libsemanage-2.9-9.el8 >  A bU]G_ vqЙRQ3/hChkx8Y2;o[9)*tH}&Dt;|-󀣤A T<bm/,xqbְ(xn5ͮлg6 MVvؤ6+_bY)1#.rp컗:ɡ_IJ#sv.nO64աi*4@ fuh}ućF}Ku r[R:E_xH(}h`)$3h&?Fyx*oCpypKjR~GC4B h.@IqgSЭ`俪.7ds9^+ /aquKE'-T z]p2(gVncsZ6a377db7281796e6de483788313d217f258ea0f9c37a48a66c6c0bd83ea2bde97fa575f41aefc3c113ed6f483b019fdfe6b98441XbU]s r x xk)D{gզF!&pʚ* . NpZYؽ6ʰPtXƛ<d> GtkɊ b #F:٥_6N@-FQ_Cw:}]yVr;t\ B]2`M@y= jS#)I_FQq+AV*@}czNÏfoD,u0 ۑ-T:rv%4ۜ%oࡲ3Le {l[&srj<jo,hguMwX"K[Iç?曪Ҫ2Uz|%W  bh?W8.\(ab>Z*<p<`?Pd  C 39@ t        )  \   0 d| ( 8 9@:>HG H I( X8YT\x ]լ ^U b+dإeتfحlدt u v0w4 xh yڜ LClibsemanage2.99.el8SELinux binary policy manipulation librarySecurity-enhanced Linux is a feature of the Linux® kernel and a number of utilities with enhanced security functionality designed to add mandatory access controls to Linux. The Security-enhanced Linux kernel contains new architectural components originally developed to improve the security of the Flask operating system. These architectural components provide general support for the enforcement of many kinds of mandatory access control policies, including those based on the concepts of Type Enforcement®, Role-based Access Control, and Multi-level Security. libsemanage provides an API for the manipulation of SELinux binary policies. It is used by checkpolicy (the policy compiler) and similar tools, as well as by programs like load_policy that need to perform specific transformations on binary policies such as customizing policy boolean settings.bx86-01.mbox.centos.org>CentOSCentOSLGPLv2+CentOS Buildsys Unspecifiedhttps://github.com/SELinuxProject/selinux/wikilinuxi686 W$Hg@ A큤AAAA큤AAbbbbbbbb\>bbbb52cc4740fec55f6ba36d00c69b1606980afd07e21fbf31964501cf3aa8b75e633a23b45e0b5aab967bd554e6e3f7cdce0f29f8ed17747decb3b4c50e1db1bb8c6095e9ffa777dd22839f7801aa845b31c9ed07f3d6bf8a26dc5d2dec8ccc0ef384784eec44016813901d65bc184113f31f00808f0e31b6b151d9be317ee8610292814cd11a068c5cc9c37cba04e770bb0f3de67d008caf757168c172cf52a580../../../../usr/lib/libsemanage.so.1rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootlibsemanage-2.9-9.el8.src.rpmconfig(libsemanage)libsemanagelibsemanage(x86-32)libsemanage.so.1libsemanage.so.1(LIBSEMANAGE_1.0)libsemanage.so.1(LIBSEMANAGE_1.1)libsemanage.so.1(LIBSEMANAGE_3.4)@@@@@@@@@@@@@@ @@@@    @audit-libsbzip2-libsconfig(libsemanage)libaudit.so.1libbz2.so.1libc.so.6libc.so.6(GLIBC_2.0)libc.so.6(GLIBC_2.1)libc.so.6(GLIBC_2.1.2)libc.so.6(GLIBC_2.1.3)libc.so.6(GLIBC_2.14)libc.so.6(GLIBC_2.2)libc.so.6(GLIBC_2.28)libc.so.6(GLIBC_2.3)libc.so.6(GLIBC_2.3.4)libc.so.6(GLIBC_2.4)libc.so.6(GLIBC_2.8)libselinux(x86-32)libselinux.so.1libsepol.so.1libsepol.so.1(LIBSEPOL_1.0)libsepol.so.1(LIBSEPOL_1.1)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)rtld(GNU_HASH)2.9-9.el82.9-13.0.4-14.6.0-14.0-15.2-14.14.3bb@b8`@_@_R^]µ\@\ @[%@[@[[Zz@ZK@ZZI@ZZ@Z}@Zz@Zu@ZTZfY@YyYJYV@Y@Yx@Y.XX @X@X@XJWH@W9W@Wk@W,@V@V@VIVɦV=@V9@UU@UUUa@UUQ@U+S@S@S @SSShS8@RRrF@R^RNRB@R@-@R:@R-@R)QdQ@QzQu&@QfQQ@P@PP@PQP@P@PP O@O0@Oĺ@OtNO;@OO@N@N@N@N@NNNw.Nw.Np@N\NLN1O@Md@MM)MQ0@Mt@MLuLF@KKsKKKf@K{@Ka|@KTM@K(K@KJJ@J@J$JJJ#J#Jyt@JjJW-@JS8J,@I@II2Io%@Ik0Ik0I7@I7@I1.HN@HN@HN@HǶH*H@H@HW@H=I@GOGOGOG@G[@G G@GGGW@GSGNG5@G0W@G'@FFFFIFIF&@FvFɂ@FFF` @F9F/BF/BE@E@EEɿ@EEEx@El$E4D@D@D@DC@DDD@D@D{DDX@D@D@Dhm@Dhm@Dhm@D_2D?D*vD*vDDCCi@CtC@C@CCC@CC @Cǖ@Cǖ@Cǖ@Cǖ@C@C[C[C @C @C,C @C @CCf@CqCC}@C+CBCYCYC{@Cx|@CtCtCqCp@Cp@CoACiCf@CbC`@C_oC^@C\CX@CWCTCTCTCP@COCLCJWCFc@CBnCA@C:C3@C1K@C/C(C@C Vit Mojzis - 2.9-9Vit Mojzis - 2.9-8Vit Mojzis - 2.9-7Petr Lautrbach - 2.9-6Petr Lautrbach - 2.9-5Vit Mojzis - 2.9-4Vit Mojzis - 2.9-3Vit Mojzis - 2.9-2Petr Lautrbach - 2.9-1Petr Lautrbach - 2.8-5Petr Lautrbach - 2.8-4Petr Lautrbach - 2.8-3.1Petr Lautrbach - 2.8-2Petr Lautrbach - 2.8-1Petr Lautrbach - 2.8-0.rc3.1Petr Lautrbach - 2.8-0.rc2.1Petr Lautrbach - 2.8-0.rc1.1Petr Lautrbach - 2.7-12Petr Lautrbach - 2.7-11Petr Lautrbach - 2.7-10Igor Gnatenko - 2.7-9Fedora Release Engineering - 2.7-8Igor Gnatenko - 2.7-7Iryna Shcherbina - 2.7-6Petr Lautrbach - 2.7-5Petr Lautrbach - 2.7-4Zbigniew Jędrzejewski-Szmek - 2.7-3Zbigniew Jędrzejewski-Szmek - 2.7-2Petr Lautrbach - 2.7-1Fedora Release Engineering - 2.6-6Fedora Release Engineering - 2.6-5Petr Lautrbach - 2.6-4Petr Lautrbach - 2.6-3Petr Lautrbach - 2.6-2Petr Lautrbach - 2.6-1.1Fedora Release Engineering - 2.5-10Charalampos Stratakis - 2.5-9Petr Lautrbach 2.5-8Petr Lautrbach 2.5-7Fedora Release Engineering - 2.5-6Petr Lautrbach - 2.5-5Petr Lautrbach - 2.5-4Petr Lautrbach - 2.5-3Petr Lautrbach 2.5-2Petr Lautrbach 2.5-1Petr Lautrbach 2.5-0.1.rc1Fedora Release Engineering - 2.4-6Robert Kuska - 2.4-5Petr Lautrbach 2.4-4Adam Jackson 2.4-3Petr Lautrbach 2.4-2Petr Lautrbach 2.4-0.6Fedora Release Engineering - 2.3-7Petr Lautrbach 2.4-0.5Petr Lautrbach 2.4-0.4Petr Lautrbach 2.4-0.3Fedora Release Engineering - 2.3-6Miroslav Grepl - 2.3-5Tom Callaway - 2.3-4Fedora Release Engineering - 2.3-3Kalev Lember - 2.3-2Dan Walsh - 2.3-1Dan Walsh - 2.2-3Dan Walsh - 2.2-2Dan Walsh - 2.2-1Dan Walsh - 2.1.10-14Dan Walsh - 2.1.10-13Dan Walsh - 2.1.10-12Dan Walsh - 2.1.10-11Dan Walsh - 2.1.10-10Dan Walsh - 2.1.10-9Dan Walsh - 2.1.10-8Dan Walsh - 2.1.10-7Dan Walsh - 2.1.10-6Dan Walsh - 2.1.10-5Dan Walsh - 2.1.10-4Dan Walsh - 2.1.10-3Dan Walsh - 2.1.10-2Dan Walsh - 2.1.10-1Dan Walsh 2.1.9-4Dan Walsh 2.1.9-3Dan Walsh - 2.1.9-2Dan Walsh - 2.1.9-1David Malcolm - 2.1.8-6David Malcolm - 2.1.8-5Fedora Release Engineering - 2.1.8-4Dan Walsh - 2.1.8-3Dan Walsh - 2.1.8-2Dan Walsh - 2.1.8-1Dan Walsh - 2.1.7-2Dan Walsh - 2.1.7-1Dan Walsh - 2.1.6-3Fedora Release Engineering - 2.1.6-2Dan Walsh - 2.1.6-2Dan Walsh - 2.1.6-1Dan Walsh - 2.1.5-4Dan Walsh - 2.1.5-3Dan Walsh - 2.1.5-2Dan Walsh - 2.1.5-1Dan Walsh - 2.1.4-2Dan Walsh - 2.1.4-2Dan Walsh - 2.1.4-1Dan Walsh - 2.1.3-2Dan Walsh - 2.1.3-1Dan Walsh - 2.1.2-1Dan Walsh - 2.1.0-1Dan Walsh - 2.0.46-6Dan Walsh - 2.0.46-5Dan Walsh - 2.0.46-4Fedora Release Engineering - 2.0.46-3David Malcolm - 2.0.46-2Dan Walsh - 2.0.46-1Thomas Spura - 2.0.45-6David Malcolm - 2.0.45-5David Malcolm - 2.0.45-4Dan Walsh - 2.0.45-3Dan Walsh - 2.0.45-2Dan Walsh - 2.0.45-1Dan Walsh - 2.0.44-2Dan Walsh - 2.0.44-1Dan Walsh - 2.0.43-4Dan Walsh - 2.0.43-3Dan Walsh - 2.0.43-2Dan Walsh - 2.0.43-1Dan Walsh - 2.0.42-1Dan Walsh - 2.0.41-1Dan Walsh - 2.0.39-1Dan Walsh - 2.0.38-2Dan Walsh - 2.0.38-1Dan Walsh - 2.0.37-1Dan Walsh - 2.0.36-2Dan Walsh - 2.0.36-1Dan Walsh - 2.0.35-2Dan Walsh - 2.0.35-1Fedora Release Engineering - 2.0.33-3Dan Walsh - 2.0.33-2Dan Walsh - 2.0.33-1Dan Walsh - 2.0.32-1Dan Walsh - 2.0.31-5Dan Walsh - 2.0.31-4Fedora Release Engineering - 2.0.31-3Dan Walsh - 2.0.31-2Dan Walsh - 2.0.31-1Dan Walsh - 2.0.30-3Ignacio Vazquez-Abrams - 2.0.30-2Dan Walsh - 2.0.30-1Ignacio Vazquez-Abrams - 2.0.29-2Dan Walsh - 2.0.28-1Dan Walsh - 2.0.28-2Dan Walsh - 2.0.28-1Dan Walsh - 2.0.27-3Dan Walsh - 2.0.27-2Dan Walsh - 2.0.27-1Dan Walsh - 2.0.26-1Dan Walsh - 2.0.25-3Tom "spot" Callaway - 2.0.25-2Dan Walsh - 2.0.25-1Dan Walsh - 2.0.24-1Dan Walsh - 2.0.23-1Dan Walsh - 2.0.22-1Dan Walsh - 2.0.20-1Dan Walsh - 2.0.19-1Dan Walsh - 2.0.18-1Dan Walsh - 2.0.16-1Dan Walsh - 2.0.15-2Dan Walsh - 2.0.15-1Dan Walsh - 2.0.14-5Dan Walsh - 2.0.14-3Dan Walsh - 2.0.14-2Dan Walsh - 2.0.14-1Dan Walsh - 2.0.12-1Dan Walsh - 2.0.11-1Dan Walsh - 2.0.10-2Dan Walsh - 2.0.10-1Dan Walsh - 2.0.9-1Dan Walsh - 2.0.6-2Dan Walsh - 2.0.6-1Dan Walsh - 2.0.5-1Dan Walsh - 2.0.4-1Dan Walsh - 2.0.3-5Dan Walsh - 2.0.3-4Dan Walsh - 2.0.3-3Dan Walsh - 2.0.3-2Dan Walsh - 2.0.3-1Dan Walsh - 2.0.2-1Dan Walsh - 2.0.1-2Dan Walsh - 2.0.1-1Dan Walsh - 2.0.0-1Dan Walsh - 1.10.1-1Dan Walsh - 1.9.2-1Dan Walsh - 1.9.1-3Jeremy Katz - 1.9.1-2Dan Walsh - 1.9.1-1Dan Walsh - 1.8-1Dan Walsh - 1.6.17-1Dan Walsh - 1.6.16-3Dan Walsh - 1.6.16-2Dan Walsh - 1.6.16-1Dan Walsh - 1.6.15-1Dan Walsh - 1.6.13-3Dan Walsh - 1.6.13-2Dan Walsh - 1.6.13-1Dan Walsh - 1.6.12-2Dan Walsh - 1.6.12-1Dan Walsh - 1.6.11-1Dan Walsh - 1.6.9-1Dan Walsh - 1.6.8-2Dan Walsh - 1.6.8-1Dan Walsh - 1.6.7-3Dan Walsh - 1.6.7-2Dan Walsh - 1.6.7-1Dan Walsh - 1.6.6-1Dan Walsh - 1.6.3-1Dan Walsh - 1.6.2-2Dan Walsh - 1.6.2-1Dan Walsh - 1.6-1Dan Walsh - 1.5.28-1Dan Walsh - 1.5.26-1Dan Walsh - 1.5.23-1Jesse Keating - 1.5.21-2.1Dan Walsh - 1.5.21-2Dan Walsh - 1.5.21-1Jesse Keating - 1.5.20-1.1Dan Walsh 1.5.20-1Dan Walsh 1.5.19-1Dan Walsh 1.5.18-1Dan Walsh 1.5.16-1Dan Walsh 1.5.15-1Dan Walsh 1.5.14-2Dan Walsh 1.5.14-1Dan Walsh 1.5.9-1Dan Walsh 1.5.8-1Dan Walsh 1.5.6-1Dan Walsh 1.5.4-2Dan Walsh 1.5.4-1Dan Walsh 1.5.3-3Dan Walsh 1.5.3-2Dan Walsh 1.5.3-1Dan Walsh 1.5.1-2Dan Walsh 1.5.1-1Jesse Keating Dan Walsh 1.4-1Dan Walsh 1.3.64-1Dan Walsh 1.3.63-1Dan Walsh 1.3.61-1Dan Walsh 1.3.59-1Dan Walsh 1.3.56-2Dan Walsh 1.3.56-1Dan Walsh 1.3.53-3Dan Walsh 1.3.53-2Dan Walsh 1.3.53-1Dan Walsh 1.3.52-1Dan Walsh 1.3.51-1Dan Walsh 1.3.48-1Dan Walsh 1.3.43-1Dan Walsh 1.3.41-1Dan Walsh 1.3.39-1Dan Walsh 1.3.38-1Dan Walsh 1.3.36-1Dan Walsh 1.3.35-1Dan Walsh 1.3.34-1Dan Walsh 1.3.32-1Dan Walsh 1.3.30-1Dan Walsh 1.3.28-1Dan Walsh 1.3.24-1Dan Walsh 1.3.20-1Dan Walsh 1.3.20-1Dan Walsh 1.3.18-1Dan Walsh 1.3.14-1Dan Walsh 1.3.11-1Dan Walsh 1.3.10-1Dan Walsh 1.3.9-1Dan Walsh 1.3.8-1Dan Walsh 1.3.7-1Dan Walsh 1.3.5-1Dan Walsh 1.3.4-1Dan Walsh 1.3.3-1Dan Walsh 1.3.2-1Dan Walsh 1.3.1-1Dan Walsh 1.1.6-1Dan Walsh 1.1.3-1- allow spaces in user/group names (#2042408) - always write kernel policy when check_ext_changes is specified (#2089802)- Bump release to get around OSCI issues- Trivial style fixes - Free contents of modkey in semanage_direct_remove - Fix USE_AFTER_FREE (CWE-672) in semanage_direct_write_langext() - add missing include to boolean_record.c - move module hashing into libsemanage - move compressed file handling into a separate object - clean up semanage_direct_commit() a bit - optionally rebuild policy when modules are changed externally - add command-line option to detect module changes (#2049186)- sync filesystem with sandbox (#1913224)- Revert "genhomedircon: check usepasswd" (rhbz#1871786) - semanage.conf - improve usepasswd=False explanation (rhbz#1871786) - semanage.conf - expand list of ignoredirs (rhbz#1871786)- genhomedircon: check usepasswd (rhbz#1871786)- Fsync final files before rename (#1838762)- Add support for DCCP and SCTP protocols (#1563742)- SELinux userspace 2.9 release- genhomedircon - improve handling large groups- Fix RESOURCE_LEAK and USE_AFTER_FREE coverity scan defects- reset umask before creating directories - Include user name in ROLE_REMOVE audit events- Don't build the Python 2 subpackage (#1567359)- SELinux userspace 2.8 release- SELinux userspace 2.8-rc3 release candidate- SELinux userspace 2.8-rc2 release candidate- SELinux userspace 2.8-rc1 release candidate- build: Replace PYSITEDIR with PYTHONLIBDIR - direct_api.c: Fix iterating over array (#1557468)- Revert "remove access() check to make setuid programs work" (#1557468)- properly check return value of iterate function - Use umask(0077) for fopen() write operations - Return commit number if save-previous false - Allow tmp files to be kept if a compile fails - build: follow standard semantics for DESTDIR and PREFIX - Improve warning for installing disabled module - silence clang static analyzer report - remove access() check to make setuid programs work- Escape macros in %changelog- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild- Switch to %ldconfig_scriptlets- Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)- free genhomedircon fallback user - Rebuild with libsepol-2.7-3 and libselinux-2.7-6- Add support for listing fcontext.homedirs file (#1409813)- Add Provides for the old names without %_isa- Python 2 binary package renamed to python2-libsemanage See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3 - Python 3 binary package renamed to python3-libsemanage- Update to upstream release 2017-08-04 - Use 'sefcontext_compile -r' when it's run during SELinux policy build- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- Follow upstream and rename _semanage.so to _semanage.cpython-36m-x86_64-linux-gnu.so- Do not list duplicate port entries after setting a boolean (#1439875)- Fix FTBFS - fatal error (#1427903)- Update to upstream release 2016-10-14- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild- Rebuild for Python 3.6- Fixes bug preventing the installation of base modules - make distclean target work - Do not always print a module name warning - Use pp module name instead of filename when installing module - tests: Do not force using gcc - genhomedircon: remove hardcoded refpolicy strings - genhomedircon: add support for %group syntax - genhomedircon: generate contexts for logins mapped to the default user - Validate and compile file contexts before installing - Swap tcp and udp protocol numbers- Rebuilt with libsepol-2.5-9 and libselinux-2.5-11- https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages- Sort object files for deterministic linking order - Support overriding Makefile RANLIB - Respect CC and PKG_CONFIG environment variable- Fix multiple spelling errors - genhomedircon: %{USERID} and %{USERNAME} support and code cleanup- Enable expand-check by default (#1319652)- Use fully versioned arch-specific requires- Update to upstream release 2016-02-23- Update to upstream rc1 release 2016-01-07- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild- Rebuilt for Python3.5 rebuild- Save homedir_template in the policy store for genhomedircon https://bugs.gentoo.org/558686- Pass ldflags into the build so hardening works- semanage_migrate_store: use /usr/bin/python3 - move semanage_migrate_store script to libsemanage-python3- Allow to use compressed modules without a compression extension- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- add /var/lib/selinux/tmp directory- semanage_migrate_store: add -r option for migrating inside chroots- Update to upstream release 2.4- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild- Skip policy module re-link when only setting booleans. * patch from Stephen Smalley- fix license handling- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild- Rebuilt for https://fedoraproject.org/wiki/Changes/Python_3.4- Update to upstream * Fix memory leak in semanage_genhomedircon from Thomas Hurd.- libsemanage: fix memory leak in semanage_genhomedircon - Patch from THomas Hurd- Move semanage.conf man page from devel package to main package- Update to upstream * Avoid duplicate list entries from Dan Walsh. * Add audit support to libsemanage from Dan Walsh. * Remove policy.kern and replace with symlink from Dan Walsh. * Apply a MAX_UID check for genhomedircon from Laurent Bigonville. * Fix man pages from Laurent Bigonville.- Cleanup handling of missing mls_range to fix problems with useradd -Z - Fix auditing of login record changes, roles were not working correctly. Resolves: #952237- Fix errors found by coverity Resolves: #952237- Do not fail on missing SELinux User Record when adding login record- Add msg to audit records- Do not write error message to screen when looking for previous record for auditing. - Add mls_range from user record if the MLS range is not specified by the seuser add record. - Error out if seuser or mls range is not specified when adding user records- Create symlink from policy.kern to active kernel.- Unlink policy.kern when done to save space.- Move handling of role audit records into the library - Patch stops semanage from removing user record while in use- Remove dependance on selinux-policy, /etc/selinux should be owned by libsemanage, and selinux-policy can require it.- Allways build python3 version-- Fix test suite to build- Revert some changes which are causing the wrong policy version file to be created- Update to upstream * Add sefcontext_compile to compile regex everytime policy is rebuilt * Cleanup/fix enable/disable/remove module. * redo genhomedircon minuid * fixes from coverity * semanage_store: do not leak memory in semanage_exec_prog * genhomedircon: remove useless conditional in get_home_dirs * genhomedircon: double free in get_home_dirs * fcontext_record: do not leak on error in semanage_fcontext_key_create * genhomedircon: do not leak on failure in write_gen_home_dir_context * semanage_store: do not leak fd * genhomedircon: do not leak shells list * semanage_store: do not leak on strdup failure * semanage_store: rewrite for readability- Add selinux-policy as a requires to get /etc/selinux owned- Update to latest patches from eparis/Upstream - libsemanage: fixes from coverity - libsemange: redo genhomedircon minuid- Fix handling of missing semanage permissive -d foo, not failing correctly - Previous to this fix the first module beginning with foo would get deleted.- Update to upstream * libsemanage: do not set soname needlessly * libsemanage: remove PYTHONLIBDIR and ruby equivalent * do boolean name substitution * Fix segfault for building standard policies.- rebuild for https://fedoraproject.org/wiki/Features/Python_3.3- remove rhel logic from with_python3 conditional- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- Attempt to allocate memory for selinux_binary_policy_path and free memory - allocated by asprintf.- Fix asprintf within an asprintf call- Update to upstream * remove build warning when build swig c files * additional makefile support for rubywrap * ignore 80 column limit for readability * semanage_store: fix snprintf length argument by using asprintf * Use default semanage.conf as a fallback * use after free in python bindings- Apply patch from Sven Vermeulen to fix problem with python3 bindings.- Update to upstream * Alternate path for semanage.conf * do not link against libpython, this is considered bad in Debian * Allow to build for several ruby version * fallback-user-level- Check in correct patch.- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild- Add patch form Xin Ouyang to make library use private semanage.conf-Update to upstream * add ignoredirs config for genhomedircon * Fallback_user_level can be NULL if you are not using MLS- Rebuild with latest libsepol- Rebuild with latest libsepol- Add support for ignoredirs param in /etc/selinux/semanage.conf- Upgrade to upstream * regenerate .pc on VERSION change * maintain mode even if umask is tighter * semanage.conf man page * create man5dir if not exist- Fix handling of umask, so files get created with the correct label.- Add Guido Trentalancia semanage.conf man page-Update to upstream * Create a new preserve_tunables flag * tree: default make target to all not * fix semanage_store_access_check calling arguments- Add support for preserving tunables-Update to upstream * python wrapper makefile changes-Update to upstream 2.1.2 2011-08-17 * print error debug info for buggy fc * introduce semanage_set_root and friends * throw exceptions in python rather than return * python3 support. * patch for MCS/MLS in user files 2.1.1 2011-08-01 * Remove generated files, expand .gitignore * Use -Werror and change a few prototypes to support it- Update to upstream * Release, minor version bump- More fixes for disabled modules- Change libsemanage mechanism for handling disabled modules. Now it will only create a flag for a module indicating the module is disabled. MODULE.pp.disabled, it will no longer rename the module. This way we can ship active modules in rpm.- Add semanage_set_selinux_path, to allow semodule to work on alternate selinux pools- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- big reworking of the support-multiple-python-builds patch to deal with PEP 3149: the latest Python 3.2 onwards uses include paths and library names that don't fit prior naming patterns, and so we must query python3-config for this information. To complicate things further, python 2's python-config doesn't understand all of the options needed ("--extension-suffix"). I've thus added new Makefile variables as needed, to be supplied by the specfile by invoking the appropriate config tool (or by hardcoding the old value for "--extension-suffix" i.e. ".so") - rework python3 manifest for PEP 3149, and rebuild for newer python3- Update to upstream * Fix compliation under GCC 4.6 by Justin Mattock- rebuild with python3.2 http://lists.fedoraproject.org/pipermail/devel/2010-August/141368.html- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild- add python3 subpackage- Fix -devel package to point at the correct shared library- Move shared library to /usr/lib- Update to upstream * Add enable/disable patch support from Dan Walsh. * Add usepasswd flag to semanage.conf to disable genhomedircon using passwd from Dan Walsh. * regenerate swig wrappers- Allow disable of usepasswd- Update to upstream * Replace usage of fmemopen() with sepol_policy_file_set_mem() since glibc < 2.9 does not support binary mode ('b') for fmemopen'd streams.- Cleanup spec file- Splect libsemanage.a into a static subpackage to keep fedora packaging guidelines happy- Rebuild all c programs with -fPIC- Update to upstream * Move libsemanage.so to /usr/lib * Add NAME lines to man pages from Manoj Srivastava- Update to upstream * Move load_policy from /usr/sbin to /sbin from Dan Walsh.- Update to upstream * Add pkgconfig file from Eamon Walsh. * Add semanage_set_check_contexts() function to disable calling setfiles- Update to upstream * make swigify- Dont relabel /root with genhomedircon- Update to upstream * Change semodule upgrade behavior to install even if the module is not present from Dan Walsh. * Make genhomedircon trim excess '/' from homedirs from Dan Walsh.- Update to upstream * Fix persistent dontaudit support to rebuild policy if the dontaudit state is changed from Chad Sellers. - Move load_policy to /sbin- Add enable/disable modules- Update to upstream * Changed bzip-blocksize=0 handling to support existing compressed modules in the store.- Make sure /root is not used in genhomedircon- Revert hard linking of files between tmp/active/previous. - Enable configuration of bzip behavior from Stephen Smalley. - bzip-blocksize=0 to disable compression and decompression support. - bzip-blocksize=1..9 to set the blocksize for compression. - bzip-small=true to reduce memory usage for decompression.- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- Put check for /root back into genhomedircon- Update to upstream- Update to upstream * Ruby bindings from David Quigley.- Return error on invalid file- Fix typo- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild- Fix link to only link on sandbox- Update to upstream * Policy module compression (bzip) support from Dan Walsh. * Hard link files between tmp/active/previous from Dan Walsh.- Fix up patch to get it upstreamed- Rebuild for Python 2.6- Add semanage_mls_enabled() interface from Stephen Smalley.- Rebuild for Python 2.6- Update to upstream * Add USER to lines to homedir_template context file from Chris PeBenito.- Add compression support- Update to upstream * allow fcontext and seuser changes without rebuilding the policy from Dan Walsh- Additional fixes for Don't rebuild on fcontext or seuser modifications- Don't rebuild on fcontext or seuser modifications- Update to upstream * Modify genhomedircon to skip groupname entries. Ultimately we need to expand them to the list of users to support per-role homedir labeling when using the groupname syntax.- Update to upstream * Fix bug in genhomedircon fcontext matches logic from Dan Walsh. Strip any trailing slash before appending /*$.- Another fix for genhomedircon- fix license tag- Update to upstream * Do not call genhomedircon if the policy was not rebuilt from Stephen Smalley. Fixes semanage boolean -D seg fault (bug 441379).- Update to upstream * make swigify- Update to upstream * Use vfork rather than fork for libsemanage helpers to reduce memory overhead as suggested by Todd Miller.- Update to upstream * Free policydb before fork from Joshua Brindle. * Drop the base module immediately after expanding to permit memory re-use from Stephen Smalley.- Update to upstream * Use sepol_set_expand_consume_base to reduce peak memory usage when using semodule- Update to upstream * Fix genhomedircon to not override a file context with a homedir context from Todd Miller.- Update to upstream * Fix spurious out of memory error reports. * Merged second version of fix for genhomedircon handling from Caleb Case.- Update to upstream * Merged fix for genhomedircon handling of missing HOME_DIR or HOME_ROOT templates from Caleb Case.- Stop differentiating on user for homedir labeling- Update to upstream * Fix genhomedircon handling of shells and missing user context template from Dan Walsh. * Copy the store path in semanage_select_store from Dan Walsh. - Add expand-check=0 to semanage.conf- Fix handling of /etc/shells so genhomedircon will work- Allow semanage_genhomedircon to work with out a USER int homedir.template- Fix semanage_select_store to allocate memory, fixes crash on invalid store- Upgrade to latest from NSA * Call rmdir() rather than remove() on directory removal so that errno isn't polluted from Stephen Smalley. * Allow handle_unknown in base to be overridden by semanage.conf from Stephen Smalley.- Upgrade to latest from NSA * ustr cleanups from James Antill. * Ensure that /root gets labeled even if using the default context from Dan Walsh.- Upgrade to latest from NSA * Fix ordering of file_contexts.homedirs from Todd Miller and Dan Walsh.- Fix sort order on generated homedir context- Upgrade to latest from NSA * Fix error checking on getpw*_r functions from Todd Miller. * Make genhomedircon skip invalid homedir contexts from Todd Miller. * Set default user and prefix from seusers from Dan Walsh. * Add swigify Makefile target from Dan Walsh.- Upgrade to latest from NSA * Pass CFLAGS to CC even on link command, per Dennis Gilmore. * Clear errno on non-fatal errors to avoid reporting them upon a later error that does not set errno. * Improve reporting of system errors, e.g. full filesystem or read-only filesystem from Stephen Smalley. - Fix segfault in genhomedircon when using bad user names- Fix genhomedircon code to only generate valid context - Fixes autorelabel problem- Upgrade to latest from NSA * Change to use getpw* function calls to the _r versions from Todd Miller.- Upgrade to latest from NSA- Upgrade to latest from NSA * Allow dontaudits to be turned off via semanage interface when updating policy- Add ability to load a policy without dontaudit rules -- Rebuild to fix segfault on x86 platforms, swigify on each build- Rebuild for rawhide- Apply patch to fix dependencies in spec file from Robert Scheck- Upgrade to latest from NSA * Fix to libsemanage man patches so whatis will work better from Dan Walsh- Upgrade to latest from NSA - Merged optimizations from Stephen Smalley. - do not set all booleans upon commit, only those whose values have changed - only install the sandbox upon commit if something was rebuilt- Add SELinux to Man page Names so man -k will work- Merged dbase_file_flush patch from Dan Walsh. - This removes any mention of specific tools (e.g. semanage) - from the comment header of the auto-generated files, - since there are multiple front-end tools.- Upgrade to latest from NSA * Merged Makefile test target patch from Caleb Case. * Merged get_commit_number function rename patch from Caleb Case. * Merged strnlen -> strlen patch from Todd Miller.- Upgrade to latest from NSA * Merged python binding fix from Dan Walsh. * Updated version for stable branch.- Upgrade to latest from NSA * Merged patch to optionally reduce disk usage by removing the backup module store and linked policy from Karl MacMillan * Merged patch to correctly propagate return values in libsemanage- Apply Karl MacMillan patch to get proper error codes.- rebuild against python 2.5- Upgrade to latest from NSA * Merged patch to compile wit -fPIC instead of -fpic from Manoj Srivastava to prevent hitting the global offest table limit. Patch changed to include libselinux and libsemanage in addition to libsepol.- Upgrade to latest from NSA * Updated version for release.- Upgrade to latest from NSA * Merged patch to skip reload if no active store exists and the store path doesn't match the active store path from Dan Walsh. * Merged patch to not destroy sepol handle on error path of connect from James Athey. * Merged patch to add genhomedircon path to semanage.conf from James Athey.- Fix semanage to not load if is not the correct policy type and it is installing- Fix requires lines- Upgrade to latest from NSA * Make most copy errors fatal, but allow exceptions for file_contexts.local, seusers, and netfilter_contexts if the source file does not exist in the store.- Upgrade to latest from NSA * Merged separate local file contexts patch from Chris PeBenito. * Merged patch to make most copy errors non-fatal from Dan Walsh.- Change other updates to be non-fatal- Change netfilter stuff to be non-fatal so update can proceed.- Upgrade to latest from NSA * Merged netfilter contexts support from Chris PeBenito.- Rebuild for new gcc- Upgrade to latest from NSA * Merged support for read operations on read-only fs from Caleb Case (Tresys Technology).- Upgrade to latest from NSA * Lindent. * Merged setfiles location check patch from Dan Walsh.- Upgrade to latest from NSA * Merged several fixes from Serge Hallyn: dbase_file_cache: deref of uninit data on error path. dbase_policydb_cache: clear fp to avoid double fclose semanage_fc_sort: destroy temp on error paths- Handle setfiles being in /sbin or /usr/sbin- Upgrade to latest from NSA * Updated default location for setfiles to /sbin to match policycoreutils. This can also be adjusted via semanage.conf using the syntax: [setfiles] path = /path/to/setfiles args = -q -c $@ $< [end]- Spec file cleanup from n0dalus+redhat@gmail.com- Add /usr/include/semanage to spec file- Upgrade to latest from NSA * Merged fix warnings patch from Karl MacMillan.- Upgrade to latest from NSA * Merged updated file context sorting patch from Christopher Ashworth, with bug fix for escaped character flag. * Merged file context sorting code from Christopher Ashworth (Tresys Technology), based on fc_sort.c code in refpolicy. * Merged python binding t_output_helper removal patch from Dan Walsh. * Regenerated swig files.- Fix to work with new version of swig - Upgrade to latest from NSA * Merged corrected fix for descriptor leak from Dan Walsh.- Fix leaky descriptor- Upgrade to latest from NSA * Merged Makefile PYLIBVER definition patch from Dan Walsh. * Merged man page reorganization from Ivan Gyurdiev.- Make work on RHEL4 - Upgrade to latest from NSA * Merged abort early on merge errors patch from Ivan Gyurdiev. * Cleaned up error handling in semanage_split_fc based on a patch by Serge Hallyn (IBM) and suggestions by Ivan Gyurdiev. * Merged MLS handling fixes from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged bug fix for fcontext validate handler from Ivan Gyurdiev. * Merged base_merge_components changes from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged paths array patch from Ivan Gyurdiev. * Merged bug fix patch from Ivan Gyurdiev. * Merged improve bindings patch from Ivan Gyurdiev. * Merged use PyList patch from Ivan Gyurdiev. * Merged memory leak fix patch from Ivan Gyurdiev. * Merged nodecon support patch from Ivan Gyurdiev. * Merged cleanups patch from Ivan Gyurdiev. * Merged split swig patch from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged optionals in base patch from Joshua Brindle. * Merged treat seusers/users_extra as optional sections patch from Ivan Gyurdiev. * Merged parse_optional fixes from Ivan Gyurdiev.- bump again for double-long bug on ppc(64)- Fix handling of seusers and users_map file- Upgrade to latest from NSA * Merged seuser/user_extra support patch from Joshua Brindle. * Merged remote system dbase patch from Ivan Gyurdiev.- rebuilt for new gcc4.1 snapshot and glibc changes- Upgrade to latest from NSA * Merged clone record on set_con patch from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged fname parameter patch from Ivan Gyurdiev. * Merged more size_t -> unsigned int fixes from Ivan Gyurdiev. * Merged seusers.system patch from Ivan Gyurdiev. * Merged improve port/fcontext API patch from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged seuser -> seuser_local rename patch from Ivan Gyurdiev. * Merged set_create_store, access_check, and is_connected interfaces from Joshua Brindle.- Upgrade to latest from NSA * Regenerate python wrappers.- Upgrade to latest from NSA * Merged pywrap Makefile diff from Dan Walsh. * Merged cache management patch from Ivan Gyurdiev. * Merged bugfix for dbase_llist_clear from Ivan Gyurdiev. * Merged remove apply_local function patch from Ivan Gyurdiev. * Merged only do read locking in direct case patch from Ivan Gyurdiev. * Merged cache error path memory leak fix from Ivan Gyurdiev. * Merged auto-generated file header patch from Ivan Gyurdiev. * Merged pywrap test update from Ivan Gyurdiev. * Merged hidden defs update from Ivan Gyurdiev.- Break out python out of regular Makefile- Upgrade to latest from NSA * Merged disallow port overlap patch from Ivan Gyurdiev. * Merged join prereq and implementation patches from Ivan Gyurdiev. * Merged join user extra data part 2 patch from Ivan Gyurdiev. * Merged bugfix patch from Ivan Gyurdiev. * Merged remove add_local/set_local patch from Ivan Gyurdiev. * Merged user extra data part 1 patch from Ivan Gyurdiev. * Merged size_t -> unsigned int patch from Ivan Gyurdiev. * Merged calloc check in semanage_store patch from Ivan Gyurdiev, bug noticed by Steve Grubb. * Merged cleanups after add/set removal patch from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged const in APIs patch from Ivan Gyurdiev. * Merged validation of local file contexts patch from Ivan Gyurdiev. * Merged compare2 function patch from Ivan Gyurdiev. * Merged hidden def/proto update patch from Ivan Gyurdiev.- Upgrade to latest from NSA * Re-applied string and file optimization patch from Russell Coker, with bug fix. * Reverted string and file optimization patch from Russell Coker. * Clarified error messages from parse_module_headers and parse_base_headers for base/module mismatches.- Upgrade to latest from NSA * Clarified error messages from parse_module_headers and parse_base_headers for base/module mismatches. * Merged string and file optimization patch from Russell Coker. * Merged swig header reordering patch from Ivan Gyurdiev. * Merged toggle modify on add patch from Ivan Gyurdiev. * Merged ports parser bugfix patch from Ivan Gyurdiev. * Merged fcontext swig patch from Ivan Gyurdiev. * Merged remove add/modify/delete for active booleans patch from Ivan Gyurdiev. * Merged man pages for dbase functions patch from Ivan Gyurdiev. * Merged pywrap tests patch from Ivan Gyurdiev.- Patch to fix add- Upgrade to latest from NSA * Merged patch series from Ivan Gyurdiev. This includes patches to: - separate file rw code from linked list - annotate objects - fold together internal headers - support ordering of records in compare function - add active dbase backend, active booleans - return commit numbers for ro database calls - use modified flags to skip rebuild whenever possible - enable port interfaces - update swig interfaces and typemaps - add an API for file_contexts.local and file_contexts - flip the traversal order in iterate/list - reorganize sandbox_expand - add seusers MLS validation - improve dbase spec/documentation - clone record on set/add/modify- Add Ivans patch to turn on ports- Remove patch since upstream does the right thing- Upgrade to latest from NSA * Merged further header cleanups from Ivan Gyurdiev. * Merged toggle modified flag in policydb_modify, fix memory leak in clear_obsolete, polymorphism vs headers fix, and include guards for internal headers patches from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged toggle modified flag in policydb_modify, fix memory leak in clear_obsolete, polymorphism vs headers fix, and include guards for internal headers patches from Ivan Gyurdiev.- Upgrade to latest from NSA * Added file-mode= setting to semanage.conf, default to 0644. Changed semanage_copy_file and callers to use this mode when installing policy files to runtime locations.- rebuilt- Fix mode of output seusers file- Upgrade to latest from NSA * Changed semanage_handle_create() to set do_reload based on is_selinux_enabled(). This prevents improper attempts to load policy on a non-SELinux system.- Upgrade to latest from NSA * Dropped handle from user_del_role interface. * Removed defrole interfaces.- Upgrade to latest from NSA * Merged Makefile python definitions patch from Dan Walsh. * Removed is_selinux_mls_enabled() conditionals in seusers and users file parsers.- Add additional swig objects * Merged wrap char*** for user_get_roles patch from Joshua Brindle. * Merged remove defrole from sepol patch from Ivan Gyurdiev. * Merged swig wrappers for modifying users and seusers from Joshua Brindle.- Add additional swig objects- Upgrade to latest from NSA * Fixed free->key_free bug. * Merged clear obsolete patch from Ivan Gyurdiev. * Merged modified swigify patch from Dan Walsh (original patch from Joshua Brindle). * Merged move genhomedircon call patch from Chad Sellers.- Add genhomedircon patch from Joshua Brindle- Add swigify patch from Joshua Brindle- Upgrade to latest from NSA * Merged move seuser validation patch from Ivan Gyurdiev. * Merged hidden declaration fixes from Ivan Gyurdiev, with minor corrections.- Upgrade to latest from NSA * Merged cleanup patch from Ivan Gyurdiev. This renames semanage_module_conn to semanage_direct_handle, and moves sepol handle create/destroy into semanage handle create/destroy to allow use even when disconnected (for the record interfaces).- Upgrade to latest from NSA * Clear modules modified flag upon disconnect and commit. * Added tracking of module modifications and use it to determine whether expand-time checks should be applied on commit. * Reverted semanage_set_reload_bools() interface.- Upgrade to latest from NSA * Disabled calls to port dbase for merge and commit and stubbed out calls to sepol_port interfaces since they are not exported. * Merged rename instead of copy patch from Joshua Brindle (Tresys). * Added hidden_def/hidden_proto for exported symbols used within libsemanage to eliminate relocations. Wrapped type definitions in exported headers as needed to avoid conflicts. Added src/context_internal.h and src/iface_internal.h. * Added semanage_is_managed() interface to allow detection of whether the policy is managed via libsemanage. This enables proper handling in setsebool for non-managed systems. * Merged semanage_set_reload_bools() interface from Ivan Gyurdiev, to enable runtime control over preserving active boolean values versus reloading their saved settings upon commit.- Upgrade to latest from NSA * Merged seuser parser resync, dbase tracking and cleanup, strtol bug, copyright, and assert space patches from Ivan Gyurdiev. * Added src/*_internal.h in preparation for other changes. * Added hidden/hidden_proto/hidden_def to src/debug.[hc] and src/seusers.[hc].- Upgrade to latest from NSA * Merged interface parse/print, context_to_string interface change, move assert_noeof, and order preserving patches from Ivan Gyurdiev. * Added src/dso.h in preparation for other changes. * Merged install seusers, handle/error messages, MLS parsing, and seusers validation patches from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged record interface, dbase flush, common database code, and record bugfix patches from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged dbase policydb list and count change from Ivan Gyurdiev. * Merged enable dbase and set relay patches from Ivan Gyurdiev.- Update from NSA * Merged query APIs and dbase_file_set patches from Ivan Gyurdiev.- Update from NSA * Merged sepol handle passing, seusers support, and policydb cache patches from Ivan Gyurdiev.- Update from NSA * Merged resync to sepol changes and booleans fixes/improvements patches from Ivan Gyurdiev. * Merged support for genhomedircon/homedir template, store selection, explicit policy reload, and semanage.conf relocation from Joshua Brindle.- Update from NSA * Merged resync to sepol changes and transaction fix patches from Ivan Gyurdiev. * Merged reorganize users patch from Ivan Gyurdiev. * Merged remove unused relay functions patch from Ivan Gyurdiev.- Update from NSA * Fixed policy file leaks in semanage_load_module and semanage_write_module. * Merged further database work from Ivan Gyurdiev. * Fixed bug in semanage_direct_disconnect.- Update from NSA * Merged interface renaming patch from Ivan Gyurdiev. * Merged policy component patch from Ivan Gyurdiev. * Renamed 'check=' configuration value to 'expand-check=' for clarity. * Changed semanage_commit_sandbox to check for and report errors on rename(2) calls performed during rollback. * Added optional check= configuration value to semanage.conf and updated call to sepol_expand_module to pass its value to control assertion and hierarchy checking on module expansion. * Merged fixes for make DESTDIR= builds from Joshua Brindle.- Update from NSA * Merged default database from Ivan Gyurdiev. * Merged removal of connect requirement in policydb backend from Ivan Gyurdiev. * Merged commit locking fix and lock rename from Joshua Brindle. * Merged transaction rollback in lock patch from Joshua Brindle. * Changed default args for load_policy to be null, as it no longer takes a pathname argument and we want to preserve booleans. * Merged move local dbase initialization patch from Ivan Gyurdiev. * Merged acquire/release read lock in databases patch from Ivan Gyurdiev. * Merged rename direct -> policydb as appropriate patch from Ivan Gyurdiev. * Added calls to sepol_policy_file_set_handle interface prior to invoking sepol operations on policy files. * Updated call to sepol_policydb_from_image to pass the handle.- Update from NSA * Changed default args for load_policy to be null, as it no longer takes a pathname argument and we want to preserve booleans. * Merged move local dbase initialization patch from Ivan Gyurdiev. * Merged acquire/release read lock in databases patch from Ivan Gyurdiev. * Merged rename direct -> policydb as appropriate patch from Ivan Gyurdiev. * Added calls to sepol_policy_file_set_handle interface prior to invoking sepol operations on policy files. * Updated call to sepol_policydb_from_image to pass the handle.- Update from NSA * Merged user and port APIs - policy database patch from Ivan Gyurdiev. * Converted calls to sepol link_packages and expand_module interfaces from using buffers to using sepol handles for error reporting, and changed direct_connect/disconnect to create/destroy sepol handles.- Update from NSA * Merged bugfix patch from Ivan Gyurdiev. * Merged seuser database patch from Ivan Gyurdiev. Merged direct user/port databases to the handle from Ivan Gyurdiev. * Removed obsolete include/semanage/commit_api.h (leftover). Merged seuser record patch from Ivan Gyurdiev. * Merged boolean and interface databases from Ivan Gyurdiev.- Update from NSA * Updated to use get interfaces for hidden sepol_module_package type. * Changed semanage_expand_sandbox and semanage_install_active to generate/install the latest policy version supported by libsepol by default (unless overridden by semanage.conf), since libselinux will now downgrade automatically for load_policy. * Merged new callback-based error reporting system and ongoing database work from Ivan Gyurdiev.- Update from NSA * Fixed semanage_install_active() to use the same logic for selecting a policy version as semanage_expand_sandbox(). Dropped dead code from semanage_install_sandbox().- Update from NSA * Updated for changes to libsepol, and to only use types and interfaces provided by the shared libsepol.- Update from NSA * Merged further database work from Ivan Gyurdiev.- Update from NSA * Merged iterate, redistribute, and dbase split patches from Ivan Gyurdiev.- Update from NSA * Merged patch series from Ivan Gyurdiev. (pointer typedef elimination, file renames, dbase work, backend separation) * Split interfaces from semanage.[hc] into handle.[hc], modules.[hc]. * Separated handle create from connect interface. * Added a constructor for initialization. * Moved up src/include/*.h to src. * Created a symbol map file; dropped dso.h and hidden markings.- Update from NSA * Split interfaces from semanage.[hc] into handle.[hc], modules.[hc]. * Separated handle create from connect interface. * Added a constructor for initialization. * Moved up src/include/*.h to src. * Created a symbol map file; dropped dso.h and hidden markings.- Update from NSA * Merged dbase redesign patch from Ivan Gyurdiev.- Update from NSA * Merged boolean record, stub record handler, and status codes patches from Ivan Gyurdiev.- Update from NSA * Merged stub iterator functionality from Ivan Gyurdiev. * Merged interface record patch from Ivan Gyurdiev.- Update from NSA * Merged stub functionality for managing user and port records, and record table code from Ivan Gyurdiev. * Updated version for release.- Update from NSA * Merged semod.conf template patch from Dan Walsh (Red Hat), but restored location to /usr/share/semod/semod.conf. * Fixed several bugs found by valgrind. * Fixed bug in prior patch for the semod_build_module_list leak. * Merged errno fix from Joshua Brindle (Tresys). * Merged fix for semod_build_modules_list leak on error path from Serge Hallyn (IBM). Bug found by Coverity.- Update from NSA * Merged errno fix from Joshua Brindle (Tresys). * Merged fix for semod_build_modules_list leak on error path from Serge Hallyn (IBM). Bug found by Coverity. * Merged several fixes from Serge Hallyn (IBM). Bugs found by Coverity. * Fixed several other bugs and warnings. * Merged patch to move module read/write code from libsemanage to libsepol from Jason Tang (Tresys). * Merged relay records patch from Ivan Gyurdiev. * Merged key extract patch from Ivan Gyurdiev. - Initial version - Created by Stephen Smalley  2.9-9.el82.9-9.el82.9-9.el8 selinuxsemanage.conf.build-id6a29788d9df983fe77488721a404d6a09a9c0bfalibsemanage.so.1selinuxlibsemanageCOPYINGsemanage.conf.5.gzsemanage.conf.5.gzselinuxtmp/etc//etc/selinux//usr/lib//usr/lib/.build-id//usr/lib/.build-id/6a//usr/libexec//usr/share/licenses//usr/share/licenses/libsemanage//usr/share/man/man5//usr/share/man/ru/man5//var/lib//var/lib/selinux/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m32 -march=x86-64 -mtune=generic -mfpmath=sse -mstackrealign -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protectioncpioxz2i686-redhat-linux-gnudirectoryASCII textELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=6a29788d9df983fe77488721a404d6a09a9c0bfa, strippedtroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)PPPPPPR R R RR RR RRRRRRRRRRRRutf-8eb9403c19957292e17dc616dd15d6a157ca945e8e8659031b9bc0bec689a525a?@7zXZ !#,v] b2u jӫ`(y-6Bf)vն?d,ϻXNv*a0KM Iub1V cn ^meA7B. Y1/,ւ0f~.nU KVIr3+q\"TT ˦QE]գ0Yl~c|՟jnDގ6*[8 #pq87uASB3p`\ njOM> gɱԆ97|~6R"]u3l..)'<{?'jlrKk%>>A/ZG "!LָYTwp2CZŧ>ڧ{mPwY7΅IyێQ5UO~2+C#W*ޒ@~w5?SĴ_QT˱Z@I I"L<1n71iݥ%KQ8ZVx8~u&gH?="*΂u|Kޗߢ䦿qKg|3ۗHBE&]ׁ|ޛ{A~DOp;^uGәdraP^^MS\}`r2XќxY1J= :JjY`ɂ[41|' ٱI1ʖgZ/&1(R6d-;_4qW,)^bPNjЁt#lZ,ADd) qKe"O~-tU!ybq15|t0T?/O>Eb G̹!]o)dOHVf_|BRQ|vݦۤ&Vs9vyl rGqL˹lMvv%ڜ2<7 u,T #\!Z.OlBc6^Ktihx[b|1shޏAxczYVͽ]o_$)2a:YX b%6QC6v\CES?w]cBܻi߄LlmOIn5GiQ!ߩKSKU9{gMoD~tO P''zn`t4rW__4jkE٠X .׻*Y` L4qSd[Z v'OXt׿hjA*mD/%s-U}@Y?[:_߶sXDq546DZ}Bt*KtYH \ƉZXS6#C>TՋlIf,?qzvJ^bwqtO Ij]=YGq-=zޘ4(a8{nূCB`hC6{OflUatqB:3}dYx e:Ԇϔ|H1Ǹ`YEl2rN=}.B:5H%_$^6 \1LK3ҙ1Bl!V܊6ּô_lAJ⟽5ʮ./M}g2Nҭ. ^['Q\1oyI maxǎļ.o{ޗ]XaX;Z6 U ,fGlno#f !3%_Kh?PQxu|fvI#G NW:+a6ֱ;T0$8樵 s8'3^a{?%?V͠oP}A[ 003 '| ;˗#; fb ~L7EJͭW4SKa-8Y݉%8A8Q/rj{Oހp NPؕ3,;i!:e,8]~;žAnҢ( v>y$rq!ǽRQwol};g90VE(rwE<+>$A*쁒jӼ= %K)N)n|b/HؔEJ?à>M4CJpHT3viި($_Jۈ2;:$fJ׀^]nc Yf›a{ 6u8 aJKprB*S <0cPsLǃA< $LDi+/uՍѻ)& tha* 7`uLފRfخ` (BJ6;\d!&wm8:'ŦqX Oa'oF@{yrϤ!R,L3i1#Tp =BЇ,̯f:_>S%&ԍW$GOh_`;y0ٌ6oH-b߅fآ&ܞP̯xFo0|Wv(hPWTwmPb_Nt,ժX \?;-'ƣ#s.[D?Ɲ0?h#3>q >GؠPmPSTKv Jwq/J~uUl7 昮00 (gGaH+WFWa!!xnh>ʏ~h/!/Ou8/8cWX/h_qRCł결ޫc4 M<^n29cTn0X,ZUE)#ma@WV=ws]=$Yx6P/ :wٛZVuO_:? Mmdܟx)ƮZN:bQ|@3?HkT "7YtrͶ 2ƣtn:8iR V$s1DY,:vB՗u$)wN$[AP"_.Mߟd8|ol,՜zjc2_PMaaHS"s@VOXM g8/% РNXp?E|C" DTvAW-3ygymkS86`l)Ei OmniMYyyłj~ƴr" PȪ,\RX MRoB-zYK{gPx"ށOznlsN[~3xZ:$@|".^7+'+׶t=arDfQ^3`[+y H*1*`ZI| ?,jNZ(I;fgyOՀ Otshbm{HUV'lUL\g{/]TɅd^%%b{N5[ޙ |kKMlblF* ɑpPCQ";8w<%?FL('s2݈j@ r2]?۩W25e`;s^),;mҨ@ <נ([`Ȯ3bf\p_{Q<Aw G(}Kv]O8a_{!B_0~Hv(hʶ _#^aYCK"l їy(O̜O-zmUqޏ5fOFy̨sfM>wlCX" )$ìYQl`K!5DX>%+s#LTǣ0fϢ0LJ߽k/4kZݮ1RX𗹎>fC΃u9][2]:g~4+?K/$礼VیL[{*:ZRu~^I)gtp!X[$D|ՀzԃV1T|R{L^Jq5zWq^fj@%:ZlNI3멓e-N8zlS0|)̉߹A&bMYD:R)d&_/ مv̙5[ELĈHN5bX>pXu{XCX݄-1I>?^C-Nhwʿ>7+ 6+?5:뗒P4{X2Χ} Tk[u56'~3/}{bp·;Ja~DO:UO7" f}s Q_,>ՅR5|2Tf3՟ģ3Tl֫=Q7~KUQ̐|_ے"}vgz5Dz@Y?."`E׀앋Sᇘ-|"_6JǺ(1"b؎^=nH:Ԟ5 @#@fhcdyewr]끛 3殡9&2OTyaH!*+[5 < gJ t$ ptN:R-BBOD#({VPHd JF_sa_sxt $A=G_)@`Hkcݓ7V V"#lѼ7#jJtފj@AtJ@\C.fZY9m=笵ʶnvRDuEK zQkv)c#w~횘R&ґH'Uߕ;-@Ӯb]6@2oRp`.u/~zɉ3gZri\2. u5 #{=6oi/c ejd@PWT>W6_mDm$yu;JMfp'v4.:+uN2D ;#ؽ:mqW5"B622tN2ԛp|u6a :f&WJ T վyFǶ3=+ $b,ϋ$D^ hËkm:.u 心oϐ$'J1O3RKwm4r}z"܏4? ޗgPg+)EIk)}Cr}%HlwۤU3 iR2̢().'d4MXva0pxдV ͸pv&'F1pVӺ/g$޾l*S30bui~&tb8Vs|πw~[ծ ՝aO]jo, 9ŞЙ&eùYoIlj\@Ӿz?)JͺoasF!$vRrH1m6Уr~m9iM7x雚]2,\W5Q.Zx!364K:m`-m"'fZ[f&p\9&@T>1yV`ۖ#oBY ۍe 'YC璈^Rv"*&J ũV?, vigD@ğ~kBrG{ S,Ql͜}Z .jV7n*u/1h 9 E~_N^T.׻;q"L|~ڟi3YrPz>DhB&=v;~)fB3v.x3QD>x(w0[5Bg[HDR֪hzg7I'] G,ւp&o6pL-D( gK5̾ZS]lt3]RҔ&樘u*o8{jD@}Ʒ-Lnn?3 {waKSuQ2 DIm0"ƅO2>I}"y I n\%ݳ:s @%lLR<hܢk 'oX4,#dnbd6`MsLm8_/zհtD ,2*}"WЧp%!0f 8A:g̀I޽.Ԩ[rӸܦt;*m^Dq?]廂/LN}CƶU(b% .QZ>.''c΢XF5j%t_wskSKc L {)RfGϱ]lu7q61]5]K@= |PSl@7qfAa^uKSigJFhtv/;\:݌JT-kJ\N6},8W,ߤb_rY`mK'2\}⧛ ;Ej81|~DfSԢb\!yaFơҫӂi-DdB+2 c<6coH r1gQSVGd^4+, -W!:)Y8X,fd>Y'!_p.ҼbN-nV 6̾DtъgUDqE8RYЯMRp+,ͅn֨WF))$P:~`~!1xwdb smivۇbAaAMH9"C9j' tOisPQ0: Z@}6D WNT; vO .`[Jwepm~^,=7[:aWc#7-l4 "C@u4="vwű uX*(9:LÒN:1‰>+|y#5\IZkhM&ҕY057 W(ݰ-czSM/ɛ{4ŻpTl1iGv{/"SM;gɚj~oA .vQM\5=ZwjWT b)_9 &0.]g>]-y=6@1isOʬ,/ظg9eڿxeO=W6؍a]KzQ!̀^үU, !q[Y9=tr~ 8K3TS%'Ma.?턈Bی"[w^M&|tzOin5n㝼e\KZj:_,^wf ]1"kΤ۷P0 vSh줣3"j1@yOr:bf# ;?mۼ<֞ໝo9mhdw+ЊFN(LkWe܍=oQG u,+!bM{TX;N-ǮV=A4jQ1t1!6@ E"Jp̷3WO\w{ Gfy#+dV|)Rm~5Oge 7KȂOØLq A'kUAT b8Suؗ*χq,ZD6r4Q^9du3^}Y7TH 8Ը$CnK0 M4m!EGLIA ->+r {n nP- *\]8QM` <ŷE>Ix WkܨdL GD1)nhfg(}S$9|E@8[XL%ݞDd|S*^#0MWJ)_rUxk^3s鬢߰lhY25Q}`cV48He%"Bh  |O(()+u `'X]أ=+"ĨIبDbkXmN^4~U0-M3-ff*{r8#`f([C­TUoިk2^ar8wV^[VR0/jNLs/̸Ǔsw/;iϷM)gh3QIEJLY4u9Q‘ gtbhkD`p"!7ɳEAmE1Jr~9IjK6Jdg1y'SQeD[k+Tə:92̛D>r@L1; eD"d)Yz- :A5YwsgVD?yl1P^tZusMӝh="zQ;N16e),){ Q@a͏yέlY@AM%RRY8f\IamϷR#*_Rm"_6텫DP?(64t}A֟=9BЛ_5f%gʅ}E,5Ey?] gD]i =uW67VI?ON}nX&>3JT'|A˳ z$'uy Xy Pc4Kthr`h^[kOh $Ďhy^bgc />;Wv<K+lSF v᰸3\wmh*/1Jw 7O&@xqe3]8F6e[̾ul#xȉ~}Y@3va * /sHצT=M1O?a ѫ=S}-Vxэ]cj dMpi' Yo@Yo%LK0?7.@vB|s:^tV^!@}Q$w8şD3)#fVu~CQegڿl &GR-":DKޯCjw0wmOI4u(sM6?'RyCǩiĊNF oԉ@dY3..lAP~ў,>gF5?YAVψTKM5sa*y2DJv.$j$ YGѺ‚y]5G(wʭd#DtKU;gV?J'ki!B\ʴR4Fsxd{O#KM G 'TMaPw(6\V:dv3 XTr[(ݒ*#vЁ^kAIu  3XPkK kKH48aWلK_C;ZJ]١ؓhT\DU]Yճf`X|T/4!h5 1\?ۨ :NQ=55/>V_m]I"ɈfC )ed_|&C/i2o5u ߵ&plNkSDMO"E @ 䕀v3Z.f: Dg VeRt9jBwBq#d ^Q<]98D7pMko4pg: !7)bp8%R3l(]#(y-'Ls暩2bĬP^DtgȜeaPsay ;, 1641#rECo"y/ 5 %)5]IgC^cӦ LVˁױׅƬQny9֍Ķj<8(j!ɷ־b5 :fkJr{ho￀cw͓XݸL8lzgEY.`F)\SXߘq7hS]R{?'+VI}<*} ޺&^; GnPknѡ`fcd"0gqih%JY09)t>x#ɇ>J}AcMϚ'o2yy*z c޼rm?6^3g]&ﶺ(bYNwr>D%dF3< ?&"aN`OkzK =5;T3WΟ$: %1o ڢB`X¿*fAƖ?sL ˩{ZĹ6^jֻ]nm{$ Oq |H4H10o=d1U1@¼g&B*H5D*İ'By=k- =~+%ѕP$ `sxəvڸSp2_4gG(HMz͐U%)fFz?:8lHil9{iWJ}f2?`{ϩD=+vn^ zMدHh^+|35S"}991݃(u'&&2\C9"$-!ըPlB j 8YSZlg"p5Rkm ?YR3QP3:n9V`6`>AGYw^5= VC06*%LuZPݫ-elWal qΰWGDj08o8wr yAp:Uk D,CB]=_kִ ɾNcC'b ryDr{sC!P_$aH59IJ7cN]z+`Jh>,X=&!޼%lt/cY'3*z:3iFV$ iK:"ޱZB)Uv[&3Wt c`r-6 V9HXlӯ]>̪~x10u"A{z|0g?i8VЯ:mtIذ{~}(cOJHcʎj6gS"FI[ݢCY³B4@'|-I?Aٜ`<G-V}3cS ({ˡ?RL9Ⱥ̸E#%Q24.<55`*b Ei7A62_$=ql>cOblM/E˥m-nMN $N}z4 %6ف(n+¼ hCv%qB3va3?xJAs=iQb'Mt oT"(`ۜWKҚV%h-j2ηOdacZ WMHbQ4JbpܞqIQ2yW%(YnEF:Ɉ `[TnO}B\[h ;gpjܓAg@^5TdHX?J nn<vVsJemm}vaJon(=/pyi ջ`g(UmCv'6yE 5N8`3 -ߴx3?=vmD>ei 4Ư?/:aݧuڣH[۪VP 6 [ʀgS4Zfw圏f|:X9 GRZ|} /r@ΉJA|сӬ`8rg' g[h69˥wS/ƤV elQ{kYq?1E*n?H ZzPq. x[FZ .h-3a|]nve0w-^OO4ukؾFsKim 6XH v}|us~0Iz*p ٽ ګ4X ]qr' gjsw)-] 1yZw@-[u<)d~Tlv] 55\0Ό^ps ՐB0 gMP״>d䟓WJUSC~<"[0Tm0:,}o4-P +-#fF$}!JR0\eşPz rKtϷ& goEwѶ˫_ In|ς9eXA)G瑫8]x77&VejzR}n %1uĜ4ykn$3SIw'^Փ/CaYua%ۿ3]j#sdUYbxI|} 2̅]A;OM?13sXɺǞ&%s;L'9Jva{*G(u6bDAp fͣa@{pzZN9#H?z(Y_Ok]|%p R{8c´¬~vp@tcf7 745#=SW]%q c吝? C$湧uSkp[H}JU_o[+; o^)(xe i.d*1$x{@nN 3ˀhTh#L!2X[="kbj몶vko2 @k9;z-`b',ya+o6=N͖:~xnqi@J]b0 r@Ul{cI[16l0| |ho/\e>R[8NG:yDXw:ɸ {0SBu")V.'p!bF@E0zO}o442+%QwxftnRc-H JNg-2 Ap@+r^v*g 'y6-:z4,:%(mN?)2 a-pm]4]gY^REF~ z >E0%2k.eF&ViRڼnpo5pdn~9ړTOS L_'X4i<6͔[=NHQHI, ?n!yJRgF#/ؐR66]O;9[MV"ݎX 3g?A|-9 3h PGVpL&yԂllʱ ; ^UoYd0PgŧӍq\ŧSRΏc 7Ow6ʂSj^M[:#`N$Fa^R45cevتeK}(ѢSp$ T͙ɼK:M9~Z܊&"Tƴ r!4zӽ8tbTuÙ"s澈OkSuk҄xױǦQ#+i&RSdn!jYv 1ۃK}.z#D(^JK~ΐ*а9ؓ9_!h?PX(Qt6JO)Z ӣ^cZ Xo伈xyrk`h˧UB:~uN"7Vr *OE ǍPeaBZ 2wZ/(‡WAriq-8wDj~1r/}8aM?ν<^nCr9pJ5o?KU]k7~AҕY RrɑIEh'X,@ O|*n3^ z川f<\Va,O8D,A$AD oA+3PE[RCkkU }L=+Q8܉CC*mf(CvDyՈFHS*N㧅P:@ jLvq{mptYឳw< (oLz"~r|s|3yY_kYFE1'ݧJ[05y~.Hd#{kon5x-Ivm_Qeݸw%(QVIOJPffg]'jUr|'/56lƑ<dNG,q S9 HXh;o6y|/Q @6?& %ދQ d@2:(aDysPÙ1} 6."~ Pb{:OT8QS=ibgQ+㕸T+z",G{!(Ϯ@TQjL'[Z[֑Y`S)mē?h~Cx9l̈́)))m u5J$lDo Hogt59ۻ8/(꾻h 3d qGfLOڅ/AAMmæhCr/`: OK9c~ʤ* `˧!i+6ly ;lg(##⒯~%S 7uk_GZ?)Tn l6Rc+\$a>T49-Xwm0+Q`NV[e`y U/%wLY{(51eJΐмf~ThŀEu~ϝ.@4WK3}P xNHqjlW@IE?cDf9IX}R7CF^[NN^RU\ROne/ `z)+3ځ\,AjC+8GS  Y'^wpa`](%=-Ύ(Pg:F== ee t'|\!ugۣM%ڍ!CchXNk5(I:~mbDHO3)|U;V&oL)dtv+nɭu^RN9֞7R4}{UWV^>Rf, e߈$md^«=32P JŘa 1^9G bQUvF:K="@n[̸i6ƈxK;/w(>x_?.ef)aQX+M \ddL=U06쟔Q7 "g?,`m4iş#p3QO!ԄǦi< .>᣺]^a>g:C~TtP W,*~Goʖ$S$Zx7QU;d}NȊ"LYا/ Âk 嗘]e*-'ᜮ׶)!cМ|&MNqa XcyAQΩ=ȁR!W/lV6\ *4<i(F|fb8܎1O;cE[szTu9 ?yBl,AAq}G<اfP `7X vQNM1b ]%09øNÉ̳`>p&?iWAo6ի23&({H(?n =F0-W/ Z*oB`{h&d gxHq"qi7 C["O7 o؄~ AKp7gY>^ٰ0&~+;?Eǰ375_; ȸGBӯןYs7G3T͵N2~6]4]*[v3T՛ U<"/{5sy'HVogRV73i4tT * !^aQ@""ճ8wXFJd_%.4b/%8:E~SS?6u@#F X_-adc'lX0:nMJyKfG8O⒜bjnDZqѷ  l:E\Q:Bsρr\vQ9Q֞G*ElF)!P9$=Gms׸`yV_4u89'tD .-@\2h_$1hr(oȠÝɓ #^| . `We`Qm/hoz+]Jo]I=C0F=ZX)M:j6-##l991aML W䔆%}p'T\=%&H"NLeC ZC;_  D"(va=i?:2!HXB{8G A={Eg,1Rao, 24caْcxs^)%C@ >mA-&K>72(!Q& W11ٸZz.r8\{Oi֣=E; X >(į״Oeehɤf륂O*AIQ 9ha_Aob6 46Fp3|}ďOD$`Z@CE^2 ٢K USBb\I|11ŏY=ԁFN]cj[Q7&2R̺iT@.a/yl٫`bhdߚ$_ΞHip ·I*{thބ/Owol4"iebFVK'I PdzsS{F3@.V/DN|:[ϐgLsA -R}Ǜ̦Ykch̴i5dC\OB8q3-UMJbȅivx  @&X3_ ESN{Br}1zh Tq':gȎ@f 4ƍ]'@jMh>$m><(El?-ze[LWjNG##a\~h=5l)}FcZ VFJ-?)&3n5yۯ;O*ɺv08$ϙhKhT#2ꈛō/ߝ3E6:o".n=t[r:^ +)bHBuKh誶ăMಪj.&]!p^fU[ uY$uSv*C'v-5~y*CtD9z7Ӡ I 7 ZKP΀B';91?6[5R+|vh1wf\ZLyScm6zշw Z!TSkJc"m-pD~&8tl1;6Zqٹx8/0ދd@(Yx `ߢutwb?~*{? ~ݶ`Pb2IQːOBߪbwEk5NNKgSهXUD>dM{<B*leD3fFHK\ YޡƤDe\۲ګ9nI}!A83E|X.AEP^:_.8~x4s4Z¿[Fՙ{@%mPua\DJI9vأ>:E} =7&(`ğ~Ej4;xJ߻U-6]#j ӔڀN~օ' m0 6[1@Q +a;YE?UDI [b Ts>λ8Ngj@/t GOkEp̏/1r~]5p5lxJg&X tǛ1z՛Ł0i;ց^TFdGk=<%%z_Ah +'8=]J Q |@-{{q4 M'Ag_So%ŒҦޮ @uTLw'.Sv ͯ 34ītN4\vor==~$J.P(cFXUbu0>+0]̾-Ok&n7 4 w훢|Y*bĤsL<\ȁN0 wt%$mQ`=' HrB/ D8ox 6[,^hzr?lk7.~,zjBQڸ5v8O7vոwҨ>ܸBYa@_'ϩ҈h[Mh{Luim cnd^S(mX? !4f\A"c9ɾtȳY@VyGyU }T9{0pxIT֊Ͷb,b)zvq=ȋk{*aK49ze,U7rkg1!ppaBD:{ %E'4` 7ݟxˊjQ/CLNeɑ~Rz3iN!X[|nolBZV's!$Љ)`gDG4pAH%r6\o8{1hP]/Rk;M'( I؟c6)U$Jm'ṀxJHH%G?fuz@Fn˖` bݙ-/!~>*V)dB:'0S ֥xzOO<`1FcW< 70'%W,O<2U_7|{Xͳw=5 K?geRu1DjclS`}CLqWzW%VCQ>BYf)*y>u]%z`C&[}6><ܚ}pڔ#{n,K|)bI.}NAgXo[߮ϼE>p5.; mA{BX6se汰I0yz)sLơ2Y8z[!dE\]/E $'s!~=k(ͳ &u:\:4, YnȻ3~5CG{R_BOԌkel*^YwD%!ojLxsT9*.ɭ|˅gO<y*ǖ{RÒoimtm'G:D#3ȑډ\aYkjey8D !<7hYw#aOg! SgPYWɕ ̩2)p|2 `hI@^[V"t`a3gތSWGr NC\CpVk(ASQg1tCEP>cpQ1&a) "`|8˱1N&M 0PmcBe*R陜-_oB3S[+_.78?Glj]fK,RYUm-(C4͖(0.GWW..SLkes=áee 6RVs4? :,66Az;IP (A,z:XM2.[)nVm*2~nTx(R "&HZeԲ { ( q伄O[\(fcHo8-N~gu`|L4ի;Ğ %` 9#[VFT}U)@5V :I+6hÀeG7(~&P8f>>{pG= ,2 8gW4ڪ`-f]m8rB ֢T, x뇽*Tc=v޾?ż]eC,nkv[ieR ӥQUPvSmXhV=;N6 ET^/<:ܨ>{#=DQXpfߨTQhiVTtT pJn/5-jZLi`>}Nsk5x@QhﵢTUkٓe].=a:;M<\3y_}ee}b,k?+ff60Jp3Vr)oy;-RA&IDh\aTd }9!7ak+.n;H 9@ ڏ=VA!V'ct9Oⱓ}b~ґ+%l,hd&q(#2$t !@Kf;ӱbmG }MKHm e鼘j1_d{3\%1=ҸҢ8{PYCcg滋@kp) +MȺ|} KRߠh;d(_Oo*[jH VsAcK%czҿoFwC"kԡqCڍ)C,f<Eԁ| !q?iC_>X rB#U۞ #/!-8UX#ed6gӋ_4y{T—82DiЛ!E\E>fꭏ¹sFP6%L3_l)rZޡ(:[`$lJ'j|n'p0?EgoC8w+U@ba j8jp$&uPFk{hna+HɇގyB<03+GU1e6],TR2dnISDtl4i  OU~l6Oߒx5yٌ*x#3K䷊'AR x(:&8 s<> cSRI93vS1S\v{FU(bzSẹ̀-V{ɴBj8U'0hw^t珪^Q7 P.y[@D`4JLS_=KmŲ5Ljz-c*9^MyO-!.CLXV%TW [ dTtnV/c /+D)raǬuq(w(R.^0HL;䵝5ML+/G w_J J\ϣ WXɿS!R}]$5'RT̓u^0EYM &[5wQP?!.m;&8OqI^D+.lr9=Y3;Jx\=e[ͨ9 o8z}%['ݰ_K޻C/0`P@vy=icɮ=AH<؄1F||;r!& 8 ܲ$Bkɬ'o_v"Of1&tLV<ʻT䭒AIY=֓JYf#|YظEQMpVI mVt!9=xCݽ"1L3#pspCXt'aq7,'q =뫏ICߕ~ KY5K?fBӏEOWsj؟ A&xcnUGlYx̯=QStvgS4H!\]=}ZKBxvwQ/&jKj3ҕ ,j1^tRdA`mgbߦ/JhW{B͡}{֙`,~O"]NjWQ cA !8]@kiTS!%Niirhd=.`zJ7)4\7f3 >NUSyuTԫKDj~U|s-s[BsgzuIB8"Ο|ԮÔhTm@D~Ўr2h4Ǣەn\XLA\BʛhIO /Qaۑ Gj5P XPiLW*8+NrFa"Tr-ʹ$3q~(iIz>R1 #!4-RRӊSS@@ k[^78tv~S.kDI@?YDkiī:g 03Byk$:bEmv f2̕zQd8tDieT{ÆK`hnk~2eJ,[[y _*ٵ&~;Cj7׹ OD!WPh5$;\&.rH+.X;UG~y#"9!\%{wX"{8!I63ߤ"xX?"DBGNrv49nB3Z4&ʞF_;)OӘ5V8a z,~ܔ0/ uOQ,Pi~;\[e0nl[r0=PacCS&aՃu@1%܃r`P|d]V.sRPF^IP۰,2s!~JKP]ԇ? @@fgaETTHv64[aXuhI-&!}#{Y@ƖJli< ak˳?E_{($igu\p;Rv"6
J>x{eGJ YPX 8!y yrX͆7+at!@vz&J8ݾ qh*#6{ _#h9sEFЋXI tkDYl ƿk:Ŕoc9 <=^z̺ sEhNt(s4Z(W)% +=%Q.𰪳R$@aHH S1wA2\YS|yiW:UxT`Z pn 2cðN&1ϟ| .AqdU D%Ѿ']kub>PS|>MoHPe(&t74 /|Wރ Z>ADJl) :T02j56(Ze.Ge0zO:FZ6q{̃?Lͥ8[7;y_HXbd#: HQ x2`SSbz.?%/_3m,S2Gva)`Du*5#LQ9`\nJH|-306_&"~ʂ#9 % rT*4/sJͭfie)>W,"^μ%a s2}J5[ =hȄ9_uC{?x̢,6b7.E~o$EpZNLض [Ŋui]GZmܖ70#Ƕ'>;%sB?FEH+ow.g=S~4> hWW&Yي4vU 0S qw=XS "g^EPxW4 ߱{U_e]'g'aTٴ\*NB[ʾ)%Kp!x)Jqe']Z?^]i[״ \H}⚥̂Xa\`ѹEaE {`s_V} 9 !ҦŜ{&Q i~/SxhG\Qe_U`-$E(.g/oƩ8D#B?Gmϣȿ ӠC0RBx]FLx*w[T"|[F/8E#=p6E'0=(;E1w!grj=rz%x{~Ys 'aNK&^_tp榓o@>;k2AZ7i$kCZB۝6Э(R(lӼ)8٫ =dx<y+.^SSgQF *$ 0 k-lDeMi܃=P!=t26!\Of'm}8H4qP[jIvŘ4̿c1n` I#XMR*$d4~X5#\hG\h.x5:vȽ~S.w[v{IӕVIk0cRפe+TRՐ_xg^R 6ûASQVIF+zd3l ^]?/[L b̟y2u7x;bYDf) Hƪ9cNjq_<}2Nmp/ֿ/O׬#!!G+ &y* XA">>~5&x~Lr:ř0On kp>xE/lhO,d3 HZ} p.].SԲNQ3^8n|,bhpU3 yx%W}3 G#@}QHZk*ߔTQ-{?Ó7^hbtAa21(qF6ɠ8^uh|۞љNdƢ5Md"綥*D؀'~ ޵E# #h)U<,<*t;Gށ/"G"_@o\P]܏ٔy meLMzvPpN6J߾_^7Y[9vC얪:JG9ƛẁ&øxf}*moajؙB(`$ndjûlWx5|g*rHPiId83UQ ˓ÏX. iʢQ[~S䛹BMH6Ȁ:Tۨ#eZ+d6̀Bjn~C5@0 j'Kffb8?>|Q{u!4 #g<*g\mLo_2UԷد. tjg fxJߟVDj89mla5aa#oV)tbU1C<]Mg1dzT2 1 9 yDɗ"CpgȵY];BEԍnvqMP3#RW1yTdCp(9R꧙Z˜H Yb@ P`d _l67w&6C>4Ivcw& Klr DBy'ETơ!N,W5x`R Q6EMA6Ϩ2[!%R]PQ+U1QI%{Ku*Qi*ᗯ1 {mN4E; rb>Xh`ְiF#Җ쿛b0;yߋ)6-Bm2IEHc"6bv7̺}M*|e-UŸ' H&[3OQLf/#VϜ|l(_ݿk( ]4I|4B˘gPL#1m`Bb_1a-1Ai"m4anADjG-$WTtf8,sf#F Qy.c^S9PcEcg䜂I!g~VDa)¢7%noٴ@Lc=*tGiMǜνFk?<+;~ц7%[- #<)X&B[-[mR?\cҞ.]iߚ eUEkYO 0-V/Wx۹$xٶN*yO1 vr_v9xٖ}DO m-9^Qӊ{G^YKvO#8,$i$پ~FD 7nyTcL5*6^/Yֆm1 m?So<^$*AoF'K@C;<-ǝsh{HuD2qU04s䩝ˡ1Ua951j'|WEئ.ͫ=|m}zGoQ86ˆ&ފ7Rg[o!.3Vܡ{z W Y8A6ۀ8p幟cwA#as4o˳0#dz*ΰHZ`Gf;x>-%*dҥ8T ډOQ`;]aqhIZ$pz y8ozRrJ/u 7+uP1ty ~䄒J҃}߾54)c,(V=GY}w܎~ B k32P+\l4<{Xϒ: fh HJ+T(b{S_KUGAM)KơkGr1N-nCFF AV[ƃ9W,-rBY;{(Tk;NTs8 =زdDY82l/2p6'2`N~<|{뵳}{O&+p3]mi]YzN,b;AM- c OvDJ ag9y#!KI޴JDlIb eK7_nSa{v,N>t? _d̵Տ]yZu$EzusM V,T(ݩ⯉_kJI\tX|P\PeLxJzsS!Q5CA *H؄K% {Q5{ITqHfxᕔhg2|@ ;(3&呧` gZDD<9ӽIchLpA`{Gb%Y6c3ڋ Ns~'P1DRl˂ ziFG͗ lc٢MSR8JZBE9+߆z,$Jnbi6oi7ܘdhMEf0En%Wg֒cs06esWV#Waԉq1rԠ1伳.тdAk㝓dZvR]ܪ8cW-"XbO]g 5,te,$\ɦ@ibX"v7?S *\qp:w2KyyXp$sxOb:m $*1XnT(\{wAe"3NUY1 /OyLkcRgn M"Kцzv.š0^bNN)@C/R|HTĘm3ŅƩ?G*ŚCξ*3p,!êtЩm.Hm&?U~k4O9䵣}oHĥ)CWl!T1Ui!lC鬧b֋QX`^`VN;K¼m]Me@QeU?A'y[Ǡ0’3@μ9ܒZho""Ssݏ_媌kWt7K9\l2[w$e>PsU&hk?ګ I#x댻\=%4$; RgNo( aZJ!(q@G4Ϳ-5Fʥ.i j&Wֹ-8ڒKA8EzsY5jW0?mSMmd<|ҿ#Eallh:=0t>%?db)D/*&;v}oO/}=JC 6f:v̤>_FSz .sm7 頳+4R<ޠ $镍{tw'iS)z}ӽaۖ I< Sa/bmiqC&"[lQb'prHivJ\ \t=^kyxmA M!/-\Ih? Mk) )Ybd<{ԝغ+|*摄|9@iDt#DoCA-f R.cR&_aA`C5 v,S{@C C}23jPEE!Z2a\ {Vl6#ĉ *L-#SZv;ocޡܨQYY&Q$|"}sE35K.Ta`rK\}?,xI!7/FmkdLa@P`&w#[9T^<+{A% 6sDm'~c:!R.s;&vSFsLK.ڵTHA T&~3=AiR}f )~'nb:klقĺ(+*4.7W mKИÍf3ħ^: (걦>rA#U|4u,yT8]԰ [b.6])gfݶmoh/P|4AiM:w'n[Wb0.rM[}"K8_n:0&ZBO;^.yP$#q$*2AOY_ntI@HpSO- Ck/9HWny+`ssD,Dh;pxA8w2~sljY9ڳj#?"芐3%D;2rJfʂAbKb=AfTAþRDBܐl<,b݂sR 7c={wnjo.U0% BiL.НVbmAcbM/lE9QԆc{ֺYo`{c֋n#Y;`ҲNGSlqҒT%x 1~?tD:ŽQ9{'`O1WSǡ5²c0Oli`^]|ps#R'/tˠW^g}S j;>vkMjPy{DӕP2 6lnaVoP'f75ދQiMx `nw?^3(s6g ,qF}@R-R)Bٖ'CPƺQcdp $e\`H73=c/ !9 JyKx[te'O2IL-lo~szʼnQ9+ w2  3 AA +8R=ЭܣvgKUo nA[;ۀk *HRA%:>oI(; |24|aPv2{aȂ'/hHj%&Pp(Ȗhd?m=yԴϕ/@s0A%N9VUp_a[A]\0;PP!bF,h !,y&sIYU{#Q~-yѠ{pgӍoYL /.D e[$O b?&4ѧp\H42O R[BFU%R^J~FIwlw^t=g2t2@ц': vMg3E p拐 .䈭Z o֠r%hq T,`( f"!xC {B(Y|>Q50+b4J\AǨ&$GyR Ro:14Z.p0ܽh!,Xg(OEFEU7gjE[@a325% lZEi5mkT-7 K+0<2QD:׬=+ L)t W}|a/[eH"I8"kUP;(>7SH_Ή<`His| +\ f1u#ՀR1zW C#j ~]Zη{ @c-NP)W;XBD.LJrz@sx@DgI wd3{Q?>2F)A@}{8.t'gpJzG Rۅ $,Z/nUMEupa6^ ?MRSs"Ү(z5ޑ п13lW$n;u*Ka\}=w͎|!dy3D5T~XiFLg7 +r#/1G1_{Ɗa!j]3!_CTj{B;J յ/=2Ζ1W\8Z3vs#;PgKFKSRdO1h Zi}D7ϕ! Ce.w2n8tQJN=ig ̭#E_WP6x5iI!ˈ٥AK<)/" D=\HLEV:ߗ%>:'Vf 2%H݇ ?GǕx/2OxeIۨטK YkԷ[nYiȉTjP< |4P 9<%Eh8Yj9EjƴC:e2O`[6[Qޱ+?(t_V\gr3>4G箛G`ű0Z{D d} ;ORG(Yh`@Rk%DTۂ ڔN P_dν_ pkl*@bA?^&@˼KL(ȍ'PZ+alG P a%Ԥޱf^ɺBFhWUD`#uf5swgz25%ɼ7ei/H&q2ROB,iB,xrQv}%Ԓ`?.ϖ6 ѸEnN+ o*s|02de0Ra3='ݖ-Xb#p("<{UbKrwZtć;$?zNUwtE+vh/&3@ٮB. aY'Rnϱh%#B-aҋyg-ِs}ڱoX;ɣt*1*FC0Z@Qsyn@p6UҞDZ@@m2=GUvQ=/ ##dy3D3 ̈́CW8J:6WBDAq %%K폫=Kh֯-C8tfbQdlxUc_ΆgzEXq# n_$4] 2*e*Eԛj渻ݛi꯬RGx@G/I~DW86C^ȂNȃjH*G`p{t4P,33񧀈$Jǀ cS^ /UHGU0c,@v_Ή.Sj-iץb}94=o?c^/Ϻ-L#_K:CeG/]ٯTօY}KҊ ~t $jOh^5Z&#~VpRumҢI3 Z ad_8}HNR-/+!b9QHd"ֿv>⹧fUƜ.v UE-5 f(hy#׻OĮH-ꄏbqm*`~2vO}K pn5 {el~OZi*;P4~;`, fťJJE$kf/Rbޖ9S5-G@T^B`Y.l#a#,DLY dKXy"]_ӢvFMʚ!\hFOW~UZX4p5ZTBm<1FpdžnѦj g("ƒ%X@9(Tc؅Fd='Q'Iٵsd*]ʊO{\$W߬ [2/`B\N)[㎕F IX^%($$m1w?f[BM(ztv#G9}]OE%hfe7$I`@x~>Bu·61'btAgRXFwg҃wch#qW)KETf>Z^9CA.F mkSt.|i"Ch+5 yET*pn%;V?|e4~ߵ<(T-/AݺЏ1&ƽli'yw?K! -ٛ jT|G*H-,5 X>q){\GtQQ؋l'8G8I5_<1 > #AK$)fEAu(y7`O_k GuXSF+Y^~6&M#w]GذuWWT>.y$}R j$d.vY,mn7(ST^$ .p# <tJhoG^A= C̋7ާ@x)Sy(T@>S5CJ )f'14+E \m p?9Y$]Cj?}Vlq\I3C | {>Fx:qLÚv~GPHuk: * A_w*O9.kќ:^~}@-kCiS|_sEa&5c}z`7X(T`-ӜxR0d{m/ WRrh^ @܃8wwm&5=T(U22pf18*}Pg_ 巠nQDb wxhڲYӤbt)3aзt:T0Q\9OS p?Q{Ljl[)]A{ &ngLy =":Ieϑ4Q$Cy{ 2`ܑͰζ Z& AI~,dp;r}}Ke5B&t6#oKG>3)쫐J-I7Tuƣ-j  Vyl U* 1't AǟqjH5ZP*W%xtSNFegK(#qHъhC `RPPwx0N`d;}UAyq@GL8S 1#.}*?6W욱Gh. J]`9*JL*ReC&|% bkZj'cU'L\"@$ ?M;U:_? $m$^Nh3) ݏZd߾!?c*X[bEwH^*H:N3B'4 ;֗ɗzJݘrF? P衶oN*\- ~ry< VP9P@j*;uE<(H͝W鈌Wz ?UE;e'KI}?G?z%z=vwt,5 {:xd@xUM@殀-bveK/3lE§}K-G]?C%˲Po2Sbԟb,L+Y<9ʱ:mQ^{R.2xL2kPT-\ W7D8&[KEyh{)lY!-k%sQnd>YBV_ pk:z}/J%Xl~KΛjUZߗM0_/2`$dK< nذ[!̋.eOІ8g9Udz;;`RC 3XbkEU([ ͺIv:k">*0[S.]'%oauǷeys#+Ɔ׶.g4ܘv51fO#Ъ׭.GlC_yjJ vX4喯*x)dJLw%\cXAh΃l~ZvIiT&DQymobhWiC }w4 8r>s[/ o"A6W#mmIhH(dS 3NBEX@-i> x%k|@?${P;b'6CNv~#Ju!%y(˟i;#N(R]ޥ_?kL֭/fH{t-yLP('(~0Jo܂KJ= O0xvvCFC7jJΙD5}iM\qT'akk.lףHptB$;sagK_\st J=iŒsec!Pc`ja9!:M^m폘SPV?H7XJ5E,ooony}Q, #]Euj4[ ^EpƚelUЃ]kJ'~F _ % ,H>鍫kj vqIx盏[os0"[[dG]]  `DsFO!5 Z/]x]!? TŊN:J;>zf6R}`}ITPAfjzςoК?Øcn顴xC X*"QS^l8*opoJRKB}W ~K$/H!J-ƙ9 ]ʞhXQI| y4&*M GҖ9\J.>żGf ц6_;fOgZ·7sĩ,ñm<ݑj\1Ǵɷꆾ~&t:rHdIhXqmvhع+'EP ./M DG\PG`ch5KgmC%Bq׷M%4>Q}1]ҪolL}+welKv齓#KN\Y"ұAX2#bd8Y|dz xmsP >JD=E} >*VOqDBSj Қphܡ)B+ a? iB*NQ\98׶kK gĈTIr:;Ls#7#&}YJqWmE֯%U5-UL5y~zļk[A=mNHz^>˟ó4lzKp}&=!9Yrj\[|8ϸ H=7c(~*\¼Ve ]A<\ m>4kG˂wv8_8[] g4}fv9͟C(@RHZ\-GY .ӖFl`hԭIR1$rM"hՋts_E$m ⵠRќ;qdtISTysUbr鏄΄-5>3CB,7؄a1̬ٛze?AK;h 9l֋ SaQ6NA _գ_I?u^KddE7DA?;Z y IN>|! HpI".CAԲ)x=@첾Rr/'o*ˆOs=XEI4MQE՘r, ];ݳp}G=\jDxVS*XEv#X~ȑNPްUwiO#Q O$(m΄(Y1 ,5b5*ɤTS٫rYH"S'Qc"zy;CW#6>G{›Cz=r}:LLxvyi_ &+EːVM9ǷU՜˸|Xy'9cZ $'GׁE&TRQFUWtwv?~Rp ŹF8! tM7eYR&U+T' CXT< ]r~WV!3藽-) 1Suno?jw3p ;SB:`4 u % d̔SvݦhI_Jar4dZ ,۶}&#[0Eoey>z4O?2g˪ͩCۢ[%2cp"d(n ԫc[qmv:)lOJQ kYtslcH41u$ eq_$qb3O -3%͵AI4'"#<* ; 0Θ􂷲 gH{eoZVJ WNꖦi܈N# ~O>oL:0Z߁\ lds}Ŀ4"|r17z\R-Ӹko,U(p0-qլ ߊ.O!Ord a0󋪕+aE[& tLBRGQu77Izb! ZB`p泊X(n:\>kx 4ɡ,OVܶS}2>.i>8 dol:Wf/%{I{Б_?hU J8uRqK,hj>p ߴeWY }%`d>Cv_u J鍻꧜GQd~@Чdzo퍌1Aw0[:EBc^2.<Ǜ ڬ%PPRl푇\JT V[VKN je6o|Z 7n j]>oa~ жvhoX/ZQ;BԚ/rY$R4 ʰeMO(3|x*8PnJQVBuq%$)A~MDF>O*I&_8) ~yU8i-Af9>C ~.n. 䠣fXdPnFvmyM]\]7(ڴʉMB̷1z'wnn_Ux|}E<,<3u85d(X,U*Y-VSUX_MeX9݀ELəށm,cLǕ-ChcP|bzTSUZU*j\fK&0ed\ evk̍ww%Y{[5h1Mo 79ekAɸuįtjܮn7`;)o_Ǟ ^p5!` Q1~YZbl_ۀo$Q \pX5 |L*瞐&}~ΡW@ݤe(#7Cqs8 r0*n$ǭ(9+$r1GEojMcZU 4_(7ԏհ؃3wUlqaqPʖϡ ڪ$N*ҦMj+tYx~ pg?ʭ:#&Gga\Jruʑ&w.YϠDt5,5Q P6̠$>8SYb7Fi(1'N^f*%T76+?Vy#D]~-r_&Q?Jm6D>n4 jF89r9[xP OOO->bWmdz!XqqHm`x%Jyn 70%tzswf`a WDF\*kr[ ΎYKIDR˩ Y3KP*PĽ/vveC"lNj LaGlU{ݐEhLH8\JGwU=OGeɗ kd2d٩Q#(P9X> ]Ei@~OMܘZcd.Tj/؋6(S4WxY~':kF@Vr%p6w3\FxP%R Di>HT2B6>掬#KێTh䊽%ܦ0"2,f,XasB1" )-*VX˺eF2hbܐH_e? ξm?S2[%B%RMlD֝xc8fTc>HO?k6n=}qYFA8]b [7ʮ>I ݑĔm`*iR{`e@'(K拸G&bQ><{lV^b5IEFJ-b|{ : h(arwfʗ g`/G[rfX}f#$?,׵q<:j=YˋE!x[J(3z,|Ъ٣W%AR'ʾd#[ pkkzt])pupH%LY;wC{ZHrz7QOCà.J~mpϳm#*,cbcg{ 2FDUsAd((&_%CUFmB)Mݷ9k\W Tas@r25tFHD%&<7t=K{\Vlm MBx uZi+*e-Sg ZMI@gXæ!B~ jNKA3HnJ^^tDwgpz5M2٩Jjy8l0'q8w=,LbA2KٱgaQ|TԨoAxlE~)z4>5jUqd=ʾGXx3/AlmSml|;E- imrJGBy:K(b=f n<|+'3Q^ѷ qzubeݽ'XuӲ Vxz4zI%(֝y/WyHz+E`4/8@6@߭,EIp{FZgB/SeH>噀4/}|\@2  H=\3T41۩ebٲk,xLy4;|~ Y L('M= q˿j=TZ԰52ѥ?QO,#NmTޜ(U.k);Y؇ +<n}tO)Ȣ$4 vMu)OM@?^E!WC>bZ *ܻWnȳ3h} 0bV0AsqfM+IX5Vo^@P.)wIqxS'M3;U{bLl7)A.Icɿ< ,$g 7Թ{l eɚ d%/#[XJQ\jB!W›\r:A 5'?Qn`AAg8Hx)šIS΅% bvևޝuw `ԠI5x::*h63 gNnwvݗV)IZTj] 8єO薙5p2z]kb1sUOtv»)!E&W X G*iaƎ9PC(itMGGxom@?yuIa l{rm3F}.i&MM k!Sbaecs\`eޮm]BAxug|XZj&W.< 6Fq4{I> CەH_Ҭw̼ $bQv'wH`xD3D2P]Y Z4Btʀ~Bf9;۳La^*"ѽI216K !}}=8ɀu.J!diXJo?MֲWĈSB{M>92r{NjEpƟ/E* ?e1Y#RF uŰRRԙ~rER98Z C&$MN9Ղ l )? @O,|†X X$ 66"RoD\@?A^D/ 0 ن~/P9Q2TdpZ#ѲA|wL2^ǿ)k;&Ɋ[*<)oY/'(]ה;kh}8~p:a,7z局lipM8WfF1z;R)uT@?G8W-ړ#z׎=w lnl`0qw}P%.ay]"P9_Z9[rq L-1Ҧ EͩdSÛP5Rmi3+~TsDK pfwAl=cY 4 w? T35j))~LEKT1kMeoh8'Ü eb/k)x3e=Z+OXL01yLpꑘs*`Qp TYBK@ϑN O "cWEV~7ԲmVxZB⡸>y3v\Fޭn#X>êCa>%.]z6w~.[f" ';#:/C&&x6 mE!LNRAYm4Oѯ(ΒEG#wPLӖ7kFBxdr ̽W;U`s x!UYN*9}+OzKG>5 ㍜٩v "A{|g#_Tw[zAsRZ3-\  )]W:Yğkr~ hxHjد(+ [aIn V3#䴟VpM7-!@SĽnw*ծhD`^yblM$/B~QM  5GPĥfO|Gj$0;!zGJ W|ޝ󫛧juM#1V` RGT2.!LoUIшPJb@߯mz}; zRÁcs|kb7xE c%_s`)TRU HJ/Ԛm~S'&uN 28., z/9_dT gO]rA~ pW# Ҳf]-@mK\tX轾18_s 3h$So7Fqa5jqMdjFZ"I]ތ_:7s+-΂a"t_TZX S@Op5|ˋ|WMv,W([aMM ns?%{ |c_}?¯>4yl}G)U'[g!s\Rta:*/?xWAalgb3qw.UԵ5m(!Nqܠd怱g=snϞ2ۇ+J XF+m%GXK\G#w"+ v7j3zW==Ma~ ġ{,~ɪȨ`2bG'yﲐ%fhR!.7$dӓA0;W=V{P'>{i|Ǡ;,VHGGA/KΉWH$Fhf˂ 'p7UtPθwCkH h&u@ /a{^ xhC)rqB0]`VCgL~g-5ER4?ƻuY_ZZs)> ST2b% r/vs* NyX90E'2kjteĖ8T,D%Ihy@yr*'gL{j׺[_9]/%u(eF\'N "-47Va{Fmzz٩IA >E1ՉDwf]h)U(pm!2 }MSr_O 8lI3~]ll"a.}pkn) Qi`,&">IbA)*sެ~HxFqԸwpQ'd[a@G U쉕g5JR;gɠ4p YcJ8{y{TV$)`+kho--Va/=P ^" XCbZ+%ͽb_n:Hͯ>@)+452+-O]mOnly ~}*3I!t>d]B%($lrӳ燛i_J6'ǣק;1ޖ_jvxo-!t/JӰa(I?ɺzuUx>8XZwA%hfІn~㥺^`%OE7!) h%GYJq k{ 2z PBGxC(Ox1,I350 2EťVK+cuʈHSCoҦ4/LMFTGC$3v[ Ymml30ĝ{<8$­v%<Fأht' iIN \m1F0V_x\o '!ˠz*hyh©LO IK`D#PIym0]Lf|vp.IsY,!CK`׳t쎧TŪ Wk"r%5sL>@ý?9"X wqbsRa CS)܇cJ{!mD:loN:n_J*//6s=:L uS0#S-|e-OR tZoy3/G I]ҬSaE>Ua=UZu!#:sguW l@_j#v{]W{0NWI7Օ*?[N'ǵ. & ȟ Ys?vR7Slj;RU?d%_Hގ855up!b%m+;pM <@Xe=nFa$d[j漃^n"d ٲ7J܂<̐6Ǚ%o{hMf*8 J?3:&[ƕ?W[j:"Cϯ龸LjY?T3_ƈyxGCS~rp"vؼmNH߇[G3Il Vil̜%ߟ{>d@%O;F<%W;_rIƏ# LEXR ) &_wyL d|֕8ĕB-1 A!*]m# dqNUX#j2]QMN8|ш`ec(K?-܏#0%-ZO҈_=sܼq76_@D z#?q(p~35nO%} Uj( xj cNdJ &iJ{P<&:?ZPQf-z=nDF@Yw%P6UU̶uM"-lA82 $%4seW:@7~79Hd,dM'љ"W@5|6쐻hPzνgfY~ A]`ujv_m%d#NY7e:N~gݓUyǥV]jpؕE)cɰBˣ}w4 WD ÿPCGX<7TK5mѳi!Ssz} P'/qhfTz:pbM_D7.|!ЯK`g}*̍u_[2py5Df 5Ww)H >:26(ˉGEM>jZ5Xk3ꧦ?԰_^t,:X5•A]o'b-@ # >  ȘLAD)BIs`u!S g #.عh1 8dt냱 _w˭B #gҿ@ľ& f~dej;~3lZJOT_ b͟<*_+ eРCn][9NםH,vKPHn4g")zXB| ! ),trVs|&O%/xwR_DӸ*/ÿkTHz|cj6%xtgVQA zW'{1EjRO>oQj& $][NCZ ngQӼ~ۑ^ I,O1a`E瞬c2v"hgR,S"!VjӴfPcicV xzԤ=0X D^4޶gTu+M u ׊G;jHᕗC<q$9c VR#QCQnMk4] u{}-<3$ߢ+%#䖎!bNA[m⽾igylZr^;-S+G?$`POO6nm}^r#췫Q$S6~VE.2Q\)reFW#교s>rOm=EJ5Dnջ8 OLk)|$9\ƒM9'MFD>K!4v]wiUiUH n#xA'XWŢ3aR0+qA[[Xdz4ܮTBfR2<ZY 7Gthn%#&rMsL)ukb^Y x*`REw, zu( F|xLNyJ@gݺIY=":ᚁߠ?@ wxfΧ>x GCݵ4 T*UiZm0]< M"a8&|?AyVp!1E,Z0[; qqf KҦ(>w;q?&Q= Dt錖Qu d--H-gF AyՄ|WcJi=K?BLxO6ڞW@il:'=dy]Ҡ`;%cchҸDOePT֕} 蝱ke.K㈇!!jen>S1iJ^pA74-Hӥ7 WG)GOs?!e*H {2ͻ&}xFKqXp 2WKX;TY SVڱ2ɖƏ4Rμ`\9lRZw9i3Ȃ۲W=0ٹM2w -'j>get vk\[_;zZX|d>p.5'-$=P#9g0ki3JXzнtbql̹پ5 T&8_%~Rݭ ,VCt?oE,W޵I%,G5nVJr0XNO*?c`o3w έPr;>Qyz =d'T K (svn1+1`ٕhHq*sVZ}p, _7E8#7cž &GWUA4냠-ņIQ>U GcS("RlrMkdGރ]3~u>ƩӛJxSHv'qxƪJ|Q=GmһW`f@ /K|x`MVςx0M#÷0qBͥCl=jPW<*Z6S,3?S-/5΢HJDud՟CzȲ ՞#)_|m хVO։&Spn9>*u$g|ag}@1 &7k?Pޡs7tLrWBgۈB24խoy&H(`EO*IMOzxZAچ 50{s)zBSxkl6j0$0T!ACdw_>QIHLa=|,$ʼ; ))r-@@k2J [-_3hkF2R5؋:apu 2*tj5MMcku8mX`PVXs*+G+SCe, P0EP]PCZ[6KS@[Qj[b?=8+]&WQ9n`~=>N%\#.JfN8!k³tԟh b-R3xdy,ʢL%fA%TAQSˏJM='J-q&Y.1kF=g52vW2uiU':F3:`G?-ovOA- E[JO u=9JW.RP PyX,sӞp#d(Ž3nWolCO5cF| J;f )H]ZO^ʪW NXU Nb.ٱ*O#8yte"Cb2"1 [J6ЅsFJ}! ӂ1^tY^y  L}ֵֽԥ[ BH^*>ش͚10[}ރ>45y Vʹ\8Fk%Lq\A.A0:y}c,(k 1X n7՟1 49]H}\D 9<7~A.Dօ  3vxS $e@QbIk dhImwT{9;::tPgg+"mOLWS-j?*YK2,iY_24u[آBp'[%Ⱥ9c1 ;a_X=ΑzH19W!˸g79IzDv h5*|kUKi>lH~b|EU*NVd?$bs2S g"F&g^0q{F&CV8u +^isB%Jmm]?O%Esjloa2fVⅾPD('ŝ+s'Rጏc}ة8 O-i.x h=-@?jUiUuʂ9P_ZӨNé&ش/vhR>~W8ӑ#4m{M-kv `\Nس;D2UcaLG"KƵ)]mmew+?<3Q߱5|q`Q9*I#2vBH0SF⑬65t>,#FفsBy^"%X~Ws)Z0բ᠇!x.'Wi|J9*c}m4x dz`a~Pm>P}~#|G)H!| 𿯈U0~sWB zl=dNqD;-z̝3O^xPFx1Uh|A.K5|<#0,WEa$3Xq`k| zϣYiDkcRxE0GO?c&7eA PVzmijK_5ꕣG_wK=C8AB^(Z0Z-gs*4Soud^`ok^"K_a}R2LAkY C._@@k',s;hfA'b˳H0^d1q=4:5A&Z0*QGUdB1܀''sa<;sB 7N.th~i. ?3tڎSB ݡ^X'!8]"p搄B+kgEBSmLYGD1_17Vޝh*vJ*nO=}HAe.̶-1Dv/!Q[íHD$ߝGŸSҘ% q.-ffTƝG[ҬK(ԻԻ$\IHQʦw6w:_cq .!h G4{&]zҹۉc(c<[olf5#Q2v/[7a'EjOڎbM5x0&5Э-H,Z5%„vK) )>7X\ӲtXmڮGzxF[<ԛ'{=Sx[ķy-H$j"-XU\UpbiBԮz@'BܞiPL]&L7t,1a?jQw69xgb-܇#xOWH4`'m4 H,}&vQYKZv#'-%A)1kh!jLr3dz/)tAV{NjzwEo iA"9g5q__=q3[Q`,l)͚TNs##0Z{k!de8xzwЫ_qF sf@st;v̚ӥ9's ].g0wJӞP5Ί|gt"؜lLw͞/*[Oij\hpvS(vB{SIKcc456>1P;U=yot~YY@v`5Vg9q_T/VM\(r.;c[܆R@УlT 2[^̠ZSG4 -[*݆/Xb]rF+{&RCBпc-%?#89V=d&#Y- g ­azbbz{a)y&bʢ0)ԙgOPrK wҁSnD~(칢i2ɋWT*y㵥9"R?Mb=&aYzB=z W~(^¢!f]qzE 7 W(qVw׹a05 1!6͸Z(wGT-`V!BKo"yuViGU\*FZ,?UJqޣX6s6ji遉RKGrAIU&]\/U*;/`01Mh.-!QS8 C@`d_&*|(X1tεۧRG1p捵}oCR&>Ng}"prollw>AԼd!KMjuk^$++`̲'.B-6ӝ8W#4Y"萤p7oʀNŖ8Za/2'^+K*i p8Ӳp^ɊkGt>he%"s7=h˔3n֞ڏD]$KcF$Y1nWq;~$"%GP%gV"4u`g EXe(J3#)]k o?oS+"t.[hKtʰ tRG\GRVVٵ-w.ҏ#k#`b0m urcΏj)_6e%xhIS\=Z3Ε.P;wzWPGo =6!2CX:7s֬M'uַvZޯZ .>6 i@ѢZf%bcB,8di)0y oKaM{LF_[`1.o<1"תy;bYMX|^xR#,Ylyy(lȈ=c4)F~q\/)/JP4']=ꏱ.w$"!̃{)T=[DkK @:oQ`u+훡{A,=!Ul6Yo,n# ?I:&6Kӕ:ƦMOTI} I5`Ǎ# Bj3C>kgyÞ4M_.~fo{MsnHO.`eWyL|]ԪRs"]͍AJ`ڳWzF b9UuN pjrHO Zgx }*eiBd(i]oZ?\~F d%`6h}W*&f@}1*b:\}^%.Qj_g5=Oڋ\S .`u ;UP,EU^qO(b'[āoRS9LR;+^G9vS+q*4VREb*J*)umgmщ˵VF@DO]#f~#e*Y3)8=M4XeUE sd>0{iկ=4 V_o*a"q .A#Pc\#Uvqd9_LI')t֌pb>@||X璿-Xw)bIO2\<{վAX`}jPYm6>ʴ]IEubgm0.?8cϿ?+>s>-~ VP/t)DB]QPfP5:f>F t`RH+J_A,eb{*CjSp#ߕNdouFa`瀦X S#U$DNit[0opUXjpV㙯Χ;)Zx%be42!(,,éKwhhُfv[hQ~JèKB;[Qzڊ8M1}#"sj㰾'jp^~x_S3Z.u[toc18Tz lD@і<};6kSkci׻8 Q\?I.^E#Pfi`:J bM}t·S2mSEIj tw ݲ*HHygã &Scx|.qP @\W"x`g`EbЧx).:z`P>;R™4;đ6r85Hl׋eW3XEx G b[J3zƦʚ4ˀiV"Tz3Iv&ZiyjZ~L/K4Kt+L Y8ާ47-g?B)wҥ,σѳA)bV I֫1 y} HxS 7,?\=ĵ?<̔93`N4O93.8ܾ X#LZAu:SQL[Y1:z0 T^d]=Kg`Am+LX5TRvN \̸k9ب6ūp;rޗkj\w.~~VjnAW򆨉S6fbwS)ڊ9rgZ>Sʏ\rFq] L /Vơ)uȎi Kl⪧n~ÙbD"ҏYA*>{ܟ!"NmO Ɉr:̑+}_ Q.?VP扃r P1Cugٯ]on wVY'́*uP<>e?Ί>< -p  4V7frGgui;ts !nA>)XN] /٦D`` TN`=yPYV2AåSX0P"Wa `Za]M__6vjM w Ba)~տ+57tYbj~3KzUpqP$dOҴ!'1úA<$曻%SR!L7![޸LAÉ$ȬJfq8>[ftǒf0K 5CTf9nI0O_nOM=)(B8Io7VNx:y~N=+^MyN ݺCKS}R}f|w@ϔͣ{zk)Ff/.QR@SfuW*߈#8]NK4B:1Xw.m$Cc<"T9u%,1v뻾$LAtIN v8O&@qN"6dy +85M1aB) "ZLC\.o{A ?䧲YnI.gCavF1흛EoFYθ}Ŧ>DQߚ RN!|m::5A / kÍ~ gaZ6聵A{C)Ch 1݀i? <ʹrNS TŲ{=]>8Q@Z"E7}FL;+6Y e**0|:IO:7*8PEgnx)yybVv u8!h-8 ZVٝE BTErnW@@sUó3h Lg'q %l (/#R3)3N{S paJIO`ҿU¢{I23r22WM5 \ni x/Ypr an/T]F!U2`&kDt/xiɡQisȄ8l.֠r]R׃!ߑnVcFNxn"(DI9nL\߬2.A-f@S :;* f{>įcvQWň>3B !me*1xhzVI~fpl0,"]jn7X|KIh6CƎKe$d[)Og+Mh|r[]G,pq+X~9!%?xh˾x@kfp4b([ Q!:&K,&PoSDᇳnw " MԩS%LS'럃 b`*҉s[{_@挲0[0@#[i5vdRㄍMcttE>y]I)KjuոytJorgZ5K&DPl_ٯCF&#z[z,mUMpV~-!p#zMm)DZ(<ViN ~wU TY?Bī.lc:)urTc3'^L &kbc"E^R~XM!. R @#18 CM1f9@e={6`dOj_3ϿšVTju&fK:yG 4􊠂Aw O69GB]c_u4n<[u|N)3x-,z-x}Pb5V9Ng5O('G/BvB| aF͍U U+QEHTvzn .Nb`ޫ SN1O߲TN5߃bP@E1y-_k2[sҤoe lʖ#׏;8JW/q Weup./ $UYrmI"%iJnȿ) fQ{ \d DF\Յ n,p*Xo)5B_,3]W1()%Ve(NEljDqt& Gg%osXAd!!U$5Ock;.m Mq?N8m_6r^* lhycLLWB}ؑ^e< $JV=uk5@|rYJu93a4p{OV26;L4[c?Ԏ?W0-6WI+CW)JufH~ؽ۽FluЧNl*|]h$2{]8"4SC}foxVuaѻt|f Yci%j4ReeyxՅr1i@.:xp>є n;ndcKm3u~Thg(Sj}r+FߣPQ5z{ݹAonj% Q';V&(𣕦vAZSNNZLjycqC]ԪMu->}Y S : M+Fi.E4f@[$*3~s%iKʊ? t'5h}m%pyդRB5ʺ@ 9Tʀ<Zj&j=G oD֗dNtG G%6`rA(:wM6gUЫ(pTXȡFqpPPwĥ6 ğs(!q &t$JA{)thR&bTɄ|Qx+RF, 7W8εi9LYTA =FYDyRZ g. ltP/AVpFܲխ!7 +uurw#Ns7(pO p1p],l9LlG"#lpº 8/ gpg+ȃ;f Igsgs SA8 A0Z~gaGxY\pL@`%AqwwEQgX&_2q÷Ő_ud6kyFs>€*:[{wGq Vގ$4zEa~ k*zGZrFfV 4&G'DE^_X@cNX/2tnP軌KckQrܲ-LhDJm;̮ _\9N"aZ]iۋ1:`)FM6עs&-e=`|0@\u!A zAfNяha V a*5.P9N P*(pj[F[M \uYFbpLC n\ Yofdh%j?&Huۑ,.!\ 2: 3h Fb2> VI$Rubt䌽nJQ*։r E#| m)HFLqRm'eo@"u×R7<њ4}nQzpB8{+9 iDv >RǡE"BE+&B#Y_ZYT i~ `#iR)|º4BǻxICmX>0@/\mGd׬}þ9GپlcOQ˪k[%C\東vf KlnnST89pf}B n|R~PNqxN+\xAKX@Yi0e@aeOcK!1¥㔬O_xqk.c>m d0X>0z 7˗ Zyɫ./ V” g.dꠘ"))}ţfE6vԛo2UES6ɽJkl b N̴qu9";ȰIتaʀ l-~0PlLMN}L:\X{sѧ$La Pht].њPmȧl%e)c4Rx>A+.XhSO: !H*0UtYR$HzK"sR7hs R?}{ I1+D+؟)v>h]aG>h%T i$e+yƅ쩨I)r )g{``i-ޑzG^C:@S MĝJ 2fXA$TGvL(_ͪZò (F S(&2`oi3dCv|b,LUX;LEG{2gIQ jj`\ ߐ mҜ{9m|NZC7gj9&:/!x[N}`ci{ 벍sea޿ZnG}܆Q:dz!Ork~ @QK6Z5@/WyGj%_)X-@ Rbڶ,eZe8e 1 ܡw ;3]oĥZ 3E$4YY7Nz!Wa-B,#<}yeɤUWSL]?S5Ϝ0-p=ר(p{y` I F¸9t~] mIx:b`8j1nn$Fʌ*oe3kl&:5IX:b.YAݪrb'w) q?v@}b Owdo"wӈsJ"tCܡ%VfL1s%]À'IJDozxGDD<-YKHn/O2zx4>.ZmZ:=oei0pMv dz! r&<' ~ π-X87 6p1͟Z/ImM=@+U}Ph8a t̅y "jx ,"Ķʼntf3ʛWD,SꍌZl4#FGuG^57i<+C]BvG{W4( 7h6H%@N9ƣr3<|z K19!B!MY+> .*Ig!' wS||n{制;b873M|qC:0|WN6c5XbX~nm'i(“S|5byazxcCi]c%-O$FaXiڣ]b5q[fIqsmNeZܚȯ>8Fp7?%Sv)0𰧉?jtgӆ&Uqkgd< cܘF9刲 L -MNe'jpOf2/ !h+)N$=^+:}dw~BD$xZ_fRs%lВ Zi #Ä^P&ct|\X;m qZ?QDԡ켂tRf+Չr ks4wֹa4ЂiЫo3cy)-/,t~X>?;Z9rhB 4Ǖ?!B5^; cpxZ9 0{3Re_`lb{1t:@Y>Usi|"JQ?1UwB6g)y=hPfkAMkbqKlj+)|݂%{Hz2Z A""vx%Z➯-َ}o[pCr~acqxDaHH!s8 #~BԵz rybz Gq^@7|U3ƶ&S>h qH5CrTox*lEJgI%"fh-Bq>N,0EEE?ZeL^v{ Ge2}Q%-~[ 1%e7# I k M+m-mڱ^ bm .snYlcҖ2i_)J>|\fJ.%9ǷT\!Ŏr~B%۷ eGy `I|(+%d%LCStoll9x$ ʙԴKJqvD9H"!_}pZ |' |wU(F 귈.tlx:. GgUbk]!톛br337m'p #}d4*Vo Ȼ/|ܸP OXaZc!&y=2V̭; {Mr&a1Ӡ kz_GoqԷ5ʃ"tk)K#?o$Ҥ6KK*E4(G Ҽf&u8 YsQJ 75PmWe6$^=DS-=hk .^KkIf]PJ''ZVӃB/䫀a/:فd3u/{? =,ހK%TĀ0"aMvwҢa2dD߯`'wTX? (@UeXֱq&P<ާ}y5΁Onq- g1F\zdi( k싨@z-@͝s쳓V+: ( Syεuؤ UB21_  bTl}.|s`Rb6l8+E בNqў?(w! tS&^)5k먔rFvȌv=yn7ԓwXͥ7sKic<π#"N}H{=0op[(vhCgnH* t_=OYJy {LrL#Q`@M 6y]C pn曻jqZ xaR9,!r kܮJ0"=gklH:ŧM5LV_8;DXE#P`>g#kqO=$tDިu\1"Wfc: Pta-* LtRQ9 c[Xz[˞Λt׀)yZorͦ+ N 98sFʱ^[.( ;*lb3'`J6kq$]/yM(ɪ0ҰlZ4ȓ]"ߡ`u gΙv56V46!gd%K1K5}/$r_v=l7}eϱ+̧ iF(D#*Ѱ|9VV `qCy A7Q@w] 2d =6;L#c$dR͘]=@ qV X]8n]I9~CmGsS"A5t£pLŔHl &CՒ)M:&0.H; Od70y7Co1r n0uUGa'Sk^x,+^`uOH$KZLpRէ\ˁbef=;okŒ=b/6؏vōaxǨrO1Ld9d4T&ɷʡh u0rL^Ωi@X,+LJco"g""JDqE.ћ}a3B]6{K)ld @(wm@\ٶӦ *$Ѥ}<"@\2k+,9 ʤ  /gMR^}R=, ^~{һ_2lbuvT֏mm1UOj(l֠h1O?(^k'j (xНAh;Tn~nL}xG39G[2lEUܗhŌ<ʋe>S VaI݂wPN222z']")̓|2*h 7ՄJqZ|ϷSԏyR%crw4ַ)UæN& 릖408fi]U VLBèhoIq !b}[ M* %e*zm|:k>qH?ޗR}k^CRt0/VægfAf,bY2_;(b߭$sbDe E)OwQTNt3= 87+rEidnL mT8X֧m* yja@9~cEVyHzD'Ug/}o5/F8"vs<'|>R]6"o2TvWgzEg{dugݤbWC7kf]8d,D& X5XS"ua,`qϧ޽u"[Np5V,js]>L<2 yaUJwL)K!] piCLSHV% d]$9[X&7Dvc a`N-iGt m܃Ag,VR 35A5DUAJ Dէl1s4ѿ,bY97p!1S!?kY몈Jm2^MVTؑA6h[&ɵ\0q^%'9?"W{-b%ip7D[@Ջk:9j)!Mww+Ľ3VĞC ~z*z?ɟOmswhaI&We *'J<|: :*~e=oS0IcRox Pdw5y|lv]&0摁i g1mɋ9␹+EK2 ʯC:xcNyO[n=k cBjq( $A (CQ0Y@pY&(aD4ciq {ոI*lN勝ִ+B8̓@^'>Z W _H澀Ԑ9㎇6/% cȪrZ&0n]58MaZ811 91^<;*w?xځ)%Tzאd4>^wfݥƾ$5 rq:A:5[rcS"l OI 託 H:RPNg)@>A7'VT}{0E,`j_UƦ>_1Fl:{[*jZNԻg~8GWh&O21a@qSyVHU/;St]{8tVqye'PKN& 5-wtαD~A$ iJ7N- 15鰖$6Zc|%>=qTSRTS~H!$%͉[ /4d@V&⿋pMg lO+Z58jmQ'`KI<0E:)o97^Yw m!H!WGjQ(|BhsۙXgo4rUf+,}Zer.53ًXD钗VhYqd8c4ȔP?2ʀm&/db,L'$,O>!{D,'8눮rSˏ$S>1ᴹD&{ZZmf<0x.Vꅰ,8aq?Ѵiu6X5]D.5p̜Bp: .*qo?&Hu10V:%h18OeX/͉Vs`i9nv"Jk+d %\±W+m&2n4gE,飾 *.bXS8sKS1R8(ғZ!H?۶WZΚn)I9)Uj#u"+a%I͇B*vskҋjjqFb <%.?ȿez25@{ï+Dq}k?h_H8.3MfTtG14ߖO8Z4NK9q,z +TQye 0 1.gg0eR6Fa 4tŸs7ddk=^@\"<FʹJ4{O`JGH¿q2 6q :  l5k"|=5EI\;?17XUkMs{`wXqؐy=ͼ^ڤCM81`H)֑kl\COXwڎTUaZ^USJyu .Os)1h4iGZ8̙YF1Īdymk~U:ReVimE*}4; $1{m;QiH |Q)r~_ dQ==4LC"e/*z=Ǐ U[RuD5Y>;C&grX|a-t iʴMr>M- j@/EkNs$T}ųA,{  mRBr}P)<3H*5`&GlbV #)?ߺ*byxү 62fVU:쬒"b}mh!]S[$|mԕK~项wHdd6vwHcx58]H2\!&E,!foGmJ2s2!T@%V .48߮f5payYh,$km|TۊPՒA9]2TLFI5(#2bv=6#MG_Q ͒tH "k*{^iPqCؽ"$i,Ĉ ' "(>Xg 6+Kx fPɰVk*jLV&k5Ϯqr$`1/q.@|9%?ìrM((Wj4&W2u9IA*l!ED͓Cz{miUr.dIBL͹G[=*ҕ+5 UU_qb!_/Th&,JC6"m+Pv'4Byr8o(IVƓv}IQCHMίqwBPh%QuVB<"d2Tk53I<-)_[zDZ P3zB(\ i |$i@]Iz8</3tqPPz7gWd4㵤$ҪӸ*S<~ .0gJw 8^MWv K})GI[0xi~Ш V'!4yA6KAS$k##P!],\->boG"z,YfP{uŇ[9cƒy<3XV0=?`F)ҕ! a`+TQmh.%Aժ M!I%eR}v@+6M5~1YV}s@:JH=^0ƃ4wIU5qtK9 &NR13V"N!lE,#xIvϒg贖P]g)p>U 9戺sSe;jE w)Ï @݆0M[АL*3XBF¬]smlU0n&_Fh tq޿6~l,KB/Tׅxԩ4 ;t31::X{~>"~#GnO>N"0߳p&g=[BF`Zu8q޹08V7`")ǵEʬ2@,4<&0i϶ٯ0= +"đjcҙ ߶V5gch;1)auZѵ0pJQ:a14 Vt߅k/V )%S!ue!iX{3]ڽ$ԈXvb_zʡ[[ל4)+QE0LB Suof4K=*% pPqOcY$T0R%}I.տ'1(+)1ACZd R&BշS Gz5x=uHB&@.@MhY;V,l7lʀ7!0ftvׂ6BJ!تzsOe )_ Ӄ܋n^؋s]iOD,k|ï'=لxM,⃖IƽZC֓n 9>٩S2~N\\ڋVR\(->PmA?2.T\4OjΚMZZ~Q*%A7g)Hm݋Y;9ABЅ=p›x* jEnLOfӊ 瞍E(4(M/ rtLBά3XG7T1o~a ]ZiL!ۊr*$>& zQ'ؒ0ri͖)c8Q* t#ڱ3W%uJ#T]񭚵>_݋'@onNҳ XXd# \格y8 FAM'M|bcGjx)O֌NK{FqT%TMZ][ʘFOJ۾SzDh9;<"bBםp# Syt'UF"&sѳkj- pTw:LYr)J4ݚ,5=QMe2DgiJ˦)n,68?~< &6Fj}iΣi}DIEG=ktVɒztZAxk;M 3Fp|;'kwJ!H1ޣ _MDMT g*]g(+ kwtժmxKQx_'e;(O?G_ r~^8 E.=r)[E/h TXy 1GNWW'Q5&JY4 emA]p:&+׭wNg6_X , sJ*Q`-`$-RsE .`j=kѡmԆjU)zgb @D"6mp{"!Vjʧ%D-mZΘ՞4(|qe KCI$|>%@ ⎜v``e]ICWR-G\W(-uU9_NbURa?avHknʭ,ioFxjuT5/Az*yK챽$E^}t0# f*>(rښjpE?~%Ϛl(;" %^kS]H(\qM,rRpEuܣz6o5e+&|n7WSbd:쑭.E&}߼?I(g5IX [jv^MJI&Xtw#s.IGznTVL2 |@3JT%è)V~G20[Iܱa6;΍/52\2.Nj'IO.*2m%2!FtGhqK5akC縂I}}[+6+Tʬױ 8m_Lj$f0uCDAYO] uKl|o4kP9yv>$5 a;-fo혤.U0]alh¶7:y:MtiNN\X=zZd|j|~Fn`e>wѢ!K?(UU'_Tqc1`{UX%|3:QE.cjJo͊ ]F@ x 11w8 ihbYa &:L$Vl}o^X.ftTڷkPX9k!͞octs4:t^FO81ds:"akPʯMPڳxwZJ`v0]ȑb駲6:ƽl.nKbI[hFmT[151RU M5[>p>d0-4Țfguch~@zj"@ғk M$P" tRrG+U=dRgKڈw~$Q_Xrp>C$`򹁠tiVO³Ymf..0.[j3!Q񲔙OUKbx=dC=Xڭ M3ylb;;ytcHJHEdʛޫgvt,BWyj-S3'B*HϬt"SVVFQSs@[61MW;< %RDAlT=]g7Q>o9Qx.S"'vJ^ U@#XBCé99Iy]4TW!iJikO2P ~~ي5}5//rI[WlAeblG(ɠ!uĶxΒo4~/=P4LV޵Pd>BBD g27K֠{F v}5rϩ6PC}]?:0˻wo=ݒ~`6P͇Ǫ$TVUfG7pڈm^ґq=12wUc` <)He Ǡ*u| jʃ_a(&D{ΰCjjo^nv<)4.][رr*4,4_Gn1AGtxNφ 'WT0:ِ ]+Frr:XIb0X^- y`${ZW~yUܯDr$Mne~ ϛwélL>`!FubC!jAJK7S|^>ߺjDI6.>υ2R94BaCiCP-2Ά6)o$񸶇iRܐXv"5i}Ee>:~; ;!LŬOב?r}[ceQoFq _ (_uw)7d!^t2Sn '(Yd2L4`XG&ٞVx-v Žw6`!m VؒDoc!dž\Q?0AI ߎd24r'`쑻zIo){B>J88\nʢfƬ?&Pߖ(ơ1N8Eh!8%؁"XCMV`闞I̅OcSB:V Ց+ҡ[m;>A5퀍J] COO|a Bj ~!.rlȚem!˘Ƕ~Dz l#EXTlKfXk1A OXjqFeד@;5UNE>^^fEs[ mGRRqk" Fާ#:X mTsטZg!_6+on~o.8"؜KrG_#+klb^lA`,pT&t̍:`M{M5SH/iE:墟rBzn5qȉUIMwrt mؚ3GQ't{ljߥ n%:0{ ٜ S!tYH,?5kuȇ^'x)s8U>j3BFC5$FRH$ :sPnd_84ۨ}bZ*|݅O/O/~'5q}5Wb[PY5iG7 i9_j}:W"#331})YMp?)mHyIZc TZpIPM,;.j g%EX"k0g\.?q2Sk {1Gu6h(d#`>ȉp?p؝1w&zgFfY|#1MN:q5b6FuCG.^O̊n6/QwnkJ/KtPPzpOc"6|8v'ZI" \mЌ nG9Z{ַVLdƼ uJsFUn;SF q}a-S41562V+p(($tK{jӚ|H3-cěЏHΘj% X?cŌbA^eqƵo7@ֈc"ٌ+,M_PFflnPe([m{pe)zϭDŽ‰6Ds mgZxDhNGig!M1F^cY&0o \0R y-(V=6qkh;[D\?ho>OE` %MoyK]́EQPA^gce]iZw$,4>PI&_1tA YH}-Cdg d&+yuk:T.'!:>ɶᝩ UD0љ6V((% B\> /Zlyٓ"c, AlT>=#vãK5D`#aA:D p E0!pzz˒^[ RD Fm3h.桟/A?XJ3-^RE47 ұnB@5 C]yS[B`LrZma<33nnuRqٲ'-`Ooh$owEL@[$D2"U,Jy"6tM%r*y[c/PjkR4>/|ңc䂙ۢrV*w&KM8-_rdE}XG'V8H! d 8r:#f:8q0L;JddTN4h ;wWehaSI7"F} PX/5kκob,Rs> B;~QB*;lKMlY]_(nIx?l$HS#xt瀹i LC ?:vxA нq :2PLάX]$|xWQ}$%GBeeWЋdMϸ*AUᡗ6aaYyCf]ìB0H\C !NdWpPF_F =,76)1ډ rW+TK^9`miu VsOT]ܥ^ko>w_Ea+$%Z=|P M\I13_ 68k} $ q JB]fޠE߭rp'lR5T4L##_/[w0t$^.ƣ ٍl'O |];y# 4<} nFhS?+"nUӳa&zb+@x|KK*ξ+b/J-,'7+;w*ڇ `H+MfՔvM ^$u^`>Ѿ[LElpLn6Vg2?:CxwG]߂g!yIwa[ǼN'TZٸt|Nmޝ[Zr-=.T05XaTMGXL w#kC";"NR4nV wEk$սG$=۴IuYNAi cuBhxC"jEUc(\TU^~@34buW6?/oJ$,X\mh洇t2Àn!|B!ʅ^@WЫ}TLƮb)y)yEry??3 2j@`K4q@P}vDa7J"O9D(_;R!*pS0ʾxjeMƪà2O?k[gݦ̨z!3b&#N.*_Qŧ+F!+.xۤd/"D\ Y0- gxbM6W;.MЯѴ6>VQ=Ӑ`OrCȋd&'Pfq+Q J[X/_;:>{HUH'c^!!sKL>f@j֧S<܂.3oaFð* F26#lrɺzVB9m]D>*MN)tyѣ-Mp(@89I(SS;W^m'{YV-ԇFM4o d؁+qbuí"%0dS;:ݜ;'/<JŒw$8[,w$i[D"<: a0o2e9`z{ٙ쌩`7bac{ZFES\a-Vr|a T2@aeHyJ_T DvSic刏y&'2™PY@~A!7K Å4SNXߊ$x*ĵSj?YYKeme/P"н.4bY&dNM@+v"Z9 H7+Ȕ/;gX;v ټ֠AĴ~QAT }T9!RzfVC,&q 0ぞc*6)P?1m G^ǣ?>AVn9ܳDN#zꃓ؆TxV_ĔGvPlb+?ϏSCs0dRɏhpE#UGhU/X's7t,UX"y9@kWJJれW C:H8.f+k;ڨrn-mvg ŗYYoĻ=?fZǓdR`8,( S8>㲶{AL #j|VGůM.WfEzASk@O,)-»L̴"*Q| yl0{ by!:*J"UVɮa%hk$W|1ըG%ոJטm&W+j<pB<$s=J?Gd9l#Nd"EZN꘧DmijLFxMA~ee՘]VeWO:b61Aޘ o8mXN~̮Q 0,pٳ͠^0hKʥfen(}+,OguVif +8 T5m"4/}u̟/.&m~27Zd&tShf'q9TW! OCjut] `t~5L2)=ewJVryzHp&M' ,՞tRQJ[ISx3^W@.Fe1nSMd<"|_#w,oW4)`3zV~̗ǃ%;CoSQ_P~1깽=$hk |Tf1]h. A$'5m1Gp&QѪDMg27C%$vw \dꊶiy kM^l*JJUûBXh`ts0bv=qj"Ve! QUcukZ#&4ľeSwTY1kTb*=je g3rEf4[;(&?3yQ }A @pn+$E}ݔD'>btAg?ݾG1"[/~%%aE8j..AT[{Veg/Fs\X%:d(3|YDo_-|V R3ʋC,g  !_UE2eedX bxT\.=}KG¨Ђ+qk'}bAŴ7 [4H.2 b$0hv+,IX - Qx`~X;IJdcDu[eڮm#AE*Ѐπ--:n&2 EԎ mteпMHd(9ho pD!aLPuԑ5YÿH5y20F\u~$}&0I`L& ;p_gDٯ,iQ'XsmXgC 1ߢsLs{❊ɪM-hzxAǣ_ b0k}TH1Q9@5Mb@ŏ8R~Iő Z]J^7 .&Tau 2]{yY9?1Gκ"t^XRn.SC3ǛEu0W Bvw$G'Z4Ҵ8'FJ|aAOqƖmXQajsdy=#~xO,>gqgk q[, ^CSXxރﭘ"xk"&N;:nLLFs\h {B\'5bgq1.SSݢ/]哉\-F~pW*w:><ռo+VrTt,vMS̉CY:=&JE`cnxì#BS fQ&$z {8 .K}°(.HkR<&Ԭ>"ĸ2-mƑUm2!G}A᲏ (e7Q~p Y*sBG:G?>TpUOؒSۃJ'%p/9WNJ\(n^&4D5V!\q;|'E~aoYZBS@ntK›a,1XBr,q]Vw0E,ƃKƩnƤr--hk `!{WO9(dr> `f$U6]=y)-JULiW(hS@kx`Xx4c#W 0\>uDHF!oj|* ]O1NA8CwtӫJ||qQ%dB军{>k&@'b} {չ]H #1C(P@+,Œq×Aq6ڱ@sy~'%ָ,.0S3SƷ8ٞdPo| cH'0,ݮbA+168;uS 'cxJęF+V 'n._x/ xU'`ҏL:vXBDf+o\sJ]Rs5bz5^cVqtH[?S By?ˈz)y"reXU< *xy;l93Y/l`*ϑS\mmAݚ@$ɵ W8ΡVa]㰖Bv@H|A>`\/q!ud'b (Q|Jgp8gMX|O'(Kӗ%|vᕂ:M13|d@3@6?+_'@*葮9 cbE+PU6*h]4J]D6[ėfztq.J;ıY(=+YOuf]ċE^K8On0G%;mF9Mǂsf<$bc +S482H5=ޖEZK!j C.U=X/,1?%jOl5G +k N8{ "IY8*1ϲI&fFU?Š'E+UDqcDʮ5(SS?N(5[N-3QA`yqYX5}ni/(7sљ>є ."39hDkZ8}@󗷥Lv%%n+K*(e×У8 )c.J yYܶ8k1Mk/xfBUC0+c_SUbN>kǑ%MՍR̔Pcfh^C:"1D, .=d:y12I%wu\/9[q# >Jm q(\|)s/]=5J ߵpR_YbwrzbE1D3||KaCb5^c8neq;\G^G8t hDQѣÏ :6`sP\m!"3P-־VӸ E|6/\X='2oJP\zQYR.;O*>:+:1)ᑽ#,;e@>~U }TG<B4%޷ڃdBKDߡWMSemZjr°c)i9U`Dy"eRk}X@(ۅS񸗶g@|Ljv8Ye|CIz2gtuAܟoS%ova0bJsCa҉@܋/wqC{ R]űPfs @z,*ʢ`Iyާ|8 S{cLjOZF[*l DptNhQLF?nf ?bN]M_ȫPs4h40Aٌ5[rTzKX8 1D=~I;hoDȝ4.84@2,{rӴA' )bkm:HaP3 Ve.uZcϨф)SVW pdv *`x)tv,P2jɎrw8 6*2T$DwL軕\'|3xgk}(P$s,49 $<oA%LvkBnK#D^iQ١$ ̮l8l$$>gᛳ@PduOfE83m֍DP="Suj5էijeF{='=I1Ξav{#&)a{TYHrn*n_qУM7)@bViLxGۄ:t图s=> {B[3iwl%>3\DXζZ(PNjs%f?ް|Oߘ])Cn&?%W9a'c4 "!5ڟ IM92=bP%(n-f.0raȆc]Q0&[RnWەRuB \Vѧ6e7^!h@#ȕ7*K0dvE!L;.졊Ie5 Z%PH@6t~18A_+# (0[o[ 1(xゔI p9 +-S8ro"IV H:8TY%)>Ú͢,[5[oRp}<?M$  $/^oT8ZcF)%_NIGZƝg|+!uWnW4 ,4'5pg&Mb.?@a-\ݜA>v+l[1ן"gh:I8],6{0tQ@/-aJ4QJrDRXmOmV:Ђ t}KݥH+JXvx[,/-Kvsۏu.zd~aF1m ]*) )ɀ@g gظ@#ą~e Ty+niD әM1+nPo@O߶ݧbG#ڷWa m_hmS<f}x6K&R`]lYBM&\L6N1bu.OO܅gg0v;F]?/%UBf`PLߌ~LNNO0IbU8;❝m`ﵾI/a|~wM$g\qT0{^ZJkqM1k?LI-y6TZiGRX,䂮Mg oZj<'vJ al喯 ) ])#VH=Pis/ZW40N{0IT xЫ];¹GċՕf~h:am?_^Z[ȊK XG-Gsigs}=:Sbu^yB(Җry/ ^mHg6srGt ۚ{NSt{&/uzXm ƴr`#FɌjl՛5b& xAa(Q7OͲ-(Rx)}gH쎶bBE~);啷hwBY#jV]+ܑG-Gix'.:ڟ2`JȷA:Peo6Jy)bl Itߜaju}:%Ӽ1-8oT##åi1b; h}V6G`b_ \yլ f}HgHėXD_yH8# QQ'R.Ŗ:@t[&z\ό1G 9un^DW׿~U>P+H F?)sP4@a3*f۔? 22x{yT ^?.X=\JSB(UɾC->xImv,yOay9kyuuĵf & CY_VHyzZE ~x7_A蠣봤H|Vyk1)@=1"=VO =o *wFӼa\ƝYWH4Hon(.,,R)Rxo_ |QW^3ʗ I /X@9NWXZO^qm"e+{4 7cthˋw!584i-Ga]篆 UbH1U"u.:5-e0̒&g4H#|(i9s(oA>{@KJF[O(ߞ9 WOg6+/j!mW1 X|g'N/ȝ7*pa1sUc(1"ZȈ ߜ=Dkl-7Ls7iL?:D[Ȫ3۱3'h'@xWGهTPc{3 =50R6؂?[o>xXxvY#jycK+fT-R\.&A&Blh&h@ Yd<1$[g$1k{aCP l)=l I4'@Nc#1NBͤg<[?f|Au.6߁]%_׎89OG(MT֔ bOO?W0V.WphBA̋_Aqݷcg_Rh.)oN!0 ?w(py{Y\e==>k40 c׊3il]c$6S::&;l~3}OWyB'=TsŶhP`bVZZ%e+(q7kt!'dˇFzI=6)vV*,vz ё6rXIm_"I Q3R42.,N7z㑫eWn`#4 !Ӎ&pT rJME`'|J4ܾbV,-p^D:U~P]ybc}&z[C 2YEyZm5:E7e^j(?ie'^:KL<?{Qa̚bEt7)rߐ W@Ǔ-* *zBhEC[pJ05+ZeMG*gg?mOuv's8n'a.^Kz(sાc,\UèxҐ-f]ol˄bcwg09j20ܪE̶#¾JpvvG;Ⰰxh.T21CL\?gu96\_s3)wTtX:\HްHȦP>H XrjhQ[߇|2OJV{r]թ!Rz*a']Aу^Bo4%}|6/(Nmv|WmBAʄ_!9':ٞG'h .| O~g# $ 2|wR`)/_aѶs0do^Kfbg/垹IH TML80x7[6Y5G%9o+ .L0@i܄AKV#L8*: ЈPR7' ~ב[iN` L(#[a{Y+?[BEU/3|/>Opl\Úe%EVLf/9L"/@sBD[1?yfP1u"7YJî~ZmB /)o_G5zGYK?+G=]Elb@~E2ROlY-I 1u^6/Wń)y/*N'6_#j %ؘ,Y;M&tW,Y3Q:eD 9}(b"( !2NQ8k<[gL~%du ,dɪݵh*8YǙG28WMު =E;xU޺۾S.c $L_>˳Ve}3 FuF껇ڮ~dub8QWk.{R>ml*vDO)J8BYb^ʎ\zzZ)=8JܧY:n']Nd#^WWr`} gmjzwle+cPz!˻ћmd?LV"l,WXa1/bEJKbߤWtäCW+ . k7*]jmL$h`5ju" sVkB1@:ϕ)EuxEK;^8:EUÊ] pR5+.i|j2'"dN }MdU{q >>gUz4ȑa"Y`xoRy8@#>EaY?ÌaXva=ʵ~ɢi93Ka{s?+ljp[F)`*X;x,v] JѢ6#9-l]̡HX2)2.82_gמgn ay$ :1^M7)H |L=B˝#rpjy_Χ۳FE@jZq @4( 1O2"|f4I{=sn 0-^'-W-2zW_MeBݳU *wme g`7Qq^Q#߾03fV쓥rvh :IjRìʇa;C{<#B>uȢFZp 'Q|ODS/YKEGpE?WytQ_&.ڑ LC'z; z؜?0r?ƺSYLds~yVOJp / m2N4[aSw3wA-[K$Pre|VˑF=z{0Ra=bN4`8Jwy ho Re BoJT+Ӿ_&A)_5EiBA)GI5`db 5-&]e - ,"U.+hĘ&xXFӞ(~;D}BI諵N:+‚(AWᴻiPxxlb6uz3Iv_ˆŊ>1$9OdUi1Ϗ2kmF"( XG'f7{-^HȂ o\>w;?,S$3v5ۣ A\aثt[8uOJ-K"Kft4@΢"%=embS#|.S_c(@nկqt*NJ1㲔1T fRt;b~a6ZvXډBQ칤M=@\t.Y{0.i{cZur66:>3:/~X:[˿^f#=]`b E&|w` Zlܦbɘť: XyFO*Z 2qsޠ0z#QRK,}հ3#s2i-4_$&Br>>^~ 53-'J{_ {8bV)Uw6xkr-eTC?a2G'qJ`d2W霡Ya>U2XP)vT0Ht"ʍsE Ѕ_[𝼉>aη9Z;6a#qD=A>P%w)oK=Uiq2+f?zVIk&B)}ț|X\nB+V4aօÕw\upѐi; {w[h#M-)Pt%T C( ,C'T@cOE c 8I gzM'3i-(;P|OP7 ]3LiQP:o0Jy|?c|)\l@ApxQYŮM|X$`H݈}{Ա?9R/Q=p'E*-4㨌Koz&z.YIkH˶B\z҆~o+4ǚ,k_tG.LɌV55y9,ׯśEdGAPp18GLvjr!1G ZZ4yL;x= <@ FPRX5]}Bq'N%qtjkϭ# ho=`aNM3ԸSAtJ䎕 oCYkiO)"'P.̨ ^UARoLijgw'hhTIc@clvqmx =ō_4[p2."(}ƖGx4xw T39o lzd+{.a% NWnZ+ltmmzީ c{i=UUݭU_nH+B!6M$g# FbU``9H<Vn Γ TzJI7qHߤϿ Z0%hux;g4H݄;^ ~Ntv=J'鿠 ֶW¼Ub(kdG&Fx'h&xԎKӾAZ^)-WT끗Y>JF5YQb:!hI@l5TpBE.}UW;=ڟ0~}m׺=gɼT}x~Y}%?xkX;,N;5dS*dddD Ek3x*C~&2pB[f0ޑCנUϛЇ%0`FCVyD\ uCkM,{ 5|prO ܹxn@4ռA pFxa:ܾd)Cn dЏ=*|u<]~/::>.ѽ?4XU[Tsle1@:y0=I @yhaq#KRL% *Rh7B<^6JVBQ34h< _D37sqFx&R͛D )nb:bWW@AJ%)Qc? %DE>mkI(0퉾:HEU6?YPQB(pq=3k

vt˃OuDGc`jk_9LYTΊ'@ύœ nP gBWbw {aX)d;vό2?iW]\CrP8 Ѓ|QӓKr tCp\o.m 6H^׎g cnI.zpZ(_xtL9\sW\s V7w63[H`^78ZffjQMo ;EyFz,yPJj\ߖK1Y (K-rziQ3,)PޓC5W6n2$[ _0-y8BJD ě&)|ENJsf։\&,*S6ؓ%uy.x3&󘟖 =cd jB/l}[ w aP~L`W߾yd}T\6f[PY@^ŸqxI#!9i~&{Ch03Zm^.41'qBr9w@n2oUYxG.;ٿ|/XrKKm=w|<$uO1$hA7q0G_@ h@j 0hr XJ\cAF̍I(L YZ