crypto-policies-20211116-1.gitae470d6.el8 >  A aFU]DZҤ*w>B.:0|vLvB2}kS"ν<3w35ԩZI⛓U~Vp1v%VVՅ2>FSN.)o X@xJ']6}ڷn;cS.Ne#wV6 4 Qܩ*(]4Xs/Eb)ɛzQ lyHlg.Lo}=XyncmW*<.;ڿz4:*$_mGˮ~wNfӃzA/y{H: C mXR5Kk$gK=sP\RѼ=p?!"yq_ р C+fhHG#K鐸7S?T‹O>KɃ*l=R?4{mGW/j!kD6n}H=?pkW;TNU?)ոy˖jA)w6`QV=1.:XX"* Ya+ƿae3d699b6744de40e53899dfd563da2f3458a6f9827418b388b093cd42f5cdc29491faafb836b97389ce1c8236c8a168f4e64242̉aFU]MK~3J 4GϢ2uk" 2I 'MZټu%<8njw`;VnaJ p׮m̨ԧn7x-`h`{_aBim]̧2n)iE]m6ha^؂wZ ٦PAhYͧ#ynNo BǍ'e/뮰КFryb@«D, woS ܉$ A-r GhIi ى;1#-&n£)bOH/|0p>pD?d , H 0<tz  F  l   ( +-`0?33P5556667(7D87LX98X:NX>r@BrFGrXHtIvXwYwZw[w\w]z(^Wbdmerfulwtuv( TXptx~Ccrypto-policies202111161.gitae470d6.el8System-wide crypto policiesThis package provides pre-built configuration files with cryptographic policies for various cryptographic back-ends, such as SSL/TLS libraries.ax86-02.mbox.centos.org*CentOSCentOSLGPLv2+CentOS Buildsys Unspecifiedhttps://gitlab.com/redhat-crypto/fedora-crypto-policieslinuxnoarchif not posix.access("/etc/crypto-policies/config") then local policy = "DEFAULT" local cf = io.open("/proc/sys/crypto/fips_enabled", "r") if cf then if cf:read() == "1" then policy = "FIPS" end cf:close() end cf = io.open("/etc/crypto-policies/config", "w") if cf then cf:write(policy.."\n") cf:close() end cf = io.open("/etc/crypto-policies/state/current", "w") if cf then cf:write(policy.."\n") cf:close() end local policypath = "/usr/share/crypto-policies/"..policy for fn in posix.files(policypath) do local backend = fn:gsub(".*/", ""):gsub("%..*", "") local cfgfn = "/etc/crypto-policies/back-ends/"..backend..".config" posix.unlink(cfgfn) posix.symlink(policypath.."/"..fn, cfgfn) end end+-++0-*.4.1K,{*$&iKgpVSi)[@DFOeK}K,iKgpVSi)[@DFOeK} m V>yZ{g@3AAAAAA큤AA큤A큤A큤A큤A큤AA큤A큤A큤A큤A큤A큤A큤aȥaȥaȥaȥaȥaȥaȥaȥaȥaȥaȥaȥaȥa>aȣaȣaȣaȥaȥaȥaȥaȣaȣaȣaȣaȣaȣaȣaȣaȣaȣaȣaȣaȣaȣaȣaȣaȣaȣaȣaȣaȣaȣaȣaȣaȣaȣaȣaȣaȣaȣaȣaȣaȣaȣaȣaȣaȣaȣaȣaȣaȣaȣaȣaȣaȣaȣaȣaȣaȣaȣaȣaȣaȣaȣaȣaȣaȣaȣaȣaȣaȥaȥaȣaȣaȣaȣaȣaȣaȣaȣaȣaȣaȣaȥaȣaȣaȣaȣaȣaȣaȣaȣaȣaȣaȣaȥaȣaȣaȣaȣaȣaȣaȣaȣaȣaȣaȣaȥaȣaȣaȣaȣaȣaȣaȣaȣaȣaȣaȣa>aȣa>a>a>a>a>aȥa>a>a>a>a>aȣaȿa>aȣ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-policies/DEFAULT/bind.txt/usr/share/crypto-policies/DEFAULT/gnutls.txt/usr/share/crypto-policies/DEFAULT/java.txt/usr/share/crypto-policies/DEFAULT/krb5.txt/usr/share/crypto-policies/DEFAULT/libreswan.txt/usr/share/crypto-policies/DEFAULT/libssh.txt/usr/share/crypto-policies/DEFAULT/nss.txt/usr/share/crypto-policies/DEFAULT/openssh.txt/usr/share/crypto-policies/DEFAULT/opensshserver.txt/usr/share/crypto-policies/DEFAULT/openssl.txt/usr/share/crypto-policies/DEFAULT/opensslcnf.txtYYYYYYYYYYYY@@rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootcrypto-policies-20211116-1.gitae470d6.el8.src.rpmconfig(crypto-policies)crypto-policies      config(crypto-policies)rpmlib(BuiltinLuaScripts)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PartialHardlinkSets)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)20211116-1.gitae470d6.el84.2.2-13.0.4-14.6.0-14.0.4-14.0-15.2-1gnutlslibreswanlibsshnssopensshopenssl3.6.123.280.9.43.44.08.0p1-51.1.1k4.14.3a@`9@`"y@_ L^z^@^y^@^ϧ]q]@]߶])]J@]H@]:\j@\]o@\T4\G\E@\[@[[#@[#@[@[qr[a[WZmZZH@ZZ}@Zz@Z ,@Yn@Y3YYx@Yw2Yu@Y6@Y.@Xߖ@XDX@XX@X@X%W_@W Wv@W@W@WgW9@VV9@V*!@Vf@Ua@UY@TTTE@TTTTsTmT S@SSSS@S"@S@SS!@S~@S}S|@S{CSy@Alexander Sosedkin - 20211116-1.gitae470d6Alexander Sosedkin - 20210617-1.gitc776d3eAlexander Sosedkin - 20210209-1.gitbfb6bedTomáš Mráz - 20200713-1.git51d1222Tomáš Mráz - 20200629-1.git806b5d3Tomáš Mráz - 20200610-1.git0ac8b1fTomáš Mráz - 20200527-5.gitb234a47Tomáš Mráz - 20200527-4.gitb234a47Tomáš Mráz - 20200527-2.git63fc906Tomáš Mráz - 20191128-2.git23e1bf1Tomáš Mráz - 20191128-1.git23e1bf1Tomáš Mráz - 20191127-1.git1179826Tomáš Mráz - 20191022-1.gite17cc3aTomáš Mráz - 20190807-1.git9b1477bTomáš Mráz - 20190613-2.git21ffdc8Tomáš Mráz - 20190613-1.git21ffdc8Tomáš Mráz - 20181217-6.git9a35207Tomáš Mráz - 20181217-5.git9a35207Tomáš Mráz - 20181217-4.git9a35207Tomáš Mráz - 20181217-3.git9a35207Tomáš Mráz - 20181217-2.git9a35207Tomáš Mráz - 20181217-1.git9a35207Tomáš Mráz - 20181122-1.git70769d9Tomáš Mráz - 20181026-1.gitcc78cb7Tomáš Mráz - 20180925-2.git3ce363aTomáš Mráz - 20180925-1.git3ce363aTomáš Mráz - 20180921-1.git62bafdeTomáš Mráz - 20180801-2.git2b95edeTomáš Mráz - 20180801-1.git2b95edeTomáš Mráz - 20180723-1.gitdb825c0Tomáš Mráz - 20180425-1.git6ad4018Nikos Mavrogiannopoulos - 20180306-1.gitaea6928Nikos Mavrogiannopoulos - 20180227-1.git0ce1729Nikos Mavrogiannopoulos - 20180112-1.git386e3feIgor Gnatenko - 20171115-3.git921600eFedora Release Engineering - 20171115-2.git921600eNikos Mavrogiannopoulos - 20171115-1.git921600eNikos Mavrogiannopoulos - 20170823-1.git8d18c27Nikos Mavrogiannopoulos - 20170816-1.git2618a6cNikos Mavrogiannopoulos - 20170802-1.git9300620Fedora Release Engineering - 20170606-4.git7c32281Igor Gnatenko - 20170606-3.git7c32281Troy Dawson 20170606-2.git7c32281Nikos Mavrogiannopoulos - 20170606-1.git7c32281Nikos Mavrogiannopoulos - 20170531-1.gitce0df7bBjörn Esser - 20170330-3.git55b66daPetr Šabata - 20170330-2.git55b66daNikos Mavrogiannopoulos - 20170330-1-git55b66daNikos Mavrogiannopoulos - 20160214-2-gitf3018ddNikos Mavrogiannopoulos - 20160214-1-gitf3018ddFedora Release Engineering - 20161111-2.gita2363ceNikos Mavrogiannopoulos - 20161111-1-gita2363ceNikos Mavrogiannopoulos - 20160926-2-git08b5501Nikos Mavrogiannopoulos - 20160926-1-git08b5501Nikos Mavrogiannopoulos - 20160921-1-git75b9b04Nikos Mavrogiannopoulos - 20160718-2-gitdb5ca59Nikos Mavrogiannopoulos - 20160718-1-git340cb69Nikos Mavrogiannopoulos - 20160718-1-gitcaa4a8dNikos Mavrogiannopoulos - 20160516-1-git8f69c35Fedora Release Engineering - 20151104-2.gitf1cba5fNikos Mavrogiannopoulos - 20151104-1-gitcf1cba5fNikos Mavrogiannopoulos - 20151005-2-gitc8452f8Nikos Mavrogiannopoulos - 20151005-1-gitc8452f8Fedora Release Engineering - 20150518-2.gitffe885eNikos Mavrogiannopoulos - 20150518-1-gitffe885eNikos Mavrogiannopoulos - 20150305-3-git2eeb03bNikos Mavrogiannopoulos - 20150305-2-git44afaa1Nikos Mavrogiannopoulos - 20150305-1-git098a8a6Peter Robinson 20150115-3-git9ef7493Nikos Mavrogiannopoulos - 20150115-2-git9ef7493Nikos Mavrogiannopoulos - 20141124-2-gitd4aa178Nikos Mavrogiannopoulos - 20141124-1-gitd4aa178Nikos Mavrogiannopoulos - 20141120-1-git9a26a5bNikos Mavrogiannopoulos - 20140905-1-git4649b7dNikos Mavrogiannopoulos - 20140827-1-git4e06f1dNikos Mavrogiannopoulos - 20140814-1-git80e1e98Nikos Mavrogiannopoulos - 20140812-1-gitb914bfdTom Callaway - 20140708-2-git3a7ae3fNikos Mavrogiannopoulos - 20140708-1-git3a7ae3fNikos Mavrogiannopoulos - 20140620-1-gitdac1524Nikos Mavrogiannopoulos - 0.9-7-20140612gita2fa0c6Fedora Release Engineering - 0.9-7.20140522gita50bad2Nikos Mavrogiannopoulos - 0.9-6-20140522gita50bad2Nikos Mavrogiannopoulos - 0.9-5-20140522gita50bad2Nikos Mavrogiannopoulos - 0.9-4-20140522gita50bad2Nikos Mavrogiannopoulos - 0.9-3-20140520git81364e4Nikos Mavrogiannopoulos - 0.9-2-20140520git81364e4Nikos Mavrogiannopoulos - 0.9-1-20140519gitf15621a- OSPP: relax -ECDSA-SHA2-512, -FFDHE-* - fips-mode-setup, fips-finish-install: call zipl more often (s390x-specific) - libssh: enable diffie-hellman-group14-sha256 support - openssl: fix disabling ChaCha20- implement scoped policies, e.g., cipher@SSH = ... (#1960266) - implement algorithm globbing, e.g., cipher@SSH = -*-CBC - deprecate derived properties: tls_cipher, ssh_cipher, ssh_group, ike_protocol - deprecate sha1_in_dnssec property - deprecate unscoped form of protocol property - update documentation - expand upstream test coverage - openssl: set MinProtocol / MaxProtocol separately for TLS and DTLS (#1946522) - support AES-192 ciphers in custom policies for non-TLS scenarios (#1876846) - stop claiming Camellia is disabled (#1925104) - disable CBC ciphers in FUTURE for everything but Kerberos (#1933016) - drop SHA224 from signature algorithms in FIPS:OSPP (#1934755) - condition ecdh-sha2-nistp384 on SECP384R1- OSPP subpolicy: tweak for RHEL-8.3+ - libssh: respect ssh_certs- OSPP subpolicy: remove AES-CCM - openssl: handle the AES-CCM removal properly- disallow X448/ED448 in FIPS policy with gnutls >= 3.6.12 - add AD-SUPPORT policy module- fallback to FIPS policy instead of the default-config in FIPS mode - java: Document properly how to override the crypto policy - krb5: No support for 3des anymore - reorder the signature algorithms to follow the order in default openssl list- make the post script work in environments where /proc/sys is not available- automatically set up FIPS policy in FIPS mode on first install- explicitly enable DHE-DSS in gnutls config if enabled in policy - use grubby with --update-kernel=ALL to avoid breaking kernelopts - OSPP subpolicy: Allow GCM for SSH protocol - openssh: Support newly standardized ECDHE-GSS and DHE-GSS key exchanges - if the policy in FIPS mode is not a FIPS policy print a message - openssl: Add SignatureAlgorithms support - custom crypto policies: enable completely overriding contents of the list value - added ECDHE-ONLY.pmod policy module example - openssh: make LEGACY policy to prefer strong public key algorithms - various python code cleanups - update-crypto-policies: dump the current policy to /etc/crypto-policies/state/CURRENT.pol - split scripts into their own subpackage- move the pre-built .config files to /usr/share/crypto-policies/back-ends- fips-mode-setup: compatibility with RHCOS- add FIPS subpolicy for OSPP- custom crypto policies support - update-crypto-policies: fix handling of list operations in policy modules - update-crypto-policies: fix updating of the current policy marker - fips-mode-setup: fixes related to containers and non-root execution - make it possible to use fips-mode-setup --check without dracut - add .config symlinks so a crypto policy can be set with read-only /etc by bind-mounting /usr/share/crypto-policies/ to /etc/crypto-policies/back-ends - run the update-crypto-policies in posttrans- gnutls: enable TLS-1.3 in the FIPS policy- fix ownership of policy directories - nss: enable X25519 in appropriate policies and conflict with old nss - openssh: conflict with old incompatible openssh version- openssh: add missing curve25519-sha256 to the key exchange list - openssh: fix RSA certificate support - fips-mode-setup: drop the kernel boot option if there is no separate /boot drive - fips-finish-install: regenerate all initramdisks - add libssh configuration backend- libreswan: Allow coalescing the IKE/IPSEC proposals- cleanups of the crypto-policies.7 manual page- Java: Fix FIPS and FUTURE policy to allow RSA certificates in TLS- cleanup duplicate and incorrect information from update-crypto-policies.8 manual page- add crypto-policies.7 manual page- update-crypto-policies: Fix endless loop - update-crypto-policies: Add warning about the need of system restart - fips-mode-setup: Use grub2-editenv to modify the kernelopts for BLS- update-crypto-policies: fix error on multiple matches in local.d - Print warning when update-crypto-policies --set is used in the FIPS mode - Java: Add 3DES and RC4 to legacy algorithms in LEGACY policy - OpenSSL: Properly disable non AEAD and AES128 ciphersuites in FUTURE - libreswan: Add chacha20_poly1305 to all policies and drop ikev1 from LEGACY- Fix regression in discovery of additional configuration - NSS: add DSA keyword to LEGACY policy - GnuTLS: Add 3DES and RC4 to LEGACY policy- Improve the package description- Use Recommends instead of Requires for grubby - Revert setting of HostKeyAlgorithms for ssh client for now- OpenSSH: Generate policy for sign algorithms - Enable >= 255 bits EC curves in FUTURE policy - OpenSSH: Add group1 key exchanges in LEGACY policy - NSS: Add SHA224 to hash lists - Print warning when update-crypto-policies --set FIPS is used - fips-mode-setup: Kernel boot options are now modified with grubby- Fix build to use the system python- Add OpenSSL configuration file include support - Disable TLS-1.0, 1.1 and DH with less than 2048 bits in DEFAULT policy- Initial FIPS mode setup support - NSS: Add tests for the generated policy - Enable TLS-1.3 if available in the respective TLS library - Enable SHA1 in certificates in LEGACY policy - Disable CAMELLIA - libreswan: Multiple bug fixes in policies- Restart/reload only enabled services - Do not enable PSK ciphersuites by default in gnutls and openssl - krb5: fix when more than 2048 bits keys are required - Fix discovery of additional configurations #1564595 - Fix incorrect ciphersuite setup for libreswan- Updated policy to reduce DH parameter size on DEFAULT level, taking into account feedback in #1549242,1#534532. - Renamed openssh-server.config to opensshserver.config to reduce conflicts when local.d/ appending is used.- Updated to include policies for libreswan- Updated to apply the settings as in StrongCryptoSettings project. The restriction to TLS1.2, is not yet applied as we have no method to impose that in openssl. https://fedoraproject.org/wiki/Changes/StrongCryptoSettings- Escape macros in %changelog- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild- Updated openssh policies for new openssh without rc4 - Removed policies for compat-gnutls28- Updated gnutls policies for 3.6.0- Updated to latest upstream - Restarts openssh server on policy update- Updated to latest upstream - Reloads openssh server on policy update- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- Restore Requires(post)- perl dependency renamed to perl-interpreter - remove useless Requires(post) - Fix path of libdir in generate-policies.pl (#1474442) - Updated to latest upstream - Allows gnutls applications in LEGACY mode, to use certificates of 768-bits- Updated to latest upstream - Added new kerberos key types- Add Requires for update-crypto-policies in %post- update-crypto-policies uses gred and sed, require them- GnuTLS policies include RC4 in legacy mode (#1437213)- Added openssh file- Updated policies for BIND to address #1421875- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild- Include OpenJDK documentation.- Improved messages on error.- Added support for openssh client policy- Updated with latest upstream.- Added support for administrator overrides in generated policies in local.d- Fixed NSS policy generation to include allowed hash algorithms- Updated to new version with auto-generated policies- Generate policies for NSS - OpenJDK policies were updated for opendjk 8- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild- Generate policies for compat-gnutls28 (#1277790)- Generated files are put in a %ghost directive- Updated policies from upstream - Added support for the generation of libkrb5 policy - Added support for the generation of openjdk policy- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- Updated policies to remove SSL 3.0 and RC4 (#1220679)- Added make check- Removed support for SECLEVEL (#1199274)- Include AEAD ciphersuites in gnutls (#1198979)- Bump release so lastest git snapshot is newer NVR- Updated to newest upstream version. - Includes bind policies (#1179925)- Corrected typo in gnutls' future policy (#1173886)- re-enable SSL 3.0 (until its removal is coordinated with a Fedora change request)- disable SSL 3.0 (doesn't work in openssl)- enforce the acceptable TLS versions in openssl- fix issue with RC4 being disabled in DEFAULT settings for openssl- fix issue in post script run on upgrade (#1130074)- updated crypto-policies from repository- fix license handling- updated crypto-policies from repository- updated crypto-policies from repository - changed versioning- updated crypto-policies from repository- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild- Require(post) coreutils (#1100335).- Require coreutils.- Install the default configuration file.- Run update-crypto-policies after installation.- Updated spec based on comments by Petr Lautrbach.- Initial package buildcrypto-policies  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRS !_/0123456789k;<=>?@ABCDEwGHIJKLMNOPQ20211116-1.gitae470d6.el820211116-1.gitae470d6.el820200527-1.git0a29b28      crypto-policiesback-endsbind.configgnutls.configjava.configkrb5.configlibreswan.configlibssh.confignss.configopenssh.configopensshserver.configopenssl.configopensslcnf.configconfiglocal.dpoliciesmodulesstateCURRENT.polcurrentcrypto-policiesDEFAULTbind.txtgnutls.txtjava.txtkrb5.txtlibreswan.txtlibssh.txtnss.txtopenssh.txtopensshserver.txtopenssl.txtopensslcnf.txtEMPTYbind.txtgnutls.txtjava.txtkrb5.txtlibreswan.txtlibssh.txtnss.txtopenssh.txtopensshserver.txtopenssl.txtopensslcnf.txtFIPSbind.txtgnutls.txtjava.txtkrb5.txtlibreswan.txtlibssh.txtnss.txtopenssh.txtopensshserver.txtopenssl.txtopensslcnf.txtFUTUREbind.txtgnutls.txtjava.txtkrb5.txtlibreswan.txtlibssh.txtnss.txtopenssh.txtopensshserver.txtopenssl.txtopensslcnf.txtLEGACYbind.txtgnutls.txtjava.txtkrb5.txtlibreswan.txtlibssh.txtnss.txtopenssh.txtopensshserver.txtopenssl.txtopensslcnf.txtback-endsDEFAULTbind.configgnutls.configjava.configkrb5.configlibreswan.configlibssh.confignss.configopenssh.configopensshserver.configopenssl.configopensslcnf.configFIPSbind.configgnutls.configjava.configkrb5.configlibreswan.configlibssh.confignss.configopenssh.configopensshserver.configopenssl.configopensslcnf.configFUTUREbind.configgnutls.configjava.configkrb5.configlibreswan.configlibssh.confignss.configopenssh.configopensshserver.configopenssl.configopensslcnf.configLEGACYbind.configgnutls.configjava.configkrb5.configlibreswan.configlibssh.confignss.configopenssh.configopensshserver.configopenssl.configopensslcnf.configdefault-configpoliciesDEFAULT.polEMPTY.polFIPS.polFUTURE.polLEGACY.polmodulesAD-SUPPORT.pmodECDHE-ONLY.pmodNO-CAMELLIA.pmodNO-SHA1.pmodOSPP.pmodreload-cmds.shcrypto-policiesCOPYING.LESSERcrypto-policies.7.gz/etc//etc/crypto-policies//etc/crypto-policies/back-ends//etc/crypto-policies/policies//etc/crypto-policies/state//usr/share//usr/share/crypto-policies//usr/share/crypto-policies/DEFAULT//usr/share/crypto-policies/EMPTY//usr/share/crypto-policies/FIPS//usr/share/crypto-policies/FUTURE//usr/share/crypto-policies/LEGACY//usr/share/crypto-policies/back-ends//usr/share/crypto-policies/back-ends/DEFAULT//usr/share/crypto-policies/back-ends/FIPS//usr/share/crypto-policies/back-ends/FUTURE//usr/share/crypto-policies/back-ends/LEGACY//usr/share/crypto-policies/policies//usr/share/crypto-policies/policies/modules//usr/share/licenses//usr/share/licenses/crypto-policies//usr/share/man/man7/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protectioncpioxz2noarch-redhat-linux-gnudirectoryASCII textemptyASCII text, with very long linesASCII text, with very long lines, with no line terminatorsASCII text, with no line terminatorsUTF-8 Unicode texttroff or preprocessor input, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix)crypto-policies-scriptsutf-8fc49e1c31da6b7fcfef3cf9eb137451f0591b39717a9e9698df2731dd324e833?7zXZ !#,pXM] b2u jӫ`(y-% {CmR WF[2= m̆# KpC5-SƂK*f#ЭvUґ2n9vva>deU*Mgu-MnEv@3 'aev 8ޔ yK?6)RT 17ǎ#^g\ /`Qx3:D)[Ȇ㱚RuBC" e vpͳT>}c*aU5 /nUpP䢦ܛۍrr# L 0epLsGg Um"*AJ݄vg1}eGzL*/*Zzv6=QtE*&QYE cwGPKT* .@ȼ*yHb'A.}]ugG`г"NG&_P60Cpv|{1U<< :&uP_%l3=f2G؈ã0r ȵ#}ס-$aiaW:6DmiQ]Sq%4ayԠsjYShddoC؎5:6@$ ߷?b3FL#<_pi⛲D4E߹<پ[@-D7a_ԟԲ{(52}|_7*QйԖQ`4&7 d,:m4UMxhK8$,{/&ח|L SeM_ {juI'jT/x`ol(a#V Ԙ,#)^I>ȋqТv/Î5B?2Lq]g]lB̜x}H J uS?uj.EC!T1YσtFw2ZKFj* բڸ>diDٌ5%FŒk"uw/ְ@Y/b_YR5<*!lO'mN6c-tmR8xpqkϗӏT`w΅+_7&.{T#"j#K5O5eಠq}9Ȫf}.I8@9Wu(bee^#GߌTWVӞ6 #ؼ6: i&S6 d)r8Tth#l[=%^E;O2jԅETVd^ w`%"JqFR9,4bljӮT:>]B30?sIؔh;y0*rv@/n;g Fn}usʺg['6gŞd5̽ڏx/PK=3J!&Li*NC} kSPۇZM&1Dnxel'()͜% kΙ?f,Ó]@Zo{=w}ni 8mhǗ4-nLYs5h&@S"#IB_OsyDP1qŬxJ<բdɻa(/ScMR!. ab%ʕ $jJ99^@>#@[ʟ=7Nk4< )SGSG@ BGgܨ5E1ERx\M9jb,F@e݀٨۶^~T}V1 r UKwUz.m$f&mwCZ߸ rn{\"&L,̢}5ˎ5ΟhXK:rh49iDY=(K'coǚ"{2#8,xbX?&Y5}Y:(M/r*)6Az:t^F#3LAPRяQ1ɴ BRQ @ۉZ\Ji#Qń e)RylH{Id\&֘y.ʔ떉b;eO_#Ū:`"ΝQȾϠJO7As{] ኵJc|MPSn)'BDpao坶8B8Dp65J%۽"|KGS5IYyM0ڪ ͠C<4=lU[xôԉy#[,bkW`RT<= "p .g΃ưŴ|&z@X\*^a{H0n3(:A ?X=b3'*-N/3k/_\7F y66"bӀxfp`T3Uodg~h^iJ0.ݵD3܍q~,t}CRX#W%2,[xoQu񢼷^~[GƚsZ"i#d*_iH\TQ@F@ M=a~y5xy^-&bYJaܶBc !'tl"@nzƒ߮'S g'8ѹA%ǃ57GEa,$Cg0%2pHNuڷ[hf< Xt@򙛗g \_Ł+*H+ fj-Wb!J_S=VFPF;DE=!`tU6b.oPpy!קg7c VkTO驸 e\|ke4YSI2$h_4 )gvu2&J.h?υXT{%,L@n@kAS?-vuZ 8Gvca+(<<[Gٔ:uBrQ!AJ'p?7. F*/rԵLk;!8^/N.Iyl<~NW=ƙzö <1y+hoGDk^Z{ ͗\Cf|z``Ŏ 0NҀT:'Nۃ=IaDHC&rbs&.zk:| b&:)L>} RXЁ<ބ+;MXy)=o&yn-r$TdUX@uI)7awX-DHh@AU'#ܼ\++xt"CcG^I)J2ÉK|MҵSKЉz0cK;Nב#>5]`i0I&D:OFEݍ+݌afNV+9Y^Ssdn<#,lKҩv 16':Bq:hOü $K$*Rm9C:5h~ w؊=/8'yW^` A]{eBRp2m9L>[؂2 ,֒̄X@F0Ô\?a`%B->T=qn7NGx ]!v!DZQKBue 7͑x'ļN!g„n)啑4Zr` 5EWia * sM_(XcR k'7wZ,-;Pg%?픾 Lx()88V\C.4Vo(1;^>h=v_2E;VΓ&RAh-挛@]o>lQ=|\- 4CRqܹpTr&94De!' pXȞiu1%(e`i<6>nh-ЦK_V/TKBgd[ uXs?;iwJ@b vDZR:#Х \YfEOM6D&|i08HU}-[ƱO1}2)%g}HkPĆ&X(Β) dX3]Qs$)G@jvwij~-Z,Ą@M,-EQ6AAS#gH?$vxYyKtrn[^Sz`J"IEH"I(#t"2fM} k0*O&\ Ri~mzXbl jg%d%< 8Q= tձ OQN,+הMRA0(q}4,!yD @ёH\{Fe["1F+ ȸp݂#P!ͦmOwUe1*%Rjj$|Ҡ3;pYA$$ G4Cb}&\k 5#(b BӎON (cA2piMD*}OD[*2W:*ߏZ2jk=a_H{Ƅl wʔ!Մ*WgA6٧֞Eh ?a04&2PWL%h= O$?A˙ `!P`VR7%5QЎ[*(LDܗ;߯k2[ds;D"Kz$xZ k|.%kenYlAs8$LF\ԥl`!Z<ޛ8yh?s(@ 'n#lh M֋@|}kx*&'|$UyJ,UJ/zv$rTb$3 +;jPRS|h8I`a ?CCVNաc $/ a"ETRc6$I\g#oY-NL /m~yzjKhd?<= }1<4-{lfRj33K:-Sb'\!޸@"v: {d$qv?6xUYdx|exR%{2z/ ?n]<'K'!xo_1}O 7CDLvnK\՛yЁa9:PGb]{xS-XGL5gkWRzАsnXht+xT[ ܷ73fPg[Ts~#H&\rQxXQ]wް.;VpƊ$DNA/@H~)69װcg G}H9r H' ?׽b.p81L PڲB+ ֦3ИK} 6#cJ(syDyK6LfyQ 3Ps; 4lNZgO |+ϩҕ=0RLdDM{?~pX4m\\;RV_<"J ,N6$'ۭOh+c6:tzj%8tUs{Dc7ΏyP}`Iy>(#:6 cUYЪoNMrݤB䎾]>6W5^[fR%Nb Qe x(~:UddžqxFo|う FY9}? =!cT4bi6-ör8M9/#M)|z}G4ͅBd7{(*׈[ 8/,v%p;e/l M]}TBcnvں+n> }*&W Zm(|@rGD[oͦY .yj\cANr<%A&3-|<*ְ.G>=N }g9?jȵ%/) :r:zx~Xl+0]ں41fT8o 246 */Wͥ(EڽFOb{{eݹϣ{ti7ƙ0>,El7~zkiI8Lno 8x &ps7+}߂`\Hʆ$*f iFxv i,Z7KkBgI{B8lH(lFNe@'nމᬨ8RHޱD!n[j 9/tՇtQ>H= ]䮓6f ߠFa|F1pmRWS(HbW$?Z>W9d{)^oXUR% 6IWL>|mo\ mQt q8M#Rzvh AY="d8^_mU 쀸5ϥU6Yy]n8#Xp@[-~8s̍L*on΀00:i)eíރJKㅫ@WHb&WP10!#pmM]Ƈz/e(`u$>EOj~D_vk=0cҽ=&Wݨ^ :A5@LBVFm<ض q ?M-lդa50o){-ՏwvG?g[LQmas#x{R񻋭"Sau*ڠRD* h k"QV҃D7Fh['D%/w絘fiMWKk6 i/D{٠Zx,3ΣI]8s{,AOD:aݏ I?|E?}͍3Puo.tΏy[# fqT*7K$+rf:_ ٶ|ugIRhQqw 3ܤTBPI@[b5;dgD_G]zU6w2$(#HqDn?\ʍsl&ܗ0wbHVʶqFcG3nC;Ƽ, eN'QJ?jKs4!{I'&s"Vdz+5&.5$2hqh-^&Gt" (_.}5 [HEp>DTοҕl?WYfoZ. moam )aՉzT"_Uem@] E+;ʼn1p$Swbh'6aŰߘmWs5e7)j<3"Uwykh3>H E[\&`4ҖeS:6_}oWڦ)DOs~'ok&Q9l5r)]R S֓Ԋ^=#hG.dx?$+Z-D龝V v6C"(l뤍zh{nwYv&|j)ОkaKgNHmW8!OX qb{CLKbnk%? xO)TèCۢ0aT#dEh&%7d2fgtPskwfjzz;mRiA.UVߛl"y]*EJQGҲs^_fO~t.rɱy 7'7wh7ѤqRfb_e!IKbՌW6&=N_E)$)_j?%7e!QO \/-%&!(or2WȔB? \(|z!fظgv2b.zD=᜴`~cr #$$"ޭ v}hz!8NE@d-Y˂> }Î! frN3EÕm$e͆eM e,]yurUz&KאlIQ-B$ko|Xvvmнk-*FYȌ#_5 4}-񟻮ɚm1WUjns7vJyDЋv*D,4Xz@$3b*$Wf!n/d X,Us.\B,5R=k'1oTX'J2Kr+3y@@߷[Gx}Ĭ=+79rgʹ/`ǘ1VVY05pC xIC𜽿i:ٔcUR='}w[8jXg/m%W{M;>#&Vop^!nιӷG޳I0,oa6,WMF[/%y+dLB"4fv[ڧ`$% fH*XMWTm Nz%eQ_ CI Pp9pj2d~ 1J±;^3u\L6 u;}%x {ݝshd 3b}et2gkו _1,x<'7^ s r_OLJVݱYd7(#suׁ/ǛrMt@llՑdLF<|Xz&dFfj ])0:^~ N1:k'H՟gD*6r?Vh=u\D5'.oi[n*vt5j}D" iC"s߭=0BIFYNٙIZ| G 8 qt'ܓIt[he)-gl`CVݮ* 'сmX%#:(x`=Q`&Hv ` ZQ[>r yi2Qcl77Dت d)d>_խ-uA/Ѷ7c+j !oJ7{=y>R&R04# abw- CA;BWYFСa~SyRHM^~`mGYe0;( kSK12%%Ky<#N溺h^U=/XlA0NqeވFFN m&=ǔ稅1t`FlDZT]9]sCsC\:%ݬPh5$x<m#GN:ɞ] p(^^#u $S~_)ND4@-n͟b BzwRdW< z]Dwmo/Eb+-v<%GeO5xH谇G|X_YZܪ]3a ] +Ξϟ/̲5dѰRThNuσ|B5ki cZ\"NF4 2Qlb:Y%{΄L{ENPƄf5Rcs &?02Dn:Sx.{1 uxCm+96IvLGiEJ_|:ޙ]z]y2凕:FcUŃRK7}7@z]-)oˌ#hy@tCEme^*r&mԩƷSWX PTtz|<`rחL۷1=%%by1cw _@zGm)d/Mc8/ԋM`x0X$N7ӄ^C} pAHLbp,E˭Tuc'X+|WElNNMRhKjT1%/vN].OVn:Su{mUA7⭐f"Xld ?B-Iu6۳|\) I>(NYBj}]G֝ŒE3ҽC\wHW.F*ޯܪ^FD6Ėٛ h&D1cOne][&G䁱̵W@x| on65`suNi:GbWc0M|*3|8Eң.3aJL'7+!>PZ94]ت ֥b,!j_F? 6 Hc17QΙ!7ul %kn6F4+BpR[:yW h}.xt) ^uOJ 0u( F G ڵZN"$ tIp4Eԓok 4c5>^i#΍e!@J WM nFW['tڇ\hvebZͲ4,kk$J2f/a>uzS0u rS5#F(l)8 ш]QCW'6cJ{}J?;w5e+-]W=)A\_P= svj]v?{-t0o|E:Ӹ*ؿߵDx=5(g̘o" y*XUei9n/v]L;ݧ1ڒQyD1aŧ/ =^[2FzߨܨAX1p(U]>tId6~B~ ko7v>Zvڣ|]x"INj(#xߣE3'Q^S;tˇnA*<I ˏʼ ҂zrX ˝? Є8 |Zk$`첗i!z²0D`e %)DlO<}[:2ܺBZ5b}(5PMwp2(kؤ'e0S3S78B7Xv n}в1~2w>.T' V,i}+?3O}FQt9 cĕCA7дِV.)$X%;H12NW.餶-߻'vtQy5ꝱi{6#{**C;]$vҐTD_# _׏0${whFʮ`Cc7%\p<+N.IsG&٤aL0<]1%dŶmdYS |I)?! ž}`]Y:Op]n{yLi'׼%W z)صe%bS&,n2f6/Ol:> d502#(qPj,/pҝ[no-n;%Y܏S8 EoY]-kِ l͎0ENûɞElv rgf U%bTD6OeA 5όËCuN6E8`]V(cѷW ?;Mf ~e-_Ϝun8 }rP/uXO1%|0#FSǥUe/Ol&=P.F |S_= WG4H>8i'NIeo: @QuxI5KD3X,^>:XSRdhTX3ax?3x^4o92Xx۟u7GzVŰJqIۯR i%H5i{iNil 2}T lѼp KaVQQ%?#SEznz{GFf'oY +D<f֕@lFsZ#Әb!e[R8:̌ͺ/!X`(D C:IiU92\&K]蟏XmB 5[RH+V?Myx9&T?hgoP.n]T3U+Cj#cF#@:/ܿѼBdOxD(i0F>+ gF<8WD?QUZfŬt$ Q%;I.GTf:z ˶0\sv8獎yZu 6UTy }صjJYA_% q F>B夢qzFh(#{Bk*Ndݣ=/gF<-j1c,ɗxs`\ -} frze3*=39Q 0Aybe}2 )E׋; ~vZ 1A,3߃{)q[I+>DrK۲H Z )>ר,Yr=,4TXY<|~.y"xņ2V@|Fgz#(80o{2!<.]ҷdmv[ub.mkwnaP =*/] y $g=[Ś&bj#-6U[=[#(hÙ+[曠gB&s\o9s j?P=Ug(<K\k9:DLZA%N(C;pjCPE) țTb->r)!J;`χ 1H ;(]4j "?C [ty؁.p n&8ӜuǏOŗ\kemh懬z1=]eI SvZEae`񀼆o E9xU{C: t4h^OR&aZA+l9g+..2VНmP->R ˕4h==kűZLAQEbI9y^;ά! f&RX0}ٌd/lއΌ \fNEx K"1?@2<⼚+Ԓo^OOzX?<ڊd<2]ZlNcx;,Ȋs $ 憻YTݍ;Z'g=`-z!eWwR7p`ʫ˛L$;g)#pM#2# 5AX\?v|ϖP#sxymӜ Mh'7BP/} vYq-taٵZ-vss"cnˬY܁艟 S1 Pn]]ư/O:^?GC)i,pӚWנl+nil';ݏ|k݊=3y8?͜w< K~;]j |nm\>zetzӂW|TOМ7cctY !X꫹)C *|B!jF aX@[FdZU~T $ཡ[p_zyjaP[&?b#wZ}7P+[g? .;RY126]o]+O3\h?QO)}Ly /5 YUdکT3SBY'/pእcl@_~#7J78a]8hпW_QND"'xŲ> u(nMgԀT[~͍kg6*N<ưe9k){FJs8e!xGА<Tfl=cЖ<7nb -'0I]Ȟx8'LFV?w%?ȾG0T#B Ʋ˵ gg& :65/jyAL_)dN2Dީm\&oVc"vRIer+2D5]OPb#=5\Y]򲋳& /\Bw7B3ft1Yf W,[cQ( BRh8y'8@.D|”B vkk-\Xt1Jͭ mCȜF1}5Qdz7w>cZPw> w./4dU\C[Or["U}dE};+^ҥKpsFS<̣Pp{c:|жӼہ~}|jUXD<vӆgD^PMW%Ad {\}M8TV&os4, f=/:I[y;DmsW- z`7Ͷ8(ۃ8)I2=&e/dLٵV0CŐGCT+3D2.!>04!&.Ꟈo`bhf|Kg|XDf9vHMWgH%ޜ{"$V=uQ(8\c'[7U%JBXgQwU3,%1eSH3ᦆGўhS$ 4^@vɹB<#gv0Vb$9UL-jY< _YQ\oY.MP~U7V](0bG]ְ틡|i\l10_G ϲwv| ,OGɋkWS h%'fS"SG[$k;7vlcYbQ} h߬MLKOPn熕 Bf˟#V-݁yVhvٸ)7ƮcJw5M&yʺMW 1^[7ԧy 0Kt$êvP٤'>,*[cFu*UK.'}cU>-ڍc[{zn+ :HL@V̱qH\D+HƗ0:_@hZi~TI6ds8ibx7aj;Z{ˣ~o)*~QK,;H7p*VT+ Ɏ2J:7*hͪgsq3ݱgtU5F GJsPps YK#&O%V?xBvQcG+U9Qi bî|얛f:Le@r=^3"ݴ)/*%j;/݉l _k ĩ3D7)k NK:hʰT/o_3DPp'uY[ &J]n)sz "4"lPV'l u??P)L_T4"Xs8ږ{xV['ԯQ,aO.O$˳vӑQV|Or}J%/9E$n㽶C>T:-,F'e3ĴȻGtpӺcf6dM/I;7 Cyᘊ$4< ޲gL,]呜ͻ@!`\~H#raaTPn{[y p BżC^PӔD{g^l{N_/ Zl{.%HKu{j~Kt8d:`4+I^Յ`8`kUb@تb²9)KcThEA3q;%A5" Z&ezKwglR.Ҵ(x'^^y˳cc8c;Cو 3o G(ZG2ХA,e&-mR{21B:(-5.3W2⁺LW~ˉ355ċt