python3-libsemanage-2.9-9.el8_6 > 6 6_6 3!pQp)Tξ7]mtZ`cW ]mtZ` :vb'Rsͪe< >I`{PƂgA:_яwIO1B#41V1\szhJПBԢLR$f |1Ŏ~uCl1S5&lxb=VXjgy;Qa~%E_yluw:$1oQI O&-$q)~K[U:F80 SG~\֦]q&5;os*B[TLf["7\F^8 ]n@|rIϐH 3EZ8]YHF.(чH%vQcb՚e iDOCXԤXdIb  u7AEƌ"NO]:5fo9 =Fpd;yN,zy9-66b552cc3cca4fb08e0a8585be5f896d5fe54bb11c5b531cd14aaaf059e77be4c468414eb62e5e7ab0be59cd8ccb483d00434b763!pQp)Tξ7]mtZ`cW ]mtZ`8MXIGzj3j](~dPጜy;"S%tzbK[in` ?:IG\T8FMڸRS+6?ܨ dBKTAjo?\h3!PlZ,>4(}NPs$ݻ`Uc .6uP#L78ـ ?t;Zu8cKل}&N;rmחeLl0Rd0.R 3e*IO{ivX]^Ggtwi LL`l6WeS\[jFy۽ &,,W%<۰0c*ěnCAu_T`W!i!3"I|iZeOr`P30(EF́ݹCŲHYiS-hd!ך'sti?)|!J$KsV:n7w?΂MBoXW0>p?L?<d " M %1`fl     p (89 H::PBИGЬHIXYZ4[8\D]d^bҴd.e3f6l8tPupvԐwlxՌyլ8Cpython3-libsemanage2.99.el8_6semanage python 3 bindings for libsemanageThe libsemanage-python3 package contains the python 3 bindings for developing SELinux management applications.cWord1-prod-x86build003.svc.aws.rockylinux.orgKojiRockyLGPLv2+infrastructure@rockylinux.orgUnspecifiedhttps://github.com/SELinuxProject/selinux/wikilinuxi686SӦӦ8$AA큤cWcWcWcWcWcWcWcW844cdf17c5d08978f686524dafc083e10290737b1f4fefc1536455ab0b4c0556844cdf17c5d08978f686524dafc083e10290737b1f4fefc1536455ab0b4c05560b5008c3840c18e70a8842fca61988d45f5841dafc4a7d29cc10681081f270c912aafbdd9e637858ecf9254ab43c439072104fdf29b7c6665a888ac99d8c2b9f91d78a3db0848cfac5b7638d6121462efc115857bf35a31fa0cdfa8bc05c0aae../../../../usr/lib/python3.6/site-packages/_semanage.cpython-36m-i386-linux-gnu.sorootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootlibsemanage-2.9-9.el8_6.src.rpmlibsemanage-python3libsemanage-python3(x86-32)python3-libsemanagepython3-libsemanage(x86-32)@@@@@@@@@@@@     @/usr/libexec/platform-pythonlibc.so.6libc.so.6(GLIBC_2.0)libc.so.6(GLIBC_2.1.3)libc.so.6(GLIBC_2.3.4)libc.so.6(GLIBC_2.4)libpython3.6m.so.1.0libselinux-python3libsemanage(x86-32)libsemanage.so.1libsemanage.so.1(LIBSEMANAGE_1.0)libsemanage.so.1(LIBSEMANAGE_1.1)libsemanage.so.1(LIBSEMANAGE_3.4)python(abi)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PartialHardlinkSets)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)rtld(GNU_HASH)2.9-9.el8_63.63.0.4-14.6.0-14.0.4-14.0-15.2-14.14.3cEZb@b8`@_@_R^]µ\@\ @[%@[@[[Zz@ZK@ZZI@ZZ@Z}@Zz@Zu@ZTZfY@YyYJYV@Y@Yx@Y.XX @X@X@XJWH@W9W@Wk@W,@V@V@VIVɦV=@V9@UU@UUUa@UUQ@U+S@S@S @SSShS8@RRrF@R^RNRB@R@-@R:@R-@R)QdQ@QzQu&@QfQQ@P@PP@PQP@P@PP O@O0@Oĺ@OtNO;@OO@N@N@N@N@NNNw.Nw.Np@N\NLN1O@Md@MM)MQ0@Mt@MLuLF@KKsKKKf@K{@Ka|@KTM@K(K@KJJ@J@J$JJJ#J#Jyt@JjJW-@JS8J,@I@II2Io%@Ik0Ik0I7@I7@I1.HN@HN@HN@HǶH*H@H@HW@H=I@GOGOGOG@G[@G G@GGGW@GSGNG5@G0W@G'@FFFFIFIF&@FvFɂ@FFF` @F9F/BF/BE@E@EEɿ@EEEx@El$E4D@D@D@DC@DDD@D@D{DDX@D@D@Dhm@Dhm@Dhm@D_2D?D*vD*vDDCCi@CtC@C@CCC@CC @Cǖ@Cǖ@Cǖ@Cǖ@C@C[C[C @C @C,C @C @CCf@CqCC}@C+CBCYCYC{@Cx|@CtCtCqCp@Cp@CoACiCf@CbC`@C_oC^@C\CX@CWCTCTCTCP@COCLCJWCFc@CBnCA@C:C3@C1K@C/C(C@C Vit Mojzis - 2.9-9Vit Mojzis - 2.9-8Vit Mojzis - 2.9-7Petr Lautrbach - 2.9-6Petr Lautrbach - 2.9-5Vit Mojzis - 2.9-4Vit Mojzis - 2.9-3Vit Mojzis - 2.9-2Petr Lautrbach - 2.9-1Petr Lautrbach - 2.8-5Petr Lautrbach - 2.8-4Petr Lautrbach - 2.8-3.1Petr Lautrbach - 2.8-2Petr Lautrbach - 2.8-1Petr Lautrbach - 2.8-0.rc3.1Petr Lautrbach - 2.8-0.rc2.1Petr Lautrbach - 2.8-0.rc1.1Petr Lautrbach - 2.7-12Petr Lautrbach - 2.7-11Petr Lautrbach - 2.7-10Igor Gnatenko - 2.7-9Fedora Release Engineering - 2.7-8Igor Gnatenko - 2.7-7Iryna Shcherbina - 2.7-6Petr Lautrbach - 2.7-5Petr Lautrbach - 2.7-4Zbigniew Jędrzejewski-Szmek - 2.7-3Zbigniew Jędrzejewski-Szmek - 2.7-2Petr Lautrbach - 2.7-1Fedora Release Engineering - 2.6-6Fedora Release Engineering - 2.6-5Petr Lautrbach - 2.6-4Petr Lautrbach - 2.6-3Petr Lautrbach - 2.6-2Petr Lautrbach - 2.6-1.1Fedora Release Engineering - 2.5-10Charalampos Stratakis - 2.5-9Petr Lautrbach 2.5-8Petr Lautrbach 2.5-7Fedora Release Engineering - 2.5-6Petr Lautrbach - 2.5-5Petr Lautrbach - 2.5-4Petr Lautrbach - 2.5-3Petr Lautrbach 2.5-2Petr Lautrbach 2.5-1Petr Lautrbach 2.5-0.1.rc1Fedora Release Engineering - 2.4-6Robert Kuska - 2.4-5Petr Lautrbach 2.4-4Adam Jackson 2.4-3Petr Lautrbach 2.4-2Petr Lautrbach 2.4-0.6Fedora Release Engineering - 2.3-7Petr Lautrbach 2.4-0.5Petr Lautrbach 2.4-0.4Petr Lautrbach 2.4-0.3Fedora Release Engineering - 2.3-6Miroslav Grepl - 2.3-5Tom Callaway - 2.3-4Fedora Release Engineering - 2.3-3Kalev Lember - 2.3-2Dan Walsh - 2.3-1Dan Walsh - 2.2-3Dan Walsh - 2.2-2Dan Walsh - 2.2-1Dan Walsh - 2.1.10-14Dan Walsh - 2.1.10-13Dan Walsh - 2.1.10-12Dan Walsh - 2.1.10-11Dan Walsh - 2.1.10-10Dan Walsh - 2.1.10-9Dan Walsh - 2.1.10-8Dan Walsh - 2.1.10-7Dan Walsh - 2.1.10-6Dan Walsh - 2.1.10-5Dan Walsh - 2.1.10-4Dan Walsh - 2.1.10-3Dan Walsh - 2.1.10-2Dan Walsh - 2.1.10-1Dan Walsh 2.1.9-4Dan Walsh 2.1.9-3Dan Walsh - 2.1.9-2Dan Walsh - 2.1.9-1David Malcolm - 2.1.8-6David Malcolm - 2.1.8-5Fedora Release Engineering - 2.1.8-4Dan Walsh - 2.1.8-3Dan Walsh - 2.1.8-2Dan Walsh - 2.1.8-1Dan Walsh - 2.1.7-2Dan Walsh - 2.1.7-1Dan Walsh - 2.1.6-3Fedora Release Engineering - 2.1.6-2Dan Walsh - 2.1.6-2Dan Walsh - 2.1.6-1Dan Walsh - 2.1.5-4Dan Walsh - 2.1.5-3Dan Walsh - 2.1.5-2Dan Walsh - 2.1.5-1Dan Walsh - 2.1.4-2Dan Walsh - 2.1.4-2Dan Walsh - 2.1.4-1Dan Walsh - 2.1.3-2Dan Walsh - 2.1.3-1Dan Walsh - 2.1.2-1Dan Walsh - 2.1.0-1Dan Walsh - 2.0.46-6Dan Walsh - 2.0.46-5Dan Walsh - 2.0.46-4Fedora Release Engineering - 2.0.46-3David Malcolm - 2.0.46-2Dan Walsh - 2.0.46-1Thomas Spura - 2.0.45-6David Malcolm - 2.0.45-5David Malcolm - 2.0.45-4Dan Walsh - 2.0.45-3Dan Walsh - 2.0.45-2Dan Walsh - 2.0.45-1Dan Walsh - 2.0.44-2Dan Walsh - 2.0.44-1Dan Walsh - 2.0.43-4Dan Walsh - 2.0.43-3Dan Walsh - 2.0.43-2Dan Walsh - 2.0.43-1Dan Walsh - 2.0.42-1Dan Walsh - 2.0.41-1Dan Walsh - 2.0.39-1Dan Walsh - 2.0.38-2Dan Walsh - 2.0.38-1Dan Walsh - 2.0.37-1Dan Walsh - 2.0.36-2Dan Walsh - 2.0.36-1Dan Walsh - 2.0.35-2Dan Walsh - 2.0.35-1Fedora Release Engineering - 2.0.33-3Dan Walsh - 2.0.33-2Dan Walsh - 2.0.33-1Dan Walsh - 2.0.32-1Dan Walsh - 2.0.31-5Dan Walsh - 2.0.31-4Fedora Release Engineering - 2.0.31-3Dan Walsh - 2.0.31-2Dan Walsh - 2.0.31-1Dan Walsh - 2.0.30-3Ignacio Vazquez-Abrams - 2.0.30-2Dan Walsh - 2.0.30-1Ignacio Vazquez-Abrams - 2.0.29-2Dan Walsh - 2.0.28-1Dan Walsh - 2.0.28-2Dan Walsh - 2.0.28-1Dan Walsh - 2.0.27-3Dan Walsh - 2.0.27-2Dan Walsh - 2.0.27-1Dan Walsh - 2.0.26-1Dan Walsh - 2.0.25-3Tom "spot" Callaway - 2.0.25-2Dan Walsh - 2.0.25-1Dan Walsh - 2.0.24-1Dan Walsh - 2.0.23-1Dan Walsh - 2.0.22-1Dan Walsh - 2.0.20-1Dan Walsh - 2.0.19-1Dan Walsh - 2.0.18-1Dan Walsh - 2.0.16-1Dan Walsh - 2.0.15-2Dan Walsh - 2.0.15-1Dan Walsh - 2.0.14-5Dan Walsh - 2.0.14-3Dan Walsh - 2.0.14-2Dan Walsh - 2.0.14-1Dan Walsh - 2.0.12-1Dan Walsh - 2.0.11-1Dan Walsh - 2.0.10-2Dan Walsh - 2.0.10-1Dan Walsh - 2.0.9-1Dan Walsh - 2.0.6-2Dan Walsh - 2.0.6-1Dan Walsh - 2.0.5-1Dan Walsh - 2.0.4-1Dan Walsh - 2.0.3-5Dan Walsh - 2.0.3-4Dan Walsh - 2.0.3-3Dan Walsh - 2.0.3-2Dan Walsh - 2.0.3-1Dan Walsh - 2.0.2-1Dan Walsh - 2.0.1-2Dan Walsh - 2.0.1-1Dan Walsh - 2.0.0-1Dan Walsh - 1.10.1-1Dan Walsh - 1.9.2-1Dan Walsh - 1.9.1-3Jeremy Katz - 1.9.1-2Dan Walsh - 1.9.1-1Dan Walsh - 1.8-1Dan Walsh - 1.6.17-1Dan Walsh - 1.6.16-3Dan Walsh - 1.6.16-2Dan Walsh - 1.6.16-1Dan Walsh - 1.6.15-1Dan Walsh - 1.6.13-3Dan Walsh - 1.6.13-2Dan Walsh - 1.6.13-1Dan Walsh - 1.6.12-2Dan Walsh - 1.6.12-1Dan Walsh - 1.6.11-1Dan Walsh - 1.6.9-1Dan Walsh - 1.6.8-2Dan Walsh - 1.6.8-1Dan Walsh - 1.6.7-3Dan Walsh - 1.6.7-2Dan Walsh - 1.6.7-1Dan Walsh - 1.6.6-1Dan Walsh - 1.6.3-1Dan Walsh - 1.6.2-2Dan Walsh - 1.6.2-1Dan Walsh - 1.6-1Dan Walsh - 1.5.28-1Dan Walsh - 1.5.26-1Dan Walsh - 1.5.23-1Jesse Keating - 1.5.21-2.1Dan Walsh - 1.5.21-2Dan Walsh - 1.5.21-1Jesse Keating - 1.5.20-1.1Dan Walsh 1.5.20-1Dan Walsh 1.5.19-1Dan Walsh 1.5.18-1Dan Walsh 1.5.16-1Dan Walsh 1.5.15-1Dan Walsh 1.5.14-2Dan Walsh 1.5.14-1Dan Walsh 1.5.9-1Dan Walsh 1.5.8-1Dan Walsh 1.5.6-1Dan Walsh 1.5.4-2Dan Walsh 1.5.4-1Dan Walsh 1.5.3-3Dan Walsh 1.5.3-2Dan Walsh 1.5.3-1Dan Walsh 1.5.1-2Dan Walsh 1.5.1-1Jesse Keating Dan Walsh 1.4-1Dan Walsh 1.3.64-1Dan Walsh 1.3.63-1Dan Walsh 1.3.61-1Dan Walsh 1.3.59-1Dan Walsh 1.3.56-2Dan Walsh 1.3.56-1Dan Walsh 1.3.53-3Dan Walsh 1.3.53-2Dan Walsh 1.3.53-1Dan Walsh 1.3.52-1Dan Walsh 1.3.51-1Dan Walsh 1.3.48-1Dan Walsh 1.3.43-1Dan Walsh 1.3.41-1Dan Walsh 1.3.39-1Dan Walsh 1.3.38-1Dan Walsh 1.3.36-1Dan Walsh 1.3.35-1Dan Walsh 1.3.34-1Dan Walsh 1.3.32-1Dan Walsh 1.3.30-1Dan Walsh 1.3.28-1Dan Walsh 1.3.24-1Dan Walsh 1.3.20-1Dan Walsh 1.3.20-1Dan Walsh 1.3.18-1Dan Walsh 1.3.14-1Dan Walsh 1.3.11-1Dan Walsh 1.3.10-1Dan Walsh 1.3.9-1Dan Walsh 1.3.8-1Dan Walsh 1.3.7-1Dan Walsh 1.3.5-1Dan Walsh 1.3.4-1Dan Walsh 1.3.3-1Dan Walsh 1.3.2-1Dan Walsh 1.3.1-1Dan Walsh 1.1.6-1Dan Walsh 1.1.3-1- always write kernel policy when check_ext_changes is specified (#2129139)- Bump release to get around OSCI issues- Trivial style fixes - Free contents of modkey in semanage_direct_remove - Fix USE_AFTER_FREE (CWE-672) in semanage_direct_write_langext() - add missing include to boolean_record.c - move module hashing into libsemanage - move compressed file handling into a separate object - clean up semanage_direct_commit() a bit - optionally rebuild policy when modules are changed externally - add command-line option to detect module changes (#2049186)- sync filesystem with sandbox (#1913224)- Revert "genhomedircon: check usepasswd" (rhbz#1871786) - semanage.conf - improve usepasswd=False explanation (rhbz#1871786) - semanage.conf - expand list of ignoredirs (rhbz#1871786)- genhomedircon: check usepasswd (rhbz#1871786)- Fsync final files before rename (#1838762)- Add support for DCCP and SCTP protocols (#1563742)- SELinux userspace 2.9 release- genhomedircon - improve handling large groups- Fix RESOURCE_LEAK and USE_AFTER_FREE coverity scan defects- reset umask before creating directories - Include user name in ROLE_REMOVE audit events- Don't build the Python 2 subpackage (#1567359)- SELinux userspace 2.8 release- SELinux userspace 2.8-rc3 release candidate- SELinux userspace 2.8-rc2 release candidate- SELinux userspace 2.8-rc1 release candidate- build: Replace PYSITEDIR with PYTHONLIBDIR - direct_api.c: Fix iterating over array (#1557468)- Revert "remove access() check to make setuid programs work" (#1557468)- properly check return value of iterate function - Use umask(0077) for fopen() write operations - Return commit number if save-previous false - Allow tmp files to be kept if a compile fails - build: follow standard semantics for DESTDIR and PREFIX - Improve warning for installing disabled module - silence clang static analyzer report - remove access() check to make setuid programs work- Escape macros in %changelog- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild- Switch to %ldconfig_scriptlets- Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)- free genhomedircon fallback user - Rebuild with libsepol-2.7-3 and libselinux-2.7-6- Add support for listing fcontext.homedirs file (#1409813)- Add Provides for the old names without %_isa- Python 2 binary package renamed to python2-libsemanage See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3 - Python 3 binary package renamed to python3-libsemanage- Update to upstream release 2017-08-04 - Use 'sefcontext_compile -r' when it's run during SELinux policy build- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- Follow upstream and rename _semanage.so to _semanage.cpython-36m-x86_64-linux-gnu.so- Do not list duplicate port entries after setting a boolean (#1439875)- Fix FTBFS - fatal error (#1427903)- Update to upstream release 2016-10-14- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild- Rebuild for Python 3.6- Fixes bug preventing the installation of base modules - make distclean target work - Do not always print a module name warning - Use pp module name instead of filename when installing module - tests: Do not force using gcc - genhomedircon: remove hardcoded refpolicy strings - genhomedircon: add support for %group syntax - genhomedircon: generate contexts for logins mapped to the default user - Validate and compile file contexts before installing - Swap tcp and udp protocol numbers- Rebuilt with libsepol-2.5-9 and libselinux-2.5-11- https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages- Sort object files for deterministic linking order - Support overriding Makefile RANLIB - Respect CC and PKG_CONFIG environment variable- Fix multiple spelling errors - genhomedircon: %{USERID} and %{USERNAME} support and code cleanup- Enable expand-check by default (#1319652)- Use fully versioned arch-specific requires- Update to upstream release 2016-02-23- Update to upstream rc1 release 2016-01-07- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild- Rebuilt for Python3.5 rebuild- Save homedir_template in the policy store for genhomedircon https://bugs.gentoo.org/558686- Pass ldflags into the build so hardening works- semanage_migrate_store: use /usr/bin/python3 - move semanage_migrate_store script to libsemanage-python3- Allow to use compressed modules without a compression extension- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- add /var/lib/selinux/tmp directory- semanage_migrate_store: add -r option for migrating inside chroots- Update to upstream release 2.4- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild- Skip policy module re-link when only setting booleans. * patch from Stephen Smalley- fix license handling- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild- Rebuilt for https://fedoraproject.org/wiki/Changes/Python_3.4- Update to upstream * Fix memory leak in semanage_genhomedircon from Thomas Hurd.- libsemanage: fix memory leak in semanage_genhomedircon - Patch from THomas Hurd- Move semanage.conf man page from devel package to main package- Update to upstream * Avoid duplicate list entries from Dan Walsh. * Add audit support to libsemanage from Dan Walsh. * Remove policy.kern and replace with symlink from Dan Walsh. * Apply a MAX_UID check for genhomedircon from Laurent Bigonville. * Fix man pages from Laurent Bigonville.- Cleanup handling of missing mls_range to fix problems with useradd -Z - Fix auditing of login record changes, roles were not working correctly. Resolves: #952237- Fix errors found by coverity Resolves: #952237- Do not fail on missing SELinux User Record when adding login record- Add msg to audit records- Do not write error message to screen when looking for previous record for auditing. - Add mls_range from user record if the MLS range is not specified by the seuser add record. - Error out if seuser or mls range is not specified when adding user records- Create symlink from policy.kern to active kernel.- Unlink policy.kern when done to save space.- Move handling of role audit records into the library - Patch stops semanage from removing user record while in use- Remove dependance on selinux-policy, /etc/selinux should be owned by libsemanage, and selinux-policy can require it.- Allways build python3 version-- Fix test suite to build- Revert some changes which are causing the wrong policy version file to be created- Update to upstream * Add sefcontext_compile to compile regex everytime policy is rebuilt * Cleanup/fix enable/disable/remove module. * redo genhomedircon minuid * fixes from coverity * semanage_store: do not leak memory in semanage_exec_prog * genhomedircon: remove useless conditional in get_home_dirs * genhomedircon: double free in get_home_dirs * fcontext_record: do not leak on error in semanage_fcontext_key_create * genhomedircon: do not leak on failure in write_gen_home_dir_context * semanage_store: do not leak fd * genhomedircon: do not leak shells list * semanage_store: do not leak on strdup failure * semanage_store: rewrite for readability- Add selinux-policy as a requires to get /etc/selinux owned- Update to latest patches from eparis/Upstream - libsemanage: fixes from coverity - libsemange: redo genhomedircon minuid- Fix handling of missing semanage permissive -d foo, not failing correctly - Previous to this fix the first module beginning with foo would get deleted.- Update to upstream * libsemanage: do not set soname needlessly * libsemanage: remove PYTHONLIBDIR and ruby equivalent * do boolean name substitution * Fix segfault for building standard policies.- rebuild for https://fedoraproject.org/wiki/Features/Python_3.3- remove rhel logic from with_python3 conditional- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- Attempt to allocate memory for selinux_binary_policy_path and free memory - allocated by asprintf.- Fix asprintf within an asprintf call- Update to upstream * remove build warning when build swig c files * additional makefile support for rubywrap * ignore 80 column limit for readability * semanage_store: fix snprintf length argument by using asprintf * Use default semanage.conf as a fallback * use after free in python bindings- Apply patch from Sven Vermeulen to fix problem with python3 bindings.- Update to upstream * Alternate path for semanage.conf * do not link against libpython, this is considered bad in Debian * Allow to build for several ruby version * fallback-user-level- Check in correct patch.- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild- Add patch form Xin Ouyang to make library use private semanage.conf-Update to upstream * add ignoredirs config for genhomedircon * Fallback_user_level can be NULL if you are not using MLS- Rebuild with latest libsepol- Rebuild with latest libsepol- Add support for ignoredirs param in /etc/selinux/semanage.conf- Upgrade to upstream * regenerate .pc on VERSION change * maintain mode even if umask is tighter * semanage.conf man page * create man5dir if not exist- Fix handling of umask, so files get created with the correct label.- Add Guido Trentalancia semanage.conf man page-Update to upstream * Create a new preserve_tunables flag * tree: default make target to all not * fix semanage_store_access_check calling arguments- Add support for preserving tunables-Update to upstream * python wrapper makefile changes-Update to upstream 2.1.2 2011-08-17 * print error debug info for buggy fc * introduce semanage_set_root and friends * throw exceptions in python rather than return * python3 support. * patch for MCS/MLS in user files 2.1.1 2011-08-01 * Remove generated files, expand .gitignore * Use -Werror and change a few prototypes to support it- Update to upstream * Release, minor version bump- More fixes for disabled modules- Change libsemanage mechanism for handling disabled modules. Now it will only create a flag for a module indicating the module is disabled. MODULE.pp.disabled, it will no longer rename the module. This way we can ship active modules in rpm.- Add semanage_set_selinux_path, to allow semodule to work on alternate selinux pools- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- big reworking of the support-multiple-python-builds patch to deal with PEP 3149: the latest Python 3.2 onwards uses include paths and library names that don't fit prior naming patterns, and so we must query python3-config for this information. To complicate things further, python 2's python-config doesn't understand all of the options needed ("--extension-suffix"). I've thus added new Makefile variables as needed, to be supplied by the specfile by invoking the appropriate config tool (or by hardcoding the old value for "--extension-suffix" i.e. ".so") - rework python3 manifest for PEP 3149, and rebuild for newer python3- Update to upstream * Fix compliation under GCC 4.6 by Justin Mattock- rebuild with python3.2 http://lists.fedoraproject.org/pipermail/devel/2010-August/141368.html- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild- add python3 subpackage- Fix -devel package to point at the correct shared library- Move shared library to /usr/lib- Update to upstream * Add enable/disable patch support from Dan Walsh. * Add usepasswd flag to semanage.conf to disable genhomedircon using passwd from Dan Walsh. * regenerate swig wrappers- Allow disable of usepasswd- Update to upstream * Replace usage of fmemopen() with sepol_policy_file_set_mem() since glibc < 2.9 does not support binary mode ('b') for fmemopen'd streams.- Cleanup spec file- Splect libsemanage.a into a static subpackage to keep fedora packaging guidelines happy- Rebuild all c programs with -fPIC- Update to upstream * Move libsemanage.so to /usr/lib * Add NAME lines to man pages from Manoj Srivastava- Update to upstream * Move load_policy from /usr/sbin to /sbin from Dan Walsh.- Update to upstream * Add pkgconfig file from Eamon Walsh. * Add semanage_set_check_contexts() function to disable calling setfiles- Update to upstream * make swigify- Dont relabel /root with genhomedircon- Update to upstream * Change semodule upgrade behavior to install even if the module is not present from Dan Walsh. * Make genhomedircon trim excess '/' from homedirs from Dan Walsh.- Update to upstream * Fix persistent dontaudit support to rebuild policy if the dontaudit state is changed from Chad Sellers. - Move load_policy to /sbin- Add enable/disable modules- Update to upstream * Changed bzip-blocksize=0 handling to support existing compressed modules in the store.- Make sure /root is not used in genhomedircon- Revert hard linking of files between tmp/active/previous. - Enable configuration of bzip behavior from Stephen Smalley. - bzip-blocksize=0 to disable compression and decompression support. - bzip-blocksize=1..9 to set the blocksize for compression. - bzip-small=true to reduce memory usage for decompression.- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- Put check for /root back into genhomedircon- Update to upstream- Update to upstream * Ruby bindings from David Quigley.- Return error on invalid file- Fix typo- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild- Fix link to only link on sandbox- Update to upstream * Policy module compression (bzip) support from Dan Walsh. * Hard link files between tmp/active/previous from Dan Walsh.- Fix up patch to get it upstreamed- Rebuild for Python 2.6- Add semanage_mls_enabled() interface from Stephen Smalley.- Rebuild for Python 2.6- Update to upstream * Add USER to lines to homedir_template context file from Chris PeBenito.- Add compression support- Update to upstream * allow fcontext and seuser changes without rebuilding the policy from Dan Walsh- Additional fixes for Don't rebuild on fcontext or seuser modifications- Don't rebuild on fcontext or seuser modifications- Update to upstream * Modify genhomedircon to skip groupname entries. Ultimately we need to expand them to the list of users to support per-role homedir labeling when using the groupname syntax.- Update to upstream * Fix bug in genhomedircon fcontext matches logic from Dan Walsh. Strip any trailing slash before appending /*$.- Another fix for genhomedircon- fix license tag- Update to upstream * Do not call genhomedircon if the policy was not rebuilt from Stephen Smalley. Fixes semanage boolean -D seg fault (bug 441379).- Update to upstream * make swigify- Update to upstream * Use vfork rather than fork for libsemanage helpers to reduce memory overhead as suggested by Todd Miller.- Update to upstream * Free policydb before fork from Joshua Brindle. * Drop the base module immediately after expanding to permit memory re-use from Stephen Smalley.- Update to upstream * Use sepol_set_expand_consume_base to reduce peak memory usage when using semodule- Update to upstream * Fix genhomedircon to not override a file context with a homedir context from Todd Miller.- Update to upstream * Fix spurious out of memory error reports. * Merged second version of fix for genhomedircon handling from Caleb Case.- Update to upstream * Merged fix for genhomedircon handling of missing HOME_DIR or HOME_ROOT templates from Caleb Case.- Stop differentiating on user for homedir labeling- Update to upstream * Fix genhomedircon handling of shells and missing user context template from Dan Walsh. * Copy the store path in semanage_select_store from Dan Walsh. - Add expand-check=0 to semanage.conf- Fix handling of /etc/shells so genhomedircon will work- Allow semanage_genhomedircon to work with out a USER int homedir.template- Fix semanage_select_store to allocate memory, fixes crash on invalid store- Upgrade to latest from NSA * Call rmdir() rather than remove() on directory removal so that errno isn't polluted from Stephen Smalley. * Allow handle_unknown in base to be overridden by semanage.conf from Stephen Smalley.- Upgrade to latest from NSA * ustr cleanups from James Antill. * Ensure that /root gets labeled even if using the default context from Dan Walsh.- Upgrade to latest from NSA * Fix ordering of file_contexts.homedirs from Todd Miller and Dan Walsh.- Fix sort order on generated homedir context- Upgrade to latest from NSA * Fix error checking on getpw*_r functions from Todd Miller. * Make genhomedircon skip invalid homedir contexts from Todd Miller. * Set default user and prefix from seusers from Dan Walsh. * Add swigify Makefile target from Dan Walsh.- Upgrade to latest from NSA * Pass CFLAGS to CC even on link command, per Dennis Gilmore. * Clear errno on non-fatal errors to avoid reporting them upon a later error that does not set errno. * Improve reporting of system errors, e.g. full filesystem or read-only filesystem from Stephen Smalley. - Fix segfault in genhomedircon when using bad user names- Fix genhomedircon code to only generate valid context - Fixes autorelabel problem- Upgrade to latest from NSA * Change to use getpw* function calls to the _r versions from Todd Miller.- Upgrade to latest from NSA- Upgrade to latest from NSA * Allow dontaudits to be turned off via semanage interface when updating policy- Add ability to load a policy without dontaudit rules -- Rebuild to fix segfault on x86 platforms, swigify on each build- Rebuild for rawhide- Apply patch to fix dependencies in spec file from Robert Scheck- Upgrade to latest from NSA * Fix to libsemanage man patches so whatis will work better from Dan Walsh- Upgrade to latest from NSA - Merged optimizations from Stephen Smalley. - do not set all booleans upon commit, only those whose values have changed - only install the sandbox upon commit if something was rebuilt- Add SELinux to Man page Names so man -k will work- Merged dbase_file_flush patch from Dan Walsh. - This removes any mention of specific tools (e.g. semanage) - from the comment header of the auto-generated files, - since there are multiple front-end tools.- Upgrade to latest from NSA * Merged Makefile test target patch from Caleb Case. * Merged get_commit_number function rename patch from Caleb Case. * Merged strnlen -> strlen patch from Todd Miller.- Upgrade to latest from NSA * Merged python binding fix from Dan Walsh. * Updated version for stable branch.- Upgrade to latest from NSA * Merged patch to optionally reduce disk usage by removing the backup module store and linked policy from Karl MacMillan * Merged patch to correctly propagate return values in libsemanage- Apply Karl MacMillan patch to get proper error codes.- rebuild against python 2.5- Upgrade to latest from NSA * Merged patch to compile wit -fPIC instead of -fpic from Manoj Srivastava to prevent hitting the global offest table limit. Patch changed to include libselinux and libsemanage in addition to libsepol.- Upgrade to latest from NSA * Updated version for release.- Upgrade to latest from NSA * Merged patch to skip reload if no active store exists and the store path doesn't match the active store path from Dan Walsh. * Merged patch to not destroy sepol handle on error path of connect from James Athey. * Merged patch to add genhomedircon path to semanage.conf from James Athey.- Fix semanage to not load if is not the correct policy type and it is installing- Fix requires lines- Upgrade to latest from NSA * Make most copy errors fatal, but allow exceptions for file_contexts.local, seusers, and netfilter_contexts if the source file does not exist in the store.- Upgrade to latest from NSA * Merged separate local file contexts patch from Chris PeBenito. * Merged patch to make most copy errors non-fatal from Dan Walsh.- Change other updates to be non-fatal- Change netfilter stuff to be non-fatal so update can proceed.- Upgrade to latest from NSA * Merged netfilter contexts support from Chris PeBenito.- Rebuild for new gcc- Upgrade to latest from NSA * Merged support for read operations on read-only fs from Caleb Case (Tresys Technology).- Upgrade to latest from NSA * Lindent. * Merged setfiles location check patch from Dan Walsh.- Upgrade to latest from NSA * Merged several fixes from Serge Hallyn: dbase_file_cache: deref of uninit data on error path. dbase_policydb_cache: clear fp to avoid double fclose semanage_fc_sort: destroy temp on error paths- Handle setfiles being in /sbin or /usr/sbin- Upgrade to latest from NSA * Updated default location for setfiles to /sbin to match policycoreutils. This can also be adjusted via semanage.conf using the syntax: [setfiles] path = /path/to/setfiles args = -q -c $@ $< [end]- Spec file cleanup from n0dalus+redhat@gmail.com- Add /usr/include/semanage to spec file- Upgrade to latest from NSA * Merged fix warnings patch from Karl MacMillan.- Upgrade to latest from NSA * Merged updated file context sorting patch from Christopher Ashworth, with bug fix for escaped character flag. * Merged file context sorting code from Christopher Ashworth (Tresys Technology), based on fc_sort.c code in refpolicy. * Merged python binding t_output_helper removal patch from Dan Walsh. * Regenerated swig files.- Fix to work with new version of swig - Upgrade to latest from NSA * Merged corrected fix for descriptor leak from Dan Walsh.- Fix leaky descriptor- Upgrade to latest from NSA * Merged Makefile PYLIBVER definition patch from Dan Walsh. * Merged man page reorganization from Ivan Gyurdiev.- Make work on RHEL4 - Upgrade to latest from NSA * Merged abort early on merge errors patch from Ivan Gyurdiev. * Cleaned up error handling in semanage_split_fc based on a patch by Serge Hallyn (IBM) and suggestions by Ivan Gyurdiev. * Merged MLS handling fixes from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged bug fix for fcontext validate handler from Ivan Gyurdiev. * Merged base_merge_components changes from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged paths array patch from Ivan Gyurdiev. * Merged bug fix patch from Ivan Gyurdiev. * Merged improve bindings patch from Ivan Gyurdiev. * Merged use PyList patch from Ivan Gyurdiev. * Merged memory leak fix patch from Ivan Gyurdiev. * Merged nodecon support patch from Ivan Gyurdiev. * Merged cleanups patch from Ivan Gyurdiev. * Merged split swig patch from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged optionals in base patch from Joshua Brindle. * Merged treat seusers/users_extra as optional sections patch from Ivan Gyurdiev. * Merged parse_optional fixes from Ivan Gyurdiev.- bump again for double-long bug on ppc(64)- Fix handling of seusers and users_map file- Upgrade to latest from NSA * Merged seuser/user_extra support patch from Joshua Brindle. * Merged remote system dbase patch from Ivan Gyurdiev.- rebuilt for new gcc4.1 snapshot and glibc changes- Upgrade to latest from NSA * Merged clone record on set_con patch from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged fname parameter patch from Ivan Gyurdiev. * Merged more size_t -> unsigned int fixes from Ivan Gyurdiev. * Merged seusers.system patch from Ivan Gyurdiev. * Merged improve port/fcontext API patch from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged seuser -> seuser_local rename patch from Ivan Gyurdiev. * Merged set_create_store, access_check, and is_connected interfaces from Joshua Brindle.- Upgrade to latest from NSA * Regenerate python wrappers.- Upgrade to latest from NSA * Merged pywrap Makefile diff from Dan Walsh. * Merged cache management patch from Ivan Gyurdiev. * Merged bugfix for dbase_llist_clear from Ivan Gyurdiev. * Merged remove apply_local function patch from Ivan Gyurdiev. * Merged only do read locking in direct case patch from Ivan Gyurdiev. * Merged cache error path memory leak fix from Ivan Gyurdiev. * Merged auto-generated file header patch from Ivan Gyurdiev. * Merged pywrap test update from Ivan Gyurdiev. * Merged hidden defs update from Ivan Gyurdiev.- Break out python out of regular Makefile- Upgrade to latest from NSA * Merged disallow port overlap patch from Ivan Gyurdiev. * Merged join prereq and implementation patches from Ivan Gyurdiev. * Merged join user extra data part 2 patch from Ivan Gyurdiev. * Merged bugfix patch from Ivan Gyurdiev. * Merged remove add_local/set_local patch from Ivan Gyurdiev. * Merged user extra data part 1 patch from Ivan Gyurdiev. * Merged size_t -> unsigned int patch from Ivan Gyurdiev. * Merged calloc check in semanage_store patch from Ivan Gyurdiev, bug noticed by Steve Grubb. * Merged cleanups after add/set removal patch from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged const in APIs patch from Ivan Gyurdiev. * Merged validation of local file contexts patch from Ivan Gyurdiev. * Merged compare2 function patch from Ivan Gyurdiev. * Merged hidden def/proto update patch from Ivan Gyurdiev.- Upgrade to latest from NSA * Re-applied string and file optimization patch from Russell Coker, with bug fix. * Reverted string and file optimization patch from Russell Coker. * Clarified error messages from parse_module_headers and parse_base_headers for base/module mismatches.- Upgrade to latest from NSA * Clarified error messages from parse_module_headers and parse_base_headers for base/module mismatches. * Merged string and file optimization patch from Russell Coker. * Merged swig header reordering patch from Ivan Gyurdiev. * Merged toggle modify on add patch from Ivan Gyurdiev. * Merged ports parser bugfix patch from Ivan Gyurdiev. * Merged fcontext swig patch from Ivan Gyurdiev. * Merged remove add/modify/delete for active booleans patch from Ivan Gyurdiev. * Merged man pages for dbase functions patch from Ivan Gyurdiev. * Merged pywrap tests patch from Ivan Gyurdiev.- Patch to fix add- Upgrade to latest from NSA * Merged patch series from Ivan Gyurdiev. This includes patches to: - separate file rw code from linked list - annotate objects - fold together internal headers - support ordering of records in compare function - add active dbase backend, active booleans - return commit numbers for ro database calls - use modified flags to skip rebuild whenever possible - enable port interfaces - update swig interfaces and typemaps - add an API for file_contexts.local and file_contexts - flip the traversal order in iterate/list - reorganize sandbox_expand - add seusers MLS validation - improve dbase spec/documentation - clone record on set/add/modify- Add Ivans patch to turn on ports- Remove patch since upstream does the right thing- Upgrade to latest from NSA * Merged further header cleanups from Ivan Gyurdiev. * Merged toggle modified flag in policydb_modify, fix memory leak in clear_obsolete, polymorphism vs headers fix, and include guards for internal headers patches from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged toggle modified flag in policydb_modify, fix memory leak in clear_obsolete, polymorphism vs headers fix, and include guards for internal headers patches from Ivan Gyurdiev.- Upgrade to latest from NSA * Added file-mode= setting to semanage.conf, default to 0644. Changed semanage_copy_file and callers to use this mode when installing policy files to runtime locations.- rebuilt- Fix mode of output seusers file- Upgrade to latest from NSA * Changed semanage_handle_create() to set do_reload based on is_selinux_enabled(). This prevents improper attempts to load policy on a non-SELinux system.- Upgrade to latest from NSA * Dropped handle from user_del_role interface. * Removed defrole interfaces.- Upgrade to latest from NSA * Merged Makefile python definitions patch from Dan Walsh. * Removed is_selinux_mls_enabled() conditionals in seusers and users file parsers.- Add additional swig objects * Merged wrap char*** for user_get_roles patch from Joshua Brindle. * Merged remove defrole from sepol patch from Ivan Gyurdiev. * Merged swig wrappers for modifying users and seusers from Joshua Brindle.- Add additional swig objects- Upgrade to latest from NSA * Fixed free->key_free bug. * Merged clear obsolete patch from Ivan Gyurdiev. * Merged modified swigify patch from Dan Walsh (original patch from Joshua Brindle). * Merged move genhomedircon call patch from Chad Sellers.- Add genhomedircon patch from Joshua Brindle- Add swigify patch from Joshua Brindle- Upgrade to latest from NSA * Merged move seuser validation patch from Ivan Gyurdiev. * Merged hidden declaration fixes from Ivan Gyurdiev, with minor corrections.- Upgrade to latest from NSA * Merged cleanup patch from Ivan Gyurdiev. This renames semanage_module_conn to semanage_direct_handle, and moves sepol handle create/destroy into semanage handle create/destroy to allow use even when disconnected (for the record interfaces).- Upgrade to latest from NSA * Clear modules modified flag upon disconnect and commit. * Added tracking of module modifications and use it to determine whether expand-time checks should be applied on commit. * Reverted semanage_set_reload_bools() interface.- Upgrade to latest from NSA * Disabled calls to port dbase for merge and commit and stubbed out calls to sepol_port interfaces since they are not exported. * Merged rename instead of copy patch from Joshua Brindle (Tresys). * Added hidden_def/hidden_proto for exported symbols used within libsemanage to eliminate relocations. Wrapped type definitions in exported headers as needed to avoid conflicts. Added src/context_internal.h and src/iface_internal.h. * Added semanage_is_managed() interface to allow detection of whether the policy is managed via libsemanage. This enables proper handling in setsebool for non-managed systems. * Merged semanage_set_reload_bools() interface from Ivan Gyurdiev, to enable runtime control over preserving active boolean values versus reloading their saved settings upon commit.- Upgrade to latest from NSA * Merged seuser parser resync, dbase tracking and cleanup, strtol bug, copyright, and assert space patches from Ivan Gyurdiev. * Added src/*_internal.h in preparation for other changes. * Added hidden/hidden_proto/hidden_def to src/debug.[hc] and src/seusers.[hc].- Upgrade to latest from NSA * Merged interface parse/print, context_to_string interface change, move assert_noeof, and order preserving patches from Ivan Gyurdiev. * Added src/dso.h in preparation for other changes. * Merged install seusers, handle/error messages, MLS parsing, and seusers validation patches from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged record interface, dbase flush, common database code, and record bugfix patches from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged dbase policydb list and count change from Ivan Gyurdiev. * Merged enable dbase and set relay patches from Ivan Gyurdiev.- Update from NSA * Merged query APIs and dbase_file_set patches from Ivan Gyurdiev.- Update from NSA * Merged sepol handle passing, seusers support, and policydb cache patches from Ivan Gyurdiev.- Update from NSA * Merged resync to sepol changes and booleans fixes/improvements patches from Ivan Gyurdiev. * Merged support for genhomedircon/homedir template, store selection, explicit policy reload, and semanage.conf relocation from Joshua Brindle.- Update from NSA * Merged resync to sepol changes and transaction fix patches from Ivan Gyurdiev. * Merged reorganize users patch from Ivan Gyurdiev. * Merged remove unused relay functions patch from Ivan Gyurdiev.- Update from NSA * Fixed policy file leaks in semanage_load_module and semanage_write_module. * Merged further database work from Ivan Gyurdiev. * Fixed bug in semanage_direct_disconnect.- Update from NSA * Merged interface renaming patch from Ivan Gyurdiev. * Merged policy component patch from Ivan Gyurdiev. * Renamed 'check=' configuration value to 'expand-check=' for clarity. * Changed semanage_commit_sandbox to check for and report errors on rename(2) calls performed during rollback. * Added optional check= configuration value to semanage.conf and updated call to sepol_expand_module to pass its value to control assertion and hierarchy checking on module expansion. * Merged fixes for make DESTDIR= builds from Joshua Brindle.- Update from NSA * Merged default database from Ivan Gyurdiev. * Merged removal of connect requirement in policydb backend from Ivan Gyurdiev. * Merged commit locking fix and lock rename from Joshua Brindle. * Merged transaction rollback in lock patch from Joshua Brindle. * Changed default args for load_policy to be null, as it no longer takes a pathname argument and we want to preserve booleans. * Merged move local dbase initialization patch from Ivan Gyurdiev. * Merged acquire/release read lock in databases patch from Ivan Gyurdiev. * Merged rename direct -> policydb as appropriate patch from Ivan Gyurdiev. * Added calls to sepol_policy_file_set_handle interface prior to invoking sepol operations on policy files. * Updated call to sepol_policydb_from_image to pass the handle.- Update from NSA * Changed default args for load_policy to be null, as it no longer takes a pathname argument and we want to preserve booleans. * Merged move local dbase initialization patch from Ivan Gyurdiev. * Merged acquire/release read lock in databases patch from Ivan Gyurdiev. * Merged rename direct -> policydb as appropriate patch from Ivan Gyurdiev. * Added calls to sepol_policy_file_set_handle interface prior to invoking sepol operations on policy files. * Updated call to sepol_policydb_from_image to pass the handle.- Update from NSA * Merged user and port APIs - policy database patch from Ivan Gyurdiev. * Converted calls to sepol link_packages and expand_module interfaces from using buffers to using sepol handles for error reporting, and changed direct_connect/disconnect to create/destroy sepol handles.- Update from NSA * Merged bugfix patch from Ivan Gyurdiev. * Merged seuser database patch from Ivan Gyurdiev. Merged direct user/port databases to the handle from Ivan Gyurdiev. * Removed obsolete include/semanage/commit_api.h (leftover). Merged seuser record patch from Ivan Gyurdiev. * Merged boolean and interface databases from Ivan Gyurdiev.- Update from NSA * Updated to use get interfaces for hidden sepol_module_package type. * Changed semanage_expand_sandbox and semanage_install_active to generate/install the latest policy version supported by libsepol by default (unless overridden by semanage.conf), since libselinux will now downgrade automatically for load_policy. * Merged new callback-based error reporting system and ongoing database work from Ivan Gyurdiev.- Update from NSA * Fixed semanage_install_active() to use the same logic for selecting a policy version as semanage_expand_sandbox(). Dropped dead code from semanage_install_sandbox().- Update from NSA * Updated for changes to libsepol, and to only use types and interfaces provided by the shared libsepol.- Update from NSA * Merged further database work from Ivan Gyurdiev.- Update from NSA * Merged iterate, redistribute, and dbase split patches from Ivan Gyurdiev.- Update from NSA * Merged patch series from Ivan Gyurdiev. (pointer typedef elimination, file renames, dbase work, backend separation) * Split interfaces from semanage.[hc] into handle.[hc], modules.[hc]. * Separated handle create from connect interface. * Added a constructor for initialization. * Moved up src/include/*.h to src. * Created a symbol map file; dropped dso.h and hidden markings.- Update from NSA * Split interfaces from semanage.[hc] into handle.[hc], modules.[hc]. * Separated handle create from connect interface. * Added a constructor for initialization. * Moved up src/include/*.h to src. * Created a symbol map file; dropped dso.h and hidden markings.- Update from NSA * Merged dbase redesign patch from Ivan Gyurdiev.- Update from NSA * Merged boolean record, stub record handler, and status codes patches from Ivan Gyurdiev.- Update from NSA * Merged stub iterator functionality from Ivan Gyurdiev. * Merged interface record patch from Ivan Gyurdiev.- Update from NSA * Merged stub functionality for managing user and port records, and record table code from Ivan Gyurdiev. * Updated version for release.- Update from NSA * Merged semod.conf template patch from Dan Walsh (Red Hat), but restored location to /usr/share/semod/semod.conf. * Fixed several bugs found by valgrind. * Fixed bug in prior patch for the semod_build_module_list leak. * Merged errno fix from Joshua Brindle (Tresys). * Merged fix for semod_build_modules_list leak on error path from Serge Hallyn (IBM). Bug found by Coverity.- Update from NSA * Merged errno fix from Joshua Brindle (Tresys). * Merged fix for semod_build_modules_list leak on error path from Serge Hallyn (IBM). Bug found by Coverity. * Merged several fixes from Serge Hallyn (IBM). Bugs found by Coverity. * Fixed several other bugs and warnings. * Merged patch to move module read/write code from libsemanage to libsepol from Jason Tang (Tresys). * Merged relay records patch from Ivan Gyurdiev. * Merged key extract patch from Ivan Gyurdiev. - Initial version - Created by Stephen Smalley libsemanage-python32.9-9.el8_62.9-9.el8_62.9-9.el8_62.9-9.el8_62.9-9.el8_6.build-idb51c644edec86394e2088c33402a11f0fcc4cb08semanage.cpython-36.opt-1.pycsemanage.cpython-36.pyc_semanage.cpython-36m-i386-linux-gnu.sosemanage.pysemanage_migrate_store/usr/lib//usr/lib/.build-id//usr/lib/.build-id/b5//usr/lib/python3.6/site-packages/__pycache__//usr/lib/python3.6/site-packages//usr/libexec/selinux/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m32 -march=x86-64 -mtune=generic -mfpmath=sse -mstackrealign -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protectioncpioxz2i686-redhat-linux-gnudirectorypython 3.6 byte-compiledELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=b51c644edec86394e2088c33402a11f0fcc4cb08, strippedPython script, ASCII text executable R R R RRRRR R R R RRRR Rutf-86e13a95115aa83160e4c9f7a3f1b92083d474b812c749cf10bb397940ede1708?7zXZ !#,] b2u jӫ`(y.Ě|fң kḐɍoA/E klN=l,Vsħg @6Z1rpZHl`f"_}Ɗɫ^ Y+0@Rp쿿`"Ϣ|,Eh/QkXl2hFiAȅSu2AlzANow)W z^nT'Kx~u2#A RDA;m{0IKY%ٴ(dUUBT*Nldƞ,6HE5'@jpNbMC4DK?GW? ɼm: z&#n!ӂ>17स{ϯQrhA-Sӝn7"຿OFmrּ(Qr0 aS7soHÝaQPͺ`dN|ٖf+tH)⬯>d#&_sVG.{|e$Tn.aE2x~;':hYFªfPJW"q8xj iHcCz_"7{qf ,snRtN|?-{]%h=݂.#`Õj`cB$~bG~ڔp-b߽D6 z?̖K֤af>c#!wgh(FCVI){%OJ"hxKSH"2}dز/5M&[BjJ\&0ڪg 1ӽInΞfklU`%FZX4}tG\fD_ n7F`>B HK{KZjV֤0-/ ̀# 3EhL(ϋYQ?̨8 y3P,#H^8}X.-E|*rCDRJ\u9oמ5dD)]Ȯ+Lp>U}fLγ`#ݗ6VgxW̐&~l*]?-))A]AsB%$on Gt⅟<ҟ+׺n-Fk iN oݑK;|WҶRե#VɏIУɩ:h}ɤv((ө-T}hc%t}Y~[-~!q)eA;Obg:. ;Laۄv85Z NǶ(,K _)L1w$J}!^8c3;@)/ mȑ;}+ƾŮVP]_i.)#╾\TI͌kS!of|J9l!S7\Z|uEBtECwWjGAI/* *Yiյ/ŚH:7{0ub'IIOy7l A3-4؈!Pl.D_6-LM,J:23yI1Lp$ @LUج7erD[4ԪmЕQu '1]-fb9̼am跸O9FKOu:Eoj9~堏 Cuk%u-5FZ4$huI0s/ y@jBxPz n;%NY6Oڎ04 cL쮺[ }h%뒌#!m\xl|z_J'stdwڬK,UIT~sey'DPLS`;N =54rfoBa q[9#nY3Ǟv&$iDCeD/Qņ~4KLhEOt <2[.@O# px_/AsL5zfFJmZ"yH -6rc v)MYuM$AŐF06Ԅ94[HB3J NVH|dn񈶔Shț\z30H,g1"n-2P2l١%@I%]Q> QzЗbxwczLv&jlr#PI WW%kN&7*4O8omtkt|irW5HrH1D2WYWs*`nuo2U!EpX*̱~Z ItY9 lzub*-IN:nM~V?hdhɵ")GG--Ť w:x8J_Y췑V`Jʹv&6PȨv+x 61oc=MOVًOfJڨ$_sZwZr͛tKM:9lN+E1K2ocP"븾~FZniY Pg'-v esb:j[DtbQX[)jJP֖ǑӍ Jjі;3­1MwN;fwWke 9C>9s&!3-a'X_eluϸ]2ޢ^@|g)vlO.؄3{"B unN/[A4ј1Nڞ_Pt>mFtBh!⊫ HY+zT_5@Ls@$hdc6e^p 4FMgMڻw2r.+\>Dba$-~VBUH{AfI[Kj'XBtuh.^3^OcE\AS? k5:A W˃ѩf*R8j %grqD3I4Yz%[ HyZ p ual"N.ڐoVv&U=ŷxQ*  i?/˒L똠Mq'n9MU_Πi'4Z"1p, ֑GQb6û-lm͵P Wi[eآhe\c Drt|2߆3%l䣿i-a=FOIݾhV;Mi߸iP*GBLm):VǪp %l^(2R`\~}?Mns:*fe)x$n݁[7P8<|",\o@o'Ey`sj߀u  |.іQfu1%lt>7v8–|:!"&U7Z>TD+qhh2]-]Q]&Umm 7)ݮl H%Ȥ/x?O~rBV/pLLTr)ʸMYf!W>p(? ^/;T\rou J5Y~ӄ&B.%|SM뫉~xA +˜ZSo-e$A_2 $Y: NxG= pč^E}+TaR^vqb8/xRx@~p;_2E4v*C䴲%t/Ƒ8d ^w)kSʱi+-+zPCϕHRjoN5Q0H|_E7}[^j ZϲqMU突̌m>|cXa1wA<72gsy!-g4bz}7Q 7 $c|G^4.nBʻ[#(U1@=hh)j,q߹&/縑F_%S)!djAd_*_mgsg:S{`җj;_0k.Q ),uy"0TF p#ތ'Gf7^ J1G<)pKJc fRN>ZW/ӞX3fC"$gl5w㉡hM]/̯SNll `iIպ|.~lT&`q_oܐʵqrr;tcqeF+Z-"w:;-@"^DJ:O89[

[36{ ,q *F凔Q<ާJ{u@7H8{rM@=쯎h_E$DO)^vAf̈́1ZxѾ7 WX@@@jj5/zɂjKdq>n+?'lVqM}b9ѩv:L.)+~hb|0cy;a~!$dV_ʵ*U??*kI,.R6C)#4b;S=aЛ@V'˱_eYZS$ ğH9ﭮ+[]@OrYTjHh<֍Ciw8"8a+@'],9މ7Q}noA`$H5J=3~ "4\~\v&%\<5g(_|°Fۯo5.na!}KϮCjĽ`5CE<Ʃԛ5|/[]IJ_uqQ% Dld2tJԃ!Ո^bMP+xe*PCZI5Ehj@ ޟB>)!6r΃mM%xh u⤱GgE+ҁסDG9X دF]fꮳvi*XwVt8iURϘP znY"sܼ' YECzc?|`o]O-ڎW9&gnPa_ _ ZU[r-={|} rOz]̣ m"p\mPB2~T;J/EqŠY0i` WΏ2YX_tNM/^9K,AmJOj칼!Y]d ԦQsAhlJהc3k0H%W+,o-Aap`ܻy]uXWXwg4lgS| 1(z N2v;-QE"cks}Q.޽€r/ (v\_?YIȆy\_'\/fbRop@~+p\Ej=i]C 3k|IeiHADX?xv'[2crM&^Ml"!drIւ/C=ڊām+ T6.{^QAf( /%z#@z 1r g.-s,o ZSS(\ǁ*Eޞ Iw i)hGI.QGҐl0CnχS~^;n7Q-twJ:~TdDhi969uq?8PNBe>Y|!SBX4tXygl& xheH7EAt"b蔊vSf cW-ԟV6\\eC|M+Ϟ3N'_wI,3}.(]#$rkX~YE-u/Զцk8U( U >)P9VK/Z^-FbɵRbap{L`(3pÖd%ոaŽ [zv`dOQtSZ5Q%ܿ:h@8.WWx>3XT&ٝ6pexN{ `ԃ%CUԚN_acIʜ_>\]6P>AL2&%J WHwXֵD_ '3{ GtdaKël@4*)ԒN[DQOf$џs2RiPErrŰ<AG ~װTtz[[hJafŒ$GtTζr(7B_KTSx#q{H(ljb Y.Qq353!tU-@udQ8;ڬt$]aCO%!eX^:H87NLM*nU+ Ib&P\O]Ttw':-sC}X=4 ]nKlvuGݧ*Szf=>QEiyi\ u @PC|w *ѡ6*st ^ ukYvr=YOd"`*@" WYMߕ%GgK!x; @Pb/i'{œ0q bq';3 -YF([-1kH@F|@ nC𮀶[`PGχBvF UoUEӚxUu*{wP]9k$նR丈ByUz7cٶ,ar@bO᠟LLboS,L{z3L#XNKdCkU2JS^Xc -]Be.YCԒ{uKY(܅z(@ sCTD6@v\R7R +KN5i.A~[ 2?-}LB:V).2Qd) Fʣ0J ;9췻NeAN)PYLQ쒞 y;yM[&jZ` o\EFzD)4s1ȣڄ)1Ll^kƆƙ(7Kh8s۟7ڕ@ 7>[Rih4jJ3_m%E'2zmM[uwUfer˹c$(c=gž`/ywlNE_'IWw V@A)/" _俙t!V XGfiӽ+:E~ Oﲗ_'8q2;Y!obSR >{oZX+$cFK4A;Pm;J=D>^N+CMPb>_J| N'_jf(<.ͻ&*ڎPL'ZW!>: Dqa#ˉD躄(?SbCyK,#Q,[f&AA gH[lX#Vm_YIXI=/Պ]qL;-b 99ͩXw7؄nl{[ycE b,6yT lURPpI)H1,ukR7i  PJ7nv^20+U``WN6ZPWdHtAqI"b\PԃD-H)0ËML!(#,q:!wIEcij'CT/9r{_Sj^:Ň[39Ӏ.ɜV1fKBnދ(u_D]e~+( u0 jS!-iaIө^RO'pU^w}+ Tu7!3'Y|6|!MBZMwbNK :q*<#R8\u(xI$L$VjA3{^\2wٌȀXmq8 G A1޷J+/.yI#E;>^ୀNtCDȚT _,}]X* D8h&;H6bQS@lBūsbg1Ѫ7}੹gE lj=lƊ; u"?'VؿR=3}Hy ^0.Vvgd}}YG;)@8Њ㦎UD>ڰ PƇ2+${Mr[׫KɤCjAFڤbTiXOⰑP[:z0,ﺟYKw4 .!UZ>>ⴗ ~ !`ob`wԟ4xr9$@xس"qRPKw7@tJ6p-y/ ĂJNbAh ~UK55Lbr ^sC<8Mw] h̡|Y#2ֈh =zvTi]AeoPU~1atp+e^In Rߠ%yDGeAޖYA&>:[;d:Zryy7>!m05i g]4xs8Lm]$sƉ ,e 1hؔ.uV֪t0/߷>zNr¢^kt.~ͥ3V"loG;!P0Lo敳[m[.~Q@>6G \δѱ#O/B۰\Sj&Y0 bLE2el;McHøOG+*Fe?+2&sIK197h ki,噖2~{H ([1pD5^lZܳ &0Nqq64`_JF1ۿui9j %*K2ؤt'%e- G6Vl$2?1PEAi@va{%xջ:w %{G!$ZX*~<ߐAFȕ+i '=c.r]zI^WUrj|B  KTxLk~W'*`htE4@o(<{ m&1A\A8n-tN͟*%3X&.I]%Y]&upQ֒0\ +vp$=9f3w/R5Z~ɞKoֱ$Wgf9ִy(eMEx]D$z7Wc :9BI"t`U_Q#\ Һ2SA{=!ҁh&Z,x2XX& )CxfC2ɠu_ 왈6CH6O_EũvcYi>;G+м'E9zԬa0 W9qnxɃ/].rxd̜ ׅpLI~Z<{uZ,w 8njMM Ʋk1?ECIQ˦:<<^|wZD;>QOTTR1%E&>%qȟ4@KÅhϼp$x $O>b,bl\&<*[02&  %;ry%qrx%Rw(cT3-u Mz-yz@wSr.ec orX ΌZf'eauXD })tS#!$/gbOHD}\[oX@D4W%hI;̾dC@ӠiRJr BKԎ^0<lT Un5wżj]YK@Z#dm6ja8{΀(vB#`$d^[; 9_҃&LT(E(C~u t{zEyuѩϏڽ7h*NkgT=OطTFA`6512g{FȘh'4RIBBR'ZSL5|<"p͎M_y,4;^ʇ6A`V >P$D.61<7##rwz~ ]YkI&8D9v*DGOD*k9a%NkUS!-x_u*D׼J7 ٰ=ET%9Z2BvJ5xcN((Z0ĻYW61׀*%t^ ZwJi13C{({U3[Л.@s~eu>U=lwlȩ(ϓUkJGLEV3A!,qg4[YW}-I5\ "0f}cq+ȳ(qO5c~ƕw`& 0ьV2AmF{77)=mPJXj|O] \ć1xmtݕ~h#af;Hs֦GׁPY䬑<} 9MHeQ RaSgѡ ܘz؈*/XⷸMA4B!|_k|x4s EM:;4)7J HkQ,$ O +;*DŽ l yԆt\riv)G ZT=ȳE1Y^73b"?!5Rc`a,e|+t%a]M~W!k:aVIroQ[A ,^P#]ݪ+jog=ȡ/R5 %fݳ%c'ŀ`ˀ`ՌmMߨݕk*`jӤZ~#B[Qr*`Lu0B jYI!.~5 _4pX23E6ygvʌiwW̒Jvh*Yzlze9 |iQĿǦ^Xu;8Gv4C$B]ϪDX;1L@Š ˱`g~ɝ V-{Tw UQlmHK,Tl>'OfH8iS/A6ko%'iEʕ_U~ F~hZL+ dc9Ӥΐ?")݆^g9EI\atU*/;r>'"1w(AP8$k݆30FhM,Rm.a%%T1:}$.R}YfȊ,ɳSyы\EiMxB{uRG2О>X j{VhD32` X$@@YC7! (pC9セѥjkg Dg^V'[>td/jׅ}48aV!E)tw63ȡd_M.2BR/DL[7 /*hF*$*g'@8ݎKE3q`+ynW$ à|:j.^CM 7s0_0p6NjazmLa6O'c0 {L6>syE5X\Y2LKRqoȱQ 1|a4HB!ӕdQ&g?Nu,fdŕꇝp%eZ8{%sXѝcтso- rm_bmVo H;ּgx!бQSkIgC]\ہX tZXG (P*3 gUhDpNAJ*{UްK:[(Ԛ;)}>dsO.|~r!G)2rR(.t*F莉XT@Fz&(אk]cR!|FQ;ڈjfoı\bQpt!ƚ䊒E \CYdێvՇwkrA?;!"Yro*d ߶`h9ܢu/kplVq´k$ɠ~ioƩ~c\_RSD=o\<{ʼQʀN3w!Yw;u##:O.+!9Dl` . ?,ĺ ȕRvSݡ@莹'*Ȼ<E;ũby}("HbW鱭¦`2<̭9Ogf!XE|bT$\jZjI ?+~0Qv\ ϛ GؐB>(900+萅`[0C ]K74a+xI4'x yXYD7$tqЄpPc rp㲉%Gt YpZbp D6ą .p;<i{j+:oܞ-͖e5B,"^([UFY:;%^O~#b9*>d"Q̰Yuwo<WtOQmg{@7Ep"F: r-1%xU3pFqA" |0 󏐖_4+ܷ׉ `OÀ+ a\;˗ BlU>'%,0ex(f}\y4=b0$ ^;ҕMrQi='{AHPC[E.Y^=j0}QgiOA)PISaIhV{\ЫL/=g^yHI$6}xpyFR 0*gxQaԶFŀ2 g![P{U&q1xg TDmǍKl`C\&%m oOBEŀ~`f)dWCsf^ X-- qDɓy囘 Tym(ј}Cj?HWRa_]Ww ﱴniI2{b#\ c HJ,éw*,̲G&]o98f"U./D^ ڊi F*@p4vInmo?ؐm";&7jvo%~`am鋒C垇s?\롤Tbm"?ZdlZ"*NIp?.19_gSk%ɓS\WnTϓ. KKkX!B>Z#Pr] vVoMQx&F2ҙwȭjݚX(SHEpM;DD&E>+n҂cy?nV"1xlEȹ0ooA#^#bd'@.O.:m}2TIq4n":?H?NL#BYK uՍEkW:2J!e _r,!겑[{C'ʹ%_ņ/դDUa/?kmSYXxat͋7lA> ~*|^M䗬Q=BZ=@ =CK)cir\y6EW*b"/ 30JU%O%tSLm9( l]"<0iS;!Pk9{6|g KpAپF4SeBID=GEhk1+|y(8n#F6$"L64]lm8"78#[[m|;ǴΈpe+~Dd8,*Rȟf,p Ro:%E$1L05Fޒ52iʅ/P ?3n)D׍^ v,w ɃLh7g.G粴g_5ѼGNbv>9)L:%x,X*G,&Ǻkp[z (p*Uum8Gey7J9BG4)hi1,C6Z4Rysgq$_dMO߄ݳ,̜[/b, 3O gL5O*@F=X*>$=,2sBW" p7&Yz CZۊ~FF 1GWF+sTcXڿfWdXm,8՘ZPw,J3QӘYӂ= |/9 H}~QWs(VU=L _I._<Ĥd#}F"qћ$B4=;up98ntߑl9\ 1dw1o;we}V[_(ͩBk09-I}v^+6l@ؾ?dLo6J:9-;s9 LS<ć}˟ 5ܩ=MnwV:PloЌ4([#'nt)6/i(lՑڵ7L0ܣB~H6f*,{ǐ5.@8]tV8L,L|CorjE:m>fϖxKksk5_wDMﱊ6sIk<ѦC^y]|N[.T D)ˤD>L07,**j1YkWb*\Db3,Xk \ 9YI  'p3KE= Kć(y FFe{)W alx{&}s ׋*k  mdz73p*S{kߐ"Fp#d _c8WRU^hq:#ZGd5r`>e˺\qSLaf@m8ulfh h~1֐Mi\0j-D^4Nx{ YkA&AN!ɂ2hҹ@oWr̿ 4L01S_؜C[8zOv::X} robnkݑ]:3nv%2EԶTTӹr'5mƶ Gy& +oV[V *<)l_ FB=δP YϬpUsgXVZ{..P-& e -JN~B ;ôsF{`P (h咳+jCʹiP9nE&LҧM`5Bd19ML@809GŮ^qp ұ?mm?I=ZW Ff193QSi#)~[?Q_g2ƥOT߿,0@yǫ肽tVsSgmi3ݏr!4{Y`;ކWTvoA'qx ɚrn\7eϫC]F#вQ}JZ|k86 / %5uaE|Ni&@x`K0 N.Y8* D#C) UNQM}k׽R{ȑ4cOZ* X>lWf > Zu/joB dXY9D>nigfW <2҄6TNb<*GYVH?05iCTD^e5r!e^9#"=k("q)p7`RzX?Miɘ޻i7 {y40i'29іJQy63!gUGJ_֕<׈3\pi_ʒ@r#pmPziWLňpI[=@値~Ug"boՋZʶӦ YF64"wBQo=AC*kZtklEVьq['\ 2;b8N/+׹}l?ҡ~4\T+*qD 犫3L5D3Xg[&Y-"σ/DUDlkO{'ڸz3Ё&pD[?aXghU8&A%BLn)ޞhyW$Y`nӇɧ E #ɢ^AXČXDfK%G})xٽPOVz"r(Y &pu(ҡ= @&?[{"dU^r.ͺ+o0Y,dHۊb~C} /SBl 3C9e/sɗ &HbK͐L \|2Ev~ٻ@.;6$E)uOKdX$es R_Yy̥Wj "%L9tʼj03oԞ t.Pg5!v*a[8S{Cz$c,"Ȱpw!ӐCz{T Q'цc~^BIpQǓ$R_*7r0oaڸwHƁ꽢&EYr+f":G}Nnޥ92_Kf_|+&X: #2M#yM3K`~Eo_@YET 2J9ۓ%|Rࠫ?U8ʮI͈6S ݧET_h/{(ʹpDyG3FTtI%S#%:hP YyAM*ED:eqK+*BsAP\VijTIc3ey9k)Hyfc2fkeml\E]ժjլO(cҮVEaR,"|}g@fUa 3 9^9|vZþB{ܟ죝FʀcQx08ϖns(}@+fpl|Nb_7kv&a}h#U6uW&Kݦ[dMgqoEoNNhJlڡkʷޓa-^'~z,6~+%&j+Y@V]%)8֑롚( ݈'wzU ,ζ@#'IXDDpmFkpΘt]D$QyzlBKW4h|.˧enc5uiQ<ߐ&T#+GWm0&ʓAe/[ 1H:YYHZ |i@>k5uB(=3i֣_cPJ[`ʡbΤl:0r[l5~aVMFIz> o`PY Խ)+(_R}nC0+^.F[OECqG .ʃK+b5yxx3X*B}D2͐PǮ6ځ!uơ'sĹCAbJ5{3:j<()cpų.l‘gSZR+A(OXkO\Z oۅ)7OAcz]S5JCu7ñQu`+4%%uпv2n)c>P:Y:^W>~Vd\&(o؝=S'N͘fyc׼Dzβ&abOwu[!`5QZ }7֒wt]59C'nv Y|n9!Qܟ\cskPwJi &ѣ!'xE~oP}v$1</t~MP_o8mK7p Os'%dsf?MM/S'jRAR`w_##sqɍ]n㌰"(zKsHNy3?(R(А9?3 IWܚf)|\qya >g]ʸ_ xDb+o"'\$jc@it꿲S-Yo s/QN6P4= ȼ gsd t54nDa~b2XɘTB yw<:.-K)!FvTa^RhyOȂXNnϼv9;TvB~dgx+"h Ƞ=0\G>B/FQ9S#m$ܨGiQ_g8O 5-ڝ]P@þ:nn)]*\;6oe0'Yhʊ Wb"d_6*lk8#E $7`*y' bBL})eG 6ĭ?a]fNbK@J@؂ ]Bh\Da3de!1am]v+巀BL 3;~A0hAl&Jf-F{>YdNոW ckp6m'fU&QHڈGmp"623?5$(fgtfDAؠ!Ag T^Pz@7{( E-HAi yTfۘZYW{ec$G/J~cG͹t~f8 |Ln,6=pv *f MI PC@!ŔNC-2UqJ|$)tW;kTMo_?H_g3@v/  LP{NoEÑ vc{KL ܜS~34`%ؚK5Zj" P0G-m=QdFڑBPr5Œ|pByQx\%˒jFZT~o`riU>8u+>f=^5ҷVny__`6P0h@k '䘻"2m'Q%+` ķ<,tCK|i2eÚ׳'^.!mP:OhH6b%{,S V'=@=- $RF%}tk! ti*LAR0NLi =C/ñ*irfV|=ԼN"sA#>[!*+֠o}*c #`99iK)? 5 wtK>ibg'*'V}X2];24$̴)s>ul@30+MSQ/,6 0My! =aܪbpPXh8se'ZO yyɪ Yʗz~8x rUYb0%S˗%p{YV[ ^ZE@Zm! K#X_ a # لدloFMoKjq00eC IQm.%]AVQ;4Ύ>nz7TK(F ͣk ̋()混.THɽ9_b H$a2 :) %8g 4w[Fw-2]6mJ7tiI,pLyH]ri|%Q `(vaiU!\B!uB3:[z)iusvFxe 32y4$/Da)VC`Ur]=wM+Z.G=vX0H{ C c‚sWܭϫ^gvBVJ "/$&5"pUDGଥVjT8o۹R+FgUf oTN)M<v|?hj 4ݢ7r;pQW 3fV2*+zqyTD)B$EfZEyCN5 Uͅ KzG)JںoZjE]A+Dw|cBܘiO6ImNޢm1`|,pS)|Gdn#,xQ M+ҲsNTh%ݡ (Z(C7;9:/ФHDO 1c#IC9=;)k9~Y~r=D;NM~jDytubK;aUzWC"JY rK QdO4Qc-IiݷD̰hYQV)qL+[\Ԕ,zӓGt:KU͓<" u6-)ċ[,38(1 v٤!Ie[i&a0E(]Z,κb*\FH^ .^4SD]ifUro/|qLr̋e-+R܌ :%C|ϳ 7u2mOBRPO+aIf)lJ%(aNN;Ƒ9FMUKx!eCI My'o^}ib,RںlP9.noܕ.?gb][nl7E3Oѩa9RavMy푧OnaZ }2s+GoKe1KC 2ڼ2~c~?k=/g0POJ~D;bZ tAvfH* ]9Du~@Z|;㶲bّzhҾrRigG{Oi뚒-\P{2}!hXCZa{Ԍz|#9XCt];Z?V{l/N,nD29lBah*!'1<-XSRf4?9p*2#Qp5 S#g xHD+r=:8;)8E0OӹDEx jxsbsp }dD6O?[|sH~Q9)Gјs.O5ZxCˁ|7}@/ف8X5(WnBe\N8Ùs Za.gU[Zs[5D9=O|ͽ %%1#{r]ݲuִa-NF\wp7sי%aA(4rp2nq6 /wvBK2;6?Kcn=KkI4|Os8Ix_eQtTo"s Q0F[ Y v*%d_]o4Mum!5S pTрNqºapqFrڟQaZ1kHLܑi!ȺSk>Rt\el1c. Zik(Z@A2[;!uœMn`o޼s@ZZ+`ג:K/:sW}"~Hl4M /ٓ!<zf|p\zH^0Њ)>0Urp^!  n7[TԡDFsxOiim4#"akJ 7[\vA3k/pIO`q4ܕ% fZf\*$Z9IjHפLBCշ|SPo  *h.@N\̘𮼡^H uiu,݀D߰Mz q&F:`%H5J$nZPpy:^xB ɟVZ(rl:2!ÐF5gGyR#V[ZxR+3 -#3@5<օ0 XLEM70ɝяT)us9 'L9!LaϢ-W-_?jٯBNZvq$zoLԲ[Z璟ءT[*ibi-i( "2@=\wYlSñ-ɮO~f6Z3ވFA.ki a~ ;Q-_'4seݲU{Qc/u@+Fɛۏfh=3WL_S .ű ndS,K&ōM)Y(#&%};~ ʪ8͋xz\^#7*:}oUK⹁]g7DGj-1 1-axR*0 'JO< 1U*OY/4 {QI{6;0Pee9^7Z'2;:g\{vt-;ʰ"o6:ƙ>1x;$19opD&leuu,_oΟ0u5 ]2&c $"$6c¿~h䞸5";¤2yk/=d #Qϫ$({3s<\B'i,P<_X`~vc1zW!dފC< P:@BH KP0ճ lZ حT!YT .oP9_<̿NĴ۟/iJItQe\lrf󙄴~ۖ^V ̬Szԑ#Tޫc>r vuBhngR7ofڄO.-cSGӗJ:ե*I5̖RV((PWsPx=rO[VIڪ9e RɳuU ά&,MMkÁy9c,HnߩD- '9{op@׍E|v9xW@{Gڲ"h?pz1ޅ철&sNgԻ v%Y(/%vY̌}Q6CCپ_e2TB ]wP@8D Q-n4kiv<9> TAN •agLEw).sic ڟLq>҂0_HVJS ֿœy6{'ۼCkKNn6o{UPi1x[B+ T 0V6RIuT'6z#)[Ieuy.jTQd5Hl+vYe, mQxKx֭$p2vu)C+!RW$ꔫa5}$S]g7S%jZͼ:J^4Mx]HгU3sXyh%4F|G&!yq@|99ozfq"%Z2P}`s40O[ƙ:HQTBGI\GTe~ڝ_CT2(وYTXhQbQ.p{}`"*v3goOƹ]:{ >3[>J,R(e<(ۗ_\ev7^Ji,|\߭jB< "ɈmzVX2#G/Cu[Mt*ld~eDS\OiOP*htw|u/KAl] EHj,tdM݉3{l'; j6 Le/ u>H^Nhт#7zH8(1ŵliBv(, l!@GCZI@yD?+)WHIs.y $9TPюP]&y~fnQ"˛lvN&kH$Ο)fba{`\ZNAk>Jxp[ZBn~fKm PgXG=jPhp!"M/K9c6L$e[|#f3B5`ʢ:i2h0hBRIǛȸz Rs3S.swDQ*F5BS6%}!=6g1FKea>Ֆmk;p+) 3ʋC#$ySeS2372qR \ԥaKs8.˖jy|-\X(9GF3x卻!/\Zs̆x&f8x̲8V ~l|wKVҟT4T}X91CG:$ȡ٨ 0I8=C'b x&`gY' fg?h5VP/IvNquUݕ OcVCSnbߔܟM3Yf[ {֘qZ Ϟ 9h/)"ou+vH,-O3(&:{ ,OZBjQ}h G!Tp.s87DV K3q $&Jڛ!vGe'_]QL~T^d:) \-];_ct qc# g//"j\bjl =r bRuƆAC1*5[]uoF}N55b'uI\( vn"⚠ɲ PmP#GQ t,-zXhcx{hv&Uv; HgBpBbx{'Fpd=-5j ="k.g⩌,qsN14kKb03JX:#X}Fʂ|fRߌZuiVh8?8:Q 8t*Ƽ1E:jƚdU`I谥N T*%@[t!m4 1,'*-\y'[%={e *|\=#SHt6̇g@8wƮvE^G2c>M񟅱p2i/A`\˭>cjݤ`eN{NP2&l`9V"X͂?jsl[ q`SL {c/+.[RgXɗqXgضU=8ъDoV[CDr]9vrGX`s!ծm^ˣv9ZZF yd$ `t_Dfh7oɚ0fXi 'L$6E%pL18,bM Ze^,ƭ˙ty$tjd?W42u,Eќ?#ʢ }ے?LxbpnkkwX *tbtluT̖!gEqP1RܝwJJg 2JXFI'ԢWb|_CR˗A]fDb@%avjL"M*Wfo[ܻ՗WΐP*o{ V(\K݀Um/!vŢ|xXHr>̃Ntv]t7:m  EW0x^rܧG4VECy&1&rM!-wa5q}F[T] 6S@`>Tyfh;~Ы6u!]EC[<vvC %Do ~vv3Pį&2XDip?Z^G]eIE 9/tQ'`BmG"4/)HxVc#즁']cʥ78.d`O|c9KvV݋c+1)iENX1ffqT{ƶˀ]6MrJh !al 6c\*'WkW HT5m[V* B*\(Ol {6@fO@ xwDOn-h\H6'H%%hp浿{̊8P'q0;ǡo<5W_?`-5. > 8Fgшb٥"~ d^EyN ߂(w>OOW89`p;'>04#"-ƎE ⻡9M-¾'D'W KR(+8>q/8y_ nk՛La0"sPc2 dkR=Bl9n{V%e_ѤZv+-[d/  6L#vGJOJ>/,Z<>bצbbb o3hySV7ZYe.F ;l1G׺u.{ĸiQ{"}",C]?cb03 "l9UK>[ˎstBhT _*kKfOT]Εj۸`Ra]2't5c5,՗,KNx/W &V@ U3\/\h(8ȊCj2Ѝs-VU!m)D~0ҩ{_#۰ijIh˗N(mWq `ԒnHtroK#c bui]w9KviN/N YSXDo>d!ǂlɯ7@.,¯#{axWu&$`4'KE4FMŻ$]ȗty_NnQ"!a`fXxkϹâmX'boHvkwۀd>\ڤ>,v"YfL&$? `Đ F^EeKNKtyTRv/=|i ;Ҋd;}872W_NU$FPKk HjD&іqV.u,MK9Zaf7z8{?vi6^5SpOA/4"R.+ R=yUSEHL/&CqWyy& 5UBVzӟֺ|TEMsc.?{y 2/DfdITޔяmںӳqbВ|~dj1l33e3q;c>i*e̚yT$K4(+=/K@KC_}v1M%%8&*',{ ۣfBu\Gl;/c u0H{sJtLJ'z Ԛ zvHqK6Pj9^?J GXS-1Cbd=ƢA5d ,lܞ :n'/6cb` Շ<6 i*7q2(Ie=ITX{~?8P9(bL``]͌٠5K$털 An!dX151Qʃ+kfP #56139g;#UiΨo6L,S\?h08Ӱ$/qsL!x﹭mF{ 8J.*J1b"#$&PHL_FtWtu#c\QᏓ/0+;!Ŵh BT]c,u 3t`OΧ\Ӫ.us#-2,f"2h祜mݙƥMuDh/mU.yүWjr\;-IP9C (vӋC:isLyD}L;u99]K 7Em\u9It+]?v˛:KVD堦B,>N5Pk1%\q[9]N_]ٌ_}aLpzKwX [r",Mg~W(> ˉy/uj}tBbr%՗ѾӐ!cWPF0Mң┍1A=$GL ~J|CJC_%ɘ=g(DE0u&ZiC~z.=+dH)+?!)]t6cwKrcidΝփ42/Aud\jLTp0mV7+)0*!GqEKcId:2#o;2)e3bܩ˭7UQhvU)"#E^Bm/t_ait|~>HVBg$rAqiW6*$vy|j #./YK &ɓM6N֓4I{~,qWǛU dէۆ]EOwTq.ݐY $JˬK/Gveb* u12!/A(a!ul)=W/.!^#;LYofyޑѯLRBՁQJ:9g}gPqg(bhۡBg,3Dxm_ϱѳ$uQc)',TNKDBO\!* !;uypI`.j?'UIy*/{r@>,̙FFX-@Ȝ}iYP.VՖ\F\t "}1lr4|R,A8}_ )v|%X$T!b/32i&ovEwynwE.\hSϣdygЦ4&20`@ HCPaо:gv\rA/ì72L\Yp|)l GnbE=;]/C=P;ThYmjm?wOI~ &͙N+؃ n/NoM)8 2RsxGmt&)#n(Q«c$uTN!'Syu [!HMH]Y]1Ptfy[/u~J/cn!.,(:xS)1E)lxHf)C儔4rgSӧ2x)Zܠom3+ϭz9ơ ;KHmcy6zEP4]3YzѳOc3γcwƚ0+.ޙkpw:Pq]cztqTo#5ᲟS|rRrt' Pi8?a iTqZ5e>a .[(iKmP2.4:y$JIKZX\/'e#V}4X:Ӝtz4n5jxt濾9@`;e܁g|,bKKO8cfu@ g?ӜŘ@[ D%ɟeń"8 6Q̳޼dDf-h:<8azG;q3߂$jE:m bALlSQ>||\X(#ZeIHaj䂯)-B3fOG2"k skߔ܁*9Kf O4L~n\x( Ϥ/zRc?ST,Lg<~+R"GŦhn#8= Cֶ\ b EgP,fx!j.Ep SA|( 62p,܀1 oZH7=,(2![rJAz`Fݺ+zgo.)|@\hHӲV>4K2s֤̟nS\o,n\eHxr|i?m;[ "C5,BoD7oU765_t &pR]9VN:&(^_r/=;EkJ¼ҙ!f9»}9cK ʲ5=^<^OΚQ+.I3vL_V6"0qfE|=Y#ɥٽSWk#f%lQ$~8/ &C1g.g@(]Q f)Q]eepN-TB+}=*Q~Q / %4 ĽZpZmGɲ E|N,D$vJwXߝ3?p7F1 -۰ "NH9vҶ ;  H¸ e,WLnnY{FkwI_r~:JZ|M4 ?XdF!F?.Zp%!80.52tg}(9o!+uջg=l 7Ɋ)we`/e{~]4=$8׸]ئG_z[v0xi v>$6k(ʏ`n ?Gw\"WuqUs$Ӂ^f[Z]ê0Ӹwֆ0y8~6}D2=>>'Dz#p}J(]-Qǐ0|j%Z

zV@xVx|$S K0łym>bA6spN+.e۟õc{ Gcd ɒHL[N.Uj$S-FIeKOnd@?`$"͡rf-dX;-S  G2Vro.̫[oRTƤM-nPm!5'`FZa|aw9˲UVM>-1F&sԯGi䜃&9=9hLqqzV)uYHyzB̦]=HNg!*. {Yhnll %T-NEa>.Oq}yrO$uh scpw#bI˶{ଝf}j^i?WAm[gR.Ñڿizgt`W.Gو䨟[9}= .+Mk'ņւ6}2Ѡc%@=Ѵxۭsf}CJ,0-`v5پˑ^j ocUWp[óyԃ80n*t>✼Nnq^!$1b XXnR ƪ[{gQ8vTsF|4h盧V>7M姾HX`T`L:MLEUϹABWuNw$@4uĭF{Vt:wD~M π|IOHcĽ?xDtd5Tj́De;KR`^.*/uΥ,UU 0ߠAzcZl8;$*:(0N7iUx7@CSQRgoQmz:P^S#?Թ&Z!5~,m~nb~w6 T`h-r2ϝm*}3tu`b-ނˠi T ~~Q(pyǑ6ӡ/٫ }|0_6˃@4YzO^ޭN2S_FsNҜr%OW<$T0>RVÁ#[g*tfdY]b̦@'ZKB 龜v'pp7UkI^.)2(2Jڥ [r(n@7  Dl醧 CDy_}EGLlȒ< ̢̊iJRsOGtIV$pRRvfXŚտ9Ԏګ`e\'Z'+o*؜ BuFPX-ivfWM#N)@7j} 5~P gG)W_zaEe* ?Gg١ZTvz] 9K~蓚ݳeJJ>{, YP_ qaB9ϡ*jUV ^THRR:B4W"q:?DªT$87ʩ@Zta}]I$j`H_ްUĐꀅyM m5_E }$ץsq%9 ksUc$TW *9>IR`d.jw]x7PحZ5VPzة;waly =6٤o|Q#̗a!v%(3_En@vITq3.kS\GhG3ʟ.j 'ɋ\X6UJv;RD'1W@+Mnh4h5l9!>m®ث}glUU\1 nz4/k=. i`>RPdd"ڐ\gzִgܞf`LDhG:|m^IR4xIy!R?&L=879$o@r¦ %puc^wõΫW^rhZ `Vq'kLk?矢<>%u|ܽm3Hvb'P^>l DPxs9ɕ!(N=2݂IcS-Wtڌ2*g' $KcH ZbXݼL-fLul:z _}ahBSNf1s=%$P=QZ#.!8y7lԖq(Z<=QwUIb YfWcDp}}=M>ε5LttoU1cIOt ?G[HLz|0p0;'Y'4Sem0U,I}a#BA;iIVﱳ_ z ;ɩ(.&!=K}-6-^#FM+޸N "MRd3-8ǥY (_)7fbzE"5#DNJtj!NlzOݾ$BALp{셖*orN-fL9-)OQ^PR dW0P9J=i`w?-4y^ E p(wIj`C!& :6cyOEmZ:h͙7dEyy=qa撯֧kRjehnO_RaAFO2iol]uVW-7=m4L'TF)Oَ QWM/R ٌ=.Oa=I[In 9k;($*$weI\"+K6z ?QOhC_$ JaKr)+﷬6\FT`Н~XdF\m1"HTa9nw+P51^T WL&#pzݗIӜQy`KmƶO\kB=l7kj7ryD}>|<|7G:a>!HPh=w t_,ÝN‡ݑߊp,?ggmPy2Qiopn?xa,Rߥ=llY(qel#31ڃ&$LV:貤2  `'B bi(3'ʔ;D*ѧK@ɥ^r=F(`| W$ѡzeu\Æk] 5fZs<" ⻒m [oPj O7;z9Q`mqyZS(&|R?8l4xDXsmE@>Dﭵ{K=|(AHKxi[L͜H|MtN4Kh'-1w+#Y`*sQNHxM_VZN7ʛjӞE;{_{YNu]B2 mے-?[X<Opߖ/1'0 ;Ar:}Lz-"y#+61G%Lͬ3"q޿"YBݓcܫg"lkԳ eJT>Cޓ;(*d#-~6IU!Pxn?Zh!=M 5|Ygj5>>k lD~R󇓛ǁAaȝ`'"`=R7*qbr~U]RƲ/ >Z\!y*ml;SPث-N6  V=h|tnTIlINEzZJdknF5VHN)f#(Ω~UގT[\~8)vų Ig+eE2] |QKm;y$Ciչͅe3\6 +|}!|"rXtYyːSerye-c Rf?({]9#OcK(:І3_2c`e%tt\:`!LvFt5q=meK E '9!ݑSv+c2fz2 ̒tBOƢ]*&Hea3ڷ7-~5$HHB"@DO" 늷=ᆱf|t:.FmD<) Z'Gn 9N{4+:<`0${߉-DuzV0 o0[K)Ĺ~A(L,)eP02{_8 `Nm6@)?s+)FFD[?eŐ>_Jm|ޙ]z*5:X6k=>S>ir; +zY@2t1fuIJ$xߋ\Xs֏ |AH ]PkS5`ʵ,>^EPޭV֋p;OA shBL(mEjF]p#2m)SaJ:%)-g"]ۖ4NjUy*ɶ"`x~|hxDB;#c7+[*D78=۟ote}gXս};vd[QsmsXKe[!UbwԅѪZr;7JlFZ AE-SSDPF$+{JhGhȁizi*Rh[ID+LJ:\"x_C􄥽odfm5L^ndAԃu굅VF/${H3*_㦞?U9j$1>;E{etx}lw糰MiҀoxn o޵*")oK4o)P/ߚ멛S2 6i9зT f1٫8hɷŁvwJ!!4kZbv؂[ 3ћy{zױ mKƭˆԵ&;&9+n lwJ`3slX6DB}0I[/.lI΁3EaɡGKt+%[TRU(h?Lt)6A~ 緜{ywh`Cz^_٥ g8NZ8v 'R"'W ⼥|q`R7F- aN,E \$\?VĖwq*O76(pF!+yoߏ>9)u~48ӧB6EWj<_*>a{ /$=vjŇDSTLix%M$׷}3D}lG@BX`wg ޘ\ ؈sK@$DDiTmT?PFbuL"i$eg.!<{g5$g/)nu}RXIC*KYՠ*}͟gs&Y>0ƌ\U:DLس}hK">lW.~TL*nc֠GUUԋMYLR#OlnEZH70]Һu5K=B\}wmM v×'!6Qf2MՊ3=4IcFK9 JPuqe0棄z[0&25k R>mm7VwYX#ykcqjxJTާ<@8נ*v;fF~%bZfPAFmn;!-ky r]!Ge=ax(aD2cϤxݏ;3,Tr,^'YbaoL6t# ~|; JިBOXXg?!b^O5%=)stp nM|>dsRD~Lt %¸K +CR KzC7] Ԙ~OHz>@ Aހ5;x^/l:jE[R;geB&k2=cbZY tUK+3V2iCѦ~h03Ž|:ms5sDR" y ݃{@fSUi֠'{f 3Zb-I 'ϪQvR>IhB<[bd9C>zuGu5ВFe/}o_WW"ܟF}L<؛ٿ2ARQUK%PsʦGIa}`~QA E;fAhߙЍZa!Ϫz=YHش˕Y`KZ#Ac I]9YZ2ץu,P8К3YʁG֥X Y\Z :A914Vgm]VG%gRW6i\ji"rtՇR:ʞ1Xm?(l >c(2V2>;3^{ ywOkC&Qyxَn mb1i &=;?iD]^@cD30_,7a^~7&@eHy+:;jFZRɚ9n gy T|=!qBHCEZԈXrI>gef鯐;jKZ{Ku=4#|!ZX g @#kjbG+>c?u{uYK&ޙ崔L6L= l nIqW-Au(K'*^8tbiƠi^Zqb`B+/-iM2OߕS@]7:aRF~m3G}g& !hH4 *\HD8{dLwkM<&vm@YM)y:5jHJE^e\/x,cCRbw YD1l6!. %^wQ nHLWlA~s]ʁRģ݌P#PdſeXQ+evJz˟YQC@c$P ?k'tK߃h˒s|OWMRS9(>ֱsHgi=~dEV$LyEZ;} Q^kK!{mY ϣ<ܒiWKޮuSE[qmLiͰ?hæaq9g i*ɠwfJ4  抿Ưn* g1ǿj3ϕTvu/>u,W" *~fNX#Ft+nmf5 N]i ,G6a:ytuS6h۵p0pӚj I˄b[\->/['ε`L =wmj%Bc"t 4eUJ0 ~?Nn5k1ǹxp *K;O93f&z06R4M 5K`Tzxa`+A2F!F yBDz%zxSNш3*_B>X)Re&*Щ ay+̛ sS/TJ2f8V5&Ms31  m+D4B3fy߭m8D`MjC+'T aeɦ iTRR' @G&8+3J뮘MX:c\z[*@2OGpÙڙ iQ^AS|%]h` l|'d`ύ˦fl$+ 1,bxSK?ʗw.n}ph)k9M̕Wbywg'B>)?_і;6h[5MU+yxvY*@U_ި;7"=]:R\i<#qb=>k򼴟6SNGLt=V9.a4=@Ucr$h ?z]b䄡 U~*i}8Z`3~ ]xMf#~b٠m{P/8s\tmCXaՙ/ڵ!)봱&yHv03ݯB?$#MDG% jjd?\X*d?v͆fOyNbHov6vjZaԦ˰DԱ\o|k>q7i3O%RF eRC>`쩰 -WNY5T5YSP?!^IKJTq'aZi&4 zKLy,O8ulnv'3/VZgS+qAa1d z!cJS˜rl~]Fr:3MҖ`---LPFLJО:{x$77uHj:4ɬ&x,EŲ΀x.B<7{9Fn uP7-N>߾R g.c13:LM0K'/:XK,J~sTƄ&/DebBXvʺ* uŕ49veE1wS<7cq&P0Bou؈claKET~?䍶0X/j8m=pO0&4gwT񠟍aL/[HI*٤e+],n~=?(dYkl9Oܷzmke0{`ZfhE}ޑ.e2H}N^q.LҜCP#kvA5rUO"OBK.`B4[cvF 'T2}3t?^S& |Zt?(w1cQ5Q^e# %%I>.kA 7-J`~8foy|ElXE1>Dn3xoQ[fl Hn􀞥ѽxz UbїsEYm@E/Me"YoTI5-Nmީ \@n;L|%|LY6GZ9[2TY@HIjò)!7fw^e  8!n̤EI X+:"Pk 8}!o۝pdV7c !ntS8++@ C0r $Bdw.`>A(B)`VA%܇Fn,4S6tgW҇ieIMJW`YrbZPo\$C}]&n)lܺxJPz y /j/a6OIEtE3%2?C?TW37 =BCvL\(@:hْj8I>%lғ9WŠN8" ][{xtGI Sy"ɚaA/ McܹDTJ5v&5SyÍY묊H5Һ:}rS+H3fHvDp'yzy}MK(2"sLv^Go@-q1/rpr#AR럩+bAJHb67c^Ul!RN]U:0ntwzSqm٘(ʱ΂ 0VD<"{x>@X :xC|'Xph`m V89'鏍( V; 4v.f.Rǁ74!=~yT!}m^,d0ImվaySR(!8?1&A!^MD6dW٪̍,\uC-s9\{ӈs"P=!,Xh[pn!ڏ7nXboSA3k%V6_p9IU*bga^'@y9 +pSfխ\̶VyL5]/M)F󚍅E9n̛' 6z\y\ǐs8ct3`]p㤣 ktG M҅򸳭BMW)b=yKಸ|y0 C]^hydRz*g gCXu=i4\d[uu@}UJ+Z2y3,uW]o^ƃd~ݕƸ)N$f͹#g4r>uuaDSDA,ϼ߰&F2P]d@ sGʢF1zUqNT3BA;B9%q#I1^|],7>gCn rM`mCS>5Q3q* h[sliMb<ٱܤrpՕ~N+BWѲӌRj~x:T3Cie}4j?З@moYn``\La-y?>6Tc:%%U9TOlX!uj}v5XvEnك7i0Zp:\CnOY5>#SZbH&cRlg^F@CPZ{wᙝoLUˌ+ܛA!5O|yk{Y|җTH/jfpȫ[icNBrn㯰 N>/AaU|D9e֬8=;TUooxn[b;afOip섃!7Ӓ"Av"y93^l'0N+8i,lyBVoIX6lEwR .Yi6A2T/W$f9"9! _qSX} >dMuS-LyɗYro.e8VFXhܩꆊwoal<( )c@;pbW0ʷ>rGޱ:VTd$ʇtH7"0_2R>E/X7wTF6,lSk/.f#ȵr۫xbGh  akv3%<: ؾ ڳvzO2B$,K°`K2AߑSIR:{D$N +.MXb؎ia7])yhCRm8w s"p`cM2h=Ӛ<_"1_O3aw:|Z!8G[GDF6\A}8KP`ݢ*fsDŽ1^0rL4Za pQ-O#)e"U(i#ǒW j #NGe45 _Gyqnc9AЍFK1ܼM:,(aZ<ls4S`?bRe)߁oX~FG:Г[.JEjPu̴2"8Z gc~"kGB]&RCa,RHŲM2uڹ>]T kD?nY f "Y_ݹIgj*K o+:'oAU$Dc;Vˁ27# %hXX]?KBMn"53!f;5Qɨޛ=OGCZ{*\"ec2Uߩ^bO_auťayÏ|K7>mҢ)-LtW9b0nKARx= #M ⫓t.v g;⯺ЍSqV"; ?Qmy ,"5àD_mwNn^А 6/icI_*W "m>b/9KFHЂQP_D~gx\ԯO);=L#c1hq+fN^yIk[N D ÆNh/Lx8ɘq:i8-&Y5~^fb= v;NAzH31( J] u6Ir$M L9RɵJ9USw}gU4,О8:rRYA fwP"?V;sqi@ɨ!,["1gHnYeD0{o-{^|5Ír,T HB2~b_>&!R#:RZh%E&TRV|IsVC8Wkh &A_riE.s0L7n[n)*X?nHx^>"\A&mh0 !CƷs#{/T$fCqPz ҴcTb 4x <4!zLV"Di+Β3pZmϷCMlnWHGALq[EJ˥%by m4yK`3D!O˧Lнٻ) r㜼fԀ>qo4EZϬaÅ3_g+ihshEf[B#K!Ӛվ^aeK*m*&k%s/f} I$gg^v$Ē#U7PaɨNk.%ysEt6sLiPjd Є.F63rQj]B=[̨5i68?ӌ|(zio6ڨ,?WɗBS6dt`/Mq5[Ce5XmiABIe{WXK|XwW'(Q0̡\=XyY\Ave*Y HAnkeePz~tI7if"ol!':)&.21εJ(͡Ul%uz{ŵyiC/$e> ksP.]ZW8VӨo/WVKt7T(Aqd .Lv>%  Lz~{IG~V٬Бo! K8(FXY1K'.[5Us ,TP6-HĒA6ךUT(|-+RjӇ LV f~#~0D>h[W“ls2ۖrTKkrq]>7CC6/ÚߣYaab9>R*tf"Bo= i_yk.~ݳY ,D*ه:!ȥhG9 a,h۴HKVjO?t{ e47bhJDvY*+ y6LE(6S JqDXCO\T%)Rh ީb7{3 L6 Jմ#9mH./U!exAxo1 4~GDA-w<=g 8Er^/=J Ci\~p*pcnZjC5+neog0p$k:hrU5'l->RG]rԠͨgR\9#1rxXa=cY#oaxA;ONq`\a'P ZOIxmm)sm#Ҡ zhݰJ_CpG#vBS -}Nl<˂1pjA]΢],/ߛs|_ԻkN> ,(9vP+c/W RI,Ҵ F#JeVp&<5 }>l=˵/Ԋ PAtg}^6 7Ƴ؈dR1 &lJzyr[}N<p#FmAKZ{ûyX Jz%ӪϨXgaqNG(/TY<(y!mC/^ O86Ĥ9V ko"QY<g.Imzɣl(68 LCXOO ۓCQT:⟥ѺGCKʳNIp,'8DF; f8Re?vs1pw\4Q}p;QUM.e6ɵ nJƷŐD9$]XhKئE9-=ɸrzK yѥ/L em~aNn BcRE{WGv6+FmIZ8j?^ӵ5 ~Ȧ{Xw<=w`l_#LV>z 8/79%=T {o$s:za_I8Q1mlQU~b֤?Xk̀rLMrS%Ch;H;Ԥ-,vdȞ4y6yY5}UlyԨb DZsz+֩-rLs6D*Y`d:pB&8_K1>צYo/JWmU^\pqHSw;1iFAF4%uh1Oϋ.w[1D8.q4de_;p̶j_%}c;cu{#ЈlC1;Ϝ2"6 A<݇A# +?BAt"ZG,@z7%|{eD`ڶ:lǁ)HpQɠL;fqjþv$ =fQ$mJ߆/n:8$>b0@EܴM1޽K Xu8=^&l&(]H;F=oig_!a0/If pIvzhdy:P%e֢OfZFc}y[H$Hl"WzU\AUS g<̐hG<`;%@J }Db z$cm?7\SmF%ShF|Ϊw3( &^@ӭ.k|hIR~QwDw &s].%732FAtm6n%@hj40 ,uET( X5;>}qF{dsԱj= k5FBf5.;0ujN^T1(Lߞ-"p>G {vىu6_gSCLNyjIQ=Zk7zv udQ\Ɣܬ,o<~)ο}0bX0.pŲ>uh+ 㾗1U^Jv9hyT ~#EWb}F&Aގ%Ib RZ>3{U`c9ļ '{G.r ڏ"7 ~{3 x`PSrdxY)pY #wњ'ט]!Y6M1]!6#Š<ۨW(htpAVEmo!k(,N4+АU?EyIߐu(D>vE&!\m҄jgG(Z{"硳[)3`Xsojb e1!Ϳ)7$%~/cG.K6"?db/*z偞K\D2Ύ6Ƹ+ikeUG[[GɆz^ ʆbqŏYTp_) "ߙ1#X 4AA{BNL~#qKya C;t}۟Ky^|H4/glb/3rS5pr O薬ZT[, P BbDuH+4j Kc[$JMg؄ތ{} (@Ό Y;kE+Ζu=TC2iTN}=U楺) JB4C &eePɣ~Qr{

Ԋ(K^pẇ:L5kK;Wu0k$v3}pbʫǠ -tuc#=P'CV2ӛ|r 6vr~?D.pAEF *09)kd,1^ J~n"8lmH:w[~'-=k\E|&b~ o'*2Ew(i"Yۗmօ>R1|%Kwiɿp|{PpxI԰ҌC{Oe3|"tRUU4zH$ ܓx)fթHU"bp|`Lb;Aiww 9ȃtl죀رfmh%;Se|,ZFeexTudgɧߓnkzq]8IXQdOoy\NϏQoQ e.ߩ} v$2,O -H=k۝iiV>`SG{ ?Ksܶ ʍsR51\8NoGF}kkj..Puu)\UC"]i)er25ݚjtHיK)|7P=4pUAjp'~=)߱l 7bsVk1ةİ "a,m m0fς Fښ&ium:ۄ؛^%*&@ YV[<L 2 rc ߊ%o4 {;:&gfE^/r:f&蕢Vyߵ> abo/zESz6aHQ\?=` t %4b.D .<$Q=vsë))OkU2gFũ?B[N0hCKFi@;"O75vwCm#?B_Lw=:-vxcvFxr83*!_39SyE"fI_&OD1nF_,6}]d&S!Z(`h-釥xjxnݴ*P3FLV(W?9yTM%αb,C3\$&C1˻/FVⰷI~GԘF\  IPJ qWCQm3eY50T t_1> (U}]\R`8 b?V p,MqV*an~ʬEnj T$6)h^)?i`]{o9ى>