systemd-oomd-252-46.el9_5.3> M Mv ĉJ4!!%joLne)Ip-Bm5 ']ghreleng@rockylinux.org p-Bm5 ']Txٺ4F$(*ۑzrRjATD"lIj4$3O!Zx ~[87n 䎳oXM@qrUF$M赑gZ,Ȁ5p ;D;sJ%2=m/Kox~@R"t{`@lWT+ 7⤞dG'74\bCҌ ?$m3gB/Mowd4- k!A϶v n¯I8ko8aT;9RJӫqX-ǐr?\PBC[psY$4|GjCpf%cBfμ*6$+kYi"3}XwC`z劊8n{>G[ $,+ȟLI%Μ5kuai2^O¦Ke'2CCi}rxO:Dβ M ԡƉ[O$E?d  E(,<ai |J    L  e   $   @ lO(8$94$:{$=>? @(G0HIXY,\l]^bdKePfUlXtpuv8 wx`y$(.ptCsystemd-oomd25246.el9_5.3A userspace out-of-memory (OOM) killersystemd-oomd is a system service that uses cgroups-v2 and pressure stall information (PSI) to monitor and take action on processes before an OOM occurs in kernel space.gfgpb-6d602e8d-2d42-485b-80a9-a52f2687e8ae-b-x86-64Rocky Linux 9.5Rocky Enterprise Software FoundationLGPLv2+Rocky Linux Build System (Peridot) Unspecifiedhttps://systemd.iolinuxx86_64getent group systemd-oom &>/dev/null || groupadd -r systemd-oom 2>&1 || : getent passwd systemd-oom &>/dev/null || useradd -r -l -g systemd-oom -d / -s /sbin/nologin -c "systemd Userspace OOM Killer" systemd-oom &>/dev/null || : if [ $1 -eq 1 ] && [ -x "/usr/lib/systemd/systemd-update-helper" ]; then # Initial installation /usr/lib/systemd/systemd-update-helper install-system-units systemd-oomd.service || : fi if [ $1 -eq 0 ] && [ -x "/usr/lib/systemd/systemd-update-helper" ]; then # Package removal, not upgrade /usr/lib/systemd/systemd-update-helper remove-system-units systemd-oomd.service || : fi if [ $1 -ge 1 ] && [ -x "/usr/lib/systemd/systemd-update-helper" ]; then # Package upgrade, not uninstall /usr/lib/systemd/systemd-update-helper mark-restart-system-units systemd-oomd.service || : fi$M(+ZJ@Sx )L4XAAA큤큤c`ggOggUggUggUggUggIggIggIgg5c`ggIggOc`c`gg6c`c`gg6gg6gg6gg7gg:gg:c`923a58ff9130f139196fe432e7e3a176f9e356fd0fe594bda915b529983c91719c472419deac49e7106f8ab18acf3f08014d628242417f2a9cd0a7f7f8f4e124f7c8e9d3455bf54795063e3914956b4e15ba52f493b0f2304abef6326a80c6cb8d6d5069f0442c667cf9e1014f0db8d85fb3bfec7959bdad936a06d9cecc68ecfab083a4594f85ededf15f5132a70d85976d2b42caa87b461c836f32c5d49fe7b8b9345391cf485d277a20b9e2bc5ba830cfa24f3eccb93eba38412f47d76873ddf0f174373b79ea32997999cf2139e595c3fe9ccaf6ff66b2230d493fc664effb4acc1209ed79f847059c322631f4c5f45c4503dc72d8c5f7e4841d0321cbb60e1228463a3a022b08345636ced92fca41bfd724aee6b3c456398679fc56ac9b8ad55715b608c502b94ed4543cd790e5129d7f3838bf7c63b3f69df12308a2517d083f1a7e7f35c46670b2385c4b21020f4d17b31a90edb9d9fb3bda9bc0cb9ef23a2658a6cc7724f943ede88e968f4e2c9c59d7757697a77df761a2a05b73f26b899035d7f957d63c211cdb72e7d32cd64fcd3cb39c1735413d65d24cad1de2960878c0b2dde8a0bcb2efce26d7dd9acade8cbbe160eb09f73f06151f8841bba4275ac3fa4c9c823cfbf85c4985f1fd7f43730938eb236e9ec882b3cd2c25f7ddb61a53d87ba19fa33b168a53ba1ad97e04d2a0cf20577daaf893b0ec7c3b16d7038d1ad5ed35c8659c29663bb18caacb3f19a55a8aa5f9869ab78beede1e2a860a5af178d101f0f9c559755b245b1bbb7efca58b636240c504a48e96408458768848b7e49e759b81c9ae6867de573d670ec50771778829914e75ea074fd1af869841acb04cf190871773bf9bfd20e64bb0717da79d0cab8ca46a553cbb85ba../../../../usr/lib/systemd/systemd-oomd../../../../usr/bin/oomctlrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootsystemd-252-46.el9_5.3.src.rpmconfig(systemd-oomd)group(systemd-oom)systemd-oomdsystemd-oomd(x86-64)systemd-oomd-defaultsuser(systemd-oom) @@@@@@@@@@    @/bin/sh/bin/sh/bin/sh/bin/shconfig(systemd-oomd)libc.so.6()(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.34)(64bit)libc.so.6(GLIBC_2.4)(64bit)libgcc_s.so.1()(64bit)libgcc_s.so.1(GCC_3.0)(64bit)libgcc_s.so.1(GCC_3.3.1)(64bit)libsystemd-shared-252.so()(64bit)libsystemd-shared-252.so(SD_SHARED)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsZstd)rtld(GNU_HASH)systemd(x86-64)252-46.el9_5.33.0.4-14.6.0-14.0-15.4.18-1252-46.el9_5.34.16.1.3g`@g@f4f@fѴ@f@f(@f(@f3ffaf@fr@fj@fM@fK;@f+@e,e8@e@e}@eԔ@ee6@eee)eeves@eRd@d@d-@df@d@Release Engineering - 252-46systemd maintenance team - 252-46.3systemd maintenance team - 252-46.2systemd maintenance team - 252-46.1systemd maintenance team - 252-46systemd team - 252-45systemd maintenance team - 252-44systemd maintenance team - 252-43systemd team systemd maintenance team - 252-41systemd maintenance team - 252-40systemd maintenance team - 252-39systemd maintenance team - 252-38systemd maintenance team - 252-37Jan Macku - 252-35systemd maintenance team - 252-34systemd maintenance team - 252-33Jan Macku - 252-32systemd maintenance team - 252-31systemd maintenance team - 252-30systemd maintenance team - 252-29systemd maintenance team - 252-28systemd maintenance team - 252-27systemd maintenance team - 252-26systemd maintenance team - 252-25systemd maintenance team - 252-24systemd maintenance team - 252-23systemd maintenance team - 252-22systemd maintenance team - 252-21systemd maintenance team - 252-20systemd maintenance team - 252-19systemd maintenance team - 252-18systemd maintenance team - 252-17systemd maintenance team - 252-16systemd maintenance team - 252-15systemd maintenance team - 252-14- Set support URL to the wiki - Set sbat mail to security@rockylinux.org- get rid of SELinux policy module (RHEL-76033)- add %posttrans scriptlet to make sure our SELinux policy module is actually installed (RHEL-46339)- version bump (RHEL-56019)- ukify: Skip test on architectures without UEFI (RHEL-56019)- build ukify without noarch- Revert "udev-builtin-net_id: use firmware_node/sun for ID_NET_NAME_SLOT" (RHEL-50103) - fundamental: share constants for confidential virt detection (RHEL-50651) - efi: add helper API for detecting confidential virtualization (RHEL-50651) - efi: don't pull kernel cmdline from SMBIOS in a confidential VM (RHEL-50651) - Fix detection of TDX confidential VM on Azure platform (RHEL-50651)- udev-builtin-net_id: skip non-directory entry earlier (RHEL-50103) - udev-builtin-net_id: return earlier when hotplug slot is not found (RHEL-50103) - udev-builtin-net_id: split-out pci_get_hotplug_slot() and pci_get_hotplug_slot_from_address() (RHEL-50103) - udev-builtin-net_id: use firmware_node/sun for ID_NET_NAME_SLOT (RHEL-50103) - Include if possible to get thread_local definition (RHEL-50651) - add APIs for detecting confidential virtualization (RHEL-50651) - detect-virt: add --cvm option (RHEL-50651) - detect-virt: add --list-cvm option (RHEL-50651) - unit: add "cvm" option for ConditionSecurity (RHEL-50651) - dbus: add 'ConfidentialVirtualization' property to manager object (RHEL-50651) - core: log detected confidential virtualization type (RHEL-50651) - core: set SYSTEMD_CONFIDENTIAL_VIRTUALIZATION env for generators (RHEL-50651) - udev: add 'conf-virt' constant for confidential virtualization tech (RHEL-50651) - confidential-virt: split caching of CVM detection into separate method (RHEL-50651) - confidential-virt: add detection for s390x target (RHEL-50651) - man/systemd-detect-virt: list known CVM technologies (RHEL-50651)- fix applying patches- timedatectl: setting set_local_rtc to 1 will throw Warning as well, use log_warning() (#33489) (RHEL-45020) - cryptsetup-tokens: fix pin asserts (RHEL-36276) - cryptenroll: Use CTAP2.1 credProtect extension (RHEL-36276) - kernel-install: check machine ID (RHEL-50672) - kernel-install: ignore errors when reading /etc/machine-id (RHEL-50672) - hwdb: Add Lenovo G580 (RHEL-5950) - Fix key toggle and programmable button for Positivo N14ZP (RHEL-5950) - hwdb: Add accel orientation quirk for the Acer Switch V 10 SW5-017 2-in-1 (RHEL-5950) - hwdb: fix Compaq N14KP6 key toggle touchpad (#25404) (RHEL-5950) - hwdb: remove fuzz and deadzone for Simucube wheel bases. (RHEL-5950) - hwdb: Add support for Elgato Stream Pedal (#25550) (RHEL-5950) - hwdb: add Clevo touchpad toggle key quirks (RHEL-5950) - hwdb: add Dell Inspiron N4010 touchpad corrections (RHEL-5950) - hwdb: add Positivo-vaio Pro PW key toggle touchpad (#25669) (RHEL-5950) - Add mount matrix for VisionBook 12Wr Tab (RHEL-5950) - Update 60-evdev.hwdb (#25704) (RHEL-5950) - hwdb: Add additional Dell models that require ACCEL_LOCATION=base (#25724) (RHEL-5950) - hwdb: drop trailing space (RHEL-5950) - hwdb: add comments about matching entries (RHEL-5950) - hwdb: also add a generic entry for DualPoint Stick (RHEL-5950) - hwdb: Add mount matrix for CSL Panther Tab HD (RHEL-5950) - hwdb: Fix mount matrix for CSL Panther Tab HD (#25752) (RHEL-5950) - hwdb: Fn+F5 fix for MSI Bravo 15-B5DX (#25788) (RHEL-5950) - hwdb: change definition of PROXIMITY_NEAR_LEVEL for sensors (RHEL-5950) - hwdb: Add mic-mute, control-center and screen-rotation mappings for MSI laptops (RHEL-5950) - Prevents airplane mode toggle for HP Spectre 16 (RHEL-5950) - Update 60-sensor.hwdb (RHEL-5950) - Added Tablet Teclast X98 Air 3G (C5J6) (RHEL-5950) - hwdb: remove spurious whitespace (RHEL-5950) - hwdb: Add Dell models that require ACCEL_LOCATION=base (RHEL-5950) - Fix Positivo MASTER-N1110 key toggle touchpad (RHEL-5950) - hwdb: Mark Dell platform accel sensor location to base (RHEL-5950) - hwdb: Add mount matrix for Linx 1020 (RHEL-5950) - hwdb: Add mic mute key mappings for Dell G16 Series (RHEL-5950) - hwdb: Add Chuwi Hi10X (N4120 version) iio matrix (RHEL-5950) - hwdb: Add touchpad toggle mapping for System76 Pangolin 12 (RHEL-5950) - hwdb: Prevent activation of airplane mode on HP ENVY x360 (RHEL-5950) - Update hwdb (RHEL-5950) - hwdb: update (RHEL-5950) - hwdb: update autosuspend db (RHEL-5950) - hwdb: ieee1394-unit-function: add MOTU 896 mk3 Hybrid (RHEL-5950) - Add hwdb sensor entry for Lenovo IdeaPad Duet 3 10IGL5 (82AT). (RHEL-5950) - Fix Positivo-vaio VJPW12F11X key toggle touchpad (RHEL-5950) - hwdb: Add HP Envy x360 Convertible 15-cn0xxx to existing entry (RHEL-5950) - hwdb: add override for IdeaPad5 insert key (RHEL-5950) - hwdb: update database (RHEL-5950) - hwdb: Add HP ENVY x360 2-in-1 (RHEL-5950) - hwdb: update (RHEL-5950) - hwdb: fix swapped buttons for Logitech Lift left (RHEL-5950) - Revert "hwdb: fix swapped buttons for Logitech Lift left" (RHEL-5950) - hwdb: update 70-mouse.hwdb (#26782) (RHEL-5950) - hwdb: 60-keyboard.hwdb: Fix modalias for Thinkpad X200 Tablet (#26795) (RHEL-5950) - Add rebrands of Medion Akoya notebooks/tablets (RHEL-5950) - hwdb: fix Wifi toggling for Haier 7G-Series/JWU (#25293) (#26878) (RHEL-5950) - hwdb: drop boilerplate about match patterns in two more cases (RHEL-5950) - hwdb: Fix incorrect touchpad dimensions on Thinkpad L14 Gen1 (#26937) (RHEL-5950) - hwdb: drop redundant entry (RHEL-5950) - hwdb: Fixed thumb buttons reversed on CHERRY MW 2310 (#26992) (RHEL-5950) - hwdb: Move MSI touchpad-toggle mapping to generic MSI section (RHEL-5950) - update 60-sensor.hwdb with toshiba tablet (#27103) (RHEL-5950) - hwdb: Add support for "Passion Model P612F" (RHEL-5950) - hwdb: fix ambiguous glob pattern for Lenovo machines (RHEL-5950) - hwdb: add matrix for Asus BR1100F (#27197) (RHEL-5950) - hwdb: add accelerometer mount matrix for Lenovo Yoga Tablet 2 851F/L (RHEL-5950) - hwdb: Fix rotation for BMAX Y13 (RHEL-5950) - hwdb: disable entry for Logitech USB receiver used by G502 X (RHEL-5950) - hwdb: add hardware rfkill key for Dell Latitude E6* models (#27462) (RHEL-5950) - hwdb: do not include '#' in modalias (RHEL-5950) - hwdb: add landscape IdeaPad Miix 310 sensor orientation (#27555) (RHEL-5950) - Fix Positivo CF40CM-V2 key toggle touchpad (RHEL-5950) - hwdb: fix keyboard entry for IdeapadFlex5 (#27643) (RHEL-5950) - hwdb: fix Positivo CG15D key toggle touchpad and programmable keys (#27689) (RHEL-5950) - hwdb: add support for Elgato Stream Deck mini (gen 2) (RHEL-5950) - hwdb: fix arrow keys on HP Elite Dragonfly G3 (RHEL-5950) - hwdb: add support for Jun Tab2/Dere T11 to 60-sensor.hwdb (#28092) (RHEL-5950) - hwdb: fix volume control keys on Lenovo IdeaPad Flex 5 (14ARE05) (RHEL-5950) - hwdb: Add override for headset form-factors (RHEL-5950) - hwdb : add support for Archos 101 Cesium Educ to 60-sensor.hwdb (RHEL-5950) - hwdb: drop trailing white space (RHEL-5950) - hwdb: merge multiple keyboard entries with same setting (RHEL-5950) - hwdb: make matching modalias for Archos 101 Cesium Educ more strict (RHEL-5950) - hwdb update for v246-rc1 (RHEL-5950) - update hwdb autosuspend data for v254 (RHEL-5950) - hwdb: add support for Archos 101 Cesium to 60-sensor.hwdb (#28270) (RHEL-5950) - Hwdb: Add Sanwa Direct 400-MA128 external trackpad (#28272) (RHEL-5950) - hwdb: drop POINTINGSTICK_CONST_ACCEL (RHEL-5950) - Add alternate name for MX Ergo as found on some devices (RHEL-5950) - Update hwdb (RHEL-5950) - hwdb: run update-hwdb (RHEL-5950) - hwdb: run update-hwdb (RHEL-5950) - hwdb: Mute SW rfkill keys on MSI Wind U100 (RHEL-5950) - Update 60-sensor.hwdb (#28804) (RHEL-5950) - hwdb: Added config for RCA W101SA23T1 (#29041) (RHEL-5950) - Update 60-input-id.hwdb: add TEX Shinobi (#29068) (RHEL-5950) - hwdb: keyboard: D330 FnLk toggle (RHEL-5950) - hwdb: Add Logitech G502 X (RHEL-5950) - hwdb: ieee1394-unit-function: remove superfluous Weiss Engineering DAC1 entry (RHEL-5950) - hwdb: ieee1394-unit-function: add Weiss Engineering DAC202 (Maya edition) (RHEL-5950) - hwdb: ieee1394-unit-function: add Weiss Engineering INT203 entry with older firmware (RHEL-5950) - hwdb: ieee1394-unit-function: add Weiss Engieering MAN301 (RHEL-5950) - hwdb: Add quirk for teclast x3 plus (G4K3) rotation (#29202) (RHEL-5950) - hwdb: add mic mute key mappings for Acer Predator Triton 300 SE (RHEL-5950) - hwdb: Bush tablet rotation support (#29268) (RHEL-5950) - hwdb: ieee1394-unit-function: add Miglia Technology Harmony Audio (HA02) (RHEL-5950) - add support for hp pavilion gaming 15 lid switch (#29304) (RHEL-5950) - Fix Positivo N14EP6 key toggle touchpad and programmable keys (#29448) (RHEL-5950) - add udev rule for micmute (f20) (RHEL-5950) - hwdb,rules: mark host-to-host network devices as only requiring link local addressing (RHEL-5950) - Update hwdb (RHEL-5950) - Update hwdb autosuspend rules (RHEL-5950) - Update hwdb (RHEL-5950) - hwdb: Add accelerometer data for Librem11 (#29974) (RHEL-5950) - hwdb: PNP/ACPI lists on uefi.org are now in CSV format (RHEL-5950) - Update hwdb (RHEL-5950) - hwdb: rename .html=>.csv (RHEL-5950) - hwdb/acpi-update.py: streamline python code (RHEL-5950) - hwdb: Mark Dell platform accel sensor location to base (RHEL-5950) - hwdb: add Predator PHN16-71 (RHEL-5950) - Update 60-autosuspend.hwdb (#30131) (RHEL-5950) - hwdb: update (RHEL-5950) - hwdb: ieee1394-unit-function: add Sony DVMC-DA1 (RHEL-5950) - hwdb: ieee1394-unit-function: arrangement for Sony DVMC-DA1 (RHEL-5950) - hwdb: update (RHEL-5950) - hwdb: update (RHEL-5950) - Adding Trekstor Primebook C13 rotation to 60-sensor.hwdb (#30415) (RHEL-5950) - Add three Dell platforms to sensor accel location base (RHEL-5950) - Add Bosto BT-12HD series to hwdb (RHEL-5950) - hwdb: Add override for headset form-factor for the Corsair Void Elite (RHEL-5950) - hwdb: add Teclast X98 Pro sensor info (#30859) (RHEL-5950) - hwdb: Correct display rotation on Chuwi Ubook X N4100 (#24248) (RHEL-5950) - hwdb: ieee1394-unit-function: adjustment of entries with device attributes available in Linux v6.8 (RHEL-5950) - 60-evdev.hwdb: Add support for Huion Inspiroy 2 L (#31241) (RHEL-5950) - hwdb: add resolution setting for GAOMON S620 (RHEL-5950) - hwdb: Remove version check in CH Pro Pedals rule (RHEL-5950) - hwdb: Add support for MetawillBook01 to 60-sensor.hwdb Add accel orientation quirk for the METAPHYUNI MetawillBook01 2-in-1 laptop (RHEL-5950) - hwdb: Add headset form-factor override for Xbox Wireless Dongle (RHEL-5950) - hwdb: Add support for Elgato Stream Deck Plus (RHEL-5950) - Fix: Chuwi UBook X (CWI535) screen rotation matrix (RHEL-5950) - hwdb: Add touchpad toggle mapping for Kvadra LE14U/LE15U (RHEL-5950) - hwdb: Add touchpad configuration for ThinkPad E495 (RHEL-5950) - Fix Positivo N14NPE-N and N15NPE-N key toggle touchpad and search key (RHEL-5950) - Update USB ids of hwdb (RHEL-5950) - Added resolution for Huion Kamvas Pro 19 (RHEL-5950) - hwdb: Add mapping for ACPI quickstart keys on Toshiba Z830 (RHEL-5950) - hwdb: fix Asus T300FA rotation matrix (#31973) (RHEL-5950) - Fixed resolution for pen and touchpad (RHEL-5950) - hwdb: fix missing colon (#32108) (RHEL-5950) - hwdb: update for v256 (RHEL-5950) - autosuspend: update for v256 (RHEL-5950) - Update hwdb (RHEL-5950) - Update autosuspend hwdb (RHEL-5950) - Update hwdb (RHEL-5950) - hwdb: Add a common Logitech M185/M225 mouse variant (RHEL-5950) - hwdb: Add mapping for Samsung GalaxyBook - 550X (#32616) (RHEL-5950) - hwdb: Add mapping for Xiaomi Mipad 2 bottom bezel capacitive buttons (RHEL-5950) - hwdb: ieee1394-unit-function: add Tascam IF-FW/DM mkII (RHEL-5950) - hwdb: Add a Logitech MX Master 3S (connected via Bolt Receiver) (RHEL-5950) - Fix Positivo N14EPE and N15EPE key toggle touchpad and search key (RHEL-5950) - hwdb: update Dere N12 / Juno Tablet 3 accelerometer (#32765) (RHEL-5950) - hwdb: updated Librem 11 accelerometer (#32772) (RHEL-5950) - hwdb: ID_INPUT_XYZ allows an empty string (RHEL-5950) - hwdb: ASRock LED Controller classified incorrectly as joystick due to buttons and axis (#32775) (RHEL-5950) - Update hwdb (RHEL-5950) - hwdb.d/60-keyboard.hwdb: enable Clevo quirk for model V5x0TU (RHEL-5950) - hwdb: Enable JP-IK LEAP W502's touchpad toggle key (RHEL-5950) - Update hwdb (RHEL-5950) - Update autosuspend hwdb (RHEL-5950) - hwdb: Lenovo IdeaPad Z500 Touchpad Toggle (#33039) (RHEL-5950) - hwdb: add a vmbus id for HyperV Video device (RHEL-5950) - hwdb: Add Logitech MX Master 3S Bluetooth ID (RHEL-5950) - hwdb: Lenovo 16G6IRL volume keys and friends (#33107) (RHEL-5950) - hwdb: added hwdb rules for micmute and power button on Acer Nitro AN 515-58 (#32867) (RHEL-5950) - Fix key toggle touchpad and programmable buttom for Positivo N14AP7 (RHEL-5950) - Update hwdb (RHEL-5950) - hwdb: add keyboard mappings for the Ayaneo Kun face buttons (RHEL-5950) - Update hwdb (RHEL-5950) - hwdb: add support for AIPTEK Media Tablet Ultimate (#33371) (RHEL-5950) - hwdb: add scancodes for AYANEO devices (#33378) (RHEL-5950) - Add OrangePi NEO Scancodes (RHEL-5950) - hwdb: Fix Logitech G915 TKL (Bluetooth) appearing as a mouse (RHEL-5950) - hwdb: fix keyboard of RedmiBook Pro 15 2022 (#33465) (RHEL-5950) - Added mised EVDEV_ABS_35 & EVDEV_ABS_36 for GAOMON s620 (RHEL-5950) - hwdb: Add some HP IR cameras (RHEL-5950) - hwdb: add more AV controllers (RHEL-5950) - Fix key toggle touchpad button for multilaser ul154 (#33630) (RHEL-5950) - hwdb: Added StarLabs StarLite position sensor mapping (RHEL-5950) - 70-mouse.hwdb: Added Glorious Model O DPI (RHEL-5950) - Update 60-sensor.hwdb (RHEL-5950) - Add MSI Claw AT Keyboard Scancodes. (RHEL-5950) - Add or fix mount matrix for multiple handhelds. (#33586) (RHEL-5950) - Revert "hwdb: Added StarLabs StarLite position sensor mapping" (RHEL-5950) - hwdb: fix accelerometer mount matrix for Aquarius Cmp NS483 (RHEL-5950) - hwdb: add backslash and touchpad toggle mapping for Aquarius Cmp NS483 (RHEL-5950) - hwdb: Add mic mute key mapping for Dell Pro Rugged series (RHEL-5950) - hwdb: fix MXC6655 accelerometer mount matrix for Aquarius Cmp NS483 (RHEL-5950) - add udev rules for trezor hw wallet devices (RHEL-5950) - hwdb: add axis range corrections for the Lenovo Thinkpad E16 (RHEL-5950) - hwdb: fix auto rotate on Asus Q551LB (#33921) (RHEL-5950) - udev: add hwdb execution for hidraw subsystem devices (RHEL-5950)- add Requires(post) on selinux-policy (RHEL-46339)- enable FIDO2 support (RHEL-36276) - netif-naming-scheme: disable NAMING_BRIDGE_MULTIFUNCTION_SLOT (RHEL-44630) - netif-naming-scheme: make actually possible to use rhel-9.5 scheme (RHEL-44630) - generator: "uninline" generator_open_unit_file and generator_add_symlink (RHEL-33436) - ci: add support for rhel-only parameters (RHEL-30372)- tools: fix the file name that "meson setup" generates (RHEL-30372) - tools: explicitly specify "setup" subcommand (RHEL-30372) - fuzz: pass -Dc_args=/-Dcpp_args= to fuzzer targets (RHEL-30372) - fuzz: don't panic without a C++ compiler (RHEL-30372) - meson: use ternary op for brevity (RHEL-30372)- ci(src-git): add RHEL-9.1 and RHEL-9.1.z to allowed versions (RHEL-30372) - libsystemd: link with '-z nodelete' (RHEL-6589) - basic/utf8: make utf8_encoded_to_unichar() return length of the codepoint (RHEL-31219) - test-gunicode: add new test to show that unichar_iswide() is borked (RHEL-31219) - string-util: pass ANSI sequences through unchanged (RHEL-31219) - cryptsetup: do not assert when unsealing token without salt (RHEL-38864) - cryptsetup: check the existence of salt by salt_size > 0 (RHEL-38864) - core/mount: if umount(8) fails but mount disappeared, assume success (RHEL-13159) - Drop log level of header limits log message (RHEL-33890) - journal: do not rotate unrelated journal files when full or corrupted (RHEL-33890) - man: suffix --unit with an equal sign, since it expects an argument (RHEL-31070) - shared: move uid-alloc-range.[ch] from src/shared/ → src/basic/ (RHEL-31070) - journald: move uid_for_system_journal() to uid-alloc-range.h (RHEL-31070) - sd-journal: when SD_JOURNAL_CURRENT_USER is set, and called from system UID, imply SD_JOURNAL_SYSTEM (RHEL-31070) - man: document that journalctl --user requires Storage=persistent (RHEL-31070) - fix: prefix of dmesg pstore files (RHEL-20322) - backport new mkosi (RHEL-27512) - test: Skip various tests when /sys is not mounted (RHEL-27512) - string-util: introduce ascii_ishex() (RHEL-27512) - sd-id128: several cleanups (RHEL-27512) - sd-id128: make id128_read() or friends return -ENOPKG when the file contents is "uninitialized" (RHEL-27512) - test: add tests for "uninitialized" string handling by id128_read_fd() (RHEL-27512) - man: mention sd_id128_get_machine() or friend may return -ENOPKG (RHEL-27512) - sd-id128: make sd_id128_get_boot() and friend return -ENOMEDIUM (RHEL-27512) - sd-id128: make sd_id128_get_boot() and friend return -ENOSYS when /proc/ is not mounted (RHEL-27512) - man: mention that sd_id128_get_boot() and friend may return -ENOSYS (RHEL-27512) - sd-id128: fold do_sync flag into Id128FormatFlag (RHEL-27512) - sd-id128: make sd_id128_get_machine() or friends return -EUCLEAN when an ID is in an invalid format (RHEL-27512) - sd-id128: allow sd_id128_get_machine() and friend to be called with NULL (RHEL-27512) - sd-id128: also refuse an empty invocation ID (RHEL-27512) - man: update documents for sd_id128_get_invocation() (RHEL-27512) - test-id128: simplify machine-id check (RHEL-27512) - test-fs-util: skip part of test_chase_symlinks if machine-id is not initialized (RHEL-27512) - test-unit-name: simplify machine-id check (RHEL-27512) - test-load-fragment: simplify machine-id check (RHEL-27512) - journal: skip part of test-journal-interleaving if no machine-id exists (RHEL-27512) - test: skip journal tests without valid /etc/machine-id (RHEL-27512) - test-recurse-dir: work around nftw() ignoring symlinks() (RHEL-27512) - test: Skip test-recurse-dir on overlayfs (RHEL-27512) - test-specifier: Ignore -ENOPKG from specifier_printf() (RHEL-27512) - test-execute: Skip when /sys is read-only (RHEL-27512) - kernel-install: Make sure KERNEL_INSTALL_BYPASS is disabled in tests (RHEL-27512) - tools: make sure $KERNEL_INSTALL_BYPASS is disabled when checking help (RHEL-27512) - test-execute: drop capabilities when testing with user manager (RHEL-27512) - tmpfiles: Add merge support for copy files action (RHEL-27512) - generator: add generator_open_unit_file_full to allow creating temporary units (RHEL-27512) - network-generator: rewrite unit if it already exists and its content changed (RHEL-27512) - ci: drop super-linter's shellcheck (RHEL-27512) - mkosi: make sure we build & use RHEL 9 stuff (RHEL-27512) - ci: backport mkosi CI configuration from upstream (RHEL-27512) - mkosi: explicitly enroll SecureBoot keys (RHEL-27512) - test-execute: also mount tmpfs on /dev/shm (RHEL-27512) - mkosi: fix UKI addons test (RHEL-27512) - Revert "mkosi: Disable cmdline addon test for now" (RHEL-27512) - Revert "mkosi: Don't fail on systemd-vconsole-setup.service failure for now" (RHEL-27512) - mkosi: make shellcheck happy (RHEL-27512) - mkosi: use pesign for signing UKI addons (RHEL-27512) - test: copy out the necessary test data before we start overmounting stuff (RHEL-27512) - ci: make the build dir accessible when running w/o privileges (RHEL-27512) - ci: explicitly change oom-{score}-adj before running tests (RHEL-27512) - ratelimit: add ratelimit_left helper (RHEL-35703) - manager: restrict Dump*() to privileged callers or ratelimit (RHEL-35703) - ci: define `runas` function inline (RHEL-35703) - Drop /dev test in test-mountpoint-util (RHEL-30372) - core/manager: export manager_dbus_is_running (RHEL-40878) - core: refuse dbus activation if dbus is not running (RHEL-40878) - core: only refuse Type=dbus service enqueuing if dbus has stop job (RHEL-40878) - Revert "core/manager: export manager_dbus_is_running" and partially "core: refuse dbus activation if dbus is not running" (RHEL-40878) - manager: fix reloading in reload-or-restart --marked (RHEL-40878) - rpm: add `systemd_postun_with_reload` and `systemd_user_postun_with_reload` (RHEL-40878) - rpm: add `systemd_user_daemon_reexec` (RHEL-40878)- spec: return selinux dependencies (RHEL-35732)- ci: update actions/upload-artifact to v4 (RHEL-30372) - journal-remote: code is of type enum MHD_RequestTerminationCode (RHEL-30372) - resolve: dns_server_feature_level_*_string type is DnsServerFeatureLevel (RHEL-30372) - shared|install: Use InstallChangeType consistently (RHEL-30372) - test: temporarily disable coredumps in testsuite-17.03.sh (RHEL-30372) - ci: update manpage deployment workflow (RHEL-30372) - bootspec: fix null-dereference-read (RHEL-36284) - units: don't install pcrphase-related units without gnu-efi (RHEL-33384) - kernel-install: fix uki-copy deinstall (RHEL-36505) - ci(packit): explicitly clone `c9s` branch (RHEL-30372)- execute: Pass AT_FDCWD instead of -1 (RHEL-31783) - ci(src-git): update list of supported products (RHEL-30372) - coredump: by default process and store core files up to 1GiB (RHEL-15501) - coredump: keep core files for two weeks (RHEL-15501) - ukify: make the test happy with the latest OpenSSL (RHEL-30372) - test_ukify: use raw string for the regex (RHEL-30372) - coredump: generate stacktraces also for processes running in containers w/o coredump forwarding (RHEL-29430) - test: add a couple of tests for systemd-coredump (RHEL-29430) - test: don't expand the subshell expression prematurely (RHEL-29430) - coredump filter: fix stack overflow with =all (RHEL-29430) - coredump filter: add mask for 'all' using UINT32_MAX, not UINT64_MAX (RHEL-29430) - test: add coverage for CoredumpFilter=all (RHEL-29430) - test: rotate journal before storing coredumps (RHEL-29430) - test: sync with the fake binary before killing it (RHEL-29430) - test: check coredump handling in containers & namespaces (RHEL-29430)- rebase rhel-net-naming-sysattrs to v0.5- bootctl: rework random seed logic to use open_mkdir_at() and openat() (RHEL-16952) - bootctl: properly sync fs before/after moving random seed file into place (RHEL-16952) - bootctl: when updating EFI random seed file, hash old seed with new one (RHEL-16952) - sha256: add helper than hashes a buffer *and* its size (RHEL-16952) - random-seed: don't refresh EFI random seed from random-seed.c anymore (RHEL-16952) - bootctl: downgrade graceful messages to LOG_NOTICE (RHEL-16952) - units: rename/rework systemd-boot-system-token.service → systemd-boot-random-seed.service (RHEL-16952) - bootctl: split out setting of system token into function of its own (RHEL-16952)- resolved: limit the number of signature validations in a transaction (RHEL-26643) - resolved: reduce the maximum nsec3 iterations to 100 (RHEL-26643) - efi: alignment of the PE file has to be at least 512 bytes (RHEL-26133) - units: change assert to condition to skip running in initrd/os (RHEL-16182) - ci: add configuration for regression sniffer GA (RHEL-1086)- units: fix typo in Condition in systemd-boot-system-token (RHEL-16952)- random-seed: shorten a bit may_credit() (RHEL-16952) - random-seed: make one more use of random_write_entropy() (RHEL-16952) - random-seed: use getopt() (RHEL-16952) - random-seed: make the logic to calculate the number of bytes read from the random seed file clearer (RHEL-16952) - random-seed: no need to pass 'mode' argument when opening /dev/urandom (RHEL-16952) - random-seed: split out run() (RHEL-16952) - random_seed: minor improvement in run() (RHEL-16952) - random-seed: downgrade some messages (RHEL-16952) - random-seed: clarify one comment (RHEL-16952) - random-seed: make sure to load machine id even if the seed file is missing (RHEL-16952) - chase-symlinks: add new flag for prohibiting any following of symlinks (RHEL-16952) - bootctl,bootspec: make use of CHASE_PROHIBIT_SYMLINKS whenever we access the ESP/XBOOTLDR (RHEL-16952) - boot: implement kernel EFI RNG seed protocol with proper hashing (RHEL-16952) - random-seed: refresh EFI boot seed when writing a new seed (RHEL-16952) - random-seed: handle post-merge review nits (RHEL-16952) - boot: do not truncate random seed file (RHEL-16952) - bootctl: install system token on virtualized systems (RHEL-16952) - boot: remove random-seed-mode (RHEL-16952) - stub: handle random seed like sd-boot does (RHEL-16952) - efi: add efi_guid_equal() helper (RHEL-16952) - efi: add common implementation for loop finding EFI configuration tables (RHEL-16952) - boot: Detect hypervisors using SMBIOS info (RHEL-16952) - boot: Skip soft-brick warning when in a VM (RHEL-16952) - boot: Replace UINTN with size_t (RHEL-16952) - boot: Use unsigned for beep counting (RHEL-16952) - boot: Use unicode literals (RHEL-16952) - macro: add generic IS_ALIGNED32() anf friends (RHEL-16952) - meson: use 0|1 for SD_BOOT (RHEL-16952) - boot: Add printf functions (RHEL-16952) - boot: Use printf for error logging (RHEL-16952) - boot: Introduce log_wait (RHEL-16952) - boot: Add log_trace debugging helper (RHEL-16952) - tree-wide: Use __func__ in asserts (RHEL-16952) - boot: Drop use of xpool_print/SPrint (RHEL-16952) - boot: Drop use of Print (RHEL-16952) - boot: Rework GUID handling (RHEL-16952) - efi-string: Fix strchr() null byte handling (RHEL-16952) - efi-string: Add startswith8() (RHEL-16952) - efi-string: Add efi_memchr() (RHEL-16952) - vmm: Add more const (RHEL-16952) - vmm: Add smbios_find_oem_string() (RHEL-16952) - stub: Read extra kernel command line items from SMBIOS (RHEL-16952) - vmm: Modernize get_smbios_table() (RHEL-16952) - stub: measure SMBIOS kernel-cmdline-extra in PCR12 (RHEL-16952) - efi: support passing empty cmdline to mangle_stub_cmdline() (RHEL-16952) - efi: set EFIVAR to stop Shim from uninstalling its protocol (RHEL-16952) - ukify: use empty stub for addons (RHEL-16952) - stub: allow loading and verifying cmdline addons (RHEL-16952) - TODO: remove fixed item (RHEL-16952) - fix: do not check/verify slice units if recursive errors are to be ignored (RHEL-1086)- test: merge TEST-20-MAINPIDGAMES into TEST-07-PID1 (fixup) (RHEL-1086) - test: use the default nsec3-iterations value (RHEL-1086) - test: explicitly set nsec3-iterations to 0 (RHEL-1086) - core: mount namespaces: Remove auxiliary bind mounts directory after unit termination (RHEL-19483) - ci: deploy systemd man to GitHub Pages (RHEL-1086) - doc: add missing `` to `systemd.net-naming-scheme.xml` (RHEL-7026) - man: reorder the list of supported naming schemes (RHEL-7026) - tree-wide: fix return value handling of base64mem() (RHEL-16182) - Consolidate various TAKE_* into TAKE_GENERIC(), add TAKE_STRUCT() (RHEL-16182) - pcrphase: add $SYSTEMD_PCRPHASE_STUB_VERIFY env var for overriding stub check (RHEL-16182) - pcrphase: gracefully exit if TPM2 support is incomplete (RHEL-16182) - tpm2-util: split out code that derives "good" TPM2 banks into an strv from pcrphase and generalize it in tpm2-util.c (RHEL-16182) - tpm2-util: split out code that extends a PCR from pcrphase (RHEL-16182) - tpm2-util: optionally do HMAC in tpm2_extend_bytes() in case we process sensitive data (RHEL-16182) - cryptsetup: add tpm2-measure-pcr= and tpm2-measure-bank= crypttab options (RHEL-16182) - man: document the new crypttab measurement options (RHEL-16182) - gpt-auto-generator: automatically measure root/var volume keys into PCR 15 (RHEL-16182) - blkid-util: define enum for blkid_do_safeprobe() return values (RHEL-16182) - pcrphase: make tool more generic, reuse for measuring machine id/fs uuids (RHEL-16182) - units: measure /etc/machine-id into PCR 15 during early boot (RHEL-16182) - generators: optionally, measure file systems at boot (RHEL-16182) - tpm2: add common helper for checking if we are running on UKI with TPM measurements (RHEL-16182) - man: document new machine-id/fs measurement options (RHEL-16182) - test: add simple integration test for checking PCR extension works as it should (RHEL-16182) - update TODO (RHEL-16182) - cryptsetup: retry TPM2 unseal operation if it fails with TPM2_RC_PCR_CHANGED (RHEL-16182) - boot: Simplify object erasure (RHEL-16182) - tree-wide: use CLEANUP_ERASE() at various places (RHEL-16182) - dlfcn: add new safe_dclose() helper (RHEL-16182) - tpm2: rename tpm2 alg id<->string functions (RHEL-16182) - tpm2: rename struct tpm2_context to Tpm2Context (RHEL-16182) - tpm2: use ref counter for Tpm2Context (RHEL-16182) - tpm2: use Tpm2Context* instead of ESYS_CONTEXT* (RHEL-16182) - tpm2: add Tpm2Handle with automatic cleanup (RHEL-16182) - tpm2: simplify tpm2_seal() blob creation (RHEL-16182) - tpm2: add salt to pin (RHEL-16182) - basic/macro: add macro to iterate variadic args (RHEL-16182) - test/test-macro: add tests for FOREACH_VA_ARGS() (RHEL-16182) - basic/bitfield: add bitfield operations (RHEL-16182) - test/test-bitfield: add tests for bitfield macros (RHEL-16182) - tpm2: add tpm2_get_policy_digest() (RHEL-16182) - tpm2: add TPM2_PCR_VALID() (RHEL-16182) - tpm2: add/rename functions to manage pcr selections (RHEL-16182) - test/test-tpm2: add tests for pcr selection functions (RHEL-16182) - tpm2: add tpm2_pcr_read() (RHEL-16182) - tpm2: move openssl-required ifdef code out of policy-building function (RHEL-16182) - tpm2: add tpm2_is_encryption_session() (RHEL-16182) - tpm2: move policy building out of policy session creation (RHEL-16182) - tpm2: add support for a trusted SRK (RHEL-16182) - tpm2: fix nits from PR #26185 (RHEL-16182) - tpm2: replace magic number (RHEL-16182) - tpm2: add tpm2_digest_*() functions (RHEL-16182) - tpm2: replace hash_pin() with tpm2_digest_*() functions (RHEL-16182) - tpm2: add tpm2_set_auth() (RHEL-16182) - tpm2: add tpm2_get_name() (RHEL-16182) - tpm2: rename pcr_values_size vars to n_pcr_values (RHEL-16182) - tpm2: add tpm2_policy_pcr() (RHEL-16182) - tpm2: add tpm2_policy_auth_value() (RHEL-16182) - tpm2: add tpm2_policy_authorize() (RHEL-16182) - tpm2: use tpm2_policy_authorize() (RHEL-16182) - tpm2: add tpm2_calculate_sealing_policy() (RHEL-16182) - tpm: remove external calls to dlopen_tpm2() (RHEL-16182) - tpm2: remove all extern tpm2-tss symbols (RHEL-16182) - tpm2: add tpm2_get_capability(), tpm2_cache_capabilities(), tpm2_capability_pcrs() (RHEL-16182) - tpm2: verify symmetric parms in tpm2_context_new() (RHEL-16182) - tpm2: replace _cleanup_tpm2_* macros with _cleanup_() (RHEL-16182) - tpm2-util: use compound initialization when allocating tpm2 objects (RHEL-16182) - tpm2: add tpm2_get_capability_handle(), tpm2_esys_handle_from_tpm_handle() (RHEL-16182) - tpm2: add tpm2_read_public() (RHEL-16182) - tpm2: add tpm2_get_legacy_template() and tpm2_get_srk_template() (RHEL-16182) - tpm2: add tpm2_load() (RHEL-16182) - tpm2: add tpm2_load_external() (RHEL-16182) - tpm2: move local vars in tpm2_seal() to point of use (RHEL-16182) - tpm2: replace magic number in hmac_sensitive initialization (RHEL-16182) - tpm2: add tpm2_create() (RHEL-16182) - tpm2: replace tpm2_capability_pcrs() macro with direct c->capaiblity_pcrs use (RHEL-16182) - basic/alloc-util: add greedy_realloc_append() (RHEL-16182) - tpm2: cache the TPM supported commands, add tpm2_supports_command() (RHEL-16182) - tpm2: cache TPM algorithms (RHEL-16182) - tpm2: add tpm2_persist_handle() (RHEL-16182) - tpm2: add tpm2_get_or_create_srk() (RHEL-16182) - tpm2: move local vars in tpm2_unseal() to point of use (RHEL-16182) - tpm2: remove tpm2_make_primary() (RHEL-16182) - tpm2: use CreatePrimary() to create primary keys instead of Create() (RHEL-16182) - cryptsetup: downgrade a bunch of log messages that to LOG_WARNING (RHEL-16182) - boot/measure: replace TPM PolicyPCR session with calculation (RHEL-16182) - core: imply DeviceAllow=/dev/tpmrm0 with LoadCredentialEncrypted (RHEL-16182) - added more test cases (RHEL-16182) - test: fixed negative checks in TEST-70-TPM2. Use in-line error handling rather than redirections. Follow up on #27020 (RHEL-16182) - systemd-cryptenroll: add string aliases for tpm2 PCRs Fixes #26697. RFE. (RHEL-16182) - cryptenroll: fix an assertion with weak passwords (RHEL-16182) - man/systemd-cryptenroll: update list of PCRs, link to uapi docs (RHEL-16182) - tpm2: add debug logging to functions converting hash or asym algs to/from strings or ids (RHEL-16182) - tpm2: add tpm2_hash_alg_to_size() (RHEL-16182) - tpm2: change tpm2_tpm*_pcr_selection_to_mask() to return mask (RHEL-16182) - tpm2: add more helper functions for managing TPML_PCR_SELECTION and TPMS_PCR_SELECTION (RHEL-16182) - tpm2: add Tpm2PCRValue struct and associated functions (RHEL-16182) - tpm2: move declared functions in header lower down (RHEL-16182) - tpm2: declare tpm2_log_debug_*() functions in tpm2_util.h (RHEL-16182) - tpm2: change tpm2_calculate_policy_pcr(), tpm2_calculate_sealing_policy() to use Tpm2PCRValue array (RHEL-16182) - tpm2: change tpm2_parse_pcr_argument() parameters to parse to Tpm2PCRValue array (RHEL-16182) - tpm2: add TPM2B_*_MAKE(), TPM2B_*_CHECK_SIZE() macros (RHEL-16182) - tpm2: add tpm2_pcr_read_missing_values() (RHEL-16182) - openssl: add openssl_pkey_from_pem() (RHEL-16182) - openssl: add rsa_pkey_new(), rsa_pkey_from_n_e(), rsa_pkey_to_n_e() (RHEL-16182) - openssl: add ecc_pkey_new(), ecc_pkey_from_curve_x_y(), ecc_pkey_to_curve_x_y() (RHEL-16182) - test: add DEFINE_HEX_PTR() helper function (RHEL-16182) - openssl: add test-openssl (RHEL-16182) - tpm2: add functions to convert TPM2B_PUBLIC to/from openssl pkey or PEM (RHEL-16182) - tpm2: move policy calculation out of tpm2_seal() (RHEL-16182) - man: update systemd-cryptenroll man page with details on --tpm2-pcrs format change (RHEL-16182) - tpm2: update TEST-70-TPM2 to test passing PCR value to systemd-cryptenroll (RHEL-16182) - tpm2: change *alg_to_* functions to use switch() (RHEL-16182) - tpm2: lowercase TPM2_PCR_VALUE[S]_VALID functions (RHEL-16182) - tpm2: move cast from lhs to rhs in uint16_t/int comparison (RHEL-16182) - tpm2: in validator functions, return false instead of assert failure (RHEL-16182) - tpm2: in tpm2_pcr_values_valid() use FOREACH_ARRAY() (RHEL-16182) - tpm2: use SIZE_MAX instead of strlen() for unhexmem() (RHEL-16182) - tpm2: put !isempty() check inside previous !isempty() check (RHEL-16182) - tpm2: simplify call to asprintf() (RHEL-16182) - tpm2: check pcr value hash != 0 before looking up hash algorithm name (RHEL-16182) - tpm2: use strempty() (RHEL-16182) - tpm2: split TPM2_PCR_VALUE_MAKE() over multiple lines (RHEL-16182) - tpm2: remove ret_ prefix from input/output params (RHEL-16182) - tpm2: use memcpy_safe() instead of memcpy() (RHEL-16182) - openssl: use new(char, size) instead of malloc(size) (RHEL-16182) - tpm2: use table for openssl<->tpm2 ecc curve id mappings (RHEL-16182) - tpm2: use switch() instead of if-else (RHEL-16182) - tpm2: make logging level consistent at debug for some functions (RHEL-16182) - tpm2: remove unnecessary void* cast (RHEL-16182) - tpm2: add tpm2_pcr_values_has_(any|all)_values() functions (RHEL-16182) - tpm2: wrap (7) in UINT32_C() (RHEL-16182) - cryptenroll: change man page example to remove leading 0x and lowercase hex (RHEL-16182) - openssl: add log_openssl_errors() (RHEL-16182) - openssl: add openssl_digest_size() (RHEL-16182) - openssl: add openssl_digest_many() (RHEL-16182) - openssl: replace openssl_hash() with openssl_digest() (RHEL-16182) - openssl: add openssl_hmac_many() (RHEL-16182) - openssl: add rsa_oaep_encrypt_bytes() (RHEL-16182) - openssl: add kdf_kb_hmac_derive() (RHEL-16182) - openssl: add openssl_cipher_many() (RHEL-16182) - openssl: add ecc_edch() (RHEL-16182) - openssl: add kdf_ss_derive() (RHEL-16182) - dlfcn-util: add static asserts ensuring our sym_xyz() func ptrs match the types from the official headers (RHEL-16182) - tpm2: add tpm2_marshal_blob() and tpm2_unmarshal_blob() (RHEL-16182) - tpm2: add tpm2_serialize() and tpm2_deserialize() (RHEL-16182) - tpm2: add tpm2_index_to_handle() and tpm2_index_from_handle() (RHEL-16182) - tpm2: fix build failure without openssl (RHEL-16182) - tpm2-util: look for tpm2-pcr-signature.json directly in /.extra/ (RHEL-16182) - tpm2: downgrade most log functions from error to debug (RHEL-16182) - tpm2: handle older tpm enrollments without a saved pcr bank (RHEL-16182) - tpm2: allow tpm2_make_encryption_session() without bind key (RHEL-16182) - tpm2: update tpm2 test for supported commands (RHEL-16182) - tpm2: use GREEDY_REALLOC_APPEND() in tpm2_get_capability_handles(), cap max value (RHEL-16182) - tpm2: change tpm2_unseal() to accept Tpm2Context instead of device string (RHEL-16182) - tpm2: cache TPM's supported ECC curves (RHEL-16182) - tpm2-util: make tpm2_marshal_blob()/tpm2_unmarshal_blob() static (RHEL-16182) - tpm2-util: make tpm2_read_public() static, as we use it only internally in tpm2-util.c (RHEL-16182) - cryptenroll: allow specifying handle index of key to use for sealing (RHEL-16182) - test: add tests for systemd-cryptenroll --tpm2-seal-key-handle (RHEL-16182) - tpm2: do not call Esys_TR_Close() (RHEL-16182) - tpm2: don't use GetCapability() to check transient handles (RHEL-16182) - tpm2-util: pick up a few new symbols from tpm2-tss (RHEL-16182) - tpm2: add tpm2_get_pin_auth() (RHEL-16182) - tpm2: instead of adjusting authValue trailing 0(s), trim them as required by tpm spec (RHEL-16182) - tpm2-util: rename tpm2_calculate_name() → tpm2_calculate_pubkey_name() (RHEL-16182) - cryptenroll: do not implicitly verify with default tpm policy signature (RHEL-16182) - cryptenroll: drop deadcode (RHEL-16182) - tpm2: allow using tpm2_get_srk_template() without tpm (RHEL-16182) - tpm2: add test to verify srk templates (RHEL-16182) - tpm2: add tpm2_sym_alg_*_string() and tpm2_sym_mode_*_string() (RHEL-16182) - tpm2: add tpm2_calculate_seal() and helper functions (RHEL-16182) - tpm2: update test-tpm2 for tpm2_calculate_seal() (RHEL-16182) - cryptenroll: add support for calculated TPM2 enrollment (RHEL-16182) - test: update TEST-70 with systemd-cryptenroll calculated TPM2 enrollment (RHEL-16182) - openssl-util: avoid freeing invalid pointer (RHEL-16182) - creds-util: check for CAP_DAC_READ_SEARCH (RHEL-16182) - creds-util: do not try TPM2 if there is not support (RHEL-16182) - creds-util: merge the TPM2 detection for initrd (RHEL-16182) - cryptenroll: fix a memory leak (RHEL-16182) - sd-journal: introduce sd_journal_step_one() (RHEL-11591) - test: modernize test-journal-flush (RHEL-11591) - journal-file-util: do not fail when journal_file_set_offline() called more than once (RHEL-11591) - journal-file-util: Prefer punching holes instead of truncating (RHEL-11591) - test: add reproducer for SIGBUS issue caused by journal truncation (RHEL-11591)- spec: update rhel-net-naming-sysattrs to v0.4 (RHEL-22278)- spec: add new package with RHEL-specific network naming sysattrs (RHEL-22278)- ci: use source-git-automation composite Action (RHEL-1086) - ci: increase the cron interval to 45 minutes (RHEL-1086) - ci: add all Z-Stream versions to array of allowed versions (RHEL-1086) - udev/net_id: introduce naming scheme for RHEL-9.4 (RHEL-22427) - basic/errno-util: add wrappers which only accept negative errno (RHEL-22443) - errno-util: allow ERRNO_IS_* to accept types wider than int (RHEL-22443) - udev: add new builtin net_driver (RHEL-22443) - udev/net_id: introduce naming scheme for RHEL-8.10 (RHEL-22427)- logind: don't setup idle session watch for lock-screen and greeter (RHEL-20757) - logind: don't make idle action timer accuracy more coarse than timeout (RHEL-20757) - logind: do TTY idle logic only for sessions marked as "tty" (RHEL-20757) - meson: Properly install 90-uki-copy.install (RHEL-16354)- Revert "man: mention System Administrator's Guide in systemctl manpage" (RHEL-19436) - man: mention RHEL documentation in systemctl's man page (RHEL-19436) - resolved: actually check authenticated flag of SOA transaction (RHEL-6216) - udev: allow/denylist for reading sysfs attributes when composing a NIC name (RHEL-1317) - man: environment value -> udev property (RHEL-1317)- meson: fix installation of ukify (RHEL-13199) - sd-id128: introduce id128_hash_ops_free (RHEL-5988) - udevadm-trigger: allow to fallback without synthetic UUID only first time (RHEL-5988) - udevadm-trigger: settle with synthetic UUID if the kernel support it (RHEL-5988) - udevadm-trigger: also check with the original syspath if device is renamed (RHEL-5988) - test: use 'udevadm trigger --settle' even if device is renamed (RHEL-5988) - sd-event: don't mistake USEC_INFINITY passed in for overflow (RHEL-6090) - pid1: rework service_arm_timer() to optionally take a relative time value (RHEL-6090) - manager: add one more assert() (RHEL-6090) - pid1: add new Type=notify-reload service type (RHEL-6090) - man: document Type=notify-reload (RHEL-6090) - pid1: make sure we send our calling service manager RELOADING=1 when reloading (RHEL-6090) - networkd: implement Type=notify-reload protocol (RHEL-6090) - udevd: implement the full Type=notify-reload protocol (RHEL-6090) - logind: implement Type=notify-reload protocol properly (RHEL-6090) - notify: add --stopping + --reloading switches (RHEL-6090) - test: add Type=notify-reload testcase (RHEL-6090) - update TODO (RHEL-6090) - core: check for SERVICE_RELOAD_NOTIFY in manager_dbus_is_running (RHEL-6090)- udev/net: allow new link name as an altname before renaming happens (RHEL-5988) - sd-netlink: do not swap old name and alternative name (RHEL-5988) - sd-netlink: restore altname on error in rtnl_set_link_name (RHEL-5988) - udev: attempt device rename even if interface is up (RHEL-5988) - sd-netlink: add a test for rtnl_set_link_name() (RHEL-5988) - test-network: add a test for renaming device to current altname (RHEL-5988) - udev: align table (RHEL-5988) - sd-device: make device_set_syspath() clear sysname and sysnum (RHEL-5988) - sd-device: do not directly access entry in sd-device object (RHEL-5988) - udev: move device_rename() from device-private.c (RHEL-5988) - udev: restore syspath and properties on failure (RHEL-5988) - sd-device: introduce device_get_property_int() (RHEL-5988) - core/device: downgrade log level for ignored errors (RHEL-5988) - core/device: ignore failed uevents (RHEL-5988) - test: add tests for failure in renaming network interface (RHEL-5988) - test: modernize test-netlink.c (RHEL-5988) - test-netlink: use dummy interface to test assigning new interface name (RHEL-5988) - udev: use SYNTHETIC_ERRNO() at one more place (RHEL-5988) - udev: make udev_builtin_run() take UdevEvent* (RHEL-5988) - udev/net: verify ID_NET_XYZ before trying to assign it as an alternative name (RHEL-5988) - udev/net: generate new network interface name only on add uevent (RHEL-5988) - sd-netlink: make rtnl_set_link_name() optionally append alternative names (RHEL-5988) - udev/net: assign alternative names only on add uevent (RHEL-5988) - test: add tests for renaming network interface (RHEL-5988) - Backport ukify from upstream (RHEL-13199) - bootctl: make --json output normal json (RHEL-13199) - test: replace readfp() with read_file() (RHEL-13199) - stub/measure: document and measure .uname UKI section (RHEL-13199) - boot: measure .sbat section (RHEL-13199) - Revert "test_ukify: no stinky root needed for signing" (RHEL-13199) - ukify: move to /usr/bin and mark as non non-experimental (RHEL-13199) - kernel-install: Add uki layout (RHEL-16354) - kernel-install: remove math slang from man page (RHEL-16354) - kernel-install: handle uki installs automatically (RHEL-16354) - 90-uki-copy.install: create $BOOT/EFI/Linux directory if needed (RHEL-16354) - kernel-install: Log location that uki is installed in (RHEL-16354) - bootctl: fix errno logging (RHEL-16354) - bootctl: add kernel-identity command (RHEL-16354) - bootctl: add kernel-inspect command (RHEL-16354) - bootctl: add kernel-inspect to --help text (RHEL-16354) - bootctl: drop full stop at end of --help texts (RHEL-16354) - bootctl: change section title for kernel image commands (RHEL-16354) - bootctl: remove space that should not be there (RHEL-16354) - bootctl: kernel-inspect: print os info (RHEL-16354) - bootctl-uki: several coding style fixlets (RHEL-16354) - tree-wide: unify how we pick OS pretty name to display (RHEL-16354) - bootctl-uki: several follow-ups for inspect_osrel() (RHEL-16354) - bootctl: Add missing %m (RHEL-16354) - bootctl: tweak DOS header magic check (RHEL-16354)- ci: Extend source-git-automation (RHEL-1086) - netif-naming-scheme: let's also include rhel8 schemes (RHEL-7026) - systemd-analyze: Add table and JSON output implementation to plot (RHEL-5070) - systemd-analyze: Update man/systemd-analyze.xml with Plot JSON and table (RHEL-5070) - systemd-analyze: Add tab complete logic for plot (RHEL-5070) - systemd-analyze: Add --json=, --table and -no-legend tests for plot (RHEL-5070) - ci: enable source-git automation to validate reviews and ci results (RHEL-1086) - ci: remove Mergify config - replaced by Pull Request Validator (RHEL-1086) - ci: enable auto-merge GH Action (RHEL-1086) - ci: add missing permissions (RHEL-1086) - ci: `permissions: write-all` (RHEL-1086) - ci(lint): exclude `.in` files from ShellCheck lint (RHEL-1086) - udev: raise RLIMIT_NOFILE as high as we can (RHEL-11040)- doc: add downstream CONTRIBUTING document (#2170883) - doc: improve CONTRIBUTING document (#2170883) - doc: use link with prefilled Jira issue (#2170883) - docs: link downstream CONTRIBUTING in README (#2170883) - bpf: fix restrict_fs on s390x (#2230364) - udev/net_id: use naming scheme for RHEL-9.3 (#2231845) - core/timer: Always use inactive_exit_timestamp if it is set (#2211065) - timer: Use dual_timestamp_is_set() in one more place (#2211065) - loginctl: list-users: also show state (#2209912) - loginctl: list-sessions: minor modernization (#2209912) - loginctl: list-sessions: also show state (#2209912) - test: add test for state in loginctl list-{users,sessions} (#2209912) - test: add a missing session activation (#2209912) - test: extend test for loginctl list-* (#2209912) - loginctl: shorten variable name (#2209912) - loginctl: use bus_map_all_properties (#2209912) - loginctl: show session idle status in list-sessions (#2209912) - loginctl: some modernizations (#2209912) - loginctl: list-sessions: fix timestamp for idle hint (#2209912) - loginctl: list-users: use bus_map_all_properties (#2209912) - loginctl: also show idle hint in session-status (#2209912) - memory-util: make ArrayCleanup passed to array_cleanup() const (#2190226) - static-destruct: several cleanups (#2190226) - static-destruct: introduce STATIC_ARRAY_DESTRUCTOR_REGISTER() (#2190226) - macro: support the case that the number of elements has const qualifier (#2190226) - shared/generator: apply similar config reordering of generated units (#2190226) - nulstr-util: make ret_size in strv_make_nulstr() optional (#2190226) - generator: teach generator_add_symlink() to instantiate specified unit (#2190226) - units: rework growfs units to be just a regular unit that is instantiated (#2190226) - fstab-generator: use correct targets when /sysroot is specificied in fstab only (#2190226) - fstab-generator: add SYSTEMD_SYSFS_CHECK env var (#2190226) - test: add fstab file support for fstab-generator tests (#2190226) - test-fstab-generator: also check file contents (#2190226) - test-fstab-generator: add tests for mount options (#2190226) - fstab-generator: split out several functions from parse_fstab() (#2190226) - fstab-generator: call add_swap() earlier (#2190226) - fstab-generator: refuse to add swap earlier if disabled (#2190226) - fstab-generator: refuse invalid mount point path in fstab earlier (#2190226) - fstab-generator: fix error code propagation in run_generator() (#2190226) - fstab-generator: support defining mount units through kernel command line (#2190226) - test: add test cases for defining mount and swap units from kernel cmdline (#2190226) - generators: change TimeoutSec=0 to TimeoutSec=infinity (#2190226) - units: change TimeoutSec=0 to TimeoutSec=infinity (#2190226) - fstab-generator: use correct swap name var (#2190226) - fstab-generator: add more parameter name comments (#2190226) - fstab-generator: unify initrd-root-device.target dependency handling code (#2190226) - fstab-util: add fstab_is_bind (#2190226) - fstab-generator: resolve bind mount source when in initrd (#2190226) - fstab-generator: rename 'initrd' flag to 'prefix_sysroot' (#2190226) - fstab-generator: fix target of /sysroot/usr (#2190226) - fstab-generator: add rd.systemd.mount-extra= and friends (#2190226) - fstab-generator: add a flag to accept entry for "/" in initrd (#2190226) - test-fstab-generator: extract core part as a function (#2190226) - test-fstab-generator: also test with SYSTEMD_IN_INITRD=no (#2190226) - test-fstab-generator: add more tests for systemd.mount-extra= and friends (#2190226) - fstab-generator: enable fsck for block device mounts specified in systemd.mount-extra= (#2190226) - core: use correct scope of looking up units (#2226980) - test: merge unit file related tests into TEST-23-UNIT-FILE (#2213521) - test: rename TEST-07-ISSUE-1981 to TEST-07-PID1 (#2213521) - test: merge TEST-08-ISSUE-2730 into TEST-07-PID1 (#2213521) - test: merge TEST-09-ISSUE-2691 into TEST-07-PID1 (#2213521) - test: merge TEST-10-ISSUE-2467 with TEST-07-PID1 (#2213521) - test: merge TEST-11-ISSUE-3166 into TEST-07-PID1 (#2213521) - test: merge TEST-12-ISSUE-3171 into TEST-07-PID1 (#2213521) - test: move TEST-23's units into a dedicated subfolder (#2213521) - test: merge TEST-47-ISSUE-14566 into TEST-07-PID1 (#2213521) - test: merge TEST-51-ISSUE-16115 into TEST-07-PID1 (#2213521) - test: merge TEST-20-MAINPIDGAMES into TEST-07-PID1 (#2213521) - test: abstract the common test parts into a utility script (#2213521) - test: add tests for JoinsNamespaceOf= (#2213521) - core/unit: drop doubled empty line (#2213521) - core/unit: make JoinsNamespaceOf= implies the inverse dependency (#2213521) - core/unit: search shared namespace in transitive relation of JoinsNamespaceOf= (#2213521) - core/unit: update bidirectional dependency simultaneously (#2213521) - resolvectl: fix type of ifindex D-Bus field, and make sure to initialize to zero in all code paths (#2161260) - resolved: add some line-breaks/comments (#2161260) - resolvectl: don't filter loopback DNS server from global DNS server list (#2161260) - blockdev-util: add simple wrapper around BLKSSZGET (#2170883) - loop-util: insist on setting the sector size correctly (#2170883) - dissect-image: add probe_sector_size() helper for detecting sector size of a GPT disk image (#2170883) - loop-util: always tell kernel explicitly about loopback sector size (#2170883) - Revert "Treat EPERM as "not available" too" (#2178222) - Revert "test: accept EPERM for unavailable idmapped mounts as well" (#2178222)- Revert "core/service: when resetting PID also reset known flag" (#2225667 - ci: explicitly install python3-lldb-$COMPILER_VERSION (#2225667)- ci: update permissions for source-git automation workflows (#2170883) - pstore: fixes for dmesg.txt reconstruction (#2170883) - pstore: explicitly set the base when converting record ID (#2170883) - pstore: avoid opening the dmesg.txt file if not requested (#2170883) - test: add a couple of tests for systemd-pstore (#2170883) - test: match all messages with the FILE field (#2170883) - test: build the SELinux test module on the host (#2170883) - test: make the stress test slightly less stressful on slower machines (#2170883) - coredump: use unaligned_read_ne{32,64}() to parse auxv (#2170883) - core/transaction: make merge_unit_ids() always return NUL-terminated string (#2170883) - core/transaction: make merge_unit_ids() return non-NULL on success (#2170883) - core/transaction: do not log "(null)" (#2170883) - ci: allow `RHEL-only` labels to mark downstream-only commits (#2170883) - elf-util: discard PT_LOAD segment early based on the start address. (#2215412) - elf-util: check for overflow when computing end of core's PT_LOAD segments (#2215412) - sulogin: use DEFINE_MAIN_FUNCTION() (#2169959) - sulogin: fix control lost of the current terminal when default.target is rescue.target (#2169959) - journal-vacuum: count size of all journal files (#2182632) - memory-util: add a concept for gcc cleanup attribute based array destruction (#2182632) - macro: introduce FOREACH_ARRAY() macro (#2182632) - journal-vacuum: rename function to match struct name (#2182632) - journal-vacuum: use CLEANUP_ARRAY (#2182632) - pam: add call to pam_umask (#2210145) - udev-builtin-net_id: align VF representor names with VF names (#2218886) - pam: add a call to pam_namespace (#2218184) - rules: online CPU automatically on IBM s390x platforms when configured (#2212612) - core/mount: escape invalid UTF8 char in dbus reply (#2208240) - Revert "user: delegate cpu controller, assign weights to user slices" (#2176899) - udev-rules: fix nvme symlink creation on namespace changes (#2172509) - rules: add whitespace after comma before the line continuation (#2172509) - udev: restore compat symlink for nvme devices (#2172509) - rules: drop doubled space (#2172509) - manager: don't taint the host if cgroups v1 is used (#2193456) - core/service: when resetting PID also reset known flag (#2210237) - ci: drop systemd-stable from advanced-commit-linter config (#2170883)- ci: trigger `differential-shellcheck` workflow on push (#2100440) - ci: workflow for gathering metadata for source-git automation (#2100440) - ci: first part of the source-git automation - commit linter (#2100440) - ci(Mergify): check CodeQL and build workflows based on changed files (#2100440) - ci: add NOTICE to also update regexp in `.mergify.yml` when updating `paths` property (#2100440) - Support /etc/system-update for OSTree systems (#2203133) - journal-def: fix type of signature to match the actual field in the Header structure (#2183546) - journal: use compound initialization for journal file Header structure (#2183546) - journald: fix log message (#2183546) - sd-journal: cache results of parsing environment variables (#2183546) - compress: introduce compression_supported() helper function (#2183546) - sd-journal: always use the compression algorithm specified in the header (#2183546) - sd-journal: allow to specify compression algorithm through env (#2183546) - test: add test case that journal file is created with the requested compression algorithm (#2183546) - rules: do not online CPU automatically on IBM platforms (#2143107)- systemd: Support OOMPolicy in scope units (#2176918) - systemd: Default to OOMPolicy=continue for login session scopes (#2176918) - man: rework description of OOMPolicy= a bit (#2176918) - core,man: add missing integration of OOMPolicy= in scopes (#2176918) - meson: Store fuzz tests in structured way (#2176918) - meson: Generate fuzzer inputs with directives (#2176918) - oss-fuzz: include generated corpora in the final zip file (#2176918) - unit: In cgroupv1, gracefully terminate delegated scopes again (#2180120)/bin/sh/bin/sh/bin/sh/bin/sh 252-46.el9_5.3252-46.el9_5.3252-46.el9_5.3252-46.el9_5.3  oomd.confoomctl.build-id1b9440050c70eebbcae485fc9e376c1eedb7487a0322d57fc35989ccd44cf4a7c6724b5d6e3a72oomd.conf.d10-oomd-defaults.conf10-oomd-root-slice-defaults.confsystemd-oomd.servicesystemd-oomd.socket10-oomd-user-service-defaults.confsystemd-oomdsystemd-oom.confoomctlorg.freedesktop.oom1.Manager.xmlorg.freedesktop.oom1.serviceorg.freedesktop.oom1.confoomctl.1.gzoomd.conf.5.gzoomd.conf.d.5.gzorg.freedesktop.oom1.5.gzsystemd-oomd.8.gzsystemd-oomd.service.8.gz_oomctl/etc/systemd//usr/bin//usr/lib//usr/lib/.build-id//usr/lib/.build-id/1b//usr/lib/.build-id/89//usr/lib/systemd//usr/lib/systemd/oomd.conf.d//usr/lib/systemd/system/-.slice.d//usr/lib/systemd/system//usr/lib/systemd/system//usr/lib/systemd/system/user@.service.d//usr/lib/sysusers.d//usr/share/bash-completion/completions//usr/share/dbus-1/interfaces//usr/share/dbus-1/system-services//usr/share/dbus-1/system.d//usr/share/man/man1//usr/share/man/man5//usr/share/man/man8//usr/share/zsh/site-functions/-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64-v2 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protectioncpiozstd19x86_64-redhat-linux-gnuASCII textELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=890322d57fc35989ccd44cf4a7c6724b5d6e3a72, for GNU/Linux 3.2.0, strippeddirectoryELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=1b9440050c70eebbcae485fc9e376c1eedb7487a, for GNU/Linux 3.2.0, strippedexported SGML document, ASCII textXML 1.0 document, ASCII texttroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)troff or preprocessor input, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix)  R R RR RRRR R RRR R RR RRRR R RRPPutf-88204a9aa54bef25cf8060d10e0c3365396c4e73417d41aa279b45bc77fd0fe0d1dd7809aae4a7f383da742e563cc7a569ff2f253f82b0ddd67f8dfaf2d2cc511?(/hjTPNa7x:HHn$PG`9<{_^SJց 5qo~BU|g6SvbK678X[T W(}:l*n`\Tعܚbe'怑$РJƠq|~CHR,.1Oeaָ|h?Xa8F Mp03l, ) @qO`>'=+0-l6N)ZSV_RY \ǵ5/5(5|$✢41]8mj&a ytu!idTA^^xdz\xqOW4qU>;vKXt ttCHFإ9Wx ް=pH("M>Ho<8 "F {?_ bX[a000`z/b˹3M0 e|`,~J>9qx[ ˲ muCᩬǞ1UfymKaݾq,?x ,[z>=kҘ?k{gӾw(<> KڛMe845a>iaK];L0qtLmtdXaJa}/0WؖEig!t=o!hA F<=ۖ}6 -~4ERMUT(S's6:Ms5F !," ?G]RNޣq]uooZvL!\yLSV3tRnKRx㻔oz?JU-\wmͿǵkc}:Pn3keߴ`ZV;i?L;]ӭcE+ֵͩTw?ۻ5J7JzNwXvZ}^ <#F`.D*T$1m[s"ZvD˞$"""-_3dBQOx+zW|k=-&f op(Tg!%Qj~>|o,CXEDY'do0ȏmXb*qbC D DUD3^!|ӋѡFctl4sG$-Q6;'l6ΝZ6UC {nǿa;eڥ;?P6]~49 F$SLzn彪^TӉ|c*ʙ9STӋ\q5uWsΙBٵr {z9ӱW]T*DYOߚw"(y ^]__YDɪW?\"\K&u-_,sǷzf_)~{֫4.kZ˪Jݙ^~EϋUQVG+HC9uwp )bYvr̪i1)u`Aln qXR|u8 @>mX.?tpeJI1m Qd3G>BC?ߛYiUt-!6 J ,iɱW'<`ڹn/?60e_j\u5y)'ZL93a~ +:v('PB571X*1Qvt6B0ܼ %']fq솈wETV)WNe-=) )  "sLDRY@eO# +42h) $=w* ! %"KI4ç?\Q:Nr<JۉV`K 0αyf(h# f;.Gr BiL8s gaʖAas%p`F B" 2/r1 pƂ)Ƽ!!}uA0"jH^ b (G 58P@i@d@@0\"Xâ +qɵ.F: A!G:53ej~/ٟGz8'l BȞl1sE+;LWd@,ci40ل (: >dk_.ԡUB 9@!/C\914!选zK |FvX$NxM0 ` ø?z3bU>|Iicp&ĸLjMՈ 3Y\( י4 8.dAL5wSƘx@vrݹD ~SSFITo/BS$ 8 )}qa;fδ\l๛B 'BD,eJ +Iu4*ڨ@ȒQH;6KX6wb!;I X"mg+c WIP2dڨ `Ndp+fL{FNn#Pٙ>?d&/HBѓ SQW.=Rc٠# gzSHҕ-ZvtsqpHU x^"%oG7ZՀ{j^]vOݓ+3#chTc~anVZ8{}GmZn;wYhs)L黚&=?~~3qJ Q﫲]k&<?M|;։61;@E0 [P獐k[/Bߒ6/c W'dL % J5U1dRh(r : [[_@c,1 ߳K/!觋 A~< U6  F~P$e!s$@St ,3@2'Z/ `ҍPL˧ G 5Ց|P8UU 0ͺAAa"ܩq"^1R2*}E%5fg*:+󘮗Bvٖ_s1WaB̂RfTƗuc1V15%k-k-}纬}rMUjg J=iK93 vr!67ӮnrN]Nm~rC|_oU>By^>JLiYڴ PqWf1\xXKtnKR202ati&JznzEiYS=~RΔW7ӳ2ױ6=4w/c݉4U;Uo[Z3I$N]B. '"께RX&F&$7BN("ǘOOIEB,,#XD*(XDB IEGY bdTF"gYJVIEQ* *XJǩP3>8 gUH=Dh͛t'=I)60 wp}T". 38ϡaz|ŸQx_|G>03@003L% &J%=>EeQAA `. `00NS [)[(?7^L2-s˜m89$mzgYX|^SNw_0)L1;X@V+=osQhu9m}ٺŝxl@b~gi/R2֑,^i$1"np-v\_Ke΁_ha@v _F`8`0VPr(ʻse]3lHpՒl?H]ٖ LL0H1ѿmUfEg]F+ܦ%ZZV Y[`D4K:WQYn&J|Q5K!NbSB/:+Rٽ!#Αf<=r,[ciw|v( i]!قGȿ_ X#vX^OCFRˆ):94 I'Ĉ#V 4k_)L?wշ2݆|g ڦQ_L ^HCYb,QD @[TVzYGUV[ 4O;@/ Z%+SAZYsvU 0cAmAGR ރQTZM4nIWOtZO:-ͬkxڿ"[gڹLq$ f<NjdI%82)bg)S;_}r6Y&B* [}|N{ [ySiBq''.j1V_*.?ڵs&3K¼nUΕ,΍kqs`s:r\ K UaXxنn\WWwEiw0تO<7vug^'&Qtͱ4 Q`tYܨߒK,M+Mpz:ɣC+o^q+.3 ڀAo N*+>_<~lIӬ:+ʽX؞}mfXEn?7Z nn,ܗsB5.fA434Ife>} ƈV3M]kFvt~+YUFs9 KH=CfT0kD0iMlbbAU1{di׷2si4~6?t]]F58Jc59rJ9o=bcQ?Y;:1YxVB 0P#%(!y͟;!OBpԭUGϿq n@L|x!Nc(x8i$r$"\G[ gm 0-~j A\yk1S+3`Uv4q]BuDX:ن6P i͠5 W 2?X\T54ܥKK'{B"bϫzݰ"n*u=裬[2)t`*;(8G1opu19 7 4(mC`,H-Ֆ0\:Y 8v1 < QewAF:%YaV*t8݅[nfb:$VM`tQt0A fP?]5Ra LjG(_Gx0a+@_#5oanu̳[~o<!֍:ZI<{8q{l!D$K&M$&d"iK^,SaP}Q5yMRjWCJ]k/ Vai\8V)h,_0w f Uaي0`h7Z:܃cX761Bώ46hbfLa.w`kA=[ ʂ[NɟOq-&KPk?(Rv mSjRt:9]]liĽr8k+CWȉAN)mkbQ;&tוqs"+#$<"IHEs!׵$$2?P$Mk ̗ sYQp 3|AdMu,BGJx(+ 2d9O! g'[nbm$+'ۦY+}`e5/ȏP4F*ǣlj<~6nD{ufK *L 52YC.0Ir.9`T s3-;Tݎ|H/Cܬ 4WyRJ&ז> <+!Z o4y΀͔a{%l|H+?$]l mqsrz}yP72LZ:&C8r档́!',Dη.z9K$.W}Ih *1${.]b(Wz&? s{+;j*N2N{ WsQJ,myTj5b)5>ceM6;0O?<lL̆߭F&셓,LRVm=bL:k Sڙ\?7qM72j9u$r= zo&#B`hu? !  Cbp!MG>wsFm.< l2X5LLo 9kLc \]6.nh4կ }|cI?s]ˁy L0cS0}Pb8j崋FvHuI i]x*qE]CH?r`ж׫asVGK[:&= 3CgAt Hdhc &@4!F/!h8l C+"#Mk̬&m6`&] f.SvZj4?לP9>xk Z,quesexprdon_vpyd_32   fpZ_ g@o<`Epxpɘ~ (0HPXp@h8 8xi8`3 HC.Y[`s @` (08@HPX`hpx !#$%&q!Jb( 82@cU:-WNE!BmMғQ,tjJ VYhm*Đݒ8=7k:"<@V- .0s_UA];<&w9(d@$ѩk؏Jo u5H%:8Ws{])5誹xQ4`+U4i4UHCE0~g~:d83yCX+k7]ɣ+V!}_dH.nIG~:I*Z8Mt^8Xnr␜!ϡJ+&m>"O:] '()*+,-/01 2(40586@7H8P9X:`;h?@ABDEFGHIJKLMNOPQRS T(U0V8W@XHZP\X`]h^p_xabcdefghjklmnopqrtuvw y(z0{8|@}H~PX`hpxѯh"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGasvH0 $þW> 9b@l1 04V#BF<#訜GΊJUE[e"XWl-B  CTM'Da LSݹǮniV.8=v), D HIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}eME=5-% Ž}ume]UME=5-% Ž}ume]UME=5-% Ž}ume]UME=5-% ŽH<$rDžADs_빫1ᶤ1#D 2ޅ M+͠/4SPq[Σ ߒ| N~d Xm#)$ fPP0H($̩B!`PH( ZW"+ d,0K6̒ d,,Ē d,0K6̒ d,,Ē d,0K6̒ d,,Ē d,0b  H|$迉MtI}L}~vkbI0HWGO6 1E1~LuN멠8h؅0&XPt H{@U`HBWhE1IH5͜-)WLLOnU=_yMboDž|샽#j VAt=G1襃whMt L昅v聇L%L9r"@L9^HUdH+A_]tj=g5`Eit6]>]/(Cj^,\p}S^d^M- D%؈sAms @ց\(i ! AJIHB&悤Fi77jBťHdB@<>"=wxeIXvlCdZ'ծ삐|4~ .1.9`/t<\ԭq .5?ED'I6F'5Vv7! o݄70h)/ћ{_~ "a=rzY ["(8K<7~Miv4:I~a*NO}h3?4n)zOJLsAhKV8Xz?Xn!j-3iQ gSӳKeyLv?Ȧ2d73 F^}f{_ԷOZtOs_[X9@=NAJ@<,fGv;.Ӑ]ny4%:GQZ@X,T{F/ɜҤsjK2_FuJFu{F~|iL̒ЯhU0U2)a-'t~Fd$kք~6U *3M,+ K,66zAlGm~ "OOOMcnvL'o6ezTLBrcYJ_I-9|Rrd9s~ru`x ³D+~V6*MD[-yLn:)M_Ku͘4^H>aaͮoJ})G>%knE^.`=f*EV=%,FJ_ \ Ì ( 1 |H"CcjcѬjIʄ/3_tX_ ¨}v/ [\ !|CBs&''K7tj"%X03 .j3aNO^w43isz݆4;Gdac_٢Cţ ұC=|S "b)N-/Dbb. z+mO /5@u 4 > koy="7: } giKL&S5oNJ!-H,mE8ȅ*8E=tvX`Y=7ScC>$v Æ Qdou#>~iѕ՛r4( *~tdpGĞysCw-1R+V_Gͪ0k^At ~Aa 4h֍54<7sD88, v<{R Ihh@ o~(JB0:w( rH7^+ɿ]1ɐVS2W bav7̎@Uj|0n-ynhCcՉ'ł),FDFDŽg;rGh.SGV{;ԖG-m3sgb]!Xx"mZ87P[ ~Jcc'ew7N6 hQBbsBW~CO/Kⅱ9&+ %z *V,#Ǐ5Ŏgh$iU[NQ,($r3qbXo+8oNre zMGW+Dқ(dB,GNaM %u_WlQզ~iMݴsb.-u]WVӄJti_mP*n9,~ݤ$P ŶӨnj?9"Èa >"o\ L B;\ fOM3|N|7&&z ӕ s/ocj6B!= >IU$is-cBi5S:z"Nh&tL,oA)p[Vgg;9#=#|tJ?x ߓ!bs@e!^-@<ߝo~$Y얁4d\- #GXRɘ39]ɖjFz[ 2ue2'DfjPIi2uCLE VkuJg}W']gjef%eA}N u\%,< <-HVOCm򬳉ZR"#>}@^~9.f]wwҮ[/Ie |'@3CD'i :@/Z,#j-2),Tnm宏Fz*>L6HT!"|DUdD\ r''9lNL/.9EWs/|1Ezj$iv/`[ R=.Cv*JܯT%Zx._|YHaX2?#=UÇBMS0q6"2Զ}B}͌e'lY;sǁX*WrY<*ӯYq)d%',V rXh-lwk>=#֑ME 䭍+9w16NL./<d_ZB5b>%Ϭf 1ev7PDGd)e=']3l W: K>{OY>\즂`%vyE> (DIo?٩D2MR֎'W@WQ%ϔ'Cb l t| &=̏.bGʪ S JA{1 wL332\k\=*2A%<Fď @ %RZ /meZo Dh=DZ5ʶ*3vadD`DZ޳YOȶ?M \EO(-CZ0hxL'W]:Aa]H! @|_Xgŷ`~Ro|+WIJSCnq4ltH,mk"#Y ͸RDЖ3(J!4u\m,bFU⎄(,#U +Ɠ`KŨ%[L1T<:_ G$jwBbceb|@hXS&>W0$e){_u^S74}PwDv. ! HB{Jw;<0n hGhvծ7ŷF`23}mc|d=W+VE6)jg};>alk*@Mw=DA o`8>WոWk-#?ķ+#']RN4J7"U^IB &ݶUh !٫\ !Z2dЈ'b3q4|.UW}ުEO.0L%+`;32 58H1 @SäCl#=;I>m :&-L9(weh u*{Ks zn $yj.Pop3*;$T*悬, uՔProRMo67^d/rY i<9j,LY¯[cqdav`Af oUH l wq/$S7A$-V+!#zt/]̚*BVGܷݞа+r!_݄&{ZzW|54,=K=-riTBm&WuDh^|Pèq^ ߫#@A(I upP6v3֎x(H 9)ҁ|/|݉#zs,Dm!I?|M Ǝv/kIB¹o' {$jq.YF> s7k^\7<w6.:bZ LR!~8׻ν/]3(PC_m7fAV"A=uWiugxR{r)Ȁ,O] UA'7IbvAnb9eJ"lW@_NnlAhM;KTJ6,<|#m,;e"*iŒPv^s5E(>OTrkko3ϰ݁u˥h;wKϝX^ḅـv/Uk%KT:rysq+'r0,oiB[ޅw/*<ߔx ߓ+t_+f 'M.+]JTV[%/}4m;8aAIӌ~sjbRx дp)>q (ȳڹ)%f3?q^ki =ٗ.VׄiѱM)1}+Ji{ F:1jZ,E9A;@NT%Ju6jeңe,WBHz,J=yCՄ/[nSdRJjBaIzw+*?~ 2Wmn4zb`ŷexKESH^#1,̛̋梬E I6WX [y U.lfb:3yySBrŰcHa{8^"^"6+Ajz30&f8RȆ;0c@.,ꫩ^8Qw.ǚil 5NE"V/ i#hnwQYϷ9[9 C5h(È PNW4JsIȃ\cisXztH$rU)T[RS!ǽ<۸ʸt6uK]˹o];;-|@d\x ԙ3(!O?O 1,PGOӧE6>_d2Gz5ks̄:d]gؤ#sW}^T#PsH/O%uA߲\U (Acޡ4fʶV#HrjYc#G룝 xD'çr(nɟӮ9Y#d'ad ;_[#؝a* F>m0] %K[c_ӯ̮370XXa'cd74PoV N0Z/vQ##Yjz'd[[Ñ5prǟчq0(/͑vIuʷ\ޱRYuGf:;"Sؕ9NLNHIFGnI\]VswCZHqtDzc)?,DP@8& ,F(f?iXRy\}tf1@/F*E7W7]t;ՙ[.w AR@{Ӧ۵ENI $< msq{8G7\ȹ"**PCAvu]에N˕@N=A?i :$?I=\ّ\5*Ӯ2̈[T-@ P r\%sTY|,B/ fye,킳'a'5^ Ånf^*b K\n NK> .QՈYnvΎrKh1+Sm)2NHpgy5Gnklݘ׊e,DZKy;EQ;spX5KD%XƅES<\+N?|i~{?E1(?ir1"[@kф saJ2P5 Kw`/FRI\R4$jZxCZ4Bf}_MLx0XNiO|GS壽8G oq{)&YDYQR:0(p<\ Q^qݐ w4Ie![ǻTvOJ c#Nڽd\?ADo5kM(TXԌ80]4]F.?$!T(bVŘp$8 ۞x =6>atko>5ܖKzMyc#Z1Ԉc]S}_f6緑H<P(6(Hl0п)>52i^(A~a|Omq/6Rj( սThVwaj|]8J tI5ر3!cY<ݛբ̳.@k$^='KUr>+_=Bk0NiuQ6 9J) ,OeVlZ0&bM#p> auR˛HCoދhFNJcT=A6̵C[3?ӊ.W֖D YwXaUZ)I=&ix6rIc9촡&MɜU­~EԤI41lX/N%D.%27 5J^}U|\)XsN7/@UAI",Y?'`yI{JcifC'Crc΀} ܼIStGb-9&p 5P%tx(em *m Yy$0r/a~\Go@8>Qsb(ă*1;I%̋Υ&,}#k+Ezn,N$hbK$*Uf?m*oP>?$EBFz2pI_vl 13P9$g8.~&VqZ9#=ّdC ~u? ( ,5dFټvR br )!YZFwq~'ak1O@b_?5KO5)1%LϙZ&Z)Y=vPocLh߁{Nm6@JP|6Ϭ۩ŌgtJ+󴈆g|? GAv]ifġq>TIgVqzEI:II5+AqtAhhPi}A;E4H`)IL7e ֻ[g An';k撏F>х>Sittݝ8.cN%QA7[bf;_ڿV ylX(C$?Ok/DBL],؞_V4Y3#297!%|kqoAdHbU0)Z̍y UեRHF["V|?0JzpS?:1$n; $N!a f63o,'E1EGPX(ޚx@ܦ٤/tڪ4 H8 G J\ SgH> BrV"OV;Z"K:RAW:@Jd."3%6gV<h_v06:Q[Z{U۲ yӀ똕=( <∷߫†[;љ(aO&F WG9 z7D&W#VMO6WJ|ZT-؈oŽ<-hY6$/~¶Si83/zwY16hELVgxT]/ȻfԪ=3%d+ؙ+cy;WDLZ6 y&h0xk/IÀq;&^# TCJ1l 8@^il8gݐEy(z X4ܩf`|`+Z)@)~յh"> r>>E9)=udIJ#'283 :]Jr_} ?^R:=ؑK5{})a}&Bu/^B.y0\vm!Ī#hM ߱:r8PH*95N𹩚nG0 P)C+S! IvSSF]HN1H9{~6 A r !VN-(JR0}Wl&" |0*iи 8q[]3ts'^3-) >qV`)'*wBsԃW-*b<1ryE S#1ZSiud \qM XfnmUiip<6~4!re0r^[L)ATĀnˈG@&9311)w20xȢ:Ac=(3s}T)6SXo.զ;Ј7,ySaO;(Qo{6_tu !H=KF&m=c\ OY&jpޞ_RɢeNe Pn#dꀴalm+=IDM4 6% Q)ZNQ.oO6qBFm`A/$bݮgɜzL[Ĕg[s*s6V5닆3A6&/ӷM|(7ͬ YwV If|lGtx)Xd.X ×6F&|}YbsGjLVtt l[ύH{Pɑz^ ip4\$i:HlLXufZ's9,ɢ$-t}+l|mۇ/(-n۽BEw;j_ض{mt>?| Cc85}mtBc7l݋h_ o!\{p:?i0fCLu*4PU*zf=*fVv;]W<a7Do{ٵ`.^< i9'5W&q|me0$f8ޅgYqZ\ck 22g>A0S\ ;F$N|f8N[٨:A5h˃+V[h3\u( WO-R8zN3 z) jB#1,xXYHq g8Gt B3R/WTd+}L$^-R )١oIEm)k*HO .& 04lY(khFLxa!k9X" a`?a)&iv\xMG6wep׻e?d| @WudY׆tƦ 7cC ,arǴT'>Es$tp<~5*,&_OgАK2zް)׽8[{~td":\NR$bڨG}-_L()E2N)T8Ll4-+q ( ̘K8ر&IOϧt!%Z~zrg=R^[Kc k#Tjt;}M$L`ŶAv6N ZGڗw`P+PNn|=xЕ1hҢ{*1t^54Mܫn"zF^EZo|vCݕ+ ƻu#i}422gF aZȟ6 lHx1f1lNr%˶.m:Y&?K͊^1t=Πx2I5 2Ԁ͏1 S"[R-"z}k$R :'9]˅Py i>cAIW+;E!Cu'Zq86@+Ӻ :G.eHc c>-`RoD\m~6- 0KO欄3>Wx4Y/8ةuCb9@Έ/FV ڣĕ`߹4QVT!{/X%Qn僶LȤ4joK_ @Tk>'XO%'U|}$Rf 1##Eњex?(*i ~6ʤ>\&!g _J~46ʅ}a|b-'>=.CRi>jNcU P̶cj>32^!fl N>XL!at?W;Meq02wmxUs ޕ<Ģ8ar~R0HR$5_eKH߳HXJ\ǒF K (~FvtaZJPo+/.>s}W]@g#q^'#qDXx3rP%x8pATµ ڤ"QgBSPRA=< b`-{ψ:p@9nf}J%°΅>Y@ w5D\b;~,[/(k-G;<7me?"~5%'ŜoY&o`oLbuw|X^z<5)IRT 4񛲪1[x*k458+ ;ER +L`-aS2OQ7 GRP92#ޖn1 DH23W! 7P6R^y^by΁U5[|FV3F!~9&_A*[iP\D# z8)tv 荝oH7́\,踡,n=E4H5w=vrWg>zNr2Ӛ/ 0'yٓ/_L!ݻ>2%joϦa Ϩu=aA/ha5T;gkB { pcyi j0z\f/jnZ/3q]Ǎ}9,Nh UcO~IB AUŲh0YV̱S>r 1ZHh?@M:m# \\->88=ؗG]S_qN&Z]dFmҤD2WVKZO}Nʅ*CF@Q#GϣH'PL[h`>"9줏YdFBojcsm߯>>9ф.ιM GHXm4Ɋ Ec4G>=QiJYnFC-W6#_R1-3 XʱʵwY~A?9K<eK^"4 0k*fO=wus]<\s7xw2BL͔Ӭsa 43҅`oLKt`6vk߰tX9}Oy y@#i?  zRE 1).vkgNUU.U ])=&vRkZ B[F08M65R?}5[W2! ™-i:WgP,/;Eš#/GP@uC7SONG4:3!p40IG\ڒ%Pp=%Q`fz#;-XI U~WH]n)y!쇗xb(WjӲi8Z .?P'j}_ͨY;k2iዳgUj^hCRyIHyz@&f& [ki j Ż1pܧ@ % ^V8z /19=!%b~PN b!/ضi\ cI8LXEd{x)=~>c)ι#1)֬xe_s }v)A4zyh(j>} v1?ّӰ67M;!@nTe,2Rgos1ߞ#'QE+N$P f0UH!܇MBqEw}ss(\P:FUφɕ4ACNKܽwQt^1mQ9,w@oצq_LԜpϼ֬8d%GɡjO#VP\ه Y(bkxԘ1oo ~c|h"3 cr5ڢ_Yϳs*"`pK/)]l|L4Y ;Yi|~|Jء Hfaq ɘ^{IaBZ cצ 0E&,IESLQ'*ľ .. c 7i;(Ʌd3@ r :1DbGplx~4z F^?PT6GQ޵a` ;q,$72@r{;{HܒQ/p/uD ?.jC]vmyp+i;EB(CNH+uojjf0հkڸW ߎ'B[єB`y_i<-8gqj'<柢X(~߼h"p,c6wN H+%zWEɝe?jd&ʎyJG3%2 nrY2]Ibz͠z拋b~&̡닫 $9d8e3+2[#Xf3Fd^Q&/7F%ȟ}"KG5+vv1n,Še`n-؆k*nx!0V듨Xx"Ȗg(ٱcv'fwУF&n~ؿ={Z~w\TcbWqj ]Ngt2gחN.''6H6֊J*2DQ}xJ!R-tĤǥH@'H\׶m i)J>CNYdI={)E!JOF"v{2n Z%Du)mȝ:z#6K,1ՎTp3"!WxBjt؈LNB]ImπفtOKI^ysb@GOv~,RV !>:]i?ulaoI@E] ,{U*a!jEK,Q9:%esëL@ܤ0 vmܷG;;)ee+lNa]gI"*OSTT-H2@&:ũ;{'y+ѰBqy @H-Ѩ ͛(uԦ5\X_k х=$a 8=P _MZ^"f jA(JH6<:سa|sWNڻ9_l䳤Dž'_a)l=#Zv7j!%0v+(V/R u!" g)!]jeQ^T Ɵn4 YRV6+,(9Za`Pᮣ0Dک}sgj1u_1$ԩot2h:W+/"%pN;^fW%x6gT=i3Y(=@0bnt0x -_{rɢ (^2uޘֳL14q4z=KS2~1|7ؠ; 7j /V NuPwܷzyrj(77 ~= P©FX( A|| )dƟ!aګ}qFf!c9\Zeq74 6j$\Igjcy4s`=[(.%#4qTdz9\,Q8`WU/fs<_=[ ц4'.-9Mَ}4@yZLf9rk̈a,W_N=nvq;톧e%Xɤu5I[[̗~Jw9[.(>X+h<&2J̬A%XjIm=$GVk =2g <\X3#\93|S;ٍ0m;Ӻ&w\iJe#<;}X^H*.Y@RW25J6o)b%sj?u&VBXAZUL[K6M"5[XnAB*{-z3HY0@C7 ف~d,CPY-C€fGymk^aܬYH$ xp@14U:C]!zVS\I~K70o'Xa/@ňېn `Q!u*#7Ąxуj{fO<ƶǡ:qU [n eRkYJ3cĤ8yO)Vx]W "tڧS4ӥ&Qv9y=\Q g˃tDZ\ڱ;A`/j1l3?tOb&b qE1l =JϿIUC"2Tは+A"TTZ93u/ 8A07a788/,.IM+N-*LNճh 8891X]oF}ׯjvSXV쵔-(#r(Κ3C+z߾!E9V,j#-s?=P߯w˷XN//V+~7XLo=;vEg?s^){# `Wsq](LDikiWIJ}j8\W7Zb`frӏ?pxGwMQuiT߫al&Ixh4:a@מ*RĪ8l vbr'V'3P??i#"V2/cs.6O"N3%]BzmΠH\ONtWʼngċ\ڍ.)c=i.'8/X,'7˅x;Of1O.αOŪ/&H SU$~rcw4p*nu),/>̯bc _Va}tq~3^ή*yfrN:jQ;>v"¼T[B(r /L"Oѹ)7VX"2{ (0QTYcpĭK9h .8@٥,FWJ^\=u8dT3E:Le#mޚ O^R앷Z+zr tWEiCbM~x'}OiX]Ag'<jLn'ysCpԮ!W6؋Aq3k!& Z_޼l!lUbdTHT!`}"ʒgK}.Le UYʱ'm%T>_ $2Bw\PNJ: v&sֳЂJ=BT?>pe#:SuřsH hK EY(쫵߯ޤ,IQTb:u:<֔^ķޡWµ%SmRc]I5/\q+{ ec3A @f[d@̏A{'-*Au L=H+%sJ0x/ 2A@B<׀'X Rͪ)W@EPnU*^[.GY!fb%сP l%57ED)v4{b8P5ОÎ96 /"*r]$ֶ*BvM4Oa65YhuWmlװ%U@D-e!M8#~vLyvzh:>d "ŷ*C7f%__s={c@TRi§4VME|atL]Ҿ [چJH?{n1VoF@hvŃ BANkWO&w$y ý)LC^_]NĿ_L2t-:y7GBgjbfUx9_[4,TGW-B%^<$K(@A魁8btV@,3[jxDjF%'%JrmT+P\T{^Ã+xk x]/O5ƽ*^-4,3D]D;R Pu=ʜ4<3%8 ~}5l0X.vOm1HqՓ`jHۀ+"idgM$W"*Y\4׷.< ZI즔NcuB廭Hg)eeݗ?1Ռlo)bΙTh|-d ׿0|w$~' PtkA|BX4ϡ +An{`*b9*HKKvΡLrvculcx[~k7Jjm(E묆:I`@m =?Zrq+Mv2 x1C#.͖1 s5٬ו@G-g2'E~qwMpO8kpB4g^FV!9a2kn4isG.AG%0{!&dXr3BU%zdz+ ZE o-~EMM[ /2ު2}:o "0kS 8q/?')<зUoR9\qʤ$' ږ@h 3nB4TC %8^7;|u؟