python3-libsemanage-2.9-8.el8 >  A bU]LȜڅwml'X 9U,؟|QE*{h>e(Z- 0| Ln=<Â?1C)}0m.6ic5!geYF](eK;j^y8 ƗUɠ{}’el'8uGQ A>up'}JlBHv[c *-΅-$YڃpV e3˪O`䉔hr͒fh68-J%~zit<#jޜ]ߨ<sG -9/F.Pe.~r|`,kc%  U}hƞ;mʕYV͕]3o;vYO|*ӿ uQɇ$[>Ob [ 634c9f0f303e818e3e54dd9468040a432f98a424649659dc893c716f9ea0d576be74079a942f0f8badc293e772393b7f9dcf9832XbU]6&  P%9F`ŸGPXY0摢y54'`o3a~D|9igBӦC3 C8C(KGj&H[l?OBnMa. ֑|e.9 X0FCfAs36HBe5=f3y[!Mqũ[u ->Rw,LR'9QX[1W(D*3kW' K8Zқ߼߇P7io ~"i3ݼoEShcy gu|:5fb LD71G4f`@ hm]od0hV ȝt#A ӈ6be؂91_L ? P 0sS|Cʒ#̜bc/5DUߍ*#g!0ij4]@I:m5eQ;9t wNQY˺U?hQt^'[x| X Ed\X>p?Հ?pd  K $SYd      l|(89 $::BGH4ITX\YlZД[И\Ф]^|bdZe_fbldtӀuӠvwԬxy  $*lCpython3-libsemanage2.98.el8semanage python 3 bindings for libsemanageThe libsemanage-python3 package contains the python 3 bindings for developing SELinux management applications.b ppc64le-01.mbox.centos.orgVYCentOSCentOSLGPLv2+CentOS Buildsys Unspecifiedhttps://github.com/SELinuxProject/selinux/wikilinuxppc64leXӨӨm$AA큤b b b b b b b b 9018acb071668bb4e68d61440d437c4717801beddb1556fcac2bf28606432d2a9018acb071668bb4e68d61440d437c4717801beddb1556fcac2bf28606432d2a9031c903e6768275b9315d18ff2281fa631bb1352838804ba4586bdb4aa0a4ab12aafbdd9e637858ecf9254ab43c439072104fdf29b7c6665a888ac99d8c2b9f91d78a3db0848cfac5b7638d6121462efc115857bf35a31fa0cdfa8bc05c0aae../../../../usr/lib64/python3.6/site-packages/_semanage.cpython-36m-ppc64le-linux-gnu.sorootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootlibsemanage-2.9-8.el8.src.rpmlibsemanage-python3libsemanage-python3(ppc-64)python3-libsemanagepython3-libsemanage(ppc-64)@@@@@@@@@     @/usr/libexec/platform-pythonlibc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libpython3.6m.so.1.0()(64bit)libselinux-python3libsemanage(ppc-64)libsemanage.so.1()(64bit)libsemanage.so.1(LIBSEMANAGE_1.0)(64bit)libsemanage.so.1(LIBSEMANAGE_1.1)(64bit)libsemanage.so.1(LIBSEMANAGE_3.4)(64bit)python(abi)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PartialHardlinkSets)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)rtld(GNU_HASH)2.9-8.el83.63.0.4-14.6.0-14.0.4-14.0-15.2-14.14.3b@b8`@_@_R^]µ\@\ @[%@[@[[Zz@ZK@ZZI@ZZ@Z}@Zz@Zu@ZTZfY@YyYJYV@Y@Yx@Y.XX @X@X@XJWH@W9W@Wk@W,@V@V@VIVɦV=@V9@UU@UUUa@UUQ@U+S@S@S @SSShS8@RRrF@R^RNRB@R@-@R:@R-@R)QdQ@QzQu&@QfQQ@P@PP@PQP@P@PP O@O0@Oĺ@OtNO;@OO@N@N@N@N@NNNw.Nw.Np@N\NLN1O@Md@MM)MQ0@Mt@MLuLF@KKsKKKf@K{@Ka|@KTM@K(K@KJJ@J@J$JJJ#J#Jyt@JjJW-@JS8J,@I@II2Io%@Ik0Ik0I7@I7@I1.HN@HN@HN@HǶH*H@H@HW@H=I@GOGOGOG@G[@G G@GGGW@GSGNG5@G0W@G'@FFFFIFIF&@FvFɂ@FFF` @F9F/BF/BE@E@EEɿ@EEEx@El$E4D@D@D@DC@DDD@D@D{DDX@D@D@Dhm@Dhm@Dhm@D_2D?D*vD*vDDCCi@CtC@C@CCC@CC @Cǖ@Cǖ@Cǖ@Cǖ@C@C[C[C @C @C,C @C @CCf@CqCC}@C+CBCYCYC{@Cx|@CtCtCqCp@Cp@CoACiCf@CbC`@C_oC^@C\CX@CWCTCTCTCP@COCLCJWCFc@CBnCA@C:C3@C1K@C/C(C@C Vit Mojzis - 2.9-8Vit Mojzis - 2.9-7Petr Lautrbach - 2.9-6Petr Lautrbach - 2.9-5Vit Mojzis - 2.9-4Vit Mojzis - 2.9-3Vit Mojzis - 2.9-2Petr Lautrbach - 2.9-1Petr Lautrbach - 2.8-5Petr Lautrbach - 2.8-4Petr Lautrbach - 2.8-3.1Petr Lautrbach - 2.8-2Petr Lautrbach - 2.8-1Petr Lautrbach - 2.8-0.rc3.1Petr Lautrbach - 2.8-0.rc2.1Petr Lautrbach - 2.8-0.rc1.1Petr Lautrbach - 2.7-12Petr Lautrbach - 2.7-11Petr Lautrbach - 2.7-10Igor Gnatenko - 2.7-9Fedora Release Engineering - 2.7-8Igor Gnatenko - 2.7-7Iryna Shcherbina - 2.7-6Petr Lautrbach - 2.7-5Petr Lautrbach - 2.7-4Zbigniew Jędrzejewski-Szmek - 2.7-3Zbigniew Jędrzejewski-Szmek - 2.7-2Petr Lautrbach - 2.7-1Fedora Release Engineering - 2.6-6Fedora Release Engineering - 2.6-5Petr Lautrbach - 2.6-4Petr Lautrbach - 2.6-3Petr Lautrbach - 2.6-2Petr Lautrbach - 2.6-1.1Fedora Release Engineering - 2.5-10Charalampos Stratakis - 2.5-9Petr Lautrbach 2.5-8Petr Lautrbach 2.5-7Fedora Release Engineering - 2.5-6Petr Lautrbach - 2.5-5Petr Lautrbach - 2.5-4Petr Lautrbach - 2.5-3Petr Lautrbach 2.5-2Petr Lautrbach 2.5-1Petr Lautrbach 2.5-0.1.rc1Fedora Release Engineering - 2.4-6Robert Kuska - 2.4-5Petr Lautrbach 2.4-4Adam Jackson 2.4-3Petr Lautrbach 2.4-2Petr Lautrbach 2.4-0.6Fedora Release Engineering - 2.3-7Petr Lautrbach 2.4-0.5Petr Lautrbach 2.4-0.4Petr Lautrbach 2.4-0.3Fedora Release Engineering - 2.3-6Miroslav Grepl - 2.3-5Tom Callaway - 2.3-4Fedora Release Engineering - 2.3-3Kalev Lember - 2.3-2Dan Walsh - 2.3-1Dan Walsh - 2.2-3Dan Walsh - 2.2-2Dan Walsh - 2.2-1Dan Walsh - 2.1.10-14Dan Walsh - 2.1.10-13Dan Walsh - 2.1.10-12Dan Walsh - 2.1.10-11Dan Walsh - 2.1.10-10Dan Walsh - 2.1.10-9Dan Walsh - 2.1.10-8Dan Walsh - 2.1.10-7Dan Walsh - 2.1.10-6Dan Walsh - 2.1.10-5Dan Walsh - 2.1.10-4Dan Walsh - 2.1.10-3Dan Walsh - 2.1.10-2Dan Walsh - 2.1.10-1Dan Walsh 2.1.9-4Dan Walsh 2.1.9-3Dan Walsh - 2.1.9-2Dan Walsh - 2.1.9-1David Malcolm - 2.1.8-6David Malcolm - 2.1.8-5Fedora Release Engineering - 2.1.8-4Dan Walsh - 2.1.8-3Dan Walsh - 2.1.8-2Dan Walsh - 2.1.8-1Dan Walsh - 2.1.7-2Dan Walsh - 2.1.7-1Dan Walsh - 2.1.6-3Fedora Release Engineering - 2.1.6-2Dan Walsh - 2.1.6-2Dan Walsh - 2.1.6-1Dan Walsh - 2.1.5-4Dan Walsh - 2.1.5-3Dan Walsh - 2.1.5-2Dan Walsh - 2.1.5-1Dan Walsh - 2.1.4-2Dan Walsh - 2.1.4-2Dan Walsh - 2.1.4-1Dan Walsh - 2.1.3-2Dan Walsh - 2.1.3-1Dan Walsh - 2.1.2-1Dan Walsh - 2.1.0-1Dan Walsh - 2.0.46-6Dan Walsh - 2.0.46-5Dan Walsh - 2.0.46-4Fedora Release Engineering - 2.0.46-3David Malcolm - 2.0.46-2Dan Walsh - 2.0.46-1Thomas Spura - 2.0.45-6David Malcolm - 2.0.45-5David Malcolm - 2.0.45-4Dan Walsh - 2.0.45-3Dan Walsh - 2.0.45-2Dan Walsh - 2.0.45-1Dan Walsh - 2.0.44-2Dan Walsh - 2.0.44-1Dan Walsh - 2.0.43-4Dan Walsh - 2.0.43-3Dan Walsh - 2.0.43-2Dan Walsh - 2.0.43-1Dan Walsh - 2.0.42-1Dan Walsh - 2.0.41-1Dan Walsh - 2.0.39-1Dan Walsh - 2.0.38-2Dan Walsh - 2.0.38-1Dan Walsh - 2.0.37-1Dan Walsh - 2.0.36-2Dan Walsh - 2.0.36-1Dan Walsh - 2.0.35-2Dan Walsh - 2.0.35-1Fedora Release Engineering - 2.0.33-3Dan Walsh - 2.0.33-2Dan Walsh - 2.0.33-1Dan Walsh - 2.0.32-1Dan Walsh - 2.0.31-5Dan Walsh - 2.0.31-4Fedora Release Engineering - 2.0.31-3Dan Walsh - 2.0.31-2Dan Walsh - 2.0.31-1Dan Walsh - 2.0.30-3Ignacio Vazquez-Abrams - 2.0.30-2Dan Walsh - 2.0.30-1Ignacio Vazquez-Abrams - 2.0.29-2Dan Walsh - 2.0.28-1Dan Walsh - 2.0.28-2Dan Walsh - 2.0.28-1Dan Walsh - 2.0.27-3Dan Walsh - 2.0.27-2Dan Walsh - 2.0.27-1Dan Walsh - 2.0.26-1Dan Walsh - 2.0.25-3Tom "spot" Callaway - 2.0.25-2Dan Walsh - 2.0.25-1Dan Walsh - 2.0.24-1Dan Walsh - 2.0.23-1Dan Walsh - 2.0.22-1Dan Walsh - 2.0.20-1Dan Walsh - 2.0.19-1Dan Walsh - 2.0.18-1Dan Walsh - 2.0.16-1Dan Walsh - 2.0.15-2Dan Walsh - 2.0.15-1Dan Walsh - 2.0.14-5Dan Walsh - 2.0.14-3Dan Walsh - 2.0.14-2Dan Walsh - 2.0.14-1Dan Walsh - 2.0.12-1Dan Walsh - 2.0.11-1Dan Walsh - 2.0.10-2Dan Walsh - 2.0.10-1Dan Walsh - 2.0.9-1Dan Walsh - 2.0.6-2Dan Walsh - 2.0.6-1Dan Walsh - 2.0.5-1Dan Walsh - 2.0.4-1Dan Walsh - 2.0.3-5Dan Walsh - 2.0.3-4Dan Walsh - 2.0.3-3Dan Walsh - 2.0.3-2Dan Walsh - 2.0.3-1Dan Walsh - 2.0.2-1Dan Walsh - 2.0.1-2Dan Walsh - 2.0.1-1Dan Walsh - 2.0.0-1Dan Walsh - 1.10.1-1Dan Walsh - 1.9.2-1Dan Walsh - 1.9.1-3Jeremy Katz - 1.9.1-2Dan Walsh - 1.9.1-1Dan Walsh - 1.8-1Dan Walsh - 1.6.17-1Dan Walsh - 1.6.16-3Dan Walsh - 1.6.16-2Dan Walsh - 1.6.16-1Dan Walsh - 1.6.15-1Dan Walsh - 1.6.13-3Dan Walsh - 1.6.13-2Dan Walsh - 1.6.13-1Dan Walsh - 1.6.12-2Dan Walsh - 1.6.12-1Dan Walsh - 1.6.11-1Dan Walsh - 1.6.9-1Dan Walsh - 1.6.8-2Dan Walsh - 1.6.8-1Dan Walsh - 1.6.7-3Dan Walsh - 1.6.7-2Dan Walsh - 1.6.7-1Dan Walsh - 1.6.6-1Dan Walsh - 1.6.3-1Dan Walsh - 1.6.2-2Dan Walsh - 1.6.2-1Dan Walsh - 1.6-1Dan Walsh - 1.5.28-1Dan Walsh - 1.5.26-1Dan Walsh - 1.5.23-1Jesse Keating - 1.5.21-2.1Dan Walsh - 1.5.21-2Dan Walsh - 1.5.21-1Jesse Keating - 1.5.20-1.1Dan Walsh 1.5.20-1Dan Walsh 1.5.19-1Dan Walsh 1.5.18-1Dan Walsh 1.5.16-1Dan Walsh 1.5.15-1Dan Walsh 1.5.14-2Dan Walsh 1.5.14-1Dan Walsh 1.5.9-1Dan Walsh 1.5.8-1Dan Walsh 1.5.6-1Dan Walsh 1.5.4-2Dan Walsh 1.5.4-1Dan Walsh 1.5.3-3Dan Walsh 1.5.3-2Dan Walsh 1.5.3-1Dan Walsh 1.5.1-2Dan Walsh 1.5.1-1Jesse Keating Dan Walsh 1.4-1Dan Walsh 1.3.64-1Dan Walsh 1.3.63-1Dan Walsh 1.3.61-1Dan Walsh 1.3.59-1Dan Walsh 1.3.56-2Dan Walsh 1.3.56-1Dan Walsh 1.3.53-3Dan Walsh 1.3.53-2Dan Walsh 1.3.53-1Dan Walsh 1.3.52-1Dan Walsh 1.3.51-1Dan Walsh 1.3.48-1Dan Walsh 1.3.43-1Dan Walsh 1.3.41-1Dan Walsh 1.3.39-1Dan Walsh 1.3.38-1Dan Walsh 1.3.36-1Dan Walsh 1.3.35-1Dan Walsh 1.3.34-1Dan Walsh 1.3.32-1Dan Walsh 1.3.30-1Dan Walsh 1.3.28-1Dan Walsh 1.3.24-1Dan Walsh 1.3.20-1Dan Walsh 1.3.20-1Dan Walsh 1.3.18-1Dan Walsh 1.3.14-1Dan Walsh 1.3.11-1Dan Walsh 1.3.10-1Dan Walsh 1.3.9-1Dan Walsh 1.3.8-1Dan Walsh 1.3.7-1Dan Walsh 1.3.5-1Dan Walsh 1.3.4-1Dan Walsh 1.3.3-1Dan Walsh 1.3.2-1Dan Walsh 1.3.1-1Dan Walsh 1.1.6-1Dan Walsh 1.1.3-1- Bump release to get around OSCI issues- Trivial style fixes - Free contents of modkey in semanage_direct_remove - Fix USE_AFTER_FREE (CWE-672) in semanage_direct_write_langext() - add missing include to boolean_record.c - move module hashing into libsemanage - move compressed file handling into a separate object - clean up semanage_direct_commit() a bit - optionally rebuild policy when modules are changed externally - add command-line option to detect module changes (#2049186)- sync filesystem with sandbox (#1913224)- Revert "genhomedircon: check usepasswd" (rhbz#1871786) - semanage.conf - improve usepasswd=False explanation (rhbz#1871786) - semanage.conf - expand list of ignoredirs (rhbz#1871786)- genhomedircon: check usepasswd (rhbz#1871786)- Fsync final files before rename (#1838762)- Add support for DCCP and SCTP protocols (#1563742)- SELinux userspace 2.9 release- genhomedircon - improve handling large groups- Fix RESOURCE_LEAK and USE_AFTER_FREE coverity scan defects- reset umask before creating directories - Include user name in ROLE_REMOVE audit events- Don't build the Python 2 subpackage (#1567359)- SELinux userspace 2.8 release- SELinux userspace 2.8-rc3 release candidate- SELinux userspace 2.8-rc2 release candidate- SELinux userspace 2.8-rc1 release candidate- build: Replace PYSITEDIR with PYTHONLIBDIR - direct_api.c: Fix iterating over array (#1557468)- Revert "remove access() check to make setuid programs work" (#1557468)- properly check return value of iterate function - Use umask(0077) for fopen() write operations - Return commit number if save-previous false - Allow tmp files to be kept if a compile fails - build: follow standard semantics for DESTDIR and PREFIX - Improve warning for installing disabled module - silence clang static analyzer report - remove access() check to make setuid programs work- Escape macros in %changelog- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild- Switch to %ldconfig_scriptlets- Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)- free genhomedircon fallback user - Rebuild with libsepol-2.7-3 and libselinux-2.7-6- Add support for listing fcontext.homedirs file (#1409813)- Add Provides for the old names without %_isa- Python 2 binary package renamed to python2-libsemanage See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3 - Python 3 binary package renamed to python3-libsemanage- Update to upstream release 2017-08-04 - Use 'sefcontext_compile -r' when it's run during SELinux policy build- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- Follow upstream and rename _semanage.so to _semanage.cpython-36m-x86_64-linux-gnu.so- Do not list duplicate port entries after setting a boolean (#1439875)- Fix FTBFS - fatal error (#1427903)- Update to upstream release 2016-10-14- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild- Rebuild for Python 3.6- Fixes bug preventing the installation of base modules - make distclean target work - Do not always print a module name warning - Use pp module name instead of filename when installing module - tests: Do not force using gcc - genhomedircon: remove hardcoded refpolicy strings - genhomedircon: add support for %group syntax - genhomedircon: generate contexts for logins mapped to the default user - Validate and compile file contexts before installing - Swap tcp and udp protocol numbers- Rebuilt with libsepol-2.5-9 and libselinux-2.5-11- https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages- Sort object files for deterministic linking order - Support overriding Makefile RANLIB - Respect CC and PKG_CONFIG environment variable- Fix multiple spelling errors - genhomedircon: %{USERID} and %{USERNAME} support and code cleanup- Enable expand-check by default (#1319652)- Use fully versioned arch-specific requires- Update to upstream release 2016-02-23- Update to upstream rc1 release 2016-01-07- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild- Rebuilt for Python3.5 rebuild- Save homedir_template in the policy store for genhomedircon https://bugs.gentoo.org/558686- Pass ldflags into the build so hardening works- semanage_migrate_store: use /usr/bin/python3 - move semanage_migrate_store script to libsemanage-python3- Allow to use compressed modules without a compression extension- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- add /var/lib/selinux/tmp directory- semanage_migrate_store: add -r option for migrating inside chroots- Update to upstream release 2.4- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild- Skip policy module re-link when only setting booleans. * patch from Stephen Smalley- fix license handling- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild- Rebuilt for https://fedoraproject.org/wiki/Changes/Python_3.4- Update to upstream * Fix memory leak in semanage_genhomedircon from Thomas Hurd.- libsemanage: fix memory leak in semanage_genhomedircon - Patch from THomas Hurd- Move semanage.conf man page from devel package to main package- Update to upstream * Avoid duplicate list entries from Dan Walsh. * Add audit support to libsemanage from Dan Walsh. * Remove policy.kern and replace with symlink from Dan Walsh. * Apply a MAX_UID check for genhomedircon from Laurent Bigonville. * Fix man pages from Laurent Bigonville.- Cleanup handling of missing mls_range to fix problems with useradd -Z - Fix auditing of login record changes, roles were not working correctly. Resolves: #952237- Fix errors found by coverity Resolves: #952237- Do not fail on missing SELinux User Record when adding login record- Add msg to audit records- Do not write error message to screen when looking for previous record for auditing. - Add mls_range from user record if the MLS range is not specified by the seuser add record. - Error out if seuser or mls range is not specified when adding user records- Create symlink from policy.kern to active kernel.- Unlink policy.kern when done to save space.- Move handling of role audit records into the library - Patch stops semanage from removing user record while in use- Remove dependance on selinux-policy, /etc/selinux should be owned by libsemanage, and selinux-policy can require it.- Allways build python3 version-- Fix test suite to build- Revert some changes which are causing the wrong policy version file to be created- Update to upstream * Add sefcontext_compile to compile regex everytime policy is rebuilt * Cleanup/fix enable/disable/remove module. * redo genhomedircon minuid * fixes from coverity * semanage_store: do not leak memory in semanage_exec_prog * genhomedircon: remove useless conditional in get_home_dirs * genhomedircon: double free in get_home_dirs * fcontext_record: do not leak on error in semanage_fcontext_key_create * genhomedircon: do not leak on failure in write_gen_home_dir_context * semanage_store: do not leak fd * genhomedircon: do not leak shells list * semanage_store: do not leak on strdup failure * semanage_store: rewrite for readability- Add selinux-policy as a requires to get /etc/selinux owned- Update to latest patches from eparis/Upstream - libsemanage: fixes from coverity - libsemange: redo genhomedircon minuid- Fix handling of missing semanage permissive -d foo, not failing correctly - Previous to this fix the first module beginning with foo would get deleted.- Update to upstream * libsemanage: do not set soname needlessly * libsemanage: remove PYTHONLIBDIR and ruby equivalent * do boolean name substitution * Fix segfault for building standard policies.- rebuild for https://fedoraproject.org/wiki/Features/Python_3.3- remove rhel logic from with_python3 conditional- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- Attempt to allocate memory for selinux_binary_policy_path and free memory - allocated by asprintf.- Fix asprintf within an asprintf call- Update to upstream * remove build warning when build swig c files * additional makefile support for rubywrap * ignore 80 column limit for readability * semanage_store: fix snprintf length argument by using asprintf * Use default semanage.conf as a fallback * use after free in python bindings- Apply patch from Sven Vermeulen to fix problem with python3 bindings.- Update to upstream * Alternate path for semanage.conf * do not link against libpython, this is considered bad in Debian * Allow to build for several ruby version * fallback-user-level- Check in correct patch.- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild- Add patch form Xin Ouyang to make library use private semanage.conf-Update to upstream * add ignoredirs config for genhomedircon * Fallback_user_level can be NULL if you are not using MLS- Rebuild with latest libsepol- Rebuild with latest libsepol- Add support for ignoredirs param in /etc/selinux/semanage.conf- Upgrade to upstream * regenerate .pc on VERSION change * maintain mode even if umask is tighter * semanage.conf man page * create man5dir if not exist- Fix handling of umask, so files get created with the correct label.- Add Guido Trentalancia semanage.conf man page-Update to upstream * Create a new preserve_tunables flag * tree: default make target to all not * fix semanage_store_access_check calling arguments- Add support for preserving tunables-Update to upstream * python wrapper makefile changes-Update to upstream 2.1.2 2011-08-17 * print error debug info for buggy fc * introduce semanage_set_root and friends * throw exceptions in python rather than return * python3 support. * patch for MCS/MLS in user files 2.1.1 2011-08-01 * Remove generated files, expand .gitignore * Use -Werror and change a few prototypes to support it- Update to upstream * Release, minor version bump- More fixes for disabled modules- Change libsemanage mechanism for handling disabled modules. Now it will only create a flag for a module indicating the module is disabled. MODULE.pp.disabled, it will no longer rename the module. This way we can ship active modules in rpm.- Add semanage_set_selinux_path, to allow semodule to work on alternate selinux pools- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- big reworking of the support-multiple-python-builds patch to deal with PEP 3149: the latest Python 3.2 onwards uses include paths and library names that don't fit prior naming patterns, and so we must query python3-config for this information. To complicate things further, python 2's python-config doesn't understand all of the options needed ("--extension-suffix"). I've thus added new Makefile variables as needed, to be supplied by the specfile by invoking the appropriate config tool (or by hardcoding the old value for "--extension-suffix" i.e. ".so") - rework python3 manifest for PEP 3149, and rebuild for newer python3- Update to upstream * Fix compliation under GCC 4.6 by Justin Mattock- rebuild with python3.2 http://lists.fedoraproject.org/pipermail/devel/2010-August/141368.html- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild- add python3 subpackage- Fix -devel package to point at the correct shared library- Move shared library to /usr/lib- Update to upstream * Add enable/disable patch support from Dan Walsh. * Add usepasswd flag to semanage.conf to disable genhomedircon using passwd from Dan Walsh. * regenerate swig wrappers- Allow disable of usepasswd- Update to upstream * Replace usage of fmemopen() with sepol_policy_file_set_mem() since glibc < 2.9 does not support binary mode ('b') for fmemopen'd streams.- Cleanup spec file- Splect libsemanage.a into a static subpackage to keep fedora packaging guidelines happy- Rebuild all c programs with -fPIC- Update to upstream * Move libsemanage.so to /usr/lib * Add NAME lines to man pages from Manoj Srivastava- Update to upstream * Move load_policy from /usr/sbin to /sbin from Dan Walsh.- Update to upstream * Add pkgconfig file from Eamon Walsh. * Add semanage_set_check_contexts() function to disable calling setfiles- Update to upstream * make swigify- Dont relabel /root with genhomedircon- Update to upstream * Change semodule upgrade behavior to install even if the module is not present from Dan Walsh. * Make genhomedircon trim excess '/' from homedirs from Dan Walsh.- Update to upstream * Fix persistent dontaudit support to rebuild policy if the dontaudit state is changed from Chad Sellers. - Move load_policy to /sbin- Add enable/disable modules- Update to upstream * Changed bzip-blocksize=0 handling to support existing compressed modules in the store.- Make sure /root is not used in genhomedircon- Revert hard linking of files between tmp/active/previous. - Enable configuration of bzip behavior from Stephen Smalley. - bzip-blocksize=0 to disable compression and decompression support. - bzip-blocksize=1..9 to set the blocksize for compression. - bzip-small=true to reduce memory usage for decompression.- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- Put check for /root back into genhomedircon- Update to upstream- Update to upstream * Ruby bindings from David Quigley.- Return error on invalid file- Fix typo- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild- Fix link to only link on sandbox- Update to upstream * Policy module compression (bzip) support from Dan Walsh. * Hard link files between tmp/active/previous from Dan Walsh.- Fix up patch to get it upstreamed- Rebuild for Python 2.6- Add semanage_mls_enabled() interface from Stephen Smalley.- Rebuild for Python 2.6- Update to upstream * Add USER to lines to homedir_template context file from Chris PeBenito.- Add compression support- Update to upstream * allow fcontext and seuser changes without rebuilding the policy from Dan Walsh- Additional fixes for Don't rebuild on fcontext or seuser modifications- Don't rebuild on fcontext or seuser modifications- Update to upstream * Modify genhomedircon to skip groupname entries. Ultimately we need to expand them to the list of users to support per-role homedir labeling when using the groupname syntax.- Update to upstream * Fix bug in genhomedircon fcontext matches logic from Dan Walsh. Strip any trailing slash before appending /*$.- Another fix for genhomedircon- fix license tag- Update to upstream * Do not call genhomedircon if the policy was not rebuilt from Stephen Smalley. Fixes semanage boolean -D seg fault (bug 441379).- Update to upstream * make swigify- Update to upstream * Use vfork rather than fork for libsemanage helpers to reduce memory overhead as suggested by Todd Miller.- Update to upstream * Free policydb before fork from Joshua Brindle. * Drop the base module immediately after expanding to permit memory re-use from Stephen Smalley.- Update to upstream * Use sepol_set_expand_consume_base to reduce peak memory usage when using semodule- Update to upstream * Fix genhomedircon to not override a file context with a homedir context from Todd Miller.- Update to upstream * Fix spurious out of memory error reports. * Merged second version of fix for genhomedircon handling from Caleb Case.- Update to upstream * Merged fix for genhomedircon handling of missing HOME_DIR or HOME_ROOT templates from Caleb Case.- Stop differentiating on user for homedir labeling- Update to upstream * Fix genhomedircon handling of shells and missing user context template from Dan Walsh. * Copy the store path in semanage_select_store from Dan Walsh. - Add expand-check=0 to semanage.conf- Fix handling of /etc/shells so genhomedircon will work- Allow semanage_genhomedircon to work with out a USER int homedir.template- Fix semanage_select_store to allocate memory, fixes crash on invalid store- Upgrade to latest from NSA * Call rmdir() rather than remove() on directory removal so that errno isn't polluted from Stephen Smalley. * Allow handle_unknown in base to be overridden by semanage.conf from Stephen Smalley.- Upgrade to latest from NSA * ustr cleanups from James Antill. * Ensure that /root gets labeled even if using the default context from Dan Walsh.- Upgrade to latest from NSA * Fix ordering of file_contexts.homedirs from Todd Miller and Dan Walsh.- Fix sort order on generated homedir context- Upgrade to latest from NSA * Fix error checking on getpw*_r functions from Todd Miller. * Make genhomedircon skip invalid homedir contexts from Todd Miller. * Set default user and prefix from seusers from Dan Walsh. * Add swigify Makefile target from Dan Walsh.- Upgrade to latest from NSA * Pass CFLAGS to CC even on link command, per Dennis Gilmore. * Clear errno on non-fatal errors to avoid reporting them upon a later error that does not set errno. * Improve reporting of system errors, e.g. full filesystem or read-only filesystem from Stephen Smalley. - Fix segfault in genhomedircon when using bad user names- Fix genhomedircon code to only generate valid context - Fixes autorelabel problem- Upgrade to latest from NSA * Change to use getpw* function calls to the _r versions from Todd Miller.- Upgrade to latest from NSA- Upgrade to latest from NSA * Allow dontaudits to be turned off via semanage interface when updating policy- Add ability to load a policy without dontaudit rules -- Rebuild to fix segfault on x86 platforms, swigify on each build- Rebuild for rawhide- Apply patch to fix dependencies in spec file from Robert Scheck- Upgrade to latest from NSA * Fix to libsemanage man patches so whatis will work better from Dan Walsh- Upgrade to latest from NSA - Merged optimizations from Stephen Smalley. - do not set all booleans upon commit, only those whose values have changed - only install the sandbox upon commit if something was rebuilt- Add SELinux to Man page Names so man -k will work- Merged dbase_file_flush patch from Dan Walsh. - This removes any mention of specific tools (e.g. semanage) - from the comment header of the auto-generated files, - since there are multiple front-end tools.- Upgrade to latest from NSA * Merged Makefile test target patch from Caleb Case. * Merged get_commit_number function rename patch from Caleb Case. * Merged strnlen -> strlen patch from Todd Miller.- Upgrade to latest from NSA * Merged python binding fix from Dan Walsh. * Updated version for stable branch.- Upgrade to latest from NSA * Merged patch to optionally reduce disk usage by removing the backup module store and linked policy from Karl MacMillan * Merged patch to correctly propagate return values in libsemanage- Apply Karl MacMillan patch to get proper error codes.- rebuild against python 2.5- Upgrade to latest from NSA * Merged patch to compile wit -fPIC instead of -fpic from Manoj Srivastava to prevent hitting the global offest table limit. Patch changed to include libselinux and libsemanage in addition to libsepol.- Upgrade to latest from NSA * Updated version for release.- Upgrade to latest from NSA * Merged patch to skip reload if no active store exists and the store path doesn't match the active store path from Dan Walsh. * Merged patch to not destroy sepol handle on error path of connect from James Athey. * Merged patch to add genhomedircon path to semanage.conf from James Athey.- Fix semanage to not load if is not the correct policy type and it is installing- Fix requires lines- Upgrade to latest from NSA * Make most copy errors fatal, but allow exceptions for file_contexts.local, seusers, and netfilter_contexts if the source file does not exist in the store.- Upgrade to latest from NSA * Merged separate local file contexts patch from Chris PeBenito. * Merged patch to make most copy errors non-fatal from Dan Walsh.- Change other updates to be non-fatal- Change netfilter stuff to be non-fatal so update can proceed.- Upgrade to latest from NSA * Merged netfilter contexts support from Chris PeBenito.- Rebuild for new gcc- Upgrade to latest from NSA * Merged support for read operations on read-only fs from Caleb Case (Tresys Technology).- Upgrade to latest from NSA * Lindent. * Merged setfiles location check patch from Dan Walsh.- Upgrade to latest from NSA * Merged several fixes from Serge Hallyn: dbase_file_cache: deref of uninit data on error path. dbase_policydb_cache: clear fp to avoid double fclose semanage_fc_sort: destroy temp on error paths- Handle setfiles being in /sbin or /usr/sbin- Upgrade to latest from NSA * Updated default location for setfiles to /sbin to match policycoreutils. This can also be adjusted via semanage.conf using the syntax: [setfiles] path = /path/to/setfiles args = -q -c $@ $< [end]- Spec file cleanup from n0dalus+redhat@gmail.com- Add /usr/include/semanage to spec file- Upgrade to latest from NSA * Merged fix warnings patch from Karl MacMillan.- Upgrade to latest from NSA * Merged updated file context sorting patch from Christopher Ashworth, with bug fix for escaped character flag. * Merged file context sorting code from Christopher Ashworth (Tresys Technology), based on fc_sort.c code in refpolicy. * Merged python binding t_output_helper removal patch from Dan Walsh. * Regenerated swig files.- Fix to work with new version of swig - Upgrade to latest from NSA * Merged corrected fix for descriptor leak from Dan Walsh.- Fix leaky descriptor- Upgrade to latest from NSA * Merged Makefile PYLIBVER definition patch from Dan Walsh. * Merged man page reorganization from Ivan Gyurdiev.- Make work on RHEL4 - Upgrade to latest from NSA * Merged abort early on merge errors patch from Ivan Gyurdiev. * Cleaned up error handling in semanage_split_fc based on a patch by Serge Hallyn (IBM) and suggestions by Ivan Gyurdiev. * Merged MLS handling fixes from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged bug fix for fcontext validate handler from Ivan Gyurdiev. * Merged base_merge_components changes from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged paths array patch from Ivan Gyurdiev. * Merged bug fix patch from Ivan Gyurdiev. * Merged improve bindings patch from Ivan Gyurdiev. * Merged use PyList patch from Ivan Gyurdiev. * Merged memory leak fix patch from Ivan Gyurdiev. * Merged nodecon support patch from Ivan Gyurdiev. * Merged cleanups patch from Ivan Gyurdiev. * Merged split swig patch from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged optionals in base patch from Joshua Brindle. * Merged treat seusers/users_extra as optional sections patch from Ivan Gyurdiev. * Merged parse_optional fixes from Ivan Gyurdiev.- bump again for double-long bug on ppc(64)- Fix handling of seusers and users_map file- Upgrade to latest from NSA * Merged seuser/user_extra support patch from Joshua Brindle. * Merged remote system dbase patch from Ivan Gyurdiev.- rebuilt for new gcc4.1 snapshot and glibc changes- Upgrade to latest from NSA * Merged clone record on set_con patch from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged fname parameter patch from Ivan Gyurdiev. * Merged more size_t -> unsigned int fixes from Ivan Gyurdiev. * Merged seusers.system patch from Ivan Gyurdiev. * Merged improve port/fcontext API patch from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged seuser -> seuser_local rename patch from Ivan Gyurdiev. * Merged set_create_store, access_check, and is_connected interfaces from Joshua Brindle.- Upgrade to latest from NSA * Regenerate python wrappers.- Upgrade to latest from NSA * Merged pywrap Makefile diff from Dan Walsh. * Merged cache management patch from Ivan Gyurdiev. * Merged bugfix for dbase_llist_clear from Ivan Gyurdiev. * Merged remove apply_local function patch from Ivan Gyurdiev. * Merged only do read locking in direct case patch from Ivan Gyurdiev. * Merged cache error path memory leak fix from Ivan Gyurdiev. * Merged auto-generated file header patch from Ivan Gyurdiev. * Merged pywrap test update from Ivan Gyurdiev. * Merged hidden defs update from Ivan Gyurdiev.- Break out python out of regular Makefile- Upgrade to latest from NSA * Merged disallow port overlap patch from Ivan Gyurdiev. * Merged join prereq and implementation patches from Ivan Gyurdiev. * Merged join user extra data part 2 patch from Ivan Gyurdiev. * Merged bugfix patch from Ivan Gyurdiev. * Merged remove add_local/set_local patch from Ivan Gyurdiev. * Merged user extra data part 1 patch from Ivan Gyurdiev. * Merged size_t -> unsigned int patch from Ivan Gyurdiev. * Merged calloc check in semanage_store patch from Ivan Gyurdiev, bug noticed by Steve Grubb. * Merged cleanups after add/set removal patch from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged const in APIs patch from Ivan Gyurdiev. * Merged validation of local file contexts patch from Ivan Gyurdiev. * Merged compare2 function patch from Ivan Gyurdiev. * Merged hidden def/proto update patch from Ivan Gyurdiev.- Upgrade to latest from NSA * Re-applied string and file optimization patch from Russell Coker, with bug fix. * Reverted string and file optimization patch from Russell Coker. * Clarified error messages from parse_module_headers and parse_base_headers for base/module mismatches.- Upgrade to latest from NSA * Clarified error messages from parse_module_headers and parse_base_headers for base/module mismatches. * Merged string and file optimization patch from Russell Coker. * Merged swig header reordering patch from Ivan Gyurdiev. * Merged toggle modify on add patch from Ivan Gyurdiev. * Merged ports parser bugfix patch from Ivan Gyurdiev. * Merged fcontext swig patch from Ivan Gyurdiev. * Merged remove add/modify/delete for active booleans patch from Ivan Gyurdiev. * Merged man pages for dbase functions patch from Ivan Gyurdiev. * Merged pywrap tests patch from Ivan Gyurdiev.- Patch to fix add- Upgrade to latest from NSA * Merged patch series from Ivan Gyurdiev. This includes patches to: - separate file rw code from linked list - annotate objects - fold together internal headers - support ordering of records in compare function - add active dbase backend, active booleans - return commit numbers for ro database calls - use modified flags to skip rebuild whenever possible - enable port interfaces - update swig interfaces and typemaps - add an API for file_contexts.local and file_contexts - flip the traversal order in iterate/list - reorganize sandbox_expand - add seusers MLS validation - improve dbase spec/documentation - clone record on set/add/modify- Add Ivans patch to turn on ports- Remove patch since upstream does the right thing- Upgrade to latest from NSA * Merged further header cleanups from Ivan Gyurdiev. * Merged toggle modified flag in policydb_modify, fix memory leak in clear_obsolete, polymorphism vs headers fix, and include guards for internal headers patches from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged toggle modified flag in policydb_modify, fix memory leak in clear_obsolete, polymorphism vs headers fix, and include guards for internal headers patches from Ivan Gyurdiev.- Upgrade to latest from NSA * Added file-mode= setting to semanage.conf, default to 0644. Changed semanage_copy_file and callers to use this mode when installing policy files to runtime locations.- rebuilt- Fix mode of output seusers file- Upgrade to latest from NSA * Changed semanage_handle_create() to set do_reload based on is_selinux_enabled(). This prevents improper attempts to load policy on a non-SELinux system.- Upgrade to latest from NSA * Dropped handle from user_del_role interface. * Removed defrole interfaces.- Upgrade to latest from NSA * Merged Makefile python definitions patch from Dan Walsh. * Removed is_selinux_mls_enabled() conditionals in seusers and users file parsers.- Add additional swig objects * Merged wrap char*** for user_get_roles patch from Joshua Brindle. * Merged remove defrole from sepol patch from Ivan Gyurdiev. * Merged swig wrappers for modifying users and seusers from Joshua Brindle.- Add additional swig objects- Upgrade to latest from NSA * Fixed free->key_free bug. * Merged clear obsolete patch from Ivan Gyurdiev. * Merged modified swigify patch from Dan Walsh (original patch from Joshua Brindle). * Merged move genhomedircon call patch from Chad Sellers.- Add genhomedircon patch from Joshua Brindle- Add swigify patch from Joshua Brindle- Upgrade to latest from NSA * Merged move seuser validation patch from Ivan Gyurdiev. * Merged hidden declaration fixes from Ivan Gyurdiev, with minor corrections.- Upgrade to latest from NSA * Merged cleanup patch from Ivan Gyurdiev. This renames semanage_module_conn to semanage_direct_handle, and moves sepol handle create/destroy into semanage handle create/destroy to allow use even when disconnected (for the record interfaces).- Upgrade to latest from NSA * Clear modules modified flag upon disconnect and commit. * Added tracking of module modifications and use it to determine whether expand-time checks should be applied on commit. * Reverted semanage_set_reload_bools() interface.- Upgrade to latest from NSA * Disabled calls to port dbase for merge and commit and stubbed out calls to sepol_port interfaces since they are not exported. * Merged rename instead of copy patch from Joshua Brindle (Tresys). * Added hidden_def/hidden_proto for exported symbols used within libsemanage to eliminate relocations. Wrapped type definitions in exported headers as needed to avoid conflicts. Added src/context_internal.h and src/iface_internal.h. * Added semanage_is_managed() interface to allow detection of whether the policy is managed via libsemanage. This enables proper handling in setsebool for non-managed systems. * Merged semanage_set_reload_bools() interface from Ivan Gyurdiev, to enable runtime control over preserving active boolean values versus reloading their saved settings upon commit.- Upgrade to latest from NSA * Merged seuser parser resync, dbase tracking and cleanup, strtol bug, copyright, and assert space patches from Ivan Gyurdiev. * Added src/*_internal.h in preparation for other changes. * Added hidden/hidden_proto/hidden_def to src/debug.[hc] and src/seusers.[hc].- Upgrade to latest from NSA * Merged interface parse/print, context_to_string interface change, move assert_noeof, and order preserving patches from Ivan Gyurdiev. * Added src/dso.h in preparation for other changes. * Merged install seusers, handle/error messages, MLS parsing, and seusers validation patches from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged record interface, dbase flush, common database code, and record bugfix patches from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged dbase policydb list and count change from Ivan Gyurdiev. * Merged enable dbase and set relay patches from Ivan Gyurdiev.- Update from NSA * Merged query APIs and dbase_file_set patches from Ivan Gyurdiev.- Update from NSA * Merged sepol handle passing, seusers support, and policydb cache patches from Ivan Gyurdiev.- Update from NSA * Merged resync to sepol changes and booleans fixes/improvements patches from Ivan Gyurdiev. * Merged support for genhomedircon/homedir template, store selection, explicit policy reload, and semanage.conf relocation from Joshua Brindle.- Update from NSA * Merged resync to sepol changes and transaction fix patches from Ivan Gyurdiev. * Merged reorganize users patch from Ivan Gyurdiev. * Merged remove unused relay functions patch from Ivan Gyurdiev.- Update from NSA * Fixed policy file leaks in semanage_load_module and semanage_write_module. * Merged further database work from Ivan Gyurdiev. * Fixed bug in semanage_direct_disconnect.- Update from NSA * Merged interface renaming patch from Ivan Gyurdiev. * Merged policy component patch from Ivan Gyurdiev. * Renamed 'check=' configuration value to 'expand-check=' for clarity. * Changed semanage_commit_sandbox to check for and report errors on rename(2) calls performed during rollback. * Added optional check= configuration value to semanage.conf and updated call to sepol_expand_module to pass its value to control assertion and hierarchy checking on module expansion. * Merged fixes for make DESTDIR= builds from Joshua Brindle.- Update from NSA * Merged default database from Ivan Gyurdiev. * Merged removal of connect requirement in policydb backend from Ivan Gyurdiev. * Merged commit locking fix and lock rename from Joshua Brindle. * Merged transaction rollback in lock patch from Joshua Brindle. * Changed default args for load_policy to be null, as it no longer takes a pathname argument and we want to preserve booleans. * Merged move local dbase initialization patch from Ivan Gyurdiev. * Merged acquire/release read lock in databases patch from Ivan Gyurdiev. * Merged rename direct -> policydb as appropriate patch from Ivan Gyurdiev. * Added calls to sepol_policy_file_set_handle interface prior to invoking sepol operations on policy files. * Updated call to sepol_policydb_from_image to pass the handle.- Update from NSA * Changed default args for load_policy to be null, as it no longer takes a pathname argument and we want to preserve booleans. * Merged move local dbase initialization patch from Ivan Gyurdiev. * Merged acquire/release read lock in databases patch from Ivan Gyurdiev. * Merged rename direct -> policydb as appropriate patch from Ivan Gyurdiev. * Added calls to sepol_policy_file_set_handle interface prior to invoking sepol operations on policy files. * Updated call to sepol_policydb_from_image to pass the handle.- Update from NSA * Merged user and port APIs - policy database patch from Ivan Gyurdiev. * Converted calls to sepol link_packages and expand_module interfaces from using buffers to using sepol handles for error reporting, and changed direct_connect/disconnect to create/destroy sepol handles.- Update from NSA * Merged bugfix patch from Ivan Gyurdiev. * Merged seuser database patch from Ivan Gyurdiev. Merged direct user/port databases to the handle from Ivan Gyurdiev. * Removed obsolete include/semanage/commit_api.h (leftover). Merged seuser record patch from Ivan Gyurdiev. * Merged boolean and interface databases from Ivan Gyurdiev.- Update from NSA * Updated to use get interfaces for hidden sepol_module_package type. * Changed semanage_expand_sandbox and semanage_install_active to generate/install the latest policy version supported by libsepol by default (unless overridden by semanage.conf), since libselinux will now downgrade automatically for load_policy. * Merged new callback-based error reporting system and ongoing database work from Ivan Gyurdiev.- Update from NSA * Fixed semanage_install_active() to use the same logic for selecting a policy version as semanage_expand_sandbox(). Dropped dead code from semanage_install_sandbox().- Update from NSA * Updated for changes to libsepol, and to only use types and interfaces provided by the shared libsepol.- Update from NSA * Merged further database work from Ivan Gyurdiev.- Update from NSA * Merged iterate, redistribute, and dbase split patches from Ivan Gyurdiev.- Update from NSA * Merged patch series from Ivan Gyurdiev. (pointer typedef elimination, file renames, dbase work, backend separation) * Split interfaces from semanage.[hc] into handle.[hc], modules.[hc]. * Separated handle create from connect interface. * Added a constructor for initialization. * Moved up src/include/*.h to src. * Created a symbol map file; dropped dso.h and hidden markings.- Update from NSA * Split interfaces from semanage.[hc] into handle.[hc], modules.[hc]. * Separated handle create from connect interface. * Added a constructor for initialization. * Moved up src/include/*.h to src. * Created a symbol map file; dropped dso.h and hidden markings.- Update from NSA * Merged dbase redesign patch from Ivan Gyurdiev.- Update from NSA * Merged boolean record, stub record handler, and status codes patches from Ivan Gyurdiev.- Update from NSA * Merged stub iterator functionality from Ivan Gyurdiev. * Merged interface record patch from Ivan Gyurdiev.- Update from NSA * Merged stub functionality for managing user and port records, and record table code from Ivan Gyurdiev. * Updated version for release.- Update from NSA * Merged semod.conf template patch from Dan Walsh (Red Hat), but restored location to /usr/share/semod/semod.conf. * Fixed several bugs found by valgrind. * Fixed bug in prior patch for the semod_build_module_list leak. * Merged errno fix from Joshua Brindle (Tresys). * Merged fix for semod_build_modules_list leak on error path from Serge Hallyn (IBM). Bug found by Coverity.- Update from NSA * Merged errno fix from Joshua Brindle (Tresys). * Merged fix for semod_build_modules_list leak on error path from Serge Hallyn (IBM). Bug found by Coverity. * Merged several fixes from Serge Hallyn (IBM). Bugs found by Coverity. * Fixed several other bugs and warnings. * Merged patch to move module read/write code from libsemanage to libsepol from Jason Tang (Tresys). * Merged relay records patch from Ivan Gyurdiev. * Merged key extract patch from Ivan Gyurdiev. - Initial version - Created by Stephen Smalley libsemanage-python32.9-8.el82.9-8.el82.9-8.el82.9-8.el82.9-8.el8.build-id37c620d091528185b8767f6889e86e7c9d6a1a0csemanage.cpython-36.opt-1.pycsemanage.cpython-36.pyc_semanage.cpython-36m-ppc64le-linux-gnu.sosemanage.pysemanage_migrate_store/usr/lib//usr/lib/.build-id//usr/lib/.build-id/37//usr/lib64/python3.6/site-packages/__pycache__//usr/lib64/python3.6/site-packages//usr/libexec/selinux/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mcpu=power8 -mtune=power8 -funwind-tables -fstack-clash-protectioncpioxz2ppc64le-redhat-linux-gnudirectorypython 3.6 byte-compiledELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=37c620d091528185b8767f6889e86e7c9d6a1a0c, strippedPython script, ASCII text executable  R R R RR RRRRRRR Rutf-808ff666272019dede167f35d7384d3315f99a29c0ec0597ac0ec125e3331a71e?7zXZ !#,y ] b2u jӫ`(y-DCEK#3!lRӉӅ5GEOwQ:L1Za 0w^Oatا27$X'񕅳T߫*J%{t^a蝲B{jU4|Ѱ:Y{8Y/A߂…}dӮ,(Nꉗ{7銲\9JE${եu7hqc}wʚ6ՇXoRFtMX Ґ:mJzWu+I+De 3tZ j,}((T]?Fޗt\Km/kr*3"sn\ ʸ(vZTQl}Ecva}ĂWx-&_vgxE(S/x=m EpdN><@ȯɂKqlX,`v}Ńz.MG1+=bF!`>-(y8 ?AmiI3i|QA ^! SBp1MnP-gM2vXtD ./5xң$k%wG]2k WESh+0>K M*jSz4>WB֨e-p)h})Oōߠغ n aDm]7b=~ŕ^hNչݚy+Llޖs~[M3ס> N5:.Iб.푌qfS?Zl=쁾L{\ ,chiCAL)>\lyYa\%W,'6ɍ3HH_wܾx$dM}ɰgewC `VlPgRozIrAn=V^oʂ#\˓ϧ7x^;M'o294Xhe'̚&l< ԷGQj &d54쾉d玺tԚ ̛1AJXsN;si>C:3a_!}/:=cc?r)dohdhgWHV< 7'a )H'3_~j!ܯOP%QL6,>h`zXϪfSvЩG*r9g諅3~Y\:]ڱ<熂 K#\N\ϐ֡ AGyq|( kZG#>#9iڠKUnP:Xz$Pme x#9{Iݻ6>-(kk{4F$RJm{'6Bf`C@&`mQɅOߑ '/lÏhxk?CUkB*aKc> Sb dElj৫Ui.]zl\xBQ붻Z\oaiݐE4j gg%RY#B{s% 1\Bd9n}3bS:Lx ."\2p2tϲ}8WZzO5 'r‚ھoqe= a qՊb,,ʎZ#BDzbh'WM놂>3И]1nxQ.̥M;"įv5#e,s2][mU@~OtQ<8CCzLxNZSr܌ZJTW*AX\+F7.u{K/B[J9Q*5dw,"ys^ 30%$p\9g/ vth W~Ì4TKpukZBա(=֑ql!` ?\Rkt;㲯XuYugV/}/W!(j(_ Ų5S7E)fOɃDivf{$Mos[|>brG8Hh.p75RZ#ʸi;K]{E㎁/ɵžBv7$OZ]~q^г,Ff)hNzlyO1, EG*u՗lr"</BN@M$&1.[8 zMl6& [xwgKf+I ~s> ji6 FT/GGd@ 9#z wdg&a4]ΙTr@m9+ں8m_gz VS<ƊE0YHIZ]Rչ};u}+mU0-v~OWIDG6B!VnxA4a0JE>wRLxjظ8yfA\q8we;6?{S< p>?w`a/1=R-we-B Y} prmܫobDξ%cV["j'GnA.;HkGر^ްXPO64 Rԕ-xq;.D$jdQMM(+ $}`VZ,Xd5[)Cn:(K̄hQ:mt'JG?n W #PA/4@E(ЖI-TVoܞDMA%Jkz|2\>B_Mȉ*}~_h15FR69*Gphb3]53(r4Wͺ\C_&l kbW!.Fb UT)d##*2G)7&O/@6S Ik1g`mpv2f!sw{>eo>YdRǣdlj*dtkn)JeyO.D?żˠOvBTly%8|@Pyn*Z9^w4j݄L3nJ45dEYp{HyiocrXjb;]ԩל fDqҧ Ww_/bZ,e ;N}U r2}]wvvgaFUDQy B.-XwJP1-B-t,0 K9D5\BGN08 |lFgMBo4 ֺ=ΐ2DnꊛAtQWƁϣ!c(Jx@Uy]iXtoR4?a )I3xaF V=]GeU܃;~js_3O-)hd"$7P6XXL'ol_Y$*Ce_#[voi%DGޘ Af*)2~l])lPA!o=Lg]}c--[\_OMxEѸ4L^T,hzQ\pQO^[hS_on;[3Q[e{{XQOߪb!_L-eU0lIԈ$pce+'UF5O@nDjK\hLIQ3"u/%֚ ʑk^^Y`e?JHE؊3I)|=O 463O0ԏ+ٟqӣfxJRu&E$|}ZPuctj̼vH/%L::!Bi9N9e DIun;[^6,'L_=, 7$ҳΫ;7SLU]Vt:>40q@ѫ9|#[]8]FZ#@㗟Kq@oxD>o ~5(z\yEe׮LZivx:2hL B\kJ/љ`8YsK^q ;TiEϊx,SOIaOn`2s[/!%csɐl"zkV{uHkPU7aW𥃊8jA-OJ#Wx!铷XMZ䞹uɞ*X!K/+;шճ2),+7#9K;oiگ*"sc[ğe&[Q-T$w_R͘.[2[QW}f {ֶksR6A6ᚱz4T I3umnTʈ͒ DD@ L=InaqlIW}ޜ 2#J #h=[+rX&ЗC A dZ%6A[`,fo;9ApƅYH\# jAr0ĝKfIDlC;k](==;Pλ0h*E;=3.|TeyhtMBjn+R kU/Ie$ &۲UkC'M֎25.)K,zR̨".(LvVdN qj[!9 R%]m_qg&A8]K&;G=(F߭Q2FdZt, e(ƮjwI7Z@UVo(@wIIsU1wJN2֒𩓲9KTRqg@f_n_Tzs$7ET|۩gИcZN8a` Lٗ|cdž1vWnu-|dl?ƾ39)_@%W,rDBt[̤e>|p:rfw484U-1T;\JK{ _+Q.(s:η=J߃m{[Ƥ`r|@]E{)RU3`J*doMӼ|  7JtZbc qiK) IKIyQӜi)&K&4DS$Y6Igpa-7\)> ˦A={ǝbTc 0+L/*ל6k$m}Q_QDn$&fE9Oj:qϷo"5fyXOezqM|Ϡ^̟#%698T㐼wZ G8R% iEuoΔ3Af{!B!໚{ dH48KW q[JL0ۘG yD\ycҨ=I(;`'3虡}CKx7䪐c秪H#A[\0_egXGB[ ,L~D6mnZ^eF'J?Sqo  c$|XS@,uS0lo˕o\ gK_~hto.=$O 雡l)'CZQe mͧ8>oFA%v/h\S m}`8 K'Za+2=oEیVQ}x9mܱSDg6PijRȥOz^#>^c%T&>R[Tom7 ,գ=ۜYmgewWڟyd/ vsBC2(K7H̽BgDxjYٖ,1Vjx#`ϴPf揤#D49 Et;d;.E_K^;^C=E$0,Pxn}5kGU1NtWg^.5LTC̖ 3ڌq@,E0KfwS]1LY5ҧ:XjI֞1l$z$F妐E r_*ؿ0 x69՜N }uJ8x_\wDaLNކ(Gr(C\%Il UTjj@KjHZknV,zbwm(4_]ư>/0TO.olr3筛PPp y!fOj/أa[y5rb>`.pdиrҌs69 (1l39}dFE:6>o𱄬=G$'a$I/pGDRdi`))-JqS~qDeEe$yF'~L_ڝϛ|3ȽjT4Y ]D v%H@qV6m٠uE[wŲ[[1;P/=b 4A u"pE ԔZ+ge\DǾGV9 _lckw Y3a'7ȟd%ֵүW 9)vzQy-[[zb&sM)evq QT hFD뭲~4?^ ^64œ* vICt2s3Aѷ4/BC0Sg4juQHIre*GoX@KboXg:L _=?8),-]n5ݸh?in:"/#AP&f؛QS'f2r]P èafКj䧄;`ō!tlх~YIKhռd[SRVUU#%Gݛ-zZ}k8bH.&*7zޱc॥?Qߠ8DIdȱ:q{E}YWwD .)~oXh3X/*.:wꋓͭiٜΎ=mGp'93d 73Y9[#8Qz`K⪲RXi*QpQ^΂ }0GCqoSpc=F_-_F 29;oZ}=3DrUUһ(ֵ%xo3=L3 ޳{2#ͨC#l r‰Ց߀~AIH 1r![{u $(M}d2F{JSoB8s%TH:Ę\۪Q0GTo0OpCygfWcg2<ݨXv<; <>߅l˜)eyciS=gy2dY&`靤EJlyIʁia8?9Ne.t q#c$>gl›TP&oF9?8 Kreb*OYCEݨ<(o k07#&;l+C)PIeq1HxA ݿ\J q,(ElGBWx<g{e Z:]iW\y@S͈̦;(/'hUC☻8kJ0L" >Ոyr`/2/*\Զ @]Km18ߘz=A~J\҆)s=٪@ۀEq=ţ) F{])^"|M0'?aB@DV)h\?sxV֯K>veoa'wP0R4,n-b=MDN.f,ġSJɌiHZuk~RP#Wx֓adG3#/kpTa{=^%A%R %9+M^-?n4%Y_^4*iAcgR-K&D$+~ݧҝ_G\八3ړ["RG56 g3rLij?g T#ң$zh٤ dEHyϡ+&BB{ DU~꾄=-w_1$ YB u 0;?o{jzR!DZԓo'OunSM_?'@!]FMv_bR<@sUhۦAD?Ѩcu vW\q뺋K}$ДƱ-8ϞFܥu^Q``()+bFGc*BZC.,'Fgc$eլC#+AͲ} N]mוha!*5Grk%}$Ι~U*< |17z^uqT@OU@ɇ䚆QrQ]=m/x0M)K"B&^6\Jk3&hs|wfz䤣x-5<#|)t,Bݽ)W-  񹆓DW6nmDϷH9bЀm]>ZحQ(4o]@s])k B#s RRVqlsϿYrS_WIc,T,Un#ga)c其k@p,Ètk%Q%mCMv Y}?}Ϥ{-*[\¡e0BDL3 M@Cj0+>(3'B,-Y@{щЭa:"~y̮;Zji6`J: \":^v~JKrusCݒ pp}FނkRM,ҁAٱ숥7A 'E|spXaIZFnFzE7WgHȇcxzX7gīPJ| J?[HAY667GlO\ۅA #ǐዂ-+$JNX-9oj٧Wb/Ȱ/]e6RphܭM.tRh,WD ELF;@hPZ8S9k[,3 uy0l\,~XXkHf5IMK$wM1oSתai .\'"u7nhDQ UzjJ/(Hqo|ٻ6tJqmMJ# .|E(܃UDޱr;š5х`Wt>iSR|^ X!I+4TlKS`C~ƌ[W,P#U5"pfסW| e5l3&LAaW]t,vUE;X\:x wQ=SFz] Z-c)oP5`U1N;ΫEH lq{/y;m6wh*Gb9[3}Xjw?:tY1^ Nt^s IݍX2[-W- x7-K<:sNVtizJe \ :ω#nmJ ShDwf`v 7PHTSm"Ⰿ9< ',`.)/[`ʼn:Wz39?0IiWa)AR5z!5a׸=O)rik΁ncTUIy!U RbaM_BRTXm0eP17fxDgMR 7XWcvRj9H9foԀ- #LJtdJEJYY`6-l^qbhg0IdžQ,$R ;A.R ೇ!WqTn[nc['*\|n,Q_2qoNEw?A԰Uf6Q|5ŸӾ]IUAtr2Rnč-osQi[J9s q7o.qJF ʐښlnn>ȝ?R/ pL xĵJH&չz[ų6Ȧ4-ĞVqH ';~VxXe 5=PQģJ@ؾ)/CҞwS6hAEx4]u?cݹ9FU Ƕz%1 tEI³MaQP]bpۥA5&Vx Ud#!ϥuFΣݪS=qRPd4-"vO'N'zHT~;U%mn*1vW-Y1j2j˄pX%w(^EeƒsW|+k:h@DFԃ1t*(b4Zy=c;bJ5 l_M(]ggϏi?w܆28R1)&w ᫗4\5q^YV<$ӈHwFuv; |)$"^b8j&0;V(°Jaxa9D ̂s1hu4RrN'R>`D"zW#Hޤ3R[8VKu$WQ}4xJ?v8lRv1P)[Ē9è7q#9: b1ceɼa!vJ<ㄏЂ#\\~^Nbb&U:)QY#pShWWtzZ/,'Qs/omo1 /p>u"S-ZH["*3;aғ%ߋc- O]|+vݺ8~zХj-H&hQquR' hiJ*yb!G*UZoVC3_s&>h ;[RnBwY sȼx{#dP @w=JɒJ<|ưmC'NbM5FP>}OC#iM'2Q.@=9JIp nØ_͑0Mo_F13f y1bq_֏.?\I.qL"U:دsД&-9mG;E$2g\&٬PokQa\-1:wΧ)*-K . /}Zu,'njބ w麐_S /MErq޲2UX~IPf%'Tظ\ݡS5nE;`jc'3x6od d˲ 96V|^sȽk!]WTFI@n#wՂ"J3%´&bwiR]X;2zj  G p`d ]9fp@~U-V'2~r]j\5u}-ƈX;Zwr59~|к$;QkN_6^C5>?#G?-,BF'WlH9T3 |<>=_%tٿ@_Ȃ6\iTƆIcڡ:m #xv" tɘExv?2Rl`@. 6_d(p1:jbVN:P`7ۛ=0{9DC[B|~PT@jk_By5|JMoMnsr!$+POEXJ`UI! _9Pz:lĎLTS!g5Mԅ*X{szLJ_jh]\Fe/y.2w 'ǔ/G4eIn]-_a` 1HE:,K}+ ڭ&lKȣGZ  Y8lkॉV#˰y YUC WƓW5x3un-BX9Vc<@%!7:c|riƑdž AyY)/^fʼn۔ITS`q&Go imPQnJP B0>c.jQ y; 6iPR6;?b{Eb{eOGk11e? ^e~^xa*"36*НC=R+<'Sҹo>oz(*|^ʀ.|u3UNp>I꓀Q#}h;j::"z{oQH8$Yvjq@^"?\Aآw J{* ?pT}҅88=z_dOjAw/!i_3w~3x(M(Y7 ;iVL=hRU@j. _}͖ߑ{˥UWj\J1/0Şu71ͩQ|h横V3]tE.BvT=fW-L`YM5nuvm[#<-|8,qm@w@H++9c(%]F.9g.I3"SLXlC%o+N[UA[|ɱ2 tI 9`d؇Ʒ\ߟ.SK? VQ&7izd*B',䜒O{}:M d^F~V7=hG{\)ԍipXʫʅkODߕ]2,Aܵ:VNHRLEI/> EHx)GCVwCdPmoԙ iN cs?"$3 95U|Kam,˥&acJ{TĽ?=vHbzJMlL 8K[_"k6Ǔ8kJn\dw&/%@t3yt裍 ʉmtJ,Mު~G鼠 TaĢ)70Jzco /';mR dTQJ_Ljp"~6#B-|6Mz1 X5^f+$ci>Z;rPdMIHKv]t))~<SHq צ%[b~{ 5ٗ%Fq*wueސ `0;5֗ X !ܛPݍ=ƒVCsȪ V)oee[\T}BQa{-c q/uBE񫝝_EUaZ%.,O'd2>i^!ANJ*L\ =#~d)<QpHb)Nh<- 0qkm>oS8 zYMrbn̴'e% Mn Ҝ`ߧ|{CR-͵4Ij.Ѱ7A3%Y6Y#۫|^Rf͉PeOx "mHb0MBtd+`vKcSbt E+TG t#Y3jiT͔8nʘWL{0ly |v@ͳ Cȅ |WNN]LV,r$`\U'h-8H$Xadm%#KCRGu+YݸMZ ݧavFjLگ{JtnW\y!.2ݎtV2X&T ֡QH,C^8V>9t84=FԆ V$vD (lK }]=?0w LQ#vdY;XåaSՅ}ٝVb?XQr\X!y/WCA`-48?Ycmj8zXW,^Z'.N ۀXzՆj-^r W]ǒbi/g#qd# ezpnk'ykZlc>Z<?dX|Tx9@_}pϛF7؆Wi;PYT_0l$H@ $>W #(Vsh=и߆4u?9xt,{7pts#?{Kfݧ ʵ334,bNFf/>K|ax_E̅fk|VQU'%w UMvgě@ 9+.Ѣ& )Ś>9RBkobګZ̬4W %FIJ^꿁B.Pi (,t5 KpPk)C V:Th0 C#ωTCei~}<4p}1%BFɣWI̱c13 0POk$CY䁪W)5}um:M0rd?)FtQ؈;ZF( g֔$/|4 Qy39߻($=,T~MݎT!ǴF6~uݿ>md(DǯTz'c˦8ckS߶K|/ր?l>}4N hX`^dI̓5amOY5k_şn8G<{YGc@.c//Ǽ]9?>'E^pjTII@DŽvgIQI3C7B$blct`USIʦqIu&k5.S JҒyF- {\Q#Sڲ3Y>sF|oٹ/q 2* $d&%6.K a[(A{*%sVfOgaGIq5CoPb2E2R1?HS fKZ4»#eQYJQ'wlbH_4f`$βgI{ܦi4'*[07VE!86JLkLYCt/ p4:&o-ez ?/:Myhxq%SxW[ E?e@m}6rWs*MNb[T{>/؅ IdX23keB[hjxuPK?8;}ś-_.gf_.tY2yݔ+|dNJ^j_}>* 2f3QQ_!qN}հ'2jN1`)NdTq"ψxB5%g5:X,lPv_Jte%2u(^dj{iV] .SФ~q* 8)*+?pw?Un)oy-f7&g& @U(<4m:~!*/T2DlA8n%~&(T *J%8%WگӧuSό?E8{RgkRmRkDc^~8sоD36ȋ^>xGsbݭ=皭>J\ʼnW~l!X<1'N=,'AsQDwE[ ޕy+g֕cy%WC y:j &.k#PYeEOMES8p2Gx0'ߦxS5*˜1-I6{ .ޝ .k5oR]ѹFbU.$&#^ⷍn.$)cl (DG8p^ƶxukw5,-ꌟy?;:\ʦ&'.)WT[UxOfC P _|ܝ(lkS4Č^TR.WXܹ1|(u%])#ow4~jYknF_mGt4n#s۵&`pD31w!9*QP=hKqNnkqn9p]c 65; ioʑoyD [i#73~ߣb$j_kSxrLet{xtIs"AׂFaKk)t˧m:4EzoŸ { ;08M:#$X&lF4/-#p;gŏP]@DC򾸡F\-e ?뚍."#հ1fZ^3zCQsUchȰ!`,PviV寈 2~eb6f{8m: +05APj]I}yJݾPIvkh =wzn 2(@w]SI8=vh(7$0Tc*vD#BlOQf36B_p`8v a_wL&aAqGTBlPeK8.TzvtDAb7/yW<}^U!,)/k` nk"$' tdž&R`2K^翁KƌQT*OEK^XY6&ZUlt.PisoLDI|VNPj Cܘp?| =o@Wear~aY 46~r g{qI_g8 mp#-ʂf(:]ReK8ng]L׶Ac8vl sB=|a1sf>?`S'_WQwjm;dJVp]1"r`V CeF` :8gyI߭[ _+/'k*PK].x|74`WX-P4MxCLe+mkhݻ-5~e q(߿zԽ4 祚7A`'ηGZcs|N{|g]/!q%DJtR*Y@ S}; ]=ʰ ?KSO`R' |E!a K78Jo/=ᠵIsA>{XEv(Nqj pr#n5HU1q˩e]+Q)mwj̣LɧcwW}š&eM!ĮaD&R dIʭpCΫ_]Fqϓ(6`&a&mr?R,(Y9;:SlVK&&;'gQIΪm/ˏޗ#Cf]*;"#٢G/X9Iٻ}!V^8kpNg 9΢lR%JB=M%!7Ŵb{.Xg)6"Y+=-ȥ膐S4z[nW pyIULTHoqn'08Dg-fe*R͒,Ô' c52u&^s9ojd*6혘kƓd(5lYbJLX_}2[L*qw1 HKH;PuxQwa> gQ7!nXQ܈Ͼ`>dw!$n }%w9 8JAI"+<p^6*(^.WQԌۅ9~oBI7&@XfbW#ΐ@v fEyH`A_e)>Z{f-a`DL[(j9$~> ($rZϮXoV+XSNn'% Joկdoe~O9VB ušڈeS n,wTq6T)ub Aÿ07GϓIJh`D7#DY@m?,k'F@ц5H,vUU^Me2K s_;l}R|!?&- YOAvxRmxƑ >FF*9q9 PKPL7,A6{۞ojicWjg DBp(<)GC47Y qnAtft'FɳX|jhvC:~d\VrTnao e6u%E-oZvSc'l]Δ Wli1Z+%h"/ U.˜ 9?]=(S{W4iƁ3ζ}1Tw7r``rILtzdZd 4RyktWnheE;Bsİ;x֟bFFtfC7bZO/pbhdurVB}Z]muvb9,0%CvsܼvFkP O.[iɸU37)wA"z  `έ=_xS#1{?~Hm\k)핼=ECR?٬ճB*ʥEttl@X,I;\*JY'n[^ƛay$KpZ\ yo`0 ld@VkK!R<{5޲1n :62mt\=-9ܘz!P1UFѤ5gq" C%+X*1J5ܞc5VoƉ/op= 7e?h J hty:B?v|[ȷAΊ=sJXC~QaHEbE{Y,,x{uWDpѐQt LX#uYu PR,iZr nrfʥiIzP{E1@NS8lkK/p",VnÁ|ٯSljqjAA]9󗉊5{BT qЬGÝLhnw&=A\TV18v!K/>l:/m T~HH5D@zF3h_= f#':0|`Lf2WZDvaB 4g ɜξV f鸬EM%6UT<~*vJ >vOĵ,)?'BK$;K`.&lDU$ř+)8:G2*HO-e '{L59A^7O&zaUҡf&/7)ݮ|V@`׵Nܕ{кX}x́\K8ƅ(sB//SBxmFQS+JUc_PT?s%{P x"Dr@Ӑ(.MN.i3Pqʘ6%I8F7M|S{ l\5_tqh E*` Fԏ*䬋B(d!ۚm;=pPaXvS4S}']j]wF!Fsj*-h~LC$P3N&9ѳ PM?B]FWt^ʛo5lZ_2K/DRyAKѝ6k?j2fPPQKjHGK͆Du$Qp~ a:47eXT$q+ ߹.`ﳟYD`&;0Jf4 \PQID$LCkT,KFuXj#cYDԜU2>`񮎚pfgʼVqy-!D<+PA_?XP%HmbN N^]KQEA~/A:/O x>/W]!܌x.E:C*bAl`h Df|}Qfp8i}l>ɫ5@]5͐N nvaheql|{75"̓W?~ijQ]:*ro1Zيf~O#Kj\aLn Dq9kL#xwgj A,cTcf&3omtۨ?$]l?=.KvYLҪӯy_U)b4sy/@9T$Qiw0'_ mW)YS;Hu@Sz펄j 7C\߸tAru2@'@bC-)8,#38l8T:x pc`,i,-Q?# i5 /f*7RЦjZ*%ikJ?f_?`flqdeN)胅+MݓX0p~a]{α0'|O>"w^7|- ^lJZAl{EQSJ~w&:CѺ>YĒ1)𭛋l؎=dWOK ZȤI^bY$n'Щw&!#tof/gL gcQIH篺$v vcZ=L}fĤa/$:i,i ԈE~-CQRmoMLT Z] iY$컂']ֺ]x"0JmUB^q)%H{BIݑۨ[ޡEH@a:wo <$:>X[`lgsXHRhF#0o\~ZAte Ұ*Y3˓eK}KPsQE9D:[QqxSh6<ٙI0G?_hČV>$1 ]·ĭ$1|~RA@1tR aF D5.D"Dlݧ҉Pr}Y{bvX: g|s]qk?zz}{ϻbIB0Ng_?ki,D8:OHtN۲/?{%SUL?q(~˅L7y^̀xud:ȽAvO2}%k%Ζh*&TJ`-ͿP*X=|w%ϻ}3#S fTZIky=#SYVۉ}Rq. -79MTMe%H1 sF`Q8РYx-=He)Y n=/&ѸM5<`]3bx RWQbIf '"];A;/\<;KE l9^tR6 YоϾN^^$ɔ_҆ޗ9O}& CA'""` xmmnU\(ƂwoG9c{+Vt ]|&%x*j)Qf\)p_V\y uXBث Vp2^a@$Cv8О2߅E?twBA3|LAS-O-{!Mt`ƙr~p18A&s-ܓ>9r,fR*SܚH>6gޝXfMƙfՔvlY#SgiV9|lDnC+',RE𵇣H?B樘SaSd%5CZ37dF]AFP*N ܲG-UE[Ib%arrUm y8VWOARڮ-YR:r~9^yò <`{KhIsׂPVx痆Mj\GSykKa H r)HM˛{423c0-^$΃7,b/uAz U%Ӵ%W{܉#|CnoU(${x.ы+g1fgVe95'8ǭxѿrfp_=< ʟR?) %E\9usD 8M} E2ƎhG,5\S5oD$,`읫a 8#` gɽUv 3Wk!LRǂ BvC?]# qV"fa]nF Sf קz=~$j EܢU^m=?fы@m]=8KjRFz*(h~ڴF( VS+Pmc|4#UnE^5r4V| 1Ŭu\J2a`mʛ^HhUFȋHO{(Qs+7?yЀqTars n'ňwہz]Μ;3rVě;ت7-f_:]Ŕ骃*=DC~]{?V2ӟig[ ?NOak7:ʿ9 GR\$H#B'$~+=4k*Ɏ)LN񧺰WkQ.G(ee˶tq&vwsarH]M?M0!z8A++#UFl-`hzߚiouj@6ˠXzV؆C`b ·0[qVCI[HmmozB˘0,8* {|ޑm''w p{$ǠmGG+Qkʹ qMoH1%lY Y(y0$^}|Ips>IԒ[m *ZxC S@ MY+yg͜|cV:VtMK&|mMӹuc0]?4v M)X3FduyIop\3F )v@v/ՑҐ.n 錎彞UB=ft ;(Dd]2}xwv-}@l{Fp +Vo<̬~ޝ 5]>'T(_~LsW-G#"qW 59- +“::^$~O369CQO1}uz;}z4p@+.d"~{A+ʂ[Q'w&pKP(l+A4Co@9ʴ6\,I|]nۘe6NƱ;@ݳJ6!r *"`(Rb3&y*Ji.)+8{?3@ f_.]U1m=>X8:7NNYtjytmmVO+s3Wڮk~`T*EH* ba>v2N`=](ȭm;6P˞LUoE%LuDzLh=s}|EZEDF9\H29Yt !__fĖxNOamj(ˀpQaoPʢ\(Hk֠ƔJQuMgD4I-tJ͇S+j(dYbKo$/j^.ܵH4ӌdռŃ0ssFbyaLn๖Ļ Yg@_I'#.F7wS~w)mX'ACyx8X9—TyυNw̘ >/PqV;pӍa'n&tQ-Uq=>8K Uiqܗhg c_C˝|M=DAq\[#5}7 cY?Bp ka|?JLNfG ne(z|TfOdwg&?&;Rr;${Bc/T$5φM"}3wZCg.tKj\e'm׭\ ,1HXgGBW8}3QJY qg'*bs#\FU#KDiw9[_fXpiC_P<"7pI~oZ眚jȨNxC%gry8ac & E13ƈr/ h!s[eQ @3 A= \x1nNkX e:O#Sg}7 >͇ޖ-;873C6:W2qA-|8˗P#\$ľe`nMmZcTa )H"a] At2}:i~kN >cj`;O= jOZrTՈc¼»+kUSt6*" )FAٌ҉s!I)AvʴIϽ=o2x£:1-//izQRǣ|\3~W1ۭ-׺.(r@#,C'v;YD0FlI{a<'~QIC9Ũ!ײLYY6h\߯JѸ0=2s>-Fßb|ԑ&{JOm~gJASR14m*8/zɔ^~q}y}ʋ(?ں&1jJүPtb(ˎ\8*gЪ ;dk2A F/Wg~BX\@T|*T:  ؾgÞtaoWu+%&$T_hZsR-ʼ`Peġ{0F85c8#ɌnIULo^YV);N{z>ҡ!.V[ G9+S-058lc ]%,f 9Uk?!벀TpQ_Pn]!iO\WYo MRW?7Qc0|5ju#[88&*n>ګh6ȮޏR& G6 (},3r?k2zt1i/8:1-Rd"Q+"\0.f%zœr2NRӻw}ox|7+h];<%88*!A'Mˀ]Jb} k =4f]m0C5Eȅc;eZo0A^()J8O M$%*|uq0]Rz%4)u[@s;Gw_`6#M߂:I6=+^ U͋ )-vub4VHW8rR; ?&0 7r2閩xZFtٰQ*"S>C7 ®EN&tek,cnf+r,B:% >_tW@ko^G+\4V(O4Euoz.%$56OD0SÈ^6b@Wk=`xcf^DBEf^I?޹wJ5@W"f8"ah((Y/iu^tMR;lۦ?v!ɫB$Y{YϐyfYX9/!JM-U'.&]N[);s= QUثv#I5/^ll "ANvmQ~Rv_= 8y (Յie"4 O""R20avtGQv$3SpQ:=~h#%}ZF7i!!3kBT+WOߢ/˗Xrє-9떁%W+]Ч붮RPퟆA薰);EW:UIiD!Oʽ3ӢSkBp- v*'?.YnE,ڹ\n6?]O?NP*k1+Zycp)$ SXӞ0,إ:T$X!T$xvYO6/Ye]bkO,v^ipA$8y:D+%lIH i#"w (L-ʟoyd^į#qa[{}0V-XR°Kxt(mTODj/S?FDbte=e]]'.ah@k},BA8鋧ҫNЬG8+͡`ޑb}5jn;p6-AB.)R >L @֓] NLX㮴0'DŽ}#ԗ|/eDx 7Jc6Uߢ"n)B0w S^03:m?ԟgC/={+X_S;Wc-(-=cBh1˔gEY~O`) xhuq~"Y/[3ejZN- b-7Jj }@):piUTvIjȅT"WAht^!>xQ;zMF99Rr#mQR_8:&Tt'\_k|##S@tc@`׹ Ԃ2L$ejqg vpFE9g;6OѶ#7" #caC';]09%<(1?$wut; CLYgy},61@Kl_2"hJ h<>7& uN?ln-u]42}`zlyk1w7#wǹCsld$C Fw&ĀTdtOmYglXe029d @(P:**bK揩}"*XX\ .ǂzE7T5pu\ )Dcv$&Oci{LXeROarKhۯ33H.@0*cn2Ȅ4Q.PPh Xrƕqz~; m].gZC(TV@h=6uY/jb>hK[,5UG>X_ CoHd=LT(W_ a2o+zlTU@#\mx4\$Q0rsCLIxJb9d,qǑ!fm"T~wu3XSAwl)?e%ÿiTH6P ^Nj>Iȃ2iaGYYL*GrwYP"(ȳ>j #f/NlWm6dxL/2P2[%'k뜥joF@Kg+jXOy%I.,_6_rGS ]CxEH1۝BwE"]c.2?7-=!]jV`t2eQmCf`ft* <8U<^,q1ǎ;H.y)¸-~Tͱ͋:چ&v-cva4'( "ES/N$@uK"a%@\$xvȆA%A?t}=GZt>+p'6E4cG 4ۀQKX\i!ƍp<֎^*B{9ޥ@{%UN*šDU&_#)B?'"]~h ̎ӿ~Cf[(ky5%9[ 8/qvÈN:-NKTuЈp]/p&\6AW+k n|ۇ9ɭ"pg k>ALkAArwcd?( /cԗ>߼bhXVu5؂r,FrV Yd[S8>QhF^t]M?GA+RF+B-_Q@k{y} va,AbrcCȲWƧ FF|!O*.[U|K䶂"fWɮ9ƈH3&LJ (F94=-cR+$v?i*=8 Bl}gƏIˑ֓ kE50Gkg+ZChtٸ2H],uo*W!35+`-x ?)w^=57q;촲We?m5a/a&٠[ .x')ȒLF量UYm{ؒ&5tk3K]q VmS{wxMRO3M%Z cB,8EWW{lSWC}"j5>BH<C=b~5VVi#ogMP8E D.y>cDXiXS+ڝaX#C'w)J_M=kRoY| zϵl^#?(z8n=^U2On=9Tֈ;D nN#Mf. Kyz~Hb&^9Ev1$V^e vgGSqY@k:u6j TvGj)(ro,U*,žڅeZ|`F߮RE݉]׻h'ډLdb!DhڷY #^YKf4/۞뤦G[ ,*owҼKlTDfH(-'H`Y!m%n-zT`?8>`l[n3^s^K3ͪǔ ݂L::zp8*z$os2-H?i[V8%]_w xYO2׉\=F;YHHj&r)o@j_!l[c@ Bloԡ0 -]W%L{0vI@^gI/2E* $KQ?].K7HN8¸2"A'jEEWU\Q@GZ~p[=a V墥P7҆*L@c^Nfݜ9IפӠpÒ)l4$v~{*_k4mi$p0ST@Ik#HV5 rēBӮ#:iy}Umݺ(S.R~*$bWF嵐P/8ƎE|a+q/PA{! ,q#]1xH=`h~3њ@7΂&z#oM) P*IuefR|&`U(XM ^ [9М;N h Jxz[x@w`Zse܄ ? 2R9?cC.ʙfGΛP70Iy[:8e|Y!aJmz/X|.eu?dMp{a]ȧ wa8T\xCy,ڈQ뤵G*0panlSh'4Szs5zx&cq~q=6ku 2=v)*KA]r@$2!"'œRDkIRh0Kk .~ FـnoS̐k:IƖ_cw-TAXƪt &eZ,ݥ#5ѧcyqI xp@傌KWBʦ}MTW 疕 bKT% 6WwU*~_n ;Ζ*cIbZS>ʤ߉@#x˷ "h,tb屫穙ӻ&XEތ:/EON'ژJCmt3~5 h3D]x͋*7Vͬ]eHn@l\}f?k A8őL//ܝȘ/8ɋM}ڼY mA (,efa-vA\>0J]<l)'-eÞ]me=U5NAtIb!\Vv=F7\1|g묙bVMT,mr _7v2KEZDHhRS65`5|G-\C(وDLIi rN.(tB'0"FH %swt吱="|iֆ93/j)ɻ1 %-("mS'7=VQm̂o07V3d  e]yU&]صVAцC1Z%J$rM/=0S&/~FYjFGO}&+b<)ljdseȌy C#IZ!zKq|&mΨf,"ؕFrNis;z& 'l>gXpoZ1 /i͔|uc;J343O{Rt 4@m2o" O! M ٫/Dz[Ёk,oMXNUbq{PS~g=ŧ7&R xv-WHD @:A2}uC;=N8j|52/ZA-Q\wjD/V2Ϣ?:ƣVTC9۞ќwYE]U  Cieir fdU$l] oՌfia5E%LHEŢhu2^R֫ ?.9l1pRP-Jq AlMR-^5W8R۶g~pӍv>qq"/G ԱkubgUBu5elcF1*=S{P{c 0:7%7o(~P]PfBӋES.δ{mq/!ae^z-I[v}fHF$^\x<3vq^A%^ EO|P@~\DڒxjAup~32)Ź:oɡ릥>6B_8.ػ«b,xe^}(B!̩ͦ2j;;=Q7ޤczw7z1‘RHw?ZM) |pHCP`Qy~Cmh}3i6ߊ}Ase48D`IeOPϖEWo 2#MM g{vQс 3!=o$vi(~Yk0&.wT3z)ċs˔azq'c=T|sW}`<\ X~ڙ;H 4MP̢7jl4]Iáe<~ߚqm2o^t!-Mz!Jҧ'} |R{ i偌O'!ZZ3OZK[IT~iqnAE = 5z8k3Ӳ?>'զU9!nELP8Z5N퓶6AI!njz}t @(1_kxy\]pdm' i-9bzDĤxuw*5Uܼ8X],԰uDuX]$컿* B1F"1}Y9hna-f;WI)+YÇ0^xDV;=f Fo%)s 1$<ϱ[[$Ğa)uPk<'Η, >72#5x 1$l t"B#r8ZAK``@g%jRHEfo&ĺGΥՌUKAw_ Cz`b:\2x(56E V艷iq$ښ`OeNFb6 irc-Ȗ?\:)1?7bCI#rp UY&!"r$.Ou|[Aԯ.HXƆd_ ̈́=Jm A˥ꍘ@.3Df4"PlkY}͹e3>o]תY ش.bHEExkaQf4nQSG=$z1z4:1c9Il8FP7:ȒFˉ0 eT. :5"cͲ^pUpt}Akw13B5{P.&"m:6R7h,KP =/c.%,pHbїoĦܭ&]7Uao3܈plqD{B g3GN~bCumL.CX'Wu?JC*Aur= flEHBX<_hn¸vyU{4s1L0=8ni&G֐^1%r.m&dN&ѩ3xs\ ,\VEq;"eoA>xQ9Xn4wx%-OEIc^ϕoێ!A4'փ/]pW[غ1Q^L$af{bE %ܩDɈPu @,']øi 13֣xT|RMRA/kjbb/`X&!ߡq;VYw}k$n4 433ҀT<>/*xEgO20Zyt/_sD/k+@ïKR&H.&Mgo URAx~oUq(남K9Ｍ/0c4f!0 c ~3S+7 iFJ+[TT`\b9Uճ#P3UAV'NNdMmWuyZP+'lWvBO˻+m™W5Ϯ+=2{>D7= 2S5Y߱qʕ w8V NŠ qG[HNDˢ2/J ͻ2"NJ+T r¿@TFkt-!& 5aϸ_fd_BO9]Ӊ/^Fcd߉V]1 d{TzװjQ'$ 8ʗj}/ ԠW )fI>ppyv3URVז,OqR۵cwv5OrަExR4?+ˈi(2_E9r I*gˤUsQdvŅJ=1qW^颡.b/h)"$VX֖֨VN׿O.GRX2;k5`&=@fM ^l3kcG)Ji@@}J::)qŪW^T$wTomSS;%IuUU]y fK\dG-OGYUA謀9}#&hC!EIڭݳ뵅DBzg񍪷PXY)r. OЂ%$By{KV&#* k.% Ĕܮv!ߦwEjeqY>08e/dM6Bb#:"0C/qzJ ɅGȘ >ճV<otS|N7s2w%q& 2Ive4sүWЕP4+דqvk>]6^y}.^8-܆N_ሖct0rG>-'dZT! { j2l&<"*cʾ EFv>7Ye?4@,^Kcyfqpv|*1aFsH > 1{%|c􎷸of.D "T+Kܻ>lH0b_&&{ՙnLOm5Jj|CwhL}w}*'.9Q|]pj{5X-j)*.P{dr-kcʂ}X\W-`Jg 2hn3&KʹaC㨍ԓuME`v/эhj; HQyFL[WkSJ˞(<.?9la&k/G6-g8[[#4-Ne ~FmKQtz1<:l *PdҰlse% p{dm$,M`\@nI:.z^tb 2 o^uin0t-84NvV9f~ `-k!>ǬƶLM*dA']s7@*55em=LXF=܊,kHnS Sr3sǫZJ (caS(Xu8Eǹ20~MOS߮`U-#:T]QUaJ lLWݎq/ӻ;ҲbNyf11~Q^4 8"bL%\%wcgE&?l8o ʆF'AAJO20aEKC[pߌ ;2`Qh=4hP_EGؒ]dͮZn#5~F]LI_[b#aoBu|{&kr٤!>si6s8Ϣ7S_uz䩑(ƒ-큵΋q H/];m" -i.vq@7,*eک͡|,kzUC\i*є/gT9k2~&W u"9_ łhvj5PBh7 olOs"mW ww3*fׇȶ]SJ uJ=P:ŷѶdJ3{7D3^hl )`CA+ UUݎ6Oe_nS.>TXWD889:*^4l?OKw kzp%)#F6$+Y?S#u^ 8QOUƏ|YQwsNqANvO$]}[\wEYF \^W'- r2TRe Z3H q!4`wMƕ[dL V+ob:)dleXQ<!WzȗbL/y]woVPc#W3Y*uh[ ՋZ84IY&zU2&Muܪ(:n t!20f Ft^bmWj>QɍKCGV;O*i~$gj kL"\ #SqvZUU59IH@藞vA/֏ɯPeQ> c4d/ tkڅv U9 n>M4[ RH[Zn]dPlsuG^o4@v&1y%@crc-w$Q5kS3*YcZ;_QLyFU;/Vi~wp9L#1ޚ( Ǻ).`lE}OO >rգa2 (l7{_Fꀎ#/W05gsΧk9ߋQ"2}Vxq`-.G7(Cԕ{+-/}TJ5x z=gcJ-kaxhBsy 9=,D>h grB"Sh6#_=ځHmbvT -7~!n+L>)HތORJG FߤtM O۬k愫qLR VN-I=tҲbD7YE7W>ffjlʬZy(I Pj7oJ5/݊[)1׃q׭`=B :Xkw7 4Sm"fC/(+HO5-U⡛Ro徬SưhOSWg.M颶\ƤR VeV2#>Z0]E#8WFځ)~*&- 뻖CTEY&Zox RIK]̂ނmIuׂII܂޺IxUf?ssdd9a]jȷi&]LA/|Ț؇wtGxIEMi{n%J-ڜAzA/- K)z0iǴw(AV(*HͶx T^8Ī>1Uc`:3HyYWQ qm.FPurHM/^ǿf04b\kzrpW"v]wh"ԤpQ#5 4u gJ)\s-ۯNJv nWѯtREHX6cǚUB8=DA_:837kg*3v[hCix+G= tk K^4bUЁ˵5))Ho'*8> Lde^C >L9J˻ʄ:3[k "ֈҳ{lX2!?b; aL|8c\zkfy?ǝvIݛW TPu.9W!e$(J7bKrBOGvR =|,xo①)էS֖U sM$Qeal&"BzIHB4E6 eO|@qJCP"fjDX4NjoZ+/QaBxxf}Z߀!W2BB;4ptPVZ C#~\ﺀl -"eRMR?<&[!.-'[)M!ENAşK9I`mFUwۤ*D5?wY4z'<<?)H7[dQkG7ې3Ao5DY-l/N|3/ZIfu{}J1LFw@kZ~źz߽t f߃{U Ip1p#vK"#[w9a"|1:fb/hDe4cD%PW_!MuXM碃߼9NnuX)6DdbCK қ>*ņAIMc$O1 i@JIj")Z39 f89 Rٰ1H$uUO7Xم4ޏ_^%V*fJ|-B 0 T%vm ̈埼.v!$洅 Ư5$gvn9ZS %ᕱq7F*wf 6 *BVXZ34 !EadeF%5t8ۜ:~ٞi 9pS7ݑYmgX"qT+)#ogNQB-_O#wOsMU]Jr-!MPv2* }3=B䮐{u;#УweJ_Wl3p=2UmN42+[H 0_rPV}Aygdu;aWhfxT ܡz m"(CQJLuߠ鏉q(;S.-ݥS"8yPvLxbM;`Ep;@r6, }Cf?yMT[jfp M}ўA$݂g=N]ϲMbj>K" AV9F'{k׿mƈeT~6>TsDZ؜¥ U@WW)DqnB17AKzz67G,EƱ%sjWs֓TO՝jӎwuV2EHS.xW\z=SUlY!uV@'jYGPD<6]"_7Mы&:AFo@H.yEdVdzz8.M>u T34u&c[.VNVWi9 XV.HNcpƒXmߟᚍq$!/O =/(;N%U웘IZ.Qd۷^q_ Zn)cZ#D 0HwIpVk/ENy(^X[&R7sn.^ўʤ~F[2xعCrV{0`OiRgMc64B~!^}*e:_3ó)ם)zJ$5vcH E;8I b=EOתYge'i==qw^wӺ&a3$ j2cSB)@QT |=h)[ +2OhD? g ;6&Ffu3#̹|ETdCV@t>`(g=FAR{c&V^@@i^͋z-:oŗ0wX^WEdNj0S|E}=%qBw.zx_%;x=\;NJ81^@~yMD]s=y 3.q6.J9r-L\DVl2STLr| IXf3gՐA$OT\No}P$2< @Ll S8ĤkK@rEr&Wo4w, $W[ʰx5 "7Extv D)?k]ۄ$;K |菤AroֺpܑvxFΦH@)Z)_#ݞDC2Vě Mfz~Y[H5 6Nfـ~spzV?V) {8~nXW|[ˣ%uVKt݂D]å+=3Wԡ4/+(^q4Lw*,"q8/1 GdC@~Voh(FMj:_&xiېFDK E~'>n|*[ic^n5p/D$prr#f}AE8wQh A/ nwQ.ʳދ2%ڣo\'ȽS/oz}B:90 j-طnwHSI R/jeƹ'|`ׁ=  х|?gXW:NrN}0 PFsNzkO.p(?vT{/sbߤYD\fSޒnjXbtY?ʸ9x!64k#==cw<ҤouLMJDIċݡa3aE|wGn}ɀ!r#04iCzPĠt1(bb.a5{0Fg?;z7,Uk mʠjd†;Gz>I\sI~j YvWq\vmrA!chŰ:X)Sp|WjJ@.Հ Aj 5(ϝdslר`s^YңJ#B"1n:! <*O1eѳoSÓьOz.)Q(pRfm/ÝP^?dfBǐR9LL:EahqڦdoV,dp %T! GF&VL"郐i8+gjFwǸppA.sL B&F/)Lhil ~)8f;M|D:kRϤVg&iwД(V올@O+jiDZJ^!̴.!ӁdKPsg$#8-_RSݢҏwS/:W Jw=<"Ms: oHҊ8Cz_VR9)gfMdR\Hn_d+6i1 !Xeɖ>g xOřax#]gK6 ]8j/A"?h s*z c0;/GGy f1|&->]]T&FĽ--DN;'(-|}JP^R>FSu5M:}x<`e~qЌgVtU8䧒"cJe;ҭlc?A?z;OQO` ^H6lc(ut Hj+ y_ Z<B=%Z(a cCbR{ SdP!*_ ewNJ^wtt7WԖQg;J^ߌ-lt *Sfa(VKGA1=~z8,} tCIځQ5,!eACyDV~4v&7`Ek>\`X: q+i\qڲٗtY~kdu* A%Uӳ6aQ߳?a0ك40V?r ?*x @9c:KWp PDdz{FyWUN3q+tlpͽ1s W>G wOSF9tlӛvk*ٝ߂i供5ղ`ɼ?ś(ˇXpքx6)1k wPLDX/Pwg)-.C|Y bqʱu%KӔP|0dz.^Ȅ2M71LM"X+"'FV: lwL75oV%9p'c+ =%Z,]9-&#S7/ . izhĆS׾¿<فoqXaS W^,v~(C Fۓa2+o/^pxr IjpZ-3̕//,+qXcbϺ hIW?Č0g\Ĕ#sZP @@DfhCxı͘r,$)e%0zgZF=|@tppOTlP2*D*~-R@ԭۮy)"GP@ke2]s*9r  /`&heeNkb[N8&dn"(#=5:7l^;nh|kp,E:?&.iFE  7^$*2s 4ڪ:biHaYESOyk-u"BKE oǰqe1e}Lp7$[':d`O>gaqe t?^Gdo8 )G7j<sJm#~%4S UƙUz-%BW=|j:jļl)eU2%~]K~gL>\j$Y#3@z?S+/ʨ&{E y o8FYlao Pڐ:lgM]UU9 GNW.>&NX3=<5#W{ƿ0Q0FDt7zC2~NNK.ϛ(X&|j6,vt,(,V'd }gr 2Of4Rl:ͩBf4V]=Gi2n0oͫ~@ SUl`FժdiuDĬR{o YDH/%XCh7{*msuD`VzV Tq=3Yx1W˴WI1eXy.싇k|fastҨsƑA]`}b!: 5To:X'Kr#d%e;rbK;QH>l؅P&lzIj\ âz9E_ YPU&{ *I\@Ri:o@ +UavشgaAxӶ߬? \UH;mQҒ{*AeU(R4Y~ חZnTi:G( ca:p ãER&iB Ejw(g㳎i7`8ƞ6 wkdsd%stwk Y][18/0`>y.䇳>`Gtf{؉m# $CB<;|}PPm*ͦ9"Qt{& (Qy7[P-vEz2ž(ᢀ5+50h[>*?Y5Lh~9z(o+qXr{+rŞ?ux X~t $67JF*mȼt`PՐՐ7Ao{||P wVx~r1x^[dw}"Ʌ%/L:J3^54rQ‡x ruwmvg]x}-4$d'1C 4O& j; =Z=q)•>fLK[: ?aFc _[(f;;`BTi~bvxpC}&Y4EaeZN,j6iݙ^GtԐ$(n*J%pwQ Kr>oINjU\jz41,+uFOk\8`G{4Y'xSU1قĶS ou Č'v` A #?u6A { #}O˃.s駶9 -dP@ؕ32Obqx@Y]WtC|+S\~5%[ZsTQ睞o}R.cN-Tyz'V?/R/^@m4 =`3P-!wr]VD;}a14ZܨJ:bvrTxj畊_haW7?ܡÿ7@`YcSߣt8[hǑiu4qZ5 uބK6f`v՘Z \4;*h;&ED2V=E&*&[}}Eu]LS*  8'Τt,+9Z#C9 @' DJ&E3!L7oU:IgXsFcֿ<&VoebRveт&{HC`:ɡY&L3ȢRX`_mzR0GU t3,`9 (zL/ 986Xˊ MXdk~O_֩j;Qtd24bwhl"Q>ibGyg, S{ ?ֽ[8MhRvA;4ĹϷm[ۓ\ghjOig .{]Q))_E-#ewm cqCtR|: +}:'kPУ؎izEף#Ln9ސ{PJ NMJ<P$ }}"YYgb J xvOmO:=}”g[?yhn"?ĭ MTrz0Ew{1nXr,m1+^.o[A5bNR{ggn@U݃f1d{s܆{g2߂fm^ &&~9fK'u3A|&$L Ij;F^osͯ2Sa9&>H'G Kԏ(F. -xe>x-o/>l;?5' T"Epg2tt;f(6mcc%(:Y b(R.?=ȋM7. SDNM BA}|2rbܧ4IQAwK{ƋEK=r6-*%x~D+8Lڔ$M?P% t!?lj_^+=z6z~dԞ'4T|IHm}j6؀pȹ)k2RS$ʀl6җmEv;4<+#b%yNJnXŽ13fȎA&7DGܤgR{-57!n*[QC}т^=M:<sa3 Z= B{;FsI!hb~I(vU Z~w\[ ٌi3jnY Sā8Q-zu?u&!2 xgq?lH8 MGi5l shy$e d_mC?-̷+5LTR- 4So<|vS%J:Dݪ~IJ`,F2l XUk4Ӽ*HWq>M^3-? 9p৺5ٞL&m;6_ X@V)ӹH&N9]"R ͗#0ƀGHbčtlTi<`| _ajYߤ$ewk+^֫P9uMtRldڳy|bG2G#/ruUБGRǘpB5|$%YBYMdD:IAt֨t6:x9mmT61Q^*ƂIݍ.>  ^/y96d%/yV,T:RM'7Q*%%ze-U䥞)!l>WPT`dyjSp|?ЌcAF %k M kBk߬!Km\oGG/db_ ШJ-2j=>FV]7] !a\CtH?rNy_Ruǹ;HCm? j(ܝ9=,:U",Bf<=>677.g()yc);{~y!v#9@y:(j}iu~'$D-ImztG%ɴxZ_n'+zG+ &#V'P?Q|T 9݉?LXEeL—cJ ֔삓Փimv!h/o H("BdQM s]Q\kU!$W/Ϗ[m\rx:̱2_f+%Į^ëCæTHggS{t}Y-1kLSJVJͥ(7WѦц:-6(FzpR% smp~U:-_#*#qcN/W$(h݃oy &F]F5sjP3Wܵܛnl hB?B%}'wjg%oa3WCٖ1GW!Kz~ς|C#v4Yr{>+VtsjYg;쪐9t2c־q(!j6߆I&Z`T8* DŻA|ukBQ>a|U\?A ^/a*yӹ wBZ?r;\Rq~zl4@TF,V>|M8|CZKl7HᒦB[=鎉. &/(U{Ωh!+w;.9֞0*0oJ)Ԡ)N5MLj͇6-!W[wJcB[:xÍ(~-GafJ\'MK1p(g?; y-7RZF֍"M'O\$C Ỉ%Nѷx}6XkLFw: x.% S/@| a'C-! (! .4Îǃ%go'b\>Oʨp,…@iȌxIWDY@Ux?,-;+ܱb &:6!G?NþiNEzcsy:bI!'"x[k yb8[ЎW-=rch:5=dMcf-fTuPE:IDP`az)yRz q\tt;'S̢7`QPzv*s _O> }z?CѳIxV<+*S IOF, jNם{! J4k&h'lXBB!E?@Ɖds;aoG gK2g̡,# U:sW:l@$($p k{T:c9X+}^ Rb ?a/5o8a|4;TIedHɥX,YwSMU5``,aw /![oEoZRyc~}&Ka2_bHK$f`nˉzUBSW-"{0^cŵ2 jڟ{M3q`Zu%m_?UX*߰u圀D選¬s$ހQ%qфc $^o1TY ʥb6it2Zg:j/sJh&\$p[b RBeFe.9Uo{KƊ`""pL4@lu4Yj#xKPU%K>iCsbӮ }5 +͛9ةX%~ƅ 9.gqڜ;d#uO LX:DzM6ȥO)/rBM<ʌ"(8r)-%~ь:W"?:=~VGM$JK`}:^l{/}z,vMJW7xB\Q!ǀi퀒?Vhy*8ʆ.+P:5 qm&r1 F(]|35ҡPSKSBͣ2YG%+-؏ګ\ͷ~~Żu/D}o,GkQIZ;Jc``v F3N)v9?JoB**k Xctx-zX&b pqrZfLfg8$>cYI4k@|/^d{Nyw#6j8mۍ.N3*z~H_~RݵF>ױєi4*e!X ?ȷ9/ qu Ovd>\7 HC.Ft~5]z Q=>Gm\2༥rc ݷ`mPx2ɲ䣖̊:ڛaVsmD6 ꛪsŜW_*A-ݣ.. h,2|aH 9HƶI::5AGQtfiG+:r1τ\6 ǯcJ%ѷY bx&!-n~;3k L'izte涣qI2UYSa'9G|,GҞj) 71mj=atnHqT a/ۛK([Yob?SADPn@kHʡTVOI7jC\s~$?@-mNNk* y g 4?DX)h ͭ){Sh8AT54D*)ʷ[SIkj vo.9!7AwlhI9e=΀+.DLj] c|K8 Xhv9HpBnn3.ec*JiѝWf2SS67#Z9۬Y+C;ZȞ+nNT0}*Xx2;dH|pFѬ̡)noqw}".JTVRܡ_`i.j{C\im)uo[rߴҌh5瘽(M[)]`n*cI_o)?%눊[Pώ}%!/FVAݓu>CR;+bkjwT}Y& 7xWX[J/);/_T(M[X:vY\;xt\7ve 'is+&0#$˝O9H>*!W"Z)m$ιPVʻ3#KFT:vlוW~Δ1?e-nWMKs'gZut\Nz|mf=Z֌L8KZ u#>j<+*!*u6 aÂO2&h CE fF%:{q@jɋm+V+2 *>4>rL H #ELoɥ^Ͻ=B1JQ u,~ ;9㫘r/X:"R<: <'; hz޺J/1㰸n&mǭn15=]{ITxU71x-x;G-GjpgR?G!qŽnWv4m[NQچPظ!mp YZ