libselinux-static-2.9-8.el8 > 6 6_6 3!pQp)Tξ7]mtZ`c\X ]mtZ`h6͆ =-~]iۻoJ1H/񣇓ͷԿ f̏[{p$&kf &O'CU7ۭH2[gZϝV×at"~ScѺaaWUq9qƔYHUr9dД3-M,+21NGk044##~j<A=S?Uo&GYv C( e3`mEjd^ȫr"Q2>p]܈XȉL|J{tn5FQCbThw#,WZ%U2"'QKBV<9847b4eb6d962ac35479ef70ec01db76e643bcdcc3b342921e69a1422e6849262df4ce3dbb06e98a32306720cf4722b9702f103283!pQp)Tξ7]mtZ`c\X ]mtZ`eX򨐑;XS"?VqdY- ntvAS=@P*g'"1=.`؏4'U4Rt޸c:\i`MlIp(plL9332#C)9u?0ŧ{Ms3]G5͹ ;ER\ڃQ2v3*)͞^B6oD*+|^z&ٳ~j 浩Pl)T3'b|Ph\]0Ma(EےNSec']Z0ey2.T d1~jJkҚ+^%*j1%0y(*Tw Hj!N㌋lM)'hڷu܀tCp E}i+@dBnkEɵ.$X(ě¤V7\W|'PODb53&NnS.|Rц% |oP29%Cz&'6M!h , a[ơ91+RבˎκE >p9[L?[<d  E +Z`hl n p t  ((8N9 N:klNGYHYIY XY$YY,\Y@]YD^YQbY]dZeZfZlZtZuZvZZZZ[8Clibselinux-static2.98.el8Static libraries used to build SELinuxThe libselinux-static package contains the static libraries needed for developing SELinux applications.c"ord1-prod-x86build003.svc.aws.rockylinux.org KojiRockyPublic Domaininfrastructure@rockylinux.orgUnspecifiedhttps://github.com/SELinuxProject/selinux/wikilinuxx86_64 켁c"6ea07b25c024dca162252edc8b2083e54c4913e638a8d60e168c10b4042617d6rootrootlibselinux-2.9-8.el8.src.rpmlibselinux-staticlibselinux-static(x86-64)    libselinux-devel(x86-64)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)2.9-8.el83.0.4-14.6.0-14.0-15.2-14.14.3c@c.b_@_l@]X]@\@[@[ā@[ @[,[@[Zz@ZK@ZZZI@Z@Z}@Zz@Zu@ZTZOhZfY@Y˒Y(@YJYV@Y@Y|xY{'@Yx@Y.X-Xg@X@X @XN@X@XXx@Xv@XJX43@WH@W9W@Wq@Wm Wk@W,@W'A@W#LW@VяVIVɦV=@VVii@V@V UU@U4@Ua@UQ@U8U6;UTS@S@SSShShSXS 4@S@R@RUR&RʚRkR%R@RMUM@M@M@M@MlMQ0@MGM5ML@L-@L@L*@LLq@LN@LF@L$@KKKrK@KKqK}+KTM@KA@K@JJJJG@JG@JG@JjJS8JS8JB@J@JMIܑI@IԨIbI̿I@IV@III@I@I2I@IcGIcGIcGIG@IG@IBR@I1.I!\I!\I-HHHe@He@He@He@H@HHH@Ht@HsVHgy@H^>H^>H-w@H!H @H@G@GG#GF@G@GGƢ@GƢ@G­G@GGD@G@G@G@G,@G,@G@GG@GZ@GZ@GeGeG|@G|@GO@GO@G<4G<4G0W@G'@FF@FIFFFFF&@FF@FvFFS@FF@FF]F@FtFFzh@Fw@Fm9@F` @F; @F-@F,F@F@FF*FF @F @FoE@EE@E4@EE?Eɿ@EEEEElEx@E&E=E=E@Ex@EvEnEYEK/@E>@E4EE EgEgEDfDDDDq@D@DB@DB@DB@DB@D{DDX@D4D4D4DD@D@D~D~D|3DvDu@Dr@Dr@DlaDk@DiD`@D_2D_2DX@DWID?D;@D'Dj@C@CCC-Cǖ@Cǖ@C[CCC8@C@CC @CCqC @CCCC@CBC@C@C|pC|pC{@CyCp@Cp@CoACkM@CiCf@C_oC_oC^@C^@CX@CWCS@COCFc@CFc@CECECBnCA@C;@C:C*C&@C&@C%mCC@CC C a@C a@C&B=BۙB@B@Br!Br!Br!Bn-@BgB] B] BZfBS@BQ,@BIC@BAZ@B9q@B9q@B06B-B$Y@B#BB@B@B LB LBBAA)@A@A@AA@A@A@AyAҜ@AJA@A`A`AA@AA@Ak@AAA@AvA@AAoA]FA]FAQi@AN@AI@AF@AF@AA@A>@A>@A7 @A7 @A5A4h@A3A3A/"@A-A+-A(A$@A!@A A A@A@@@q@7@@@@6@@@A@)@@@@@@@@@~y@@~y@@~y@@}'@s@@s@@s@@l@@ia@@b@b@b@O@@O@@Dw@@9@@,@@ @/@@???E@?E@?٭???q@??@?@?@?}d?z?a@?M?D@>S@Vit Mojzis - 2.9-8Vit Mojzis - 2.9-7Vit Mojzis - 2.9-6Vit Mojzis - 2.9-5Vit Mojzis - 2.9-4Vit Mojzis - 2.9-3Petr Lautrbach - 2.9-2.1Petr Lautrbach - 2.9-1Petr Lautrbach - 2.8-6Petr Lautrbach - 2.8-5Petr Lautrbach - 2.8-4Petr Lautrbach - 2.8-3Petr Lautrbach - 2.8-2Petr Lautrbach - 2.8-1Petr Lautrbach - 2.8-0.rc3.1Petr Lautrbach - 2.8-0.rc2.1Petr Lautrbach - 2.8-0.rc1.1Petr Lautrbach - 2.7-14Petr Lautrbach - 2.7-13Petr Lautrbach - 2.7-12Igor Gnatenko - 2.7-11Fedora Release Engineering - 2.7-10Igor Gnatenko - 2.7-9Iryna Shcherbina - 2.7-8Mamoru TASAKA - 2.7-7Petr Lautrbach - 2.7-6Petr Lautrbach - 2.7-5Petr Šabata - 2.7-4Zbigniew Jędrzejewski-Szmek - 2.7-3Zbigniew Jędrzejewski-Szmek - 2.7-2Petr Lautrbach - 2.7-1Fedora Release Engineering - 2.6-10Florian Weimer - 2.6-9Petr Lautrbach - 2.6-8Fedora Release Engineering - 2.6-7Petr Lautrbach - 2.6-6Petr Lautrbach - 2.6-5Petr Lautrbach - 2.6-4Petr Lautrbach - 2.6-3Petr Lautrbach - 2.6-2Petr Lautrbach - 2.6-1Fedora Release Engineering - 2.5-18Stephen Gallagher - 2.5-17Vít Ondruch - 2.5-16Petr Lautrbach - 2.5-15Charalampos Stratakis - 2.5-14Petr Lautrbach - 2.5-13Petr Lautrbach 2.5-12Petr Lautrbach 2.5-11Fedora Release Engineering - 2.5-10Petr Lautrbach - 2.5-9Petr Lautrbach - 2.5-8Petr Lautrbach - 2.5-7Petr Lautrbach - 2.5-6Petr Lautrbach - 2.5-5Petr Lautrbach - 2.5-4Petr Lautrbach - 2.5-3Petr Lautrbach 2.5-2Petr Lautrbach 2.5-1Petr Lautrbach 2.5-0.1.rc1Fedora Release Engineering - 2.4-8Vít Ondruch - 2.4-7Petr Lautrbach - 2.4-6Robert Kuska - 2.4-5Petr Lautrbach 2.4-4Petr Lautrbach 2.4-3Adam Jackson 2.4-2Petr Lautrbach 2.4-1.1Fedora Release Engineering - 2.3-11Petr Lautrbach 2.3-10Petr Lautrbach 2.3-9Petr Lautrbach 2.3-8Than Ngo - 2.3-7Vít Ondruch - 2.3-6Miroslav Grepl - 2.3-5Fedora Release Engineering - 2.3-4Fedora Release Engineering - 2.3-3Kalev Lember - 2.3-2Dan Walsh - 2.3-1Miroslav Grepl - 2.2.2-8Vít Ondruch - 2.2.2-7Dan Walsh - 2.2.2-6Dan Walsh - 2.2.2-5Dan Walsh - 2.2.2-4Dan Walsh - 2.2.2-3Dan Walsh - 2.2.2-2Dan Walsh - 2.2.2-1Adam Williamson - 2.2.1-6Dan Walsh - 2.2.1-5Dan Walsh - 2.2.1-4Dan Walsh - 2.2.1-3Dan Walsh - 2.2.1-2Dan Walsh - 2.2.1-1Dan Walsh - 2.2-1Dan Walsh - 2.1.13-21Dan Walsh - 2.1.13-20Dan Walsh - 2.1.13-19Dan Walsh - 2.1.13-17Fedora Release Engineering - 2.1.13-17Dan Walsh - 2.1.13-16Dan Walsh - 2.1.13-15Dan Walsh - 2.1.13-14Dan Walsh - 2.1.13-13Dan Walsh - 2.1.13-12Dan Walsh - 2.1.13-11Dan Walsh - 2.1.13-10Dan Walsh - 2.1.13-9Dan Walsh - 2.1.13-8Dan Walsh - 2.1.13-7Dan Walsh - 2.1.13-6Dan Walsh - 2.1.13-5Dan Walsh - 2.1.13-4Dan Walsh - 2.1.13-3Dan Walsh - 2.1.13-2Dan Walsh - 2.1.13-1Dan Walsh - 2.1.12-20Dan Walsh - 2.1.12-19Dan Walsh - 2.1.12-18Dan Walsh - 2.1.12-17Dan Walsh - 2.1.12-16Dan Walsh - 2.1.12-15Dan Walsh - 2.1.12-14Dan Walsh - 2.1.12-13Dan Walsh - 2.1.12-12Dan Walsh - 2.1.12-11Dan Walsh - 2.1.12-10Dan Walsh - 2.1.12-9Dan Walsh - 2.1.12-8Dan Walsh - 2.1.12-7Dan Walsh - 2.1.12-6Dan Walsh - 2.1.12-5Dan Walsh - 2.1.12-4Dan Walsh - 2.1.12-3Dan Walsh - 2.1.12-2Dan Walsh - 2.1.12-1David Malcolm - 2.1.11-6David Malcolm - 2.1.11-5Fedora Release Engineering - 2.1.11-4Dan Walsh - 2.1.11-3Dan Walsh - 2.1.11-2Dan Walsh - 2.1.11-1Dan Walsh - 2.1.10-5Dan Walsh - 2.1.10-4Dan Walsh - 2.1.10-3Dan Walsh - 2.1.10-2Dan Walsh - 2.1.10-1Dan Walsh - 2.1.9-9Dan Walsh - 2.1.9-8Dan Walsh - 2.1.9-7Kay Sievers - 2.1.9-6Dan Walsh - 2.1.9-5Harald Hoyer 2.1.9-4Dan Walsh - 2.1.9-3Dan Walsh - 2.1.9-2Dan Walsh - 2.1.9-1Dan Walsh - 2.1.8-5Dan Walsh - 2.1.8-4Dan Walsh - 2.1.8-2Dan Walsh - 2.1.8-1Dan Walsh - 2.1.7-2Dan Walsh - 2.1.7-1Dan Walsh - 2.1.6-4Dan Walsh - 2.1.6-3Dan Walsh - 2.1.6-2Dan Walsh - 2.1.6-1Dan Walsh - 2.1.5-5Ville Skyttä - 2.1.5-4Dan Walsh - 2.1.5-3Dan Walsh - 2.1.5-2Dan Walsh - 2.1.5-1Dan Walsh - 2.1.4-2Dan Walsh - 2.1.4-1Dan Walsh - 2.1.0-1Dan Walsh - 2.0.102-6Dan Walsh - 2.0.102-5Dan Walsh - 2.0.102-4Dan Walsh - 2.0.102-3Dan Walsh - 2.0.102-2Dan Walsh - 2.0.102-1Dan Walsh - 2.0.101-1Dan Walsh - 2.0.99-5Dan Walsh - 2.0.99-4Dan Walsh - 2.0.99-3Dan Walsh - 2.0.99-2Dan Walsh - 2.0.99-1Fedora Release Engineering Dan Walsh - 2.0.98-3Dan Walsh - 2.0.98-2Dan Walsh - 2.0.98-1Dan Walsh - 2.0.97-1Dan Walsh - 2.0.96-9Dan Walsh - 2.0.96-8jkeating - 2.0.96-7Adam Tkac - 2.0.96-6Dan Walsh - 2.0.96-5Dan Walsh - 2.0.96-4David Malcolm - 2.0.96-3Dan Walsh - 2.0.96-2Dan Walsh - 2.0.96-1Dan Walsh - 2.0.94-1Dan Walsh - 2.0.93-1Dan Walsh - 2.0.92-1Dan Walsh - 2.0.91-1Dan Walsh - 2.0.90-5Dan Walsh - 2.0.90-4Dan Walsh - 2.0.90-3Dan Walsh - 2.0.90-2Dan Walsh - 2.0.90-1Dan Walsh - 2.0.89-2Dan Walsh - 2.0.89-1Dan Walsh - 2.0.88-1Dan Walsh - 2.0.87-1Dan Walsh - 2.0.86-2Dan Walsh - 2.0.86-1Fedora Release Engineering - 2.0.85-2Dan Walsh - 2.0.85-1Dan Walsh - 2.0.84-1Dan Walsh - 2.0.82-2Dan Walsh - 2.0.82-1Dan Walsh - 2.0.81-1Dan Walsh - 2.0.80-1Dan Walsh - 2.0.79-6Dan Walsh - 2.0.79-5Dan Walsh - 2.0.79-4Dan Walsh - 2.0.79-3Dan Walsh - 2.0.79-1Dan Walsh - 2.0.78-5Dan Walsh - 2.0.78-4Dan Walsh - 2.0.78-3Dan Walsh - 2.0.78-2Dan Walsh - 2.0.78-1Fedora Release Engineering - 2.0.77-6Dan Walsh - 2.0.77-5Dan Walsh - 2.0.77-3Dan Walsh - 2.0.77-2Dan Walsh - 2.0.77-1Dan Walsh - 2.0.76-6Dan Walsh l - 2.0.76-5Dan Walsh - 2.0.76-4Ignacio Vazquez-Abrams - 2.0.76-2Dan Walsh - 2.0.76-1Dan Walsh - 2.0.75-2Dan Walsh - 2.0.75-1Dan Walsh - 2.0.73-1Dan Walsh - 2.0.71-6Dan Walsh - 2.0.71-5Dan Walsh - 2.0.71-4Dan Walsh - 2.0.71-3Dan Walsh - 2.0.71-2Dan Walsh - 2.0.71-1Dan Walsh - 2.0.70-1Dan Walsh - 2.0.69-2Dan Walsh - 2.0.69-1Dan Walsh - 2.0.67-4Dan Walsh - 2.0.67-3Dan Walsh - 2.0.67-2Dan Walsh - 2.0.67-1Dan Walsh - 2.0.65-1Dan Walsh - 2.0.64-3Dan Walsh - 2.0.64-2Dan Walsh - 2.0.64-1Dan Walsh - 2.0.61-4Dan Walsh - 2.0.61-3Dan Walsh - 2.0.61-2Dan Walsh - 2.0.61-1Dan Walsh - 2.0.60-1Dan Walsh - 2.0.59-2Dan Walsh - 2.0.59-1Dan Walsh - 2.0.58-1Dan Walsh - 2.0.57-2Dan Walsh - 2.0.57-1Dan Walsh - 2.0.56-1Dan Walsh - 2.0.55-1Dan Walsh - 2.0.53-1Dan Walsh - 2.0.52-1Dan Walsh - 2.0.50-1Dan Walsh - 2.0.49-2Dan Walsh - 2.0.49-1Dan Walsh - 2.0.48-1Dan Walsh - 2.0.47-4Adel Gadllah - 2.0.47-3Dan Walsh - 2.0.47-2Dan Walsh - 2.0.47-1Dan Walsh - 2.0.46-6Dan Walsh - 2.0.46-5Dan Walsh - 2.0.46-4Dan Walsh - 2.0.46-3Dan Walsh - 2.0.46-2Dan Walsh - 2.0.46-1Dan Walsh - 2.0.45-1Dan Walsh - 2.0.43-1Dan Walsh - 2.0.42-1Dan Walsh - 2.0.40-1Dan Walsh - 2.0.37-1Dan Walsh - 2.0.36-1Dan Walsh - 2.0.35-2Dan Walsh - 2.0.35-1Dan Walsh - 2.0.34-3Dan Walsh - 2.0.34-2Dan Walsh - 2.0.34-1Dan Walsh - 2.0.33-2Dan Walsh - 2.0.33-1Dan Walsh - 2.0.31-4Dan Walsh - 2.0.31-3Dan Walsh - 2.0.31-2Dan Walsh - 2.0.30-2Dan Walsh - 2.0.30-1Dan Walsh - 2.0.29-1Dan Walsh - 2.0.24-3Dan Walsh - 2.0.24-2Dan Walsh - 2.0.24-1Dan Walsh - 2.0.23-3Dan Walsh - 2.0.23-2Dan Walsh - 2.0.23-1Dan Walsh - 2.0.22-1Dan Walsh - 2.0.21-2Dan Walsh - 2.0.21-1Dan Walsh - 2.0.18-1Dan Walsh - 2.0.16-1Dan Walsh - 2.0.14-1Dan Walsh - 2.0.13-2Dan Walsh - 2.0.13-1Dan Walsh - 2.0.12-2Dan Walsh - 2.0.12-1Dan Walsh - 2.0.11-1Dan Walsh - 2.0.9-2Dan Walsh - 2.0.9-1Dan Walsh - 2.0.8-1Dan Walsh - 2.0.7-2Dan Walsh - 2.0.7-1Dan Walsh - 2.0.5-2Dan Walsh - 2.0.5-1Dan Walsh - 2.0.4-1Dan Walsh - 2.0.2-1Dan Walsh - 2.0.1-1Dan Walsh - 2.0.0-1Dan Walsh - 1.34.0-2Dan Walsh - 1.34.0-1Dan Walsh - 1.33.6-1Dan Walsh - 1.33.5-1Dan Walsh - 1.33.4-3Dan Walsh - 1.33.4-2Dan Walsh - 1.33.4-1Dan Walsh - 1.33.3-3Dan Walsh - 1.33.3-2Dan Walsh - 1.33.3-1Jeremy Katz - 1.33.2-4Dan Walsh - 1.33.2-3Dan Walsh - 1.33.2-2Dan Walsh - 1.33.2-1Dan Walsh - 1.33.1-2Dan Walsh - 1.33.1-1Dan Walsh - 1.32-1Jesse Keating - 1.30.29-2Dan Walsh - 1.30.29-1Jeremy Katz - 1.30.28-3Dan Walsh - 1.30.28-2Dan Walsh - 1.30.28-1Jeremy Katz - 1.30.27-2Dan Walsh - 1.30.27-1Jesse Keating - 1.20.26-2Dan Walsh - 1.30.25-1Dan Walsh - 1.30.24-1Dan Walsh - 1.30.22-2Dan Walsh - 1.30.22-1Dan Walsh - 1.30.20-1Jeremy Katz - 1.30.19-5Jeremy Katz - 1.30.19-4Dan Walsh 1.30.19-3Dan Walsh 1.30.19-2Dan Walsh 1.30.19-1Dan Walsh 1.30.15-5Dan Walsh 1.30.15-4Dan Walsh 1.30.15-3Dan Walsh 1.30.15-2Dan Walsh 1.30.15-1Dan Walsh 1.30.12-2Dan Walsh 1.30.12-1Dan Walsh 1.30.11-2Dan Walsh 1.30.11-1Dan Walsh 1.30.10-4Dan Walsh 1.30.10-3Dan Walsh 1.30.10-2Dan Walsh 1.30.10-1Dan Walsh 1.30.8-1Dan Walsh 1.30.7-2Dan Walsh 1.30.7-1Dan Walsh 1.30.6-2Dan Walsh 1.30.6-1Dan Walsh 1.30.5-1Dan Walsh 1.30.3-3Dan Walsh 1.30.3-2Dan Walsh 1.30.3-1Dan Walsh 1.30.1-2Dan Walsh 1.30.1-1Dan Walsh 1.30-1Jesse Keating - 1.29.7-1.2Jesse Keating - 1.29.7-1.1Dan Walsh 1.29.7-1Dan Walsh 1.29.6-1Dan Walsh 1.29.5-2Dan Walsh 1.29.5-1Dan Walsh 1.29.4-1Dan Walsh 1.29.3-2Dan Walsh 1.29.3-1Dan Walsh 1.29.2-4Dan Walsh 1.29.2-3Dan Walsh 1.29.2-2Dan Walsh 1.29.2-1Dan Walsh 1.29.1-3Jesse Keating Dan Walsh 1.29.1-1Dan Walsh 1.28-1Dan Walsh 1.27.28-2Dan Walsh 1.27.28-1Dan Walsh 1.27.26-1Dan Walsh 1.27.25-1Dan Walsh 1.27.23-1Dan Walsh 1.27.22-4Dan Walsh 1.27.22-3Dan Walsh 1.27.22-2Dan Walsh 1.27.22-1Dan Walsh 1.27.21-2Dan Walsh 1.27.21-1Dan Walsh 1.27.20-1Dan Walsh 1.27.19-1Dan Walsh 1.27.18-1Dan Walsh 1.27.17-4Dan Walsh 1.27.17-2Dan Walsh 1.27.17-1Dan Walsh 1.27.14-3Dan Walsh 1.27.14-2Dan Walsh 1.27.14-1Dan Walsh 1.27.13-2Dan Walsh 1.27.13-1Dan Walsh 1.27.12-1Dan Walsh 1.27.9-2Dan Walsh 1.27.9-1Dan Walsh 1.27.7-1Dan Walsh 1.27.6-1Dan Walsh 1.27.4-1Dan Walsh 1.27.3-1Dan Walsh 1.27.2-1Dan Walsh 1.27.1-3Dan Walsh 1.27.1-2Dan Walsh 1.26-6Dan Walsh 1.26-5Dan Walsh 1.26-3Dan Walsh 1.26-2Dan Walsh 1.25.7-1Dan Walsh 1.25.6-1Dan Walsh 1.25.5-1Dan Walsh 1.25.4-1Dan Walsh 1.25.3-2Dan Walsh 1.25.3-1Dan Walsh 1.25.2-2Dan Walsh 1.25.2-1Dan Walsh 1.24.2-1Dan Walsh 1.24.1-1Dan Walsh 1.23.11-1Dan Walsh 1.23.10-3Dan Walsh 1.23.10-2Dan Walsh 1.23.10-1Dan Walsh 1.23.8-1Dan Walsh 1.23.7-3Dan Walsh 1.23.7-2Dan Walsh 1.23.7-1Dan Walsh 1.23.6-1Dan Walsh 1.23.5-1Dan Walsh 1.23.4-1Dan Walsh 1.23.2-3Dan Walsh 1.23.2-2Dan Walsh 1.23.2-1Dan Walsh 1.23.1-1Dan Walsh 1.22-1Dan Walsh 1.21.13-1Dan Walsh 1.21.12-1Dan Walsh 1.21.11-2Dan Walsh 1.21.11-1Dan Walsh 1.21.10-3Dan Walsh 1.21.10-1Dan Walsh 1.21.9-2Dan Walsh 1.21.9-1Dan Walsh 1.21.8-1Dan Walsh 1.21.7-1Dan Walsh 1.21.5-1Dan Walsh 1.21.4-1Dan Walsh 1.21.2-1Dan Walsh 1.21.1-3Dan Walsh 1.21.1-2Dan Walsh 1.21.1-1Dan Walsh 1.20.1-3Dan Walsh 1.20.1-2Dan Walsh 1.20.1-1Dan Walsh 1.19.4-1Dan Walsh 1.19.3-3Dan Walsh 1.19.3-2Dan Walsh 1.19.3-1Dan Walsh 1.19.2-1Dan Walsh 1.19.1-6Dan Walsh 1.19.1-4Dan Walsh 1.19.1-2Dan Walsh 1.19.1-1Steve Grubb 1.18.1-5Dan Walsh 1.18.1-4Dan Walsh 1.18.1-3Steve Grubb 1.18.1-2Dan Walsh 1.18.1-1Steve Grubb 1.17.15-2Steve Grubb 1.17.15-2Dan Walsh 1.17.15-1Dan Walsh 1.17.14-1Dan Walsh 1.17.13-3Dan Walsh 1.17.13-2Dan Walsh 1.17.13-1Dan Walsh 1.17.12-2Dan Walsh 1.17.12-1Dan Walsh 1.17.11-1Dan Walsh 1.17.10-1Dan Walsh 1.17.9-2Dan Walsh 1.17.9-1Dan Walsh 1.17.8-2Dan Walsh 1.17.8-1Dan Walsh 1.17.7-1Dan Walsh 1.17.6-1Dan Walsh 1.17.5-1Dan Walsh 1.17.4-1Dan Walsh 1.17.3-1Dan Walsh 1.17.2-1Dan Walsh 1.17.1-1Dan Walsh 1.16.1-1Colin Walters 1.16-1Dan Walsh 1.15.7-1Dan Walsh 1.15.6-1Dan Walsh 1.15.5-1Dan Walsh 1.15.4-1Dan Walsh 1.15.3-2Dan Walsh 1.15.3-1Dan Walsh 1.15.2-1Dan Walsh 1.15.1-3Dan Walsh 1.15.1-2Dan Walsh 1.15.1-1Dan Walsh 1.14.1-1Dan Walsh 1.13.4-1Elliot Lee Dan Walsh 1.13.3-2Dan Walsh 1.13.2-1Dan Walsh 1.13.1-1Dan Walsh 1.12-2Dan Walsh 1.12-1Dan Walsh 1.11.4-1Dan Walsh 1.11.3-1Dan Walsh 1.11.2-1Dan Walsh 1.11-4Dan Walsh 1.11-3Dan Walsh 1.11-2Dan Walsh 1.11-1Dan Walsh 1.10-2Dan Walsh 1.10-1Dan Walsh 1.9-1Dan Walsh 1.8-1Dan Walsh 1.6-6Dan Walsh 1.6-5Dan Walsh 1.6-4Dan Walsh 1.6-3Dan Walsh 1.6-2Elliot Lee Dan Walsh 1.4-11Elliot Lee Dan Walsh 1.4-9Dan Walsh 1.4-8Dan Walsh 1.4-7Dan Walsh 1.4-6Dan Walsh 1.4-5Dan Walsh 1.4-4Dan Walsh 1.4-3Dan Walsh 1.4-2Dan Walsh 1.4-1Dan Walsh 1.3-2Dan Walsh 1.3-1Dan Walsh 1.2-9Dan Walsh 1.2-8Dan Walsh 1.2-7Dan Walsh 1.2-6Dan Walsh 1.2-5Dan Walsh 1.2-4Dan Walsh 1.2-3Dan Walsh 1.2-2Dan Walsh 1.2-1Dan Walsh 1.0-1- restorecon: Fix memory leak - xattr_value (#2137965)- Restorecon: Ignore missing directories when -i is used (#2137965)- Describe fcontext regular expressions (#1904059) - Strip spaces before values in config (#2012145)- Deprecate security_compute_user(), update man pages (#1879368)- Eliminate use of security_compute_user() (#1879368)- Fix mcstrans secolor examples in secolor.conf man page (#1770270)- Use Python distutils to install SELinux python bindings (#1719771) - Move sefcontext_compile to -utils package (#1612518)- SELinux userspace 2.9 release- Fix RESOURCE_LEAK coverity scan defects- selinux_restorecon: Skip customized files also without -v - man pages fixes- Build libselinux-python when %with_python2 macro is set to non-zero value- Build libselinux-ruby (#1581322)- Don't build the Python 2 subpackage (#1567358)- SELinux userspace 2.8 release- SELinux userspace 2.8-rc3 release candidate- SELinux userspace 2.8-rc2 release candidate- SELinux userspace 2.8-rc1 release candidate- Do not build libselinux-ruby- build: Replace PYSITEDIR with PYTHONLIBDIR- Correct manpages regarding removable_context - build: follow standard semantics for DESTDIR and PREFIX- Escape macros in %changelog- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild- Switch to %ldconfig_scriptlets- Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)- F-28: rebuild for ruby25- Rebuild with libsepol-2.7-3- Drop golang bindings - Add support for pcre2 to pkgconfig definition- Enable the python3 subpackages on EL- Also add Provides for the old name without %_isa- Python 2 binary package renamed to python2-libselinux See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3 - Python 3 binary package renamed to python3-libselinux- Update to upstream release 2017-08-04- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild- Rebuild with binutils fix for ppc64le (#1475636)- Always unmount selinuxfs for SELINUX=disabled- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- Don't finalize mount state in selinux_set_policy_root() - Follow upstream and rename _selinux.so to _selinux.cpython-36m-x86_64-linux-gnu.so- Fix setfiles progress indicator- Fix segfault in selinux_restorecon_sb() (#1433577) - Change matchpathcon usage to match with matchpathcon manpage - Fix a corner case getsebool return value- Fix 'semanage boolean -m' to modify active value- Fix FTBFS - fatal error (#1427902)- Update to upstream release 2016-10-14- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild- Add missing %license macro- Rebuilt for https://fedoraproject.org/wiki/Changes/Ruby_2.4- Rewrite restorecon() python method- Rebuild for Python 3.6- Fix pointer handling in realpath_not_final (#1376598)- Fix -Wsign-compare warnings - Drop unused stdio_ext.h header file - Kill logging check for selinux_enabled() - Drop usage of _D_ALLOC_NAMLEN - Add openrc_contexts functions - Fix redefinition of XATTR_NAME_SELINUX - Correct error path to always try text - Clean up process_file() - Handle NULL pcre study data - Fix in tree compilation of utils that depend on libsepol- Rebuilt with libsepol-2.5-9- https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages- Clarify is_selinux_mls_enabled() description - Explain how to free policy type from selinux_getpolicytype() - Compare absolute pathname in matchpathcon -V - Add selinux_snapperd_contexts_path()- Move _selinux.so to /usr/lib64/python*/site-packages- Modify audit2why analyze function to use loaded policy - Sort object files for deterministic linking order - Respect CC and PKG_CONFIG environment variable - Avoid mounting /proc outside of selinux_init_load_policy()- Fix multiple spelling errors- Rebuilt with libsepol-2.5-5- Fix typo in sefcontext_compile.8- Fix location of selinuxfs mount point - Only mount /proc if necessary - procattr: return einval for <= 0 pid args - procattr: return error on invalid pid_t input- Use fully versioned arch-specific requires- Update to upstream release 2016-02-23- Update to upstream rc1 release 2016-01-07- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild- Rebuilt for https://fedoraproject.org/wiki/Changes/Ruby_2.3- Build libselinux without rpm_execcon() (#1284019)- Rebuilt for Python3.5 rebuild- Flush the class/perm string mapping cache on policy reload (#1264051) - Fix restorecon when path has no context- Simplify procattr cache (#1257157,#1232371)- Export ldflags into the build so hardening works- Update to 2.4 release- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- is_selinux_enabled: Add /etc/selinux/config test (#1219045) - matchpathcon/selabel_file: Fix man pages (#1219718)- revert support for policy compressed with xv (#1185266)- selinux.py - use os.walk() instead of os.path.walk() (#1195004) - is_selinux_enabled(): drop no-policy-loaded test (#1195074) - fix -Wformat errors and remove deprecated mudflap option- bump release and rebuild so that koji-shadow can rebuild it against new gcc on secondary arch- Rebuilt for https://fedoraproject.org/wiki/Changes/Ruby_2.2- Compiled file context files and the original should have the same permissions from dwalsh@redhat.com - Add selinux_openssh_contexts_path() to get a path to /contexts/openssh_contexts- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild- Rebuilt for https://fedoraproject.org/wiki/Changes/Python_3.4- Update to upstream * Get rid of security_context_t and fix const declarations. * Refactor rpm_execcon() into a new setexecfilecon() from Guillem Jover.- Add selinux_openssh_contexts_path()- Rebuilt for https://fedoraproject.org/wiki/Changes/Ruby_2.1- Fix spelling mistake in man page- More go bindings - restorecon, getpidcon, setexeccon- Add additional go bindings for get*con calls - Add go bindings test command - Modify man pages of set*con calls to mention that they are thread specific- Move selinux.go to /usr/lib64/golang/src/pkg/github.com/selinux/selinux.go - Add Int_to_mcs function to generate MCS labels from integers.- Add ghost flag for /var/run/setrans- Update to upstream * Fix userspace AVC handling of per-domain permissive mode. - Verify context is not null when passed into *setfilecon_raw- revert unexplained change to rhat.patch which broke SELinux disablement- Verify context is not null when passed into lsetfilecon_raw- Mv selinux.go to /usr/share/gocode/src/selinux- Add golang support to selinux.- Remove togglesebool man page- Update to upstream * Remove -lpthread from pkg-config file; it is not required. - Add support for policy compressed with xv- Update to upstream * Fix avc_has_perm() returns -1 even when SELinux is in permissive mode. * Support overriding Makefile RANLIB from Sven Vermeulen. * Update pkgconfig definition from Sven Vermeulen. * Mount sysfs before trying to mount selinuxfs from Sven Vermeulen. * Fix man pages from Laurent Bigonville. * Support overriding PATH and LIBBASE in Makefiles from Laurent Bigonville. * Fix LDFLAGS usage from Laurent Bigonville * Avoid shadowing stat in load_mmap from Joe MacDonald. * Support building on older PCRE libraries from Joe MacDonald. * Fix handling of temporary file in sefcontext_compile from Dan Walsh. * Fix procattr cache from Dan Walsh. * Define python constants for getenforce result from Dan Walsh. * Fix label substitution handling of / from Dan Walsh. * Add selinux_current_policy_path from Dan Walsh. * Change get_context_list to only return good matches from Dan Walsh. * Support udev-197 and higher from Sven Vermeulen and Dan Walsh. * Add support for local substitutions from Dan Walsh. * Change setfilecon to not return ENOSUP if context is already correct from Dan Walsh. * Python wrapper leak fixes from Dan Walsh. * Export SELINUX_TRANS_DIR definition in selinux.h from Dan Walsh. * Add selinux_systemd_contexts_path from Dan Walsh. * Add selinux_set_policy_root from Dan Walsh. * Add man page for sefcontext_compile from Dan Walsh.- Add systemd_contexts support - Do substitutions on a local sub followed by a dist sub- Eliminate requirement on pthread library, by applying patch for Jakub Jelinek Resolves #1013801- Fix handling of libselinux getconlist with only one entry- Add Python constants for SELinux enforcing modes- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild- Add sefcontext_compile.8 man page - Add Russell Coker patch to fix man pages - Add patches from Laurent Bigonville to fix Makefiles for debian. - modify spec file to use %{_prefix}/lib- Fix patch that Handles substitutions for /- Handle substitutions for / - semanage fcontext -a -e / /opt/rh/devtoolset-2/root- Add Eric Paris patch to fix procattr calls after a fork.- Move secolor.conf.5 into mcstrans package and out of libselinux- Fix python bindings for selinux_check_access- Fix reseting the policy root in matchpathcon- Cleanup setfcontext_compile atomic patch - Add matchpathcon -P /etc/selinux/mls support by allowing users to set alternate root - Make sure we set exit codes from selinux_label calls to ENOENT or SUCCESS- Make setfcontext_compile atomic- Fix memory leak in set*con calls.- Move matchpathcon to -utils package - Remove togglesebool- Fix selinux man page to reflect what current selinux policy is.- Add new constant SETRANS_DIR which points to the directory where mstransd can find the socket and libvirt can write its translations files.- Bring back selinux_current_policy_path- Revert some changes which are causing the wrong policy version file to be created- Update to upstream * audit2why: make sure path is nul terminated * utils: new file context regex compiler * label_file: use precompiled filecontext when possible * do not leak mmapfd * sefcontontext_compile: Add error handling to help debug problems in libsemanage. * man: make selinux.8 mention service man pages * audit2why: Fix segfault if finish() called twice * audit2why: do not leak on multiple init() calls * mode_to_security_class: interface to translate a mode_t in to a security class * audit2why: Cleanup audit2why analysys function * man: Fix program synopsis and function prototypes in man pages * man: Fix man pages formatting * man: Fix typo in man page * man: Add references and man page links to _raw function variants * Use ENOTSUP instead of EOPNOTSUPP for getfilecon functions * man: context_new(3): fix the return value description * selinux_status_open: handle error from sysconf * selinux_status_open: do not leak statusfd on exec * Fix errors found by coverity * Change boooleans.subs to booleans.subs_dist. * optimize set*con functions * pkg-config do not specifc ruby version * unmap file contexts on selabel_close() * do not leak file contexts with mmap'd backend * sefcontext_compile: do not leak fd on error * matchmediacon: do not leak fd * src/label_android_property: do not leak fd on error- Update to latest patches from eparis/Upstream- Update to latest patches from eparis/Upstream- Try procatt speedup patch again- Roll back procattr speedups since it seems to be screwing up systemd labeling.- Fix tid handling for setfscreatecon, old patch still broken in libvirt- Fix tid handling for setfscreatecon, old patch still broken in libvirt- setfscreatecon after fork was broken by the Set*con patch. - We needed to reset the thread variables after a fork.- Fix setfscreatecon call to handle failure mode, which was breaking udev- Ondrej Oprala patch to optimize set*con functions - Set*con now caches the security context and only re-sets it if it changes.- Rebuild against latest libsepol- Update to latest patches from eparis/Upstream - Fix errors found by coverity - set the sepol_compute_av_reason_buffer flag to 0. This means calculate denials only? - audit2why: remove a useless policy vers variable - audit2why: use the new constraint information- Rebuild with latest libsepol- Return EPERM if login program can not reach default label for user - Attempt to return container info from audit2why- Apply patch from eparis to fix leaked file descriptor in new labeling code- Add new function mode_to_security_class which takes mode instead of a string. - Possibly will be used with coreutils.- Add back selinuxconlist and selinuxdefcon man pages- Fix segfault from calling audit2why.finish() multiple times- Fix up selinux man page to reference service man pages- Rebuild with fixed libsepol- Update to upstream * Add support for lxc_contexts_path * utils: add service to getdefaultcon * libsemanage: do not set soname needlessly * libsemanage: remove PYTHONLIBDIR and ruby equivalent * boolean name equivalency * getsebool: support boolean name substitution * Add man page for new selinux_boolean_sub function. * expose selinux_boolean_sub * matchpathcon: add -m option to force file type check * utils: avcstat: clear sa_mask set * seusers: Check for strchr failure * booleans: initialize pointer to silence coveriety * stop messages when SELinux disabled * label_file: use PCRE instead of glibc regex functions * label_file: remove all typedefs * label_file: move definitions to include file * label_file: do string to mode_t conversion in a helper function * label_file: move error reporting back into caller * label_file: move stem/spec handling to header * label_file: drop useless ncomp field from label_file data * label_file: move spec_hasMetaChars to header * label_file: fix potential read past buffer in spec_hasMetaChars * label_file: move regex sorting to the header * label_file: add accessors for the pcre extra data * label_file: only run regex files one time * label_file: new process_file function * label_file: break up find_stem_from_spec * label_file: struct reorg * label_file: only run array once when sorting * Ensure that we only close the selinux netlink socket once. * improve the file_contexts.5 manual page- rebuild for https://fedoraproject.org/wiki/Features/Python_3.3- make with_python3 be conditional on fedora- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- Move the tmpfiles.d content from /etc/tmpfiles.d to /usr/lib/tmpfiles.d- Revert Eric Paris Patch for selinux_binary_policy_path- Update to upstream * Fortify source now requires all code to be compiled with -O flag * asprintf return code must be checked * avc_netlink_recieve handle EINTR * audit2why: silence -Wmissing-prototypes warning * libsemanage: remove build warning when build swig c files * matchpathcon: bad handling of symlinks in / * seusers: remove unused lineno * seusers: getseuser: gracefully handle NULL service * New Android property labeling backend * label_android_property whitespace cleanups * additional makefile support for rubywrap- Fix booleans.subs name, change function name to selinux_boolean_sub, add man page, minor fixes to the function- Fix to compile with Fortify source * Add -O compiler flag * Check return code from asprintf - Fix handling of symbolic links in / by realpath_not_final- Add support for lxc contexts file- Add support fot boolean subs file- Update to upstream * Fix dead links to www.nsa.gov/selinux * Remove jump over variable declaration * Fix old style function definitions * Fix const-correctness * Remove unused flush_class_cache method * Add prototype decl for destructor * Add more printf format annotations * Add printf format attribute annotation to die() method * Fix const-ness of parameters & make usage() methods static * Enable many more gcc warnings for libselinux/src/ builds * utils: Enable many more gcc warnings for libselinux/utils builds * Change annotation on include/selinux/avc.h to avoid upsetting SWIG * Ensure there is a prototype for 'matchpathcon_lib_destructor' * Update Makefiles to handle /usrmove * utils: Stop separating out matchpathcon as something special * pkg-config to figure out where ruby include files are located * build with either ruby 1.9 or ruby 1.8 * assert if avc_init() not called * take security_deny_unknown into account * security_compute_create_name(3) * Do not link against python library, this is considered * bad practice in debian * Hide unnecessarily-exported library destructors- Add selinux_current_policy_path to return /sys/fs/selinux/policy if it exists - Otherwise search for policy on disk- Change selinux_binary_policy_path to return /sys/fs/selinux/policy - Add selinux_installed_policy_path to return what selinux_binary_policy_path used to return - avc_has_perm will now return yes if the machine is in permissive mode - Make work with ruby-1.9- avc_netlink_recieve should continue to poll if it receinves an EINTR rather- use /sbin/ldconfig, glibc does not provide /usr/sbin/ldconfig in the RPM database for now- Rebuild with cleaned up upstream to work in /usr- install everything in /usr https://fedoraproject.org/wiki/Features/UsrMove- Add Dan Berrange code cleanup patches.- Fix selabal_open man page to refer to proper selinux_opt structure-Update to upstream * Fix setenforce man page to refer to selinux man page * Cleanup Man pages * merge freecon with getcon man page- Add patch from Richard Haines When selabel_lookup found an invalid context with validation enabled, it always stated it was 'file_contexts' whether media, x, db or file. The fix is to store the spec file name in the selabel_lookup_rec on selabel_open and use this as output for logs. Also a minor fix if key is NULL to stop seg faults. - Fix setenforce manage page.- Rebuild with new libsepol- Fix setenforce man page, from Miroslav Grepl- Upgrade to upstream * selinuxswig_python.i: don't make syscall if it won't change anything * Remove assert in security_get_boolean_names(3) * Mapped compute functions now obey deny_unknown flag * get_default_type now sets EINVAL if no entry. * return EINVAL if invalid role selected * Updated selabel_file(5) man page * Updated selabel_db(5) man page * Updated selabel_media(5) man page * Updated selabel_x(5) man page * Add man/man5 man pages * Add man/man5 man pages * Add man/man5 man pages * use -W and -Werror in utils- Change python binding for restorecon to check if the context matches. - If it does do not reset- Upgrade to upstream * Makefiles: syntax, convert all ${VAR} to $(VAR) * load_policy: handle selinux=0 and /sys/fs/selinux not exist * regenerate .pc on VERSION change * label: cosmetic cleanups * simple interface for access checks * Don't reinitialize avc_init if it has been called previously * seusers: fix to handle large sets of groups * audit2why: close fd on enomem * rename and export symlink_realpath * label_file: style changes to make Eric happy.- Apply libselinux patch to handle large groups in seusers.- Add selinux_check_access function. Needed for passwd, chfn, chsh- Handle situation where selinux=0 passed to the kernel and both /selinux and-Update to upstream * utils: matchpathcon: remove duplicate declaration * src: matchpathcon: use myprintf not fprintf * src: matchpathcon: make sure resolved path starts * put libselinux.so.1 in /lib not /usr/lib * tree: default make target to all not- Switch to use ":" as prefix separator rather then ";"- Avoid unnecessary shell invocation in %post.- Fix handling of subset labeling that is causing segfault in restorecon- Change matchpathcon_init_prefix and selabel_open to allow multiple initial prefixes. Now you can specify a ";" separated list of prefixes and the labeling system will only load regular expressions that match these prefixes.- Change matchpatcon to use proper myprintf - Fix symlink_realpath to always include "/" - Update to upstream * selinux_file_context_verify function returns wrong value. * move realpath helper to matchpathcon library * python wrapper makefile changes- Move to new Makefile that can build with or without PYTHON being set-Update to upstream 2.1.4 2011-0817 * mapping fix for invalid class/perms after selinux_set_mapping * audit2why: work around python bug not defining * resolv symlinks and dot directories before matching 2.1.2 2011-0803 * audit2allow: do not print statistics * make python bindings for restorecon work on relative path * fix python audit2why binding error * support new python3 functions * do not check fcontext duplicates on use * Patch for python3 for libselinux 2.1.1 2011-08-02 * move .gitignore into utils * new setexecon utility * selabel_open fix processing of substitution files * mountpoint changing patch. * simplify SRCS in Makefile 2.1.1 2011-08-01 * Remove generated files, introduce more .gitignore-Update to upstream * Release, minor version bump * Give correct names to mount points in load_policy by Dan Walsh. * Make sure selinux state is reported correctly if selinux is disabled or fails to load by Dan Walsh. * Fix crash if selinux_key_create was never called by Dan Walsh. * Add new file_context.subs_dist for distro specific filecon substitutions by Dan Walsh. * Update man pages for selinux_color_* functions by Richard Haines.- Only call dups check within selabel/matchpathcon if you are validating the context - This seems to speed the loading of labels by 4 times.- Move /selinux to /sys/fs/selinux - Add selinuxexeccon - Add realpath to matchpathcon to handle matchpathcon * type queries.- Update for latest libsepol- Update for latest libsepol- Fix restorecon python binding to accept relative paths-Update to upstream * Give correct names to mount points in load_policy by Dan Walsh. * Make sure selinux state is reported correctly if selinux is disabled or fails to load by Dan Walsh. * Fix crash if selinux_key_create was never called by Dan Walsh. * Add new file_context.subs_dist for distro specific filecon substitutions by Dan Walsh. * Update man pages for selinux_color_* functions by Richard Haines.- Clean up patch to make handling of constructor cleanup more portable * db_language object class support for selabel_lookup from KaiGai Kohei. * Library destructors for thread local storage keys from Eamon Walsh.- Add distribution subs pathAdd patch from dbhole@redhat.com to initialize thread keys to -1 Errors were being seen in libpthread/libdl that were related to corrupt thread specific keys. Global destructors that are called on dl unload. During destruction delete a thread specific key without checking if it has been initialized. Since the constructor is not called each time (i.e. key is not initialized with pthread_key_create each time), and the default is 0, there is a possibility that key 0 for an active thread gets deleted. This is exactly what is happening in case of OpenJDK. Workaround patch that initializes the key to -1. Thus if the constructor is not called, the destructor tries to delete key -1 which is deemed invalid by pthread_key_delete, and is ignored.- Call fini_selinuxmnt if selinux is disabled, to cause is_selinux_disabled() to report correct data- Change mount source options to use "proc" and "selinuxfs"- Update to upstream * Turn off default user handling when computing user contexts by Dan Walsh- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- Fixup selinux man page- Fix Makefile to use pkg-config --cflags python3 to discover include paths- Update to upstream - Turn off fallback in to SELINUX_DEFAULTUSER in get_context_list- Update to upstream * Thread local storage fixes from Eamon Walsh.- Add /etc/tmpfiles.d support for /var/run/setrans- Ghost /var/run/setrans- Rebuilt for gcc bug 634757- rebuild via updated swig (#624674)- Update for python 3.2a1- Turn off fallback in to SELINUX_DEFAULTUSER in get_context_list- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild- Turn off messages in audit2why- Update to upstream * Add const qualifiers to public API where appropriate by KaiGai Kohei. 2.0.95 2010-06-10 * Remove duplicate slashes in paths in selabel_lookup from Chad Sellers * Adds a chcon method to the libselinux python bindings from Steve Lawrence - add python3 subpackage from David Malcolm* Set errno=EINVAL for invalid contexts from Dan Walsh.- Update to upstream * Show strerror for security_getenforce() by Colin Waters. * Merged selabel database support by KaiGai Kohei. * Modify netlink socket blocking code by KaiGai Kohei.- Update to upstream * Fix from Eric Paris to fix leak on non-selinux systems. * regenerate swig wrappers * pkgconfig fix to respect LIBDIR from Dan Walsh.- Update to upstream * Change the AVC to only audit the permissions specified by the policy, excluding any permissions specified via dontaudit or not specified via auditallow. * Fix compilation of label_file.c with latest glibc headers.- Fix potential doublefree on init- Fix libselinux.pc- Fix man page for selinuxdefcon- Free memory on disabled selinux boxes- Update to upstream * add/reformat man pages by Guido Trentalancia . * Change exception.sh to be called with bash by Manoj Srivastava - Fix selinuxdefcon man page- Update to upstream * Add pkgconfig file from Eamon Walsh.- Update to upstream * Rename and export selinux_reset_config()- Update to upstream * Add exception handling in libselinux from Dan Walsh. This uses a shell script called exception.sh to generate a swig interface file. * make swigify * Make matchpathcon print <> if path not found in fcontext file.- Eliminate -pthread switch in Makefile- Update to upstream * Removal of reference counting on userspace AVC SID's.- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- Update to upstream * Reverted Tomas Mraz's fix for freeing thread local storage to avoid pthread dependency. * Removed fini_context_translations() altogether. * Merged lazy init patch from Stephen Smalley based on original patch by Steve Grubb.- Update to upstream * Add per-service seuser support from Dan Walsh. * Let load_policy gracefully handle selinuxfs being mounted from Stephen Smalley. * Check /proc/filesystems before /proc/mounts for selinuxfs from Eric Paris.- Add provices ruby(selinux)- Update to upstream * Fix improper use of thread local storage from Tomas Mraz . * Label substitution support from Dan Walsh. * Support for labeling virtual machine images from Dan Walsh.- Update to upstream * Trim / from the end of input paths to matchpathcon from Dan Walsh. * Fix leak in process_line in label_file.c from Hiroshi Shinji. * Move matchpathcon to /sbin, add matchpathcon to clean target from Dan Walsh. * getdefaultcon to print just the correct match and add verbose option from Dan Walsh.- Update to upstream * deny_unknown wrapper function from KaiGai Kohei. * security_compute_av_flags API from KaiGai Kohei. * Netlink socket management and callbacks from KaiGai Kohei.- Fix Memory Leak- Fix crash in python- Add back in additional interfaces- Add back in av_decision to python swig- Update to upstream * Netlink socket handoff patch from Adam Jackson. * AVC caching of compute_create results by Eric Paris.- Add patch from ajax to accellerate X SELinux - Update eparis patch- Add eparis patch to accellerate Xwindows performance- Fix URL- Add substitute pattern - matchpathcon output <> on ENOENT- Update to upstream * Fix incorrect conversion in discover_class code.- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild- Add - selinux_virtual_domain_context_path - selinux_virtual_image_context_path- Throw exeptions in python swig bindings on failures- Fix restorecon python code- Update to upstream- Strip trailing / for matchpathcon- Fix segfault if seusers file does not work- Add new function getseuser which will take username and service and return - seuser and level. ipa will populate file in future. - Change selinuxdefcon to return just the context by default- Rebuild for Python 2.6- Update to Upstream * Allow shell-style wildcards in x_contexts file.- Eamon Walsh Patch - libselinux: allow shell-style wildcarding in X names - Add Restorecon/Install python functions from Luke Macken- Update to Upstream * Correct message types in AVC log messages. * Make matchpathcon -V pass mode from Dan Walsh. * Add man page for selinux_file_context_cmp from Dan Walsh.- Update to Upstream * New man pages from Dan Walsh. * Update flask headers from refpolicy trunk from Dan Walsh.- Fix matchpathcon -V call- Add flask definitions for open, X and nlmsg_tty_audit- Add missing get/setkeycreatecon man pages- Split out utilities- Add missing man page links for [lf]getfilecon- Update to Upstream * Add group support to seusers using %groupname syntax from Dan Walsh. * Mark setrans socket close-on-exec from Stephen Smalley. * Only apply nodups checking to base file contexts from Stephen Smalley.- Update to Upstream * Merge ruby bindings from Dan Walsh. - Add support for Linux groups to getseuserbyname- Allow group handling in getseuser call- Update to Upstream * Handle duplicate file context regexes as a fatal error from Stephen Smalley. This prevents adding them via semanage. * Fix audit2why shadowed variables from Stephen Smalley. * Note that freecon NULL is legal in man page from Karel Zak.- Add ruby support for puppet- Rebuild for new libsepol- Add Karel Zak patch for freecon man page- Update to Upstream * New and revised AVC, label, and mapping man pages from Eamon Walsh. * Add swig python bindings for avc interfaces from Dan Walsh.- Update to Upstream * Fix selinux_file_context_verify() and selinux_lsetfilecon_default() to call matchpathcon_init_prefix if not already initialized. * Add -q qualifier for -V option of matchpathcon and change it to indicate whether verification succeeded or failed via exit status.- libselinux no longer neets to telnet -u in post install- Add sedefaultcon and setconlist commands to dump login context- Update to Upstream * Fixed selinux_set_callback man page. * Try loading the max of the kernel-supported version and the libsepol-supported version when no manipulation of the binary policy is needed from Stephen Smalley. * Fix memory leaks in matchpathcon from Eamon Walsh.- Add Xavior Toth patch for security_id_t in swig- Add avc.h to swig code- Grab the latest policy for the kernel- Update to Upstream * Man page typo fix from Jim Meyering.- Update to Upstream * Changed selinux_init_load_policy() to not warn about a failed mount of selinuxfs if selinux was disabled in the kernel.- Fix matchpathcon memory leak- Update to Upstream * Merged new X label "poly_selection" namespace from Eamon Walsh.- Update to Upstream * Merged reset_selinux_config() for load policy from Dan Walsh.- Reload library on loading of policy to handle chroot- Update to Upstream * Merged avc_has_perm() errno fix from Eamon Walsh.- Update to Upstream * Regenerated Flask headers from refpolicy flask definitions.- Update to Upstream * Merged compute_member AVC function and manpages from Eamon Walsh. * Provide more error reporting on load policy failures from Stephen Smalley.- Update to Upstream * Merged new X label "poly_prop" namespace from Eamon Walsh.- Update to Upstream * Disable setlocaldefs if no local boolean or users files are present from Stephen Smalley. * Skip userspace preservebools processing for Linux >= 2.6.22 from Stephen Smalley.- Update to Upstream * Merged fix for audit2why from Dan Walsh.- Fix audit2why to grab latest policy versus the one selected by the kernel* Merged audit2why python binding from Dan Walsh.* Merged updated swig bindings from Dan Walsh, including typemap for pid_t.- Update to use libsepol-static library- Move libselinux.a to -static package - Spec cleanups- Put back libselinux.a- Fix memory references in audit2why and change to use tuples - Update to Upstream * Fix for the avc: granted null message bug from Stephen Smalley.- Fix __init__.py specification- Add audit2why python bindings- Add pid_t typemap for swig bindings- smp_mflag- Fix spec file caused by spec review- Upgrade to upstream * matchpathcon(8) man page update from Dan Walsh.- Upgrade to upstream * dlopen libsepol.so.1 rather than libsepol.so from Stephen Smalley. * Based on a suggestion from Ulrich Drepper, defer regex compilation until we have a stem match, by Stephen Smalley. * A further optimization would be to defer regex compilation until we have a complete match of the constant prefix of the regex - TBD.- Upgrade to upstream * Regenerated Flask headers from policy.- Upgrade to upstream * AVC enforcing mode override patch from Eamon Walsh. * Aligned attributes in AVC netlink code from Eamon Walsh. - Move libselinux.so back into devel package, procps has been fixed- Upgrade to upstream * Merged refactored AVC netlink code from Eamon Walsh. * Merged new X label namespaces from Eamon Walsh. * Bux fix and minor refactoring in string representation code.- Upgrade to upstream * Merged selinux_get_callback, avc_open, empty string mapping from Eamon Walsh.- Upgrade to upstream * Fix segfault resulting from missing file_contexts file.- Fix segfault on missing file_context file- Upgrade to upstream * Make netlink socket close-on-exec to avoid descriptor leakage from Dan Walsh. * Pass CFLAGS when using gcc for linking from Dennis Gilmore.- Add sparc patch to from Dennis Gilmore to build on Sparc platform- Remove leaked file descriptor- Upgrade to latest from NSA * Fix selabel option flag setting for 64-bit from Stephen Smalley.- Change matchpatcon to use syslog instead of syserror- Upgrade to latest from NSA * Re-map a getxattr return value of 0 to a getfilecon return value of -1 with errno EOPNOTSUPP from Stephen Smalley. * Fall back to the compat code for security_class_to_string and security_av_perm_to_string from Stephen Smalley. * Fix swig binding for rpm_execcon from James Athey.- Apply James Athway patch to fix rpm_execcon python binding- Move libselinux.so back into main package, breaks procps- Upgrade to upstream * Fix file_contexts.homedirs path from Todd Miller.- Remove requirement on setransd, Moved to selinux-policy-mls- Move libselinux.so into devel package - Upgrade to upstream * Fix segfault resulting from uninitialized print-callback pointer. * Added x_contexts path function patch from Eamon Walsh. * Fix build for EMBEDDED=y from Yuichi Nakamura. * Fix markup problems in selinux man pages from Dan Walsh.- Upgrade to upstream * Updated version for stable branch. * Added x_contexts path function patch from Eamon Walsh. * Fix build for EMBEDDED=y from Yuichi Nakamura. * Fix markup problems in selinux man pages from Dan Walsh. * Updated av_permissions.h and flask.h to include new nscd permissions from Dan Walsh. * Added swigify to top-level Makefile from Dan Walsh. * Fix for string_to_security_class segfault on x86_64 from Stephen Smalley.- Apply Steven Smalley patch to fix segfault in string_to_security_class- Fix matchpathcon to set default myprintf- Upgrade to upstream * Fix for getfilecon() for zero-length contexts from Stephen Smalley.- Update to match flask/access_vectors in policy- Fix man page markup lanquage for translations- Fix semanage segfault on x86 platform- Upgrade to upstream * Labeling and callback interface patches from Eamon Walsh.- Refactored swig- Upgrade to upstream * Class and permission mapping support patches from Eamon Walsh. * Object class discovery support patches from Chris PeBenito. * Refactoring and errno support in string representation code.- Upgrade to upstream - Merged patch to reduce size of libselinux and remove need for libsepol for embedded systems from Yuichi Nakamura. This patch also turns the link-time dependency on libsepol into a runtime (dlopen) dependency even in the non-embedded case. 2.0.17 2007-05-31 * Updated Lindent script and reindented two header files.- Upgrade to upstream * Merged additional swig python bindings from Dan Walsh. * Merged helpful message when selinuxfs mount fails patch from Dax Kelson.- Upgrade to upstream * Merged build fix for avc_internal.c from Joshua Brindle.- Add get_context_list funcitions to swig file- Upgrade to upstream * Merged rpm_execcon python binding fix, matchpathcon man page fix, and getsebool -a handling for EACCES from Dan Walsh.- Add missing interface- Upgrade to upstream * Merged support for getting initial contexts from James Carter.- Upgrade to upstream * Merged userspace AVC patch to follow kernel's behavior for permissive mode in caching previous denials from Eamon Walsh. * Merged sidput(NULL) patch from Eamon Walsh.- Make rpm_exec swig work- Upgrade to upstream * Merged class/av string conversion and avc_compute_create patch from Eamon Walsh.- Upgrade to upstream * Merged fix for avc.h #include's from Eamon Walsh.- Add stdint.h to avc.h- Merged patch to drop support for CACHETRANS=0 config option from Steve Grubb. - Merged patch to drop support for old /etc/sysconfig/selinux and - /etc/security policy file layout from Steve Grubb.- Do not fail on permission denied in getsebool- Upgrade to upstream * Merged init_selinuxmnt() and is_selinux_enabled() improvements from Steve Grubb.- Upgrade to upstream * Removed sending of setrans init message. * Merged matchpathcon memory leak fix from Steve Grubb.- Upgrade to upstream * Merged more swig initializers from Dan Walsh.- Upgrade to upstream * Merged patch from Todd Miller to convert int types over to C99 style.- Merged patch from Todd Miller to remove sscanf in matchpathcon.c because of the use of the non-standard format (original patch changed for style). - Merged patch from Todd Miller to fix memory leak in matchpathcon.c.- Add context function to python to split context into 4 parts- Upgrade to upstream * Updated version for stable branch.- Upgrade to upstream * Merged man page updates to make "apropos selinux" work from Dan Walsh.- Upgrade to upstream * Merged getdefaultcon utility from Dan Walsh.- Add Ulrich NSCD__GETSERV and NSCD__SHMEMGRP for Uli- Add reference to selinux man page in all man pages to make apropos work Resolves: # 217881- Upstream wanted some minor changes, upgrading to keep api the same - Upgrade to upstream * Merged selinux_check_securetty_context() and support from Dan Walsh. Resolves: #200110- Cleanup patch- Add securetty handling Resolves: #200110- Upgrade to upstream * Merged patch for matchpathcon utility to use file mode information when available from Dan Walsh.- rebuild against python 2.5- Fix matchpathcon to lstat files- Update man page- Upgrade to upstream- Add James Antill patch for login verification of MLS Levels - MLS ragnes need to be checked, Eg. login/cron. This patch adds infrastructure.- Upgrade to latest from NSA * Merged updated flask definitions from Darrel Goeddel. This adds the context security class, and also adds the string definitions for setsockcreate and polmatch.- Upgrade to latest from NSA * Updated version for release.- rebuilt for unwind info generation, broken in gcc-4.1.1-21- Upgrade to latest from NSA * Merged av_permissions.h update from Steve Grubb, adding setsockcreate and polmatch definitions.- really make -devel depend on libsepol-devel- Add sgrubb patch for polmatch- Upgrade to latest from NSA * Merged patch from Steve Smalley to fix SIGPIPE in setrans_client- have -devel require libsepol-devel- Upgrade to latest from NSA * Merged patch to not log avc stats upon a reset from Steve Grubb. * Applied patch to revert compat_net setting upon policy load. * Merged file context homedir and local path functions from Chris PeBenito.- rebuilt with latest binutils to pick up 64K -z commonpagesize on ppc* (#203001)- Upgrade to latest from NSA * Merged file context homedir and local path functions from Chris PeBenito. * Rework functions that access /proc/pid/attr to access the per-thread nodes, and unify the code to simplify maintenance.- Upgrade to latest from NSA * Merged return value fix for *getfilecon() from Dan Walsh. * Merged sockcreate interfaces from Eric Paris.- Fix translation return codes to return size of buffer- Upgrade to latest from NSA * Merged no-tls-direct-seg-refs patch from Jeremy Katz. * Merged netfilter_contexts support patch from Chris PeBenito.- Upgrade to latest from NSA * Merged context_*_set errno patch from Jim Meyering.- only build non-fpic objects with -mno-tls-direct-seg-refs- build with -mno-tls-direct-seg-refs on x86 to avoid triggering segfaults with xen (#200783)- Rebuild for new gcc- Fix libselinux to not telinit during installs- Upgrade to latest from NSA * Lindent. * Merged {get,set}procattrcon patch set from Eric Paris. * Merged re-base of keycreate patch originally by Michael LeMay from Eric Paris. * Regenerated Flask headers from refpolicy. * Merged patch from Dan Walsh with: - Added selinux_file_context_{cmp,verify}. - Added selinux_lsetfilecon_default. - Delay translation of contexts in matchpathcon.- Yet another change to matchpathcon- Turn off error printing in library. Need to compile with DEBUG to get it back- Fix error reporting of matchpathcon- Add function to compare file context on disk versus contexts in file_contexts file.- Upgrade to latest from NSA * Merged patch from Dan Walsh with: * Added selinux_getpolicytype() function. * Modified setrans code to skip processing if !mls_enabled. * Set errno in the !selinux_mnt case. * Allocate large buffers from the heap, not on stack. Affects is_context_customizable, selinux_init_load_policy, and selinux_getenforcemode.- Add selinux_getpolicytype()- Upgrade to latest from NSA * Merged !selinux_mnt checks from Ian Kent.- Check for selinux_mnt == NULL- Merged matchmediacon and trans_to_raw_context fixes from Serge Hallyn.- Remove getseuser- Bump requires to grab latest libsepol- Add BuildRequires for swig- Upgrade to latest from NSA * Merged simple setrans client cache from Dan Walsh. Merged avcstat patch from Russell Coker. * Modified selinux_mkload_policy() to also set /selinux/compat_net appropriately for the loaded policy.- More fixes for translation cache - Upgrade to latest from NSA * Added matchpathcon_fini() function to free memory allocated by matchpathcon_init().- Add simple cache to improve translation speed- Upgrade to latest from NSA * Merged setrans client cleanup patch from Steve Grubb.- Add Russell's AVC patch to handle large numbers- Upgrade to latest from NSA * Merged getfscreatecon man page fix from Dan Walsh. * Updated booleans(8) man page to drop references to the old booleans file and to note that setsebool can be used to set the boot-time defaults via -P.- Upgrade to latest from NSA * Merged fix warnings patch from Karl MacMillan. * Merged setrans client support from Dan Walsh. This removes use of libsetrans. * Merged patch to eliminate use of PAGE_SIZE constant from Dan Walsh. * Merged swig typemap fixes from Glauber de Oliveira Costa.- Change the way translations work, Use setransd/remove libsetrans- Add selinuxswig fixes - Stop using PAGE_SIZE and start using sysconf(_SC_PAGE_SIZE)- Upgrade to latest from NSA * Added distclean target to Makefile. * Regenerated swig files. * Changed matchpathcon_init to verify that the spec file is a regular file. * Merged python binding t_output_helper removal patch from Dan Walsh.- Fix python bindings for matchpathcon - Fix booleans man page- Merged Makefile PYLIBVER definition patch from Dan Walsh.- Make some fixes so it will build on RHEL4 - Upgrade to latest from NSA * Updated version for release. * Altered rpm_execcon fallback logic for permissive mode to also handle case where /selinux/enforce is not available.- bump again for double-long bug on ppc(64)- rebuilt for new gcc4.1 snapshot and glibc changes- Upgrade to latest from NSA * Merged install-pywrap Makefile patch from Joshua Brindle.- Upgrade to latest from NSA * Merged pywrap Makefile patch from Dan Walsh.- Split out pywrap in Makefile- Upgrade to latest from NSA * Added getseuser test program.- Upgrade to latest from NSA * Added format attribute to myprintf in matchpathcon.c and removed obsoleted rootlen variable in init_selinux_config().- Build with new libsepol- Upgrade to latest from NSA * Merged several fixes and improvements from Ulrich Drepper (Red Hat), including: - corrected use of getline - further calls to __fsetlocking for local files - use of strdupa and asprintf - proper handling of dirent in booleans code - use of -z relro - several other optimizations * Merged getpidcon python wrapper from Dan Walsh (Red Hat).- Add build requires line for libsepol-devel- Fix swig call for getpidcon- Move libselinux.so to base package- Upgrade to latest from NSA * Merged call to finish_context_translations from Dan Walsh. This eliminates a memory leak from failing to release memory allocated by libsetrans.- update to latest libsetrans - Fix potential memory leak- rebuilt- Update to never version * Merged patch for swig interfaces from Dan Walsh.- Update to never version- Fix some of the python swig objects- Update to latest from NSA * Added MATCHPATHCON_VALIDATE flag for set_matchpathcon_flags() and modified matchpathcon implementation to make context validation/ canonicalization optional at matchpathcon_init time, deferring it to a successful matchpathcon by default unless the new flag is set by the caller. * Added matchpathcon_init_prefix() interface, and reworked matchpathcon implementation to support selective loading of file contexts entries based on prefix matching between the pathname regex stems and the specified path prefix (stem must be a prefix of the specified path prefix).- Update to latest from NSA * Change getsebool to return on/off instead of active/inactive- Update to latest from NSA * Added -f file_contexts option to matchpathcon util. Fixed warning message in matchpathcon_init(). * Merged Makefile python definitions patch from Dan Walsh.- Update to latest from NSA * Merged swigify patch from Dan Walsh.- Separate out libselinux-python bindings into separate rpm- Read libsetrans requirement- Add python bindings- Update to latest from NSA * Merged make failure in rpm_execcon non-fatal in permissive mode patch from Ivan Gyurdiev.- Remove requirement for libsetrans- Update to latest from NSA * Added MATCHPATHCON_NOTRANS flag for set_matchpathcon_flags() and modified matchpathcon_init() to skip context translation if it is set by the caller.- Update to latest from NSA * Added security_canonicalize_context() interface and set_matchpathcon_canoncon() interface for obtaining canonical contexts. Changed matchpathcon internals to obtain canonical contexts by default. Provided fallback for kernels that lack extended selinuxfs context interface. - Patch to not translate mls when calling setfiles- Update to latest from NSA * Merged seusers parser changes from Ivan Gyurdiev. * Merged setsebool to libsemanage patch from Ivan Gyurdiev. * Changed seusers parser to reject empty fields.- Update to latest from NSA * Merged seusers empty level handling patch from Jonathan Kim (TCS).- Rebuild for latest libsepol- Rebuild for latest libsepol- Change default to __default__- Change default to __default__- Add selinux_translations_path- Update to latest from NSA * Merged selinux_path() and selinux_homedir_context_path() functions from Joshua Brindle.- Need to check for /sbin/telinit- Update to latest from NSA * Merged fixes for make DESTDIR= builds from Joshua Brindle.- Update to latest from NSA * Merged get_default_context_with_rolelevel and man pages from Dan Walsh (Red Hat). * Updated call to sepol_policydb_to_image for sepol changes. * Changed getseuserbyname to ignore empty lines and to handle no matching entry in the same manner as no seusers file.- Tell init to reexec itself in post script- Update to latest from NSA * Changed selinux_mkload_policy to try downgrading the latest policy version available to the kernel-supported version. * Changed selinux_mkload_policy to fall back to the maximum policy version supported by libsepol if the kernel policy version falls outside of the supported range.- Update to latest from NSA * Changed getseuserbyname to fall back to the Linux username and NULL level if seusers config file doesn't exist unless REQUIRESEUSERS=1 is set in /etc/selinux/config. * Moved seusers.conf under $SELINUXTYPE and renamed to seusers.- Update to latest from NSA * Added selinux_init_load_policy() function as an even higher level interface for the initial policy load by /sbin/init. This obsoletes the load_policy() function in the sysvinit-selinux.patch. * Added selinux_mkload_policy() function as a higher level interface for loading policy than the security_load_policy() interface.- Update to latest from NSA * Merged fix for matchpathcon (regcomp error checking) from Johan Fischer. Also added use of regerror to obtain the error string for inclusion in the error message.- Update to latest from NSA * Changed getseuserbyname to not require (and ignore if present) the MLS level in seusers.conf if MLS is disabled, setting *level to NULL in this case.- Update to latest from NSA * Merged getseuserbyname patch from Dan Walsh.- Fix patch to satisfy upstream- Update to latest from NSA - Add getseuserbyname- Fix patch call- Fix strip_con call- Go back to original libsetrans code- Eliminate forth param from mls context when mls is not enabled.- Update from NSA * Merged modified form of patch to avoid dlopen/dlclose by the static libselinux from Dan Walsh. Users of the static libselinux will not have any context translation by default.- Update from NSA * Added public functions to export context translation to users of libselinux (selinux_trans_to_raw_context, selinux_raw_to_trans_context).- Update from NSA * Remove special definition for context_range_set; use common code.- Update from NSA * Hid translation-related symbols entirely and ensured that raw functions have hidden definitions for internal use. * Allowed setting NULL via context_set* functions. * Allowed whitespace in MLS component of context. * Changed rpm_execcon to use translated functions to workaround lack of MLS level on upgraded systems.- Allow set_comp on unset ranges- Merged context translation patch, originally by TCS, with modifications by Dan Walsh (Red Hat).- Apply translation patch- Update from NSA * Merged several fixes for error handling paths in the AVC sidtab, matchpathcon, booleans, context, and get_context_list code from Serge Hallyn (IBM). Bugs found by Coverity. * Removed setupns; migrated to pam. * Merged patches to rename checkPasswdAccess() from Joshua Brindle. Original symbol is temporarily retained for compatibility until all callers are updated.- Update makefiles- Update from NSA * Merged security_setupns() from Chad Sellers. - fix selinuxenabled man page- Update from NSA * Merged avcstat and selinux man page from Dan Walsh. * Changed security_load_booleans to process booleans.local even if booleans file doesn't exist.- Fix avcstat to clear totals- Add info to man page- Update from NSA * Merged set_selinuxmnt patch from Bill Nottingham (Red Hat). * Rewrote get_ordered_context_list and helpers, including changing logic to allow variable MLS fields.- Update from NSA- Add backin matchpathcon- Fix selinux_policy_root man page- Change assert(selinux_mnt) to if (!selinux_mnt) return -1;- Update from NSA * Fixed bug in matchpathcon_filespec_destroy.- Update from NSA * Fixed bug in rpm_execcon error handling path.- Update from NSA * Merged fix for set_matchpathcon* functions from Andreas Steinmetz. * Merged fix for getconlist utility from Andreas Steinmetz.- Update from NSA- Better handling of booleans- Update from NSA * Merged destructors patch from Tomas Mraz.- Update from NSA * Added set_matchpathcon_flags() function for setting flags controlling operation of matchpathcon. MATCHPATHCON_BASEONLY means only process the base file_contexts file, not file_contexts.homedirs or file_contexts.local, and is for use by setfiles -c. * Updated matchpathcon.3 man page.- Update from NSA- Update from NSA * Fixed bug in matchpathcon_filespec_add() - failure to clear fl_head.- Update from NSA * Changed matchpathcon_common to ignore any non-format bits in the mode.- Default matchpathcon to regular files if the user specifies a mode- Update from NSA * Merged several fixes from Ulrich Drepper.- Fix matchpathcon on eof.- Update from NSA * Merged matchpathcon patch for file_contexts.homedir from Dan Walsh. * Added selinux_users_path() for path to directory containing system.users and local.users.- Process file_context.homedir- Update from NSA * Changed relabel Makefile target to use restorecon.- Update from NSA * Regenerated av_permissions.h.- Update from NSA * Modified avc_dump_av to explicitly check for any permissions that cannot be mapped to string names and display them as a hex value. * Regenerated av_permissions.h.- Update from NSA * Generalized matchpathcon internals, exported more interfaces, and moved additional code from setfiles into libselinux so that setfiles can directly use matchpathcon.- Update from NSA * Prevent overflow of spec array in matchpathcon. * Fixed several uses of internal functions to avoid relocations. * Changed rpm_execcon to check is_selinux_enabled() and fallback to a regular execve if not enabled (or unable to determine due to a lack of /proc, e.g. chroot'd environment).- Update from NSA * Merged minor fix for avcstat from Dan Walsh.- rpmexeccon should not fail in permissive mode.- fix printf in avcstat- Update from NSA- Modify matchpathcon to also process file_contexts.local if it exists- Add is_customizable_types function call- Update to latest from upstream * Just changing version number to match upstream- Update to latest from upstream * Changed matchpathcon to return -1 with errno ENOENT for <> entries, and also for an empty file_contexts configuration.- Fix link devel libraries- Fix unitialized variable in avcstat.c- Upgrade to upstream * Removed some trivial utils that were not useful or redundant. * Changed BINDIR default to /usr/sbin to match change in Fedora. * Added security_compute_member. * Added man page for setcon.- Upgrade to upstream- Add avcstat program- Add lots of missing man pages- Fix output of getsebool.- Update from upstream, fix setsebool -P segfault- Add a patch from upstream. Fixes signed/unsigned issues, and incomplete structure copy.- More fixes from sgrubb, better syslog- Have setsebool and togglesebool log changes to syslog- Add patch to make setsebool update bool on disk - Make togglesebool have a rollback capability in case it blows up inflight- Upgrade to latest from NSA- Changed the location of the utilities to /usr/sbin since normal users can't use them anyways.- Updated various utilities, removed utilities that are for testing, added man pages.- Add -g flag to make - Upgrade to latest from NSA * Added rpm_execcon.- Upgrade to latest from NSA * Merged setenforce and removable context patch from Dan Walsh. * Merged build fix for alpha from Ulrich Drepper. * Removed copyright/license from selinux_netlink.h - definitions only.- Change setenforce to accept Enforcing and Permissive- Add alpha patch- Upgrade to latest from NSA- Add selinux_removable_context_path- Update from NSA * Add matchmediacon- Update from NSA * Merged in matchmediacon changes.- Update from NSA * Regenerated headers for new nscd permissions.- Add matchmediacon- Update from NSA * Added get_default_context_with_role.- Clean up spec file * Patch from Matthias Saou- Update from NSA * Added set_matchpathcon_printf.- Update from NSA * Reworked av_inherit.h to allow easier re-use by kernel.- Add strcasecmp in selinux_config - Update from NSA * Changed avc_has_perm_noaudit to not fail on netlink errors. * Changed avc netlink code to check pid based on patch by Steve Grubb. * Merged second optimization patch from Ulrich Drepper. * Changed matchpathcon to skip invalid file_contexts entries. * Made string tables private to libselinux. * Merged strcat->stpcpy patch from Ulrich Drepper. * Merged matchpathcon man page from Dan Walsh. * Merged patch to eliminate PLTs for local syms from Ulrich Drepper. * Autobind netlink socket. * Dropped compatibility code from security_compute_user. * Merged fix for context_range_set from Chad Hanson. * Merged allocation failure checking patch from Chad Hanson. * Merged avc netlink error message patch from Colin Walters.- Update from NSA * Merged second optimization patch from Ulrich Drepper. * Changed matchpathcon to skip invalid file_contexts entries. * Made string tables private to libselinux. * Merged strcat->stpcpy patch from Ulrich Drepper. * Merged matchpathcon man page from Dan Walsh. * Merged patch to eliminate PLTs for local syms from Ulrich Drepper. * Autobind netlink socket. * Dropped compatibility code from security_compute_user. * Merged fix for context_range_set from Chad Hanson. * Merged allocation failure checking patch from Chad Hanson. * Merged avc netlink error message patch from Colin Walters.- Update from NSA - Add optflags- Update from NSA- Add matchpathcon man page - Latest from NSA * Merged patch to eliminate PLTs for local syms from Ulrich Drepper. * Autobind netlink socket. * Dropped compatibility code from security_compute_user. * Merged fix for context_range_set from Chad Hanson. * Merged allocation failure checking patch from Chad Hanson. * Merged avc netlink error message patch from Colin Walters.- Latest from NSA * Autobind netlink socket. * Dropped compatibility code from security_compute_user. * Merged fix for context_range_set from Chad Hanson. * Merged allocation failure checking patch from Chad Hanson. * Merged avc netlink error message patch from Colin Walters.- Latest from NSA- New upstream version- Latest from Upstream- Fix man pages- Latest from Upstream- Latest from Upstream- Add man page for boolean functions and SELinux- Latest from NSA- Latest from NSA- uppercase getenforce returns, to make them match system-config-securitylevel- Remove old path patch- Update to latest from NSA - Add fix to only get old path if file_context file exists in old location- Update to latest from NSA- add nlclass patch - Update to latest from NSA- rebuilt- Fix selinux_config to break once it finds SELINUXTYPE.-Update with latest from NSA- Change to use new policy mechanism- add man patch- Update with latest from NSA- Update with latest from NSA- Add changes for relaxed policy - Update to match NSA- Add relaxed policy changes- Sync with NSA- Remove requires glibc>2.3.4- Fix selinuxenabled man page.- Upgrade to 1.11- Add memleaks patch- Upgrade to latest from NSA and add more man pages- Update to match NSA - Cleanup some man pages- Upgrade to latest from NSA- Add Russell's Man pages- Change getenforce to also check is_selinux_enabled- Add ownership to /usr/include/selinux- fix location of file_contexts file.- Fix matchpathcon to use BUFSIZ- rebuilt- add matchpathcon- rebuilt- Add rootok patch- Updated getpeernam patch- Add getpeernam patch- Add getpeercon patch- Put mntpoint patch, because found fix for SysVinit- Add remove mntpoint patch, because it breaks SysVinit- Add mntpoint patch for SysVinit- Add -r -u -t to getcon- Upgrade to latest from NSA- Fix x86_64 build- Latest tarball from NSA.- Update with latest changes from NSA- Change location of .so file- Break out into development library- Move location of libselinux.so to /lib- Add selinuxenabled patch- Update with final NSA 1.2 sources.- Update with latest from NSA.- Fix to build on x86_64- update for version 1.2- Initial version2.9-8.el82.9-8.el8libselinux.a/usr/lib64/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protectioncpioxz2x86_64-redhat-linux-gnucurrent ar archiveutf-875c2fda7a7ef69279d371fa9848d09e34b322000650de946dda20987e6232224?p7zXZ !#,S] b2u Q{LUXΪL qQ!Eⳍ}ɒN/0%@ϽbUvU.8/Ѩ|Zc+.Myx1Xa0 eԃe?R R U#BUp/}']UVg_9Fs,ǂ_rEm_5"L. dOv4C^?!=58- [|} Ds oI9Cbg~ԗȐ'{ /Xi-a~<_$t-mm mܿ,.}ÄfRU&>"K͈DQS qrWzꎫNpa~:P=LKʦ>@JCTBZV~4_*WD2iҼPYE >F-~IR7lY@p`P`iٸB4:O8B9|XȔҮhF:'ժ@C`y,$n96YX^#$:. 똳ά1S1yN-9zvɻC1aYrj #9}b4͇mmnzXv( zj| !Rn8t2f %CCс{xϳЁ|ҨDQn+d;ߚO'vcGp&#SPel4K='ًْ2'+#Sv{֫\yiY &Î pL p[\`ȤGyĈ&X1*E'hK!=rcrI5F٤4ScYZpH=j10pWcj 3^.vCngTWr[ă|{s M[3.ۀ\'kehN UGz\]CFCSￋ}6wٙQn4_l=cXHIG[εfXL-0d/WP 8>Z#g;V, 8Xiv&'JR?s(ǟLV;P4 :*G;~tHD%1WotECSYK8sZ,>&02;aǛ\_汓Yԃl"0͑J,P)N 85-4l1lˣ7 ?ńQ40K;p;f4.X=".ҏ0[{52YY./y ƛd`[.:gj_X[A6Hc^ Ġ)iA]L@ |1Fu(H|J񽮳I'Һ0u )֩3%J42|#k lmZܺg]|-L<@:\dVMim`|կ:>ف߁eX]ڨ*` <ΡbC6٣s9drʨ$j{m,4Y|;I{wa;,9ؙ[)~Xfmќ2]aù9Ρ>&7Y|9`MD&;z77,H;*ԗ``JBP^beٝxl47TbJyc rGFHpmb!H e!Z@'|3re~Bү)@7 ::? 2q fNY0(3ىfO_6D =/`l2L4cf߸I≆0ű*zDO2Si3g0"Ct%JTs)'oŸϞ|{ _T_KsHG? Fk)gʐS:+&ճVC1?w@?J^C1v*;`qQے`4azO9:`Vx6G"ϗ-;V2ɠ y-UP] (8E1Yq_.בF1_uQUH&k9(10}YTw>c/l\.ձiϬMyzxv<.78Ō!.bb?b*"$6?4"VF:t_y\|2`L[ԤqrRY+FP5H/Q> #4q,Ǵu q 6RtmNAV鼬+~ËS,nI3L!޹?YI,uv p[P _Jv츒(av=ʉ&h0c 8 T6 x|=+i[;̓~MRGT5fbV M@5e\PXW=2{]#yFKDh0W ތ(-\A ᒚ~7ܫX={h X&Z(J C/ Nf5GGDuXi2 nX,򲨯웉vϓ* &^1ڜ XMu'9@?+-*[Ǖ]%HtZU%Ã7ˡl@ta{.,1a_GԎ'ޣ@jMJ9wVVym.xS|!ϯuRjMXٖ:UHV\eLtd,(jlr>B\钡:ZfLk:UaDe j[5kd?LNyREH0f ԯN%ʞE2[C&`g!A13 V^JXVS)J E |.n=PV#)6rKi3㝭l}WNhǝ=1|Z#7eOmwrC> P/_~}d\;t@& [Pp~S3ao`ְ2M.0I<>=ISL#T5@Ց8Z/PmQrJN5U/>N IJXaE!ui-k|hu.c /\7;TPGe_-޻SmxjTG1GqXmרz"FI'O &[ȤڤOրL1jLZ7uT!YH-q2i ~Ȑs!i4Ūv[%KoVY.fЙfUN}0^4oTz2pyYy6~zXbN.hO/\]`X&wlH7k#A8qUm֤ P5%*p2pm/:yp?#HtA~W#N+ҭI/C0 3+(6‡ey#sZ[rfdG#</ʲ <]'O50le|PLPK{ucB *VUgVBӧ ȪbS+sJ@l==Ʀ =W̍(C= EpBQkQK_)зicf򇑁VAF1_CM"|6ﾗ*hj_rI! gq (Ff^?0P$7<?*J$Z GyjO~_MWOce9s 1im~ayP +_єj7kr7F1&Cգ&i Eζm1J=.&&&%=?0&h&l,dzZM[ zP΁6NIL(VC u-È ߴd2paf6ÈwU\z bKѮșڪx5qr( MeD )Q6k}xfXRԔjElY>f2n4il2{#$9>T/ck$I{K"t#A \'_ԮdeQG* RݳJx#F򋛹2#6Y+shl9f$E׵ZLn$64c<-B37"EFR"qQg'8PVrA8 8`8r+PPnߴJnM15=T'vz< 3a.e٨ϕ Qm?Vi jpHݪ0.Lf[-;P{+R-#O̰7Ve? k"*W\p%*͝y/",ޚr*~t=𑮖2[ CoXK)p"9i^U(qdm25{ bIi. x>̐ETX̡[_-ck#r.|$peIFa<Ȱ4%{'V;~('m#I~akTa `y\ƃ?ye!L4]񘽌PGL#}?x=fISwQG-ƝQrQQ?tf 143;mKqENyk0Ce=3;ἿMԤ<ї9WP^( '2 ~]NWwGf0Lݗw =Ŷ2;?rښSI*E3lãsyGCVE7~>6J+>0J//ṶB3ɱ)O1,2Nf|?3 9mKw~jl gg"M )vr;0jw ˗;'.z3xDžV%" ojOHs(#CM*slY8lgш<-h)P> /)e܈,ZO\DtV@LE_PDMY"!6kRn[LNrˏv:"'Ψ8"P肼)䵧{bj<#׻* Όۦq& 8Dr]9yL¦AI!)C]3lอ 8百Ÿ}EƶF)kD=p1aā-T]ϣSpB|C;U\I‡C#J\:s=FR~'BgӏU CZQ|G8?wTMBx,E05t0pBwA/5s#o/&K;hj[H=ez]'ɦOW3}0B <-_pIhe.EPc*-_Uh_NJ؄TIVIݣKz/ˀ#a:"r,kS l;=%hzXAɅώdZGPMb~]u"*V^?\BIT9]1Rʈӗ]A $s?` Z=K>wQ@M/ev_eC@!3Sot[Rw1x_SvF[C(ݕԺ9 Ox4]A yt!3%I(F#+7fJk/|ƀ~B>){76Vۖhin,^FE68,[3ǟ3Rjw1&BD:.qnǒ0uϯ!N9?y<,Ԏb[hNAL_Tg^M-s86Ok`GRt!y)Ýϫ+5Wf )Ҷ5С;Q\z 2GDe!#4i9< ,UWHl>#Jo$V0$Tj2ϕZYy~;W2ҀCxcމltÝ0Ѡs#GpHk;sN5渵gn`jZrD쩪Ͽа:V`~lv_bG{[F5A#Ts7Z :OG[cHd`Y+,A9G5 neIiPbAa +AwUxVSdr"PN\'P 1_jŘ12a]׋ 8> SiPʿ$>_JJ%]0,}7Q׹M#ph+N.1Y.T(:9r7q<NB)!)D.O wLQ?tCv 7ipdP6ꞓU%59uy?q)R ?Y /Ndvjzԏ&,(=3@MV℞e>bh&rJqBBײYf'P&Don')߄sOKcxI/|#>Sr]y#6^Ҷa}R BIxZ@>&F'Qt'awo0` v,QS2=( 栴s#6{C .xC`d~6qtU- 8lOwX6BsGa8 NzbeLn/,??&kAs]#,0u9`l{ըhJ}$E-xI*GYꪤ78-4Ŧp8L=ؠ98ĭ~(xjVÁ(>'(:+ZR/e_o(E\5έzWv5zKg6%H==*, zlnf p,Z~1lb :$ ]{R/:ʨ^< 0zH!B<wf3xXLHr S9\Sru\%n }MpIY W9VOtlTEBbRpN㟥sTqE-aX *SXmoB8_?:B R!}ۼ^a!3t% y3=I *FkNX)jde"a#easI%腧&'W$Ao@ .SϹF8`Cæ*uz]cOiN   ڿpa=zkV 76!i[͒ZhxsHiw+!1m>#_\Ս#[QZO~*~vRg629ӆ=47#lg(62UZk<.g^0㌉[g(Bp3D\!mG8v 8K+4+jCϪH/P# "%?c!d_ g!.wßo3% a)"U=?F~s /6S =zHR1wy*_Tto5cG?)ϓ;B{~jZ$t|+zmjDF||5GtXZ``cVAxP$O0sQ>pI IP+g38v}NZ)E^Aʹ7)֬0qJiŮD-a'd¬b;`}uM}f "/ m~H9RnNfLoؗ[_ AFrU/ *IHJɸ)A;5|ᤲ Z=35RcA |DVs@=\n17+/?D z۲3u #0 fRLNH> l )ɇGҘ.Tlة$=m sԈӲBz3 IzP;HWWlL#\$U^)]3T#"gTXv3SBĪnU@P [ix#F7PՀ^RfӪZ#&a39/=>"e#lWPFA×^W[tSK_O&ίsٰloզr#}-]P?_dplb b91E^p>м>FQ\Ժ{©:gFH.6`̱ZPˋf'+YHrsNT}f//jm/2Kt/׮^CAOnrm/^j{]b *̀ qXz$^?&ehVNy >=SĭDa}MDRqbt_sIJ9иVO(Tjf :Nг ܋B!sh)0[pcv՞ǧEq\b&($I^`MRwIJLCPDz}! 6B ۖ/]:Ύu9@o%#ېUv0f*8"}7J'UvVO}RRϽi) C-U#meI>P ]g]:ZZ`>)2__/ @+s2ķAv@_=\M--%5mN`;*ߖP#qi" B DOCg8?"[.*um_gj!@3f`VKF?:;~qm2k{:$+MKCN:0¿jHOY^mȱXǽ=I?lW-j 컈;Lm*+uυxek: X"߻We[5GSozUĘHizVjy^\er;Lq[Fp{b*4ENaɵ<>-ɜÛ/&ѯ-qV^1՘z]J>dY@jFR4x8 l>EBA-G aF\Nu,I,ijZ".%c h m K8P.>ytG\Ol9&oBzolPh%NogT^=9kԋ -aV?M{w]z݀脴>')GܥPx,s"gGktu"^U俉EHK%Fv,Q܆0ľ؞-j A`.QKgܢ];垕u_pEB"Jh̄]t%h𱈫ϠDʠCN!7f~:i3tNmq`Å{2`4ev=Wmȓ̐b7v,~q1-ew>t=' ]hl:Ü&:eJ]XfCT!083{?)Xաe1~:WpA{~ʦ6_f\ǩ eS"-|iLj0epyjQSt>qGa& IfOYY +h?%PaQ"1Ui$q+H+ϵ:/|zCe@~q+~D&NVBZN̟],!?Gȋ?.xcumP@yGHWl8A 6gSx2R&EqQVڂq v7nWPO dQ}%A:xa/,i$ ί4h}n)XrS Iخ m5-nv,7^@_c_3IsU'$`$VfituZ5|s`>j$DĤ/i/jZxeJ#qP N8RRL*ph_?k~>G" (*Xfe&J+tˇcVƈMe-%6_qiv_QHթ 8P_hZ&nʭUr>NN(e><7ђϤi;agZ*5<+ ]9dm'=Jv?!sBHŰw^{yZ1=Y\Oc1zCnUĨnN?rHBDj_mg8샧?"~h8ÏM0!9ŨassÐ;RHؘ^9sBQPBc|BF >t9,Ƥ^kj.Jz@گ\o>HgSncZ!aT;wQWv$M rgJ9m <L9qQFo%wpPq"%9+V9ye"n ֤G@3^=Qg/T[^tX-'MBf͵NFQW}~'MmKM+?BUM,ky@m;l.4;+f_}q yebruϕ}Kk/w 9ܭΈʅczJOih~n>ٱ5+/r1*3W7ebwRTeKw$ۺޢ?1`&0Kl2N<ڙY3Z8:;sU|na$1CVfGVvTNu1ꬽ y'u1bwlUP6o`-tQC cpߚ<;W/M g|fP#GQ0l!WQE b~KTݧJ>-O&[| Y7CG]Tp즟[S( 1"lֻ 0?0]`?!ѩ; n^ -u%Nv@FoDOTo~Kp ܋JAR2 0vZUD4szZ-_x$pCɘR>EDnC vq(M9~: ҙ{PrRأ.Z5ąNuv(\$΅l ͕yuHǶ.ņ v>\ObxāU[ 5%=:%vQO߇Y'U[X8a|bHPedw]YDž~#W]ж@``x gj>q׼O P،Q&hx󕐆á:qk%Z"r&[PQQ`I2gWOZ(z֤`s<;8~eQVH roч#qv+>a}B&;.>c߇v2\'zqV}?FIEj3 3_ +"Wl$Ͼ=zZɤ^; [*ߊ9SN-I<@Ly`̐PkD dRùm] y<`Hgfa3a33A~Ap =Cd|^/ h9QBV*@sG{,R+UWdќJ\nH$]hul.l\?zv$&IÄϰXFPMրN!udA ud0s=Ak4?o#[@,yA֤s})Q L8㌧KMs*W(aiYOW&v]UtwL۝BݦTC@ 즰JGZ(у[.t Bs3rx;sֽ(4,]d>z:1͡VtL&=&O{8Dp{S[P8:~7sz6b#Möؓ;c. YQVgT[ztM9^ xL2{l;q]8f_1M^ K3 ΄mI .ݠƦ{Fo~~iw[%DmFv $Ep#{6 2J˖&ك(KkoĻo*fނ/yʺ2^&O`m#ԼL=IB?dxs`݌/dƛvd3fJOWZ*r 9=.* K%\2$~qu *TfpEq7)3&p4b:%5Ș0a^&f}1IFEjL.;C.z9j>}-ng.L,_aY+kݙ?o5 Z0]&gSw:YćڣGDPoK0dN&[r3E&ev5Ed㊘񀸢꡶>^h/|5(H=ZxE{MC-Of3NyW48C6 _7P%?`gVOcy%"%ɋEp=P ޅ <^ مyzzHu^a|#4ڮ#} Eصdۭf䤉y%CYX<7kϕ5/Ji)n-9@Zn< yAKat7M0U5¢\.Z0bEQ"{qRu3I)3W˸À :Ese 3%_AuyL^5ZЎerI\ [=y@.IΒ/xE"AW4^L] ohLr-ֱ 3 gP1kTS'?ԅ!O"{|ULM%-G겐`r2HxKTmW+A-n-p+ 2`"8;sݿ2,]VuKoUp x>J\D9.3 Nuj ֌&mSVx$Aw+aVc>(j~Hz8߮ƀ(`SœV Jo<%rrTtePkYV-oY>{~Dod@T\uGS,+6L\/fyM8݇ʞ_UJY=] G(M0Ai1 `ux+U/= y]c0aѣHCFƀȞXq ID}WTfI|3b|)l8 0i[k㬪ѩejVT xoY9i u YR Ҹ-S!vLM[ Ł^c5K`kY6/64Q(l58S4^1i2{s hvd_mi%Js0UK@&q*q}˟<1ĠO*<}ȧS!pP,֕qmcX7CvJg ]קֆD&}@;GBG8io_1Ur0 <G$y|8Ϝ{(SH&7qvy]F!,@/?u/LtNH]߶Ы![*_plȝ6qx)0c ۞f:lNcBK<e@sHCy8(ZbWNbJ6ClE"댓;֘3"`W)m*w=ϐ DlC~R62⪘b @qrrx.lAv#Lۗe:XnzfEnMB!_ IVC}.̤HX8)aХ=qpG.1辘"kOyqh\7 )8hE^7ۄ#Z[Яˬ0zHLӢrEFISD& p. o9d!' keQyi,Yo~bloT:dX .PjŽ%!w.BŠ =8;6A`Al-k_L8{XjkaalLTH)/)3]MK;y(so;F_5]Fl)! 5+bfBiLi=}Pv5ƪj$AK65؝=rJy(``rÿ/\ڱR|X:0+H nce/\[ Q8/6O+pwٟF9<=8h"oT++k;RbNK g( ړ]蕔 *dZJʉTapz8EހoϭEP 0(0n8I ]kyFXp3q6@HU7GRū3)y/}mJVO4^1¤<4ٕ168E5M7:g,;9vrѥ_8@'&9=W+H@:/x7)gz]tgQl%pї xJHHP^+]FM 8~p }\6"R1Di˨Ve)PI ̛iI#pYb*2f~b؏")9lvFpz?OSK66cdvIo]@y}/bξ{i^C1=/ wL%m ۠d2<7`](05Nؖޒ\m]Nv>ٔ@URxJmwT̢g$Rn2&S'VMS>)UL mpZ)­q76#_'~HYLn3[3]ƲcyReQMa⡈ۆCJ-6;ZTq"N(LjvRÊlwh+S]V6}YwaС֮%AP%2 @ǷM%>5Á/xk:2ycTK9Vr\nYؖrl ܉+#IغkN_P~Si Om06*튰ԨSG-G/qPʾE!;zʼnُvj =^86z_VN k[q?@~V`U"|nT hK1QnJ[8 hnŵ 8T Kҁtb4R3L,$X~vdcN8(Q}PPӖPzpCW+K}ukU"\nqpX[^֠J9(KD2tA'uj'|ۨUyOv#nbj? zz}ȌkB(:WXmSYucr.KES2OqI+>2I?\ECTc ձI"q%C˜E~# 4¡1'FEK@qUu[hV$b b=D$Dǰ]ڭ&E./Ed/;qkDE*{Fr?Λ F@K{ uF3ʒ(/E' !N]e+-ɯꉈa1GV85OV$fjЦ*7ԇi1iTLSQeŮ*R gD`Ewy$M6W@MM!=˳GdS86܊)1uʣ)Bdi#O7vaոP(_LB9L pPF{9BѢ:KU(M!Zq/RMc[7 fj\8-1YV7E@ܠOT1?c\xٕ ' Fv+kh0sPZ^3i%J on21?0ty>GBW횷w")K%hAB (,"L}*MZQd O tC3-<5Mh?_t|rgeW_T_)`X{xH =@MGsA藞/)y?؈-ʃR⹓1Lpζ3fʈ犄̋X47!tYqҤ]/p۾@rpZs9tD^z&ݸs8Sֆ3ݯ*ۘNgS&3/kLQ[m [0bb$/ĩ}q,',46_>*p׌OʨD(5Wh:Cn=hng8DE\0`6%{tdž<ƐbUPs!|F&XG9΀d  _QK`l]y{duz2v #q|QRɲs\9K߈I ϭxVAK|Ӳ lpm_]kd];L-WmHFH l Erǖ{Rf VF #(XAߙ ך^m#R0,@"s[䲥OZhg "ޯ1G| /4rҰS~<N2I]t3yFU>еpzC_ޫ 9=+%8bnI:LьОIVۼ̛?ހT?M9oN &0kw\THiwj; DGTsX6p:dwFb[%O&nmϑvrsz);K ?xB04rV% e]7rmjAQUz my{EǤ&m$~R&Al5*P>zblDFǃ~,\VKԮ=|zQ{?u7'97pn3hd>S,[(߶YC#%TT z>fw<ϕ0sjxъY N6yYEUBQYz[7*|65Au^w`as65O[AfӯhWG2{9tiQϢ֒Lx^pԸ[M=lș"u!۽t[b?A5dO6dRsW ڀ$>3](nkL*+1Bo+HmrZGobd!cW.Q^=uCO\xYAZҜCE<;ciҜMz5)Jb}mcXdT'3\BЋM3m H_КU,S)׽7fQR$fC{ZAVYe,T9=[K!'xnHkyh%SxYW`/T_w"N  3ssR31(ћ z^?qE`&mw)_d#gW4Lp!J3f%dՉ@nz P?so`q-9Ir"p:/CWJdBS/K$8yȰbwˌN5Ôˉn:5*%3@1U*0Wjb$r]kLdaLs҂l/7յD6:c@&ԥA{Eh=6wvaZG )Ӽei;|\޷4]N1kχ'Fa!T_>0֠Wpj;, *jJِ㤴ue UހkAb)?<~˃^nΨ- *> Rںϵt.+u# pvCx$9 x`hp9{F;1ъZ)e{7n[Vh] [Rǥws< M83zzLfLDyT[ţ@GAH 6$afʶoD**;mK YQ/S6I1AL4دg)ʑ~*2];a?z&!F7vLF7D-#, w 6c"ذywpH9ÍMLPu,HJ Y8XֻnwP75 /b* mK"-`鵋`HsXi>vye('_Rj`++ص/+)ViWÂqKr8=WG.=X֍NL#-eGklU"7|;`xN8%o^x _cMRhdE8>p{w=w1.QiƜx:͚v,>nά&d>ͭxb]^fBշ^\._S'U. 5vn( Vd6J׶pi i=]&: Ϗ%%2j wRL ʫ`4Ap9G9~[׾ '9[ɆfS,u~fdj˯#[qLC27%OmG|O{NQ`!u3(csz0聢=䱚/(2*-:NA6/îsa)*D%I*LKGI.|8d5Bu;bI %;npKEl O.}; t>L|B! u.@g.cAfdU0)#tb|#{.^; tVՕQ~H#kp>𨻓_pro"5'G59g)G⣏eMq@tN{UڐoZHl.("]C>/筩/3_>&y`$XmWr5WB7@Iس<Ѕ.(N,2.uWbW缲L |k-fBeg ``)3nr'.]rhPKq!,5hβz;XFlf':p[*H 3fUv|||Ӑ0DǼFLna뫶Sqe!~^{+-8@[f!ťˮs}N0,4{۠rc)eKV3l*4J4˻K'OLL3&wx#c>ǩWWBmcpaC.\' Ue!f3[TUch}3*5huC2rP뗣\N;`?cN ml72g!4<L3ƑL zhHc[&26b8=a9T3v2X"q~pzq2еcӇnBΝj~e&Ze@W=`z/ c^fT={eՃtZPDĖn+9u:1^Z 4Da7'ZX$E+'"pfd;Ŝ9l7;xX;13b*ԝ&썾4@\tJOf(-6X%,twGH|´K#n h&lO[ =_ym2$i(toYx+wGЭw8-G@cRG|2Y6!pwBQb횡 9|(y?_kW)\w*g>:f7j`3(j5IĂ-ìXywy &li!Qn`CD^Yy>)ZcC٥!(+{+GԿAEcM%7X5!32L~ĩEnVBB$)CǯФ8f"=|DZDBQg3LľBH9|DV=ȿtf<ޯ[ш^$⊷fݗ{Me-Qk6Lf':,O"˄O!Ռ&TRn_pdg/3z8هc};ڗ xYA$C/[g%aUSD [".5Ak- hX0@Έ tH5زIQ䀣nYJ7v:`,ɧM*ح*de 5:h/k95:K3v90t[ʿ‰qwvBַmDZ0v$X x6Ըǰ.0z_2\2\#\ .3!@sk0F*xL>Y`u0B\ۺޤoqdŏK!+/db| RI·b# tQ&5%l^!BHww--0YO'{E 238sTLDWw 8gtꘋZ ܰBsqԷX,bQY"Z+ A .\]6kK>cd4F<݊OnfC+RwbS6k51Qx@9tSJY q?=Th`_o:t߭EחP7}v~]->oIu{U] erA7=g$W| |!:m$f0Sˈ(1r bJ5VZAw~u5 |WI|hcqkO%B.q'LJ/zH!j9,!;/38+^^ ?q[UNj<%>i\e JB.:6Kod,Z{2ἙScW^H!.!ILK!{t+ ;=?N@ܹ#@"|V@4Z]+nHKيo&t˗h$Z,l0F.d-RyEcL. kH!fojX~,Xȣ^ӲEbo&΃ I۴<\09z-E8gpSw`yGly ^irvV8Bgkmj53¥b <{'SRk|?}I'ZZ ^IGL̆r?~$}J]E2) #/l[4 Pq$ w}|^Ҟ.Ἶ`[Q%5HE#H}@LJG‹qL&s_G4e:yEbVw-RŎUIZLȐ禪$*Χq>ĞVppg2ip]k5 mv\ m8Zܰ3RlP3"\A-"KB)L;Ǧ қ|g`dhN~}vAI"1L9= a" sEرR]ݽ*ƻ ̉$F u_V$,hZm K)Pnx kggx 4K1'bpaUm#IdfDWbzȶIz %Y-c|s͆ifk}8|b*r [c3ÜF{o K^o ܌xLͪkԘT((~Q,M8)~5XԃpUzC~lNǶ' HM/: Ϥ/TT|X?͇Ǯf/& *A갎R y_Nퟏov[V$dwa#p{q:a͟OH1/Q7 '1U7ܦ#$].[t;K}x= Di-C0bUy9;Z %t`X|';8&]!FOh:YB~rs`nD5z88W i*"bb)/x )FgNsxAnF8l]4_#&stΫ>O@|)XxߗCMco?P!FH!JG7^m'k ]K Kv-o{cFm3f-7=\$Lǒ$Uмxp*A.[LZe=Izoᛞ뼇vn%_zu/WY?j&7xKsSx\w&Q)E\uZ/A剨+B ֔Ƀ)>Mzhf8ka,h[>I{s1gN,lh5q_hM'gcN5%i\VcVqZXQ"[oudW g y_d7MJlT` Sp:!aN7]B2)qf|!N"kAe3/DTCҭ^K;NiÜ$QLa x R6*=/ gqi$'EKj)o-ou3? ^b]Lf\@>b}'77ɥMP^7ݥct?\ֶ$$LCCZ1lk⪄?/Vpg dp_܄*X/u Zcz>՜#y;0O9 T2yNLk)/Fԩ?B/yR+#zrHkpF14AD&<*.E-ORBxdMUsySҹ{8zQETBkb 7t4)[gsL9plJȡtZⲌ%4R3W^Э]&s)&xH3pf4c9&m"#P2`H M,d'RLqjNf0WIz=*#ONIdA.&(1,36 jC`q,U Yz6N52ǼF.] k1]cἹF3 ,.8gwZTqͽ|nJp:CΘzI)YK#0jd\2'x;QЦi@JPbNR?$q 5&WGE3f}E`dEQǕj:yˋ](XXyJ+UH &s6Sy?crݸj>wv& I|SGW݅>u'6ʙ3exƔ kfոz-|߰ڂ $o6 \,r|bF}?K;)/h~@2#mSʹ Dx*?E2xC8`p%4C/ռ=mG*D3-$ӉP}b^jO "z?OƁH A{:O@ |+UxH$-Vy~Ϩ W^ -{N|#̹*V!c.@ڜՠ{$!Fxb,b5x6޾0ljr!aqqTP|QXIPoO s9o{ b}`*S\xd( %N Hs6 r$j H0u&BJDz;˰hxRF|?N7H,)ig3ELqrT8qi^Ȁ~ɣ܍%`]6(+&)Nel]NNqtJ+JƸ?|:~(Y!SlPi;a0aݚbD>C XQBv:VIrWpW%dZaްɺ7 o#G e#\,V j4ц*V5xVY #3IQƾ:S)W73 .['wZJ?O [g8PvBlaωjLI!2,^:ߟ]9; H:D $_"1 N|\KCsY!=[tMQ]trHkyԅ%dz)19k1|rj:#f6b nluDtvkf֟e[r N`n15j]Mkf*]y YS 9lgEXW3y$[gaXh58g{;R\x_=OQ#%lG l廧"+j37J\#O1pЙΕopU 8j(3ϋྻof֔;.(/uh" kX(`xkB& PQsb5ξf x}SG 0=Tڡui6TOLLf];7*KAιsw$~G?lЖNWaZ1cV lB3TR{pbma j(sD QY6$O `Ǖ(J#m1o:ЍYwh1-K91$5Kv]:e߱frQv 3LJ]+P'C8I\qƔ+'l2%Q,xp!C%q8}mOt1a3J=IH.R\863rV=݃ ?^ c9|SHi6/%WpjGDUXLW@$˽2,s]%_dotU:yKL0nuQ@@1-^j+~\U) krPM\vjsqkҺ{ eC2 Жצhg6(΃m`|hMG|w0[Et!vzPRRxCNB?Y˱ڽ8EPkkD挢K^;,_$F%d2/nh9.Gl 'PTo1[t20:ۭ?+N'8d\@gVR~Ƌh+zݭiɏstS,G0zP5!y\\ %PB;#s:50PUK`;&6HbA9Z9+GB?85P݈枅Y&g=F \ȩ[hr[ϹMQ \7 +sPkCG#F =S\UC#\\!uNCbG/ 6k.hY@%=B2êmx3 q;)M*>lf!81"pBտPqc@([6 ]L 5Y x-W y}4b4I: 6+!  Ss2!.8?8V,o E2Vm^Q`"Jd51˖PB$î̟.y;>ШvA h9)@] xּC@A2R&7T@Ig9A`S>ᥦj+DlM$R!Mq:a`⛴r&3a-YqDhk[j-¨_Nq1QDFv swe5MT.]2D,o;V 5 \G_6>_2]ˋBp[e]4:ܱn[_G~N_/NxLsPbm$8}Hz TֺK]c*C)9:=60gCtJH?ZFϝoV+QaB%}S1E4yM|憅5+9[,ж$;"j̀b]3QĺT}d: \yDfz曢_q]D)]tUٳCHUboVr/uΏXBգ(ǥ=P";t`E'Hr;/0Ro5S8u(5Q c}C!y=KC W 8Ԥܨ6Mro?Rpp)yaFL\P]E損d3t+ȿY2V,|Z)#]rcݏfV1&ٌgP2ݗ tyb3_D1eV1+.ȳϢ#h*>V v=b^r RYH* i>om cQϣW7}A]rGGsUC:?l/O`_oԓ+}fI-i” 5SG=Sbj+Pz'OnbǡH3JE4Ԁ E&)jk;0v͞E\=sSظNeWMM :XS "H,0jN?Ui vxzyfQ^jUjޱks!0b4=unPC x|@#J2K(n5Sg8qPr5p|h0l$ HdQ/ :kHt<qЫ9iI^/\A6ĔR5l^ڗm0r RJikQ|Y?BJ``Va%p*Yx)wk,8@=Z b!El5OƠX;4œ+ΉGH[y&$ȴ襴_ji񌯑Ta zD^mJ ~%JGѨ$D1] A_FO-8|w@ho_0ŢvY{(tBȑmFŠr:۲=c"(%{'$P}1-&f5]9u"d?߇7A]F47 >o( cNlm}$ C >l.꼵._ u_k2}ڪ'1ggsr[k/RR:dӂ%U&zF(i"C&M2p"k?] ͸]*~B= FA @4qC +Uv,K ~g3I>`]ԕ降"j3%)4zgbD:GkN)Q4o!zD,+`H@.ERcl|ݑov?> lwJޥo﷫ֳߥخ LcE%K;>m0r;Gqb`rM*g 1cˋkBz~R!zHJs9RU(t$#I[Ei&J(vޛ1:itϼZM/ZZx_mB ֬+gtK~ Prc\A`ZÖ6 g9E./^~G!7j7L_sĞcvK̃,bmUŸD 9B˱U&ݭ*sJf:km_DD;⶜cATuJ!]zhbY<՚cQ &h-iT̐/?LH;1X2Ts{u֘>>۪w&NhI!f0>{LP o: CUyuH^~ U;2b*TaX38&pkjO"IF$\g}(NZ|^_&*T@~#WĂ(maL)W껗xmudXBm8"r]]n9BJG0d 3עP2%͈̀^YRBÃ5eBY溢R3<&y ȈA;/ʼ.4̰h ōpV@GݤKiDR駿~ d}P&ØeK^3P+9 lKZ90aTr}/!å++fM26&-s ]p:IIpd(`oh.y-ߛ9R|)FAMI[Wſ9Gf+cHaL.06܎s} B\{,w >݇ PZ̒rɹhXi9WZl^pC&[N1&ޘnK3)?kjLwtdƇx crZS4̚u˶,7"|( n66 i$+szb&r&o_e(MCdq!dKKAa QV-ڀEhxbO> e|E~Whs[} nS؇!UC#@ŰmQvjtS)4FyS@/[Q-k 3ݴO\[D/ 4eI'dF#Wd^1[45f^V|Y\4 N<~_g !3MD`یz"Di8mk.L 0Bx<<,ϮYk "'F@WKn2$&J_6c{;f#{)4E7\_SE)R&3FCm@άoP;ǣ2ЁE*4ƃoFUz%UJx(pͲw&vGwf./@|] ֨ 5 wЫq=ĪHɁ#FOٝ *烞b|*HޛB۔m4 b )Dd>Zl,K4̸= k,SGog~닏*%"D ]'Pd#Qٟy8H)hغ=-)WNsz$ ܶj:IP ؏FSO DR~rO+.c+/.r> o3| T .qMGUo1#ZH ڲZG$'^_bxddpO8cQ?HHmLC8MQpHIdPG(\ v465I Yŗhcm8Qy?DƢu&Pf0A-8sbJ.9mAyd$K  m?`gV\ڂ+u Wa Fˎe>UIFԩv ^3"KIEG ['0D+Ȭ?IFDߦ0,QB,V[bֺáxTF rZ_97[b7lj<4!XtWd@͑R&C{ؕs0]zGs4*ٝ&y1z'pvɁnbܣ%L|~dI5zmT{-gzigFӳHKd%nhZ5?{4kE@6NU柀`?W}( '׋y& *Aǁ~AEVQ~inP-h6v%ʨ^ w7xDr5̃ *y@.-!POU?McI F ~:m=! d imOiu%Γ@X^H]O˙!xTW;ȝώ2<c<Ē:gYZ\ڝnE!G|6q'ovvXH'fD,bϯHն;%rnMh9A(\f?!?SĀ4INv@Z F'W$n o2NA؋LCa t{A olƌo rՀ5"vRs  œ1g4vԹO\"iùy:`wI:&."A de$mϰ1I[$ "rRC˦كxAk<77[ϯ+ˍLΎTpwjZo4PDA u]Į4ZAbd)4ֲl3/~;&$GtkG/a'TYvx:d=~`.ε7zzSJqmD]Q4FSeX~v^, "r◙M@K|aE,0ãmn:=w|_!&3{jغ$"y4C;C]'0n"N/k⬸=eAjzp +lN駹a-.JM;m+hR&,Jav Wy>z=iM`ȔK?3Io-tPrP'\1(AxRW8q@47(p޵x@;nO vysX/c RC6ycvaW{.om8!,i`1𧣫l5<߮J Ѓ@!a5Ab43ES뗧4n<ə_:m@iNDz V: y=_?_Ԡ+NMt~r"6^-drG;Xq f1pWɇ٠$F(H[Cboͥw)rL]> x8 j3&ZeN`:Ծ(CX[yg;S 8p Sj\?, 3'u\*qS$Ⱦ ,gIo}Ew綂1vԁ íW@ zP)!e˛֜4z|K kjgg_;6)'*1o.Pnp!O'cEz/fИU9Ǭ-rMhrd+5G'MY ¿/vʧ'$[٦?(y˫Bʋ9R^>΂&PEW8@I ?#,XkYUccJOpMGX-T*JH|*ٜb~ϡ]̊_˭}J9-;&u9|!v$ 乨F8AWS<%wljRaV amCswLf0q6˴ʗF XqSeC&toIۘOJzԖC9Ho 4}6N}g"VVz傑r[S]<,pզ71e-&fMb`Oɋ#ўO!4ø ~V Z1%W}% M7/tU: EEC3Oq`W,ٝL*5';ҟ‚%g)B#ͮ ֝sJ?%₄~Qxj\#K85R,NfAyw˖p6nb-†<:,~Ũ|@m##`hIuR 7&wS! >bأJa'x]#I[xԊ`/7hlx[UaPT-K֗#V++7ASD F3Ky.sf,ݡQg 卅^TbY ugyyX3!mc_U*y$o#]R/d\Q 2FhAmz.pqJGwj(-IڴMD4O'G]y{O} >0Cr%ߧ?\i >+{V>gψaVA5@sc,mxJhWks$.H{a TSKי` MO-NJLn!WJ/:D]_кV}:\D.HOF7V[=x$Ճ[gxjkm;:_ԃI;G ޴&>%t8R= 1`8 Ve2yT(&l ׷vfXVE@s.SLJ~?z/ 5{)y@A<ġ47Ni U!}SFykFb(xLF/^ ǚ¨u•ud1 rƿ1qn+kEݣv\yp.S=P6~d^??{c*}fGKmɂk)<`*-`gX;fT$w yaEQl'*9˾"M]f2%j"Ilq;{h #Zi$2@me#Hwz5=N Wujjy\X)iO&w>,4IukXW=ҵ?5>cExO_6aiҾ!&41{֘:ͩ[ion>t/2ݮn$Bz*RewY>ėar;"lO]~&o,2!pX=Z4> ֣n9=|b⺁aT"z@DnI)e6 c1fL3bf=-sj+?4F.cK^M֯[r'ȾK=,|Zn=WXw.6k+2FyY;*s10_ 9 #R!ypȆ.d0[* q8Ҋ2,tԺFՖALBųbA0cvż@OżOs @KB,۬{2(phwE rd]"՗:0?]~OP灎6C2jzN0?bJN]471m+}̒<( Bq|6l0ܻ<뷷b?lN~PPEa]P8[-^/9qL60ۣF(\mzi3̉ iJ&1>M'ԋ"> Y;'X6񋝾ОG88* z{G ް7ĩ Lnk1ze7A AҿCٹi5㳯:b|ʹ+19"P/4dMr/=E9VQ2AP+%h&]4ܽ%~51EՃSܣ 0Օdl'hx(Mq.Fu2I*i&ŪOK4ƓpyZ= Un<a_tؓZV{Qig 7x;a:[@DZZ^ 4 4_3pM8SoHȰD ( GW5OovA,C|LXZ msIVQuC$l*b AßvxqϽ5cky!x=fSrы`{Q%h`! `Ϛ. W_B J+П, Quh\˭]d*N ; r*90S+zF]Ǻy>4̲1!HjxN\Ih6+FG.{u[ploPvE~@D+; A C1v*$D dOû&yskQ>[z`ܕ %#6]K=|^yx`c"|Kf y@Ug:`t73<}8Mq j Gr1OG$x!HK'vz3v,*T;\sTWVZx_,/XRXq rSnDyzɴϚ=v=:uNEƕ_Cu6=\S HM|'lI#86Z\<ڴ6NmEа]ЮB0:JR(B%a`?V+V֥gz,>`M NIgYI2~ Y+"!AK Ps*^G! y".`ю6<$ͰX$Пz}eJSjᘤTvk.P?ӞVLTA'8d%zVκ-S) 3WYptb]NG@hKۆ%@`S &alug 1 's?Hȿ!.$BDj11s'*4F҅j)* &+f֣僛+b~k[vG0>&DK8XdOY;&͏!2yė[WE)hST30c Fa$}sQ}BL YJ;jOU92~#'_%)yٖ_,w~Z?܎+>9f9e| (eM\Ԣ Y8ٟF@N\!*{0c65‹x 5f($t@9qT 7mFbTTC}S_wTYܰЃݥ5,( vj05Fǒ1BEK;erET0Z׫/F~Wӹ<¬32E4f6]76o9_p2;/ ]'n8w32$3{}:)dPiàNM޷{h-l jŹ_uhbCFlzcFRƌCxc9 lDyΚMh>jKȳ[* b^vUZU4ӡcP#R-=B̎4;!F;o4U#N?CجS=µo39O1C=:ySof< e]9} o)#5j?p9nwHm<`f`muWGS`ڹ?)ZbE$JT"U hE+y蹐=A7T=&R䶩\9V2{x(~ZMrT|Le֕ab }@&[p?T?ݧrYy*% ÙxōBnEM F~j]"vZ[eACn6C9! p8UnQ M'FDMɻ?^8Ԩgsݞ@->bkd*a^eE2سe2=4˜FA~9I0 v&Zΐ zp"ˀAjtk]\Uw$|3M3ޔFTssG&8nPc5S]ͤzx[ U}ҀWOR!i OLv`k<Ƹ{y׼3,Q<6 H>[?4*K}H[\TKq2i1չPOq&inv=j;g7>Úi2.S[mzyY7a8RbM;ZNVo ?)[`j֚г9(5F iYI:y#KHTt0ɉm4 QTUk}Q9t\eUt*`9SoVbnUݫ4ݣfKGIu|$pu&Nd3-tm͊^*ɫ9T>QC٠;&cfḥߛk TIs[el^.3s.v3F(&/+_KQ󕚁OPcAжQ{2F~3^"#&@[|o=NO!p((ubuv";A3jSYʸt:hH꾬R<|yѳډ!kˉsm' V11w-BCAE,Eue\{1|(-!5 H5ݙ 9P ?ߖyU- ]=3n˿y"O*ьdDz, I`]?Ir 1g:3dee 05 joi"Mi&J^)xkW.h0>w9g~ɬ4XlЯI^5ho '7h9lIiUw1!ĩ&׋.nlmюRq|+~P~6u=8Ym{L/O b]jh> ҆-!J1XĔ~ դ2CC'AQiJr4|ͲUiTh0Ji Z,hIpsRf}|v M1Kdso@GqAD ]{4’آ+2! v,z஢9B[tZeTsJFw9=3,~{mV:g6 \6 7:vq{ֺ8OTH A l䭼kol9v2A!%"Sb~i,(|p6z#|-OZqEkYѠ~ƶy~M+^Yxg7 lb 31wDҺ%hONȃB#+wiA\O|ܾ/$\ywZ[OwKL:n^)"o!JC4|v/j7㍆ NٱK2'/ Ѱ6=Ѹ5IUz QuILbFZ /|pZcP{dneWR{z!NBBoֲbA:AOb_ Vޥ(s,NJ0xblfhCvQ=|.JkmT8}!]MU5ꅨ(h!Y!<.|% 3"[wV՚fWGJ I3K1\]+u˻u7NgvI7y5"O@m_c| ~N3Nq>0uHcnvV9ϳvK.yӉLQ5D 㝐90%،Y7Ouz =smŤw l s!"})F]SaV鑱dH4xlQ˵Cxd瀲Ɂa "`bDIJl)1( i۳ilQ(zߨ|z1M~y2 M\>G0 Qh\POADFv)˪CԔ7?,gRLe=;K:6n\<|-MdE'|`l͇Wyyooӑd1‘Os؊ϊ302mtv;,fU)r\ǝԡoKkxQ:OuC$ }Em>`9q v/LXiUhf@~%uB P2qvG7{hc`u%T /TœaHSB J c9J1 .(9rH 0s'v/2":`9( =F{̛LK /{>CRc.3Gdx+d*hs%#St@~MrB-cNq>p&%B= j!Sjywv,F F/'B'޳+.(X\/_ 5!`g0-m5m1{ ^MΕ+ TS<'iЫ]&7.Jי)՚#iߢМb˾_++ëHgRsQCS9h${Vf&枮zPsfbA-2Kፑ&1#ihu)Ov~;F_3h1B+jK3mb} v@1K33qѿUG2Π X)0ҡTgG||N!Uͷ꯼ &T&+VA@W uDZ;xRqx$Տ|ʹf'~tbtN EkEװ6,7 VkE)2~ Bl12xGJ(q_0d\8H&%8\-Q!2ꛬA0\u*/tT3$>J/,}g Nj@PFF H2>HS2y|]}FOJ'4t Z'Vɥ +)DŽūH-^ms<!8p4Czx,ff+Dn(?OUƦ+\T2:6`3];0ŧS*5.J>r~&:s߁,>:\wX|[OrE(K4\_D|l7ַB{L,]5/te[&j6hnǀK~~)伕Pon,\Tb97U!)l>֚?ۺ4]#Gm KsXU4+6msG[m$㙙;|ć LJwͮ㌵KuML\GoTZʰ |\Db5OǽEg%gʕj4UV׾s_?R9o V,[Ri왕նF1-X+|=j&-`ٔSNs/#VfĥA0DH@~r8Z(.WrP<@m}%Xj).>zwuM?7:Ug߾| p| 2~1# D@JjvC{sO\L2Ϣp4-3c{~>pxSЗc|3 ]u2ĉXNX"ߥ} 2u=Vh*zQםV4ڃJ9\d=kzC*^|yq'i}dچJjJ=oDdäތc !) pAXyOV%?\n˿Ţr=&zY,,(cZ1-|hC ַgW{)Aga# f br>o(T }wI/zM<%UXeSP?yAcoߛNVݰOrvC⤧p I,^|<|WW)3ؘdr˶8 3` 8{PiWZzE oo+fDs$ ] I;fFi)4ԖOE$OĐE R> nF>LLo8\«OnhAnIkHQ)>Y by΋XJt',.%i5<>THQWT /+w:$-9BzME~FCon' l2:6á[qF}llͧfTJ `McLf-C7`RtJM#p^U0K$7_M#5a">Q+#nſX>;%!x>=VNq z=*s=R (?\^[ {v29otpI1]HatF$ǩ Xtk&)\G$,]M#|/4tl?~1~o>0!>gPp!.WA Y^;!_b$=TSZdD ;Sz#ŲkU6+q!hԉY/a R~/aABxC108L}A9>څѭU;ꑨKN }Zq35䔟\]j=ahnswjP Ѫsl:n%%WuҽxF}8,Qd R'%4kpUV ̒ oO]}Z7<'q 6̊ :Ϡ䉁mW,RçPvځ1fYpt2b 'gHR|!jIeQc6j2yK9 ,iQIylbAn2gP~l , :p"vNI*ZL쌆#YiE)]D5;nݒܦ>ZbJX?UB8a[Sj5RTjFS٠J͂sMɃ죚K۬{'Q˅hTxو}+"09lCm ug3|,dvAe%DٴOg~*@ZK-TS.Mo8sXb;`C"4;F"7Ō'qG~LU, g<=2vb)ծt ^`U!zS> AԆD@࢛V-~I.<<퐳JiO܄0;§U [jSAݝ.w\c0^1䨬/>Ed@jC ) {dg:ƚk4Q5 ׇd_Zu6I\˚3\e ӵN^/8XLfg A}i$I Eᅥ9GDayGO9߶O O&\ls[+#wUOeM&dA|\? J1Ɖ~#+~Ji %+g.5@sSZB%@1N/̜xX> E'gL8NfDŽi\j|ߩg!=_9XQ1>-^m!\V8P*'깶bD?CeA$?Bj 5FP59h+x_X7K0 "HF*FOanZ^Y⻞rF.8LSz0l"do>>K(mCyCn?9\g @yI{Jn 1E} g>EWmq `MAstq}Fxk8M+q]tJ8\ peCc"]1J;Q_tFӻ>iF l2v27BK,yTCޏ颷Hd^7Y36qf͎? Kg~SQӢ4(v:@vՍc2@^GQs骒Zub@ｳxQQouyi> Hu\lV8ҀJÜD w%}B ;ۘ=<E €iy4)"UVGpk|Z׽ -\dm&;aM{dž6#/`4XtJA^I*VF4@io_EB j;.^Lm|p18.e-.VYB!M]+H%Ҧ=Ȝ0iHM֨ڽfD ]A"-Yas,UFy١z-kT-35ie:MK^?#PLC^>a ᗮQp6JU9Yz[e:jXEuB$`A@,D/fV{Kx`$&Cz>iLR(FЭy@&,p[F"U<7 {HV84cF7NqT,. 3 i>?Wt&q][4TijwDxH. ],wʓ 3e-w=.Z0|dbæ1{xK涴BCCTY{5Or<:/i|z YqyrTŵyC8& rPZV2*e 3L-sSe0+283&t}N_nZ4C93Cef/NeczHGU*aDxRdYgyo$UƵ=J>J۫YX>? ) {8$ Щa.;rqjЏJ7[$x^(vlj|* 30x*7et|l%(*rGN)ci y,)ƒ~CԆ!G:n ND0n+L׭KWlDӐӪKJ!by "~z<;p-5.OSQy')oa;|dxPrsfZ=o;E iՙM[FxM WXʋ5MPǿק*.[C#!q.tP>iV8֘1kZ-9A*uZ۲uz[Aq)Y,j<}7Cbx޽N̓(AbVYPQ?S wvY#޳YǗEOAEFkyc5!O8-}cxxGazYhEJv~0$z'(Ηd9 .O'7F(@r^#) }8eCOC|$Х8h7 4k`(c%gx^=OP1.)lkD׎c$5`=\p- 5-sy ORs={mՁbۍ$§F@GY'"M)dOxusܟ UcJMy bY#K@J1g\ Ւ.K-=68!bgnE +ܘmfB]4FaC \-ヰĭY6\6B7()Ӹ?&Y&OtIZiB! %hZs_|.IOJ1u@;/zH03v)U#Z#H W)uwe*Ȕ1qALny0ueRo-[ 2ѕ_ʑTLʾ>x6:^;L\A !x<'4T% G]S.*{Z)Y-TsoOJ{^6nYqVyB HNgTrI &c?f&󡥐RWWeSR=x(.o(y[O1ɚ,.eu B =ld#{?LkdYP鱳">>CE, l&1aq2ekfp4W4:Y@a?|j8LCB 7on%lXJݓ[Q2k704TP{`BI~FA)feyOނ.d>3}ZՅնk,oyg483 n/ 'ɒ%"妔ڣm $CeX# ugVP!=,GYg[\trɧW-+LF[F'&;+vغ"FFLvAsƮhe K$aZlIx߱lenH>2t" /P1/^Hz)6:v"=\=q`|eW¢L>xr(;l#K|E'P*{^MV 9甜1z]<+dDdq?A"&8Qѥ2rTǝBn5*h5ss6{%xXnIl "®*eq墝e{ >SIQsS7lGMf9$oPp@QFiR$(^eꭾ=Y(7>9wx, NrMB:nxXW(BƲWh (b:k[gHD\^ai_Aly8ygxtpn5vKo0qaS_Կ+CD.}arΨo3?DH Ե&LȦiD.bIr7dUWw~/,Og0 &Ƒuʅ*: r'j_ehTZ f 8/?[, 9g ³ktrQi ڦ@k=2۫UᝲFhZu{K[rkXt݄|O5{jo-Wަ;ڶvLh;bYI׵ 6=i{t5IRd?$|1s+?>1-)? 7kN婳Ju*p ՙ: rH g)jW msrvm_Gt!L活0vU^Zڈ׬?bF54ʭ+ӧ:]DHU0i=H?*`@қBp%*Z6r|щ 1 (`6 @֓OKTS8Ut<*į&{4k>oJEmgŲMYQ/5m|nmw8u 6K#t6L/Z6Lg3? @_te *Ϟ&2g,&ycͱpY^U'67ĒKb]dxwq & lvsZ`;mq9;Y}ĻxDi2(똘lX 5]&ImbI4Qk?z ٚ1@"xWWuw>z\:WG*%l~$ 4wfE{]-'+26.d/dahfݳn4&~h{Ec <^9TEvX,CюiF§IjM?È@mktrZʁ5+=- AYR/ H Ŭr)Ew-WiՕ5UT < 5Tdyxt#ax %߅qh_tUc87Sn7f&O% j4 3↌J@GxV*M;1K=6^q(#r?yN3g"ڒV|d VX!y~HBMf V,vElߊaDhҴk0`.y3tzXai,zU;JRPG!65 a}7x| 6c1]9j^QY{P`s jt$oeS|ly+fiy_g:3J^w9:K4.$xE tuԂwW@*;cnMBAM-KF14~vL'jsG{ ≗ %Rkd,lRݸ1ww~ 6û 2Gl\xᯀt:Xy.{gW_`˗I6Bt3%yYBmfo@IY x3?W[gtGre1fD73p&%иID8eTV!]o/8 暤a/. >Ɍl ^]B,ٺCZn> ׋(۞H~?{=R_e I)[jqO"lG1IŬi0Ö])#X8l7\Y4M>B([]ݳ:&^'Mqܶ麦mhU݊s^i_l9A8ߞP,$^Tl1kR%A|?X+WhѷM&>ս ٵbg,, !HPqAi/*G[aiq;(>mV6q/gF=hzHV;c mٮh7e{F;v3H< 6bstLx,BɂDg& JCW4ݘ4kAf3A/Q0 x_ے? =5?ޏ<7EO e0pLd6$5ijS} e 媭;>vꕶ37zhÔ.izsZf3r'sGڹfV',N2 #JvDP c*'l;C Q^&JB 3Hr%Z{?94/% *|Řg8O<M%J•^o摅ϟ$q 2h=FE`.(yuCQ]|vفcNZ5NXM{_l=~TPt9 4{z\ d0Igڣhan)~]  /oޠbf/f/fc{&ݞ-D3Șc_-ݰAS8]CXDncVb"cFzq~,'ΐU `M=XTK?x=P&hN\e3 W)\'s]u[ӽϟ}ylD-]"H}q!VFT!qAxϱCgO^c ):ckp̳QyM]݋iY@N@Nm4n߹lp|;T=65Ncy4DǩzI(I|ʯJ-1rc"T 6iđLk:[%=b2_^o$cYB@@#c[g`ag-hd/G1 'Vg(nH 0 lChڭ;q0#n6xBS b":/. @?ƤC_ެ{BaVέr*[g> 7X1S('Yt6O2 &ǐיtlAM h?zq1Eč:n6ztZɸϟ!:P0ԉ%ϼfFrCaܭ)~AtI3A^kȌZPs9WoLj-xlrD<'< [p^"cB9ӆe,!U_|H.l_e[%-gH' @w=+ֲvZʮ70&oj}0w6Zs)wIP^;8ʝxTW\42HGDALL =:ZcWaFD {q `jݛ*l(YNOyzҔ>O^~N:Iӆ$'clDe_O!|շPxilrL"CP[sb,ibsY7up.j-n^WQ Jnڧg(dՇʝj>N aS;NqEJDoa[48yvuG+bEyr$qrT]d0˔vcYUyph.X݊H<- dZ'WqszyzĻڌ}#|l቉F";w\G%LɗQd`cƒ5ՇkSa^xb|cUf}G5KZ5d \C)YJ1tcgYfWfOsrgFEIrjnH/زtwi^_̑Ay%?3nT6jC jM|ܗ2M1?U¿#_mEMBs5KY9i^v˅c uHI.eTہɘR=)Tp2sUq2s:=dģg|޷';}^ =2$ K?#709)/7 KEE \^5oZrlM04 ]uRUxh9>˸|ϸ0~ #ŒEXGzmX/L:COb@;z U׵JoprZt+A dOQE  h6T1Yzh,YnY)EҞ.v C}R,r(PVp|sJN26%-M) y&wZt1V`L4hMi`iDk2ZP8`v$Lp*MF [!zZ$|vW*bZp]U``!RCgBNzb{RRkB32Z79t8!;_IZ7 $x/GKgfiV {iIHݖF֫iPD"lϒR#յp̠(Q}HC1e~KAxDe.|~Wb=v5 YHnϰK0H>u7ì QH%b/?*ks>O\!FT_f!A,ŌE@}}";LC㉇e,")8?oե)@56EIeP]% 0Iٟ )ʷ#n_SKجe:Ȣh- uvm=-<춤[Rp Ɂ'VZIL=\yj)GZ^ fS6^-l4Cj@_2꫽Q>y`IO9z+OL|O}rCYOoX j$8E<Z{Tg9qum>ĸ63z(.L$6A'ntq![rdV] fv#f_v6]&3.,/i ^7^y-UB,OBT{A E< 1}h]ny=vOL15+d+Hɰ-F%?3,ɒ M?UhxTvzf°۪)<PhƢl\27NKCsZ")k39bڐB|I`nV+k@W3b(z;LAP"K!ՙYE8nlnfA``uq "FJţ׼fDN'Dvi`"VN3Y)s*!$_Y;@h۲jb!JAH$|뱽cRu?gJ(D߼TcNkL|3PV}F-'8;Q[Z 3f<\ghH5;8%6a=IJYP˔Zɴ[Z'FD28H\1a/[TH? 蚒P$~.6EZQU֭|"Yck''wQ &[NcTQkB-f\]Ir&CB8}뭷K([{ =KD|[NmήW |A_,h '-.OmD  Pe 2gwȾ`o$&YＶ]' *+x+[|wg@4P:?߄d$Ojo͂g4uo" ́@ۋTʝpـqEB!9Ue8 H>sy1QH$eaJGSɧd8ڼs!zQ*r ; a# =\G^%ExpA)9z8&<`"MbƋ=P Ik&cbN#u.oㄉ(TxM-y1/:ijNt3RY~_us9]Yՙ' ͑nH_SbX % p#G$4ȕ"~6 [͑ܺUo)1/d!N*NychHeH3wu8*X`dGzp ˔ JIk:qhK#e7erA[Q՘رC]SA&´P:)t˰W#v(_.A9M BEC xNif p_zCN -Cf_WZͭM;?L$>My3ܖ3I#kx ڹؿXEuX;b[?04/>$È ͢0qJ\:eN汣F葼srL) f.< x.1|!ToQL=.:Bu D"C'2J BLK_HP_ߛCV("QHePvrF?.9=6^(Ok,CLYt`;|SH5Z \{>oDkwkb,&)gxL;5݂4ˮ-q4B~>NszkZ &.oHݬ/5E` dS@Eu+= {qkVs0c"6J{3 T=2Pf\a &4' w5^遱,IGH}W`NړOUԅFJى=>;'t'&Xf X^"w,e>rz|6W`pWDl~wMgv*} r0|36`W~/+13"(o5(|<5BmeCx<3rǰxR(47P#Yo#X0~b 'U`V3 s@,%|I(eY Xn6eui[xh`5X=$OVЫXeLG>ڡU zkV)Z*!6H~'&t%T]}_e Cc4;e9hJ>L<<p5:ǎ9?eҨQ{- 6oWзQn&W{O.#1 IǴ\~7^xj.Ea{Lg5];5êgH;GF̷ _l ~?`+7פ2x/8,.pd1bjJ B;4s$!u ~<ٶo&FK_ne;$%ϋbYw1rxrQ;^8j":℃?ߍЁnQH+!牳.:/! %آW[D&/m0w U\n^T,ataZcNڞzX2|'јSTJ902M;7V H,3,N |:x`?u%ذsCHkB'Χ~X OIؿt{-?U m. X?S8ϋ%cy7fWX Ү.J=ٯٷM?pzy@~oPuzOu7?Ml\k)́.{>Օ<^j"c~U'XɇdhMGa"`c]S}aAyWzn͡(&H {Ԯ 1LeGCw+5mgjQBF_ dtx305N<;FЅqC)1(&Sטc]m}謁?IqL}ŧM^$=&ŝz/h|)N>oaqtKyle g(c> d+̽rIG;raܾ_Tp־~fn#3iDk0:=6fW"2zlm H`*౿F~C"{5]@?%6S(7+?+Jw9GՑ%|+ 9ٶ4 9KߡMO#7m],ѸaAQdKTo)v]瓢+Ưҙ &,SݐdFK1?f@7ThfJ ] (nZ'X?_.? -u%5djYf1 %x'>ýqW_,nb(3  zDK^ (&v"9:tĪD1@H%xVܧ8_Vn>EP=6Yu,IEc ^ %&$|5ES# 7 -y U++.Y/I67Qސs7u ?t rp{ǜE'b&S†ͧT @hMduM>YX pcGDi^l Ǎ$uv0[5 ߒrLʹNtYPwQFceG@de䒝|~ m{[tZЍd\U8p_j$0^cvJI^j&q0" Ծb+QȤP6Ǣyot|mS/iqEl4_3vƁA&ZU m1D.~Dkq.8_u^|\s)!Ntah-?PzUe~A?ė$]]kFT,FEK *U@\4P(Rcd\U~VZ>E2V2T/{ a|b@zB9 mA9k;_OP BhpaeeB5? ]I͢;  0^Tz xҲ?}"Լm!0c**\u?4=D@k T \TiB&ò >2{) dVm'-^aZ^[4g۔ -;B7Bin\s.i`q"dO r*? wGϜ-lXk<eB'bU|pە1N 6HV$ų-P-rCpO8}o ]U^OMTMHK#2\:P@RmHbRpmK$'1kM@[)+na) h:Y N} 7~Z6`ȅ-yA4ޟ+Ek8-jGq/_~/>)捌<d4p {m9"5אIVm<ȁ̡!~T2ժvDkHVlmLs ýQ99L߃i#0d\ÚXF~ *4U-GMUp*1F3G^/qD$gϐ;J 9O1c7S3 fOѭLM}d _[\![ d׹9=75MiVRk"aY ! }/`60m:ŚIh'54UZ#?Z['R똱iqDG:fnȪaΆ3qPz#‡w9n>T~)C(b[zj\HoF8OrIcuxPlrdxsTHPr̽Vݍ?&!]<.h .&'};Kv+rbv(}Jy^1]5st3L"z;@ՓPS ׈>E(tO^:glGW.%J1&.$s i">`&|<'`u<}>*R!#Y9:<0^Z1iJO0mMp&+Z{a d*eik.ԍyC^$yNy[ :ꚫ/MZKKE>R.aéˀ/߻y  zY >z ͟iThc_똔RӀFUϯ"Ud! <<~AˌvtU+ƿv V b%Uؖ܇q7>[n3ltZ:^x7+q.fNnDp#M%1yu^6@(FE!Ǽ8֬ܡ9#}5 +Mاc@ɹZ| HOZoMӊ[E7Y][:ћAx/~Yu;_&VIJpm.0R7i[ YB9udeBsqj5]ڨ0)tmIfOG8|B}R;UeԱ}dfasoϝ/F濍G?3AЇ 4ҏዢ? !N.Pej#;ʨh2Uҵ)%_N`mmPmZŃgXW+oҳ<f6Hлr3& G攼?b،Lum,.Z{@uChj5jU"CBFmUH)oMf -3ˇ# c(W"ncqJgX"Ұ`PkᙯG/u83N7'#Eok%@/TG;} 1N qZjr^K"X|Yֶ( u$J4M/?rGvQA6x1$54#u@0zo v(vҩsRI WL&8s:E%Uԍ[x6 |Œz=|uE'v>X#6!qsId2Ღm'M~~ኃ55+t_ а$/ b`*=p97x ;15BmӇ8!1[޻"QA¸?PHЈ*PAd9{u&m/ȜS`ĐUdsljp%;b]}4֓59@9\(BLzk-_Ih/_eZZ?!Elo~)UyOǗ 8mFh4Db"/GJ8>v&SVK .p+3.8dc܈ +sܽXy|̰ݔҝ"|jk9_2dI3ɓ|w@':=o::hG[ez 䭾;&åY]@ Ǩ O"jx%:M+gݠ+x]RifaRQ+2] ]G;r@3ZJg"[.r)nDmPnj=q#JZrH3i@s TI(onmP_ɉťW=?V4#9g.uL@ÃK@_4*o~f/qE9C ovYͅ5rC?ů}Wx=xL^\TكQ ilU18aX/g'XGG֊Eӿlu]?';G5#v"C:.*ћTh,%)b0:SuiAEl!ײX$pRw΅[3[1(^;6]$eb[&JatfGrQ(IC!?0:~Zmo&N?ezl.-U pk\14iB 8J }n0~Xd~% p5o42@_~J.r8W)?IUPov֤5]ẙQш2 Iެ%(!AFpM ,#dʁJso&w܁awerҙ7p"63#2a1l.Pr]w^/<#>4D.APQ>y-<ʠfW֠ʑ:@@H3̲t5X3{wzP{T҅~&vgISCItӡq`HJqѫɑNajL6!E dW~^Rvp!IAo`\-%1Mܻ:UWsȮu&Ѡ8T+)+pJY}y~`tiie}F +sSp',vhUcjԗKg"kjQ@W3\&̕QP\X'}&-Wm~{XßLJ2s]tʇ^?Х؅N/+'%6R)BtT"yM-^ư_ VR:z]eQw\`1XϘ8 D1)LFNhSd֝#~Ls!#ϭd6|olm:6􃨫Ar%iOϱP$SFj$!\"q?S\H6/m^y  [Á[dT&sv JH&;=Z sOJӚ:ExL):'!q51 {"IzD iY4n}GœO?okc)]IO^S!\B빕_Tk3tytJQIQi") I$'6p -N>kD6d?&HoxH ];.W.?p&$k4N* N"ήJTe`bx& A4O6\]{LjTRԠ#nIiV0lОD{&:cgG싴Jq-ymiFl)3M9JuND=hHBe.L#>F[_=u%ү723+~5yYЗl! _/+>&gE3!ĀB7jS_}gy{.9T۞ʭe:@H^Ivlő><5:{  .Ѩd5d?)Tԁ FM:Ao7dnp9ɒpHU0Tp6;zIxQ9qqNJ]b~br )8m F?+lHvR㧭5Ł"!D9o!SMk ax!G}9*n̖_?nۤW;@j(N: ߤ]O%T!d1555܌݅T|ې2jm- ՐrK6If_Yͱ^Jv].乐f0EѷԁR:nxMYrм)ngȢeU'L<$o1/g󤕓iE/爡2HHP-ο nmʨpai>bUn]ˆDRdl0Dޙۭcz*'q%u?%i^B-"*#K5lH2Ǯt079# l:DIȀ,❭ZƄ|ǎCnYж< #E&c- Ze`ͽb>52։NvoilV=+^/MӔ5to /("La֌ $DU44-<`"ӿwޣu1g6NLjq.93^ =.-&L?ܷ0Q-/J-eotƃm~@- $GT_!JOJ.+adV63hv%>:L9nԥ U  3; ~ "d[+ԜbJFL ?cyXT\e}RRf*WbVLE ͫ=,eY _3fu>94 laOB S'R4+1VN+Tցcr@ K&zTR;wܹŠʷKR臆{| {-1546=ދF2Jzܬw$JJm_Z#֫2GF{&J}n1Ө>%[$z*xV)I@B$(ا"2GYI8[)u:pjm$MW~8B#x1a lJ)NBד$|2SrQ`Ê@N7;$w7j ?ІFOx܎#C{[1@U5$2m[Лo]OK-0@UR- twLv'q#IӵN \A߀_i;=(ώ]X򐮇zpHPA,Ab=~ $#OPؑZXLn4^ӳE;ʑ:%d98{pS&mٳwewMjkbѠŲDdrzT-M`/ydur)`AliO7-A#s +uMA"S7wl>N*t_ z3TS|YR Ʃ#ҭ~iLS/SDq2!$QJuK!m &Hבj0Ok臭\,`gMbKA2a{D cleyޣx3EAqW<{Wd 밢b[xL&iMaAA^6[юREQM9Wrc1'TXr«P~iˍobxi4'^o?RS9j"DASsP* &Iy_44!aR.?qa~YD3]:v1]jo+`Oesj&$ >l]m{ i,T/yX&ןRI`Ӻ^%ͷ/b "Q}ۻy 㲁>J 'oz/0$As\:Ln#GYCoH%w_]Ցqd:(J}~o-v%LF5mi:,P9Mf( ta3t5xD g E{RehFFf|ٓjEEMPDMn/ٲievWU!pGR8bS{SJ@'aV[0V]ZF&´6`W˽ .x:rWևvi>ʼn;hO;ů)[kxh ܏/@ |T<ʼ6'Gwٗoh  y!_TTRp c7Rx+Wېf_2_&}:344^d?8{XOro8zFǨvN$M6|Ev#/#PҔj`}Tyu]jH_oL"''Œ0z S:!Oa/ח i=`zBkKy=!?)?Gʢ{%߱)l Nܲ $GW+5϶.G=rK%$$` QjVgXʋ~b3W4ڔ!^hD~Ă5f|YMTpHAV ,I4*1>E^ $3uNhPT?j1G46bCF5PȚZ;',nkkCS7Kl5HALRd\-9)Py雪0mdfwթo&4ָ[ BVH0fEDZХdpS^~)nʝ 1ِ%p-7֭肞&txL1=̽Ps7c m({upZ$Ψt1)^~#=~9]kyD~I3Yh-x`2xy1G l(+PПA*SWcKQrv_ݔ,jxSgU k@r }@b/f8 pJ{eoa]µR NX 4:̈́v#1d#MKL<\K-DGE e|y"֢&Bftux jmŵ}~_"> &d1;ny7ڻM: sLl5P;T?:C3,:o"3l~Vjn'<#u:b}Cj eY'Ar!3Ѳ_ŭiD^ iTsvUt_DZ^PӭvlxIJ[9ᭌzKFz:{I)2[ +;qNt%^B>vɠ&@mkhKM|~^p6ҵ>MWH~+ St(ntd(3B6KxqcqZDq4[K߮Iߍ yhoN0u O9yJٻ"t ,ݘиP1v._a`>B?>ܼ4ș"gM?G瀡캁~{4ou.~䮼 }㬤'GBOر ]# &V0}Qd,u֯ OS?͝c+ mʅ#eR!hkc{9HdyʲjZӱpQ|MZ j#}Nth2~Ǿ)jyܘ TU?k$bԞlؗ胎୥"bJy<;t[kə~?䬼9SH9i^zkeEӶ pb.wB,S9Ǒ\G^ qI%2M\%_}W]Ɍ&%~x22͓( oMq2b:B<+2K|)q%ϗһDςIXW}Rjځr?脩}؆TF&]3XqC?[4ay+j4ίVYZIԇ£]9mpc0z@T1Jꯅ=o2<#/:4v+c8\ro9UwMa:x9g.$*9Jf6ǘт?pO{0}6b f*.<ojOasIC< 4>!!mٜU!͓kڬ~7qpNG;V0huYչ(hs)XT_0ӎG&.L9k~1Qw!kKXvr>ƈAfK ޳x vZ@ϖDW4bڶiٛgfD4I!X,?R/'gZafg$wx<&x4m$4u8X MXZh\\џ=x@CĐqs:za/[{SNkR1M7[[r ,)af;QBMX:Vdrݤ:lZڸvxg_2ܺHIt]2ĮRCj"mRCTV#ǿ*b^)962gW@Vo6VlN' yy8B$p81r¿8|"9zDXHw?ﷹ- .$ͫs]VpA,mg+6E%7H㫠 @WOz+V6|-yCF%"8j_ { iVDd%_K+ X9%Gt%s"W('+]a w@Z5LL8C'oO$.-=bv|UHUU/SFvsO/&7AcY->E$x/z(MR$Pmp+|']\껗3M+JܱJ׏2xWS̛5$}挟/sL6tqE5B[!spurVJ|Ifk_ m1a#'6 }z槸>=s| gUr1UT\Cc17@9E} >꧹~z]w=oxK1Ou+.:cFvR"*T$4 Tʢ^k]ݔI 32"6HaeDn瀨U|4(;DLRpBgtpqsC Qx6o[.3TZFAz.\Cx=)!/̍ yz9RVUm]m]s!Ob8Qq2,\2lPIzg%FƵ>fA<:^^#} m(!Fh<>𧱠m4CSox*֏F6ڢ,.$v0jX˗Ʊݏ4oH+pο=BHCaЙw %/1$I4s& m2g ?sJ_srcmg9$EJS]zHqLغRuEZ 斁@B`ZB܂zE2 -=^)S2Xaɾohw=O`+]QZx2Ƿe P|34z^B}ӷ\*c\$BB>lFNE!"4mюeqJDо7ELpP9;d\w~+Qө~;v3-` ]0F>n'O@*V8O.m皤f&cv`Z>[čuNBa}QϘtSi'+鐖Nz5R I'K{a 7A".Zk32L@bMmcԶշ5 d^ D*h74'b7_&r hj+#LLޡx5ވb[O Ŧ)K$'ǚ?Q{&XoAcrr hY1 xD_ ci#hg K_EOwop@-1C Aqnzo $\~)-R47jl YFYz;ķ,ƞ71] 1HtWA[W@t]uv. XzlsU}M1m5s7UZKNcTyD(Z/ũ+OAPe0FJX{7iPf1o]OhرV o?0c$L6r،cc| hvP^ǎ!E')#[WwSHEВhq;yEIMPR#Io5W].X͕)0pD^62%v8yBOV!$䝜HqCrB,J%Wo}3߼Y^Ýt1gځ$np n{ژ^~h|eq4"t/1\ŖUּY] "zA _{$jUC5T%S[pàǘB\wXAo)j$XƇ.%v)&r%28::zIپWUP켧Rġ"ȧ0F3|ωHkDQFBo>:ui4=zln u*0yYR 5^l,0}å ?ݜzk?}'gW1gɚ0gX(_OGHe7-q(9dA=؁?$\*dn/6s6b;yKjζ[*`̶i"i5?G VA5AeaB]dTZqZz:UXlK:H_.Ɣ4W(ή-Z?+VcY=U" v5:C|TgŔDHSC8Vď'׀,+ӳаHUuHd 7YFoG 7 T3MXZ.S4*S.5GLrfe:1=evpzF7 gRԻҲ4ZJIWByC+Fgw0!]{|Z[0V<ɫɞqzz=')oWq;AZSbk<[)tt@ :m ;jP/Zu_TūE )v0R[ufWeWU)u84@soE\zf1- X2 W FgR2WYIĭ.uyt^OJBßg`2-u<<\dt[5oy}s,Qw;W F0dW GVRbM\ހGj|Tg;w}5K<N7ɋs+#J- - >2: qrqh} ~ħ@:hT*.y<p<*V郸 }|E4o$x}Q?`Qܤ8o߶`-T}-3$y4FQ許FDqA2gT"^<,Úvb`;3:!hmIPo(޻7qT^1^ݷj& 6c[KKRaL U[xᖛ=΢V%"rYMwoQh=cΐY,ߘ1Ab?隠GʌɹI@M' Q(M-qfV01"| q8_ҭG J"77tB~Ω !yȉKcV;JmS˩),RT~JXފ5c9`#[zܛX"LB{SwC)(1@Q4/!GVȆ-~~`בD~ލ,F,?$U8:PIL8DUkOOT"|ScO ,o01@)frYHcbHNXO Z+/y@<4hr$^0[UqoZ0׃bCrbVN}L:'_*hbI4 ٹqRɜ>)M Y Y@^X Fbwuu+B:ɂdR)ō< n-wL}x)2Iv/ly YTo$RUa5(g9} 뗳N8>`:S~e>j E~ Ývh՘@o؜?ɑ[lJ{ex:|Giq^C>.[*SBai$zALO*dD}aM+g9*As}e! T¬l᩽2"")-(eҁ;?ila8h%5(%Tp!oM#dzqvW֔55trw+jCF^Q+Sq}P@u/N{yk! #LՕ%͸A\ VCy&D}<0aC 뫂ѹP֙STζ.G;NU\!\ &.&S`ZKq&n2W^{i8XS6Y,|M RJCd"Hr :i]RhA-TR>v 6M/*f=ƶ%:{[/{V;nB=~KL\[˦Pe 5[sI@pr8sފ.L2A)k2UkE4)f?W(ťUx׫)~QDrhT'Gvdl+76'&9 aJY^b6u pSxVUjTk6(mS]y:|i2sH9n^BIf0ZQ|wG0&Cڊc2R@M jc$˄A-;]6b^uׁ|y*>qߘ,k`Y'7ŽJWؗ=I<rOCup\RaJ"Ipk uu*a۫^mX26FLwC}FR r#>uj0"j@ ^I"2+~6 ƛ\q(M{rX4ez8:3T֜# MrpԂA]u.g9Y2ijk Lؓ*=M.nb)㹨c &iLgaD:ifQ_a ;WZ9fW_jWN(x32,JSs%1^kSA\a0O^u~߀Iqza1H0LԶUfzI{\ >Hqjq/n$ 0X=ҿ9!}/xBOg  ףΈPACQ]MxhӳeR x/Sqx~\Q]]F!_v}Û'/}+'sTZl?|rjqf4۾B/S2\M]Isd贱(~^!4 ?Y9X&^t-}LS3ocya]X_>H1S2 }sB2µu3&~]FBK̉\ýMV(U] nN!k` cY֦{Wrp3,E>R`ѩ.؈ #G2P]XyG|Xy׌ǾZ#?Ts4P~V.Oy׮S~gzQ Ts[y2Ik43<L$P}MS_uIVi,J#h}CҋUCKˠ-FP%㘈JgH[$ڍ9AJl~ŋƗDNk,8ܺ_rT#l/TU4f袿}zw3㖬wɀ-Jy_ubpqDFp'{|sOwܦ*ƂCݧf.. /لC ͎t[&LHs'5`Hŵ@LJ<<&4v;E ì..Ĭc!O`G,sԝaX8Uٶ"p2`$BZ6S(k30()/&+-˕95y~R#&;z֫Hک 0LOf'&o݋ۓP㰍Yq }FzЀr}rpO2Dua[8Ƚ-W2jMf2߻~#mQ~!< ?ze/< niCy8WkCŠNZޡAǤa[CԔ&B Nor@\0΄b{uw!fWN8tsJeA-fvB$%s[Dh"8Ah.GVi0tQ7vpD{ H: Am@'ξeGua.oC?|,mfwg)>@qu'y鷰nŰ~ $PA{j[^RXMQxar~Gch!K޹Gsqԑي:n>H籟<"9)/nrXyGpۢT‡PLz[} };zgWXS󥭷a?wʏS{m,懰 -fe4L:~X`4/Hw)V(Y@^sS\R_Y?M?[^$kaF^-ˈ MT;5iāLzh?V9t3'ٹ]^4q_L6qJMhXGkBcf&%|dh"᡻QN {Hg?r| +%" Xd29Td(kk!mFA{' `pΦ{c8fֿ'4Z40گ/3H  YZ