python3-libsemanage-2.9-6.el8 >  A `U]1̂/h# G. iIô懁E'3M@*nojm-6aߖM*gKIʨgC.F8xUbPB'%IT4ׂ$g-#È S$հ2Gf_C<peke׏vs.^n|PX!Ŀ&͉L-oϪI0efR9ٹebG6A@6lf:MgtdVL;6{HvF5G.7Z!3}@bQVrV ! n? o*"v+\)6Ta`VmCԶ rhQ(ZP85GlQIn]8 lMOl}zGV/Ivs"  |>\?!`ރHEBjwYtRz8Ա ([y?j#mPz1gOnVP42ce3dfaab09bbd84550097e71586bfd3bdf736cbb81420a27366db49d946ea0ff6ec1bc1161b9f6d099861ede7c3075678264c2戉`U]vn-TE<D,@[5M0߸bg!`güI "HUC^M CU0A F):]tyH0'OqP iwμl΀,8%KT fzS .*M'.r-.YvZo'LԈ!˟+&XY)JJA=GN!OŔ54~l9.au\ g !?Ļ 66:2^!簷0mUu;p8jW :zC3v"vA7K,㓧Vf>p?Ӹ?Өd  K  OU\|     dt(89 P:9BG H,ILXTYdZΌ[ΐ\Μ]μ^sbdbegfjlltфuѤvwxyX\bӤCpython3-libsemanage2.96.el8semanage python 3 bindings for libsemanageThe libsemanage-python3 package contains the python 3 bindings for developing SELinux management applications.`x86-01.mbox.centos.orgCentOSCentOSLGPLv2+CentOS Buildsys Unspecifiedhttps://github.com/SELinuxProject/selinux/wikilinuxx86_64WXX@=$AA큤````````61b8ae05e1b97818c5a335a3de24a09e4e5ce2953f1e2105121d102156b2955161b8ae05e1b97818c5a335a3de24a09e4e5ce2953f1e2105121d102156b29551377b3021fcd3f92a0204d6e0011029f190240682db33aac383b3b3a4c7f827d26b06e982b331a896d0766d1f4735a2090559c1037c230a478d7c29caa898a52e91d78a3db0848cfac5b7638d6121462efc115857bf35a31fa0cdfa8bc05c0aae../../../../usr/lib64/python3.6/site-packages/_semanage.cpython-36m-x86_64-linux-gnu.sorootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootlibsemanage-2.9-6.el8.src.rpmlibsemanage-python3libsemanage-python3(x86-64)python3-libsemanagepython3-libsemanage(x86-64)@@@@@@@@@@@     @/usr/libexec/platform-pythonlibc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libpython3.6m.so.1.0()(64bit)libselinux-python3libsemanage(x86-64)libsemanage.so.1()(64bit)libsemanage.so.1(LIBSEMANAGE_1.0)(64bit)libsemanage.so.1(LIBSEMANAGE_1.1)(64bit)python(abi)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PartialHardlinkSets)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)rtld(GNU_HASH)2.9-6.el83.63.0.4-14.6.0-14.0.4-14.0-15.2-14.14.3`@_@_R^]µ\@\ @[%@[@[[Zz@ZK@ZZI@ZZ@Z}@Zz@Zu@ZTZfY@YyYJYV@Y@Yx@Y.XX @X@X@XJWH@W9W@Wk@W,@V@V@VIVɦV=@V9@UU@UUUa@UUQ@U+S@S@S @SSShS8@RRrF@R^RNRB@R@-@R:@R-@R)QdQ@QzQu&@QfQQ@P@PP@PQP@P@PP O@O0@Oĺ@OtNO;@OO@N@N@N@N@NNNw.Nw.Np@N\NLN1O@Md@MM)MQ0@Mt@MLuLF@KKsKKKf@K{@Ka|@KTM@K(K@KJJ@J@J$JJJ#J#Jyt@JjJW-@JS8J,@I@II2Io%@Ik0Ik0I7@I7@I1.HN@HN@HN@HǶH*H@H@HW@H=I@GOGOGOG@G[@G G@GGGW@GSGNG5@G0W@G'@FFFFIFIF&@FvFɂ@FFF` @F9F/BF/BE@E@EEɿ@EEEx@El$E4D@D@D@DC@DDD@D@D{DDX@D@D@Dhm@Dhm@Dhm@D_2D?D*vD*vDDCCi@CtC@C@CCC@CC @Cǖ@Cǖ@Cǖ@Cǖ@C@C[C[C @C @C,C @C @CCf@CqCC}@C+CBCYCYC{@Cx|@CtCtCqCp@Cp@CoACiCf@CbC`@C_oC^@C\CX@CWCTCTCTCP@COCLCJWCFc@CBnCA@C:C3@C1K@C/C(C@C Petr Lautrbach - 2.9-6Petr Lautrbach - 2.9-5Vit Mojzis - 2.9-4Vit Mojzis - 2.9-3Vit Mojzis - 2.9-2Petr Lautrbach - 2.9-1Petr Lautrbach - 2.8-5Petr Lautrbach - 2.8-4Petr Lautrbach - 2.8-3.1Petr Lautrbach - 2.8-2Petr Lautrbach - 2.8-1Petr Lautrbach - 2.8-0.rc3.1Petr Lautrbach - 2.8-0.rc2.1Petr Lautrbach - 2.8-0.rc1.1Petr Lautrbach - 2.7-12Petr Lautrbach - 2.7-11Petr Lautrbach - 2.7-10Igor Gnatenko - 2.7-9Fedora Release Engineering - 2.7-8Igor Gnatenko - 2.7-7Iryna Shcherbina - 2.7-6Petr Lautrbach - 2.7-5Petr Lautrbach - 2.7-4Zbigniew Jędrzejewski-Szmek - 2.7-3Zbigniew Jędrzejewski-Szmek - 2.7-2Petr Lautrbach - 2.7-1Fedora Release Engineering - 2.6-6Fedora Release Engineering - 2.6-5Petr Lautrbach - 2.6-4Petr Lautrbach - 2.6-3Petr Lautrbach - 2.6-2Petr Lautrbach - 2.6-1.1Fedora Release Engineering - 2.5-10Charalampos Stratakis - 2.5-9Petr Lautrbach 2.5-8Petr Lautrbach 2.5-7Fedora Release Engineering - 2.5-6Petr Lautrbach - 2.5-5Petr Lautrbach - 2.5-4Petr Lautrbach - 2.5-3Petr Lautrbach 2.5-2Petr Lautrbach 2.5-1Petr Lautrbach 2.5-0.1.rc1Fedora Release Engineering - 2.4-6Robert Kuska - 2.4-5Petr Lautrbach 2.4-4Adam Jackson 2.4-3Petr Lautrbach 2.4-2Petr Lautrbach 2.4-0.6Fedora Release Engineering - 2.3-7Petr Lautrbach 2.4-0.5Petr Lautrbach 2.4-0.4Petr Lautrbach 2.4-0.3Fedora Release Engineering - 2.3-6Miroslav Grepl - 2.3-5Tom Callaway - 2.3-4Fedora Release Engineering - 2.3-3Kalev Lember - 2.3-2Dan Walsh - 2.3-1Dan Walsh - 2.2-3Dan Walsh - 2.2-2Dan Walsh - 2.2-1Dan Walsh - 2.1.10-14Dan Walsh - 2.1.10-13Dan Walsh - 2.1.10-12Dan Walsh - 2.1.10-11Dan Walsh - 2.1.10-10Dan Walsh - 2.1.10-9Dan Walsh - 2.1.10-8Dan Walsh - 2.1.10-7Dan Walsh - 2.1.10-6Dan Walsh - 2.1.10-5Dan Walsh - 2.1.10-4Dan Walsh - 2.1.10-3Dan Walsh - 2.1.10-2Dan Walsh - 2.1.10-1Dan Walsh 2.1.9-4Dan Walsh 2.1.9-3Dan Walsh - 2.1.9-2Dan Walsh - 2.1.9-1David Malcolm - 2.1.8-6David Malcolm - 2.1.8-5Fedora Release Engineering - 2.1.8-4Dan Walsh - 2.1.8-3Dan Walsh - 2.1.8-2Dan Walsh - 2.1.8-1Dan Walsh - 2.1.7-2Dan Walsh - 2.1.7-1Dan Walsh - 2.1.6-3Fedora Release Engineering - 2.1.6-2Dan Walsh - 2.1.6-2Dan Walsh - 2.1.6-1Dan Walsh - 2.1.5-4Dan Walsh - 2.1.5-3Dan Walsh - 2.1.5-2Dan Walsh - 2.1.5-1Dan Walsh - 2.1.4-2Dan Walsh - 2.1.4-2Dan Walsh - 2.1.4-1Dan Walsh - 2.1.3-2Dan Walsh - 2.1.3-1Dan Walsh - 2.1.2-1Dan Walsh - 2.1.0-1Dan Walsh - 2.0.46-6Dan Walsh - 2.0.46-5Dan Walsh - 2.0.46-4Fedora Release Engineering - 2.0.46-3David Malcolm - 2.0.46-2Dan Walsh - 2.0.46-1Thomas Spura - 2.0.45-6David Malcolm - 2.0.45-5David Malcolm - 2.0.45-4Dan Walsh - 2.0.45-3Dan Walsh - 2.0.45-2Dan Walsh - 2.0.45-1Dan Walsh - 2.0.44-2Dan Walsh - 2.0.44-1Dan Walsh - 2.0.43-4Dan Walsh - 2.0.43-3Dan Walsh - 2.0.43-2Dan Walsh - 2.0.43-1Dan Walsh - 2.0.42-1Dan Walsh - 2.0.41-1Dan Walsh - 2.0.39-1Dan Walsh - 2.0.38-2Dan Walsh - 2.0.38-1Dan Walsh - 2.0.37-1Dan Walsh - 2.0.36-2Dan Walsh - 2.0.36-1Dan Walsh - 2.0.35-2Dan Walsh - 2.0.35-1Fedora Release Engineering - 2.0.33-3Dan Walsh - 2.0.33-2Dan Walsh - 2.0.33-1Dan Walsh - 2.0.32-1Dan Walsh - 2.0.31-5Dan Walsh - 2.0.31-4Fedora Release Engineering - 2.0.31-3Dan Walsh - 2.0.31-2Dan Walsh - 2.0.31-1Dan Walsh - 2.0.30-3Ignacio Vazquez-Abrams - 2.0.30-2Dan Walsh - 2.0.30-1Ignacio Vazquez-Abrams - 2.0.29-2Dan Walsh - 2.0.28-1Dan Walsh - 2.0.28-2Dan Walsh - 2.0.28-1Dan Walsh - 2.0.27-3Dan Walsh - 2.0.27-2Dan Walsh - 2.0.27-1Dan Walsh - 2.0.26-1Dan Walsh - 2.0.25-3Tom "spot" Callaway - 2.0.25-2Dan Walsh - 2.0.25-1Dan Walsh - 2.0.24-1Dan Walsh - 2.0.23-1Dan Walsh - 2.0.22-1Dan Walsh - 2.0.20-1Dan Walsh - 2.0.19-1Dan Walsh - 2.0.18-1Dan Walsh - 2.0.16-1Dan Walsh - 2.0.15-2Dan Walsh - 2.0.15-1Dan Walsh - 2.0.14-5Dan Walsh - 2.0.14-3Dan Walsh - 2.0.14-2Dan Walsh - 2.0.14-1Dan Walsh - 2.0.12-1Dan Walsh - 2.0.11-1Dan Walsh - 2.0.10-2Dan Walsh - 2.0.10-1Dan Walsh - 2.0.9-1Dan Walsh - 2.0.6-2Dan Walsh - 2.0.6-1Dan Walsh - 2.0.5-1Dan Walsh - 2.0.4-1Dan Walsh - 2.0.3-5Dan Walsh - 2.0.3-4Dan Walsh - 2.0.3-3Dan Walsh - 2.0.3-2Dan Walsh - 2.0.3-1Dan Walsh - 2.0.2-1Dan Walsh - 2.0.1-2Dan Walsh - 2.0.1-1Dan Walsh - 2.0.0-1Dan Walsh - 1.10.1-1Dan Walsh - 1.9.2-1Dan Walsh - 1.9.1-3Jeremy Katz - 1.9.1-2Dan Walsh - 1.9.1-1Dan Walsh - 1.8-1Dan Walsh - 1.6.17-1Dan Walsh - 1.6.16-3Dan Walsh - 1.6.16-2Dan Walsh - 1.6.16-1Dan Walsh - 1.6.15-1Dan Walsh - 1.6.13-3Dan Walsh - 1.6.13-2Dan Walsh - 1.6.13-1Dan Walsh - 1.6.12-2Dan Walsh - 1.6.12-1Dan Walsh - 1.6.11-1Dan Walsh - 1.6.9-1Dan Walsh - 1.6.8-2Dan Walsh - 1.6.8-1Dan Walsh - 1.6.7-3Dan Walsh - 1.6.7-2Dan Walsh - 1.6.7-1Dan Walsh - 1.6.6-1Dan Walsh - 1.6.3-1Dan Walsh - 1.6.2-2Dan Walsh - 1.6.2-1Dan Walsh - 1.6-1Dan Walsh - 1.5.28-1Dan Walsh - 1.5.26-1Dan Walsh - 1.5.23-1Jesse Keating - 1.5.21-2.1Dan Walsh - 1.5.21-2Dan Walsh - 1.5.21-1Jesse Keating - 1.5.20-1.1Dan Walsh 1.5.20-1Dan Walsh 1.5.19-1Dan Walsh 1.5.18-1Dan Walsh 1.5.16-1Dan Walsh 1.5.15-1Dan Walsh 1.5.14-2Dan Walsh 1.5.14-1Dan Walsh 1.5.9-1Dan Walsh 1.5.8-1Dan Walsh 1.5.6-1Dan Walsh 1.5.4-2Dan Walsh 1.5.4-1Dan Walsh 1.5.3-3Dan Walsh 1.5.3-2Dan Walsh 1.5.3-1Dan Walsh 1.5.1-2Dan Walsh 1.5.1-1Jesse Keating Dan Walsh 1.4-1Dan Walsh 1.3.64-1Dan Walsh 1.3.63-1Dan Walsh 1.3.61-1Dan Walsh 1.3.59-1Dan Walsh 1.3.56-2Dan Walsh 1.3.56-1Dan Walsh 1.3.53-3Dan Walsh 1.3.53-2Dan Walsh 1.3.53-1Dan Walsh 1.3.52-1Dan Walsh 1.3.51-1Dan Walsh 1.3.48-1Dan Walsh 1.3.43-1Dan Walsh 1.3.41-1Dan Walsh 1.3.39-1Dan Walsh 1.3.38-1Dan Walsh 1.3.36-1Dan Walsh 1.3.35-1Dan Walsh 1.3.34-1Dan Walsh 1.3.32-1Dan Walsh 1.3.30-1Dan Walsh 1.3.28-1Dan Walsh 1.3.24-1Dan Walsh 1.3.20-1Dan Walsh 1.3.20-1Dan Walsh 1.3.18-1Dan Walsh 1.3.14-1Dan Walsh 1.3.11-1Dan Walsh 1.3.10-1Dan Walsh 1.3.9-1Dan Walsh 1.3.8-1Dan Walsh 1.3.7-1Dan Walsh 1.3.5-1Dan Walsh 1.3.4-1Dan Walsh 1.3.3-1Dan Walsh 1.3.2-1Dan Walsh 1.3.1-1Dan Walsh 1.1.6-1Dan Walsh 1.1.3-1- sync filesystem with sandbox (#1913224)- Revert "genhomedircon: check usepasswd" (rhbz#1871786) - semanage.conf - improve usepasswd=False explanation (rhbz#1871786) - semanage.conf - expand list of ignoredirs (rhbz#1871786)- genhomedircon: check usepasswd (rhbz#1871786)- Fsync final files before rename (#1838762)- Add support for DCCP and SCTP protocols (#1563742)- SELinux userspace 2.9 release- genhomedircon - improve handling large groups- Fix RESOURCE_LEAK and USE_AFTER_FREE coverity scan defects- reset umask before creating directories - Include user name in ROLE_REMOVE audit events- Don't build the Python 2 subpackage (#1567359)- SELinux userspace 2.8 release- SELinux userspace 2.8-rc3 release candidate- SELinux userspace 2.8-rc2 release candidate- SELinux userspace 2.8-rc1 release candidate- build: Replace PYSITEDIR with PYTHONLIBDIR - direct_api.c: Fix iterating over array (#1557468)- Revert "remove access() check to make setuid programs work" (#1557468)- properly check return value of iterate function - Use umask(0077) for fopen() write operations - Return commit number if save-previous false - Allow tmp files to be kept if a compile fails - build: follow standard semantics for DESTDIR and PREFIX - Improve warning for installing disabled module - silence clang static analyzer report - remove access() check to make setuid programs work- Escape macros in %changelog- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild- Switch to %ldconfig_scriptlets- Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)- free genhomedircon fallback user - Rebuild with libsepol-2.7-3 and libselinux-2.7-6- Add support for listing fcontext.homedirs file (#1409813)- Add Provides for the old names without %_isa- Python 2 binary package renamed to python2-libsemanage See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3 - Python 3 binary package renamed to python3-libsemanage- Update to upstream release 2017-08-04 - Use 'sefcontext_compile -r' when it's run during SELinux policy build- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- Follow upstream and rename _semanage.so to _semanage.cpython-36m-x86_64-linux-gnu.so- Do not list duplicate port entries after setting a boolean (#1439875)- Fix FTBFS - fatal error (#1427903)- Update to upstream release 2016-10-14- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild- Rebuild for Python 3.6- Fixes bug preventing the installation of base modules - make distclean target work - Do not always print a module name warning - Use pp module name instead of filename when installing module - tests: Do not force using gcc - genhomedircon: remove hardcoded refpolicy strings - genhomedircon: add support for %group syntax - genhomedircon: generate contexts for logins mapped to the default user - Validate and compile file contexts before installing - Swap tcp and udp protocol numbers- Rebuilt with libsepol-2.5-9 and libselinux-2.5-11- https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages- Sort object files for deterministic linking order - Support overriding Makefile RANLIB - Respect CC and PKG_CONFIG environment variable- Fix multiple spelling errors - genhomedircon: %{USERID} and %{USERNAME} support and code cleanup- Enable expand-check by default (#1319652)- Use fully versioned arch-specific requires- Update to upstream release 2016-02-23- Update to upstream rc1 release 2016-01-07- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild- Rebuilt for Python3.5 rebuild- Save homedir_template in the policy store for genhomedircon https://bugs.gentoo.org/558686- Pass ldflags into the build so hardening works- semanage_migrate_store: use /usr/bin/python3 - move semanage_migrate_store script to libsemanage-python3- Allow to use compressed modules without a compression extension- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- add /var/lib/selinux/tmp directory- semanage_migrate_store: add -r option for migrating inside chroots- Update to upstream release 2.4- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild- Skip policy module re-link when only setting booleans. * patch from Stephen Smalley- fix license handling- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild- Rebuilt for https://fedoraproject.org/wiki/Changes/Python_3.4- Update to upstream * Fix memory leak in semanage_genhomedircon from Thomas Hurd.- libsemanage: fix memory leak in semanage_genhomedircon - Patch from THomas Hurd- Move semanage.conf man page from devel package to main package- Update to upstream * Avoid duplicate list entries from Dan Walsh. * Add audit support to libsemanage from Dan Walsh. * Remove policy.kern and replace with symlink from Dan Walsh. * Apply a MAX_UID check for genhomedircon from Laurent Bigonville. * Fix man pages from Laurent Bigonville.- Cleanup handling of missing mls_range to fix problems with useradd -Z - Fix auditing of login record changes, roles were not working correctly. Resolves: #952237- Fix errors found by coverity Resolves: #952237- Do not fail on missing SELinux User Record when adding login record- Add msg to audit records- Do not write error message to screen when looking for previous record for auditing. - Add mls_range from user record if the MLS range is not specified by the seuser add record. - Error out if seuser or mls range is not specified when adding user records- Create symlink from policy.kern to active kernel.- Unlink policy.kern when done to save space.- Move handling of role audit records into the library - Patch stops semanage from removing user record while in use- Remove dependance on selinux-policy, /etc/selinux should be owned by libsemanage, and selinux-policy can require it.- Allways build python3 version-- Fix test suite to build- Revert some changes which are causing the wrong policy version file to be created- Update to upstream * Add sefcontext_compile to compile regex everytime policy is rebuilt * Cleanup/fix enable/disable/remove module. * redo genhomedircon minuid * fixes from coverity * semanage_store: do not leak memory in semanage_exec_prog * genhomedircon: remove useless conditional in get_home_dirs * genhomedircon: double free in get_home_dirs * fcontext_record: do not leak on error in semanage_fcontext_key_create * genhomedircon: do not leak on failure in write_gen_home_dir_context * semanage_store: do not leak fd * genhomedircon: do not leak shells list * semanage_store: do not leak on strdup failure * semanage_store: rewrite for readability- Add selinux-policy as a requires to get /etc/selinux owned- Update to latest patches from eparis/Upstream - libsemanage: fixes from coverity - libsemange: redo genhomedircon minuid- Fix handling of missing semanage permissive -d foo, not failing correctly - Previous to this fix the first module beginning with foo would get deleted.- Update to upstream * libsemanage: do not set soname needlessly * libsemanage: remove PYTHONLIBDIR and ruby equivalent * do boolean name substitution * Fix segfault for building standard policies.- rebuild for https://fedoraproject.org/wiki/Features/Python_3.3- remove rhel logic from with_python3 conditional- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- Attempt to allocate memory for selinux_binary_policy_path and free memory - allocated by asprintf.- Fix asprintf within an asprintf call- Update to upstream * remove build warning when build swig c files * additional makefile support for rubywrap * ignore 80 column limit for readability * semanage_store: fix snprintf length argument by using asprintf * Use default semanage.conf as a fallback * use after free in python bindings- Apply patch from Sven Vermeulen to fix problem with python3 bindings.- Update to upstream * Alternate path for semanage.conf * do not link against libpython, this is considered bad in Debian * Allow to build for several ruby version * fallback-user-level- Check in correct patch.- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild- Add patch form Xin Ouyang to make library use private semanage.conf-Update to upstream * add ignoredirs config for genhomedircon * Fallback_user_level can be NULL if you are not using MLS- Rebuild with latest libsepol- Rebuild with latest libsepol- Add support for ignoredirs param in /etc/selinux/semanage.conf- Upgrade to upstream * regenerate .pc on VERSION change * maintain mode even if umask is tighter * semanage.conf man page * create man5dir if not exist- Fix handling of umask, so files get created with the correct label.- Add Guido Trentalancia semanage.conf man page-Update to upstream * Create a new preserve_tunables flag * tree: default make target to all not * fix semanage_store_access_check calling arguments- Add support for preserving tunables-Update to upstream * python wrapper makefile changes-Update to upstream 2.1.2 2011-08-17 * print error debug info for buggy fc * introduce semanage_set_root and friends * throw exceptions in python rather than return * python3 support. * patch for MCS/MLS in user files 2.1.1 2011-08-01 * Remove generated files, expand .gitignore * Use -Werror and change a few prototypes to support it- Update to upstream * Release, minor version bump- More fixes for disabled modules- Change libsemanage mechanism for handling disabled modules. Now it will only create a flag for a module indicating the module is disabled. MODULE.pp.disabled, it will no longer rename the module. This way we can ship active modules in rpm.- Add semanage_set_selinux_path, to allow semodule to work on alternate selinux pools- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- big reworking of the support-multiple-python-builds patch to deal with PEP 3149: the latest Python 3.2 onwards uses include paths and library names that don't fit prior naming patterns, and so we must query python3-config for this information. To complicate things further, python 2's python-config doesn't understand all of the options needed ("--extension-suffix"). I've thus added new Makefile variables as needed, to be supplied by the specfile by invoking the appropriate config tool (or by hardcoding the old value for "--extension-suffix" i.e. ".so") - rework python3 manifest for PEP 3149, and rebuild for newer python3- Update to upstream * Fix compliation under GCC 4.6 by Justin Mattock- rebuild with python3.2 http://lists.fedoraproject.org/pipermail/devel/2010-August/141368.html- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild- add python3 subpackage- Fix -devel package to point at the correct shared library- Move shared library to /usr/lib- Update to upstream * Add enable/disable patch support from Dan Walsh. * Add usepasswd flag to semanage.conf to disable genhomedircon using passwd from Dan Walsh. * regenerate swig wrappers- Allow disable of usepasswd- Update to upstream * Replace usage of fmemopen() with sepol_policy_file_set_mem() since glibc < 2.9 does not support binary mode ('b') for fmemopen'd streams.- Cleanup spec file- Splect libsemanage.a into a static subpackage to keep fedora packaging guidelines happy- Rebuild all c programs with -fPIC- Update to upstream * Move libsemanage.so to /usr/lib * Add NAME lines to man pages from Manoj Srivastava- Update to upstream * Move load_policy from /usr/sbin to /sbin from Dan Walsh.- Update to upstream * Add pkgconfig file from Eamon Walsh. * Add semanage_set_check_contexts() function to disable calling setfiles- Update to upstream * make swigify- Dont relabel /root with genhomedircon- Update to upstream * Change semodule upgrade behavior to install even if the module is not present from Dan Walsh. * Make genhomedircon trim excess '/' from homedirs from Dan Walsh.- Update to upstream * Fix persistent dontaudit support to rebuild policy if the dontaudit state is changed from Chad Sellers. - Move load_policy to /sbin- Add enable/disable modules- Update to upstream * Changed bzip-blocksize=0 handling to support existing compressed modules in the store.- Make sure /root is not used in genhomedircon- Revert hard linking of files between tmp/active/previous. - Enable configuration of bzip behavior from Stephen Smalley. - bzip-blocksize=0 to disable compression and decompression support. - bzip-blocksize=1..9 to set the blocksize for compression. - bzip-small=true to reduce memory usage for decompression.- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- Put check for /root back into genhomedircon- Update to upstream- Update to upstream * Ruby bindings from David Quigley.- Return error on invalid file- Fix typo- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild- Fix link to only link on sandbox- Update to upstream * Policy module compression (bzip) support from Dan Walsh. * Hard link files between tmp/active/previous from Dan Walsh.- Fix up patch to get it upstreamed- Rebuild for Python 2.6- Add semanage_mls_enabled() interface from Stephen Smalley.- Rebuild for Python 2.6- Update to upstream * Add USER to lines to homedir_template context file from Chris PeBenito.- Add compression support- Update to upstream * allow fcontext and seuser changes without rebuilding the policy from Dan Walsh- Additional fixes for Don't rebuild on fcontext or seuser modifications- Don't rebuild on fcontext or seuser modifications- Update to upstream * Modify genhomedircon to skip groupname entries. Ultimately we need to expand them to the list of users to support per-role homedir labeling when using the groupname syntax.- Update to upstream * Fix bug in genhomedircon fcontext matches logic from Dan Walsh. Strip any trailing slash before appending /*$.- Another fix for genhomedircon- fix license tag- Update to upstream * Do not call genhomedircon if the policy was not rebuilt from Stephen Smalley. Fixes semanage boolean -D seg fault (bug 441379).- Update to upstream * make swigify- Update to upstream * Use vfork rather than fork for libsemanage helpers to reduce memory overhead as suggested by Todd Miller.- Update to upstream * Free policydb before fork from Joshua Brindle. * Drop the base module immediately after expanding to permit memory re-use from Stephen Smalley.- Update to upstream * Use sepol_set_expand_consume_base to reduce peak memory usage when using semodule- Update to upstream * Fix genhomedircon to not override a file context with a homedir context from Todd Miller.- Update to upstream * Fix spurious out of memory error reports. * Merged second version of fix for genhomedircon handling from Caleb Case.- Update to upstream * Merged fix for genhomedircon handling of missing HOME_DIR or HOME_ROOT templates from Caleb Case.- Stop differentiating on user for homedir labeling- Update to upstream * Fix genhomedircon handling of shells and missing user context template from Dan Walsh. * Copy the store path in semanage_select_store from Dan Walsh. - Add expand-check=0 to semanage.conf- Fix handling of /etc/shells so genhomedircon will work- Allow semanage_genhomedircon to work with out a USER int homedir.template- Fix semanage_select_store to allocate memory, fixes crash on invalid store- Upgrade to latest from NSA * Call rmdir() rather than remove() on directory removal so that errno isn't polluted from Stephen Smalley. * Allow handle_unknown in base to be overridden by semanage.conf from Stephen Smalley.- Upgrade to latest from NSA * ustr cleanups from James Antill. * Ensure that /root gets labeled even if using the default context from Dan Walsh.- Upgrade to latest from NSA * Fix ordering of file_contexts.homedirs from Todd Miller and Dan Walsh.- Fix sort order on generated homedir context- Upgrade to latest from NSA * Fix error checking on getpw*_r functions from Todd Miller. * Make genhomedircon skip invalid homedir contexts from Todd Miller. * Set default user and prefix from seusers from Dan Walsh. * Add swigify Makefile target from Dan Walsh.- Upgrade to latest from NSA * Pass CFLAGS to CC even on link command, per Dennis Gilmore. * Clear errno on non-fatal errors to avoid reporting them upon a later error that does not set errno. * Improve reporting of system errors, e.g. full filesystem or read-only filesystem from Stephen Smalley. - Fix segfault in genhomedircon when using bad user names- Fix genhomedircon code to only generate valid context - Fixes autorelabel problem- Upgrade to latest from NSA * Change to use getpw* function calls to the _r versions from Todd Miller.- Upgrade to latest from NSA- Upgrade to latest from NSA * Allow dontaudits to be turned off via semanage interface when updating policy- Add ability to load a policy without dontaudit rules -- Rebuild to fix segfault on x86 platforms, swigify on each build- Rebuild for rawhide- Apply patch to fix dependencies in spec file from Robert Scheck- Upgrade to latest from NSA * Fix to libsemanage man patches so whatis will work better from Dan Walsh- Upgrade to latest from NSA - Merged optimizations from Stephen Smalley. - do not set all booleans upon commit, only those whose values have changed - only install the sandbox upon commit if something was rebuilt- Add SELinux to Man page Names so man -k will work- Merged dbase_file_flush patch from Dan Walsh. - This removes any mention of specific tools (e.g. semanage) - from the comment header of the auto-generated files, - since there are multiple front-end tools.- Upgrade to latest from NSA * Merged Makefile test target patch from Caleb Case. * Merged get_commit_number function rename patch from Caleb Case. * Merged strnlen -> strlen patch from Todd Miller.- Upgrade to latest from NSA * Merged python binding fix from Dan Walsh. * Updated version for stable branch.- Upgrade to latest from NSA * Merged patch to optionally reduce disk usage by removing the backup module store and linked policy from Karl MacMillan * Merged patch to correctly propagate return values in libsemanage- Apply Karl MacMillan patch to get proper error codes.- rebuild against python 2.5- Upgrade to latest from NSA * Merged patch to compile wit -fPIC instead of -fpic from Manoj Srivastava to prevent hitting the global offest table limit. Patch changed to include libselinux and libsemanage in addition to libsepol.- Upgrade to latest from NSA * Updated version for release.- Upgrade to latest from NSA * Merged patch to skip reload if no active store exists and the store path doesn't match the active store path from Dan Walsh. * Merged patch to not destroy sepol handle on error path of connect from James Athey. * Merged patch to add genhomedircon path to semanage.conf from James Athey.- Fix semanage to not load if is not the correct policy type and it is installing- Fix requires lines- Upgrade to latest from NSA * Make most copy errors fatal, but allow exceptions for file_contexts.local, seusers, and netfilter_contexts if the source file does not exist in the store.- Upgrade to latest from NSA * Merged separate local file contexts patch from Chris PeBenito. * Merged patch to make most copy errors non-fatal from Dan Walsh.- Change other updates to be non-fatal- Change netfilter stuff to be non-fatal so update can proceed.- Upgrade to latest from NSA * Merged netfilter contexts support from Chris PeBenito.- Rebuild for new gcc- Upgrade to latest from NSA * Merged support for read operations on read-only fs from Caleb Case (Tresys Technology).- Upgrade to latest from NSA * Lindent. * Merged setfiles location check patch from Dan Walsh.- Upgrade to latest from NSA * Merged several fixes from Serge Hallyn: dbase_file_cache: deref of uninit data on error path. dbase_policydb_cache: clear fp to avoid double fclose semanage_fc_sort: destroy temp on error paths- Handle setfiles being in /sbin or /usr/sbin- Upgrade to latest from NSA * Updated default location for setfiles to /sbin to match policycoreutils. This can also be adjusted via semanage.conf using the syntax: [setfiles] path = /path/to/setfiles args = -q -c $@ $< [end]- Spec file cleanup from n0dalus+redhat@gmail.com- Add /usr/include/semanage to spec file- Upgrade to latest from NSA * Merged fix warnings patch from Karl MacMillan.- Upgrade to latest from NSA * Merged updated file context sorting patch from Christopher Ashworth, with bug fix for escaped character flag. * Merged file context sorting code from Christopher Ashworth (Tresys Technology), based on fc_sort.c code in refpolicy. * Merged python binding t_output_helper removal patch from Dan Walsh. * Regenerated swig files.- Fix to work with new version of swig - Upgrade to latest from NSA * Merged corrected fix for descriptor leak from Dan Walsh.- Fix leaky descriptor- Upgrade to latest from NSA * Merged Makefile PYLIBVER definition patch from Dan Walsh. * Merged man page reorganization from Ivan Gyurdiev.- Make work on RHEL4 - Upgrade to latest from NSA * Merged abort early on merge errors patch from Ivan Gyurdiev. * Cleaned up error handling in semanage_split_fc based on a patch by Serge Hallyn (IBM) and suggestions by Ivan Gyurdiev. * Merged MLS handling fixes from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged bug fix for fcontext validate handler from Ivan Gyurdiev. * Merged base_merge_components changes from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged paths array patch from Ivan Gyurdiev. * Merged bug fix patch from Ivan Gyurdiev. * Merged improve bindings patch from Ivan Gyurdiev. * Merged use PyList patch from Ivan Gyurdiev. * Merged memory leak fix patch from Ivan Gyurdiev. * Merged nodecon support patch from Ivan Gyurdiev. * Merged cleanups patch from Ivan Gyurdiev. * Merged split swig patch from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged optionals in base patch from Joshua Brindle. * Merged treat seusers/users_extra as optional sections patch from Ivan Gyurdiev. * Merged parse_optional fixes from Ivan Gyurdiev.- bump again for double-long bug on ppc(64)- Fix handling of seusers and users_map file- Upgrade to latest from NSA * Merged seuser/user_extra support patch from Joshua Brindle. * Merged remote system dbase patch from Ivan Gyurdiev.- rebuilt for new gcc4.1 snapshot and glibc changes- Upgrade to latest from NSA * Merged clone record on set_con patch from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged fname parameter patch from Ivan Gyurdiev. * Merged more size_t -> unsigned int fixes from Ivan Gyurdiev. * Merged seusers.system patch from Ivan Gyurdiev. * Merged improve port/fcontext API patch from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged seuser -> seuser_local rename patch from Ivan Gyurdiev. * Merged set_create_store, access_check, and is_connected interfaces from Joshua Brindle.- Upgrade to latest from NSA * Regenerate python wrappers.- Upgrade to latest from NSA * Merged pywrap Makefile diff from Dan Walsh. * Merged cache management patch from Ivan Gyurdiev. * Merged bugfix for dbase_llist_clear from Ivan Gyurdiev. * Merged remove apply_local function patch from Ivan Gyurdiev. * Merged only do read locking in direct case patch from Ivan Gyurdiev. * Merged cache error path memory leak fix from Ivan Gyurdiev. * Merged auto-generated file header patch from Ivan Gyurdiev. * Merged pywrap test update from Ivan Gyurdiev. * Merged hidden defs update from Ivan Gyurdiev.- Break out python out of regular Makefile- Upgrade to latest from NSA * Merged disallow port overlap patch from Ivan Gyurdiev. * Merged join prereq and implementation patches from Ivan Gyurdiev. * Merged join user extra data part 2 patch from Ivan Gyurdiev. * Merged bugfix patch from Ivan Gyurdiev. * Merged remove add_local/set_local patch from Ivan Gyurdiev. * Merged user extra data part 1 patch from Ivan Gyurdiev. * Merged size_t -> unsigned int patch from Ivan Gyurdiev. * Merged calloc check in semanage_store patch from Ivan Gyurdiev, bug noticed by Steve Grubb. * Merged cleanups after add/set removal patch from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged const in APIs patch from Ivan Gyurdiev. * Merged validation of local file contexts patch from Ivan Gyurdiev. * Merged compare2 function patch from Ivan Gyurdiev. * Merged hidden def/proto update patch from Ivan Gyurdiev.- Upgrade to latest from NSA * Re-applied string and file optimization patch from Russell Coker, with bug fix. * Reverted string and file optimization patch from Russell Coker. * Clarified error messages from parse_module_headers and parse_base_headers for base/module mismatches.- Upgrade to latest from NSA * Clarified error messages from parse_module_headers and parse_base_headers for base/module mismatches. * Merged string and file optimization patch from Russell Coker. * Merged swig header reordering patch from Ivan Gyurdiev. * Merged toggle modify on add patch from Ivan Gyurdiev. * Merged ports parser bugfix patch from Ivan Gyurdiev. * Merged fcontext swig patch from Ivan Gyurdiev. * Merged remove add/modify/delete for active booleans patch from Ivan Gyurdiev. * Merged man pages for dbase functions patch from Ivan Gyurdiev. * Merged pywrap tests patch from Ivan Gyurdiev.- Patch to fix add- Upgrade to latest from NSA * Merged patch series from Ivan Gyurdiev. This includes patches to: - separate file rw code from linked list - annotate objects - fold together internal headers - support ordering of records in compare function - add active dbase backend, active booleans - return commit numbers for ro database calls - use modified flags to skip rebuild whenever possible - enable port interfaces - update swig interfaces and typemaps - add an API for file_contexts.local and file_contexts - flip the traversal order in iterate/list - reorganize sandbox_expand - add seusers MLS validation - improve dbase spec/documentation - clone record on set/add/modify- Add Ivans patch to turn on ports- Remove patch since upstream does the right thing- Upgrade to latest from NSA * Merged further header cleanups from Ivan Gyurdiev. * Merged toggle modified flag in policydb_modify, fix memory leak in clear_obsolete, polymorphism vs headers fix, and include guards for internal headers patches from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged toggle modified flag in policydb_modify, fix memory leak in clear_obsolete, polymorphism vs headers fix, and include guards for internal headers patches from Ivan Gyurdiev.- Upgrade to latest from NSA * Added file-mode= setting to semanage.conf, default to 0644. Changed semanage_copy_file and callers to use this mode when installing policy files to runtime locations.- rebuilt- Fix mode of output seusers file- Upgrade to latest from NSA * Changed semanage_handle_create() to set do_reload based on is_selinux_enabled(). This prevents improper attempts to load policy on a non-SELinux system.- Upgrade to latest from NSA * Dropped handle from user_del_role interface. * Removed defrole interfaces.- Upgrade to latest from NSA * Merged Makefile python definitions patch from Dan Walsh. * Removed is_selinux_mls_enabled() conditionals in seusers and users file parsers.- Add additional swig objects * Merged wrap char*** for user_get_roles patch from Joshua Brindle. * Merged remove defrole from sepol patch from Ivan Gyurdiev. * Merged swig wrappers for modifying users and seusers from Joshua Brindle.- Add additional swig objects- Upgrade to latest from NSA * Fixed free->key_free bug. * Merged clear obsolete patch from Ivan Gyurdiev. * Merged modified swigify patch from Dan Walsh (original patch from Joshua Brindle). * Merged move genhomedircon call patch from Chad Sellers.- Add genhomedircon patch from Joshua Brindle- Add swigify patch from Joshua Brindle- Upgrade to latest from NSA * Merged move seuser validation patch from Ivan Gyurdiev. * Merged hidden declaration fixes from Ivan Gyurdiev, with minor corrections.- Upgrade to latest from NSA * Merged cleanup patch from Ivan Gyurdiev. This renames semanage_module_conn to semanage_direct_handle, and moves sepol handle create/destroy into semanage handle create/destroy to allow use even when disconnected (for the record interfaces).- Upgrade to latest from NSA * Clear modules modified flag upon disconnect and commit. * Added tracking of module modifications and use it to determine whether expand-time checks should be applied on commit. * Reverted semanage_set_reload_bools() interface.- Upgrade to latest from NSA * Disabled calls to port dbase for merge and commit and stubbed out calls to sepol_port interfaces since they are not exported. * Merged rename instead of copy patch from Joshua Brindle (Tresys). * Added hidden_def/hidden_proto for exported symbols used within libsemanage to eliminate relocations. Wrapped type definitions in exported headers as needed to avoid conflicts. Added src/context_internal.h and src/iface_internal.h. * Added semanage_is_managed() interface to allow detection of whether the policy is managed via libsemanage. This enables proper handling in setsebool for non-managed systems. * Merged semanage_set_reload_bools() interface from Ivan Gyurdiev, to enable runtime control over preserving active boolean values versus reloading their saved settings upon commit.- Upgrade to latest from NSA * Merged seuser parser resync, dbase tracking and cleanup, strtol bug, copyright, and assert space patches from Ivan Gyurdiev. * Added src/*_internal.h in preparation for other changes. * Added hidden/hidden_proto/hidden_def to src/debug.[hc] and src/seusers.[hc].- Upgrade to latest from NSA * Merged interface parse/print, context_to_string interface change, move assert_noeof, and order preserving patches from Ivan Gyurdiev. * Added src/dso.h in preparation for other changes. * Merged install seusers, handle/error messages, MLS parsing, and seusers validation patches from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged record interface, dbase flush, common database code, and record bugfix patches from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged dbase policydb list and count change from Ivan Gyurdiev. * Merged enable dbase and set relay patches from Ivan Gyurdiev.- Update from NSA * Merged query APIs and dbase_file_set patches from Ivan Gyurdiev.- Update from NSA * Merged sepol handle passing, seusers support, and policydb cache patches from Ivan Gyurdiev.- Update from NSA * Merged resync to sepol changes and booleans fixes/improvements patches from Ivan Gyurdiev. * Merged support for genhomedircon/homedir template, store selection, explicit policy reload, and semanage.conf relocation from Joshua Brindle.- Update from NSA * Merged resync to sepol changes and transaction fix patches from Ivan Gyurdiev. * Merged reorganize users patch from Ivan Gyurdiev. * Merged remove unused relay functions patch from Ivan Gyurdiev.- Update from NSA * Fixed policy file leaks in semanage_load_module and semanage_write_module. * Merged further database work from Ivan Gyurdiev. * Fixed bug in semanage_direct_disconnect.- Update from NSA * Merged interface renaming patch from Ivan Gyurdiev. * Merged policy component patch from Ivan Gyurdiev. * Renamed 'check=' configuration value to 'expand-check=' for clarity. * Changed semanage_commit_sandbox to check for and report errors on rename(2) calls performed during rollback. * Added optional check= configuration value to semanage.conf and updated call to sepol_expand_module to pass its value to control assertion and hierarchy checking on module expansion. * Merged fixes for make DESTDIR= builds from Joshua Brindle.- Update from NSA * Merged default database from Ivan Gyurdiev. * Merged removal of connect requirement in policydb backend from Ivan Gyurdiev. * Merged commit locking fix and lock rename from Joshua Brindle. * Merged transaction rollback in lock patch from Joshua Brindle. * Changed default args for load_policy to be null, as it no longer takes a pathname argument and we want to preserve booleans. * Merged move local dbase initialization patch from Ivan Gyurdiev. * Merged acquire/release read lock in databases patch from Ivan Gyurdiev. * Merged rename direct -> policydb as appropriate patch from Ivan Gyurdiev. * Added calls to sepol_policy_file_set_handle interface prior to invoking sepol operations on policy files. * Updated call to sepol_policydb_from_image to pass the handle.- Update from NSA * Changed default args for load_policy to be null, as it no longer takes a pathname argument and we want to preserve booleans. * Merged move local dbase initialization patch from Ivan Gyurdiev. * Merged acquire/release read lock in databases patch from Ivan Gyurdiev. * Merged rename direct -> policydb as appropriate patch from Ivan Gyurdiev. * Added calls to sepol_policy_file_set_handle interface prior to invoking sepol operations on policy files. * Updated call to sepol_policydb_from_image to pass the handle.- Update from NSA * Merged user and port APIs - policy database patch from Ivan Gyurdiev. * Converted calls to sepol link_packages and expand_module interfaces from using buffers to using sepol handles for error reporting, and changed direct_connect/disconnect to create/destroy sepol handles.- Update from NSA * Merged bugfix patch from Ivan Gyurdiev. * Merged seuser database patch from Ivan Gyurdiev. Merged direct user/port databases to the handle from Ivan Gyurdiev. * Removed obsolete include/semanage/commit_api.h (leftover). Merged seuser record patch from Ivan Gyurdiev. * Merged boolean and interface databases from Ivan Gyurdiev.- Update from NSA * Updated to use get interfaces for hidden sepol_module_package type. * Changed semanage_expand_sandbox and semanage_install_active to generate/install the latest policy version supported by libsepol by default (unless overridden by semanage.conf), since libselinux will now downgrade automatically for load_policy. * Merged new callback-based error reporting system and ongoing database work from Ivan Gyurdiev.- Update from NSA * Fixed semanage_install_active() to use the same logic for selecting a policy version as semanage_expand_sandbox(). Dropped dead code from semanage_install_sandbox().- Update from NSA * Updated for changes to libsepol, and to only use types and interfaces provided by the shared libsepol.- Update from NSA * Merged further database work from Ivan Gyurdiev.- Update from NSA * Merged iterate, redistribute, and dbase split patches from Ivan Gyurdiev.- Update from NSA * Merged patch series from Ivan Gyurdiev. (pointer typedef elimination, file renames, dbase work, backend separation) * Split interfaces from semanage.[hc] into handle.[hc], modules.[hc]. * Separated handle create from connect interface. * Added a constructor for initialization. * Moved up src/include/*.h to src. * Created a symbol map file; dropped dso.h and hidden markings.- Update from NSA * Split interfaces from semanage.[hc] into handle.[hc], modules.[hc]. * Separated handle create from connect interface. * Added a constructor for initialization. * Moved up src/include/*.h to src. * Created a symbol map file; dropped dso.h and hidden markings.- Update from NSA * Merged dbase redesign patch from Ivan Gyurdiev.- Update from NSA * Merged boolean record, stub record handler, and status codes patches from Ivan Gyurdiev.- Update from NSA * Merged stub iterator functionality from Ivan Gyurdiev. * Merged interface record patch from Ivan Gyurdiev.- Update from NSA * Merged stub functionality for managing user and port records, and record table code from Ivan Gyurdiev. * Updated version for release.- Update from NSA * Merged semod.conf template patch from Dan Walsh (Red Hat), but restored location to /usr/share/semod/semod.conf. * Fixed several bugs found by valgrind. * Fixed bug in prior patch for the semod_build_module_list leak. * Merged errno fix from Joshua Brindle (Tresys). * Merged fix for semod_build_modules_list leak on error path from Serge Hallyn (IBM). Bug found by Coverity.- Update from NSA * Merged errno fix from Joshua Brindle (Tresys). * Merged fix for semod_build_modules_list leak on error path from Serge Hallyn (IBM). Bug found by Coverity. * Merged several fixes from Serge Hallyn (IBM). Bugs found by Coverity. * Fixed several other bugs and warnings. * Merged patch to move module read/write code from libsemanage to libsepol from Jason Tang (Tresys). * Merged relay records patch from Ivan Gyurdiev. * Merged key extract patch from Ivan Gyurdiev. - Initial version - Created by Stephen Smalley libsemanage-python32.9-6.el82.9-6.el82.9-6.el82.9-6.el82.9-6.el8.build-id330c34350e17d92108f175e65b182d09b6ad5456semanage.cpython-36.opt-1.pycsemanage.cpython-36.pyc_semanage.cpython-36m-x86_64-linux-gnu.sosemanage.pysemanage_migrate_store/usr/lib//usr/lib/.build-id//usr/lib/.build-id/33//usr/lib64/python3.6/site-packages/__pycache__//usr/lib64/python3.6/site-packages//usr/libexec/selinux/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protectioncpioxz2x86_64-redhat-linux-gnudirectorypython 3.6 byte-compiledELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=330c34350e17d92108f175e65b182d09b6ad5456, strippedPython script, ASCII text executablea /usr/libexec/platform-python -E script, ASCII text executable  R R R RRRRR R R RRRR Rutf-8699709fa7abd251299f02dc816dbff32de1f81350cd29277d167db7a4128cf94?7zXZ !#,] b2u jӫ`(y|+âfJ>_d$%HlBjŜ44;gÍ]&<ώ,>l`zt%ձƋ!d}0'kٜ *e ׵C vŷ5LJ;XD* }ޒa[)W9z 82_;f6n^sږ c-.s1MNKꚒs_ ,!rzGTPѻ@*+΂`<^nӻXLxJUy='d>_DTP7Gڎѐ>٦G=E ~}tut90fܖtX$Bszf}׿@ody^~Ju iF+5g1=1_C&Q"Jg)֛/t=Rpmf.`X6THp Xw/Ĉ!馆[k35ijkG6rbZ^[8kF] c# $j?b Bz^؅HrƋ 0j7Qb,.J^@- C]h;m!.LSh[ ׌?9؜uR''@R(긶L$'0%f z$Mr 7L skPTqy|zH;u”57>*B%A[C? kA=DOs(&8e96<i̲bA7J >YMU3+Z%.Oxf,A´)#qR愰7xz"qnTӅ(gdSǮ*07 pՇGNx8ETrѿ!&\]}{wP]kJ,P &ۄ{co2k/UL Aڽ%V۲I̘K8~+ rDȩ/֦_Uk]}Ǥ3sPmEĂI^S?+pAPrF/8uMU%Դ-&0jţ\^ =vZAP=W~N7*yGX[Bޒrz)R(-4J4-(Ϛ] Uc{TJuj`#\\+|d,*֟dz>ERaH{"rsQfd"3i|Qљ̴: K H #ct ec?.%p@m{ fzhbzF%R59w;KQӤR6_ Fn .#/MR̘s5S)S }NpO=O}bb '0C"jO^DuisD~:E9qq>Ͳ9_ɛE&K(礴 V_n?.r,1I FHr ~ ~/wi<ʟip 2Usbݢ?; lHlz'VC*Ж#UuĚB)l@B NF?0O$RNg2Ͱph٬[&6 ZMYScZPW!6QM34A6vOv-%#bflt peIhu5=`:d`Mb;oz4MC7 I툈J4]Ռ'4R׫8ZL+”־}3K[FHY{-y7a˄ksbE_D!A~4&P$nnS=ȀN)J+ъ H_GkVߙ W Q^ ~~TnA Gc؍sVryCUܯ{ΩdW >6{#Lü ygZR*9:yo~:sSt9THYlDG$?8Ci6f;1>Mil׉ efr1c]. _H R4s9?.!XV`tY.צZ8RjUs0-;><LR[@*ʈ!bc`6/9dj;*LPGH>xHb^E! `t+B8UɺWY+,zVGoÛlj{?1ff g]w0s3]HD3rR_rCo%AUzjFHa1aAEv{VѺ:$fg = I=H~ffġİk5f]uO{sG7S8f^7 >EY˜G;߮ 1?X&tja=S9eeoOs8]VVd`)!DD{rոr7P#V9#j>dpgؽB;b= `dp)p I"BRmHcsR+Rڦj+AÜI>Er_5` x*E! unXE}TR8V 'm.>P.TYG*h-:WdjmU\:Ii/O)x8zc}`7]:l$,yU!G PtG(`1奔xջޜ|ftʂ{brf h$)Ģ\vI-^[Q@cvmsѰ΃tZcjȂ5ΪӛVTP[ӂ/6Ralfʸ@? +Z )S XWL1mdf}-) wl•HAqr@{*R_^$x'á⻇M^2W6n.7UgL,6c i·g0r>S *ڇ]ˌ#fnXvS4֜Iݾ%&),&b^pq(SvVDݗJ,Ό-Q0qNV҈sט=z$)Z27ZzJ 9>4Pj2^64㪫{(VႲ 2EP>ӭSzIWT<6Uc~GKGV+ -H*+}anaM+kqo*KR[/CASctx@%y̕E4,vm.O{?Bo}-|c #dD㿟)K [@#Rx3;73UVKǵx|GRNþKp(b:fY sEo@!OH"3 #L-RgʿmQGMM׻fdE,ZM­訵x-GܸywhJm'GB;:LB<1q+:7a^%\yϡ@'N &Upu~XJΪ(N1*Y":BG~ Ҧ(NBRDle@]kyd|&oISƟYRΙjʎiJKY gy{s={V{S y<_K&nr-4\OHIĪ$s\|^U“q_l.K;r9U²]֟W `"]#ӱhK\n1Ď =fY}ENH "o35!f?n2"`ɖS@_A~TuϦN!j#MMN\Y7vA*{z{qmRSoSNA gx"J(| kEP.u;釧;QRͶj2MBYc~v攦֨ hN谷q5]D I%5M1c xc¤j5J@7RUP < !&c߳ ءE(?u꧛ff\ḚF'͓/j^dP8P- 9b~ 5V 5yQ6o~-9Hbx7by!(̚ƫ&$5Tݙ9CB.;O`Q%y?Oѓ:V"VrѫQv=+8j b [+pƯ! ]K_7aZw+h؏S 8 )aV+ax5 C8s䉸D!ByQȵ叫''AFl !2av(YW%GLEJ6+b(7YYZ<йx3o((^$hƨ-B# Zd ʒן_GvU%}RԈ^X0ohhu},'0nl7FbƆ /\%@[ 6ĽfҎVP9_/[!4HZRWc ]R 1q-blj&өe8C|.<; z,a\`? E=sx𾱔^N9.>ܤPE TR{ /=~L+x.N"AqlN,|XlQ|VL(i^9G)p6H[r_(b\\iOd 3|MaJkJ"p10g`hAKH2uouDn?ɷwz.ncAW89SLJ#6"D%RZ9ek9 ~;K%ȅ4di/MeJ*ͦgqMw /֟߿y6(hżw W!~ h>N ay'[m ÜkJ=ٻwT|egh㬱'XQm`G~tɐY~|)ݙy:!,=&`Pv+(@l=saD,覉z?iRtEkxAm2cb6XRDmL^7il>8'5AyS$,Ԑ#qP$¼e'dGкfB_3GfSC\Icu ;,IQLUeW!*^sx$>0`:^V:Uud/=F&OpJA8jgvjP *L5cƔW{a3SSyfM-FtSt{'*="Shdq=6¬otV7[}z)<5Ƶ5{@'y&Etά/Cvn gRA$F^ry!&x&+SЩM l,AcfʊGC{|v%1WpDdAք@H6ٶTAy{CmMjH_/W-.Ih3<ùu~R׋x^hX"[?brq&8N3%`P7@<ʑ=2EDhM\ T ᢮_G`YHi*g݄8g9RMю w"T,@n/qXhmIڣɎU[k?!`S$e%!a0A 'C 3Eҗ_90Uϛ`/-Ҿ4ul%"! gfWDxoqI ɗP@72o\;-`sOg f﫬") &x(ܨڃ7?QwHd"DD+q̌t/rLPMֺOh%Q -|SzZ7b֎@,\iIdAoT5 {Rwi1^J5?%ap*h}[>MIAҋC Ã(Jo@1dw9EF4+A_Tv׉r=$.+PxC&JCB%C׃1shaI?aoL&G#=:.fZW6px"u:B])W]bz~?X? 2"H[i]i ^ l8mq-^k+ 7z.ҳHP1yxȩXW"Pn6_F(,L23E2SJ>GP RuZG*gqjEg?AP}%"Ч84ô͛q:(HEtp"d$f^_lDs|mvW d% Ʋb:I_xW@p0꾎쉋FIذmFU( >2ciENnb]`+2A@]w@sjs g &S`~}ੀcRv7ܶh:Ao[  #+=Af^Mmz:>hP Qh_|ޱĹ* 큽9#YkFa}ƶPXj#!#~!GvNi.P:錖2*:Ǡu" `;J @WEi+ I#9&qM sޡ+VwQMTݾrfhۑNyܓĐϖV!Lc}F)@(0ãD-{Iwv ~*2q)!cկw0Uܮ5և7 ވBXiߺ\oo:n[Kk݆s=Vp2ֹ֨ÔF7q2y5EQ.BML hNm/Z{*2O}e5 QʿFDT^j) :O9E,aą}\ݐ某3~KY2[@@4oLI;04-V[IY|Uf9t'ؒZ6,4E7삊Z^:h<\Bpgi4>ŧ-WW/EB5KSe١+%yn#˷ Lfm'q kh`FZ"8LOҰl ^SY gNgB4?SKCXӘe5QA8ov dcElxuC{pYP$X=f(/{B/$oD欘 m! pCRCY|~^gp ZpI!lEtd')@CЙ`opg'H >+/$WjUFY.pe$e؆.wM/CpKl]mGlamU1BHj@;!B ԛidx.grǹN~7JOҼ/\L4[%o 5'=^3r_&A#kذ쒌r_.)p$(|% l'\lB*BjRdv-Wq@#a1W]7IdM꒿HM\s$;;{HhQmAV'ˈFgaX[BIa}%( :kz`+zBPmʊ"g=Gbb6Eޚ+뙙5Gj^uX UX)%:ih:k6vc9u6K1H }TNo⒘{';Veڟ7]BxD]-x bH6"Qze3=V1jȋkq f9uJvMîJL4?nvQw_kV^I;l㱖9O4+0+,c`ǡNnY7y1#ɸp\úӧk y-U'7c9N/zl[(np[mB[sz(V PXt-t-;+3^O{0GHjExpvdop8zF(ߚ=T6HzzCD1*-d8?l# $?ZǾr[L7rׂG1g&?M5ϕ옫=ɓW3nU'kΈ{ ms⢻Hsy#qjo<8^;yd8aY~Y0mezvX*{`YcujqQ8Juި&Y0pT(TS7Wqn*ӛ%S}^#һpKpIM^ur '3&/)IMC峀.qAْw@y8{v*xpJWϔӃzK@#7Tk?k+~WЧ8 >QMXo4ËX&>،]).`K̹~c2Y6}?^n 8O_X=Zh8q(('<U 4{ 0P<#aQrge}rd>퐚q lJ}4!GT cE/b[6^ٯ'}9`ƯpnYaKb萀%Il4HnGճfj2Rn=3u=hӘ/7T,eFuowğ:˷2Tx9Zև1Ne.u3eDyӲ|R4r&I9)+׌\rϔ3S,P~&IYsP)7,=p!Zvf~ knpYVm?9*8_[Y%EJKpHVo@g@Sget V%/k\ F 46od޳$qbp`PN fЎ=pSQOgsȘ*1=|3r_Io-wu),k.:xuh w ($8t3F4ag`LwV2x˴эK3$ hF` qBgz!w 0Rc Lߕ+Y'Gu6Q]7sa.l9!n8z,qyNi:&8jIdJaa|93}x{2:@n*>hee ^Z`Gr8ƳAw5~DѯN> I0>//ED7!0 QܶɌIu8G `oy=&,㞑WT5j ~/KNK GfK淳f|xڋNnf:z]CVIޛ "8-JT Ee=~w:e-k5} d y.AJ`bAM-UyC|'Pc` е.͌6` U[{θII#Nuod6ɻkbqm PJûBF$bS< 6bT~2Ћс6leȯ`}=րK{3Z){$t3O[탺\ 㠚N3ݿ&2s"1 '!Vb3!0Se]b\T-PfýYTk}pװ @V/ NyFŸ3Yι[9z93-ev %{ك@8| vc]ݍX{V/p\.'(Kiɳ4,X@/*iQrܶ(r@dȩ,UOnuRHa#l<-ҟhlT3)TN/f>s 5;D36˺Zztc7a`=}%:SjFySۨ&PpoS#%:)C:R¹|[ȿS|"YlYc c:`DM4LS0 cv]P!c-PS\LfB "J*Lk 0/qmP1 6ES$^iJwa'R3B0ʸ:;Ae0q~M7?'gcp>R%4ʛly@/DNBnK ȓ ˏ3%ȪMצ+ ;A7Z;J@Gk{>.t{:Sy SǽXFKkYm)!#tDJ'aw`<sv)wp#hpL) F]tYk?-k}ML`]_ʤ#~J|A B,O?a 9n_â3Fy!0d1R2Pڌqt5Y2w4amhu:)³[}#.13GRHy8c8G7ṇLu~X  jo4-[sk oE 9uUb#FAL}LҀq@+Ynjq~ ?<dq>W; oaeF*Cg>N 8Q R[A~!~xx7l0OOa=OM=Fq嚹9K9K:Jhv3-6]}KʻZ:pTF4by}Z2Y3VقW3#\-Eu3Tyy;ī}T&r.ŷw2wnd61cczmM_bÚ:BLF-0bK=@a(KǠ7?S窵Fӈ+T$m 311CxLI0^(0;cԄueIT^|߅%:X'+&X4zFFH:Jɡ}xCA{DQlz`y`+;!;C|vY+rĐ5_2,i&&ǂ#vYbwD;zLcU8~#C v)i ORrH`T&fluTW)rGxw2e `!:Hx sir\>2ґO5&~ "&Նl%*@SY>n9NXFzjF _:>1&3 (OL9IEMP(2r\[׮s%k14-q4?-|'|smjc(}/SS;)|Chˀtk3[ 1@ ݔvM͋&B#mMK藥4c#Ґb1{ߦ2W4ECuJWN漨H^4|YVbvKˆۯƧr_Q{u>jyVƎR7#˘F <,f`$4e1԰ {O*P6 aӟg~JhG(A!4Bw+@).YՉMB*j[UKRsXh?ƭɪrTzZPQoH P[Ϥ|QU6ulu}s7 *j/'|oT%Y|^v5`"lMt'ٯ!; #AwP>JTΌK^*z2;.^p!N vaKCD6Π |5O01R:?].A8NdnIoC|:s=. `TSL:^t FB99LQJir:40?/%2x]0T CQnk>naig2n|)*M.nHUADy3 ?N?z,P'^7wlڬ[BԈ[ݸs@o7AW|pcY"qބ}QsY{bKQ:lf_I>Es㎹v1ƅ'v;Z桥LFi2~>p}1Cz5 4ØdaG\F;P=/QQ**jY*~SPN*uKv5͗Ư?ϖX.8" XwَPh"t)vҷ1^ۚͮa?^, ҋy͕o%ZbùS=jQ4~^ RZͭ^:{Ɏ|UdQJG"(вk`~Ǹ+Tju~ImwZo-f/)ދ ] q^Uef@iPx&w#w4\|RJ74gW#KĐnΌ8{VϿ@r Q^(ek#[/٘%/dvl2pZ{/=_Xt̉s F>Ђ_e)0|3 hwoLpI@]̣:'֓n?T`J(~J,) ^lTA#-y\Um&MKjvM]<ω1 W]~W)T dgKk̼TDzOt'AM ~T.453b7؎QjNrQmiT{ߗ7WlZ dYW jg*b-"))IZ+X7%X'ȚIj{NP]iѡ@d!|*4O#H(meP* g` E3M{FeIUd&j/Kjђ0~]YO#M pWC2CaMj%~6M)ң!-Al01>̅}{- 5w˓At5,Kn-Y >FR>9(eIM x;-'IvZP#kM,rQDJ4ՓYо}fۄ3um9f$= ^˥)iXف৵ɭ3}*rǕ9 \͞^Bi2>6 R*KPJgS? FRD>(/)T<2pL̙eq((0-U^_ pj${#r~K!9zsE` 4.q[oNT_2s Lzo"Ѐs/͡i=)[$ξZ]rdX#{jۿt r.n[,b79Xg=hK HOpS)m *HOYUBBNsq${R[Wn.djRMӅ]xi7vZs\8_S#Fm0H1QZ0۾ ݠ?5c^JlRׂW٣Ye'6VBXnRe9 όy ˱d %{'8Qhs6뼺}!t H/ciMݰ`iޤ=^+*Cz ;cgn0M380 , @%/^D|X*R]2E8r@N^WrFi[FX^o)rC;HrLxGb{QCliȎUe4Fvfo TC sd9͑i(?0$ ʕY+bܹ{X850u<b5Cጻ@-K*q,e%=F$2 bx/89CZ_1J[Ha&DÜ,Y`S|TbHFQ(W>ը, 8FE>OD98ny]^e5[B͂E5Gb\Q+uz-NJ gͨ;BU[8d\2+F81cB+}]ݻP.ǧ_<8XŎ@b@ˁ[Ducb3l/}S!!b-Qn b!0 !ƃ( Q Xx4oHr9BŖ :ލ]Yʹ?0Ԥ7 ADӉZTh+ 7[}}YTm|q ;ʫ+">H|3ි_>K0<={'tNp#q/t'~_Anpt2i7l]գ0FqB+}dBMՊq5&o!;xq(NB8!u*Q$ew%BNԸA8W+ ZbY6Ȓwa-wqLFVGK#KBA}5̱zLYvʼn;tuǶQ_7WLL{X<Ξ#ؿTmD"&F/{) M+p`=}v+9#uOtbز4\p5Atm||⹻l+89%V8ر )AG&\÷MOi~0C5zJIWCLeC6%/gc%QT z~8VgP΅+97#wz=2>ǒFϵ=H64J$dc"\ӂSp2iD T{xĬQgʨSu*u$NPN_[Q5asLKXCQjZlK҅ze1s صiaeUX^veu7 $B$cԌWw#%")d/Ġ+A1AlHTI֍]Ew52CT/ N~_g*ij?(NO3p{)p-nDs<(F<eaQ{AO~-A R~Bi+3at̀ |_]3"V]%nHFIxA$T^Ќ\J$S_jST̀8ѭ)P\r@q} ?Nڴ; )1(1\O,$E-H$~vOs6xɄF= Uf1"q[)Ud~qYz @YWrp%ƴxBWcscjry+`C]7S݆ Z5{acŊ q4E}if?genm+gH:mE dvIr$G\{e} W 6g#sR↔Kَvwۇ:1–@vOXs : ' V<:T5#f 7KHBeZԄJс汿co(!~ധ!ɯЏijbz>hWרx@F3; ɝ vSͅE'+!lr)fݖn>R% Pu0V:P rV][ l/A dcNp!mU4o[D ^I|{I*oDáՔ8K24ſвpxTCԣą99z곑pyIDFL(arvHYIB,krUw)ɿt!ueqOC1O p{vB;6}Z'TAɽNc]kJo(:'82QNMm#x #m~VnJ "7sLc8r]X{uyMa1)̨-Ig[i*]+/( X,F %YӊAirqڐ<.dayYq;]/ԁnn+(1w,{& s WRԟf[[10iTnޒ{o-DMFmمDO;놎Do4|!pY}gV6n|uQJ1 {gr_0#Ps k1 4|Sfa.HE{`;ƾX(c\ 3zlP|Ă3/IE6젥75`y\ߊr0DʹgDéW?i֖VXt^,>1{t$6>/D6Wk a Q/4A{R 7DbE!Mҩc5nWsPD \_ c^:V$g{cRU*ǀ-EI2dB0x/. Yxz(Zt#CF\0{@ݚo9v"g"qTVq$͏@64j_H!\CWn)7m|7<_ kC?{{ml4 Rh^cv쭌,B[!; )xC frl͡QN`&Vs w>2,y|ThYhm0STB)oytRO{$*bwh{AjSygFp94.lJ.vݖ- v]ynl&evj>𿔰+Y#yǷ"bMIlm ~r L֫*=ʘYp;jRލH3╺^ ƠLkQ#y,_|_HGEnw}-NvTb5j4I@gdZ9uJc[EYPV7"xvpLƬq,phڏWU3)f-aŮAV50ٗMh4L'Mk*aL a ER*^ (D $gjf] ۪ˋgM9c@W76+VWF>{&1G_\a%ܺe;f_dj^Imkwω5ůvA$ݧ86dXZ1z,w7myi1tHO.b)%b~@ ~tvHv&Tmpw $=PrZAua:}J936z :yz/FY|#H^w*Y^Cyq,SfY$LX s1ʙh+'YU81XpS#-I (k-Q. 'lB2.>H/}'b\)Zl+` Tj4Wa<lܩKjK?{*Gr,eWeZ!0gUK1&lOI'_K/9g9)>BPAX[BCEo6A9:ʲ#GӾ)HL4-޴5pKC*L@YMP!E3],JH]UHO}9 3 Tv jh0>*t0%*mx ؆vW_]DDpmHvor.?aj޳GJ|FT ݖY`T|IdXK%:[)^-9fyy.~ݷ nPRfFTf[&uZ`mP'+J+P]9(rxL2㯽P )!kAj3[;hG˧1j m&j_d㜪v5A)72l.,67X{ /xFoc]`=SmـP:U .3 כdO& SqPxIh=$*sCd_3:0er?rhiii.loղj2Yޑ0i\g'?881ը|Ԇ$EV{#zQjZu5szzD7 S]_iXS>מh(8i2KjHМr Ǐ_ 7e,Iϱ TK˦n8jǝx뻍 ^Kٸ>ꂈЁ]Xr2lA|z0uDB.0H;jĎqN.%e.?Αa,.u&w\ @CYL+tja Jyż`v%[ )WxK6Fe\GVq6cesMmAg׃Ք/sV6ّ`pN&?R_R(Y}~6MzI V `w*ϩءG_T3Fu ,ی7on>7X_8Ņ̧IL&}1|u =5Vfh&'0D#{i\jPMyb$e%IuboP8I;`:pa(xj[6Nzۯ/u?d*&Y܊({2a:c\e8+Zee#tu*-#ϝ Oy,t>{?'6m~BGkO}$jY[k^ba\Ph6I#JIVXY6~bȒ::dg{lf ;TnLVKN)pR5zH.i'^\bu+}kyepmN"J)f_?J:^J*Wkb8HdAWe>xEf5#]I(p =3tu-x.TP}zXR*ԈXQ1J/ PXXx xyac:Vӿr2Kc%}PMkRW=MŨTI=% +AiōQRɖ|Qpn|(;PgA<z}v^~gǴ9W'NNh}p FS p >qFGo1rZt-BtlN̞M.co૔x+xv`(6Aҥ3->咃_}Emr?!cT-RS\&XftW+wꝏf߮ OBMB$Z%Xf`;#"Uwe]t}D⠅E;ڪC4<+9V9d2[7Lvcgi M Tߴ` u~X3|-$# e$Ą#dTKM+*FÙmјA՘K_m NtvES6 EcPHuF1}<0L%12 7AbB&&- M9 lN'>?~9JC y&$7nbD3 E7|d_fԉg +Q0ks`:N]nTM`vaToVɥp!Vcg^(66+ID{;7|5I!y p.SzUg4~#'(Kғ-Wuy y%[G. 'QmN;A.|ӳuSC.ZY AsS=<{bD=d#&5,C%HD޿?hV7Ԫy,iɱr L'.@ JFb l[8EU.Pv+ b0lp!tx0\0 Ȁ v21j"P5%Oh_92ϕ \~ղb ajotÄ5M'LaÛX{ITu7F#uT l=ǚ_5L0@$%XvӺ?6+cRLd="\U{$5׊)qׂ+]/R&Q+cvILJOQ0TW–,FP띀!;YLj~NX)Dpy6--KjbNݸzu*zKxwQ.UyoMX}C Gf˟G6Nh =;\Az9{m?AUv.Vq8{RJ¿#؆!Ӝ_dQLve1 ~lfN z# ѐo}8GOj]Jka LfTMM=m<5^a 䟅N:&{/Rw9+DDw~H]Ta@\#ӓ>$78QR㔏G:!QT4fvt ER]>J )Ȩet*JE:`zIn! m{O-ju|Tް}piƚ#ů1I݅*)Fr/,>sXr/#c|<=Ԙ$E%X~x/]9j۳z*/Ηޙ@ru䪝?q="}:G[}fgm>Z7;۬%j8&-4h< E"[urgm9Eftvz4w&hRl̢ߥ9ZB1,P>vMQ|͉gޫ}&݂wJ* غHop{̥$lʻqSr>5I??(A^ү)h|A|2o;ž)dKTW_=m:nrMvz,'|>?-E;DfBY"giq̭u84`³\(fJaY5!T}=߆:/ ّj蟞sb@_?;0cTCJ)#l~Urtk | `P6HO֡G+M-omY36\tf[=:QZ/T 5,MM4.\<| pZF_&+3xGPh:jF"f;.1BRS̿#OR3:ZNn0LðH\Fe  L{4AYoug|T+P?Zd-VxA)M= )ۚ]p~K~\F erhGNhoivKEL-C,w\[Q*<6uaX:M,m~1%ux\\lFc[>3\Ay4ۣ=!HJz5CWgnxX Q7:^3bGJ}%LV6{ jyR(#`Zp,\sjYcO!?U~,4&O+t#?U]k@%Hag6=Iqu\89\Ւ@FgEc1V?Roc޺ѐ6o GΎKyVQ\哶 uP(̚Ē@XqogS>f#? ,kvbv9_܈pZM.B:u)DY3R$P> W4&Hou:ˣGsu9",H}c f}y Ų?Dt-m)f4ZpP}$tP*4^&ٯm(\;-4dۻ4p70|@WGlff9F3` K^B TWsއGw|ʦ|Kqb~¼BfSR3JB  |V4ؽ6˛L. eK+8UȉGG b ( ͎G Xڦq_1۫M{+2GEJDMM3O0Qve-[h>ԩ, {3d+(eӊss{ɠ}> s$ICQ}ixf[z<*6;aYnX“0ǧ7'ḋ7WZQ |W03Ak`^1kTZy}0B1Nl+`OEs6cYxVRέ `&Xƫϔ !;̣> wGJ%ĆX:GYX{Z[גY,pq VVsl_'kwA :\[ =2>{ׅ; f؜S_j 8UD;o`#A(ܼ-}N2Kȟ]*.pq*NkhMqͯV D@WM߉| fSp!_\ؗ y|j/hWc=mȒn+j 2gϫ$Yi^ٓƩV݇_4.O"`t c\eYsJaG z>g+ЖJhos=gÍƕ"nԏR2IJ "X>DOn<&:pfuՈi 6ZfDDHWBr1Kק0M3 'A01=\.AR}`\lȫ?t6ثX[;EE74wӌ!HJCMyz4! q*[6ĥ,^cMzNvo1j !|n70l)<n©*-]}Ti:}7AwRIOl~3u3*ZV4Tr+-/7Tiq(^tJ+kQrKGϛFsJ/9(,!aUR-m^wBr&s}@43c13xJ,KZG6hli paF%&]pPh3=eTٳ;8ϦUQ3|!~`sR  ػCFiwscpb5tO N="XȏK &u875w' CnpIq|3\*y 7Rfmݽ H\Wg51|7r@ }, b_#5ev1$ގm|=ůz.30^[G=EH$*@Mӽ:uѱԝ°v=04CBx!C̩5|3+~c/ K ]ي?sl n/T HڢZ[u1]t6֘ե R )y ynI#vJil2Z ~CMc '1RgP}<7v~P{V8 `'pP!GzN,$(i;G%$OөZGv'a3Ӵ,$wYO㧊}NJ&r(dӠpҠAF\* 2`~%. h.U3{rojAsd<+ _{l|1GIIKBHV. dwPzq_^n9W/DFrapw(WabsKDp߳Pq.C]X5CN)LZv"ZxM8`i b c!Ԛ+hۘN^eZNl:MS6\)/uW`(7AF~ub2bЅootYLC&xq p@gr&v|v:|>u^]N3#w0. "zkwK7щbB0YCܬ~{0FmbqF4<;TL=`Ĵѵ}[+b넖Sz6'^yIոD:T%|%uKbh (v3kkqqD;r0ޟ bPSГUa@ ? Xe1~ɿW[_9`1ktUi]D1̚tJ&֣RI?D[1wK%5$+&?!;𒔤B*?uD#BI8sJf-ƤU4չǠQϯ?җY /z]b{OŸGȢjsbPK7{gQ l: @E Q jAPV?[2MV3[݈Z(-(ث6;<>|{Ty'!9aR.b&cdq/B EsMʂ u#zʮg!hnnu|<)?b)Ln 0e;3<`1ࠦ + ΃]>YP3]_NZe5(Y@14AXQV:Z48JHf}8.AX$~mǺ)@04] _m_?Nw16;?8 uH֓k `#G7BƐT(%`dՂZۤ)$X-a j|`;8ZTZ4W薐Gc) V li\73 (=[%芡ˏj+&;[ʖ׹ s"0Jv:F^XV5:L[+&8Ǜ$;,~Ve{d6M?V7uZ쉞K_{tQe@QD1쌘d {ߟ"HI%Orɠݜ1LFϼ'zN^x%"\0g4%F# )|f<:?gL(:&^ aM;J\‘9s)KEy$zPNѹDS{%a"d>߲JXU`:ߴS.0 {υS_uPYoUCi,\Yר/8z#hp=mtKrm#dK&4 3H]$8rͲrj+r3J$B7؂n!_\->_'}O̥B!#d(1$%_% ,f )$iv/fo2ۏwlKJ 7xDXNkT٩vA٬&B5+:/0uLoBUi a~⮶uKCHmY-XÓR+C4™ru[P6~b3[C2q~%ĥO?<& pvtA69 |f7D~ A 3C.JS։nΛW7^F[:MDYk0a` {[=D7MBQSTΆ,`kJ~Am:eM1DrS8585 8r7id{•jÁgOh Qx`Q̈́6+\{JK]՗;KMLvg=~DU.GX)K vq!J3K pb/׶6|f++t #Ӓ.WD㑼&pU&6tꉝ+]?z=@or!-rV3笉%6~m\W鍕'Q&Zr!ɉ! Pk &S5Nz%dT*^v;HTX$|sǯV!j~Yo^Pb6%_"mqaaqZfp0^q8o+X ױO$Hqb9FRT]a6l,ivQCX;e&ԝbnlBCxƢ>NQ,2Fgv:Lˇ4dTI1Cp4GC?f_4S:uIJU_=fU4[+@xGGeO1 N'P`ꮙ*8%ZĻ9iiVH\_ٟ CE{uHf1:ǖZX{s/i4)zi)H>D$^*\聳ijCU&\]bOT^#SbNޑ lg7E%qRmr> Ȩ1a:ćV=sr9qBWeO׌_FQ.NmR*I"H1]F85@\Y5j4S94L-lz%: |dڶψ@_EuaܯCq)1u8XgkYJɵ# #ylE4fFy~V5rh0G 8Y lL\TQ-7!踹w-BUOgiuf$_cͣ\*6||#tڐ%ֲWL|6b 1KIi/7LrYi6vR.Yp^L#;Bw”iʕgZ DTnU[Nt6%<`b2N)6O$4ԡEpe&!yG8/0iޢbXVumt &;\MsE@;  #!Mqx_Cn<iEH5 ۳sC*=NPT_sr! CVuN 5g%i2:Y l5xGy\k{K>U).(ډذo(3᫪Q*ҹاfTl"p 烐푎$u' Lh(a\ie<7®; GANS$ڢ?}zc#1ndtn=pMcc؇Dfm8J$;v Kи}-e2}=tϭ,U\ :&-@5KzR]ͺXebpZ-죸:Smro3]*dW ^YxEv1`o.F4RC;+iNm$pՒ ȧy I"GݫqYKkpv闥<*sخEHbCh; U$9$<ʻއäga: h<<5sm@7q=LO 'hc0G!'R!(x8V6;͵E!kկ.}jKA͸vQs&iC#ñlКT,frWU" _F[ր<]B0ltu$`-)8@PYiPL`zUB*nǖ%oWlGgRP2eSK$(ivCwOoFZ|A8 JPa22(TWU߿"ᄓ_$ ᏦܖNv(noz2)({ a`}f%LjqSGXPˮ!kƐgsnB%* BA [y; C> Ymdl@QX>-u]eƇ?"5ҪR_G3Yͮό?R\@AXLLp*/nC2dZvgއq}ihRTŋ]28+7h]U]I>#^Q'GAN0XæYLFIe_*y$0x9gQnqCP&q2-ue,B~a >+dU5<<Ε_lP]h`mkM\4i5˺djW3矙lLVmɼ@Й'8p-$^̪},(}3ReB$|Y5+ )hA@՘R qP 7aR\#+hw`є8Nr CtHlU22{_ɖIlM:2\Y]q߂ǃUGfp>kN'^a}|v/-N[L@Ohq`̓A/r[,+^rJ/Z@DY뫏I2|(N>}buJI5RnbCBRtx3+puN-|qT&zh|\wv 3M*2i+%eIg G@4DxvIǕu%(6'RVj}a==f ;xih_eݜa߀s}?$mdl')TXO"A@X-]daҘ^1'/3tK6ۺr 4w3JϢPacVR#ՕOܒP#SЛnT\? CHpx?(>cW s%:3PgQ] .{NMǢY{5#+:=kmr$Z j1xI;hYB8hT,sUF,7pƒJ_U]7^63M)`Ν_ KL2,OLϊ-Mps=;oW,j{! JAҲz7{i6``@?s.yXc1d7" 7%~c?n_Mw4>| Ǎ;r r{'+.8HXȄmED;"M벚 qq~4U1HXF$1Xhr;63$Cص6`V^p%@5[7i&8ŧZ!u\n'! je#EfD);㨇g!K?6J! O:׽nOdSLziy2I!-qgi1|@`Vmf^~7̀GCZ۟\*pPY)}(Mpܠ^ MdʏMMAK9Pcy|VBST9a??)@-4q_ 0(4 {& (; $jlEG-W(Jk|0.U 7 OS|Rfŝu_ $M3>ҧ+) uR`#u,gZon?{yrv[IdUvLB2~oIEI6-&%yQ;?[qW\/j#g0s6JvCa">vI0ہ(^ڕ.{xKI#"1JUxNmϕeYVHќ 6`!Z-kwRLN* ğtTi ]q㤥tC8#L=XwMBaJmN +&uz=x4W&;_Z$uQ唷y<+U 1_~0O˞%H4(aҠ{ܘi1ٗKiښ]gO=Kt 59쟏s5~v~{&̜'?ӰQ')9;'pOs,0 dcyiVb009,y:WMKĴ6=>~ 6[L@M{g*PEMņ;ͪ~Xj FzJm'D7'OW M# ӓ6ؘhw',2d,_ESYlEP[xLd\ roZP e6"Hbis̬4BXI&aJan,S [' Ԅb M)XQd7*42=,bWQmɰnj+`5Cl]z4!Fyp>>Hqc{:[(Y,^3*6+dm,BL}>KhZ&V:U5T%Say 1PvK r,ĎQ9LoGQAayFۂlo0(.0?/( lwd94ئ2%{"r35`5 .|D7hm߇Dicӧ?p% cRwQVĂ/VZI.mykk4d]T{,K__h݂@859"5U݈Ԋ>0^H|9eT꓏4d2T'fjE=Ʒˬuk6ty.d! J4@e|+5ȻGM`+W<^Hzx ^0 g]zLۊܰ+-\La`&DSℤ*bu!8V@*)`niI- ,!.@ 7͗K!7r?kĘɍ V]/h{kث`tvl,QXGl\>_(v} ^xWiSÆ0U6PWɱ3أI$o\7dk@{_:1 RuiߓaM)ڜ;Y )dD+ I37KڕB94m@D˜ Er9MCwz&vC2uJ8"#_l 訆=hO`Ѱ*;IЁG3TSh*FUmk0 G#vF<x8}GT>K,8EUZj%[b-ߩ|)f)6<*ިrttb{ջ{p13`RC kx2 /to$91ܒ)/dH@w/rz2 M'0pJ rS<c (kLre.Xc+1QE Z]5Vy9Jt L8A9N9kPy1s4JP{-iaMT1c"&&Jb #@rh_B5,%T#כ&aV!|. j^M_~s_ªVN)hDˇ jDnViC FfТuPd* +^0!ݱFˡd^dt=mWf(Xt,|~,(vDzJ:ic/=OyY]E6A}H H΢*鰮Iu XrubƱc OՉ(S0 7 UN2Bc@v!+>\ָIk!l!,k%,Q3 #Y@Xk,adQ&At 7SIJZR6Wr V!QR?^'pjZXxJ}KE[S^'Pn 1s )ca] rIb2!%s {q9 !&#SWRĬcE0,2ɜjʢL#Y,&!63ܸYWvIvbzj(PbLӶi| BlT7SңMvmÉXKWK2Π(JcQ }?'UPİ-dFV^|B : 5o׸xRJJ[Tۺ>9 d !qx57pښSYhEKnu=5N'۩OmkZfc)S [Nӈo|&υe"&gd#Ѱ#7(|=\ T ![K,v½4LTRmF NPרþZr PL`rJ9%A / [.~̪xY)FG:KļUxZRTcܶ=g*ڃ-e>,W٥-feE0'WQ0T93)X=(!>8xTD m/tiA?%A;(qWӹ*@rE`q"`)s")LSXU)*Um}`TGgv/x2uC2ϒ$0ZK1O:$SOS+mIiPCp9]^mt2!Huǣ|$)7Ĩ Y#_{7z5dS!~N@{}S%" )q+ 㙽aJP/c |.Wv#;tb&vG5xI!pvp~_"/ŏeL *C鉭F6nz.7.HDqF*U%`%2ag`1@$toZf;Rz =-U qQUz7|rF,ᅶg}#Cq@S*NvqBY9n'M`#vF#/TSzWFKlbT+XYe~R>寅Wee)l|b8S<2q߃>Q=~nj O:KpόD'f9xreR]Mm1⓺sJ J0޷ :H"F=; @~.$(S8k(4sk(ym7Azp9`؎%? *&7ėr.7 ip "Ybxw&5 RT|oFNXD![2&0c/|]ǩ>CJ%rh\%^F`v762Vw{Uu_# rS:7F$s'2zc2ɁvOߺ_ ,)"vݷY ʾ zJs=Q$'lmꭷ=*||yС[NM^/"<_2VeJ1K 䠟qSL %H)(aDmJYKfýI7dV`BJjo7( NUᓛhbH]Q2,e`z=OGa^jO͌7J{\&:=?5MQQ&NltEa(VI[VK,8Y}NW̔7D.]!ڲY$1)1{'B;^iV7_\!y7޽zA*^bey@6oϷF-e٢V^O7-;iFp2-;s ~3tR6qU)Hr#)΢kj/$U!j?@[ཚyz;E`oS u8+E4Z8nkN+;ra-pq͗C+*bh='*1qZҡGCZ}uV8}ޖ%ré7#{Iyc5Iǥ?̻iАg-WPYva׃,耵׺e+auqٶțP hUFoVLA(X/H4VTD3r$(A阨RG*2=Eu\ĸW5Kݬu )ҁڴG|ޯ8}p?삫i}jK7 !@Jo `'F FLtT&Ď(L|6ԠD7ST@yFҌB=^Aπ&Uz(sAY-Chu簜Ljw(7/(FB4F)s;do ɬ ~\0{c)<>EPegsB&>1`&Xn\[ fVv`z`yDVFMaYObiދkPdeEtjqK#.U*У*#Ȧ/9 b>4!!RUS|bV3%|vIC=^z3hu3!#|)k5w/6 3-nx9pNt{&\  arde6f&1AÇ_A:Xde~da$T*A6D5~?]blc@R]39Ǿirar >C q0s\H8Iubkɷ10 NKks+ >9"cLalblӥ{7ǽuRx;V 1nrXG#5716'hu!. HX췚8j#ӈ1ޣG[ ׃vj:.rLԽg`AF^B9gU2!LY7V>B|j- @a m{lMu2oQN!eIpz/aw\chgM6nq ֨ss_񴌖nrk+=jk#b\ۈn1/ys;wՈ͍`v+>exF#>YVf3̩#gӸaVi~.WJ7])E g }iytsQMۅ,OvO^6EЊo_,^΋c,h qʣY-9^F|%mpZץ MX+hhı?B\ŗ5|rfgJps&>wJ6E: >2qTl6@啸\?(vtu0h ˠ1d(a@nBrdf Gv2`LJv7 JO(%aeϬYKO%i 2Nr #r/?^qE\ M*{'v P\14GzWy6!ԋY# _pk USQ-??d59^F$?;-wRrO)Xg*n}.&U0/BoJtiƖPG 5Z몲4}yuB&tɒyD0?]YuAN)@je)wPVI8p(-|FbTN'P"/&`Y|$G+n6Ql2ek!pŭv_Oi^1Iujg0L .y̜~l@.uMx-:4MRJ_i`` & +'Ujn_5PtD\6RWmnv|3,8~(}jĺ,[̬t"f>oO rvh>r0[Tz^!j;bPܻg3jx&UpuFS.a\6P7צ#毲1glEvwucڞ7y5RoPF;V=']Tn 7kΨ(CCʢ38h2rg@б.]T3dmf9ਸΒFb@-I^}APU >OX.bTM)MoփWpbQ- Gй=k'-׽QRmyFX|j.tC|dz(<0 lvޖI3U&I UTQT3ZE䅊ͬ#x糝?8'x/?ܩ?g5M@+͋1")? n2tfx$"CF!]uZ1QIg;hȓWaMn26$z 5T*UUvvwCp*]KF>/mɷ ^tdM$#KG/)!}jbcW%@:}hq 2hZ ֵ-Dδ.\^-~0D5*%}~xvL\e;G0eސ4/@ΓS}y[ؚU  chGpP5Hg=nLw#4%Cy'{L1v`.m#TxU~IهV**eE =B o UBv݋Z4lңDnw&`uv);A%3JY*\sTtZCy,k^R'A\u{_Lfxvϗ=(B!&Wi %D=/϶c!hs]Pqj5kTTtf,#LF^vy'&:A1-]hi9}R{]szb)\_6''0%ީ &;lx^n7d^4pɴY8\k9/;Nǁ6*uAߑ5GL|ε'eTyg۔V{YZPޫ E^U1(n˧d\ IMt* tJ -:I>>!_nk+#C'E]`Rx="ˀ'.pF RvP~S7'b[/WkR=,KiT L+FxQ}c[bWhR>i{_b>m` .W( ÈGIRu" (rA54̷bZ/Ac MSv$w#5nC M(2h w䮭+cRiZ E;~9 (d^t^P/"kp`b}Cqcp߇+'+Ҷ߅*pgTjp JL1#?. Tm F!ڡ Ë-_Y8̂dgQ`U9 Jr+_3%ZwRƔJbv^c]!:`i G)t u,F*ȠI2yi4UWjfć*JR>-jjѡKCW޿KUD*Ta]"h%lU;nI87~T)qBu9|rõMu$e\LK{j>Kel]2^$Q=9PX#rb ԗͰJZմ_AHei v户7?!APK6Cfc+Y3}NԂA?bc͜9/hYI>Gyf#W\1 wB\RY2™c'>p#]%I)E0.!xD$yYoГ2QNv}-]:oolS2rceB+ei8|0E#~]B">J+CPFgE:^ҪF&|jpĚ]ZnHDW*ۤhn=.uw̙?;)\4rrVx_>ƻTw&Tj9@CKPqU%T0*{T͊ |KX>t&ϭFƍeUC4> sN%q1Lꞝ#Wf84>Oyٲ`PbOU]v5q .f˪'9)_QI0P{~ٹԎD!R\l(%y{Icz)w6U]4\ LZbc14Z/}vj?{q;k XIɛsEsZ6ZT_KaZ4(sB.p>-ZƒxVa{ik} K1=Ua-5^&)L%SԕSЛ3jĞLH#u?H _p.Gpo%Zq8|f b?5+axNsx ɜնXa,KѫDM \ ~F_%\A,sх&壛ͦ?; ZPdQ&%[J lאx̨R⭦$$p<(h8}.JzXԇj`T-Ƙb?OqX>x#!@,@X&%P!y'q:, )*gfDBǢ#6zU.IpЕf`:.w}{r8'a&j(,htRRFU䒸+$&aRy]]-p6t LxP}}`wy랔@ҺLqR >O=pf{}B{98gtq(-7ZS zV4?(L\mZ1zX85si:j)[){0z@a3[΅~h0ct)Y["Ń0NƁ>$8E`˿yI9hdf/x]\274rl? ƒ;qSP>!/%KDnԀ}*[0d[g6f2wxJv|0RD g_>g6\O eC0װS)B)ڕlsq^E;tL*sG7B׌o{42wAkE@_k{L01Q-%&dQM*~(9vʡȡvKuWiղWIay'}ZsqOV kZD߿#ԅOϬ^NЃ|˽R[=&l /Cݛ^JwniJ˂1VLsbt3xr| rxՖ뾔__h~h3 (PC4Q=dčKsQ>DF^W*ΐXIӟDM鰨0c/SxUF;ϣ-*>w- Wcg0u,b-d,#o;25?w{/?c%2cջ7rZ/9ԉDVRyW=c z)s4AoֵLz1/*XCVz _SSJUy-ƒf~7[*Փ"Q eJXCW(<`+gq@Uv 9+r렀Kya|zr1ܹn&L /'8输1N¿Y{߶`#Qo5&JM4aoS[nY[Ŵ_QJ%C#[.rdK+,zq!Td_'܈")u"b E #Laenat>3~EOoz;o+~=KUV&h+LV.g`i6#S{ǺkU3Q'[3Ålf &AɘWt_kVP-O2 av*O~ )E1M&EcJELT"Z)aئ`.v,a;}X0bNF^xՆLX/ګFoߢ mt4.>qv+N sV-"cbK$Y#?Ty %EF6CV(+\?>BHP}gP:}V9ΰ϶9*Ahl-eӨ2+(TI1-LyA "/hʪoH,I7VY )*nN_W-Qݟ* 7v D!6A%h. g|YbLV҅cEep ,Zv_CQCgYҩh4vδg\<7g V.S8(@(7~]|&ȦZޑ#R)x;F:~VR(C+xV_k%ZONn?ѴbX !0Z7;Tiu?UMuZ͑&ھYt8{/w6邝<Wy;Se |.99is7n~gEeef~Aූe JOD丵BT^ eiGy|쾈v?'T'#i!jh&u*-zVHʧUL95Id'R"^TbEXOdubW;v nmb̧8.fJGHƳ2dE .EvjcMSKeA1w)Ld3OUj8ZHW Fm0@zT؉~-/+a*%TÀH ,^!V?ti,o֦dR9۶[ jT`B}`Qɖ,ԩ^p9K>x2ZcA糢|m411u43ޤI,|y'h1$/zdP/|}i}bw1V!9RٶIcFkǚm m$SZ]ivּȧQ31#q%Wa?6i]jg*UҮT DZ44C&;LʼnIu®76Llשeo`>!`4!C39r~4|dn)=JO-W,$Vxh-%^\3Vݭ"h*7Jj\_#n'4²5lIQUV-V7pqnx3$}YNCa^*Abʚ*9t9|p=]wM8=aLx#9ClI;%]Yvf&ZFF -&9xz: a+=ۢF vyK'qQ*&f6,.(S9d`،| *M zLb"'E߱OGali؁J@1~ uTz׺L'Ȣtw DPhv:eq3ġ]G$DW(॒|0;:Fnҥ{tYA Op /R2q1wUEi1y{H'BGQ@L醝ǒS Xf!spwFLQܤԗM}CKj.Ğ^Kw+oTO5ܼىdT'y.9"RYt* d]RE(Ii@Pݮ $@N-œˀߍ ~[3\;ޘq*\B^ # lOv-H;!(5Yu%MPoxHY"?QM7Lv/}q׃xogO%'9^y7;U1򊕫Fҭw]1VU} k`aݖd|nE[<17?iSVCaW`xnLwÀ_: ILm8c\h*_ [0ڗ(o}C UYbARNhpy~zff5:Y1;SDhR|zZmڕ_{P5xصna|cu+ПX} @>vv&>Ո~t p-'*+K>fيՒuUR4$SECH1Igȟއ)jW("} g+|FCB LolӴbA|D4@v сwoWjN|eϔ^cѨCAG3;6S/3^7K<^Ca_ѯ_#tR-?_ U_53Hg=g^;\(:ð;bot C.lh^MKd-\߷վoWrw;k5(Cyd,3gёYpn8ظs﨏xdJtZ}$`|v9}{*C*ZcR2gT$pN  9&U#tWJi 윥 φҞa1| 4o 7Gai6vh,5ww ki<LOZ@x. $۲ȍ =̤^6/c6N7 v*P7* F>#dOCk՛ҟE:0qSl 4\6U2bc s3*1Hհe&Պڶ'͇q֜df#fyԚ<a W頦Dc- mS̝屳qMnE>p.f_]Q,ښH[I~61ⓂCB^*rNh {,)ߋx(Kuu.t^*dR{#j_`jWǤ>S{ؿ.UuN àM(ɌG7aV{8FeKPM;m!R-Q-|_Xbz3C;'ttޮf}Ӽޤd89HQU*ɩ `6l1>)DDP;\ňYpL#̚[B0UDш wIM>_v.4ja<YD J &㮸JV6rNw,ʛxl!JY XhiRĠRy]??eU'~YzM0Iƕa>:֖HP(BM-9sAAwsZ8:G{vkz:~`|bN FA#55cmMEaO[1?tcW*a/MPӕn:GO“/E⣔t"Ert^@~!F z'1qHWbgƁYQ8hF(>_xSwo棣Ħ3QloE-OG,]qi$#48 Shx= G58lX\qqH^O[ؒbt}fQI_@' ` _ F)'F<Ed¸po|}Fb?u8]*_ _1Z-(|vHaj8Q߿tA}맰_3*i:xGE$J]T?N7 s_)d7#@,)^lEK3A)ݠ}d~ 0_e!W d5`~&Z.ZsM weM(+Wn#|o>M)CupLTKW op *8 Vp*>^<^Z'TrRݭSwvcI讃~EN z1;у jhYj#sP1Xu&fac1J /.cXuʆ+|~TɞК/WPqRqQIk)Q~ 虊ZN<rK I?:p~CDZ=#5ShѣNmg]|79+l}%c].њ@KL$ [o;pL`n?u7.${!Fc]Z!kWʹ"em^4MQ!֞CUvYk!> c␂haB}PQ1v#CyB ۻڮ R'K'`hBFG`|~4*#-g'`K}q>ա\իTִ2XިEh\_n҅) k1- u!Fr_.iXmt&Q9Gء]QJ./2kuDXtatUK4eYBSvaReb$0rsP-tTQMUFX;!2 9:E>)t^$myh3SM$v%Ձ=?${=7xG#MAʈU!f1R,sz*YH!P`L Ń89M%(Mos؁9/ߑ6xGif l$"c4HwR/\'#{x_U"hQ"ܠKUSq&Z⢨9l_2^\N1n Mgot3W+ڙ`z4`9":ͥi~;H>;;ܴ:4}5_#S(h.8]s˕=ʈ qj (p^dm7+wx^G3XDVDplyێxr[hԧUyow''PRRRULQDz@Q"cEC}r[(ܹУ@ U1K<! ܆cqL:ms4ͱUPN ;8 }s,N' );6ov㹁0]?Fj=wd@^16Fv񬽐'Ѕ]!D̘~XzD82)AHΡ(yOn\U!r^#fcl#x@QAV:id#`/JDyn[W Q4NCJ07I%1K$sC+L &[t ZV!' d{`Y!hRЪ# ܨwjsTDFD -r&>UHϪ"[ꡗi)N*sf:,d0IK1nVgWI6l+M7^3key8qk|c ʺ Fɩ8_(6&t-KH0*C5wMY5TuIyVo wl)-'F *ۣ 2ދ,a.4a} + 1۱兔W&^_ Q l`cq`x;δ(+fKua]Ⓣ)+yUTL; >$>ȰAPS$pNb9|`2;fF:,%>U6_7]~C*N MmӔge>9s?Z<Պ,g:I ΂ҖLvZi%!Jr +{C G"@NきgǼJ_E`erQOᕢAyEhA VC[P t8^+SηHFef47˚h"q Pg ccƼ(҃ǕiF_x im>삥~jz_NQgrErk&NMIÀL@<wOD0c{udQ|k̠Ozhw@^N0Bhg QIgsj;g=@;ŜX*$2ۉ]'gO~S=3LƲ; e" o.Caazs鹠n:Vr01jOrWX"z %j9re#r4:l6<:Hh٣;i7_AE.t qiCc}5*dna_s~)[=6 Zh^B`Ufڷbao9%Q8a7ؤ;V@^9 ?q0^-(BM Ļ&:y4*^㦀2"iTEd!aA|/L2BȬl/S$۴&øB%v GJ,hYIY@.%yϵktplf~CGV3EapOWYÛD2%,N|V/=e2@o>sXzNC4GbMTոsDKlO #Tz9ƒ:ʡ}|ݷx]5?2?[8Fcј¸ݤG@68_XĹA)[nY%abVGߠL/f"gSRvTI^`9@ߓ ^/YG,Yהj j:GF9hGy<B2AVH7q9[=u (=^h#,i!c1uefd6O_,F<)jlb*$[trtOî~/q _Z;œ ߞ@翈GCRBy$LGSavF,U}>䮴T5A|u;cR p ek}մ:Qy; _(7y^dz /%0Y}$N\ [d7=BһFa?n~";lQ$|Ls](D+q0#o/V?O8c'f69e$ہ?2y,!i !&s~MZ{arQ6Pww|ZDQ ՒEtfm j(/+Xqk.'ۇg_9}{@5g C5O?7cG[+/+1n<^ҁ"~!ӫ)QAU v_QChjl9̘(rc'nX93ߨv^a.4|Z+ms/s%n% Cܖ 6өZ?aG~vs"W'=TgKjjGstI!!jZ\%o 3H1ˑ_)4=1~B4’o֕՟;+#ZYdE0PZvSbs`wf$ki~Yz-n@CزܾC8E7DC>cnƤj$CΟ󇉻.,Cwk 1t$)Ǥ*d!;-!ʳb#x-:mU?TŇ͊憡LB1v趵Ԛ}b pJ+̚1l)@RbQTlx/טh -5e2D;a ^ϩ@0uw>&z!@Md7nZĻ9-N)mx繣yNYJ}!?m#dMKKz2P F(~> 0.RvͦjH7JZ:^gx?SM iYAdG߯Lq|qze睳ųΖa 翂2QnTf` |aFB ゞ@֛[m@6=Q+d' RWx~2x+X84uaiDvpWm^ZJNgHq= ;Ȫ\CY>{/]7R#w)KB7 Rʔ*=5tqqa?A VchOi[rGsP)QեOXX*G ցpY0UY~ *-?!L" +'n_R  -j 3))UR{a9OpI ë>#"35> QLk+?`c u6"wv3 W[8`r/XِVخn T-yppw5"s ѓCm<Mu$޹>BKoߨa%h&\qdo^>ubJ5)` \)uab4(/Jc(!OD8QצXיЌCYҧ\ z N3cK5Q2gRs.{vuIP{ G) G AZlbn:d>5{[6YRiA( 5Vb "Ca31m$`AwUz0'h&~BENz+D~ՓR1άx$/A˪%iQP;־{" e.ّ3UQF&WK0Z\mfxU;Rbиa@CTCz@{EKj`u5J)Z>N(uivf&htO.ͪ'XLRR Oa6dvUa,ԳVIG{tNʿ Nbj3v,3mI'+c?Maݠ*],욫f ~\E<W T%8#֮zzhm)J`سE? yG%g볂99#t>5EBGc]`SZ#M8K!r#4kP?M,ǚUӻ)#UJ=NMӂ,7{Y$jë^x] "ag}O!US<36Dڳ0dw{ 1܋+ĉyws˯h\|T i `ķ` B~Ȣr=M9Ȧ*#u[S"k0AO,wu{=-x0[,`.h *% ՀTҧOfkô58L% >Cz܀H "iY ' 8,НVmn|tA#,p@=?uS4ΦCMtVIa J/9MB`c8=oVGlC{6К's:YAFrܢ~Qy|nl3qAu!)|5 6Zj!%'PS@G(NG5LiR9:wOt;܌GŢ_OP=sHtǸR&ëAIYk8cENi!;zfetf<o+||X;붅yl,g:Jl9"U\?⨔#T@T JCibcDc=}ӸJgA->R g3+'ג9*e4~3*CI\w|T=%.*z@8Ff_>>_dWA A ]Q9ob|)WB (%XQ{-5ܰdeЋ,AK‹!L*"%3٦:4TC K{{Y]X-%Ys)(biF+;GM[YMsăkNƗ>h.! 3|Pt6_Zeu;OGE' ^쟻;)S/`fTCBr%y@ͧ'=j&8RZ|=PXC2]UfLiJS$p+sh@ z&bHP:"ac*9=yV o 18.urRfnˎwegecGEի}4(I윏I?O$.pk bd) M8.,Y1_C(Y :bѼL2AmgsI,_XshfNlNjydTh]ǝKrqds[iS? K>zMx.قV$q'n9Ba"*CρUש"cPBg,RDU@ ն6UH592a9}XuPfE% @0pёVۆM6q7ΊE @{dIAܪ6,>'& ;9oA&F›]-#Q>}P :m -2ѰT񂁎aB܀[LcL=LnBTNʸ&U(Nwnq<.5*e>0yY*wI h|u@Scc?+E{$Gh9$O=t 7Ge[64r:*&Qk"se@%QC9E&rB{7 f\[X^>hwQ!>?} '{}=VIb& =겷8X+X;X9meIIT[#VV֖`mY> F~s}?,SkB+`aķ5 dϋyG\>BFMK9}+m {rs\El#a:6v-`GL C3M2/]$fo4t SĜӧ't8cK36M6w, ڝyRm]-|ד;^Ɲ(*3Z=ӮaPo r-7wHW]aO= [rØUd}569;boq!Ovﴔ‎yh/lh|aYiJk 6v6r)K*@%PG|i9dN@/xHMCBWާHDZ6V7T7 ×$gۢS|8|7QYˈ{`0ڔvᒧW&4#>5ײ! =9@Eu}`4VGu?y*pabzFctnC$gs иo> K,~^{AE*%LE"7/xh>ŦVi:/dp$