python3-libsemanage-2.9-10.el8_10 > 6 6_6 3!pQp)Tξ7]mtZ`gar ]mtZ`*EcY} 46[:3V`dJkɤ& ԂB50Kts L>c 3FV|duⲿTI1ʩ9Kɑ/EdFMw:58'd{>E-vQgbRrv쳷|3\JkBNcjXTuq+.4L{yWzW$^w"u@WٯߓYgrJ---ddBVzGI?@bT{.][ɦ@^fr'?1eK ͑m’r9lnÜx'_0†m,'q5|UAI 1:{ӧ/L^2IjZXu-3 yTF\(Qp?HcЗ?l3)T@.fi}>$)Aȏ*G4ӆybEvx]^Ct~@|5\,l"znZR_0Exv8f1a2343b8f06b2d26e09c8e97ce658737080ac961cf1a48f7458c2f34b492d75e5002c216b46d3d4c92ded4dcccac26ef4094ef焉3!pQp)Tξ7]mtZ`gar ]mtZ`z O$[ܾaqG!&`{ 7]L Yn"6.pݨRf_O$ߙPАUo8=4; t_D;.v{|r1h&iǜp??d $ O  )5djp     t((89 X::BBGXHxIјXѠYѰZ[\]^bldefltu(vHw$xDyd֤֮֨Cpython3-libsemanage2.910.el8_10semanage python 3 bindings for libsemanageThe libsemanage-python3 package contains the python 3 bindings for developing SELinux management applications.ga)ord1-prod-x86build004.svc.aws.rockylinux.orgKojiRockyLGPLv2+infrastructure@rockylinux.orgUnspecifiedhttps://github.com/SELinuxProject/selinux/wikilinuxi686SӦӦX$AA큤ga)ga)ga)ga)ga)ga(ga(ga(d9aeb02895f511198f47beac01b854415c7d50da74fd87f823d515da5998be06d9aeb02895f511198f47beac01b854415c7d50da74fd87f823d515da5998be0679b12bc19bdac5fbc7e00cc778f2f0481c9a7bb1082d5366b09df42a69c5595712aafbdd9e637858ecf9254ab43c439072104fdf29b7c6665a888ac99d8c2b9f91d78a3db0848cfac5b7638d6121462efc115857bf35a31fa0cdfa8bc05c0aae../../../../usr/lib/python3.6/site-packages/_semanage.cpython-36m-i386-linux-gnu.sorootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootlibsemanage-2.9-10.el8_10.src.rpmlibsemanage-python3libsemanage-python3(x86-32)python3-libsemanagepython3-libsemanage(x86-32)@@@@@@@@@@@@     @/usr/libexec/platform-pythonlibc.so.6libc.so.6(GLIBC_2.0)libc.so.6(GLIBC_2.1.3)libc.so.6(GLIBC_2.3.4)libc.so.6(GLIBC_2.4)libpython3.6m.so.1.0libselinux-python3libsemanage(x86-32)libsemanage.so.1libsemanage.so.1(LIBSEMANAGE_1.0)libsemanage.so.1(LIBSEMANAGE_1.1)libsemanage.so.1(LIBSEMANAGE_3.4)python(abi)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PartialHardlinkSets)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)rtld(GNU_HASH)2.9-10.el8_103.63.0.4-14.6.0-14.0.4-14.0-15.2-14.14.3f@bb@b8`@_@_R^]µ\@\ @[%@[@[[Zz@ZK@ZZI@ZZ@Z}@Zz@Zu@ZTZfY@YyYJYV@Y@Yx@Y.XX @X@X@XJWH@W9W@Wk@W,@V@V@VIVɦV=@V9@UU@UUUa@UUQ@U+S@S@S @SSShS8@RRrF@R^RNRB@R@-@R:@R-@R)QdQ@QzQu&@QfQQ@P@PP@PQP@P@PP O@O0@Oĺ@OtNO;@OO@N@N@N@N@NNNw.Nw.Np@N\NLN1O@Md@MM)MQ0@Mt@MLuLF@KKsKKKf@K{@Ka|@KTM@K(K@KJJ@J@J$JJJ#J#Jyt@JjJW-@JS8J,@I@II2Io%@Ik0Ik0I7@I7@I1.HN@HN@HN@HǶH*H@H@HW@H=I@GOGOGOG@G[@G G@GGGW@GSGNG5@G0W@G'@FFFFIFIF&@FvFɂ@FFF` @F9F/BF/BE@E@EEɿ@EEEx@El$E4D@D@D@DC@DDD@D@D{DDX@D@D@Dhm@Dhm@Dhm@D_2D?D*vD*vDDCCi@CtC@C@CCC@CC @Cǖ@Cǖ@Cǖ@Cǖ@C@C[C[C @C @C,C @C @CCf@CqCC}@C+CBCYCYC{@Cx|@CtCtCqCp@Cp@CoACiCf@CbC`@C_oC^@C\CX@CWCTCTCTCP@COCLCJWCFc@CBnCA@C:C3@C1K@C/C(C@C Vit Mojzis - 2.9-10Vit Mojzis - 2.9-9Vit Mojzis - 2.9-8Vit Mojzis - 2.9-7Petr Lautrbach - 2.9-6Petr Lautrbach - 2.9-5Vit Mojzis - 2.9-4Vit Mojzis - 2.9-3Vit Mojzis - 2.9-2Petr Lautrbach - 2.9-1Petr Lautrbach - 2.8-5Petr Lautrbach - 2.8-4Petr Lautrbach - 2.8-3.1Petr Lautrbach - 2.8-2Petr Lautrbach - 2.8-1Petr Lautrbach - 2.8-0.rc3.1Petr Lautrbach - 2.8-0.rc2.1Petr Lautrbach - 2.8-0.rc1.1Petr Lautrbach - 2.7-12Petr Lautrbach - 2.7-11Petr Lautrbach - 2.7-10Igor Gnatenko - 2.7-9Fedora Release Engineering - 2.7-8Igor Gnatenko - 2.7-7Iryna Shcherbina - 2.7-6Petr Lautrbach - 2.7-5Petr Lautrbach - 2.7-4Zbigniew Jędrzejewski-Szmek - 2.7-3Zbigniew Jędrzejewski-Szmek - 2.7-2Petr Lautrbach - 2.7-1Fedora Release Engineering - 2.6-6Fedora Release Engineering - 2.6-5Petr Lautrbach - 2.6-4Petr Lautrbach - 2.6-3Petr Lautrbach - 2.6-2Petr Lautrbach - 2.6-1.1Fedora Release Engineering - 2.5-10Charalampos Stratakis - 2.5-9Petr Lautrbach 2.5-8Petr Lautrbach 2.5-7Fedora Release Engineering - 2.5-6Petr Lautrbach - 2.5-5Petr Lautrbach - 2.5-4Petr Lautrbach - 2.5-3Petr Lautrbach 2.5-2Petr Lautrbach 2.5-1Petr Lautrbach 2.5-0.1.rc1Fedora Release Engineering - 2.4-6Robert Kuska - 2.4-5Petr Lautrbach 2.4-4Adam Jackson 2.4-3Petr Lautrbach 2.4-2Petr Lautrbach 2.4-0.6Fedora Release Engineering - 2.3-7Petr Lautrbach 2.4-0.5Petr Lautrbach 2.4-0.4Petr Lautrbach 2.4-0.3Fedora Release Engineering - 2.3-6Miroslav Grepl - 2.3-5Tom Callaway - 2.3-4Fedora Release Engineering - 2.3-3Kalev Lember - 2.3-2Dan Walsh - 2.3-1Dan Walsh - 2.2-3Dan Walsh - 2.2-2Dan Walsh - 2.2-1Dan Walsh - 2.1.10-14Dan Walsh - 2.1.10-13Dan Walsh - 2.1.10-12Dan Walsh - 2.1.10-11Dan Walsh - 2.1.10-10Dan Walsh - 2.1.10-9Dan Walsh - 2.1.10-8Dan Walsh - 2.1.10-7Dan Walsh - 2.1.10-6Dan Walsh - 2.1.10-5Dan Walsh - 2.1.10-4Dan Walsh - 2.1.10-3Dan Walsh - 2.1.10-2Dan Walsh - 2.1.10-1Dan Walsh 2.1.9-4Dan Walsh 2.1.9-3Dan Walsh - 2.1.9-2Dan Walsh - 2.1.9-1David Malcolm - 2.1.8-6David Malcolm - 2.1.8-5Fedora Release Engineering - 2.1.8-4Dan Walsh - 2.1.8-3Dan Walsh - 2.1.8-2Dan Walsh - 2.1.8-1Dan Walsh - 2.1.7-2Dan Walsh - 2.1.7-1Dan Walsh - 2.1.6-3Fedora Release Engineering - 2.1.6-2Dan Walsh - 2.1.6-2Dan Walsh - 2.1.6-1Dan Walsh - 2.1.5-4Dan Walsh - 2.1.5-3Dan Walsh - 2.1.5-2Dan Walsh - 2.1.5-1Dan Walsh - 2.1.4-2Dan Walsh - 2.1.4-2Dan Walsh - 2.1.4-1Dan Walsh - 2.1.3-2Dan Walsh - 2.1.3-1Dan Walsh - 2.1.2-1Dan Walsh - 2.1.0-1Dan Walsh - 2.0.46-6Dan Walsh - 2.0.46-5Dan Walsh - 2.0.46-4Fedora Release Engineering - 2.0.46-3David Malcolm - 2.0.46-2Dan Walsh - 2.0.46-1Thomas Spura - 2.0.45-6David Malcolm - 2.0.45-5David Malcolm - 2.0.45-4Dan Walsh - 2.0.45-3Dan Walsh - 2.0.45-2Dan Walsh - 2.0.45-1Dan Walsh - 2.0.44-2Dan Walsh - 2.0.44-1Dan Walsh - 2.0.43-4Dan Walsh - 2.0.43-3Dan Walsh - 2.0.43-2Dan Walsh - 2.0.43-1Dan Walsh - 2.0.42-1Dan Walsh - 2.0.41-1Dan Walsh - 2.0.39-1Dan Walsh - 2.0.38-2Dan Walsh - 2.0.38-1Dan Walsh - 2.0.37-1Dan Walsh - 2.0.36-2Dan Walsh - 2.0.36-1Dan Walsh - 2.0.35-2Dan Walsh - 2.0.35-1Fedora Release Engineering - 2.0.33-3Dan Walsh - 2.0.33-2Dan Walsh - 2.0.33-1Dan Walsh - 2.0.32-1Dan Walsh - 2.0.31-5Dan Walsh - 2.0.31-4Fedora Release Engineering - 2.0.31-3Dan Walsh - 2.0.31-2Dan Walsh - 2.0.31-1Dan Walsh - 2.0.30-3Ignacio Vazquez-Abrams - 2.0.30-2Dan Walsh - 2.0.30-1Ignacio Vazquez-Abrams - 2.0.29-2Dan Walsh - 2.0.28-1Dan Walsh - 2.0.28-2Dan Walsh - 2.0.28-1Dan Walsh - 2.0.27-3Dan Walsh - 2.0.27-2Dan Walsh - 2.0.27-1Dan Walsh - 2.0.26-1Dan Walsh - 2.0.25-3Tom "spot" Callaway - 2.0.25-2Dan Walsh - 2.0.25-1Dan Walsh - 2.0.24-1Dan Walsh - 2.0.23-1Dan Walsh - 2.0.22-1Dan Walsh - 2.0.20-1Dan Walsh - 2.0.19-1Dan Walsh - 2.0.18-1Dan Walsh - 2.0.16-1Dan Walsh - 2.0.15-2Dan Walsh - 2.0.15-1Dan Walsh - 2.0.14-5Dan Walsh - 2.0.14-3Dan Walsh - 2.0.14-2Dan Walsh - 2.0.14-1Dan Walsh - 2.0.12-1Dan Walsh - 2.0.11-1Dan Walsh - 2.0.10-2Dan Walsh - 2.0.10-1Dan Walsh - 2.0.9-1Dan Walsh - 2.0.6-2Dan Walsh - 2.0.6-1Dan Walsh - 2.0.5-1Dan Walsh - 2.0.4-1Dan Walsh - 2.0.3-5Dan Walsh - 2.0.3-4Dan Walsh - 2.0.3-3Dan Walsh - 2.0.3-2Dan Walsh - 2.0.3-1Dan Walsh - 2.0.2-1Dan Walsh - 2.0.1-2Dan Walsh - 2.0.1-1Dan Walsh - 2.0.0-1Dan Walsh - 1.10.1-1Dan Walsh - 1.9.2-1Dan Walsh - 1.9.1-3Jeremy Katz - 1.9.1-2Dan Walsh - 1.9.1-1Dan Walsh - 1.8-1Dan Walsh - 1.6.17-1Dan Walsh - 1.6.16-3Dan Walsh - 1.6.16-2Dan Walsh - 1.6.16-1Dan Walsh - 1.6.15-1Dan Walsh - 1.6.13-3Dan Walsh - 1.6.13-2Dan Walsh - 1.6.13-1Dan Walsh - 1.6.12-2Dan Walsh - 1.6.12-1Dan Walsh - 1.6.11-1Dan Walsh - 1.6.9-1Dan Walsh - 1.6.8-2Dan Walsh - 1.6.8-1Dan Walsh - 1.6.7-3Dan Walsh - 1.6.7-2Dan Walsh - 1.6.7-1Dan Walsh - 1.6.6-1Dan Walsh - 1.6.3-1Dan Walsh - 1.6.2-2Dan Walsh - 1.6.2-1Dan Walsh - 1.6-1Dan Walsh - 1.5.28-1Dan Walsh - 1.5.26-1Dan Walsh - 1.5.23-1Jesse Keating - 1.5.21-2.1Dan Walsh - 1.5.21-2Dan Walsh - 1.5.21-1Jesse Keating - 1.5.20-1.1Dan Walsh 1.5.20-1Dan Walsh 1.5.19-1Dan Walsh 1.5.18-1Dan Walsh 1.5.16-1Dan Walsh 1.5.15-1Dan Walsh 1.5.14-2Dan Walsh 1.5.14-1Dan Walsh 1.5.9-1Dan Walsh 1.5.8-1Dan Walsh 1.5.6-1Dan Walsh 1.5.4-2Dan Walsh 1.5.4-1Dan Walsh 1.5.3-3Dan Walsh 1.5.3-2Dan Walsh 1.5.3-1Dan Walsh 1.5.1-2Dan Walsh 1.5.1-1Jesse Keating Dan Walsh 1.4-1Dan Walsh 1.3.64-1Dan Walsh 1.3.63-1Dan Walsh 1.3.61-1Dan Walsh 1.3.59-1Dan Walsh 1.3.56-2Dan Walsh 1.3.56-1Dan Walsh 1.3.53-3Dan Walsh 1.3.53-2Dan Walsh 1.3.53-1Dan Walsh 1.3.52-1Dan Walsh 1.3.51-1Dan Walsh 1.3.48-1Dan Walsh 1.3.43-1Dan Walsh 1.3.41-1Dan Walsh 1.3.39-1Dan Walsh 1.3.38-1Dan Walsh 1.3.36-1Dan Walsh 1.3.35-1Dan Walsh 1.3.34-1Dan Walsh 1.3.32-1Dan Walsh 1.3.30-1Dan Walsh 1.3.28-1Dan Walsh 1.3.24-1Dan Walsh 1.3.20-1Dan Walsh 1.3.20-1Dan Walsh 1.3.18-1Dan Walsh 1.3.14-1Dan Walsh 1.3.11-1Dan Walsh 1.3.10-1Dan Walsh 1.3.9-1Dan Walsh 1.3.8-1Dan Walsh 1.3.7-1Dan Walsh 1.3.5-1Dan Walsh 1.3.4-1Dan Walsh 1.3.3-1Dan Walsh 1.3.2-1Dan Walsh 1.3.1-1Dan Walsh 1.1.6-1Dan Walsh 1.1.3-1- Preserve file context and ownership in policy store (RHEL-17509)- allow spaces in user/group names (#2042408) - always write kernel policy when check_ext_changes is specified (#2089802)- Bump release to get around OSCI issues- Trivial style fixes - Free contents of modkey in semanage_direct_remove - Fix USE_AFTER_FREE (CWE-672) in semanage_direct_write_langext() - add missing include to boolean_record.c - move module hashing into libsemanage - move compressed file handling into a separate object - clean up semanage_direct_commit() a bit - optionally rebuild policy when modules are changed externally - add command-line option to detect module changes (#2049186)- sync filesystem with sandbox (#1913224)- Revert "genhomedircon: check usepasswd" (rhbz#1871786) - semanage.conf - improve usepasswd=False explanation (rhbz#1871786) - semanage.conf - expand list of ignoredirs (rhbz#1871786)- genhomedircon: check usepasswd (rhbz#1871786)- Fsync final files before rename (#1838762)- Add support for DCCP and SCTP protocols (#1563742)- SELinux userspace 2.9 release- genhomedircon - improve handling large groups- Fix RESOURCE_LEAK and USE_AFTER_FREE coverity scan defects- reset umask before creating directories - Include user name in ROLE_REMOVE audit events- Don't build the Python 2 subpackage (#1567359)- SELinux userspace 2.8 release- SELinux userspace 2.8-rc3 release candidate- SELinux userspace 2.8-rc2 release candidate- SELinux userspace 2.8-rc1 release candidate- build: Replace PYSITEDIR with PYTHONLIBDIR - direct_api.c: Fix iterating over array (#1557468)- Revert "remove access() check to make setuid programs work" (#1557468)- properly check return value of iterate function - Use umask(0077) for fopen() write operations - Return commit number if save-previous false - Allow tmp files to be kept if a compile fails - build: follow standard semantics for DESTDIR and PREFIX - Improve warning for installing disabled module - silence clang static analyzer report - remove access() check to make setuid programs work- Escape macros in %changelog- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild- Switch to %ldconfig_scriptlets- Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)- free genhomedircon fallback user - Rebuild with libsepol-2.7-3 and libselinux-2.7-6- Add support for listing fcontext.homedirs file (#1409813)- Add Provides for the old names without %_isa- Python 2 binary package renamed to python2-libsemanage See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3 - Python 3 binary package renamed to python3-libsemanage- Update to upstream release 2017-08-04 - Use 'sefcontext_compile -r' when it's run during SELinux policy build- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- Follow upstream and rename _semanage.so to _semanage.cpython-36m-x86_64-linux-gnu.so- Do not list duplicate port entries after setting a boolean (#1439875)- Fix FTBFS - fatal error (#1427903)- Update to upstream release 2016-10-14- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild- Rebuild for Python 3.6- Fixes bug preventing the installation of base modules - make distclean target work - Do not always print a module name warning - Use pp module name instead of filename when installing module - tests: Do not force using gcc - genhomedircon: remove hardcoded refpolicy strings - genhomedircon: add support for %group syntax - genhomedircon: generate contexts for logins mapped to the default user - Validate and compile file contexts before installing - Swap tcp and udp protocol numbers- Rebuilt with libsepol-2.5-9 and libselinux-2.5-11- https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages- Sort object files for deterministic linking order - Support overriding Makefile RANLIB - Respect CC and PKG_CONFIG environment variable- Fix multiple spelling errors - genhomedircon: %{USERID} and %{USERNAME} support and code cleanup- Enable expand-check by default (#1319652)- Use fully versioned arch-specific requires- Update to upstream release 2016-02-23- Update to upstream rc1 release 2016-01-07- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild- Rebuilt for Python3.5 rebuild- Save homedir_template in the policy store for genhomedircon https://bugs.gentoo.org/558686- Pass ldflags into the build so hardening works- semanage_migrate_store: use /usr/bin/python3 - move semanage_migrate_store script to libsemanage-python3- Allow to use compressed modules without a compression extension- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- add /var/lib/selinux/tmp directory- semanage_migrate_store: add -r option for migrating inside chroots- Update to upstream release 2.4- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild- Skip policy module re-link when only setting booleans. * patch from Stephen Smalley- fix license handling- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild- Rebuilt for https://fedoraproject.org/wiki/Changes/Python_3.4- Update to upstream * Fix memory leak in semanage_genhomedircon from Thomas Hurd.- libsemanage: fix memory leak in semanage_genhomedircon - Patch from THomas Hurd- Move semanage.conf man page from devel package to main package- Update to upstream * Avoid duplicate list entries from Dan Walsh. * Add audit support to libsemanage from Dan Walsh. * Remove policy.kern and replace with symlink from Dan Walsh. * Apply a MAX_UID check for genhomedircon from Laurent Bigonville. * Fix man pages from Laurent Bigonville.- Cleanup handling of missing mls_range to fix problems with useradd -Z - Fix auditing of login record changes, roles were not working correctly. Resolves: #952237- Fix errors found by coverity Resolves: #952237- Do not fail on missing SELinux User Record when adding login record- Add msg to audit records- Do not write error message to screen when looking for previous record for auditing. - Add mls_range from user record if the MLS range is not specified by the seuser add record. - Error out if seuser or mls range is not specified when adding user records- Create symlink from policy.kern to active kernel.- Unlink policy.kern when done to save space.- Move handling of role audit records into the library - Patch stops semanage from removing user record while in use- Remove dependance on selinux-policy, /etc/selinux should be owned by libsemanage, and selinux-policy can require it.- Allways build python3 version-- Fix test suite to build- Revert some changes which are causing the wrong policy version file to be created- Update to upstream * Add sefcontext_compile to compile regex everytime policy is rebuilt * Cleanup/fix enable/disable/remove module. * redo genhomedircon minuid * fixes from coverity * semanage_store: do not leak memory in semanage_exec_prog * genhomedircon: remove useless conditional in get_home_dirs * genhomedircon: double free in get_home_dirs * fcontext_record: do not leak on error in semanage_fcontext_key_create * genhomedircon: do not leak on failure in write_gen_home_dir_context * semanage_store: do not leak fd * genhomedircon: do not leak shells list * semanage_store: do not leak on strdup failure * semanage_store: rewrite for readability- Add selinux-policy as a requires to get /etc/selinux owned- Update to latest patches from eparis/Upstream - libsemanage: fixes from coverity - libsemange: redo genhomedircon minuid- Fix handling of missing semanage permissive -d foo, not failing correctly - Previous to this fix the first module beginning with foo would get deleted.- Update to upstream * libsemanage: do not set soname needlessly * libsemanage: remove PYTHONLIBDIR and ruby equivalent * do boolean name substitution * Fix segfault for building standard policies.- rebuild for https://fedoraproject.org/wiki/Features/Python_3.3- remove rhel logic from with_python3 conditional- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- Attempt to allocate memory for selinux_binary_policy_path and free memory - allocated by asprintf.- Fix asprintf within an asprintf call- Update to upstream * remove build warning when build swig c files * additional makefile support for rubywrap * ignore 80 column limit for readability * semanage_store: fix snprintf length argument by using asprintf * Use default semanage.conf as a fallback * use after free in python bindings- Apply patch from Sven Vermeulen to fix problem with python3 bindings.- Update to upstream * Alternate path for semanage.conf * do not link against libpython, this is considered bad in Debian * Allow to build for several ruby version * fallback-user-level- Check in correct patch.- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild- Add patch form Xin Ouyang to make library use private semanage.conf-Update to upstream * add ignoredirs config for genhomedircon * Fallback_user_level can be NULL if you are not using MLS- Rebuild with latest libsepol- Rebuild with latest libsepol- Add support for ignoredirs param in /etc/selinux/semanage.conf- Upgrade to upstream * regenerate .pc on VERSION change * maintain mode even if umask is tighter * semanage.conf man page * create man5dir if not exist- Fix handling of umask, so files get created with the correct label.- Add Guido Trentalancia semanage.conf man page-Update to upstream * Create a new preserve_tunables flag * tree: default make target to all not * fix semanage_store_access_check calling arguments- Add support for preserving tunables-Update to upstream * python wrapper makefile changes-Update to upstream 2.1.2 2011-08-17 * print error debug info for buggy fc * introduce semanage_set_root and friends * throw exceptions in python rather than return * python3 support. * patch for MCS/MLS in user files 2.1.1 2011-08-01 * Remove generated files, expand .gitignore * Use -Werror and change a few prototypes to support it- Update to upstream * Release, minor version bump- More fixes for disabled modules- Change libsemanage mechanism for handling disabled modules. Now it will only create a flag for a module indicating the module is disabled. MODULE.pp.disabled, it will no longer rename the module. This way we can ship active modules in rpm.- Add semanage_set_selinux_path, to allow semodule to work on alternate selinux pools- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- big reworking of the support-multiple-python-builds patch to deal with PEP 3149: the latest Python 3.2 onwards uses include paths and library names that don't fit prior naming patterns, and so we must query python3-config for this information. To complicate things further, python 2's python-config doesn't understand all of the options needed ("--extension-suffix"). I've thus added new Makefile variables as needed, to be supplied by the specfile by invoking the appropriate config tool (or by hardcoding the old value for "--extension-suffix" i.e. ".so") - rework python3 manifest for PEP 3149, and rebuild for newer python3- Update to upstream * Fix compliation under GCC 4.6 by Justin Mattock- rebuild with python3.2 http://lists.fedoraproject.org/pipermail/devel/2010-August/141368.html- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild- add python3 subpackage- Fix -devel package to point at the correct shared library- Move shared library to /usr/lib- Update to upstream * Add enable/disable patch support from Dan Walsh. * Add usepasswd flag to semanage.conf to disable genhomedircon using passwd from Dan Walsh. * regenerate swig wrappers- Allow disable of usepasswd- Update to upstream * Replace usage of fmemopen() with sepol_policy_file_set_mem() since glibc < 2.9 does not support binary mode ('b') for fmemopen'd streams.- Cleanup spec file- Splect libsemanage.a into a static subpackage to keep fedora packaging guidelines happy- Rebuild all c programs with -fPIC- Update to upstream * Move libsemanage.so to /usr/lib * Add NAME lines to man pages from Manoj Srivastava- Update to upstream * Move load_policy from /usr/sbin to /sbin from Dan Walsh.- Update to upstream * Add pkgconfig file from Eamon Walsh. * Add semanage_set_check_contexts() function to disable calling setfiles- Update to upstream * make swigify- Dont relabel /root with genhomedircon- Update to upstream * Change semodule upgrade behavior to install even if the module is not present from Dan Walsh. * Make genhomedircon trim excess '/' from homedirs from Dan Walsh.- Update to upstream * Fix persistent dontaudit support to rebuild policy if the dontaudit state is changed from Chad Sellers. - Move load_policy to /sbin- Add enable/disable modules- Update to upstream * Changed bzip-blocksize=0 handling to support existing compressed modules in the store.- Make sure /root is not used in genhomedircon- Revert hard linking of files between tmp/active/previous. - Enable configuration of bzip behavior from Stephen Smalley. - bzip-blocksize=0 to disable compression and decompression support. - bzip-blocksize=1..9 to set the blocksize for compression. - bzip-small=true to reduce memory usage for decompression.- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- Put check for /root back into genhomedircon- Update to upstream- Update to upstream * Ruby bindings from David Quigley.- Return error on invalid file- Fix typo- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild- Fix link to only link on sandbox- Update to upstream * Policy module compression (bzip) support from Dan Walsh. * Hard link files between tmp/active/previous from Dan Walsh.- Fix up patch to get it upstreamed- Rebuild for Python 2.6- Add semanage_mls_enabled() interface from Stephen Smalley.- Rebuild for Python 2.6- Update to upstream * Add USER to lines to homedir_template context file from Chris PeBenito.- Add compression support- Update to upstream * allow fcontext and seuser changes without rebuilding the policy from Dan Walsh- Additional fixes for Don't rebuild on fcontext or seuser modifications- Don't rebuild on fcontext or seuser modifications- Update to upstream * Modify genhomedircon to skip groupname entries. Ultimately we need to expand them to the list of users to support per-role homedir labeling when using the groupname syntax.- Update to upstream * Fix bug in genhomedircon fcontext matches logic from Dan Walsh. Strip any trailing slash before appending /*$.- Another fix for genhomedircon- fix license tag- Update to upstream * Do not call genhomedircon if the policy was not rebuilt from Stephen Smalley. Fixes semanage boolean -D seg fault (bug 441379).- Update to upstream * make swigify- Update to upstream * Use vfork rather than fork for libsemanage helpers to reduce memory overhead as suggested by Todd Miller.- Update to upstream * Free policydb before fork from Joshua Brindle. * Drop the base module immediately after expanding to permit memory re-use from Stephen Smalley.- Update to upstream * Use sepol_set_expand_consume_base to reduce peak memory usage when using semodule- Update to upstream * Fix genhomedircon to not override a file context with a homedir context from Todd Miller.- Update to upstream * Fix spurious out of memory error reports. * Merged second version of fix for genhomedircon handling from Caleb Case.- Update to upstream * Merged fix for genhomedircon handling of missing HOME_DIR or HOME_ROOT templates from Caleb Case.- Stop differentiating on user for homedir labeling- Update to upstream * Fix genhomedircon handling of shells and missing user context template from Dan Walsh. * Copy the store path in semanage_select_store from Dan Walsh. - Add expand-check=0 to semanage.conf- Fix handling of /etc/shells so genhomedircon will work- Allow semanage_genhomedircon to work with out a USER int homedir.template- Fix semanage_select_store to allocate memory, fixes crash on invalid store- Upgrade to latest from NSA * Call rmdir() rather than remove() on directory removal so that errno isn't polluted from Stephen Smalley. * Allow handle_unknown in base to be overridden by semanage.conf from Stephen Smalley.- Upgrade to latest from NSA * ustr cleanups from James Antill. * Ensure that /root gets labeled even if using the default context from Dan Walsh.- Upgrade to latest from NSA * Fix ordering of file_contexts.homedirs from Todd Miller and Dan Walsh.- Fix sort order on generated homedir context- Upgrade to latest from NSA * Fix error checking on getpw*_r functions from Todd Miller. * Make genhomedircon skip invalid homedir contexts from Todd Miller. * Set default user and prefix from seusers from Dan Walsh. * Add swigify Makefile target from Dan Walsh.- Upgrade to latest from NSA * Pass CFLAGS to CC even on link command, per Dennis Gilmore. * Clear errno on non-fatal errors to avoid reporting them upon a later error that does not set errno. * Improve reporting of system errors, e.g. full filesystem or read-only filesystem from Stephen Smalley. - Fix segfault in genhomedircon when using bad user names- Fix genhomedircon code to only generate valid context - Fixes autorelabel problem- Upgrade to latest from NSA * Change to use getpw* function calls to the _r versions from Todd Miller.- Upgrade to latest from NSA- Upgrade to latest from NSA * Allow dontaudits to be turned off via semanage interface when updating policy- Add ability to load a policy without dontaudit rules -- Rebuild to fix segfault on x86 platforms, swigify on each build- Rebuild for rawhide- Apply patch to fix dependencies in spec file from Robert Scheck- Upgrade to latest from NSA * Fix to libsemanage man patches so whatis will work better from Dan Walsh- Upgrade to latest from NSA - Merged optimizations from Stephen Smalley. - do not set all booleans upon commit, only those whose values have changed - only install the sandbox upon commit if something was rebuilt- Add SELinux to Man page Names so man -k will work- Merged dbase_file_flush patch from Dan Walsh. - This removes any mention of specific tools (e.g. semanage) - from the comment header of the auto-generated files, - since there are multiple front-end tools.- Upgrade to latest from NSA * Merged Makefile test target patch from Caleb Case. * Merged get_commit_number function rename patch from Caleb Case. * Merged strnlen -> strlen patch from Todd Miller.- Upgrade to latest from NSA * Merged python binding fix from Dan Walsh. * Updated version for stable branch.- Upgrade to latest from NSA * Merged patch to optionally reduce disk usage by removing the backup module store and linked policy from Karl MacMillan * Merged patch to correctly propagate return values in libsemanage- Apply Karl MacMillan patch to get proper error codes.- rebuild against python 2.5- Upgrade to latest from NSA * Merged patch to compile wit -fPIC instead of -fpic from Manoj Srivastava to prevent hitting the global offest table limit. Patch changed to include libselinux and libsemanage in addition to libsepol.- Upgrade to latest from NSA * Updated version for release.- Upgrade to latest from NSA * Merged patch to skip reload if no active store exists and the store path doesn't match the active store path from Dan Walsh. * Merged patch to not destroy sepol handle on error path of connect from James Athey. * Merged patch to add genhomedircon path to semanage.conf from James Athey.- Fix semanage to not load if is not the correct policy type and it is installing- Fix requires lines- Upgrade to latest from NSA * Make most copy errors fatal, but allow exceptions for file_contexts.local, seusers, and netfilter_contexts if the source file does not exist in the store.- Upgrade to latest from NSA * Merged separate local file contexts patch from Chris PeBenito. * Merged patch to make most copy errors non-fatal from Dan Walsh.- Change other updates to be non-fatal- Change netfilter stuff to be non-fatal so update can proceed.- Upgrade to latest from NSA * Merged netfilter contexts support from Chris PeBenito.- Rebuild for new gcc- Upgrade to latest from NSA * Merged support for read operations on read-only fs from Caleb Case (Tresys Technology).- Upgrade to latest from NSA * Lindent. * Merged setfiles location check patch from Dan Walsh.- Upgrade to latest from NSA * Merged several fixes from Serge Hallyn: dbase_file_cache: deref of uninit data on error path. dbase_policydb_cache: clear fp to avoid double fclose semanage_fc_sort: destroy temp on error paths- Handle setfiles being in /sbin or /usr/sbin- Upgrade to latest from NSA * Updated default location for setfiles to /sbin to match policycoreutils. This can also be adjusted via semanage.conf using the syntax: [setfiles] path = /path/to/setfiles args = -q -c $@ $< [end]- Spec file cleanup from n0dalus+redhat@gmail.com- Add /usr/include/semanage to spec file- Upgrade to latest from NSA * Merged fix warnings patch from Karl MacMillan.- Upgrade to latest from NSA * Merged updated file context sorting patch from Christopher Ashworth, with bug fix for escaped character flag. * Merged file context sorting code from Christopher Ashworth (Tresys Technology), based on fc_sort.c code in refpolicy. * Merged python binding t_output_helper removal patch from Dan Walsh. * Regenerated swig files.- Fix to work with new version of swig - Upgrade to latest from NSA * Merged corrected fix for descriptor leak from Dan Walsh.- Fix leaky descriptor- Upgrade to latest from NSA * Merged Makefile PYLIBVER definition patch from Dan Walsh. * Merged man page reorganization from Ivan Gyurdiev.- Make work on RHEL4 - Upgrade to latest from NSA * Merged abort early on merge errors patch from Ivan Gyurdiev. * Cleaned up error handling in semanage_split_fc based on a patch by Serge Hallyn (IBM) and suggestions by Ivan Gyurdiev. * Merged MLS handling fixes from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged bug fix for fcontext validate handler from Ivan Gyurdiev. * Merged base_merge_components changes from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged paths array patch from Ivan Gyurdiev. * Merged bug fix patch from Ivan Gyurdiev. * Merged improve bindings patch from Ivan Gyurdiev. * Merged use PyList patch from Ivan Gyurdiev. * Merged memory leak fix patch from Ivan Gyurdiev. * Merged nodecon support patch from Ivan Gyurdiev. * Merged cleanups patch from Ivan Gyurdiev. * Merged split swig patch from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged optionals in base patch from Joshua Brindle. * Merged treat seusers/users_extra as optional sections patch from Ivan Gyurdiev. * Merged parse_optional fixes from Ivan Gyurdiev.- bump again for double-long bug on ppc(64)- Fix handling of seusers and users_map file- Upgrade to latest from NSA * Merged seuser/user_extra support patch from Joshua Brindle. * Merged remote system dbase patch from Ivan Gyurdiev.- rebuilt for new gcc4.1 snapshot and glibc changes- Upgrade to latest from NSA * Merged clone record on set_con patch from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged fname parameter patch from Ivan Gyurdiev. * Merged more size_t -> unsigned int fixes from Ivan Gyurdiev. * Merged seusers.system patch from Ivan Gyurdiev. * Merged improve port/fcontext API patch from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged seuser -> seuser_local rename patch from Ivan Gyurdiev. * Merged set_create_store, access_check, and is_connected interfaces from Joshua Brindle.- Upgrade to latest from NSA * Regenerate python wrappers.- Upgrade to latest from NSA * Merged pywrap Makefile diff from Dan Walsh. * Merged cache management patch from Ivan Gyurdiev. * Merged bugfix for dbase_llist_clear from Ivan Gyurdiev. * Merged remove apply_local function patch from Ivan Gyurdiev. * Merged only do read locking in direct case patch from Ivan Gyurdiev. * Merged cache error path memory leak fix from Ivan Gyurdiev. * Merged auto-generated file header patch from Ivan Gyurdiev. * Merged pywrap test update from Ivan Gyurdiev. * Merged hidden defs update from Ivan Gyurdiev.- Break out python out of regular Makefile- Upgrade to latest from NSA * Merged disallow port overlap patch from Ivan Gyurdiev. * Merged join prereq and implementation patches from Ivan Gyurdiev. * Merged join user extra data part 2 patch from Ivan Gyurdiev. * Merged bugfix patch from Ivan Gyurdiev. * Merged remove add_local/set_local patch from Ivan Gyurdiev. * Merged user extra data part 1 patch from Ivan Gyurdiev. * Merged size_t -> unsigned int patch from Ivan Gyurdiev. * Merged calloc check in semanage_store patch from Ivan Gyurdiev, bug noticed by Steve Grubb. * Merged cleanups after add/set removal patch from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged const in APIs patch from Ivan Gyurdiev. * Merged validation of local file contexts patch from Ivan Gyurdiev. * Merged compare2 function patch from Ivan Gyurdiev. * Merged hidden def/proto update patch from Ivan Gyurdiev.- Upgrade to latest from NSA * Re-applied string and file optimization patch from Russell Coker, with bug fix. * Reverted string and file optimization patch from Russell Coker. * Clarified error messages from parse_module_headers and parse_base_headers for base/module mismatches.- Upgrade to latest from NSA * Clarified error messages from parse_module_headers and parse_base_headers for base/module mismatches. * Merged string and file optimization patch from Russell Coker. * Merged swig header reordering patch from Ivan Gyurdiev. * Merged toggle modify on add patch from Ivan Gyurdiev. * Merged ports parser bugfix patch from Ivan Gyurdiev. * Merged fcontext swig patch from Ivan Gyurdiev. * Merged remove add/modify/delete for active booleans patch from Ivan Gyurdiev. * Merged man pages for dbase functions patch from Ivan Gyurdiev. * Merged pywrap tests patch from Ivan Gyurdiev.- Patch to fix add- Upgrade to latest from NSA * Merged patch series from Ivan Gyurdiev. This includes patches to: - separate file rw code from linked list - annotate objects - fold together internal headers - support ordering of records in compare function - add active dbase backend, active booleans - return commit numbers for ro database calls - use modified flags to skip rebuild whenever possible - enable port interfaces - update swig interfaces and typemaps - add an API for file_contexts.local and file_contexts - flip the traversal order in iterate/list - reorganize sandbox_expand - add seusers MLS validation - improve dbase spec/documentation - clone record on set/add/modify- Add Ivans patch to turn on ports- Remove patch since upstream does the right thing- Upgrade to latest from NSA * Merged further header cleanups from Ivan Gyurdiev. * Merged toggle modified flag in policydb_modify, fix memory leak in clear_obsolete, polymorphism vs headers fix, and include guards for internal headers patches from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged toggle modified flag in policydb_modify, fix memory leak in clear_obsolete, polymorphism vs headers fix, and include guards for internal headers patches from Ivan Gyurdiev.- Upgrade to latest from NSA * Added file-mode= setting to semanage.conf, default to 0644. Changed semanage_copy_file and callers to use this mode when installing policy files to runtime locations.- rebuilt- Fix mode of output seusers file- Upgrade to latest from NSA * Changed semanage_handle_create() to set do_reload based on is_selinux_enabled(). This prevents improper attempts to load policy on a non-SELinux system.- Upgrade to latest from NSA * Dropped handle from user_del_role interface. * Removed defrole interfaces.- Upgrade to latest from NSA * Merged Makefile python definitions patch from Dan Walsh. * Removed is_selinux_mls_enabled() conditionals in seusers and users file parsers.- Add additional swig objects * Merged wrap char*** for user_get_roles patch from Joshua Brindle. * Merged remove defrole from sepol patch from Ivan Gyurdiev. * Merged swig wrappers for modifying users and seusers from Joshua Brindle.- Add additional swig objects- Upgrade to latest from NSA * Fixed free->key_free bug. * Merged clear obsolete patch from Ivan Gyurdiev. * Merged modified swigify patch from Dan Walsh (original patch from Joshua Brindle). * Merged move genhomedircon call patch from Chad Sellers.- Add genhomedircon patch from Joshua Brindle- Add swigify patch from Joshua Brindle- Upgrade to latest from NSA * Merged move seuser validation patch from Ivan Gyurdiev. * Merged hidden declaration fixes from Ivan Gyurdiev, with minor corrections.- Upgrade to latest from NSA * Merged cleanup patch from Ivan Gyurdiev. This renames semanage_module_conn to semanage_direct_handle, and moves sepol handle create/destroy into semanage handle create/destroy to allow use even when disconnected (for the record interfaces).- Upgrade to latest from NSA * Clear modules modified flag upon disconnect and commit. * Added tracking of module modifications and use it to determine whether expand-time checks should be applied on commit. * Reverted semanage_set_reload_bools() interface.- Upgrade to latest from NSA * Disabled calls to port dbase for merge and commit and stubbed out calls to sepol_port interfaces since they are not exported. * Merged rename instead of copy patch from Joshua Brindle (Tresys). * Added hidden_def/hidden_proto for exported symbols used within libsemanage to eliminate relocations. Wrapped type definitions in exported headers as needed to avoid conflicts. Added src/context_internal.h and src/iface_internal.h. * Added semanage_is_managed() interface to allow detection of whether the policy is managed via libsemanage. This enables proper handling in setsebool for non-managed systems. * Merged semanage_set_reload_bools() interface from Ivan Gyurdiev, to enable runtime control over preserving active boolean values versus reloading their saved settings upon commit.- Upgrade to latest from NSA * Merged seuser parser resync, dbase tracking and cleanup, strtol bug, copyright, and assert space patches from Ivan Gyurdiev. * Added src/*_internal.h in preparation for other changes. * Added hidden/hidden_proto/hidden_def to src/debug.[hc] and src/seusers.[hc].- Upgrade to latest from NSA * Merged interface parse/print, context_to_string interface change, move assert_noeof, and order preserving patches from Ivan Gyurdiev. * Added src/dso.h in preparation for other changes. * Merged install seusers, handle/error messages, MLS parsing, and seusers validation patches from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged record interface, dbase flush, common database code, and record bugfix patches from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged dbase policydb list and count change from Ivan Gyurdiev. * Merged enable dbase and set relay patches from Ivan Gyurdiev.- Update from NSA * Merged query APIs and dbase_file_set patches from Ivan Gyurdiev.- Update from NSA * Merged sepol handle passing, seusers support, and policydb cache patches from Ivan Gyurdiev.- Update from NSA * Merged resync to sepol changes and booleans fixes/improvements patches from Ivan Gyurdiev. * Merged support for genhomedircon/homedir template, store selection, explicit policy reload, and semanage.conf relocation from Joshua Brindle.- Update from NSA * Merged resync to sepol changes and transaction fix patches from Ivan Gyurdiev. * Merged reorganize users patch from Ivan Gyurdiev. * Merged remove unused relay functions patch from Ivan Gyurdiev.- Update from NSA * Fixed policy file leaks in semanage_load_module and semanage_write_module. * Merged further database work from Ivan Gyurdiev. * Fixed bug in semanage_direct_disconnect.- Update from NSA * Merged interface renaming patch from Ivan Gyurdiev. * Merged policy component patch from Ivan Gyurdiev. * Renamed 'check=' configuration value to 'expand-check=' for clarity. * Changed semanage_commit_sandbox to check for and report errors on rename(2) calls performed during rollback. * Added optional check= configuration value to semanage.conf and updated call to sepol_expand_module to pass its value to control assertion and hierarchy checking on module expansion. * Merged fixes for make DESTDIR= builds from Joshua Brindle.- Update from NSA * Merged default database from Ivan Gyurdiev. * Merged removal of connect requirement in policydb backend from Ivan Gyurdiev. * Merged commit locking fix and lock rename from Joshua Brindle. * Merged transaction rollback in lock patch from Joshua Brindle. * Changed default args for load_policy to be null, as it no longer takes a pathname argument and we want to preserve booleans. * Merged move local dbase initialization patch from Ivan Gyurdiev. * Merged acquire/release read lock in databases patch from Ivan Gyurdiev. * Merged rename direct -> policydb as appropriate patch from Ivan Gyurdiev. * Added calls to sepol_policy_file_set_handle interface prior to invoking sepol operations on policy files. * Updated call to sepol_policydb_from_image to pass the handle.- Update from NSA * Changed default args for load_policy to be null, as it no longer takes a pathname argument and we want to preserve booleans. * Merged move local dbase initialization patch from Ivan Gyurdiev. * Merged acquire/release read lock in databases patch from Ivan Gyurdiev. * Merged rename direct -> policydb as appropriate patch from Ivan Gyurdiev. * Added calls to sepol_policy_file_set_handle interface prior to invoking sepol operations on policy files. * Updated call to sepol_policydb_from_image to pass the handle.- Update from NSA * Merged user and port APIs - policy database patch from Ivan Gyurdiev. * Converted calls to sepol link_packages and expand_module interfaces from using buffers to using sepol handles for error reporting, and changed direct_connect/disconnect to create/destroy sepol handles.- Update from NSA * Merged bugfix patch from Ivan Gyurdiev. * Merged seuser database patch from Ivan Gyurdiev. Merged direct user/port databases to the handle from Ivan Gyurdiev. * Removed obsolete include/semanage/commit_api.h (leftover). Merged seuser record patch from Ivan Gyurdiev. * Merged boolean and interface databases from Ivan Gyurdiev.- Update from NSA * Updated to use get interfaces for hidden sepol_module_package type. * Changed semanage_expand_sandbox and semanage_install_active to generate/install the latest policy version supported by libsepol by default (unless overridden by semanage.conf), since libselinux will now downgrade automatically for load_policy. * Merged new callback-based error reporting system and ongoing database work from Ivan Gyurdiev.- Update from NSA * Fixed semanage_install_active() to use the same logic for selecting a policy version as semanage_expand_sandbox(). Dropped dead code from semanage_install_sandbox().- Update from NSA * Updated for changes to libsepol, and to only use types and interfaces provided by the shared libsepol.- Update from NSA * Merged further database work from Ivan Gyurdiev.- Update from NSA * Merged iterate, redistribute, and dbase split patches from Ivan Gyurdiev.- Update from NSA * Merged patch series from Ivan Gyurdiev. (pointer typedef elimination, file renames, dbase work, backend separation) * Split interfaces from semanage.[hc] into handle.[hc], modules.[hc]. * Separated handle create from connect interface. * Added a constructor for initialization. * Moved up src/include/*.h to src. * Created a symbol map file; dropped dso.h and hidden markings.- Update from NSA * Split interfaces from semanage.[hc] into handle.[hc], modules.[hc]. * Separated handle create from connect interface. * Added a constructor for initialization. * Moved up src/include/*.h to src. * Created a symbol map file; dropped dso.h and hidden markings.- Update from NSA * Merged dbase redesign patch from Ivan Gyurdiev.- Update from NSA * Merged boolean record, stub record handler, and status codes patches from Ivan Gyurdiev.- Update from NSA * Merged stub iterator functionality from Ivan Gyurdiev. * Merged interface record patch from Ivan Gyurdiev.- Update from NSA * Merged stub functionality for managing user and port records, and record table code from Ivan Gyurdiev. * Updated version for release.- Update from NSA * Merged semod.conf template patch from Dan Walsh (Red Hat), but restored location to /usr/share/semod/semod.conf. * Fixed several bugs found by valgrind. * Fixed bug in prior patch for the semod_build_module_list leak. * Merged errno fix from Joshua Brindle (Tresys). * Merged fix for semod_build_modules_list leak on error path from Serge Hallyn (IBM). Bug found by Coverity.- Update from NSA * Merged errno fix from Joshua Brindle (Tresys). * Merged fix for semod_build_modules_list leak on error path from Serge Hallyn (IBM). Bug found by Coverity. * Merged several fixes from Serge Hallyn (IBM). Bugs found by Coverity. * Fixed several other bugs and warnings. * Merged patch to move module read/write code from libsemanage to libsepol from Jason Tang (Tresys). * Merged relay records patch from Ivan Gyurdiev. * Merged key extract patch from Ivan Gyurdiev. - Initial version - Created by Stephen Smalley libsemanage-python32.9-10.el8_102.9-10.el8_102.9-10.el8_102.9-10.el8_102.9-10.el8_10.build-idbb32422ee864bb2feb7c2902b9d9fcdcc41971b5semanage.cpython-36.opt-1.pycsemanage.cpython-36.pyc_semanage.cpython-36m-i386-linux-gnu.sosemanage.pysemanage_migrate_store/usr/lib//usr/lib/.build-id//usr/lib/.build-id/bb//usr/lib/python3.6/site-packages/__pycache__//usr/lib/python3.6/site-packages//usr/libexec/selinux/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m32 -march=x86-64 -mtune=generic -mfpmath=sse -mstackrealign -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protectioncpioxz2i686-redhat-linux-gnudirectorypython 3.6 byte-compiledELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=bb32422ee864bb2feb7c2902b9d9fcdcc41971b5, strippedPython script, ASCII text executable R R R RRRRR R R R RRRR Rutf-8def8d22e701f9ace1aecf4372c15657d0e70ff250bf705df05cfeb44c7ac4264?7zXZ !#,@] b2u jӫ`(y1>ހ[([HvYw %T2d|ð8e+ӎtZXJ'JEںZՅWfM#ՊmbY `N؊e^-=(lWUZdtݪ7&B̲**B|[(%)-1?64O!'a&ALz_ f;Nov>E[DjpA%o KAy(;[Z}&\䳋sKGUnE}q_k E-3JCuxp.͸bY(}iHiX(F*"L]:^S#u6%`pRgoB Dۏam8L|B.2z\U0zy2W4MvjȜ  OdSnh2s'7J >N gz[f1a2ɓ %/6^My[ dڌHôX |˩'ךֲּ.Fź&jZphn_\ /X Un3a;q˼adzL?:R^n'G Uh XϜC*]2**x"_JZƈ#IdX.Y-}%,ꕘ3XPJT6pX@qtRaA EyjBz:IW,\4cЫӱW0t͜iu ֛>F2Ќ2Hb*AQ4OnT>eu%y9VU5,;kl85SlMOֳpC L^H1_%Lp/5j:&Yn6@z$C'^}hcԲie'vj8۾ExLs݆fky'3U1Zaz4-V+s(]"Lq uRvK7 ޥ uu?nRU`wUyxr^,ZDv?sЧ% `Α.o"=q"q<7V8"Tmq؁޺Egn]>̌<ģA0m~Sh C*x>iB)?Em{M(g I^% ībpi ]jg!I1uj!򸧊 gc5¶ # j2:Me3`?bWͩѾnKd^ I(;yo9oR֗@"F9aP ddu7lk|Taſ \yƄy&`vwvSz՞B(72pn ! <"iRdAEÐ !i رH&R 9byO2LnPѓ>rtMԍ%A/S`9^SzyZRetYf|'ZT8G"zTgju~F&j+DS~Ƕ{wb`R=kEt$ 6ZĎDF{ˠlDk,_:>x.a!a>\=Wჴ=@!$291)=WVq+xo&ZpZ]D*(Ev+̌'L}Z<ޕ5M3}ś?y_| y몈.(sӟf Jb֜M&*8 MS_*5%4#ĨNՅ6g쩋-Q2jmN5@fr O8ZYOl0MՆ{eKX:U0a=\hO;eꡜͪɲE}+\s> 8, ĬNRz䥸rhw":$f(/wqc/Цޛ1E|C[QE;Uk( oU_KSؚ+Oȧ64YhDxr(~κӊ1 3B%MF3Ǡfmo( ZTGZ?B)`|-bgT|wDI[(SV~Q2ރhd:<ofg,._T86NZ}ԾS{ThR\Whl:-g'0ȑ6]7N׃ۓwx@ )H#+ȍ~ Z.KkW`;;XsD*`hL?U|-LߒՕ;'qΓj9#,(rUt>2" Tʦv^#b9q [拽zbփc`ꌾT^^z&ȇY|̿H&A-k, CFye:ZanW)dc:փ*;T wzPe-)E̽Φ1QKTWu D๙>LLfN.7 ᕾx;Ыu>R$B7auc<k8 t ~ލ2Vj.5Mx cO7CiDtɵjwl 4ZА,ڵTD~OG}ZڡqA0CR{Y}e< xfq9cSe `}kv4Tqچa9`_\u8!Rf,H+K6H7Ѝ~8*ێn<ܪ,ONؒa:S9I XC?"bg HTo%Z?G:,1"Vev<>{KX9P##S>(h((%oTWM2+mq,=˗}E;Ql}M zD?_| lߩc=,K7o441Y%RŕwBfJ[ n-*Cܡq^7zv_֊ϰsE(ǟ ǁK("[lVW.{/ BipEiY 1Hy7?6%閊Td19mQGb :G J.!'J# |͞;Bbq%oV B}bw. X%vOhCwVc)&ɣJzƞa:umaEQf_?kiqvv #4rHAf[<[Sv=Ҏ o)hEӿ:K):bANOhFTI;j{!6l:^s1{#雑E~Y ؛BA:UKC?;֞f501Qm\X1~] Q'+<1K%jtKczf꿻XaV#P;G"ݞu,vT8wnA4d+ 'ԣ{Pªinܞw 6g|Q>>"8*JO۬tqAc>6J4]4`y 07J$$;16}H/{ ֑_ң5!xȤ2($C1dᘈ]#2pӘ7t"PL3`ő Ƌ ve:^n8!zrbx^6p r5aG.x9- ^ =%{m?dxFR#h ' $EU$?sUt;)l MG:ykQG],Txn=J捧rE#EgC&d8klm%Lj+SB*}L0 9~Bt 7#쭛OC,\b&'U};!]uA/V#I7"IfQg@Tԙsf6)L,"%]wu*Wk.K㬍SDHORg:F,%J.鎩tws(yogv¾A?#cL|;v >{p]U>?9æ0^=~K\x9]`XF1i߀+h^׏L<@uS= Y@0yN\ko?f%Ѳ̍פZhIU6gmѓwԺ |7$%vCE_j~}U($Th$s'yG OG"xktsS{Cc^)XB3h6`Ph8!;ϒƝCJBI>!W_J,ءBcuygߣ{!$vW7 vT\fygK%fo#Tɚf"FG{Uz R"P7G-  `WHQ]j[0o'i))\N<Šs9~cd5z]H}~` sd%a6"D^evkL{2 zMx?Zt%#ޠ'}W9O2+4fs[>W端Dy'4+Lj-@Oa̺fÇ]a=Ä=+J;[뀖9;wڴnɦ59\˫&t$ʯo:=sI|Z;<#3bPvdA`|V+ئ3wކt ^Tu:"'&6#c# ;\814z2o§1i-|iH"VY|JENl2h Ҏ<1c/7$BiE~?Zm_!i i5bXr7{"ŤjܤQ8LװJ$#ֱE]J7 @~GQl YD 4[;F'1Yn3L ԇ( }V ê'_:mnWu4`aa MT*(П~DuMzͦo1V]ꁑ8F+w]/G#~l::vU[@+Tq9yj}p$3uxݣ ".]؅H9lih7S: Ks`88`>ծ4@@Tɤ9)6Yb\Qn̾EM^m-*rW#+J:̣@X2qHif$P;3dkx2.-|l1:6HBjz5Ɂv盛گYDRuK)mTݺŵҼΑ<ȶLnBu֛2^"pbAVpQ쉆84k08D}GБ|f]e̹bQy#ԩ\M8ǫbNBZT{)]?qB]zY:( D/эW?k:d1a3a |{-&0o篛0CH`MRl*n~[C2X8")* )$~ dXg@;CA++}Qm.uy@7zř Dž5۽!\p]Oa!.I$0U5R|%=BGp&K,G: 3QLylD_d;-$Kl+QXև1>ʧs-³x ʎBMiCT[.Qc F8g@p5X P-6\2Qkf>&Q S2:C!޻=y8:Jbl^3x5i{؁A ɒÝVG4ux-=elOC&Ʀ1Yq7-88VCb?)eIא_ CH5וLܓ$w48J5bB.-3"IxD@{GMLljYe i4NV$L}Qo^_?ahϘUcSdBu?$|u!ئ(F6&'@ do:fȼ6B`--fml'soۍ%y:[tvOy J "@ede'n/2 #G9<jz!?˘k=:ohI Di(aV{b? FX쏛/ ZW<FAXЊB Ёd_ԡzL@Xr8XM] u!t8AE 50ea! y/DSΛ~N:${xiUJFHPqͯBA{౸EIwՌ߷;Hs6PB*'j^ s1)ꦩXXlIwѲm?}(l ëFWHkfhkQƟBB_jɀ2~=znwO)j!-p񿝖6BmW(Q\hk': Y#[5|GΒXq|MʺG1xlsٟ[혴Op|V`KF猋w7r v}ak㽷8}m8Op}v8NAǻc ) %9WVh ydئ?:3Z8g`s\JC}´$r3#X 6Z4ց`C&gK5fY6mVRG%_i%|aN0ݗ؇’!I`>RgVwCQ0XKQNIx3Ȗv(zb@s/Ή/MJ&E];5[g0i5AT*VTEPZK(]s&g۟^>hQ&@.`H%! M-k\b6R Z x^[x۶GAEhemrmʧwoiG`N׿V,kuKקl48 ^Uv]> g.{`LT .Tj0F$\[,dm[n"E{|@m]yp>kGcKYu^L`@ mMT['PeTH/Ǜ#_x5[zLd~ *nS" 6՜Xpk݅Z% u)ȱS/#5V&;5B^[x\&@BY\:Uz~UU89 l9Z  QY]$c,Rl.o>qhyOR+kB5Iq_AZJ)@_d(`5pxb]M~ŷleV[tbQ_[ԋ3"@>myAc;?SOJR졇uHLie[G_8c9ίW(?f#Uz2 C毳aWxF-N{"򨓱뺘SX"Iϯ[4řF]ـR N0[GcBhHJ_w pP/f.ד,U %:KI[eW ^^?EBFMXsJB/}ޒigWZXNaf"iiU1{Y#gw+6٥tgf/NvI8\VIղ @V[ou3 s܆`B]x`iL\rtg`2cY&aZuIVf%Gy7%6AK0I4Rh ^?c{8ϡRXSzO6~j@FiV_s'۩{ M]9 zKQ5 a 4wHG7i?E6z%UN$ϖgps@nEQq|Dy n .giF V8h50BA`rj(z/4mY3 ?x4=w@= )Ȑ%hQ)2|jv"3ϡOpKJEAdn h8Gߔ#Տώ]&,s'@,t]@Fse{u|v591w]]:"4}@< 骠h&}Gtt/[6%&o*.m0A\-֝ήAIgSdb1O4~RپΉ=Jbѫ5 aF^h;ek GQD9X= 6QYvjR谋;<,J&$B'uV*z_ =n@yxȧDc(^%nX\](=aXqtd@ǟmgKaGnyW!@=$kH)OH;;{t7H 7ִoO/[s-i;oMT'MTshcMq*DE &ExvX*N=->)}=R_8 c+ʅI Mial{ieH eTߝH2yOŁ!Z F 8@;}pwJh|YN?vR =KH ̳bl+'LĊuZˑ(23|v'pi{zG?ڳJ_qʏtʨz~/: 7**[$B[53f"vz cRGk/T3ٰSY*zfa=^9k˛Kv6:HG}K1TL@ JqhD>S90q{8C'ᥟ|*]^% N̷hܲ<` Ieڻsy=c)< RY"g# s9`%PKRp'*&`QNhĨ=Fx)|KQ :T:'vQyyRr6尣v4Cr85uχy-/mzP© MW?\2/%&%9,arGt~kELכ1ttDI^>7,K#Z'2any4ך5:4M0%2q$r>dfҬ4k+켺 ׿ZQY I횠?P0~o^(߮nwVc.~Ykn#ֺ|VkB%Ԃ& w^HQ6oX77H!ǨB _0X(wlD%N;i`vdc&rO)w\rLzZz9|K\.BpnCwp+s.+, 8?LTWo^DZ=:FlwA+m|œkHV{~`SXG(\O;-'X#'}T4^XXdJi SrPǗkpVV<~J k`J핫c#@ ǖ,{yaܽMw?4( ߰~Rg=+!w[B|Mdiހ L ek3{)_vָ|c o䀺hym?Xc Se# j~NLKf0TWz" R*ʉ}7+ 9fх!+ ".Ml_-SkyT xQYu<]Z^ DE?&y6s/U, 6TlGM~H3Es*Ӻ(gtCF9:VZ*"|2HLp6KT}$G֦Ixf$["XL1j$t{cA-Z?-*LK կShq `V-83ںQ ft ~Spxs&udsB^a? [Sk&ǑUwl!/ yX$}P^%) OqLfSKnGǂӬR'?Td)M]pBGd/vhP quHD&>TW}hw⠥r\`|πy*O͢;̍q}Q^xFlT,}ުcU6[l6F̞ Y֍*XکޘQ\i@V|dғ*I,n1a^,: rHЬ96Jy14]%bOV ~u87rbTf3Q4*[JpŵiW6*ەD-I4Y ڏ5Ef46&ev&zGfLW?Yku/C#ŶGcr+dRqN>VJ>%!qX1)IpǬil5вWU=v}]K4l[ֿ Ɏ8];cOqeg1ޠICGgȗcѰgcCg~ِ49a>*,㥼m0䠛C}@k`ux6(1gv `05Ah: a|BK?A45#梊Q/O 6wI@AUo/?.(?H\1p/TȂE $ DkBV)N! 'Q &Bݫ +@WjN0..ŽӔя-dxdOX9>PH"3,} ^g4V8ql#ӑd-{ ĞYe^] OLkN1Hco3mE\JTөq{ЦP !RE{X냗(K{/,Z{Kg-VX$^\;?4];5VJ0°3δS>ivč#@ѻsa?Kʎl;3u PqY-[yjQZ`Kvn^z_FUfTE}M*K,̛n{aؑe9U¡ggB¡GB3js>3Cf\鱊l EQ{S5jRH!h_e۝ LW8 "CS@A(*]XF#e!t(d TrˠF|!ONǙǜ52ds|]'2YVi% PP@"b=3Ua}ZW0w:ZuӼ;{0H%Q[dDL-&֪.<@J^[Rj+AeuXH4?O%ԝ[_Uh=S87<7=+fAs&H-1)}*"*w=8j BT{vpCEqvw\d&5[XF.Xqfqy1im/1Ұ!XdkfߣT،Y؅U{4m $xm$úZӰμ\c؂w!3^<49hX`9q1gMTʮ#K< u5T5"ؗRCzix%26X^ Z7_sXӪ1f81?*?Н-M"w;yNYlʜzS"`TDZ!Oq}1RQX ְ?(D˗'LÄ'՜R0PaԒRT<+|R$i>Ws#հ4Dk98m u@)o贪M-g8R#h-z~2C0hxϩu6s^9J.F&c'CQ,/9ܡL88$Ig~{+~W9^ȖUoNX65~aڍ?+om,ȀDI^A=w zMZWoz=xwg-AƖegr^Z> {0r a)I/:2+0B{76 cV}- זiH.G#pZReeo*%P>F<`8JeZbϙM 2)_‹N3\`=D5px[.![9)@R>3I(7tNҟN*s7K϶}.(&qB*pS: [Em#H^:K=ɾ}ht]`܁;xcZ}Uy&N}Okt eGpy+?a!UHg 0IRE W6 M?iN a~˷ǶP#[̍ e sU!HDx3ˆ,f7d_rٺ6z:Q`;yΙ+yP~J>s6Wʃ1%`Mc Ǡ5Z;sES?VR^l8 5ƹMmLbeKnj+y @B*]4_n /.AzG闞r$yP-/bW,Ck:EXGjod*Vڮi깨命#6 |"!0_Ɲ &(q (+pɟةCGUP6,9.K*XIȍ]X7DA,o"z 6rge q*&l'aܚ8bcY߁Ӷ›2͜CR!zB{!dBv`'o%{rH#;y9u"sL՛GKo8eR۽ppMRdPaxU}w#i$&%v>d$240^9z. 7`5(шuڷ x双b><;pwoŠr9 [8yb7sgv]5PR[*nlnvQP2 TϘ?DS84 T_/(YP;L;۠U;b_ۚcOtbޱbɯmG% YԄy ig!^/ΰ0?}H\MC܂np9W%h^K_4E?,<-XIvT,x 㜽ADL&P1b,%g-?X CBaG;5TS9(W9lg=.M[WJ]-VAng"l9%p>NСuKe2Z?mn~qq6_IV0=1Gy8|Ӄ#4\᨞5w+J+B 2E+Ήqm| oːg5VzW |[y鏸[V^XţЬЄ )b=).H:WτΕc63;W7ƃі5>)Ȍ2i\bZ)BY9Yv޾H&T\Ԉ# ‘߶So;?mޕwiأG/g i9?߱v^$C|tFAT㿙ݨf |Ta`?S[Z WRWQDԥ ?Gg9UhfΧ[~0Qz?/@ۛ+4K%Cca w{KB<άFdA$CAemizZdV妅F6,vs *}KY?s+>MPM\-_#y騃wu NdE=0Bb)?74Sq b`_VS4ş?$d>u7r7V!wP A;:o9Hն`QZCl\2-%tr'NbΑE{]5R|1+dD:),:(;h.uCY ?[;=h+EY9Vp‘w<<4at諜 :bCEa!`%CROi-$E6F<>,)pq`-[|2@8~EDŽ![Y*8mLPCbs{(e&X)u8TTucfJxf!7n/#S_º;, ԏ'͑oR(fu%vxAd7?b4آf#y/ʒXYFTpG@ji=?t5e./2\xWZ]@h0(`=EjfH쌇)Wd=`kJ)(sE;0Tc\+0I= wƷDsܬL 'N! X@~S!#], CtA%nmaChR@~"mb2#wY^W}"%o꽡k޻~}&Q;D821}x:w?h+W@.%Q7Ô7+D_m]G37 %WH}=EБ_n Jyv/,y$Vӛ Y#|\fA}YV^cԾ~jܬ`9~Ӗ 2?8Xͭep]:Udv 'nW0.*ف ZOC8/-eGƞ|(}M oUyPe>-YVR4\62Lڒ3412t*dzJ#DruleR Bp&i!bS+Q6C:X7F0{ѥ| m-]4uS!8}!dQ5P|iDdY}_8=9'#E,obCخv3aa\^e'Sm% 9xD[GDcdҨRH_PJTNz{Q23ҭ{qsϪ䶁|@{6ђdoo:#=rP8%(˒^[2_x{O HjvGvfN(Z^ٷ!oI}Bk*[cHCц Z#U*A}PbW!W^:rinnriSg_V:هi$o~m%*X\ J߀#_xXȽHP?d5Nƣyt%'"Nm0C.]zg>%9Ձ|zhC٠U_l4zO[- 蔪PÍ^U.vk<}b_hЙ/u>]97"<M.&Jb7Ml-\=w"'uxQτSy!v()JI˂!_^L__ HzY}ضK ؏w zrSC=,d:LbshFsv'iL55s`ڵVavB7n*u{S5Т8!֯y他w;&8zrǰaa_fN{\r-9" W B*IyI7Q_i`ڡAQk%39'ï;RQ2o<ٱ`4@O@p{ -_qA?@d)(.(^G̝>X X_iۄ '^TEdtq6kLD7Pxy'+(RrSӮtp >('\mK-JY1k ^ FZ-+a"' ?V /Ѣ>&Na 848h:Yd#žWEN!Yތeky9A7tfQbM;zl qwpĸNlX2@>])M@C y$eL{OoCMȒj:#'UH_ /J,X 4/AHiڰ\fTWPаBviW!j.3-2|b-g62T8WEzcOk*0!' Jn] -Qa8DG|Mi-F[瑀&m¾Jl:`-wV۸'sK驅uѨIaSo;Ŀ;NEZ)n ؔob *ENޗƮ~LK9M~MHr 8I\-<܀ ߢHLQL-a]Y Hs=O@LgEv341Pf?;ftG͵T1UGU3^I=,6VD`?T۾RsauMBT%y%;%3׽Ŝ ?#NtLs9k|}'{W״cƠ_vȂ}V6cڡxE # ="QL{3^u2 ԡ`|@ձw\|r,o]bõ #,^ -  aaUޜS_Ij]S 9XK EYÖI~ya$Vwmřh!$!m6L{gpǻwAxk6j1!sExI|Aa5Cfջ'v\M(&ȺZM=Vx^7W ezu2<83]96m-* )lq5 AdPRz#r)jF"d}(v]Plk` sSb/Q\ ,Z|f0Ejv^ػM ]Ks^_Nq%գK1慭-Coep1qO۽KFn7U_f /Mѳ_l=O^=IơTkQ4G~Kc@SxQAxTF^aky{RAgfWͽ1>:7ʚ_8f$MQ/BUrq#FV8C}q 4BU4OG&S$lLZf U?\ /w.h%k{l6G\pdMr5)bB•1n>8;BbZ2".$,0< &8"`R3ZG'VCRSIs`B1 Djt+"Tȧp!49UA,kN ˴YF)<) ШN&3v̈}F0 ;R*6> AuV2]`›M~ij|_ &+$ШB4@7k`ƃ# .YO ɾ' ?+Oő]z!l pJ8\EeႳeQ(Pb2/b/ƠuI`Qi=Цqx8?Z´mU M+J7I 9Q S`Db¢-SQd_˼9ox}IA.^(YXFJ5_ 膳`N AMޅܺ/?Œ_٢ԉF`L5. ͦ{r`vx=YÙen:  D; 1[ qW!COe?t4 9z>x!7Уj') K:*R-֋a@ #e)G7RY PCp1 1-E -Ox VJ-~oR(ZcbeR% `O<:S.Q>51 187n:FXJ?<Uf<}4)eb!hy%?4p!0=)MH} ܒܗĿ*-?ryǓ<!T2~-x9̃,u:pٓ,,/\z&C5s8I\;p7n)MRV6P֞;KbJ2(F527k"콋y"sXtv ڢ3t1k{iG@E`;qٽbXaU\}_+'}psxq;4>%DJՑpJʒdEĜVlC 4 1ӓEa5Bl nfKPcHjdTi,Z{dK@E:ay+c1,±*fE,MyJ.ܯ6Š)@d'3K5/k:\6u~UO j-^X[W.&nlw[KO'ȸ٤tB%нUT VSNc)G.j/.c]xǸ zA-(4b2n1]v}ܮmos;ggVyw (5)l$LZ_Vݧ\ :=yR4UG'ͦa2KZ#mZp vK!^|{$&8bKTr'Au$DfM#”(Ogw[ݭi-N#!s`z#TMy[6d]T%"w>`mue nBȸ=\TIElEw_wТ+k$yUg6G)EzP4fj01DddC/}_#5O\ϕP =f='?hO$o~S:$EFك]FaI Z[dB,ђGu q]/Y_,]7Vِ̓+'#^~Y}UӮZT=&kf2JwM8Qx"&%*Ƭw#/7] VûZ3B 2:Mfa -BT&ںM@}him|QY`ڝ*pW箕\ntsZLW@Yh?yR@LT:%VoưϖHm]طEi,Z\h5)Y|pNygCrU{ T<O߂a)X͜7[Hxf#MrW̕ȈVAv٘m~ 9v< m>5 gI@⊥Kp(s+C ]f+% %@>5;ͺnZUXF(x+W># LAN=+?fvLl2OQ?PB8JOqSk.?A  Ap3u/f\3/$ 9\aDeDgeAm/?=YX>u|%h3M<U ]o V3e료j$T؀r<𴥑⁵R fmMHJ5eVW}"?SrF?81(Ek-^d b'hSD9Lit6P/ 9CE(kt-ˀA6Jp|YxeVq4b=|~41>vn’@,Z?w!3vǽlIWt5bҗ>޺Cj@)`SvTe?MJV2-@睐raȢcRq]%̦4/$1*0Rk:풂TM!{>x`r Re?d7:i"#XދM.d2y>0x[RüoE}]kSfJ-g2?a;]=YkIsZN@$DIk9BdMφaibQ̿s%;ə.}vNFFHi}[\N:Fj9\ӥt*D-$(?5yڷ.)A~G> HNGfHp 8ƃWS5H(Z.P$*S m);9 lb)RGx"t/3M:LJOIQaf0&nj2jĹQ523J=D8]3&H #0< 8WACjXMKaInj4}ӈaZkB Xm| r!ISP}DDse$ٔSfKBZF]ͿT)lC )9+آ?!REP` d\Azѝ`BJSS_Ӏ1G]+Q@D 4g(֠yu`7RlUK4 T3&z{#0i;h;j =oHzh,Xq`;AɾK¾K N?=—O~ B Hk?->8KEɾRۑЖ wNfM:5C]$ weaIqD=v[B Cnz#ҡ!0.m u?AxʣX7N5'PnW/KXN?BS'l,Ol!„x:nr{M=l*Yck hŃN@MbK4 "(XrҌk@'Cf7 w)Kǩ*"NbNJ7KzGmrSt@YsDdvsHnI̠L؏w&B̐ثٗ K@ 3o۵S#\}A.Mgi0ϧ93 ;eAjl@wI8Ьa=Kἂb9gor<\~\g'N+hXoDΆ6o i$P!_ET6nP/Y5D3'Kb 0'eB9R)mhC[ScYl+wo%5 /Cp+_Ak5{8+ZK~zQ؞Pb\cm&/79!'ܚh^dH *:\3M50[b|Ic?]mpil\K'c➰ LN8 ֈomj(}nAҷD䄿$@wF)Bqemi*!mj|'3r,/x lTCm X$g5.=&(_䇇0{e% ވb яsc^Ɯ|Hb:\ԥs>I@7 +I+# 7!oP 2 dzaiϔr EG}@> .FT-J2^^?"kD=9|D m%pv*;ꀈhI@GĿ  o!)zȄN#_+.b<w|)GI[͜EDk+GāiaF pkC? "6 Y+h.QK ^gQ:H{&V:FsqXՉ~r ,g^8Qᚴ2lNPx8wKo`vh tDĻR1Ai[Ur/?}̖\8&Sg]Q]cUiDr']%e'@7z7O`fU<U 8nOz rim\OQ<j[A8S ? ѡZ3)|.@ oGcnƑz ^SΠP=e0V aU'fj`Q3^Ky bSiw`tWRK4JsNk.ސc>}/b 7ELhп | Krn9c׳W Ows/ ׃X0Y@q<76(3ov|*1FYOg߱n'璶O_`CVԊ8m}Á)gA=7ƶR iU'Y^;+l7c[ҠkVYt|Pe$Т'Fl/!>ĴUXPB-Պ*bfr+l5S\޿byZ+H\wvH<aSFUkp7RV MS/ t*=t?.8g0O̧u~-VbAprA|XsSVnUAć5p^c̓l#}76]E8S<>HѕTUߕ~NQԐs_s-Wʷr<}hL=C&IVE`q/n R1 ŠQ1U :-FRah7Kfv5c}f K(ha8DONS`lOH,tBF\H wŒW Ro[j)^Ne;Jg[TN9 1] [A6+ PgBRp:[1ć.^ C6Gd&\+F 9&JogȾKP}D a_f:<;=f.DȵM j BQhA{A"p6 5lZ6M궼0Ox@ն ;6an/KQ霶=j4!Y7]Dχ8S< e񉝍R2!O|a#eG$5ZW?A#m Tb"Wfl ޾'vSiQVS+ 2D32FȜ?L.A~+6K` 3!sd&Jq+><n/Ŭ]3%#a&_,21b=LL2G$q[(X$Q~# /<:TwbtclqyLxZ+K_jbP ]^`Ǖ@Oɶ@bV5QBiC!!f_^Ӂv<'eZeTF*Mৗ{{kgكUQ0R 2sdkc}c˵W@7ʬ7s >ZBiegV f#\|_Tp/M|A PԅA]i|n Ŋ ;R$`ڲ$,wgW'Zs"M y_:>i XztftU Sm82t)ot}g(5 (}< >-}hct\m$_>>g G"1׫Rc ?sΜ#]߂EET\ieq;WXLOLp= 68St@ Evf+<_a{=>9tg17 s?RwF==#Ԙ5bkCD5IFD3cYA,BG4xߓϕU2v|eR0Bb5sguPlB9z znk*R:3C!k!oRʹoxΏS-fo0yMƞd;C_l_oi-[Q5YQCNk\՞npGl ôגV>$N,uIO~[V[Zwy_k(i1wx S@nUI6fXX_ϣXL ԷVPL2;Z_D|\<4u>fVs1B)iE);"1O<`bN#^VYYrbX1@5uH;?j)u(h+n8pEQbe/-,U vl?/eΕvhMY_CN ;$ =dMa`R|fiq2a{# X7blc `.dm.îxuQ&{ţiXkye~.pn+/ɽU2N[?8YX KBBq]^2/)x &9-䙆Ғ$FL_ȋyj08l4*L_~7) ]?4y,KHiT'ix7bE[};`OO.\FZ\rBg1oT{Asr;=:eTP~WwE.²Jܮ敻0~zw1eśsiZ}S@q٪eL,%25PVQϯGU4K|i}Fle^/S^"{Xs87XVY<8IIJ{\[%YEd+?Lb-]k zgW>a7ǫC{ :Ev߳z, yxiM/w]gGy|UYn)1/[P$k}":׹ O]>k%#A^eHFc rY l7N{">R~#s0rS 贝>ukJ|ei 88y!*#_< 秮!Zh5vcFs 3d{-/1]Z!$~XZDBKC/|3-S҈JH"/rZ_=עld\+{j>;(l|TdcT- u'i =;2[T –[dIqԑD[j* |\5y]݁<2R0.b R@P"v{ɫ*nTۮtПDCVd8*X'PRg&hf(K\ ۲?< Afݾu !jV @kd]Џ3vT!vt7 ?ጞ2(^hԓeZjWhZL1*(zJ[@U]o+w% 0av,uW(_W(;_/eTCaw}Ios-Q.@ɡޘ붙׻r]Oev1 S`_XO Ii[X"Rf8Kox4PɏzlV8לoelMl`-qZrڷ9VQ~d͞ኯxSPiWeEjw #+-=U%fF[W@KRX7"Ay33W°^emmw#,jUq_"f|Kf쎛ӽOn|/9YKԬ-juq$![;HIUP E޼G54 }泔 4m@oN;N2egZw *.ljhpF/BurXߪa 0{ ~,`W ([!ˆv)eBGd-[U3P~W zƈCqXJQiFӒTXa+{zC7*_ʾ3kr6b6MRXE2!0w5'Wô]S 6Ʀ '4Rm|.J{T?_hT#]qZ"Hd hYdkw[GpRfO gФC /VpԾ3=3nE|$5<NWJ?4m t! ,je%ˑ% -!Oysǀ)%Iܛ<Ib~=DR2В)5pN͘ ΗNɲ0X0/@H)y0L"[ƒᜓSэ]VźNNھWCz<_H{'_FϽVp~j)\bXe 뛎m9熎~ 臣B;T\S1ެ l>Nq>ŵ`4g/mxM!rנf[ UaesBvxQ!}eyr~)41 ^ ޸OM*=k 5#.>kTS\Y{tH9T'Gɞʾ1EAH:t úZH~K ݂;WB7jo߃pvrQ9 kmhk֟ /2>󞫕୼6A&[C!˛9*`5grsB4H#t|Z%?9f[9RoNgu_^D΃nWAj1OKvBk|8.䊜ٜoֹwλ|&ZI!:3|&kZUVESnlor>И͹=S"47IqU[&ϮiPD|G7V\JSnж4~CP RX&?\WXHvKzv3DLaqY\{<:gQmD77fd+N=ʛ\J~UHE$yVgzp헣m[g;]O.X߉8ʫLnҶ{ O䙕)Ը m*Fol,)*ui|E^&GԶh!rOYƬ:737OP.6~DNZ$r3S޲іwpFHũyVN {wZ0ωVDC8gtcԽ'y+{z{i1Y@RW qRGggsXжtbq!~xrr̊3CH 7FCItp3, ; r79zF\gB 2Q8ٻVcL5չp٬= ᦄn3 ZP`Kҷ"u rtj~ntB^ ݜ0Ï/umc݅]Dž&~39sl5닸톎'c 39Q17Z'{U3XkDm[yxJKVvPFp$uvtRc04+0h˄mEWAqխ)tﺯKK ? <]ynҜ747A~Ч)#^DTݔ7؋tA81%Jr:tĞnM]p$Orí#'V@I9W4$ Ƿ@rLJi즯 Ě=OU)A}Er?efc~1as剙~ [܍*@l }y#3Y`_bo9KRk^[BgЃ kw+]o|NCX_30KTTWҌ}ȳL#-[ } $Q!=UIdIoF큐::8=4hLqe"z8cㅗ,lމ(7+plnp0eVALOI㝀~1A1CIẈm~kv|Sx(PYF⥀tuVtLTRuǺNށ5KYW!w u}wF]H"}~.ca$ ӓ.Z/X%CPïxnۓv56Rx4N^9`oČQ8p"-O _ކ5[UW5yrL i:B{9Ƶ ęr,/3[ƷcT#[FZmoooC]zx9k䉂;x]Jԭ1#^3Ӌ袧l{~%Hx?l0qɲ^lT6=.a?5IyeXXo+-E]UJiҽ<q lҘj!}rWsr+eCFTd,RlP*e{tKv 6ُbdq9RiL&0.tPUϞ-㖡H" Bb+O ^E.&fͷUMXIp/ޞf։pH/'ӌ+#`DGcgqpFy t*čh=c"1‡7Q|DNN:=ZFr,rގf,}P#<3rN5fSڍS7q{WNwgdo+}p %f{qE}bJ95"ǒ䡳pѨ;3ž E" {z0+_{~;2Fs " _w{Cc[%j{wܛ??bf)r3*LJ>Oѵ#f#cg > gp4!E\1 {LDH3wR^YgtaXLS_\YU:E'T_߃&T +(ڞC̠[Uz{rp;l0tkU> a\ʋG)rbl}vW1>OKa Q6$ϤA.8Zt}ѲJIeAuQ),v~G+c2pҟjPKUOiO]?\, $:#O Vg 08I֒bjOSmkC,sV́:a)ݠQQT1Df9>&m ^w|*8`p>*$ٿX 2vūpK7vo1rmjHFls<[nkҙkt3* ilwl 8jy` D犛j.IaS` |.D)b16 W&xw srZk#RJ&[GKR*Ƽb'sǤyJ(z _wH֐< u_(: l8aezBŻF)ZMfqtzA)藧uT]>K8;" ?&ď0[![S 't@Ū)ݓ0u& i:':Y8̠hIU;f|.`ίPC+pWuѿ@ws-,%-̞uoU.=̣B:Y^ѝ 4`'Ô@ =՞_`Dk˼aNnCOR:@q] Z% 8ԺB24n^.䫤iX' Ws@~DԱ)iFT/w|7 #c&L?)&T=aT]8vsȵ%ᣈ7ĉ4/MI3 H໌7jZFk9%%-DB&$H!ϩ7weҵYLZ19tmTՃS}νH͵3w zc}?#nôX:'(VtՏ8yf nNRb^-NSQ^ʋYH՜,4  s}~쟜8, ϩ98QZ nL$)eďlT_m>{%I@lxC ) փ-|;꣙!\g RYǾNHKzam%6nL4 Lh 85 զ}ƈHI7,WpY8lnSrZ=*)a ijb*3]ǵ rc$-hAЯ*^;fs6l+2u.|{ si>dy+xv)~`V#ClcUL8~ek.9,%]N) @aSsS_957֖G f#"m !9$kZqX9]e YEpK3\0zzTR):ބ)VHl/:w+yMwtൔz+Bοk8E\Ma*]Vp\GYlHY玈y+E"ZsmeXFsHwv`OX˺@md۝Olq #>r>9UqhDJa3)HK(W*L1 ֙#[1g;0p;8>q!R5Lľ5*_7dc]o4Y5e71lK}^$M !2aT*fVU㤞:6J#-B G1E:e!kvm_=@oB|%fjMiǔę+ǁ%-\ BƲ&&Wõ8Jrtx9 xg5f 7C$ JYG t#JKhrH!T >fP[@gG.F}tf;1"1 C3O's}VM9QӗtȠJ'5 s,,0g(%Qő+,~ ?Bg4ڻ!RLM4Xw@`J)=ѓX_swvˆEΝ)hG6 YF1Wg@Ҋ '`nT/)ҡU/0+6/ g?r'jИL H dlUk /F>E$C};3n|:7uu3ܙv6Fj*}턤LFN ݜ+Ү oͬwJgF Bmv BY{]:.9b4J`G:vT]l|7gTEI>$=Mڕa4xӳ$ 5 a擄i~x*#\ g.sfbNgHE UWq(d%r_ ]KX|?b{>Uݫq]*xٿ:I' lp}yf9nhە f#'@Y3ńA=s23h9[2қ┍/ջ驘/T-ф*Vvrߝh7HJ ߪcA:욚)k۔n1W>8 x ~GflJd<1V{&P+"·kr9؊N W9^\7sc{iZi|im9s:*?{ȔLQuӸE*~ugV&cם2^ {/'rj0 +}ۄ8/a32Mo1¦()/к &&T O*ܭy_6` 9cGgccTAy; f;خ8.|=| zqb}l܋ↇAqZG{m蟌 \)TgnOʷna`vWq |ƻ|8ܟF%b4{F$PA&"?F'Xeu$4}g#ȄwxrS9uk:J^Y&6ml"= 0lcU̬0IѸNDQ<>ٽfA֓*ʪ,}K :!DMhS%Lm%MdA6nZI%y=oju]VY3.Da{[§ ;냁AJe6IE2-{c 2]"#-*D]GdrD #$#q뱚AH~HA< H.S!>W~}Hd cJDzM=tV%Cچ@vVgt @̀_#YA4iȴ'%`^ ?Ȭ-}->˫WզTv~ G hwPdsk{!: f47RAIE=h%22 1[ܚ#ddޜh棃wguz~+\)^н+qpI">B:oT/b Sl|͞ D /[xCL tE3$3=fP^AQq"y0Cc3'_kߞ<[͹B1#[T~r@BؿVzٜ&\"Nm"P|SȺḿ,dt=гrZIRmeLP5Pٝ@-eg)A;-~ (W Y;o繺|0Wwl8z=|zlifaSm?]X8ۯev8Y"鑡xt>J,TrTm$F.1vG"8130޹ i/?spwM2U=I}05 S,0=6KڈAY\"륫A9l^̫ =I9+b7Rb|QU7gi)|wb RkN?}!8b"Y#,9arr^ɺ;DIjh=y%R&ܲGɳ+%HVuE@n]TP(ɒ;"xT~ ,{Ltw-F+h~NH2% ?ii;~AR~%1dpL{u<a~Fk~:kZ4$s[ O>e$hl/ɞVNmoV,{g[%EdmJʗn 6 2E|&\5w$*PHJu2!AA,&m2=|?|JVf4-8e%awH4/ʔh ?z곲4Քd G*Ɯ39u}8>c8dKɨ8g 5a!˸!F% $`pꚩ93Z& ~yƫ_?v8䎐\ q?t DJ@% E % ^#WS$vkfU>5#'ɝ:b)=dUa&)==\e9lIL-;q/ܿٱ]Ct9.XZI1U Ӓ4t*wLupK?-7RVs9@._ r@2}!Dլ4D^:nOȌ |:a1K|V ꬪIW2|k# K-+e&a o]F@_x7 ;2VxFcz @4$N F IB ]Uȓ͗6$П,ol;% kWy ( 0Pa6>ك/eZ( 8 ݉ZgMM=Ɲ1;(u㚵0Ex}GbWnu!8u$[ҥ:k^fѺ"|c3OiKu cAń^EHivם/\X,oU4AO{.1yvAdZsc !Tx5U\b8S D1NPmhuoocƃԓ^ᚔ FW,I>Kc/V~A„sQcNBueMqϛ4ƠpfR2F$sL]Ds!oop ~ ~gCv KcT`NڮT'9d*k IiY%7ڌJnC8^:x~},kWC=Wos \Tg,54q  i.ثE^d޸gl79ATm"kc9mͫ2 Q6H1 pK hT@Hh Z pAV\6L}> CH5n<` LB +W'Wۃ> 䪱r58Oqd)Z_-mc<;"kܷXļz/,!ZV&Шn0p>KGњiP4gR^ AԝEd>X#:>+&if})Qj-hШ`WDD= 4.ծ VҸ-aOKk5p{NtG'vlXFu.Fcϩ/VpR{ᑹμtn>w8IawF͐ d{˧ _;stWwCQoMUȦD`Oh$\F* lF0TL+^ޕRq?4YrkTFLTz]$EOU%RB08"s0YN7jkO`s+'ذC?iipt#H}Ji*gbD.'TRZrBT12@4SlShᱨI jb,ʔp[dBvO 5rg4g'0UXPэj}e;%f@ _\W8?XxTfT:\8PwV-Я]iiR*ry gi:9̛Ii{ }~bٛ+M Md())22BJlh*;su|F©ZOSZdV`C2!Zg}da#&mI+VFN*<hrYUazY.B :dYԞuTtW:^\5zmمsS & Ҝrp +U-HhSp?D.MluS\hu h?s l.Nfc?$2A(f.66Aj]' ͌7<R~gXN]K@=J^4<ٴQ:_kw C-%#wc&h-$tO=N ,8tϴ[u,ӶbY@tJ g=<@8=ڑs0N6C>wUFZ1TMZi% {eˉƩRVeHL_" kBv3 C-Js* [S6ԩ=-LH"@Җ"ΒM"`T-NbBy2ޝ5N,k>F@ko9ؽ41s@AYBLdzզ`!Xdoo&/+ҸY4h)0ȽA#Y'Fch-MyHd`8=1v%UM h]=?C$^V@բ`m^&_&R@:mrŒg8izJI!3i"Lc,f۹f`Tݏ6?M:9 );ZJ%B e ^c߃C qU4C \iycvExʕ:4J WuBnɵ((`@P\$6ZmUR 8'y[ h%ML1jlkRZHh68SPߔu Z Ss{S#a.'8M-Zg,.". yC@@fV\ya,QWqySꄹS@O@/'O6^Kclꅥ>F3X ]b4b`5HU{k50Gz&vu +Gk6Lnws 8d7sV9U;\ np;Ҋ3_+8W(_$$8TV^Uýsx2~m+I&5q ?J{o`/2ا$Lb|3$.O?_6kQޗ^WPv+;Hӯx@HV:u>pq!.@38;H+<ûj w/RKP7]Zto?r 2#,Ge}UATKF%[3fIQ'-/Nt`jGw^*5_X)Jq| gU'֊vc3٫XFHo¶K3 zFvld鏣Jun0} 3o"Uw; 6pִdž~)I{f7q9)vю( ED=<.0sĵD+:#kܹ^OCZn6bd%K!]I퓘!lΣ&NddeS!$c({$3krq #̺⁓'+,"kF}ɌiT o)xV'K]q&G ! N2 dz(ŕB MH/{˕+7Ģ#E΢S{ܱ|Ol0A&Ml㆖:L-3&9xdKz§C QD9`V éq9I5E*j~}ibdl!DuʰHHrxtY5?ۘd 2Rv:T&By2`?mnN)VKALhĉ5q̉vN׳ a^Y|ś`j_pCS}Mbb0x![StVw/*q}(@|+=QgyfeJ:k kI#?ZURX/A(anȃrs$];Ԍ N@yGt87)}FG=Br[m$[GC=g~JĻ\mc+Tq]G^CHUg#e]Gؽ aLLV̕,'f}j~#n\ 4MQe-,6K`;1[@C[X="*J8,w߼L=ɍFK&MtƵ{<ߞsp\#̗WsfEQt&{u${|kn󍨨 +1`@[8jfPʭ,rH V^[Fo7Rx LVy[c6B<u^&/%l7;Պ&Z ^c|tF#w|D?3'HI7?p sޠ,}V]w͉Ld (0tdR$_bPӺD':Ac]]]{L z a;[ v*N ' >vhlΛ?`xU!K=XF#iI] 5wǩWɱ@% tIѱZqxX5k2Ie)mbS骺T@ vSQFb5S*Ӌc=&) cEvOYGiGRjAYʸK B0%,59aELsB+ϞwŦ-/& .-1%[7U^%5s+Txrl fn`rJ;!Y+ QegS0J7(0Bm:'#!kZkԼ`ll2Զt*^]/-ȣB{4yYOb\;}KXLRy#BPȒPqxw5Q{t}[.k6\^*Vt^)$@Yɂ|-9#skn9L`G0amJ[΢>ܘ:jdh[A =o0lWqxO$}m<v 4h⮐<{O8^rZW2\edc!bYvQ7Zɻ,_6XuT^Rxdq/]fjN1Y `Q U! Jx5Q"p r(;4fXj.7*J-hF7L[|zJ&MEKpL@PvXPz7^iRE9R46HpR2lr=]=EàEJGcBo*C>&M#Sc| ҰYW 6yz΄엄#8MJ+K<=3G3\mk@PUO#A=o#f`%k3x0b/`rJ]RJRZ:M[ #T?".* }vz4O$dh #Ʋ&"ܟE[~#1@:n#^DSbLQ7Be$q??I _PK9V6#\ys.lHwnJ,' ,iZz7Lz1V"s%m@9?>T%]`eRB4缶,|z3I1#Y!x1$J - i '2ŕ'uOXk哟dLҒ\<|e?GylXw7 & a<.u/T|{\Wb LfvE_ZU7!3@W1$N -Qۇas{-}?4W.38 `xsu^~]g?rD(0FY*(:/qe uOD rhE&F7C_5~pn_v9+&Hk[LMB*q^|LB@ptrO2y{V4vI>Lg7 _;V7܉ꯐcBkԒ;3<' A'r .4 '> !|y\{9rC=kt'ː;y2֍1ѴJuTXNnU=r*qp0\?~ X,J /yʔWaUee4/7 g|M!H XREbUMYgpIqNh,nG5[X/2jG阇׮5MlSTH伦AKr5S MkĩO=֒^ d3U9k{0Rv@+ᰥ=ꇁ~oBS;wjoRjU_W\ U,˽<փF+"R0yБa{0~.8@" -p[эZv Sڛ,vW8{y-$WEr YFlDfOaVM(6\mOՊ$HqXcrAw+;4e’Ɉ6@f%` 6sn>d=@Ny9c1}g쮻}k]8X,h )0|2DDjq^秝0`&($UFEǡ<[!A*#ḍ@ȟ?3KY E <.Ɍt@F7x儬})6Y[R򁲅mV5Iqh>{' D"5D  ;$ p-9;Pz .BD6e7hҤ2@{u {J} _YA%j xuF{B::M4Ghv[?~y DoYlȰVc<8צl,6G>BZ'HՐ,z!}I(R.bG, 57!uÃr1kK[Cw%{VOL|=EL!{zF)o¡B?n2jûD1=}C*`B^H=q\pĖ3LBϬ2mL^ HxV<ت %B!N.:gҊh27}DC=vyRǘ"ť";3\RUFt"νhW#+":v(ό4tD}q]:V9D(y!h{{H27L ӊ0Ռ!Gxb7/\23$m qk%VH ~|0wH8Z* %<~,櫼cpkVq.ҧQ}9cAt>{d;Ձ/hbW"zO_UtOoxĉ}#"7KB $ 1ź5qVm'n0J!$WLm2dWQqb3l;b׻ i#ܷƒ+aL>6.,\4(4 ln6n t6ZF[ +Ph$MX7qxdX;n,c//z|>F_Z*[N7,ש*n L/ o~w d } ?xRVSlg&> : v}eRF !N 7ۮf8'6+\ŇbVCo|'!Av"#1TEK%hqYhf ޯ[3 m= )k-Afhi\GОλP~eTc[|[*J:S1[3J_2L̡Q}2aFcIXV3nTIyCR_?f>TfKIk #g ̀.(襕J䡙e^;yU]xRC5[ JJ"汁 ,ZP4wSn'u V%ܙbVrz+S4GL3ժP+ori[ٰU\ /r OQ 0SnE@ jh vN[]VYbj6ЭZZb^>pܭ=qaPi5G tfG:XT2"BJ?^QQv/SH`Ⱥn!pou|(/g;j䫕 "^'jN pEЁN>+d1ܚSU3]Q"4} 5xSO`7IA=Paچ!crx2^,(+9P~Q~xc ݛ}zssR^9"kr57^Tf}(S(؊v#o7H"UX܅r Ġ/ ϵ0[Q[LXPMMe}=óhlEJgCm)gt (P}>dRdID q|S #l{s(oxdWZU!C>3o1yΙ´jΒd'Z4ܮa#w\]=8etAϛ@O1IH9oZ;'V1p>z=rΖL۫k*$8ԡ풕_wɁS[kq!T8CmIT# ^k,)\RXbq|K'd0)"ж+9\K%}Bʳf@PCNCoL4I/%H+J4fJVȖ tŨoZai` ؽbs궧Ep6F}k{@!|!wr'ETd+^HWw8mʦd'Տ #;D1k}PrMϽ+ޘPʅHюǟljŨ~/'1$n_'ЩGl"/DMV|hJfڭ!*󼾦@UZf} [B 19G&XR# pYďF)LBKn\tw }sPSfN|v1ơaCY"<腣TO;[c~clUܡzH/ӶJ/i0aW2cH$, w2 I)W|c?Sd}i`/FB2_&pH5C8U StcoR = y"R*/m9Vqc#j>/=&gd6mؓV.ʔB Zv:vZsy(ՠ]HhxJyI>i]%PZ/ϻ9|y!fNJ{:9Jk/d91X(U9Qݨ'+06l?4N3I~&=qׯ㒑ܿňD>KAwk RST6$iWq>GDcSz[[4G@Do;^M/T!AgT =QNvO-I1lRKTE|.P1c8?Ă![J|4UUqVfk=L֯+o,Y^-ȨVA,%[f8#.Uaiɭ\4S!1pn9>]iX8fHlKՏ/mM>)Bd6-}#IMv`?/ˋ.^{~AnPnz a8F,"?&mA h+ l\J}!=%hD}w8 X9Mǽ?5B;ϣc$IѐSXDL7 1li"482dd>]Gk:[gQF$y?S Am>2RHg\P;UDTkКb<6䴰HҁGbK ~Aw9'~NstטYP_B0! #|M3D A%7*e*>Y.fYRx ę#`'e+\iC2dQ59{Ui9W']Zw B~&=Wܢ.~;>VK6xnM RSE|6M%y]h5=J%2ǵyXėE61Ջ T;P*`j\a ?dm\_ _M|6Jrh(_sDzp;EQ yw PcI5>Bt, DjW[nK&]ܣ;j c'VSO;g=`X!x@Ą/N>m&p&4뻁߸1[x %TjW,M vW|!XѕF_9RpE3*= ,3vo>h*uM{e@8'<1I,0i=6a5pZo=uzۋh *C#ou*7! 8xm!! kDhI*t>xM| 71& [ĸal:h05QˮwPcȽޡ({|WDSTfޒg|9Fs@2p2n-Ճ77ǖ*6hǕzf:RkT^^;l;8D?I8scPW:µ5\oװG;EN UϰxOrhOӥ\@w^^sx:L+*{@\! X7#2[  eOُ G âKAP=;atBL>j ៝" DmxԖ9Oj$V #zjak2ء(@@' 7&g󇖱֜5hoHX[M^&g&VҀ i$b#gr /XNy{;d#ΈcW#*Eטoeϟ0o<8A۵&u0C@7TnE!H>J%O(i?X+ o%(x8?ezU5 B yh67)bʻ:~t䒔765ZoF79Tl) I 42' 33th?){à5-vM,P3T\^eJL{krK`\8%_f6쥋$׎~|ޣ8Q xMX6\Z'b8Y :`_BWzbC^}:&VfӇ9+:q?\lfVo"!cx10$0τ|:(%y̫Cdޑq6fP X?QR`k?%kˡ/.&+;&Sæ (ӳkmfRE^awn}ʾ@2`ߔn˃S"REx, e>X[V ZvWPJZ(y@G$5 2 EK|޶я±sS/Cg*W ޚj_J`+HzBs ua ~Ct/\B/MK= u .~Vs8# ۳>hS2 x㻞0QG_z' `O\$'>$0ň9iĪYAb#խ\Ipz imq"7=0FBvi?[gd<>OZܽ"h ]|m M]cR@r|| Puҟ}`÷*x3d^%ȡboW"HZ+1,o^s벏|(s]PO6H I?x&#RAexeR* 4]qeQT ~5j Y+2W0vMU[4՟xUd5h i)/o40'8BD<};6auj(l!O=BR,S!=¨JXDcط Z#ˋk[ޚ[rG0Ah8Ř.~]̈́*_l4 [$t2fQ^y ?cUn]o'/:}GwrH~()G }:i4h VUr7atL=,`%&Ei/6b&ZE'\@Z쭌~v۝ip +15- wzBn,J4LXޥbz)7;6Dݴ+w-N0)5?Ye.uv"lRҧβQq4TB!qa'K +EtBRU9OX*vNT4M:"T^cvAK̹$/hwɦڏqǟLQ,k|]J_&W ;SMWoOB-gԺ6@}\豓V L?tkL1R}=\8'"(e7-|Q?QOm=oj~GL,R6Yϼ /W,Q9)gcG*-珩3ߓLy˶rg *-|{ĵU_-o;mЎ8H\o/DoV>,̴3s>9OheFM4HR&a]MKkAŵX%5'Qk(Ņ}V=+U/aaq"d]=?_@~W#"'JjkKr8w01dR\<C+vC^mkDңےz]^UBR4d8C Ըo~ q(N"ηBaBhǨ?zg[ hNV# [%sTqEghjj4 1] *s5)@@Y%IEd,t]'cLPh@%ԓdF#Xʹ!`bu:o+'ˆɳNƪɉBQ~ #0Ԛ16BD^OfZ}CX`%"ЦdѮȱZ7.dAXClh2G  g鿖"($r1Rr@C0sXApXmzD;<tӢΪyWEM969՛Wj \oX/{'xԏǟ4bUNn}wS]Q@&YyK,ғH{ρ'b9|d;Qz^X{<ij0Ɯ~yQMPc xqrA{ôuQW`J:0h=8_{։T9кN-(8h^d R 698䳜}S`,Kd3xQJռ?O1NOC"2B[ ߹Lm܅n6kdQML_JH8nj6S|^b,Ϫo8̜J_.٪>d'g:nzg1(eS?ɦ5Gwzчf§* |fz.n}A Dܱy_(x5#[j8/{E+ֽ.ў)8fua6RT?T KZjwژ߲d YZ