(7W 39GI`ŔiUlYfALco Č;l* q"=V&T?v)Q3ImNT``FZ0(W @E,R*1`=t;P*QU+$g#/lͅp1Z)Aͩg/8aFH|`*,]v5b0@2_Ji+)K5"Uy>zo }5qN AAb0O@<`;%qS4%*vssĞS0ohnVP9 L[=OE8Yd&6$(l ׅz<U]Ǟ.RA^xjTCͤg}9ѡ X-;Q ^A>suj&;G ١ɫ~}$tԍ+ @CvaDd1퀧K ԒHھD]N#i`'eMP[1@|6tπmN[W ~~,o ]hzVcT;Cٿn|e3Kg\/8 kRE~-qtkŗKV+-ϕ .JwDrIQޖ4#>4/Ŕ){+ƾɌA;v{BkH1J8yV!l>յx qV2]{G]ɒfk2`u8D[]m%vz|2g8){zZVNQCwX鼸#PU/@VEKY>h(!d U^y&CDHVŻC9 :uFE*zvƫc3ȸRϭHrN!G}a\u@g U! 0]xV thmߒ~9% U N}vin%dNӠkjw^?p7^$St:Bd5QZWh]QAt,,yDT5 l EsP!8.~1 mtvyϦpA$Tc}`܌x;ﮱWK0o&Id+dIHtr[_ۅHӸck`\FĎL=٫0G+ZU28R8U{y<hqޔ>m9z0G@0:{DStPfAJ~fO{@. y[CxqcI[=͇ۑdL#q8ˢoγvys M2bTiVk~Fzv=C8_P4G9Ry=|)Co5f4H A݉=LׅO)pk9`mJ.r7jVJ}ύՖ̱5MF4_ajO*¡Rys(K"B& kK+xYIwS}A-?_ `/7H"|ڽDi4  i3511r<$v^G1Dʾ,S#:i 6&=}TCUC0׿VѦZUɧTtV =1j!S"l\Ҡe5DJoNkc=s~:z2 9QP/Nj7.~@n }#4ߨ"UNDW迴p?yAR735‡{"uߡ,C#e_Xmk o=S*Ifȃ}W-PbS )} yLXbe5p{h+LJ%R!j#IA%wzS Djj}>;+nn kɘʃ۶ OJ'Pqy;UO\"-/W,xe,8ʟӧ+5Qᘿ p,ʒLjFGβln>?5g N}7PS4 hafgVljbƥO7A!0{_%7ryf1*1g !W(Zqע`Մk0lo'+Iܐf&^M6ׯ&Zڦ(!6QfH}*`G}>ܘs}ȠXLXJ_Oj[&2?Ja֒}`1>`N>:%f6K?{y.:N |S,ϛYĸ*L_Bl[LZg!} 3sZ5Ql!z}VsB,#Rj3+vG#INfPtoŲXcG6$2k&6qH귇W 40qٻN>))cYxRJ7Q'꒏ՠ_EQ=:lNeM'xߩo jၦlJ9ـ~=U?W%P^8CMܕ}􃖉*2$e9!\As%bZdvEYQWQT&ꍧK!aC u⽔_5*n^ts;bu츑D)!Ж@2v݄+2=se= k,8.EtezJe @2a 0Ch1Wf%QKf8xT*Aشds_@a;-M2&B! -&8cv5_eMeH;]7nvg`iƞ N?r#򑐁'PR4DFj ?7ߜsc,5̖&9w<b MѐrNY;0ֱ*CG nf׹(Z~yqq{>ax<0UMP,lh w$@Vp}MI,Í?γ xHZl}{:#Y(eH1#W!b`<U/5B(wRAxsm) $ЃRbPb% B*2ר!&z?R֓B2">%UKq L6`_&AbKٕP3j.m?#BՉPCl; [V|Z+ykz$0I&Ш$]->JV#NI (QC4:E53kY&ﭑ}KH'ЄIW$|&]k ~S%V/]%6 ^ &95Ko G&aGD7fY@\Vh1$ M̽v}0Ą0xsnBch4qbjO48Ȯu*~O/^F*  YZ