systemd-oomd-252-46.el9_5.3> M Mv ĉJ4!!%joLne)Ip-Bm5 ']ghreleng@rockylinux.org p-Bm5 '],wSd'eĮ\\^ztPRmٸV7abeR;Z:qo j-3eroٶ7~5|\xNyqsdn v-UWN|O{/F1VѱyMjza40|(@T^9̺ؿb*#uM&6b&C!P+kqMWq߸WƊl9'z%Gg5=j^?;'J%s~gPEպ7-QΕvU7jlas* жIC)TK׮ Bk8۸tkqp;L~1!J8<_Ȩ.\ZXr>ќ{$"H&<=?j]xtR}*ತyYY~nnj5S#7כ0 )~!<} 5i`ik kaTNș$:Me[~1,>8'W`4'zf6e20c70401f5885d7155c05893aadd17e93dc5af7d7bbf73070efde32c3cb05666a7eb9dedd9273229929dc28d9ef48b015f1fb.Yfҫ>&y`>E?d  E$(8]e wE|   <  T        D(S8\$9$:3$=>?@GHHIXY\]x^gb]defltuHv wXxyptzCsystemd-oomd25246.el9_5.3A userspace out-of-memory (OOM) killersystemd-oomd is a system service that uses cgroups-v2 and pressure stall information (PSI) to monitor and take action on processes before an OOM occurs in kernel space.gfpb-cd782f4e-4de0-4d04-88ea-65983b074741-b-s390xjRocky Linux 9.5Rocky Enterprise Software FoundationLGPLv2+Rocky Linux Build System (Peridot) Unspecifiedhttps://systemd.iolinuxs390xgetent group systemd-oom &>/dev/null || groupadd -r systemd-oom 2>&1 || : getent passwd systemd-oom &>/dev/null || useradd -r -l -g systemd-oom -d / -s /sbin/nologin -c "systemd Userspace OOM Killer" systemd-oom &>/dev/null || : if [ $1 -eq 1 ] && [ -x "/usr/lib/systemd/systemd-update-helper" ]; then # Initial installation /usr/lib/systemd/systemd-update-helper install-system-units systemd-oomd.service || : fi if [ $1 -eq 0 ] && [ -x "/usr/lib/systemd/systemd-update-helper" ]; then # Package removal, not upgrade /usr/lib/systemd/systemd-update-helper remove-system-units systemd-oomd.service || : fi if [ $1 -ge 1 ] && [ -x "/usr/lib/systemd/systemd-update-helper" ]; then # Package upgrade, not uninstall /usr/lib/systemd/systemd-update-helper mark-restart-system-units systemd-oomd.service || : fi$<(+ZJSx )L4XAA큤큤c`ghdghnghnghnghYghYghYgh6c`ghYghdc`c`gh8c`c`gh8gh8gh8gh8ghAghAc`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../../../../usr/bin/oomctl../../../../usr/lib/systemd/systemd-oomdrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootsystemd-252-46.el9_5.3.src.rpmconfig(systemd-oomd)group(systemd-oom)systemd-oomdsystemd-oomd(s390-64)systemd-oomd-defaultsuser(systemd-oom) @@@@@@@@@    @/bin/sh/bin/sh/bin/sh/bin/shconfig(systemd-oomd)libc.so.6()(64bit)libc.so.6(GLIBC_2.2)(64bit)libc.so.6(GLIBC_2.34)(64bit)libc.so.6(GLIBC_2.4)(64bit)libgcc_s.so.1()(64bit)libgcc_s.so.1(GCC_3.0)(64bit)libgcc_s.so.1(GCC_3.3.1)(64bit)libsystemd-shared-252.so()(64bit)libsystemd-shared-252.so(SD_SHARED)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsZstd)rtld(GNU_HASH)systemd(s390-64)252-46.el9_5.33.0.4-14.6.0-14.0-15.4.18-1252-46.el9_5.34.16.1.3g`@g@f4f@fѴ@f@f(@f(@f3ffaf@fr@fj@fM@fK;@f+@e,e8@e@e}@eԔ@ee6@eee)eeves@eRd@d@d-@df@d@Release Engineering - 252-46systemd maintenance team - 252-46.3systemd maintenance team - 252-46.2systemd maintenance team - 252-46.1systemd maintenance team - 252-46systemd team - 252-45systemd maintenance team - 252-44systemd maintenance team - 252-43systemd team systemd maintenance team - 252-41systemd maintenance team - 252-40systemd maintenance team - 252-39systemd maintenance team - 252-38systemd maintenance team - 252-37Jan Macku - 252-35systemd maintenance team - 252-34systemd maintenance team - 252-33Jan Macku - 252-32systemd maintenance team - 252-31systemd maintenance team - 252-30systemd maintenance team - 252-29systemd maintenance team - 252-28systemd maintenance team - 252-27systemd maintenance team - 252-26systemd maintenance team - 252-25systemd maintenance team - 252-24systemd maintenance team - 252-23systemd maintenance team - 252-22systemd maintenance team - 252-21systemd maintenance team - 252-20systemd maintenance team - 252-19systemd maintenance team - 252-18systemd maintenance team - 252-17systemd maintenance team - 252-16systemd maintenance team - 252-15systemd maintenance team - 252-14- Set support URL to the wiki - Set sbat mail to security@rockylinux.org- get rid of SELinux policy module (RHEL-76033)- add %posttrans scriptlet to make sure our SELinux policy module is actually installed (RHEL-46339)- version bump (RHEL-56019)- ukify: Skip test on architectures without UEFI (RHEL-56019)- build ukify without noarch- Revert "udev-builtin-net_id: use firmware_node/sun for ID_NET_NAME_SLOT" (RHEL-50103) - fundamental: share constants for confidential virt detection (RHEL-50651) - efi: add helper API for detecting confidential virtualization (RHEL-50651) - efi: don't pull kernel cmdline from SMBIOS in a confidential VM (RHEL-50651) - Fix detection of TDX confidential VM on Azure platform (RHEL-50651)- udev-builtin-net_id: skip non-directory entry earlier (RHEL-50103) - udev-builtin-net_id: return earlier when hotplug slot is not found (RHEL-50103) - udev-builtin-net_id: split-out pci_get_hotplug_slot() and pci_get_hotplug_slot_from_address() (RHEL-50103) - udev-builtin-net_id: use firmware_node/sun for ID_NET_NAME_SLOT (RHEL-50103) - Include if possible to get thread_local definition (RHEL-50651) - add APIs for detecting confidential virtualization (RHEL-50651) - detect-virt: add --cvm option (RHEL-50651) - detect-virt: add --list-cvm option (RHEL-50651) - unit: add "cvm" option for ConditionSecurity (RHEL-50651) - dbus: add 'ConfidentialVirtualization' property to manager object (RHEL-50651) - core: log detected confidential virtualization type (RHEL-50651) - core: set SYSTEMD_CONFIDENTIAL_VIRTUALIZATION env for generators (RHEL-50651) - udev: add 'conf-virt' constant for confidential virtualization tech (RHEL-50651) - confidential-virt: split caching of CVM detection into separate method (RHEL-50651) - confidential-virt: add detection for s390x target (RHEL-50651) - man/systemd-detect-virt: list known CVM technologies (RHEL-50651)- fix applying patches- timedatectl: setting set_local_rtc to 1 will throw Warning as well, use log_warning() (#33489) (RHEL-45020) - cryptsetup-tokens: fix pin asserts (RHEL-36276) - cryptenroll: Use CTAP2.1 credProtect extension (RHEL-36276) - kernel-install: check machine ID (RHEL-50672) - kernel-install: ignore errors when reading /etc/machine-id (RHEL-50672) - hwdb: Add Lenovo G580 (RHEL-5950) - Fix key toggle and programmable button for Positivo N14ZP (RHEL-5950) - hwdb: Add accel orientation quirk for the Acer Switch V 10 SW5-017 2-in-1 (RHEL-5950) - hwdb: fix Compaq N14KP6 key toggle touchpad (#25404) (RHEL-5950) - hwdb: remove fuzz and deadzone for Simucube wheel bases. (RHEL-5950) - hwdb: Add support for Elgato Stream Pedal (#25550) (RHEL-5950) - hwdb: add Clevo touchpad toggle key quirks (RHEL-5950) - hwdb: add Dell Inspiron N4010 touchpad corrections (RHEL-5950) - hwdb: add Positivo-vaio Pro PW key toggle touchpad (#25669) (RHEL-5950) - Add mount matrix for VisionBook 12Wr Tab (RHEL-5950) - Update 60-evdev.hwdb (#25704) (RHEL-5950) - hwdb: Add additional Dell models that require ACCEL_LOCATION=base (#25724) (RHEL-5950) - hwdb: drop trailing space (RHEL-5950) - hwdb: add comments about matching entries (RHEL-5950) - hwdb: also add a generic entry for DualPoint Stick (RHEL-5950) - hwdb: Add mount matrix for CSL Panther Tab HD (RHEL-5950) - hwdb: Fix mount matrix for CSL Panther Tab HD (#25752) (RHEL-5950) - hwdb: Fn+F5 fix for MSI Bravo 15-B5DX (#25788) (RHEL-5950) - hwdb: change definition of PROXIMITY_NEAR_LEVEL for sensors (RHEL-5950) - hwdb: Add mic-mute, control-center and screen-rotation mappings for MSI laptops (RHEL-5950) - Prevents airplane mode toggle for HP Spectre 16 (RHEL-5950) - Update 60-sensor.hwdb (RHEL-5950) - Added Tablet Teclast X98 Air 3G (C5J6) (RHEL-5950) - hwdb: remove spurious whitespace (RHEL-5950) - hwdb: Add Dell models that require ACCEL_LOCATION=base (RHEL-5950) - Fix Positivo MASTER-N1110 key toggle touchpad (RHEL-5950) - hwdb: Mark Dell platform accel sensor location to base (RHEL-5950) - hwdb: Add mount matrix for Linx 1020 (RHEL-5950) - hwdb: Add mic mute key mappings for Dell G16 Series (RHEL-5950) - hwdb: Add Chuwi Hi10X (N4120 version) iio matrix (RHEL-5950) - hwdb: Add touchpad toggle mapping for System76 Pangolin 12 (RHEL-5950) - hwdb: Prevent activation of airplane mode on HP ENVY x360 (RHEL-5950) - Update hwdb (RHEL-5950) - hwdb: update (RHEL-5950) - hwdb: update autosuspend db (RHEL-5950) - hwdb: ieee1394-unit-function: add MOTU 896 mk3 Hybrid (RHEL-5950) - Add hwdb sensor entry for Lenovo IdeaPad Duet 3 10IGL5 (82AT). (RHEL-5950) - Fix Positivo-vaio VJPW12F11X key toggle touchpad (RHEL-5950) - hwdb: Add HP Envy x360 Convertible 15-cn0xxx to existing entry (RHEL-5950) - hwdb: add override for IdeaPad5 insert key (RHEL-5950) - hwdb: update database (RHEL-5950) - hwdb: Add HP ENVY x360 2-in-1 (RHEL-5950) - hwdb: update (RHEL-5950) - hwdb: fix swapped buttons for Logitech Lift left (RHEL-5950) - Revert "hwdb: fix swapped buttons for Logitech Lift left" (RHEL-5950) - hwdb: update 70-mouse.hwdb (#26782) (RHEL-5950) - hwdb: 60-keyboard.hwdb: Fix modalias for Thinkpad X200 Tablet (#26795) (RHEL-5950) - Add rebrands of Medion Akoya notebooks/tablets (RHEL-5950) - hwdb: fix Wifi toggling for Haier 7G-Series/JWU (#25293) (#26878) (RHEL-5950) - hwdb: drop boilerplate about match patterns in two more cases (RHEL-5950) - hwdb: Fix incorrect touchpad dimensions on Thinkpad L14 Gen1 (#26937) (RHEL-5950) - hwdb: drop redundant entry (RHEL-5950) - hwdb: Fixed thumb buttons reversed on CHERRY MW 2310 (#26992) (RHEL-5950) - hwdb: Move MSI touchpad-toggle mapping to generic MSI section (RHEL-5950) - update 60-sensor.hwdb with toshiba tablet (#27103) (RHEL-5950) - hwdb: Add support for "Passion Model P612F" (RHEL-5950) - hwdb: fix ambiguous glob pattern for Lenovo machines (RHEL-5950) - hwdb: add matrix for Asus BR1100F (#27197) (RHEL-5950) - hwdb: add accelerometer mount matrix for Lenovo Yoga Tablet 2 851F/L (RHEL-5950) - hwdb: Fix rotation for BMAX Y13 (RHEL-5950) - hwdb: disable entry for Logitech USB receiver used by G502 X (RHEL-5950) - hwdb: add hardware rfkill key for Dell Latitude E6* models (#27462) (RHEL-5950) - hwdb: do not include '#' in modalias (RHEL-5950) - hwdb: add landscape IdeaPad Miix 310 sensor orientation (#27555) (RHEL-5950) - Fix Positivo CF40CM-V2 key toggle touchpad (RHEL-5950) - hwdb: fix keyboard entry for IdeapadFlex5 (#27643) (RHEL-5950) - hwdb: fix Positivo CG15D key toggle touchpad and programmable keys (#27689) (RHEL-5950) - hwdb: add support for Elgato Stream Deck mini (gen 2) (RHEL-5950) - hwdb: fix arrow keys on HP Elite Dragonfly G3 (RHEL-5950) - hwdb: add support for Jun Tab2/Dere T11 to 60-sensor.hwdb (#28092) (RHEL-5950) - hwdb: fix volume control keys on Lenovo IdeaPad Flex 5 (14ARE05) (RHEL-5950) - hwdb: Add override for headset form-factors (RHEL-5950) - hwdb : add support for Archos 101 Cesium Educ to 60-sensor.hwdb (RHEL-5950) - hwdb: drop trailing white space (RHEL-5950) - hwdb: merge multiple keyboard entries with same setting (RHEL-5950) - hwdb: make matching modalias for Archos 101 Cesium Educ more strict (RHEL-5950) - hwdb update for v246-rc1 (RHEL-5950) - update hwdb autosuspend data for v254 (RHEL-5950) - hwdb: add support for Archos 101 Cesium to 60-sensor.hwdb (#28270) (RHEL-5950) - Hwdb: Add Sanwa Direct 400-MA128 external trackpad (#28272) (RHEL-5950) - hwdb: drop POINTINGSTICK_CONST_ACCEL (RHEL-5950) - Add alternate name for MX Ergo as found on some devices (RHEL-5950) - Update hwdb (RHEL-5950) - hwdb: run update-hwdb (RHEL-5950) - hwdb: run update-hwdb (RHEL-5950) - hwdb: Mute SW rfkill keys on MSI Wind U100 (RHEL-5950) - Update 60-sensor.hwdb (#28804) (RHEL-5950) - hwdb: Added config for RCA W101SA23T1 (#29041) (RHEL-5950) - Update 60-input-id.hwdb: add TEX Shinobi (#29068) (RHEL-5950) - hwdb: keyboard: D330 FnLk toggle (RHEL-5950) - hwdb: Add Logitech G502 X (RHEL-5950) - hwdb: ieee1394-unit-function: remove superfluous Weiss Engineering DAC1 entry (RHEL-5950) - hwdb: ieee1394-unit-function: add Weiss Engineering DAC202 (Maya edition) (RHEL-5950) - hwdb: ieee1394-unit-function: add Weiss Engineering INT203 entry with older firmware (RHEL-5950) - hwdb: ieee1394-unit-function: add Weiss Engieering MAN301 (RHEL-5950) - hwdb: Add quirk for teclast x3 plus (G4K3) rotation (#29202) (RHEL-5950) - hwdb: add mic mute key mappings for Acer Predator Triton 300 SE (RHEL-5950) - hwdb: Bush tablet rotation support (#29268) (RHEL-5950) - hwdb: ieee1394-unit-function: add Miglia Technology Harmony Audio (HA02) (RHEL-5950) - add support for hp pavilion gaming 15 lid switch (#29304) (RHEL-5950) - Fix Positivo N14EP6 key toggle touchpad and programmable keys (#29448) (RHEL-5950) - add udev rule for micmute (f20) (RHEL-5950) - hwdb,rules: mark host-to-host network devices as only requiring link local addressing (RHEL-5950) - Update hwdb (RHEL-5950) - Update hwdb autosuspend rules (RHEL-5950) - Update hwdb (RHEL-5950) - hwdb: Add accelerometer data for Librem11 (#29974) (RHEL-5950) - hwdb: PNP/ACPI lists on uefi.org are now in CSV format (RHEL-5950) - Update hwdb (RHEL-5950) - hwdb: rename .html=>.csv (RHEL-5950) - hwdb/acpi-update.py: streamline python code (RHEL-5950) - hwdb: Mark Dell platform accel sensor location to base (RHEL-5950) - hwdb: add Predator PHN16-71 (RHEL-5950) - Update 60-autosuspend.hwdb (#30131) (RHEL-5950) - hwdb: update (RHEL-5950) - hwdb: ieee1394-unit-function: add Sony DVMC-DA1 (RHEL-5950) - hwdb: ieee1394-unit-function: arrangement for Sony DVMC-DA1 (RHEL-5950) - hwdb: update (RHEL-5950) - hwdb: update (RHEL-5950) - Adding Trekstor Primebook C13 rotation to 60-sensor.hwdb (#30415) (RHEL-5950) - Add three Dell platforms to sensor accel location base (RHEL-5950) - Add Bosto BT-12HD series to hwdb (RHEL-5950) - hwdb: Add override for headset form-factor for the Corsair Void Elite (RHEL-5950) - hwdb: add Teclast X98 Pro sensor info (#30859) (RHEL-5950) - hwdb: Correct display rotation on Chuwi Ubook X N4100 (#24248) (RHEL-5950) - hwdb: ieee1394-unit-function: adjustment of entries with device attributes available in Linux v6.8 (RHEL-5950) - 60-evdev.hwdb: Add support for Huion Inspiroy 2 L (#31241) (RHEL-5950) - hwdb: add resolution setting for GAOMON S620 (RHEL-5950) - hwdb: Remove version check in CH Pro Pedals rule (RHEL-5950) - hwdb: Add support for MetawillBook01 to 60-sensor.hwdb Add accel orientation quirk for the METAPHYUNI MetawillBook01 2-in-1 laptop (RHEL-5950) - hwdb: Add headset form-factor override for Xbox Wireless Dongle (RHEL-5950) - hwdb: Add support for Elgato Stream Deck Plus (RHEL-5950) - Fix: Chuwi UBook X (CWI535) screen rotation matrix (RHEL-5950) - hwdb: Add touchpad toggle mapping for Kvadra LE14U/LE15U (RHEL-5950) - hwdb: Add touchpad configuration for ThinkPad E495 (RHEL-5950) - Fix Positivo N14NPE-N and N15NPE-N key toggle touchpad and search key (RHEL-5950) - Update USB ids of hwdb (RHEL-5950) - Added resolution for Huion Kamvas Pro 19 (RHEL-5950) - hwdb: Add mapping for ACPI quickstart keys on Toshiba Z830 (RHEL-5950) - hwdb: fix Asus T300FA rotation matrix (#31973) (RHEL-5950) - Fixed resolution for pen and touchpad (RHEL-5950) - hwdb: fix missing colon (#32108) (RHEL-5950) - hwdb: update for v256 (RHEL-5950) - autosuspend: update for v256 (RHEL-5950) - Update hwdb (RHEL-5950) - Update autosuspend hwdb (RHEL-5950) - Update hwdb (RHEL-5950) - hwdb: Add a common Logitech M185/M225 mouse variant (RHEL-5950) - hwdb: Add mapping for Samsung GalaxyBook - 550X (#32616) (RHEL-5950) - hwdb: Add mapping for Xiaomi Mipad 2 bottom bezel capacitive buttons (RHEL-5950) - hwdb: ieee1394-unit-function: add Tascam IF-FW/DM mkII (RHEL-5950) - hwdb: Add a Logitech MX Master 3S (connected via Bolt Receiver) (RHEL-5950) - Fix Positivo N14EPE and N15EPE key toggle touchpad and search key (RHEL-5950) - hwdb: update Dere N12 / Juno Tablet 3 accelerometer (#32765) (RHEL-5950) - hwdb: updated Librem 11 accelerometer (#32772) (RHEL-5950) - hwdb: ID_INPUT_XYZ allows an empty string (RHEL-5950) - hwdb: ASRock LED Controller classified incorrectly as joystick due to buttons and axis (#32775) (RHEL-5950) - Update hwdb (RHEL-5950) - hwdb.d/60-keyboard.hwdb: enable Clevo quirk for model V5x0TU (RHEL-5950) - hwdb: Enable JP-IK LEAP W502's touchpad toggle key (RHEL-5950) - Update hwdb (RHEL-5950) - Update autosuspend hwdb (RHEL-5950) - hwdb: Lenovo IdeaPad Z500 Touchpad Toggle (#33039) (RHEL-5950) - hwdb: add a vmbus id for HyperV Video device (RHEL-5950) - hwdb: Add Logitech MX Master 3S Bluetooth ID (RHEL-5950) - hwdb: Lenovo 16G6IRL volume keys and friends (#33107) (RHEL-5950) - hwdb: added hwdb rules for micmute and power button on Acer Nitro AN 515-58 (#32867) (RHEL-5950) - Fix key toggle touchpad and programmable buttom for Positivo N14AP7 (RHEL-5950) - Update hwdb (RHEL-5950) - hwdb: add keyboard mappings for the Ayaneo Kun face buttons (RHEL-5950) - Update hwdb (RHEL-5950) - hwdb: add support for AIPTEK Media Tablet Ultimate (#33371) (RHEL-5950) - hwdb: add scancodes for AYANEO devices (#33378) (RHEL-5950) - Add OrangePi NEO Scancodes (RHEL-5950) - hwdb: Fix Logitech G915 TKL (Bluetooth) appearing as a mouse (RHEL-5950) - hwdb: fix keyboard of RedmiBook Pro 15 2022 (#33465) (RHEL-5950) - Added mised EVDEV_ABS_35 & EVDEV_ABS_36 for GAOMON s620 (RHEL-5950) - hwdb: Add some HP IR cameras (RHEL-5950) - hwdb: add more AV controllers (RHEL-5950) - Fix key toggle touchpad button for multilaser ul154 (#33630) (RHEL-5950) - hwdb: Added StarLabs StarLite position sensor mapping (RHEL-5950) - 70-mouse.hwdb: Added Glorious Model O DPI (RHEL-5950) - Update 60-sensor.hwdb (RHEL-5950) - Add MSI Claw AT Keyboard Scancodes. (RHEL-5950) - Add or fix mount matrix for multiple handhelds. (#33586) (RHEL-5950) - Revert "hwdb: Added StarLabs StarLite position sensor mapping" (RHEL-5950) - hwdb: fix accelerometer mount matrix for Aquarius Cmp NS483 (RHEL-5950) - hwdb: add backslash and touchpad toggle mapping for Aquarius Cmp NS483 (RHEL-5950) - hwdb: Add mic mute key mapping for Dell Pro Rugged series (RHEL-5950) - hwdb: fix MXC6655 accelerometer mount matrix for Aquarius Cmp NS483 (RHEL-5950) - add udev rules for trezor hw wallet devices (RHEL-5950) - hwdb: add axis range corrections for the Lenovo Thinkpad E16 (RHEL-5950) - hwdb: fix auto rotate on Asus Q551LB (#33921) (RHEL-5950) - udev: add hwdb execution for hidraw subsystem devices (RHEL-5950)- add Requires(post) on selinux-policy (RHEL-46339)- enable FIDO2 support (RHEL-36276) - netif-naming-scheme: disable NAMING_BRIDGE_MULTIFUNCTION_SLOT (RHEL-44630) - netif-naming-scheme: make actually possible to use rhel-9.5 scheme (RHEL-44630) - generator: "uninline" generator_open_unit_file and generator_add_symlink (RHEL-33436) - ci: add support for rhel-only parameters (RHEL-30372)- tools: fix the file name that "meson setup" generates (RHEL-30372) - tools: explicitly specify "setup" subcommand (RHEL-30372) - fuzz: pass -Dc_args=/-Dcpp_args= to fuzzer targets (RHEL-30372) - fuzz: don't panic without a C++ compiler (RHEL-30372) - meson: use ternary op for brevity (RHEL-30372)- ci(src-git): add RHEL-9.1 and RHEL-9.1.z to allowed versions (RHEL-30372) - libsystemd: link with '-z nodelete' (RHEL-6589) - basic/utf8: make utf8_encoded_to_unichar() return length of the codepoint (RHEL-31219) - test-gunicode: add new test to show that unichar_iswide() is borked (RHEL-31219) - string-util: pass ANSI sequences through unchanged (RHEL-31219) - cryptsetup: do not assert when unsealing token without salt (RHEL-38864) - cryptsetup: check the existence of salt by salt_size > 0 (RHEL-38864) - core/mount: if umount(8) fails but mount disappeared, assume success (RHEL-13159) - Drop log level of header limits log message (RHEL-33890) - journal: do not rotate unrelated journal files when full or corrupted (RHEL-33890) - man: suffix --unit with an equal sign, since it expects an argument (RHEL-31070) - shared: move uid-alloc-range.[ch] from src/shared/ → src/basic/ (RHEL-31070) - journald: move uid_for_system_journal() to uid-alloc-range.h (RHEL-31070) - sd-journal: when SD_JOURNAL_CURRENT_USER is set, and called from system UID, imply SD_JOURNAL_SYSTEM (RHEL-31070) - man: document that journalctl --user requires Storage=persistent (RHEL-31070) - fix: prefix of dmesg pstore files (RHEL-20322) - backport new mkosi (RHEL-27512) - test: Skip various tests when /sys is not mounted (RHEL-27512) - string-util: introduce ascii_ishex() (RHEL-27512) - sd-id128: several cleanups (RHEL-27512) - sd-id128: make id128_read() or friends return -ENOPKG when the file contents is "uninitialized" (RHEL-27512) - test: add tests for "uninitialized" string handling by id128_read_fd() (RHEL-27512) - man: mention sd_id128_get_machine() or friend may return -ENOPKG (RHEL-27512) - sd-id128: make sd_id128_get_boot() and friend return -ENOMEDIUM (RHEL-27512) - sd-id128: make sd_id128_get_boot() and friend return -ENOSYS when /proc/ is not mounted (RHEL-27512) - man: mention that sd_id128_get_boot() and friend may return -ENOSYS (RHEL-27512) - sd-id128: fold do_sync flag into Id128FormatFlag (RHEL-27512) - sd-id128: make sd_id128_get_machine() or friends return -EUCLEAN when an ID is in an invalid format (RHEL-27512) - sd-id128: allow sd_id128_get_machine() and friend to be called with NULL (RHEL-27512) - sd-id128: also refuse an empty invocation ID (RHEL-27512) - man: update documents for sd_id128_get_invocation() (RHEL-27512) - test-id128: simplify machine-id check (RHEL-27512) - test-fs-util: skip part of test_chase_symlinks if machine-id is not initialized (RHEL-27512) - test-unit-name: simplify machine-id check (RHEL-27512) - test-load-fragment: simplify machine-id check (RHEL-27512) - journal: skip part of test-journal-interleaving if no machine-id exists (RHEL-27512) - test: skip journal tests without valid /etc/machine-id (RHEL-27512) - test-recurse-dir: work around nftw() ignoring symlinks() (RHEL-27512) - test: Skip test-recurse-dir on overlayfs (RHEL-27512) - test-specifier: Ignore -ENOPKG from specifier_printf() (RHEL-27512) - test-execute: Skip when /sys is read-only (RHEL-27512) - kernel-install: Make sure KERNEL_INSTALL_BYPASS is disabled in tests (RHEL-27512) - tools: make sure $KERNEL_INSTALL_BYPASS is disabled when checking help (RHEL-27512) - test-execute: drop capabilities when testing with user manager (RHEL-27512) - tmpfiles: Add merge support for copy files action (RHEL-27512) - generator: add generator_open_unit_file_full to allow creating temporary units (RHEL-27512) - network-generator: rewrite unit if it already exists and its content changed (RHEL-27512) - ci: drop super-linter's shellcheck (RHEL-27512) - mkosi: make sure we build & use RHEL 9 stuff (RHEL-27512) - ci: backport mkosi CI configuration from upstream (RHEL-27512) - mkosi: explicitly enroll SecureBoot keys (RHEL-27512) - test-execute: also mount tmpfs on /dev/shm (RHEL-27512) - mkosi: fix UKI addons test (RHEL-27512) - Revert "mkosi: Disable cmdline addon test for now" (RHEL-27512) - Revert "mkosi: Don't fail on systemd-vconsole-setup.service failure for now" (RHEL-27512) - mkosi: make shellcheck happy (RHEL-27512) - mkosi: use pesign for signing UKI addons (RHEL-27512) - test: copy out the necessary test data before we start overmounting stuff (RHEL-27512) - ci: make the build dir accessible when running w/o privileges (RHEL-27512) - ci: explicitly change oom-{score}-adj before running tests (RHEL-27512) - ratelimit: add ratelimit_left helper (RHEL-35703) - manager: restrict Dump*() to privileged callers or ratelimit (RHEL-35703) - ci: define `runas` function inline (RHEL-35703) - Drop /dev test in test-mountpoint-util (RHEL-30372) - core/manager: export manager_dbus_is_running (RHEL-40878) - core: refuse dbus activation if dbus is not running (RHEL-40878) - core: only refuse Type=dbus service enqueuing if dbus has stop job (RHEL-40878) - Revert "core/manager: export manager_dbus_is_running" and partially "core: refuse dbus activation if dbus is not running" (RHEL-40878) - manager: fix reloading in reload-or-restart --marked (RHEL-40878) - rpm: add `systemd_postun_with_reload` and `systemd_user_postun_with_reload` (RHEL-40878) - rpm: add `systemd_user_daemon_reexec` (RHEL-40878)- spec: return selinux dependencies (RHEL-35732)- ci: update actions/upload-artifact to v4 (RHEL-30372) - journal-remote: code is of type enum MHD_RequestTerminationCode (RHEL-30372) - resolve: dns_server_feature_level_*_string type is DnsServerFeatureLevel (RHEL-30372) - shared|install: Use InstallChangeType consistently (RHEL-30372) - test: temporarily disable coredumps in testsuite-17.03.sh (RHEL-30372) - ci: update manpage deployment workflow (RHEL-30372) - bootspec: fix null-dereference-read (RHEL-36284) - units: don't install pcrphase-related units without gnu-efi (RHEL-33384) - kernel-install: fix uki-copy deinstall (RHEL-36505) - ci(packit): explicitly clone `c9s` branch (RHEL-30372)- execute: Pass AT_FDCWD instead of -1 (RHEL-31783) - ci(src-git): update list of supported products (RHEL-30372) - coredump: by default process and store core files up to 1GiB (RHEL-15501) - coredump: keep core files for two weeks (RHEL-15501) - ukify: make the test happy with the latest OpenSSL (RHEL-30372) - test_ukify: use raw string for the regex (RHEL-30372) - coredump: generate stacktraces also for processes running in containers w/o coredump forwarding (RHEL-29430) - test: add a couple of tests for systemd-coredump (RHEL-29430) - test: don't expand the subshell expression prematurely (RHEL-29430) - coredump filter: fix stack overflow with =all (RHEL-29430) - coredump filter: add mask for 'all' using UINT32_MAX, not UINT64_MAX (RHEL-29430) - test: add coverage for CoredumpFilter=all (RHEL-29430) - test: rotate journal before storing coredumps (RHEL-29430) - test: sync with the fake binary before killing it (RHEL-29430) - test: check coredump handling in containers & namespaces (RHEL-29430)- rebase rhel-net-naming-sysattrs to v0.5- bootctl: rework random seed logic to use open_mkdir_at() and openat() (RHEL-16952) - bootctl: properly sync fs before/after moving random seed file into place (RHEL-16952) - bootctl: when updating EFI random seed file, hash old seed with new one (RHEL-16952) - sha256: add helper than hashes a buffer *and* its size (RHEL-16952) - random-seed: don't refresh EFI random seed from random-seed.c anymore (RHEL-16952) - bootctl: downgrade graceful messages to LOG_NOTICE (RHEL-16952) - units: rename/rework systemd-boot-system-token.service → systemd-boot-random-seed.service (RHEL-16952) - bootctl: split out setting of system token into function of its own (RHEL-16952)- resolved: limit the number of signature validations in a transaction (RHEL-26643) - resolved: reduce the maximum nsec3 iterations to 100 (RHEL-26643) - efi: alignment of the PE file has to be at least 512 bytes (RHEL-26133) - units: change assert to condition to skip running in initrd/os (RHEL-16182) - ci: add configuration for regression sniffer GA (RHEL-1086)- units: fix typo in Condition in systemd-boot-system-token (RHEL-16952)- random-seed: shorten a bit may_credit() (RHEL-16952) - random-seed: make one more use of random_write_entropy() (RHEL-16952) - random-seed: use getopt() (RHEL-16952) - random-seed: make the logic to calculate the number of bytes read from the random seed file clearer (RHEL-16952) - random-seed: no need to pass 'mode' argument when opening /dev/urandom (RHEL-16952) - random-seed: split out run() (RHEL-16952) - random_seed: minor improvement in run() (RHEL-16952) - random-seed: downgrade some messages (RHEL-16952) - random-seed: clarify one comment (RHEL-16952) - random-seed: make sure to load machine id even if the seed file is missing (RHEL-16952) - chase-symlinks: add new flag for prohibiting any following of symlinks (RHEL-16952) - bootctl,bootspec: make use of CHASE_PROHIBIT_SYMLINKS whenever we access the ESP/XBOOTLDR (RHEL-16952) - boot: implement kernel EFI RNG seed protocol with proper hashing (RHEL-16952) - random-seed: refresh EFI boot seed when writing a new seed (RHEL-16952) - random-seed: handle post-merge review nits (RHEL-16952) - boot: do not truncate random seed file (RHEL-16952) - bootctl: install system token on virtualized systems (RHEL-16952) - boot: remove random-seed-mode (RHEL-16952) - stub: handle random seed like sd-boot does (RHEL-16952) - efi: add efi_guid_equal() helper (RHEL-16952) - efi: add common implementation for loop finding EFI configuration tables (RHEL-16952) - boot: Detect hypervisors using SMBIOS info (RHEL-16952) - boot: Skip soft-brick warning when in a VM (RHEL-16952) - boot: Replace UINTN with size_t (RHEL-16952) - boot: Use unsigned for beep counting (RHEL-16952) - boot: Use unicode literals (RHEL-16952) - macro: add generic IS_ALIGNED32() anf friends (RHEL-16952) - meson: use 0|1 for SD_BOOT (RHEL-16952) - boot: Add printf functions (RHEL-16952) - boot: Use printf for error logging (RHEL-16952) - boot: Introduce log_wait (RHEL-16952) - boot: Add log_trace debugging helper (RHEL-16952) - tree-wide: Use __func__ in asserts (RHEL-16952) - boot: Drop use of xpool_print/SPrint (RHEL-16952) - boot: Drop use of Print (RHEL-16952) - boot: Rework GUID handling (RHEL-16952) - efi-string: Fix strchr() null byte handling (RHEL-16952) - efi-string: Add startswith8() (RHEL-16952) - efi-string: Add efi_memchr() (RHEL-16952) - vmm: Add more const (RHEL-16952) - vmm: Add smbios_find_oem_string() (RHEL-16952) - stub: Read extra kernel command line items from SMBIOS (RHEL-16952) - vmm: Modernize get_smbios_table() (RHEL-16952) - stub: measure SMBIOS kernel-cmdline-extra in PCR12 (RHEL-16952) - efi: support passing empty cmdline to mangle_stub_cmdline() (RHEL-16952) - efi: set EFIVAR to stop Shim from uninstalling its protocol (RHEL-16952) - ukify: use empty stub for addons (RHEL-16952) - stub: allow loading and verifying cmdline addons (RHEL-16952) - TODO: remove fixed item (RHEL-16952) - fix: do not check/verify slice units if recursive errors are to be ignored (RHEL-1086)- test: merge TEST-20-MAINPIDGAMES into TEST-07-PID1 (fixup) (RHEL-1086) - test: use the default nsec3-iterations value (RHEL-1086) - test: explicitly set nsec3-iterations to 0 (RHEL-1086) - core: mount namespaces: Remove auxiliary bind mounts directory after unit termination (RHEL-19483) - ci: deploy systemd man to GitHub Pages (RHEL-1086) - doc: add missing `` to `systemd.net-naming-scheme.xml` (RHEL-7026) - man: reorder the list of supported naming schemes (RHEL-7026) - tree-wide: fix return value handling of base64mem() (RHEL-16182) - Consolidate various TAKE_* into TAKE_GENERIC(), add TAKE_STRUCT() (RHEL-16182) - pcrphase: add $SYSTEMD_PCRPHASE_STUB_VERIFY env var for overriding stub check (RHEL-16182) - pcrphase: gracefully exit if TPM2 support is incomplete (RHEL-16182) - tpm2-util: split out code that derives "good" TPM2 banks into an strv from pcrphase and generalize it in tpm2-util.c (RHEL-16182) - tpm2-util: split out code that extends a PCR from pcrphase (RHEL-16182) - tpm2-util: optionally do HMAC in tpm2_extend_bytes() in case we process sensitive data (RHEL-16182) - cryptsetup: add tpm2-measure-pcr= and tpm2-measure-bank= crypttab options (RHEL-16182) - man: document the new crypttab measurement options (RHEL-16182) - gpt-auto-generator: automatically measure root/var volume keys into PCR 15 (RHEL-16182) - blkid-util: define enum for blkid_do_safeprobe() return values (RHEL-16182) - pcrphase: make tool more generic, reuse for measuring machine id/fs uuids (RHEL-16182) - units: measure /etc/machine-id into PCR 15 during early boot (RHEL-16182) - generators: optionally, measure file systems at boot (RHEL-16182) - tpm2: add common helper for checking if we are running on UKI with TPM measurements (RHEL-16182) - man: document new machine-id/fs measurement options (RHEL-16182) - test: add simple integration test for checking PCR extension works as it should (RHEL-16182) - update TODO (RHEL-16182) - cryptsetup: retry TPM2 unseal operation if it fails with TPM2_RC_PCR_CHANGED (RHEL-16182) - boot: Simplify object erasure (RHEL-16182) - tree-wide: use CLEANUP_ERASE() at various places (RHEL-16182) - dlfcn: add new safe_dclose() helper (RHEL-16182) - tpm2: rename tpm2 alg id<->string functions (RHEL-16182) - tpm2: rename struct tpm2_context to Tpm2Context (RHEL-16182) - tpm2: use ref counter for Tpm2Context (RHEL-16182) - tpm2: use Tpm2Context* instead of ESYS_CONTEXT* (RHEL-16182) - tpm2: add Tpm2Handle with automatic cleanup (RHEL-16182) - tpm2: simplify tpm2_seal() blob creation (RHEL-16182) - tpm2: add salt to pin (RHEL-16182) - basic/macro: add macro to iterate variadic args (RHEL-16182) - test/test-macro: add tests for FOREACH_VA_ARGS() (RHEL-16182) - basic/bitfield: add bitfield operations (RHEL-16182) - test/test-bitfield: add tests for bitfield macros (RHEL-16182) - tpm2: add tpm2_get_policy_digest() (RHEL-16182) - tpm2: add TPM2_PCR_VALID() (RHEL-16182) - tpm2: add/rename functions to manage pcr selections (RHEL-16182) - test/test-tpm2: add tests for pcr selection functions (RHEL-16182) - tpm2: add tpm2_pcr_read() (RHEL-16182) - tpm2: move openssl-required ifdef code out of policy-building function (RHEL-16182) - tpm2: add tpm2_is_encryption_session() (RHEL-16182) - tpm2: move policy building out of policy session creation (RHEL-16182) - tpm2: add support for a trusted SRK (RHEL-16182) - tpm2: fix nits from PR #26185 (RHEL-16182) - tpm2: replace magic number (RHEL-16182) - tpm2: add tpm2_digest_*() functions (RHEL-16182) - tpm2: replace hash_pin() with tpm2_digest_*() functions (RHEL-16182) - tpm2: add tpm2_set_auth() (RHEL-16182) - tpm2: add tpm2_get_name() (RHEL-16182) - tpm2: rename pcr_values_size vars to n_pcr_values (RHEL-16182) - tpm2: add tpm2_policy_pcr() (RHEL-16182) - tpm2: add tpm2_policy_auth_value() (RHEL-16182) - tpm2: add tpm2_policy_authorize() (RHEL-16182) - tpm2: use tpm2_policy_authorize() (RHEL-16182) - tpm2: add tpm2_calculate_sealing_policy() (RHEL-16182) - tpm: remove external calls to dlopen_tpm2() (RHEL-16182) - tpm2: remove all extern tpm2-tss symbols (RHEL-16182) - tpm2: add tpm2_get_capability(), tpm2_cache_capabilities(), tpm2_capability_pcrs() (RHEL-16182) - tpm2: verify symmetric parms in tpm2_context_new() (RHEL-16182) - tpm2: replace _cleanup_tpm2_* macros with _cleanup_() (RHEL-16182) - tpm2-util: use compound initialization when allocating tpm2 objects (RHEL-16182) - tpm2: add tpm2_get_capability_handle(), tpm2_esys_handle_from_tpm_handle() (RHEL-16182) - tpm2: add tpm2_read_public() (RHEL-16182) - tpm2: add tpm2_get_legacy_template() and tpm2_get_srk_template() (RHEL-16182) - tpm2: add tpm2_load() (RHEL-16182) - tpm2: add tpm2_load_external() (RHEL-16182) - tpm2: move local vars in tpm2_seal() to point of use (RHEL-16182) - tpm2: replace magic number in hmac_sensitive initialization (RHEL-16182) - tpm2: add tpm2_create() (RHEL-16182) - tpm2: replace tpm2_capability_pcrs() macro with direct c->capaiblity_pcrs use (RHEL-16182) - basic/alloc-util: add greedy_realloc_append() (RHEL-16182) - tpm2: cache the TPM supported commands, add tpm2_supports_command() (RHEL-16182) - tpm2: cache TPM algorithms (RHEL-16182) - tpm2: add tpm2_persist_handle() (RHEL-16182) - tpm2: add tpm2_get_or_create_srk() (RHEL-16182) - tpm2: move local vars in tpm2_unseal() to point of use (RHEL-16182) - tpm2: remove tpm2_make_primary() (RHEL-16182) - tpm2: use CreatePrimary() to create primary keys instead of Create() (RHEL-16182) - cryptsetup: downgrade a bunch of log messages that to LOG_WARNING (RHEL-16182) - boot/measure: replace TPM PolicyPCR session with calculation (RHEL-16182) - core: imply DeviceAllow=/dev/tpmrm0 with LoadCredentialEncrypted (RHEL-16182) - added more test cases (RHEL-16182) - test: fixed negative checks in TEST-70-TPM2. Use in-line error handling rather than redirections. Follow up on #27020 (RHEL-16182) - systemd-cryptenroll: add string aliases for tpm2 PCRs Fixes #26697. RFE. (RHEL-16182) - cryptenroll: fix an assertion with weak passwords (RHEL-16182) - man/systemd-cryptenroll: update list of PCRs, link to uapi docs (RHEL-16182) - tpm2: add debug logging to functions converting hash or asym algs to/from strings or ids (RHEL-16182) - tpm2: add tpm2_hash_alg_to_size() (RHEL-16182) - tpm2: change tpm2_tpm*_pcr_selection_to_mask() to return mask (RHEL-16182) - tpm2: add more helper functions for managing TPML_PCR_SELECTION and TPMS_PCR_SELECTION (RHEL-16182) - tpm2: add Tpm2PCRValue struct and associated functions (RHEL-16182) - tpm2: move declared functions in header lower down (RHEL-16182) - tpm2: declare tpm2_log_debug_*() functions in tpm2_util.h (RHEL-16182) - tpm2: change tpm2_calculate_policy_pcr(), tpm2_calculate_sealing_policy() to use Tpm2PCRValue array (RHEL-16182) - tpm2: change tpm2_parse_pcr_argument() parameters to parse to Tpm2PCRValue array (RHEL-16182) - tpm2: add TPM2B_*_MAKE(), TPM2B_*_CHECK_SIZE() macros (RHEL-16182) - tpm2: add tpm2_pcr_read_missing_values() (RHEL-16182) - openssl: add openssl_pkey_from_pem() (RHEL-16182) - openssl: add rsa_pkey_new(), rsa_pkey_from_n_e(), rsa_pkey_to_n_e() (RHEL-16182) - openssl: add ecc_pkey_new(), ecc_pkey_from_curve_x_y(), ecc_pkey_to_curve_x_y() (RHEL-16182) - test: add DEFINE_HEX_PTR() helper function (RHEL-16182) - openssl: add test-openssl (RHEL-16182) - tpm2: add functions to convert TPM2B_PUBLIC to/from openssl pkey or PEM (RHEL-16182) - tpm2: move policy calculation out of tpm2_seal() (RHEL-16182) - man: update systemd-cryptenroll man page with details on --tpm2-pcrs format change (RHEL-16182) - tpm2: update TEST-70-TPM2 to test passing PCR value to systemd-cryptenroll (RHEL-16182) - tpm2: change *alg_to_* functions to use switch() (RHEL-16182) - tpm2: lowercase TPM2_PCR_VALUE[S]_VALID functions (RHEL-16182) - tpm2: move cast from lhs to rhs in uint16_t/int comparison (RHEL-16182) - tpm2: in validator functions, return false instead of assert failure (RHEL-16182) - tpm2: in tpm2_pcr_values_valid() use FOREACH_ARRAY() (RHEL-16182) - tpm2: use SIZE_MAX instead of strlen() for unhexmem() (RHEL-16182) - tpm2: put !isempty() check inside previous !isempty() check (RHEL-16182) - tpm2: simplify call to asprintf() (RHEL-16182) - tpm2: check pcr value hash != 0 before looking up hash algorithm name (RHEL-16182) - tpm2: use strempty() (RHEL-16182) - tpm2: split TPM2_PCR_VALUE_MAKE() over multiple lines (RHEL-16182) - tpm2: remove ret_ prefix from input/output params (RHEL-16182) - tpm2: use memcpy_safe() instead of memcpy() (RHEL-16182) - openssl: use new(char, size) instead of malloc(size) (RHEL-16182) - tpm2: use table for openssl<->tpm2 ecc curve id mappings (RHEL-16182) - tpm2: use switch() instead of if-else (RHEL-16182) - tpm2: make logging level consistent at debug for some functions (RHEL-16182) - tpm2: remove unnecessary void* cast (RHEL-16182) - tpm2: add tpm2_pcr_values_has_(any|all)_values() functions (RHEL-16182) - tpm2: wrap (7) in UINT32_C() (RHEL-16182) - cryptenroll: change man page example to remove leading 0x and lowercase hex (RHEL-16182) - openssl: add log_openssl_errors() (RHEL-16182) - openssl: add openssl_digest_size() (RHEL-16182) - openssl: add openssl_digest_many() (RHEL-16182) - openssl: replace openssl_hash() with openssl_digest() (RHEL-16182) - openssl: add openssl_hmac_many() (RHEL-16182) - openssl: add rsa_oaep_encrypt_bytes() (RHEL-16182) - openssl: add kdf_kb_hmac_derive() (RHEL-16182) - openssl: add openssl_cipher_many() (RHEL-16182) - openssl: add ecc_edch() (RHEL-16182) - openssl: add kdf_ss_derive() (RHEL-16182) - dlfcn-util: add static asserts ensuring our sym_xyz() func ptrs match the types from the official headers (RHEL-16182) - tpm2: add tpm2_marshal_blob() and tpm2_unmarshal_blob() (RHEL-16182) - tpm2: add tpm2_serialize() and tpm2_deserialize() (RHEL-16182) - tpm2: add tpm2_index_to_handle() and tpm2_index_from_handle() (RHEL-16182) - tpm2: fix build failure without openssl (RHEL-16182) - tpm2-util: look for tpm2-pcr-signature.json directly in /.extra/ (RHEL-16182) - tpm2: downgrade most log functions from error to debug (RHEL-16182) - tpm2: handle older tpm enrollments without a saved pcr bank (RHEL-16182) - tpm2: allow tpm2_make_encryption_session() without bind key (RHEL-16182) - tpm2: update tpm2 test for supported commands (RHEL-16182) - tpm2: use GREEDY_REALLOC_APPEND() in tpm2_get_capability_handles(), cap max value (RHEL-16182) - tpm2: change tpm2_unseal() to accept Tpm2Context instead of device string (RHEL-16182) - tpm2: cache TPM's supported ECC curves (RHEL-16182) - tpm2-util: make tpm2_marshal_blob()/tpm2_unmarshal_blob() static (RHEL-16182) - tpm2-util: make tpm2_read_public() static, as we use it only internally in tpm2-util.c (RHEL-16182) - cryptenroll: allow specifying handle index of key to use for sealing (RHEL-16182) - test: add tests for systemd-cryptenroll --tpm2-seal-key-handle (RHEL-16182) - tpm2: do not call Esys_TR_Close() (RHEL-16182) - tpm2: don't use GetCapability() to check transient handles (RHEL-16182) - tpm2-util: pick up a few new symbols from tpm2-tss (RHEL-16182) - tpm2: add tpm2_get_pin_auth() (RHEL-16182) - tpm2: instead of adjusting authValue trailing 0(s), trim them as required by tpm spec (RHEL-16182) - tpm2-util: rename tpm2_calculate_name() → tpm2_calculate_pubkey_name() (RHEL-16182) - cryptenroll: do not implicitly verify with default tpm policy signature (RHEL-16182) - cryptenroll: drop deadcode (RHEL-16182) - tpm2: allow using tpm2_get_srk_template() without tpm (RHEL-16182) - tpm2: add test to verify srk templates (RHEL-16182) - tpm2: add tpm2_sym_alg_*_string() and tpm2_sym_mode_*_string() (RHEL-16182) - tpm2: add tpm2_calculate_seal() and helper functions (RHEL-16182) - tpm2: update test-tpm2 for tpm2_calculate_seal() (RHEL-16182) - cryptenroll: add support for calculated TPM2 enrollment (RHEL-16182) - test: update TEST-70 with systemd-cryptenroll calculated TPM2 enrollment (RHEL-16182) - openssl-util: avoid freeing invalid pointer (RHEL-16182) - creds-util: check for CAP_DAC_READ_SEARCH (RHEL-16182) - creds-util: do not try TPM2 if there is not support (RHEL-16182) - creds-util: merge the TPM2 detection for initrd (RHEL-16182) - cryptenroll: fix a memory leak (RHEL-16182) - sd-journal: introduce sd_journal_step_one() (RHEL-11591) - test: modernize test-journal-flush (RHEL-11591) - journal-file-util: do not fail when journal_file_set_offline() called more than once (RHEL-11591) - journal-file-util: Prefer punching holes instead of truncating (RHEL-11591) - test: add reproducer for SIGBUS issue caused by journal truncation (RHEL-11591)- spec: update rhel-net-naming-sysattrs to v0.4 (RHEL-22278)- spec: add new package with RHEL-specific network naming sysattrs (RHEL-22278)- ci: use source-git-automation composite Action (RHEL-1086) - ci: increase the cron interval to 45 minutes (RHEL-1086) - ci: add all Z-Stream versions to array of allowed versions (RHEL-1086) - udev/net_id: introduce naming scheme for RHEL-9.4 (RHEL-22427) - basic/errno-util: add wrappers which only accept negative errno (RHEL-22443) - errno-util: allow ERRNO_IS_* to accept types wider than int (RHEL-22443) - udev: add new builtin net_driver (RHEL-22443) - udev/net_id: introduce naming scheme for RHEL-8.10 (RHEL-22427)- logind: don't setup idle session watch for lock-screen and greeter (RHEL-20757) - logind: don't make idle action timer accuracy more coarse than timeout (RHEL-20757) - logind: do TTY idle logic only for sessions marked as "tty" (RHEL-20757) - meson: Properly install 90-uki-copy.install (RHEL-16354)- Revert "man: mention System Administrator's Guide in systemctl manpage" (RHEL-19436) - man: mention RHEL documentation in systemctl's man page (RHEL-19436) - resolved: actually check authenticated flag of SOA transaction (RHEL-6216) - udev: allow/denylist for reading sysfs attributes when composing a NIC name (RHEL-1317) - man: environment value -> udev property (RHEL-1317)- meson: fix installation of ukify (RHEL-13199) - sd-id128: introduce id128_hash_ops_free (RHEL-5988) - udevadm-trigger: allow to fallback without synthetic UUID only first time (RHEL-5988) - udevadm-trigger: settle with synthetic UUID if the kernel support it (RHEL-5988) - udevadm-trigger: also check with the original syspath if device is renamed (RHEL-5988) - test: use 'udevadm trigger --settle' even if device is renamed (RHEL-5988) - sd-event: don't mistake USEC_INFINITY passed in for overflow (RHEL-6090) - pid1: rework service_arm_timer() to optionally take a relative time value (RHEL-6090) - manager: add one more assert() (RHEL-6090) - pid1: add new Type=notify-reload service type (RHEL-6090) - man: document Type=notify-reload (RHEL-6090) - pid1: make sure we send our calling service manager RELOADING=1 when reloading (RHEL-6090) - networkd: implement Type=notify-reload protocol (RHEL-6090) - udevd: implement the full Type=notify-reload protocol (RHEL-6090) - logind: implement Type=notify-reload protocol properly (RHEL-6090) - notify: add --stopping + --reloading switches (RHEL-6090) - test: add Type=notify-reload testcase (RHEL-6090) - update TODO (RHEL-6090) - core: check for SERVICE_RELOAD_NOTIFY in manager_dbus_is_running (RHEL-6090)- udev/net: allow new link name as an altname before renaming happens (RHEL-5988) - sd-netlink: do not swap old name and alternative name (RHEL-5988) - sd-netlink: restore altname on error in rtnl_set_link_name (RHEL-5988) - udev: attempt device rename even if interface is up (RHEL-5988) - sd-netlink: add a test for rtnl_set_link_name() (RHEL-5988) - test-network: add a test for renaming device to current altname (RHEL-5988) - udev: align table (RHEL-5988) - sd-device: make device_set_syspath() clear sysname and sysnum (RHEL-5988) - sd-device: do not directly access entry in sd-device object (RHEL-5988) - udev: move device_rename() from device-private.c (RHEL-5988) - udev: restore syspath and properties on failure (RHEL-5988) - sd-device: introduce device_get_property_int() (RHEL-5988) - core/device: downgrade log level for ignored errors (RHEL-5988) - core/device: ignore failed uevents (RHEL-5988) - test: add tests for failure in renaming network interface (RHEL-5988) - test: modernize test-netlink.c (RHEL-5988) - test-netlink: use dummy interface to test assigning new interface name (RHEL-5988) - udev: use SYNTHETIC_ERRNO() at one more place (RHEL-5988) - udev: make udev_builtin_run() take UdevEvent* (RHEL-5988) - udev/net: verify ID_NET_XYZ before trying to assign it as an alternative name (RHEL-5988) - udev/net: generate new network interface name only on add uevent (RHEL-5988) - sd-netlink: make rtnl_set_link_name() optionally append alternative names (RHEL-5988) - udev/net: assign alternative names only on add uevent (RHEL-5988) - test: add tests for renaming network interface (RHEL-5988) - Backport ukify from upstream (RHEL-13199) - bootctl: make --json output normal json (RHEL-13199) - test: replace readfp() with read_file() (RHEL-13199) - stub/measure: document and measure .uname UKI section (RHEL-13199) - boot: measure .sbat section (RHEL-13199) - Revert "test_ukify: no stinky root needed for signing" (RHEL-13199) - ukify: move to /usr/bin and mark as non non-experimental (RHEL-13199) - kernel-install: Add uki layout (RHEL-16354) - kernel-install: remove math slang from man page (RHEL-16354) - kernel-install: handle uki installs automatically (RHEL-16354) - 90-uki-copy.install: create $BOOT/EFI/Linux directory if needed (RHEL-16354) - kernel-install: Log location that uki is installed in (RHEL-16354) - bootctl: fix errno logging (RHEL-16354) - bootctl: add kernel-identity command (RHEL-16354) - bootctl: add kernel-inspect command (RHEL-16354) - bootctl: add kernel-inspect to --help text (RHEL-16354) - bootctl: drop full stop at end of --help texts (RHEL-16354) - bootctl: change section title for kernel image commands (RHEL-16354) - bootctl: remove space that should not be there (RHEL-16354) - bootctl: kernel-inspect: print os info (RHEL-16354) - bootctl-uki: several coding style fixlets (RHEL-16354) - tree-wide: unify how we pick OS pretty name to display (RHEL-16354) - bootctl-uki: several follow-ups for inspect_osrel() (RHEL-16354) - bootctl: Add missing %m (RHEL-16354) - bootctl: tweak DOS header magic check (RHEL-16354)- ci: Extend source-git-automation (RHEL-1086) - netif-naming-scheme: let's also include rhel8 schemes (RHEL-7026) - systemd-analyze: Add table and JSON output implementation to plot (RHEL-5070) - systemd-analyze: Update man/systemd-analyze.xml with Plot JSON and table (RHEL-5070) - systemd-analyze: Add tab complete logic for plot (RHEL-5070) - systemd-analyze: Add --json=, --table and -no-legend tests for plot (RHEL-5070) - ci: enable source-git automation to validate reviews and ci results (RHEL-1086) - ci: remove Mergify config - replaced by Pull Request Validator (RHEL-1086) - ci: enable auto-merge GH Action (RHEL-1086) - ci: add missing permissions (RHEL-1086) - ci: `permissions: write-all` (RHEL-1086) - ci(lint): exclude `.in` files from ShellCheck lint (RHEL-1086) - udev: raise RLIMIT_NOFILE as high as we can (RHEL-11040)- doc: add downstream CONTRIBUTING document (#2170883) - doc: improve CONTRIBUTING document (#2170883) - doc: use link with prefilled Jira issue (#2170883) - docs: link downstream CONTRIBUTING in README (#2170883) - bpf: fix restrict_fs on s390x (#2230364) - udev/net_id: use naming scheme for RHEL-9.3 (#2231845) - core/timer: Always use inactive_exit_timestamp if it is set (#2211065) - timer: Use dual_timestamp_is_set() in one more place (#2211065) - loginctl: list-users: also show state (#2209912) - loginctl: list-sessions: minor modernization (#2209912) - loginctl: list-sessions: also show state (#2209912) - test: add test for state in loginctl list-{users,sessions} (#2209912) - test: add a missing session activation (#2209912) - test: extend test for loginctl list-* (#2209912) - loginctl: shorten variable name (#2209912) - loginctl: use bus_map_all_properties (#2209912) - loginctl: show session idle status in list-sessions (#2209912) - loginctl: some modernizations (#2209912) - loginctl: list-sessions: fix timestamp for idle hint (#2209912) - loginctl: list-users: use bus_map_all_properties (#2209912) - loginctl: also show idle hint in session-status (#2209912) - memory-util: make ArrayCleanup passed to array_cleanup() const (#2190226) - static-destruct: several cleanups (#2190226) - static-destruct: introduce STATIC_ARRAY_DESTRUCTOR_REGISTER() (#2190226) - macro: support the case that the number of elements has const qualifier (#2190226) - shared/generator: apply similar config reordering of generated units (#2190226) - nulstr-util: make ret_size in strv_make_nulstr() optional (#2190226) - generator: teach generator_add_symlink() to instantiate specified unit (#2190226) - units: rework growfs units to be just a regular unit that is instantiated (#2190226) - fstab-generator: use correct targets when /sysroot is specificied in fstab only (#2190226) - fstab-generator: add SYSTEMD_SYSFS_CHECK env var (#2190226) - test: add fstab file support for fstab-generator tests (#2190226) - test-fstab-generator: also check file contents (#2190226) - test-fstab-generator: add tests for mount options (#2190226) - fstab-generator: split out several functions from parse_fstab() (#2190226) - fstab-generator: call add_swap() earlier (#2190226) - fstab-generator: refuse to add swap earlier if disabled (#2190226) - fstab-generator: refuse invalid mount point path in fstab earlier (#2190226) - fstab-generator: fix error code propagation in run_generator() (#2190226) - fstab-generator: support defining mount units through kernel command line (#2190226) - test: add test cases for defining mount and swap units from kernel cmdline (#2190226) - generators: change TimeoutSec=0 to TimeoutSec=infinity (#2190226) - units: change TimeoutSec=0 to TimeoutSec=infinity (#2190226) - fstab-generator: use correct swap name var (#2190226) - fstab-generator: add more parameter name comments (#2190226) - fstab-generator: unify initrd-root-device.target dependency handling code (#2190226) - fstab-util: add fstab_is_bind (#2190226) - fstab-generator: resolve bind mount source when in initrd (#2190226) - fstab-generator: rename 'initrd' flag to 'prefix_sysroot' (#2190226) - fstab-generator: fix target of /sysroot/usr (#2190226) - fstab-generator: add rd.systemd.mount-extra= and friends (#2190226) - fstab-generator: add a flag to accept entry for "/" in initrd (#2190226) - test-fstab-generator: extract core part as a function (#2190226) - test-fstab-generator: also test with SYSTEMD_IN_INITRD=no (#2190226) - test-fstab-generator: add more tests for systemd.mount-extra= and friends (#2190226) - fstab-generator: enable fsck for block device mounts specified in systemd.mount-extra= (#2190226) - core: use correct scope of looking up units (#2226980) - test: merge unit file related tests into TEST-23-UNIT-FILE (#2213521) - test: rename TEST-07-ISSUE-1981 to TEST-07-PID1 (#2213521) - test: merge TEST-08-ISSUE-2730 into TEST-07-PID1 (#2213521) - test: merge TEST-09-ISSUE-2691 into TEST-07-PID1 (#2213521) - test: merge TEST-10-ISSUE-2467 with TEST-07-PID1 (#2213521) - test: merge TEST-11-ISSUE-3166 into TEST-07-PID1 (#2213521) - test: merge TEST-12-ISSUE-3171 into TEST-07-PID1 (#2213521) - test: move TEST-23's units into a dedicated subfolder (#2213521) - test: merge TEST-47-ISSUE-14566 into TEST-07-PID1 (#2213521) - test: merge TEST-51-ISSUE-16115 into TEST-07-PID1 (#2213521) - test: merge TEST-20-MAINPIDGAMES into TEST-07-PID1 (#2213521) - test: abstract the common test parts into a utility script (#2213521) - test: add tests for JoinsNamespaceOf= (#2213521) - core/unit: drop doubled empty line (#2213521) - core/unit: make JoinsNamespaceOf= implies the inverse dependency (#2213521) - core/unit: search shared namespace in transitive relation of JoinsNamespaceOf= (#2213521) - core/unit: update bidirectional dependency simultaneously (#2213521) - resolvectl: fix type of ifindex D-Bus field, and make sure to initialize to zero in all code paths (#2161260) - resolved: add some line-breaks/comments (#2161260) - resolvectl: don't filter loopback DNS server from global DNS server list (#2161260) - blockdev-util: add simple wrapper around BLKSSZGET (#2170883) - loop-util: insist on setting the sector size correctly (#2170883) - dissect-image: add probe_sector_size() helper for detecting sector size of a GPT disk image (#2170883) - loop-util: always tell kernel explicitly about loopback sector size (#2170883) - Revert "Treat EPERM as "not available" too" (#2178222) - Revert "test: accept EPERM for unavailable idmapped mounts as well" (#2178222)- Revert "core/service: when resetting PID also reset known flag" (#2225667 - ci: explicitly install python3-lldb-$COMPILER_VERSION (#2225667)- ci: update permissions for source-git automation workflows (#2170883) - pstore: fixes for dmesg.txt reconstruction (#2170883) - pstore: explicitly set the base when converting record ID (#2170883) - pstore: avoid opening the dmesg.txt file if not requested (#2170883) - test: add a couple of tests for systemd-pstore (#2170883) - test: match all messages with the FILE field (#2170883) - test: build the SELinux test module on the host (#2170883) - test: make the stress test slightly less stressful on slower machines (#2170883) - coredump: use unaligned_read_ne{32,64}() to parse auxv (#2170883) - core/transaction: make merge_unit_ids() always return NUL-terminated string (#2170883) - core/transaction: make merge_unit_ids() return non-NULL on success (#2170883) - core/transaction: do not log "(null)" (#2170883) - ci: allow `RHEL-only` labels to mark downstream-only commits (#2170883) - elf-util: discard PT_LOAD segment early based on the start address. (#2215412) - elf-util: check for overflow when computing end of core's PT_LOAD segments (#2215412) - sulogin: use DEFINE_MAIN_FUNCTION() (#2169959) - sulogin: fix control lost of the current terminal when default.target is rescue.target (#2169959) - journal-vacuum: count size of all journal files (#2182632) - memory-util: add a concept for gcc cleanup attribute based array destruction (#2182632) - macro: introduce FOREACH_ARRAY() macro (#2182632) - journal-vacuum: rename function to match struct name (#2182632) - journal-vacuum: use CLEANUP_ARRAY (#2182632) - pam: add call to pam_umask (#2210145) - udev-builtin-net_id: align VF representor names with VF names (#2218886) - pam: add a call to pam_namespace (#2218184) - rules: online CPU automatically on IBM s390x platforms when configured (#2212612) - core/mount: escape invalid UTF8 char in dbus reply (#2208240) - Revert "user: delegate cpu controller, assign weights to user slices" (#2176899) - udev-rules: fix nvme symlink creation on namespace changes (#2172509) - rules: add whitespace after comma before the line continuation (#2172509) - udev: restore compat symlink for nvme devices (#2172509) - rules: drop doubled space (#2172509) - manager: don't taint the host if cgroups v1 is used (#2193456) - core/service: when resetting PID also reset known flag (#2210237) - ci: drop systemd-stable from advanced-commit-linter config (#2170883)- ci: trigger `differential-shellcheck` workflow on push (#2100440) - ci: workflow for gathering metadata for source-git automation (#2100440) - ci: first part of the source-git automation - commit linter (#2100440) - ci(Mergify): check CodeQL and build workflows based on changed files (#2100440) - ci: add NOTICE to also update regexp in `.mergify.yml` when updating `paths` property (#2100440) - Support /etc/system-update for OSTree systems (#2203133) - journal-def: fix type of signature to match the actual field in the Header structure (#2183546) - journal: use compound initialization for journal file Header structure (#2183546) - journald: fix log message (#2183546) - sd-journal: cache results of parsing environment variables (#2183546) - compress: introduce compression_supported() helper function (#2183546) - sd-journal: always use the compression algorithm specified in the header (#2183546) - sd-journal: allow to specify compression algorithm through env (#2183546) - test: add test case that journal file is created with the requested compression algorithm (#2183546) - rules: do not online CPU automatically on IBM platforms (#2143107)- systemd: Support OOMPolicy in scope units (#2176918) - systemd: Default to OOMPolicy=continue for login session scopes (#2176918) - man: rework description of OOMPolicy= a bit (#2176918) - core,man: add missing integration of OOMPolicy= in scopes (#2176918) - meson: Store fuzz tests in structured way (#2176918) - meson: Generate fuzzer inputs with directives (#2176918) - oss-fuzz: include generated corpora in the final zip file (#2176918) - unit: In cgroupv1, gracefully terminate delegated scopes again (#2180120)/bin/sh/bin/sh/bin/sh/bin/sh 252-46.el9_5.3252-46.el9_5.3252-46.el9_5.3252-46.el9_5.3  oomd.confoomctl.build-id9eb303a35956ad43e9582c2f69c1a89bebf560144c9b720c4763ad6cb2198a80534c71905fe8oomd.conf.d10-oomd-defaults.conf10-oomd-root-slice-defaults.confsystemd-oomd.servicesystemd-oomd.socket10-oomd-user-service-defaults.confsystemd-oomdsystemd-oom.confoomctlorg.freedesktop.oom1.Manager.xmlorg.freedesktop.oom1.serviceorg.freedesktop.oom1.confoomctl.1.gzoomd.conf.5.gzoomd.conf.d.5.gzorg.freedesktop.oom1.5.gzsystemd-oomd.8.gzsystemd-oomd.service.8.gz_oomctl/etc/systemd//usr/bin//usr/lib//usr/lib/.build-id/7c//usr/lib/.build-id/c1//usr/lib/systemd//usr/lib/systemd/oomd.conf.d//usr/lib/systemd/system/-.slice.d//usr/lib/systemd/system//usr/lib/systemd/system//usr/lib/systemd/system/user@.service.d//usr/lib/sysusers.d//usr/share/bash-completion/completions//usr/share/dbus-1/interfaces//usr/share/dbus-1/system-services//usr/share/dbus-1/system.d//usr/share/man/man1//usr/share/man/man5//usr/share/man/man8//usr/share/zsh/site-functions/-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=z14 -mtune=z15 -fasynchronous-unwind-tables -fstack-clash-protectioncpiozstd19s390x-redhat-linux-gnuASCII textELF 64-bit MSB pie executable, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=7c9eb303a35956ad43e9582c2f69c1a89bebf560, for GNU/Linux 3.2.0, strippeddirectoryELF 64-bit MSB pie executable, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=c1144c9b720c4763ad6cb2198a80534c71905fe8, for GNU/Linux 3.2.0, strippedexported SGML document, ASCII textXML 1.0 document, ASCII texttroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)troff or preprocessor input, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix)  R R RRRR R R RRR R RRRR R R RRPPutf-86f20dd03f887544884d8e0b0c7db4f4474989ef78dd335d8bc2008730fcd12ffc6440edffbb8295f51aa3a7ad747a32229e5629bf6e0243a6dbd92c5619227f4?(/h< ?JQI!痸 D j}i [*N`pDNĵZJ6oXByor*K"a5eOv I$:% K0Z3͛S [8qF,^GZ5$Î^@kF.0l`aʆ64N}&,JHt{(8|xODW^.FD46SS=/Jk9bڐőCpyJac(N'&C$B:AO.(B =oq9lߴkg5tq{ nگw;]Qh ?vmdv~3:|f>eӽt`m9arLwݵ빆]7]eچ>=۹|Ck],3ݷ .nz{Z]Xn oϦ|gjYų֚tjBvrlD,d&|$V#AoPV+j+PG}5&G/2QK)x#"♸gi\AJOh F]gx)kSz2^x*VשNNB"W* 3h߹酏&FܗػxL]Izv,SrV }ɔ+Z9r|=/cfۂ)+ж[Z!ޅD~h[=>K?svݖe~x(F7- 5isnMq۟2}0YۻU;Qm[Z%p>roeе*l߶teί~u=݁㪽vǻoy)|)-nn:K3ne-nж2egWۮ&]Y;zaNKǦXl:6ѩhQ 1LLbѫI4*Z3AߚU~jT$;B"k[2QQS+TЅ(I\SCM n,#\x[׸&I@X$<1՘S >)j0}&L}.!Ж*?Lf3S*S8i/ Żù as?&6.wgυO",Rf́[(~%EqrQ[uxYljD8xaӮ6|w*h *mkgM,zWl5NPڶ5й;) ;wݶs8yeb#}td1Zb-)-Spđk+W{Y<<$a&HQQF |\^IڱEF跨6hNG;g+Ti.9+`Tф1q.yfz&N'a@;%\m/`!:G& >ʩڔqnr>8*S-2g%hǧ;!l}ќg.L[HdkRIhqqxI%@Nl¡!MP^ <,*$ ESƩ6д -i>IsFa[Cp:iZ6$M|T䊆`>J[tA#WWcK;ͱ.Q}[Ԭ3A6IAAҤPO җlIt#-HXb8ʣOR`$ }RjR!9rA0ʜCh*ޅ\o;a6|TkHm̒bo;G;ZAF˳{gvߎn6u5Sg;w}Fo:yoT, YΗÜn_{5Pdh ꇠD8|aGPEJ7cHHf"JqA[7[T)A5@&T$,gBt% tC8ɔ1eL@aB :4su %1=<!F $MX"BdYJ7 @x$$ד6 3&::"OO4kEO#= =e:i9P-W6ˎ;dU#^ k-QcxDS+x~~" V:JOXĎV]+}5oa@:3;:+|Ov";L𻁧S3~w#;/x*t|i2ZA6v̀\>0)KT-zeM;CX v`_ '&d\4,$& W=,!/4h7#g6Ŗa(E.6{֭l?^z^/ʳwլc{h+µGUs RSTXWJ*|;l%ʼy\k:k7^mS8T0yX {sL:YlJҲe[nܮsZo̟2-?\튎˶ݣɭ,6;UKmaI\ *+\#&qy GwJºnIMS)bRapsU9&[.rsi, kjm\7>duλ{s g5`k:yw;SpJA7k*F"2s|Gr+kq$ںjc]f8c,Ћjdž}MM'6?B=iIX4%ɩ3OF0TtzKK)~M0pq F"D#Tlbb.5OM%xɉt|?a~|LE"y* "z:(#PJ6qU8E`udSZєS uFiQSJ^} n"g5[ cr!5#$I6C! &EE { 9,Gq0$Q'@$Q$i ,W%@ؾe ߮7m`|y9 6Lx 3gd@bֺvUEjQ?^G| {L $mh 5`ڝCj`"yڏ:(T L:kGeDE߈2$Eֶ ֭)*NrĸYEIS> Mn}F\.pӇ<ӷx.'6wXbBȽֺӮ?V5E܂XfZW[Pfi_(:#ֲ& 5w|,h0 Qlwv8]G7*MH殡A?[srfZM,VT4Kh/Dd: %`ۚ;\l@n^ (C8C2Jꆱ1`(U2g{>kQNEyLs%j̽!vRvF#te-RDQ,2ްN1J?_m]ˢ^;u Ә1+5sTܬRD&TJV w]|r4=O7YCYBobP1S#L*/\乘b!P["9p7q'Ȏ*q4.=[;% KSrjbu,>pQh+*bŷd:ZE5T`a#u|c׏\+v>yvPBU`x:NqS33J9o~h4e |@Piqft&$I~9Ta z\"'*o?O.Lw,\VI`fsJ,@t:ي5αAs煮lFښ٠&lm9`"Yx -0 `Y=, \ G‚;SKpGi E(#i-G"Ł6nE G,,w7k/NZ@6&zl8Wo?ƶs] G?B\^U?rSEl1I< W#esaX$cS) QAJ-Q ޓdޠêv!r.A7fDťSҠq!o{Bs<zGөewf ha<6Bbz鿡SϹ9^!*kZ'V8'ɚ0L=qVC3<$-T->#)=\MÚ֢hq`TUT@DLIv( BL5*{Y?"fu4s'iUrrQN$6V+FndϊD,rDC]/1q/C&DvЗd ~ ]*l<61^s%A"5f&wWWI;ql,~k;4D譼Å:t::L9XC '\xa,J 6ajo@Wh "g;eZ}PZUzK1vƴy~~ҸXs1t6SjZ3um%:D|4}!7i肁[yuT;B.z)nCk!KցQo9Rhe`/pqcF"ӖVS[-F2&kJ7ui3)<ߘ?e?'c$(,IL.-Ga`~sS.#& У| X9wFȏQьk X̥;F9Kx;bGwCa18;)oͽxGj H,4m-z6D[}gOoF|Zׄ$@JQS@:ONwT=/3e0 dU? ;x&(6oz*NY*@.-d~8!?{HV' 3;*Ԛ'fCl.VݙOU{y5LSX 96 2M~ڜ4Yj.}g= p$MU4Yh)̵BļL6.Kz{ƴtiBx&(Y}P*`9h=X:!((+1|f&Vi@zbAV&J2ocSf70^IڞCcR4Y=gu\s"D,:'ql²r [ 9;rSObQzdq,Y#Ψ<)PwUxwDhp$rq4P%I{}[an+bG7 )"B|j_XJXNa6,Ӊ44:yF8]o/^$Y(ķB28vN3h"3p6̀x0f0g gfBJQ"KK )KD,-%>PԊ|0>>K< "Z|FΣ"ܫ"Cg/ ( 33dlrT0򻋂(|T: ?+ vwn\ډbTGUk.Ђ8#L&%`abL p&HCqB:_򿕽bW'd-ov)|nGKi'[gRD C κi e$P.bCtQY5-hcD<xI ˪bn?SdL5[Q5Z. 5(LJ,॒ON1U9;iku5s>V7$lreboSjbho; iw8y(g#:1^Xrx褰 3ii}Xݡ;GdA9X\!F#"A8Y[\ y/D9S2!8 ڐ[%жZgb{ocaƌ-ft;ӏj x#C[):D$'KLJ0 _5/+*d)-3LMHվuLJ#6_Bi8d$OMafˬunݴS/D{v\ '*0U0DmQV%=CG5>h6}IP,Dpydsecstason_v  SR|8Xx dU0H@hS ؞ൢ (0HHfاn^ߠ?ָ(PxH5Rp8$߈ 6M^`afx0۠ۨ۰۸  (08@HPX`h p!x"#%&'()*+,-./01P PGA$*"A %[Ȉ c3Զ4q6Oۻb$2FM/g^YUx1ڬmb=pF:'lZa+y@]h^ka<#Dä a},5@6up]v=|!߁P:e|v<&rU(k`Rx)bVȂeR7Ϫi.#I}"^2J."&| t234789 :(<0=8>@?H@PAXB`ChDpExFGIJKLNOPQSTUVWXYZ[\] _(b0c8d@eHgPhXi`jhkplxmnoqrstuvwyz{|}~ (08@HPX`hpxUX+UUUUUUUUUUtUhU\UPUDU8U,U UUTTTTTTTTTTTTxTlT`TTTH٠ANC_>(KJIRWv>,|tpdXLu(@e@4X(pR0H`xueth\P D88P,h Qu(e@Xpxl` T H 0< H0 `$ x uePU  8 P h | p d X Lu(@e@4UX( p  q`(,tlhO(P6#K3t!i4Vh~6G78$~P7-BJi 1H21)""J|+!.;`'B?rK8ѺsFvlu6PkHV,ADD ]cFmy|%oM,Zv6p&@Hj?Bݰ\.|D.mSkW;ft_P`.X n|D.w#r7pӝ x; \tt8K7k7QM>o?ae΄,'8# v( `vo XiKm<3 e,L3隮9CmAj$(|A =Y?/~HYM| M8AA@5$<7~4A8a$I $"IqI?&Aj;E>ʭg?{Ϩ mc.</vuF;Oe2|VRmG^_;X|} gVa\` V"ox!K,mٶ)&Gو1ԥg] 73~XWdf oѝ*`ns ..iq' ,h@h+T؀q5kqk=YvPAv# _jVޅ/. 3YFSkiM!ҋfԐ-yM`XaT XplBO]Qgj]4{+Y32gMZ$4@t[6n"Qn;Wl[=)|`ղ'}w8$#u E8@U?aC.sxiu/=͞ffjb@  018>? @!u=w;$ۢS/[":murmoNE  oUx^g_Ku ~Yl ~z $R@ٽBAW"ErC2λ& >=#=)$$2|tizO*A8r^Kh8/Q䣂/=z7yԛ5zt74,x'zX*~ȉyRdc@R@ַ/pgR.?->ҮޓUx9cGS0rT 0;RN5gͤ!j qO҅$+W4ey^ ,MinKEt7{T&:I$נf+]i,D^m 3Wp\Ӝ)rT:3gBaf r ~LQ,lkJRthW7N.\-4e[CZv-8~ (eB`=M .}f*O5>5p,v>ҢZeӳ 7$]KbC5C-~+OjRYM+\pe,#JJb `a1f ˡ%NyH n֔0FۺoxXr<\}_: qϓ TzHipX"MؼL p&$8q+; lJN*e,qp`}q8pa?Lg~c+7WݎZ~OF8~Խ~ì?fJkG?\*OOR_d~gg^U[aWٚ&i/ࣣa~ NV7JqK/%s;(Cvb %]qQggiwϾqAʇ4"14"|hY*̟Ƶ@0Y Fn5Ɠ05 YhL\[+ EQt\eା'5A(+w5t1.57ue)(GW"T5%~{ џßfz%WubGw$@\@+cAZ0P *ƏEsk鱉hƚHr,2Gdjm]ݫK: 4T5Eߛ;÷)s7 >i*1Ô4$ ;-N-vӸz&:şK>;E}0 |a(0đ=/7yxa~,H.:> D"Aw?Vo9}SҲH\kz{v?ylȷ>$ MƖkP4ʟn'y/&I}ޛL'Zט{9.ewF PʯjLsv{ؿG˾YH%֡T;Bh``쾱=\_X< E Ϳ7QtOե%]RgRu7&I2"#@E5u&r8HԩZq;ط${'tƼpb.<'XFMV$ Ҳ]4Tl$o$״Qp ~vy@[o'z١MI8xAÙAŁavrM$AF3[={W04FWwA , *$e+[ѼuG`cZ4Mdxfu4_Qs![x8ؿ*4N"ϨQm Rq [g EںETI:7F5ucru ){Es2wX ٦/O2SSdÊ|lM$%KeF{:hFg];|#K"m0IZlzMxlf3o@g7:v<˒<فQ.'فɈ`D'hġϛS pI@Uw:ۮS`C*سsbX /Ŧ,zT;g4`-Mh S. KytpĜ7{JŭoB  uۧg):E%R*-(a^}MsGh (`u?s=nlv|́ _EQ1 U<{OV7ǒFui.w;ɉFe/W-.5u2=}B Rʀ-gVCroř=#.Xe?OW@vD8+ntx] 8ZĆgOClfۿbBǮ̽TgK 2@!;?(s]S,$Y.$YC'cwzMzsO`Mo[t;1HC# tul#TCc 7CVj pj `VQ$!6A<g^B4??~9vUN#$ TW??w)Rlc68_0Zyްyڢ"x_I5 3uV߇@ $3Q0;d/i c;`jbxb X 6xUKt{zq ,œ5#;fZb1ڹY`*vE&M~HnviKq;⣗:<}~4|rZckk %MLJҨ'kq 9ysW8mcƒn$׾)$Ozxrָ$!wvc&Z,G" WLcY&9nD μ5K|b@MgV_4i|^]:kw\vC\L9.tjb =6 RӥM2v5lT?T!ayIp/*l=ohqA%b[nyP6k5 툭,9 >s;R[B V(^0WC=Գ]@@ :sNpҥ{)^pQaGzP'FfNs'pTϑDZ수[DeH7rfEtdqGGz\Q;}i꛴vcE>+p}V_}!A߄>&xu @.I0lk [3Y"GZ 1&gchA^P(͕g *iu2IuACye "Þ@ -4z9dᏒT{뢦^C\X]yig+]8䶬22ó]d`}PhGnoJ~3(՜|(o\y9.A=ό2R:tщZ'NN^YȇKpt#K)oM@mk Yϯ08Pw#|`Os S1CURp w*q,*d&0.F:广;@PS۞Kd7/%?i?u{VwT1 ʍ"Dģ$6?Vۦ'O=`@%4*:Euӫe_EI0FBZ'6t5{D691.PBa(*E"cNumO; h5vٙݧoh Z4 7Y) [d \ Cv (]c*5اe- 5Ͽ^j՞DOdۢ !> Hv*9 ++ kL· 2iKrnD|9!c-fZ QZTnx]tnϢG Sf7hA%'ux_ۤj ayDoY?0$}3*aCtF?X}01 ӈ1\K+̙& (N 4)1=.h yІ0ٿh7喱xc﬊Vn@rnS/!x"y7&f`VBښNl}rW]NBaz;C.|@ '\fvip->ED~~$_-T{Odr@ ^ 40~[(0+x)O5M"xop9̾ܪon bC4HӡHENSRp{xL,NBFUTO0u^yZU*'mʾ7a)זqw7%KLB S|6ǽkd3SIQa>rQJ.P5kR{/1,㔵ؖL@믗c'ouwaAd4sd3Lq}0 J_S z?@֝E2c_?"Ӥ-`MM?cQxxml<ݶӆcZ_Go_l\&Zخo/)ݭ@-nd;*`CA[k6o ?ss)mS6uy\c`rjŅRQw狯~?윎xOu>CY,N6N{&'tk$n?m~|C|Jf8L47=[ ͅo47krVWqR.-r$0ϔŭ^ECtv";ɢ2"mGCQa*nT#3nr@Aq1KrzŋY<vv w 5&+lǍ kqz]WTuu)BUyB:ʼ[ *J)aĻaIGŹ@/h,*~먥Abqɱ6u%:_!PaZa;ΛiG2`rW$] sŧ"P3Ǟ̼FNOh8rG*=O zULa)aTW2u ;zk{A!;5{m{l wxr!x Q &J>'Ge=ݲLfrG<D)\`1K)2 N/|pV):Lz`p-h%gf%̙~c pң _y)zM&r WqPҠY#ヌ1UnscW0щ^2hF~( ބ9-ſ0xr#frul|# rh~bC0IDc-u}I_]Q7ӿϱXĮg-u]3XD B z: G?l]b&qsQgH]NS<{ek݇iꭞ e`a 2n} o~70t#?6[vXeıLNLf8C^ҧOqi%L6..i*4%+'Xc _Jw?!8ךMu [ `u qW&y,jT}eZ"= oAi{βYLbn/Z4ck_??,M[?:6`_U=WٮIl1`i;Z [i|>#}݀%dD*'.8cĒ| ן4ܥm blbNK (X>9K) sTph9/;\p=>[ތ.#^|G^ {rZ_]jН+=թ ")#b>Չ_c=#3X{gzh0%c7Eq.mRxn}y,#4d,%%: akfHD[ܴi9z e͍S64Ic` ƌNx/.%zo^@nr˿4yzo =py/GO >(S]U2J,eӋhZxFA{ts g913~ʩ8M^@7Nʹ%$L$#aww??~c`*QG=`R V KZyf+amwnL9kF%~@ͳqg GƑ)謩ҵwf,/Su+u t'p o4\^>ET(gYf J+~Gv9W!:8Q͉D['V&ny(AX *5!fmOo`O}LbtFh/:؋g5S8,o7,Hfk?Stx nݲQt6ϔܽ*;青M,iٚ$*\[@=BDjJ2N%'$Ѳ>v~{FѨ"My FN,| CDt^E>c:JA)F.ɉﷀ'OIc"J@wG{xz ◾T#W9I,xcw h*ΖCofacᦐ\G Vx7 I]< <:rű>v9]՚'Af !# s\GL_iQ\ 9:$ b͐cq(SַPFE=F^/W- azXӷ^yʷ¤ ߆9x/ms5([%!+g `8AgJUKC7/ErbzUt߳w1J١u_U2PQ6&wbmy,wDēgR׺t9uskwDp?)BMmɭ@OD$ؾыw|%χUd" {6ƟyAea3篈q1V3]^2Nn][%pm+t^k2UZϲt47׬~.8g9t);Rb 6xc9br굦y0߽uFuu0pYhªJvW@Sݹ7\ؾZ/G':>AkyD>0@~fwQ}wyI' 4"$]}57oǺ\8*QdEkC,l-Q~T"tŞjjO=;_~ LyuĨ=w9GJ: Ө6yR&;wee? /V R=7|kNv&1ۭ٩I\f$vX94(=.izU 6_5Ȭ@h8BjkE(P dF 75 SꮼC*sy^_ F1` G9IͲ",Ζz؅45:p[x֋XCS#bچAYK Ļ ?bF!Fvf^eWhKV1K=>6.ZB&!}A -ǖS:@&6`ݦ(z|P[v{VEו˥~(Ȗ;rgBzە1*byqZPz?}p7Mb%ngh^O.8I@ _^4'%VϟK&<,AEKx^⽁%3g,F)-3לuzAaP>U6c\or.yDh/J*FV_ gyər:Rk<`Z}ʽϊ[Q aςhƓӈmx29 jڴ&mc [<n IΝu{hj[cb.Cߊ %bOwu``?5x-ӱ;"{?xvYI25S" Fw篸W8#whNN[#2\5K#rdGog+Ÿk+S91] pɭUNoNݙ|/+O>T-Hzܣ#* ăW1sמ43zI#RО2m[>>3~4,;!m:tjeFldx p:W1D.;ωl|5u.pr"'m[[N*|sɡ Uj>}Npl=Mƺ{LJCXl^#L7mOD.:I>RY1o-뤾ӥ)Cm[KveաN;ʬUUz̾LF??g" 58o-np4rNPDٻfeл˪.L} mwнl/u,j'幧GzE{kOO.d7F-Un0W8eqcx&Fn@8?)5~?܌#2u >$+`d3O˲|>o, C2ͥ;uաBBoZg`[(ŢG(t3F{ zf!@ TͶ8 ݶ׺!|lF_F$7"]&"Czro-zg ں*ϡT2]VuIwF[uTw]-,){ qO4 W^I[{?${wq#CA@b[~co"n@0{1"^=Dgjo..SU{vb{8㨻+.œfaPZ9GO}yj" rHXU`@ɃUb^zb]3zՐ#(FfH+ 3J R'aČ"aH"kn6=+^|VA] sl}E2 6mXi"(bUpH/ʜ\z8^&)o  ӏ^(]Pjƨp[ {*Yb?Ct{egZ:CMҤRvsqײ3G3 O(ػ`) Oh-1cy6/KU6Cm14KUF=rsۆ[chM.U>mNҸa2pVJD%6'{!F5yYvDvYPŴY,%o@c$-; P 3x|rhTھ5N֌O;9i97Cڈ`ƃWK~ ^ʓfB)d\u &jӉZݟnf;" ^~U4!WRD40 tv0$W$BWbiF7*T2~ozY 䪷fև:H+nn VHSau{M.C-9bCvKX Ld!>Ę%5vCvCoSϫRQק6ڜLYe[ak9gTv䵄B3,Hł4ͼ/0w`^]c2Cm"5L_8CjPG>dtsL׉PZn_ [4' ^,DafԡʒT' ǜ n4PV?x.I2,ap1G%yZ;vh#w['+6َN$T'Js4<|<҈[h pgB,yMEAe_E-oI PKm`jh (tw`W$27a6Yb'CySd E*][e)+Q].4rFUmE6LkbI4YB+DGh57ۉm@e*=,.饱kQ>ivܣ{g'P'kJ²վR&kKi"fgvrEв:$b!DCSHe4.˜r>~uS^ \W=aA2( %- Raц?0Mb7=ѶQs"EDŽe!ȺjAFWIDP00付=Ff^J&!^R.Z/ZyO_L:Bq=<-T &fsلY"PX4^>xrH`20I3$ΖR ';xH n$kՊi[{?јVa,5!U:XH7̙`+b IpB3!2s,3K*aˑĕ(_& nJiLct"n@"N[R4]v!WAE;}Dm1;w@V eT Lgtz.`pNגd=]w&$zw~ەvOUjʽN7 oV|%uǡK]*Z*wK&.aF,EMN,Λlڟm]?I6 muK:BUnwͤf⹡  !C Ȑ槷9/c \&Q{z,K)>:7ܳ~19&( uFІZUF3>r)'fxBoXaT>Ad$#GwI%.*y-`}$hî8'6R-7-hW(L;' 12E;L N*ru(@ 21FjW9ꄵqj14UHP0z5I(}hDZ rdꚲc.]B  2xߛldȵ0 mg_'0V$W0^aNM&&1 F[(xj2 d8*1098~R^B_1uf )AJ1FGH?h'yCr[Tv1P $Mc̆g)`ofib)6v# RCNAqs]SC& xj6 Q (trIc 䴻9SY$d/p[?W9bt HM-BҰE@tMM]6ϯrqI]+'%{4beKrɃD1&͠O9ƣp|9fs' ,ۋY)<+|b~^EF .]BNog=J_\dU7N9uyJ䙴P2Ncn7X*YF=$́;Ź27 njx(yҸwߺ1shWCF1spΘ7_X-"Alg2Qӊ:] rJ 4\dcrdf$oaA}"~1dGZ[zE9,/$+y:[GGoyy5[5Bgy%:ymϺyW>3W\՚8Oyln?~y3[ss,M;2f]25d'@%;,!;^xMz3[{uY Y(ol0 3dS{x4"@ ;?I Z %8% <#j(ya`@!l 2 +Χ`y|4&Ɏ?C<ɫro4VkWU("P @UhC,|HX-zȊ՟h7#P"K?lL.Mf,=eaU2GVڼ={lg8ϐȈ$IF4t G@D3Q)#I^O};y΀>??nָ؈/?dGb,ZcM3>hB*uuh (XIc 1ob#v?57%)Ϫf_"ysbq_&sdHj,Lݮ_kcY l>@b~̿7(L6ˠ'dvA9"}_fg0"^dZL3q.8kΖ d*ZT8=t[X.k.H (PeD?\]\_z皎 Gk[E7\!^KZ?1ѫl7K Q?#W}޵ePCc@SԾaJ$_I,=I;q]6, q1 аԲenDNkA i<lhZJ&f< *&jPHZ"rbq/Kf$VVf:#]Ac̩D8?0:w  -VkBJby_!cw~uPvÇXq= "Cef;>ivGZ `dmtϺh?jW\T|۶Bz.{m\Yz j@j68Fm(fQ!~p_pI݇>T&L]I13 <#h|X<9Z{ .j#'&,t/^FDqG:Ŭ)kx`%Ks}l(g|NG;.HC{ ݽs4s|ϋ9ME G %t+FJ(Y[Ad4 5&1ݞ(GHƋBl` 6.Hd"RSfr1ôm 'pD+A/p:MQñxqKB֒⻹C@7k.3;4X]YgF>WF-R݂ֈQ/O*v$dG: FѼ[U @`l]g֯PFx =j|.1y;-\Z˶n`/tE0z\9#t7ܵ@:00s@**}H'== pw|s L[<¬Zc$ܰa |p `@9tCü  R7sTdHT"qc,ԹAM<i$SYjܟGAذrV%dB.*bb rQP6Cz~o*UH u^SQ(xE-"q6~ R=A'*'Җ!?X_٨dS(8cǺ51#\ vɹMj4I]a.&Fv/kD4P1Df=y0 2 1)DEIRi @(>:"shdt rb]A8 A$NhEש ^P3̀.i;0VC@"v" O3 jӸ .痬"hF&%#'%trt͌.,C E-K?˭je0ct=@U/+/P쉿 "Y 6gŪ}w)41æ9yC6bB4tn#Wӵ !om^,E܇Mua6Mr ̛aC!bþʥJUl㟈鲕h.Lߔ~4ƧCi/H 2fE1 !>GQل3WC/ ً/hPC'-Ell:(Aqiu9u YJ6Q몑d"mnpivs9fY:l#rg>&[PR4 C"L/*8 R!U=falsed16b6.d ;Yi|~|Jء Hfaq ɘ^{IaBZ cצ 0E&,IESLQ'*ľ .. c 7i;(Ʌd3@ r :1DbGplx~4z F^?PT6GQ޵a` ;q,$72@r{;{HܒQ/p/uD ?.jC]vmyp+i;EB(CNH+uojjf0հkڸW ߎ'B[єB`y_i<-8gqj'<柢X(~߼h"p,c6wN H+%zWEɝe?jd&ʎyJG3%2 nrY2]Ibz͠z拋b~&̡닫 $9d8e3+2[#Xf3Fd^Q&/7F%ȟ}"KG5+vv1n,Še`n-؆k*nx!0V듨Xx"Ȗg(ٱcv'fwУF&n~ؿ={Z~w\TcbWqj ]Ngt2gחN.''6H6֊J*2DQ}xJ!R-tĤǥH@'H\׶m i)J>CNYdI={)E!JOF"v{2n Z%Du)mȝ:z#6K,1ՎTp3"!WxBjt؈LNB]ImπفtOKI^ysb@GOv~,RV !>:]i?ulaoI@E] ,{U*a!jEK,Q9:%esëL@ܤ0 vmܷG;;)ee+lNa]gI"*OSTT-H2@&:ũ;{'y+ѰBqy @H-Ѩ ͛(uԦ5\X_k х=$a 8=P ܧ@ _MZ^"f jA(JH6<:سa|sWNڻ9_l䳤Dž'_a)l=#Zv7j!%0v+(V/R u!" g)!]jeQ^T Ɵn4 YRV6+,(9Za`Pᮣ0Dک}sgj1u_1$ԩot2h:W+/"%pN;^fW%x6gT=i3Y(=@0bnt0x -_{rɢ (^2uޘֳL14q4z=KS2~1|7ؠ; 7j /V NuPwܷzyrj(77 ~= P©FX( A|| )dƟ!aګ}qFf!c9\Zeq74 6j$\Igjcy4s`=[(.%#4qTdz9\,Q8`WU/fs<_=[ ц4'.-9Mَ}4@yZLf9rk̈a,W_N=nvq;톧e%Xɤu5I[[̗~Jw9[.(>X+h<&2J̬A%XjIm=b*$GVk =2g <\X3#\93|S;ٍ0m;Ӻ&w\iJe#<;}X^H*.Y@RW25J6o)b%sj?u&VBXAZUL[K6M"5[XnAB*{-z3HY0@C7 ف~d,CPY-C€fGymk^aܬYH$ xp@14U:C]!zVS\I~K70o'Xa/@ňېn `Q!u*#7Ąxуj{fO<ƶǡ:qU [n eRkYJ3cĤ8yO)Vx]W "tڧS4ӥ&Qv9y=\Q g˃tDZ\ڱ`/j1l3?tOb&b qE1l =JϿIUC"2Tは+A"TTZ93u/ 8A06434788/,.IM+N-*LNճh 7891X]oF}ׯjvSXV쵔-(#r(Κ3C+z߾!E9V,j#-s?=P߯w˷XN//V+~7XLo=;vEg?s^){# `Wsq](LDikiWIJ}j8\W7Zb`frӏ?pxGwMQuiT߫al&Ixh4:a@מ*RĪ8l vbr'V'3P??i#"V2/cs.6O"N3%]BzmΠH\ONtWʼngċ\ڍ.)ig c=i.'8/X,'7˅x;Of1O.αOŪ/&5WH SU$~rcw4p*nu),/>̯bc _Va}tq~3^ή*yfrN:jQ;>v"¼T[B(r /L"Oѹ)7VX"2{ (0QTYcpĭK9h .8@٥,FWJ^\=u8dT3E:Le#mޚ O^R앷Z+zr tWEiCbM~x'}OiX]Ag'<jLn'ysCpԮ!W6؋Aq3k!& Z_޼l!lUbdTHT!`}"ʒgK}.Le UYʱ'm%T>_ $2Bw\PNJ: v&sֳЂJ=BT?>pe#:SuřsH hK EY(쫵߯ޤ,IQTb:u:<֔^ķޡWµ%SmRc]I5/\q+{ ec3A @f[d@̏A{'-*Au L=H+%sJ0x/ 2A@B<׀'X Rͪ)W@EPnU*^[.GY!fb%сP l%57ED)v4{b8P5ОÎ96 /"*r]$ֶ*BvM4Oa65YhuWmlװ%U@D-e!M8#~vLyvzh:>d "ŷ*C7f%__s={c@TRi§4VME|atL]Ҿ [چJH?{n1VoF@hvŃ BANkWO&w$y ý)LC^_]NĿ_L2t-:y7GBgjbfUx9_[4,TGW-B%^<$K(@A魁8btV@,3[jxDjF%'%JrmT+P\T{^Ã+xk x]/O5ƽ*^-4,3D]D;R Pu=ʜ4<#=se*K}})3V)Tr/E$[@-9S9sJMyf9 >Ȁ=]& - kfE:g'v[fz$@Ϧ5=8N#K3ޘ rvRR;0*Nv:7b"jiͯ)&?^:U){%Y2aLzk_Pb4bg}"&NaFȼCEHHY9BUeY6QlyHX 98E LV"v jh,F;k +8GUBudPK­<pɧ%#Y_OY@\C/(xM/ ٱ6,Ip