python3-libsemanage-2.9-8.el8 >  A bU]csz\6Ww`(TpL2.Wŵ#'lr,ZKxɤh/\%zk[S8q}uKʁ,AymZ` @崍)N딎m<6߈joiZɍ*;>}dZvzjhx(2clxf8ko%xnpS{ l\BGY: mVcA7b+5OA4=tK [<"L y¨:sF&֕eT9נy)Z6iXI ljH䡥D SN}ő "5Qq|si3X<({6$aqv2D)oOֿmD<͖|$3lM;# ‡OXILf[umV %XC<Q"ea81fcb43ec2ca7ca77375c40c1ae08179362f9713ae7d4770f95563250fba35638a7d0cb2ae1b7cac52b0e623e5e4e37b615860؉bU]Dt8nJzCg.nBѲڕrBeoOصH3&wM{A=FE [%*c% 6FiQp:_:M{;cQ'PlgȌv 8$f eoΩqsAw%2pjŒGB.찅 N4归j͊i2z't@;T_YGEOM#y1o#Bؙf(p;YtsTto1a A `Cg Iw&StKM=v^F5ɗVeGOf#q]Gѩeg+/pb >du3֛>p??d  K  OU\|     dt(8$9 ::dB`GtHДIдXмYZ[\]$^bzdefltu v,wx$yDՄՈՎCpython3-libsemanage2.98.el8semanage python 3 bindings for libsemanageThe libsemanage-python3 package contains the python 3 bindings for developing SELinux management applications.bCx86-01.mbox.centos.orgCentOSCentOSLGPLv2+CentOS Buildsys Unspecifiedhttps://github.com/SELinuxProject/selinux/wikilinuxx86_64WӨӨ$AA큤bCbCbCbAbAbAb@b@4b94f3e935f51ae4a8b29b2ecc46859f6d9930a3a338c6dd8137612a7ab1acc94b94f3e935f51ae4a8b29b2ecc46859f6d9930a3a338c6dd8137612a7ab1acc9b789f1e622da03861abba64fbbbd67de77fb0128485073aab332fbace971331412aafbdd9e637858ecf9254ab43c439072104fdf29b7c6665a888ac99d8c2b9f91d78a3db0848cfac5b7638d6121462efc115857bf35a31fa0cdfa8bc05c0aae../../../../usr/lib64/python3.6/site-packages/_semanage.cpython-36m-x86_64-linux-gnu.sorootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootlibsemanage-2.9-8.el8.src.rpmlibsemanage-python3libsemanage-python3(x86-64)python3-libsemanagepython3-libsemanage(x86-64)@@@@@@@@@@@@     @/usr/libexec/platform-pythonlibc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libpython3.6m.so.1.0()(64bit)libselinux-python3libsemanage(x86-64)libsemanage.so.1()(64bit)libsemanage.so.1(LIBSEMANAGE_1.0)(64bit)libsemanage.so.1(LIBSEMANAGE_1.1)(64bit)libsemanage.so.1(LIBSEMANAGE_3.4)(64bit)python(abi)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PartialHardlinkSets)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)rtld(GNU_HASH)2.9-8.el83.63.0.4-14.6.0-14.0.4-14.0-15.2-14.14.3b@b8`@_@_R^]µ\@\ @[%@[@[[Zz@ZK@ZZI@ZZ@Z}@Zz@Zu@ZTZfY@YyYJYV@Y@Yx@Y.XX @X@X@XJWH@W9W@Wk@W,@V@V@VIVɦV=@V9@UU@UUUa@UUQ@U+S@S@S @SSShS8@RRrF@R^RNRB@R@-@R:@R-@R)QdQ@QzQu&@QfQQ@P@PP@PQP@P@PP O@O0@Oĺ@OtNO;@OO@N@N@N@N@NNNw.Nw.Np@N\NLN1O@Md@MM)MQ0@Mt@MLuLF@KKsKKKf@K{@Ka|@KTM@K(K@KJJ@J@J$JJJ#J#Jyt@JjJW-@JS8J,@I@II2Io%@Ik0Ik0I7@I7@I1.HN@HN@HN@HǶH*H@H@HW@H=I@GOGOGOG@G[@G G@GGGW@GSGNG5@G0W@G'@FFFFIFIF&@FvFɂ@FFF` @F9F/BF/BE@E@EEɿ@EEEx@El$E4D@D@D@DC@DDD@D@D{DDX@D@D@Dhm@Dhm@Dhm@D_2D?D*vD*vDDCCi@CtC@C@CCC@CC @Cǖ@Cǖ@Cǖ@Cǖ@C@C[C[C @C @C,C @C @CCf@CqCC}@C+CBCYCYC{@Cx|@CtCtCqCp@Cp@CoACiCf@CbC`@C_oC^@C\CX@CWCTCTCTCP@COCLCJWCFc@CBnCA@C:C3@C1K@C/C(C@C Vit Mojzis - 2.9-8Vit Mojzis - 2.9-7Petr Lautrbach - 2.9-6Petr Lautrbach - 2.9-5Vit Mojzis - 2.9-4Vit Mojzis - 2.9-3Vit Mojzis - 2.9-2Petr Lautrbach - 2.9-1Petr Lautrbach - 2.8-5Petr Lautrbach - 2.8-4Petr Lautrbach - 2.8-3.1Petr Lautrbach - 2.8-2Petr Lautrbach - 2.8-1Petr Lautrbach - 2.8-0.rc3.1Petr Lautrbach - 2.8-0.rc2.1Petr Lautrbach - 2.8-0.rc1.1Petr Lautrbach - 2.7-12Petr Lautrbach - 2.7-11Petr Lautrbach - 2.7-10Igor Gnatenko - 2.7-9Fedora Release Engineering - 2.7-8Igor Gnatenko - 2.7-7Iryna Shcherbina - 2.7-6Petr Lautrbach - 2.7-5Petr Lautrbach - 2.7-4Zbigniew Jędrzejewski-Szmek - 2.7-3Zbigniew Jędrzejewski-Szmek - 2.7-2Petr Lautrbach - 2.7-1Fedora Release Engineering - 2.6-6Fedora Release Engineering - 2.6-5Petr Lautrbach - 2.6-4Petr Lautrbach - 2.6-3Petr Lautrbach - 2.6-2Petr Lautrbach - 2.6-1.1Fedora Release Engineering - 2.5-10Charalampos Stratakis - 2.5-9Petr Lautrbach 2.5-8Petr Lautrbach 2.5-7Fedora Release Engineering - 2.5-6Petr Lautrbach - 2.5-5Petr Lautrbach - 2.5-4Petr Lautrbach - 2.5-3Petr Lautrbach 2.5-2Petr Lautrbach 2.5-1Petr Lautrbach 2.5-0.1.rc1Fedora Release Engineering - 2.4-6Robert Kuska - 2.4-5Petr Lautrbach 2.4-4Adam Jackson 2.4-3Petr Lautrbach 2.4-2Petr Lautrbach 2.4-0.6Fedora Release Engineering - 2.3-7Petr Lautrbach 2.4-0.5Petr Lautrbach 2.4-0.4Petr Lautrbach 2.4-0.3Fedora Release Engineering - 2.3-6Miroslav Grepl - 2.3-5Tom Callaway - 2.3-4Fedora Release Engineering - 2.3-3Kalev Lember - 2.3-2Dan Walsh - 2.3-1Dan Walsh - 2.2-3Dan Walsh - 2.2-2Dan Walsh - 2.2-1Dan Walsh - 2.1.10-14Dan Walsh - 2.1.10-13Dan Walsh - 2.1.10-12Dan Walsh - 2.1.10-11Dan Walsh - 2.1.10-10Dan Walsh - 2.1.10-9Dan Walsh - 2.1.10-8Dan Walsh - 2.1.10-7Dan Walsh - 2.1.10-6Dan Walsh - 2.1.10-5Dan Walsh - 2.1.10-4Dan Walsh - 2.1.10-3Dan Walsh - 2.1.10-2Dan Walsh - 2.1.10-1Dan Walsh 2.1.9-4Dan Walsh 2.1.9-3Dan Walsh - 2.1.9-2Dan Walsh - 2.1.9-1David Malcolm - 2.1.8-6David Malcolm - 2.1.8-5Fedora Release Engineering - 2.1.8-4Dan Walsh - 2.1.8-3Dan Walsh - 2.1.8-2Dan Walsh - 2.1.8-1Dan Walsh - 2.1.7-2Dan Walsh - 2.1.7-1Dan Walsh - 2.1.6-3Fedora Release Engineering - 2.1.6-2Dan Walsh - 2.1.6-2Dan Walsh - 2.1.6-1Dan Walsh - 2.1.5-4Dan Walsh - 2.1.5-3Dan Walsh - 2.1.5-2Dan Walsh - 2.1.5-1Dan Walsh - 2.1.4-2Dan Walsh - 2.1.4-2Dan Walsh - 2.1.4-1Dan Walsh - 2.1.3-2Dan Walsh - 2.1.3-1Dan Walsh - 2.1.2-1Dan Walsh - 2.1.0-1Dan Walsh - 2.0.46-6Dan Walsh - 2.0.46-5Dan Walsh - 2.0.46-4Fedora Release Engineering - 2.0.46-3David Malcolm - 2.0.46-2Dan Walsh - 2.0.46-1Thomas Spura - 2.0.45-6David Malcolm - 2.0.45-5David Malcolm - 2.0.45-4Dan Walsh - 2.0.45-3Dan Walsh - 2.0.45-2Dan Walsh - 2.0.45-1Dan Walsh - 2.0.44-2Dan Walsh - 2.0.44-1Dan Walsh - 2.0.43-4Dan Walsh - 2.0.43-3Dan Walsh - 2.0.43-2Dan Walsh - 2.0.43-1Dan Walsh - 2.0.42-1Dan Walsh - 2.0.41-1Dan Walsh - 2.0.39-1Dan Walsh - 2.0.38-2Dan Walsh - 2.0.38-1Dan Walsh - 2.0.37-1Dan Walsh - 2.0.36-2Dan Walsh - 2.0.36-1Dan Walsh - 2.0.35-2Dan Walsh - 2.0.35-1Fedora Release Engineering - 2.0.33-3Dan Walsh - 2.0.33-2Dan Walsh - 2.0.33-1Dan Walsh - 2.0.32-1Dan Walsh - 2.0.31-5Dan Walsh - 2.0.31-4Fedora Release Engineering - 2.0.31-3Dan Walsh - 2.0.31-2Dan Walsh - 2.0.31-1Dan Walsh - 2.0.30-3Ignacio Vazquez-Abrams - 2.0.30-2Dan Walsh - 2.0.30-1Ignacio Vazquez-Abrams - 2.0.29-2Dan Walsh - 2.0.28-1Dan Walsh - 2.0.28-2Dan Walsh - 2.0.28-1Dan Walsh - 2.0.27-3Dan Walsh - 2.0.27-2Dan Walsh - 2.0.27-1Dan Walsh - 2.0.26-1Dan Walsh - 2.0.25-3Tom "spot" Callaway - 2.0.25-2Dan Walsh - 2.0.25-1Dan Walsh - 2.0.24-1Dan Walsh - 2.0.23-1Dan Walsh - 2.0.22-1Dan Walsh - 2.0.20-1Dan Walsh - 2.0.19-1Dan Walsh - 2.0.18-1Dan Walsh - 2.0.16-1Dan Walsh - 2.0.15-2Dan Walsh - 2.0.15-1Dan Walsh - 2.0.14-5Dan Walsh - 2.0.14-3Dan Walsh - 2.0.14-2Dan Walsh - 2.0.14-1Dan Walsh - 2.0.12-1Dan Walsh - 2.0.11-1Dan Walsh - 2.0.10-2Dan Walsh - 2.0.10-1Dan Walsh - 2.0.9-1Dan Walsh - 2.0.6-2Dan Walsh - 2.0.6-1Dan Walsh - 2.0.5-1Dan Walsh - 2.0.4-1Dan Walsh - 2.0.3-5Dan Walsh - 2.0.3-4Dan Walsh - 2.0.3-3Dan Walsh - 2.0.3-2Dan Walsh - 2.0.3-1Dan Walsh - 2.0.2-1Dan Walsh - 2.0.1-2Dan Walsh - 2.0.1-1Dan Walsh - 2.0.0-1Dan Walsh - 1.10.1-1Dan Walsh - 1.9.2-1Dan Walsh - 1.9.1-3Jeremy Katz - 1.9.1-2Dan Walsh - 1.9.1-1Dan Walsh - 1.8-1Dan Walsh - 1.6.17-1Dan Walsh - 1.6.16-3Dan Walsh - 1.6.16-2Dan Walsh - 1.6.16-1Dan Walsh - 1.6.15-1Dan Walsh - 1.6.13-3Dan Walsh - 1.6.13-2Dan Walsh - 1.6.13-1Dan Walsh - 1.6.12-2Dan Walsh - 1.6.12-1Dan Walsh - 1.6.11-1Dan Walsh - 1.6.9-1Dan Walsh - 1.6.8-2Dan Walsh - 1.6.8-1Dan Walsh - 1.6.7-3Dan Walsh - 1.6.7-2Dan Walsh - 1.6.7-1Dan Walsh - 1.6.6-1Dan Walsh - 1.6.3-1Dan Walsh - 1.6.2-2Dan Walsh - 1.6.2-1Dan Walsh - 1.6-1Dan Walsh - 1.5.28-1Dan Walsh - 1.5.26-1Dan Walsh - 1.5.23-1Jesse Keating - 1.5.21-2.1Dan Walsh - 1.5.21-2Dan Walsh - 1.5.21-1Jesse Keating - 1.5.20-1.1Dan Walsh 1.5.20-1Dan Walsh 1.5.19-1Dan Walsh 1.5.18-1Dan Walsh 1.5.16-1Dan Walsh 1.5.15-1Dan Walsh 1.5.14-2Dan Walsh 1.5.14-1Dan Walsh 1.5.9-1Dan Walsh 1.5.8-1Dan Walsh 1.5.6-1Dan Walsh 1.5.4-2Dan Walsh 1.5.4-1Dan Walsh 1.5.3-3Dan Walsh 1.5.3-2Dan Walsh 1.5.3-1Dan Walsh 1.5.1-2Dan Walsh 1.5.1-1Jesse Keating Dan Walsh 1.4-1Dan Walsh 1.3.64-1Dan Walsh 1.3.63-1Dan Walsh 1.3.61-1Dan Walsh 1.3.59-1Dan Walsh 1.3.56-2Dan Walsh 1.3.56-1Dan Walsh 1.3.53-3Dan Walsh 1.3.53-2Dan Walsh 1.3.53-1Dan Walsh 1.3.52-1Dan Walsh 1.3.51-1Dan Walsh 1.3.48-1Dan Walsh 1.3.43-1Dan Walsh 1.3.41-1Dan Walsh 1.3.39-1Dan Walsh 1.3.38-1Dan Walsh 1.3.36-1Dan Walsh 1.3.35-1Dan Walsh 1.3.34-1Dan Walsh 1.3.32-1Dan Walsh 1.3.30-1Dan Walsh 1.3.28-1Dan Walsh 1.3.24-1Dan Walsh 1.3.20-1Dan Walsh 1.3.20-1Dan Walsh 1.3.18-1Dan Walsh 1.3.14-1Dan Walsh 1.3.11-1Dan Walsh 1.3.10-1Dan Walsh 1.3.9-1Dan Walsh 1.3.8-1Dan Walsh 1.3.7-1Dan Walsh 1.3.5-1Dan Walsh 1.3.4-1Dan Walsh 1.3.3-1Dan Walsh 1.3.2-1Dan Walsh 1.3.1-1Dan Walsh 1.1.6-1Dan Walsh 1.1.3-1- Bump release to get around OSCI issues- Trivial style fixes - Free contents of modkey in semanage_direct_remove - Fix USE_AFTER_FREE (CWE-672) in semanage_direct_write_langext() - add missing include to boolean_record.c - move module hashing into libsemanage - move compressed file handling into a separate object - clean up semanage_direct_commit() a bit - optionally rebuild policy when modules are changed externally - add command-line option to detect module changes (#2049186)- sync filesystem with sandbox (#1913224)- Revert "genhomedircon: check usepasswd" (rhbz#1871786) - semanage.conf - improve usepasswd=False explanation (rhbz#1871786) - semanage.conf - expand list of ignoredirs (rhbz#1871786)- genhomedircon: check usepasswd (rhbz#1871786)- Fsync final files before rename (#1838762)- Add support for DCCP and SCTP protocols (#1563742)- SELinux userspace 2.9 release- genhomedircon - improve handling large groups- Fix RESOURCE_LEAK and USE_AFTER_FREE coverity scan defects- reset umask before creating directories - Include user name in ROLE_REMOVE audit events- Don't build the Python 2 subpackage (#1567359)- SELinux userspace 2.8 release- SELinux userspace 2.8-rc3 release candidate- SELinux userspace 2.8-rc2 release candidate- SELinux userspace 2.8-rc1 release candidate- build: Replace PYSITEDIR with PYTHONLIBDIR - direct_api.c: Fix iterating over array (#1557468)- Revert "remove access() check to make setuid programs work" (#1557468)- properly check return value of iterate function - Use umask(0077) for fopen() write operations - Return commit number if save-previous false - Allow tmp files to be kept if a compile fails - build: follow standard semantics for DESTDIR and PREFIX - Improve warning for installing disabled module - silence clang static analyzer report - remove access() check to make setuid programs work- Escape macros in %changelog- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild- Switch to %ldconfig_scriptlets- Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)- free genhomedircon fallback user - Rebuild with libsepol-2.7-3 and libselinux-2.7-6- Add support for listing fcontext.homedirs file (#1409813)- Add Provides for the old names without %_isa- Python 2 binary package renamed to python2-libsemanage See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3 - Python 3 binary package renamed to python3-libsemanage- Update to upstream release 2017-08-04 - Use 'sefcontext_compile -r' when it's run during SELinux policy build- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- Follow upstream and rename _semanage.so to _semanage.cpython-36m-x86_64-linux-gnu.so- Do not list duplicate port entries after setting a boolean (#1439875)- Fix FTBFS - fatal error (#1427903)- Update to upstream release 2016-10-14- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild- Rebuild for Python 3.6- Fixes bug preventing the installation of base modules - make distclean target work - Do not always print a module name warning - Use pp module name instead of filename when installing module - tests: Do not force using gcc - genhomedircon: remove hardcoded refpolicy strings - genhomedircon: add support for %group syntax - genhomedircon: generate contexts for logins mapped to the default user - Validate and compile file contexts before installing - Swap tcp and udp protocol numbers- Rebuilt with libsepol-2.5-9 and libselinux-2.5-11- https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages- Sort object files for deterministic linking order - Support overriding Makefile RANLIB - Respect CC and PKG_CONFIG environment variable- Fix multiple spelling errors - genhomedircon: %{USERID} and %{USERNAME} support and code cleanup- Enable expand-check by default (#1319652)- Use fully versioned arch-specific requires- Update to upstream release 2016-02-23- Update to upstream rc1 release 2016-01-07- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild- Rebuilt for Python3.5 rebuild- Save homedir_template in the policy store for genhomedircon https://bugs.gentoo.org/558686- Pass ldflags into the build so hardening works- semanage_migrate_store: use /usr/bin/python3 - move semanage_migrate_store script to libsemanage-python3- Allow to use compressed modules without a compression extension- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- add /var/lib/selinux/tmp directory- semanage_migrate_store: add -r option for migrating inside chroots- Update to upstream release 2.4- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild- Skip policy module re-link when only setting booleans. * patch from Stephen Smalley- fix license handling- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild- Rebuilt for https://fedoraproject.org/wiki/Changes/Python_3.4- Update to upstream * Fix memory leak in semanage_genhomedircon from Thomas Hurd.- libsemanage: fix memory leak in semanage_genhomedircon - Patch from THomas Hurd- Move semanage.conf man page from devel package to main package- Update to upstream * Avoid duplicate list entries from Dan Walsh. * Add audit support to libsemanage from Dan Walsh. * Remove policy.kern and replace with symlink from Dan Walsh. * Apply a MAX_UID check for genhomedircon from Laurent Bigonville. * Fix man pages from Laurent Bigonville.- Cleanup handling of missing mls_range to fix problems with useradd -Z - Fix auditing of login record changes, roles were not working correctly. Resolves: #952237- Fix errors found by coverity Resolves: #952237- Do not fail on missing SELinux User Record when adding login record- Add msg to audit records- Do not write error message to screen when looking for previous record for auditing. - Add mls_range from user record if the MLS range is not specified by the seuser add record. - Error out if seuser or mls range is not specified when adding user records- Create symlink from policy.kern to active kernel.- Unlink policy.kern when done to save space.- Move handling of role audit records into the library - Patch stops semanage from removing user record while in use- Remove dependance on selinux-policy, /etc/selinux should be owned by libsemanage, and selinux-policy can require it.- Allways build python3 version-- Fix test suite to build- Revert some changes which are causing the wrong policy version file to be created- Update to upstream * Add sefcontext_compile to compile regex everytime policy is rebuilt * Cleanup/fix enable/disable/remove module. * redo genhomedircon minuid * fixes from coverity * semanage_store: do not leak memory in semanage_exec_prog * genhomedircon: remove useless conditional in get_home_dirs * genhomedircon: double free in get_home_dirs * fcontext_record: do not leak on error in semanage_fcontext_key_create * genhomedircon: do not leak on failure in write_gen_home_dir_context * semanage_store: do not leak fd * genhomedircon: do not leak shells list * semanage_store: do not leak on strdup failure * semanage_store: rewrite for readability- Add selinux-policy as a requires to get /etc/selinux owned- Update to latest patches from eparis/Upstream - libsemanage: fixes from coverity - libsemange: redo genhomedircon minuid- Fix handling of missing semanage permissive -d foo, not failing correctly - Previous to this fix the first module beginning with foo would get deleted.- Update to upstream * libsemanage: do not set soname needlessly * libsemanage: remove PYTHONLIBDIR and ruby equivalent * do boolean name substitution * Fix segfault for building standard policies.- rebuild for https://fedoraproject.org/wiki/Features/Python_3.3- remove rhel logic from with_python3 conditional- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- Attempt to allocate memory for selinux_binary_policy_path and free memory - allocated by asprintf.- Fix asprintf within an asprintf call- Update to upstream * remove build warning when build swig c files * additional makefile support for rubywrap * ignore 80 column limit for readability * semanage_store: fix snprintf length argument by using asprintf * Use default semanage.conf as a fallback * use after free in python bindings- Apply patch from Sven Vermeulen to fix problem with python3 bindings.- Update to upstream * Alternate path for semanage.conf * do not link against libpython, this is considered bad in Debian * Allow to build for several ruby version * fallback-user-level- Check in correct patch.- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild- Add patch form Xin Ouyang to make library use private semanage.conf-Update to upstream * add ignoredirs config for genhomedircon * Fallback_user_level can be NULL if you are not using MLS- Rebuild with latest libsepol- Rebuild with latest libsepol- Add support for ignoredirs param in /etc/selinux/semanage.conf- Upgrade to upstream * regenerate .pc on VERSION change * maintain mode even if umask is tighter * semanage.conf man page * create man5dir if not exist- Fix handling of umask, so files get created with the correct label.- Add Guido Trentalancia semanage.conf man page-Update to upstream * Create a new preserve_tunables flag * tree: default make target to all not * fix semanage_store_access_check calling arguments- Add support for preserving tunables-Update to upstream * python wrapper makefile changes-Update to upstream 2.1.2 2011-08-17 * print error debug info for buggy fc * introduce semanage_set_root and friends * throw exceptions in python rather than return * python3 support. * patch for MCS/MLS in user files 2.1.1 2011-08-01 * Remove generated files, expand .gitignore * Use -Werror and change a few prototypes to support it- Update to upstream * Release, minor version bump- More fixes for disabled modules- Change libsemanage mechanism for handling disabled modules. Now it will only create a flag for a module indicating the module is disabled. MODULE.pp.disabled, it will no longer rename the module. This way we can ship active modules in rpm.- Add semanage_set_selinux_path, to allow semodule to work on alternate selinux pools- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- big reworking of the support-multiple-python-builds patch to deal with PEP 3149: the latest Python 3.2 onwards uses include paths and library names that don't fit prior naming patterns, and so we must query python3-config for this information. To complicate things further, python 2's python-config doesn't understand all of the options needed ("--extension-suffix"). I've thus added new Makefile variables as needed, to be supplied by the specfile by invoking the appropriate config tool (or by hardcoding the old value for "--extension-suffix" i.e. ".so") - rework python3 manifest for PEP 3149, and rebuild for newer python3- Update to upstream * Fix compliation under GCC 4.6 by Justin Mattock- rebuild with python3.2 http://lists.fedoraproject.org/pipermail/devel/2010-August/141368.html- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild- add python3 subpackage- Fix -devel package to point at the correct shared library- Move shared library to /usr/lib- Update to upstream * Add enable/disable patch support from Dan Walsh. * Add usepasswd flag to semanage.conf to disable genhomedircon using passwd from Dan Walsh. * regenerate swig wrappers- Allow disable of usepasswd- Update to upstream * Replace usage of fmemopen() with sepol_policy_file_set_mem() since glibc < 2.9 does not support binary mode ('b') for fmemopen'd streams.- Cleanup spec file- Splect libsemanage.a into a static subpackage to keep fedora packaging guidelines happy- Rebuild all c programs with -fPIC- Update to upstream * Move libsemanage.so to /usr/lib * Add NAME lines to man pages from Manoj Srivastava- Update to upstream * Move load_policy from /usr/sbin to /sbin from Dan Walsh.- Update to upstream * Add pkgconfig file from Eamon Walsh. * Add semanage_set_check_contexts() function to disable calling setfiles- Update to upstream * make swigify- Dont relabel /root with genhomedircon- Update to upstream * Change semodule upgrade behavior to install even if the module is not present from Dan Walsh. * Make genhomedircon trim excess '/' from homedirs from Dan Walsh.- Update to upstream * Fix persistent dontaudit support to rebuild policy if the dontaudit state is changed from Chad Sellers. - Move load_policy to /sbin- Add enable/disable modules- Update to upstream * Changed bzip-blocksize=0 handling to support existing compressed modules in the store.- Make sure /root is not used in genhomedircon- Revert hard linking of files between tmp/active/previous. - Enable configuration of bzip behavior from Stephen Smalley. - bzip-blocksize=0 to disable compression and decompression support. - bzip-blocksize=1..9 to set the blocksize for compression. - bzip-small=true to reduce memory usage for decompression.- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- Put check for /root back into genhomedircon- Update to upstream- Update to upstream * Ruby bindings from David Quigley.- Return error on invalid file- Fix typo- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild- Fix link to only link on sandbox- Update to upstream * Policy module compression (bzip) support from Dan Walsh. * Hard link files between tmp/active/previous from Dan Walsh.- Fix up patch to get it upstreamed- Rebuild for Python 2.6- Add semanage_mls_enabled() interface from Stephen Smalley.- Rebuild for Python 2.6- Update to upstream * Add USER to lines to homedir_template context file from Chris PeBenito.- Add compression support- Update to upstream * allow fcontext and seuser changes without rebuilding the policy from Dan Walsh- Additional fixes for Don't rebuild on fcontext or seuser modifications- Don't rebuild on fcontext or seuser modifications- Update to upstream * Modify genhomedircon to skip groupname entries. Ultimately we need to expand them to the list of users to support per-role homedir labeling when using the groupname syntax.- Update to upstream * Fix bug in genhomedircon fcontext matches logic from Dan Walsh. Strip any trailing slash before appending /*$.- Another fix for genhomedircon- fix license tag- Update to upstream * Do not call genhomedircon if the policy was not rebuilt from Stephen Smalley. Fixes semanage boolean -D seg fault (bug 441379).- Update to upstream * make swigify- Update to upstream * Use vfork rather than fork for libsemanage helpers to reduce memory overhead as suggested by Todd Miller.- Update to upstream * Free policydb before fork from Joshua Brindle. * Drop the base module immediately after expanding to permit memory re-use from Stephen Smalley.- Update to upstream * Use sepol_set_expand_consume_base to reduce peak memory usage when using semodule- Update to upstream * Fix genhomedircon to not override a file context with a homedir context from Todd Miller.- Update to upstream * Fix spurious out of memory error reports. * Merged second version of fix for genhomedircon handling from Caleb Case.- Update to upstream * Merged fix for genhomedircon handling of missing HOME_DIR or HOME_ROOT templates from Caleb Case.- Stop differentiating on user for homedir labeling- Update to upstream * Fix genhomedircon handling of shells and missing user context template from Dan Walsh. * Copy the store path in semanage_select_store from Dan Walsh. - Add expand-check=0 to semanage.conf- Fix handling of /etc/shells so genhomedircon will work- Allow semanage_genhomedircon to work with out a USER int homedir.template- Fix semanage_select_store to allocate memory, fixes crash on invalid store- Upgrade to latest from NSA * Call rmdir() rather than remove() on directory removal so that errno isn't polluted from Stephen Smalley. * Allow handle_unknown in base to be overridden by semanage.conf from Stephen Smalley.- Upgrade to latest from NSA * ustr cleanups from James Antill. * Ensure that /root gets labeled even if using the default context from Dan Walsh.- Upgrade to latest from NSA * Fix ordering of file_contexts.homedirs from Todd Miller and Dan Walsh.- Fix sort order on generated homedir context- Upgrade to latest from NSA * Fix error checking on getpw*_r functions from Todd Miller. * Make genhomedircon skip invalid homedir contexts from Todd Miller. * Set default user and prefix from seusers from Dan Walsh. * Add swigify Makefile target from Dan Walsh.- Upgrade to latest from NSA * Pass CFLAGS to CC even on link command, per Dennis Gilmore. * Clear errno on non-fatal errors to avoid reporting them upon a later error that does not set errno. * Improve reporting of system errors, e.g. full filesystem or read-only filesystem from Stephen Smalley. - Fix segfault in genhomedircon when using bad user names- Fix genhomedircon code to only generate valid context - Fixes autorelabel problem- Upgrade to latest from NSA * Change to use getpw* function calls to the _r versions from Todd Miller.- Upgrade to latest from NSA- Upgrade to latest from NSA * Allow dontaudits to be turned off via semanage interface when updating policy- Add ability to load a policy without dontaudit rules -- Rebuild to fix segfault on x86 platforms, swigify on each build- Rebuild for rawhide- Apply patch to fix dependencies in spec file from Robert Scheck- Upgrade to latest from NSA * Fix to libsemanage man patches so whatis will work better from Dan Walsh- Upgrade to latest from NSA - Merged optimizations from Stephen Smalley. - do not set all booleans upon commit, only those whose values have changed - only install the sandbox upon commit if something was rebuilt- Add SELinux to Man page Names so man -k will work- Merged dbase_file_flush patch from Dan Walsh. - This removes any mention of specific tools (e.g. semanage) - from the comment header of the auto-generated files, - since there are multiple front-end tools.- Upgrade to latest from NSA * Merged Makefile test target patch from Caleb Case. * Merged get_commit_number function rename patch from Caleb Case. * Merged strnlen -> strlen patch from Todd Miller.- Upgrade to latest from NSA * Merged python binding fix from Dan Walsh. * Updated version for stable branch.- Upgrade to latest from NSA * Merged patch to optionally reduce disk usage by removing the backup module store and linked policy from Karl MacMillan * Merged patch to correctly propagate return values in libsemanage- Apply Karl MacMillan patch to get proper error codes.- rebuild against python 2.5- Upgrade to latest from NSA * Merged patch to compile wit -fPIC instead of -fpic from Manoj Srivastava to prevent hitting the global offest table limit. Patch changed to include libselinux and libsemanage in addition to libsepol.- Upgrade to latest from NSA * Updated version for release.- Upgrade to latest from NSA * Merged patch to skip reload if no active store exists and the store path doesn't match the active store path from Dan Walsh. * Merged patch to not destroy sepol handle on error path of connect from James Athey. * Merged patch to add genhomedircon path to semanage.conf from James Athey.- Fix semanage to not load if is not the correct policy type and it is installing- Fix requires lines- Upgrade to latest from NSA * Make most copy errors fatal, but allow exceptions for file_contexts.local, seusers, and netfilter_contexts if the source file does not exist in the store.- Upgrade to latest from NSA * Merged separate local file contexts patch from Chris PeBenito. * Merged patch to make most copy errors non-fatal from Dan Walsh.- Change other updates to be non-fatal- Change netfilter stuff to be non-fatal so update can proceed.- Upgrade to latest from NSA * Merged netfilter contexts support from Chris PeBenito.- Rebuild for new gcc- Upgrade to latest from NSA * Merged support for read operations on read-only fs from Caleb Case (Tresys Technology).- Upgrade to latest from NSA * Lindent. * Merged setfiles location check patch from Dan Walsh.- Upgrade to latest from NSA * Merged several fixes from Serge Hallyn: dbase_file_cache: deref of uninit data on error path. dbase_policydb_cache: clear fp to avoid double fclose semanage_fc_sort: destroy temp on error paths- Handle setfiles being in /sbin or /usr/sbin- Upgrade to latest from NSA * Updated default location for setfiles to /sbin to match policycoreutils. This can also be adjusted via semanage.conf using the syntax: [setfiles] path = /path/to/setfiles args = -q -c $@ $< [end]- Spec file cleanup from n0dalus+redhat@gmail.com- Add /usr/include/semanage to spec file- Upgrade to latest from NSA * Merged fix warnings patch from Karl MacMillan.- Upgrade to latest from NSA * Merged updated file context sorting patch from Christopher Ashworth, with bug fix for escaped character flag. * Merged file context sorting code from Christopher Ashworth (Tresys Technology), based on fc_sort.c code in refpolicy. * Merged python binding t_output_helper removal patch from Dan Walsh. * Regenerated swig files.- Fix to work with new version of swig - Upgrade to latest from NSA * Merged corrected fix for descriptor leak from Dan Walsh.- Fix leaky descriptor- Upgrade to latest from NSA * Merged Makefile PYLIBVER definition patch from Dan Walsh. * Merged man page reorganization from Ivan Gyurdiev.- Make work on RHEL4 - Upgrade to latest from NSA * Merged abort early on merge errors patch from Ivan Gyurdiev. * Cleaned up error handling in semanage_split_fc based on a patch by Serge Hallyn (IBM) and suggestions by Ivan Gyurdiev. * Merged MLS handling fixes from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged bug fix for fcontext validate handler from Ivan Gyurdiev. * Merged base_merge_components changes from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged paths array patch from Ivan Gyurdiev. * Merged bug fix patch from Ivan Gyurdiev. * Merged improve bindings patch from Ivan Gyurdiev. * Merged use PyList patch from Ivan Gyurdiev. * Merged memory leak fix patch from Ivan Gyurdiev. * Merged nodecon support patch from Ivan Gyurdiev. * Merged cleanups patch from Ivan Gyurdiev. * Merged split swig patch from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged optionals in base patch from Joshua Brindle. * Merged treat seusers/users_extra as optional sections patch from Ivan Gyurdiev. * Merged parse_optional fixes from Ivan Gyurdiev.- bump again for double-long bug on ppc(64)- Fix handling of seusers and users_map file- Upgrade to latest from NSA * Merged seuser/user_extra support patch from Joshua Brindle. * Merged remote system dbase patch from Ivan Gyurdiev.- rebuilt for new gcc4.1 snapshot and glibc changes- Upgrade to latest from NSA * Merged clone record on set_con patch from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged fname parameter patch from Ivan Gyurdiev. * Merged more size_t -> unsigned int fixes from Ivan Gyurdiev. * Merged seusers.system patch from Ivan Gyurdiev. * Merged improve port/fcontext API patch from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged seuser -> seuser_local rename patch from Ivan Gyurdiev. * Merged set_create_store, access_check, and is_connected interfaces from Joshua Brindle.- Upgrade to latest from NSA * Regenerate python wrappers.- Upgrade to latest from NSA * Merged pywrap Makefile diff from Dan Walsh. * Merged cache management patch from Ivan Gyurdiev. * Merged bugfix for dbase_llist_clear from Ivan Gyurdiev. * Merged remove apply_local function patch from Ivan Gyurdiev. * Merged only do read locking in direct case patch from Ivan Gyurdiev. * Merged cache error path memory leak fix from Ivan Gyurdiev. * Merged auto-generated file header patch from Ivan Gyurdiev. * Merged pywrap test update from Ivan Gyurdiev. * Merged hidden defs update from Ivan Gyurdiev.- Break out python out of regular Makefile- Upgrade to latest from NSA * Merged disallow port overlap patch from Ivan Gyurdiev. * Merged join prereq and implementation patches from Ivan Gyurdiev. * Merged join user extra data part 2 patch from Ivan Gyurdiev. * Merged bugfix patch from Ivan Gyurdiev. * Merged remove add_local/set_local patch from Ivan Gyurdiev. * Merged user extra data part 1 patch from Ivan Gyurdiev. * Merged size_t -> unsigned int patch from Ivan Gyurdiev. * Merged calloc check in semanage_store patch from Ivan Gyurdiev, bug noticed by Steve Grubb. * Merged cleanups after add/set removal patch from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged const in APIs patch from Ivan Gyurdiev. * Merged validation of local file contexts patch from Ivan Gyurdiev. * Merged compare2 function patch from Ivan Gyurdiev. * Merged hidden def/proto update patch from Ivan Gyurdiev.- Upgrade to latest from NSA * Re-applied string and file optimization patch from Russell Coker, with bug fix. * Reverted string and file optimization patch from Russell Coker. * Clarified error messages from parse_module_headers and parse_base_headers for base/module mismatches.- Upgrade to latest from NSA * Clarified error messages from parse_module_headers and parse_base_headers for base/module mismatches. * Merged string and file optimization patch from Russell Coker. * Merged swig header reordering patch from Ivan Gyurdiev. * Merged toggle modify on add patch from Ivan Gyurdiev. * Merged ports parser bugfix patch from Ivan Gyurdiev. * Merged fcontext swig patch from Ivan Gyurdiev. * Merged remove add/modify/delete for active booleans patch from Ivan Gyurdiev. * Merged man pages for dbase functions patch from Ivan Gyurdiev. * Merged pywrap tests patch from Ivan Gyurdiev.- Patch to fix add- Upgrade to latest from NSA * Merged patch series from Ivan Gyurdiev. This includes patches to: - separate file rw code from linked list - annotate objects - fold together internal headers - support ordering of records in compare function - add active dbase backend, active booleans - return commit numbers for ro database calls - use modified flags to skip rebuild whenever possible - enable port interfaces - update swig interfaces and typemaps - add an API for file_contexts.local and file_contexts - flip the traversal order in iterate/list - reorganize sandbox_expand - add seusers MLS validation - improve dbase spec/documentation - clone record on set/add/modify- Add Ivans patch to turn on ports- Remove patch since upstream does the right thing- Upgrade to latest from NSA * Merged further header cleanups from Ivan Gyurdiev. * Merged toggle modified flag in policydb_modify, fix memory leak in clear_obsolete, polymorphism vs headers fix, and include guards for internal headers patches from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged toggle modified flag in policydb_modify, fix memory leak in clear_obsolete, polymorphism vs headers fix, and include guards for internal headers patches from Ivan Gyurdiev.- Upgrade to latest from NSA * Added file-mode= setting to semanage.conf, default to 0644. Changed semanage_copy_file and callers to use this mode when installing policy files to runtime locations.- rebuilt- Fix mode of output seusers file- Upgrade to latest from NSA * Changed semanage_handle_create() to set do_reload based on is_selinux_enabled(). This prevents improper attempts to load policy on a non-SELinux system.- Upgrade to latest from NSA * Dropped handle from user_del_role interface. * Removed defrole interfaces.- Upgrade to latest from NSA * Merged Makefile python definitions patch from Dan Walsh. * Removed is_selinux_mls_enabled() conditionals in seusers and users file parsers.- Add additional swig objects * Merged wrap char*** for user_get_roles patch from Joshua Brindle. * Merged remove defrole from sepol patch from Ivan Gyurdiev. * Merged swig wrappers for modifying users and seusers from Joshua Brindle.- Add additional swig objects- Upgrade to latest from NSA * Fixed free->key_free bug. * Merged clear obsolete patch from Ivan Gyurdiev. * Merged modified swigify patch from Dan Walsh (original patch from Joshua Brindle). * Merged move genhomedircon call patch from Chad Sellers.- Add genhomedircon patch from Joshua Brindle- Add swigify patch from Joshua Brindle- Upgrade to latest from NSA * Merged move seuser validation patch from Ivan Gyurdiev. * Merged hidden declaration fixes from Ivan Gyurdiev, with minor corrections.- Upgrade to latest from NSA * Merged cleanup patch from Ivan Gyurdiev. This renames semanage_module_conn to semanage_direct_handle, and moves sepol handle create/destroy into semanage handle create/destroy to allow use even when disconnected (for the record interfaces).- Upgrade to latest from NSA * Clear modules modified flag upon disconnect and commit. * Added tracking of module modifications and use it to determine whether expand-time checks should be applied on commit. * Reverted semanage_set_reload_bools() interface.- Upgrade to latest from NSA * Disabled calls to port dbase for merge and commit and stubbed out calls to sepol_port interfaces since they are not exported. * Merged rename instead of copy patch from Joshua Brindle (Tresys). * Added hidden_def/hidden_proto for exported symbols used within libsemanage to eliminate relocations. Wrapped type definitions in exported headers as needed to avoid conflicts. Added src/context_internal.h and src/iface_internal.h. * Added semanage_is_managed() interface to allow detection of whether the policy is managed via libsemanage. This enables proper handling in setsebool for non-managed systems. * Merged semanage_set_reload_bools() interface from Ivan Gyurdiev, to enable runtime control over preserving active boolean values versus reloading their saved settings upon commit.- Upgrade to latest from NSA * Merged seuser parser resync, dbase tracking and cleanup, strtol bug, copyright, and assert space patches from Ivan Gyurdiev. * Added src/*_internal.h in preparation for other changes. * Added hidden/hidden_proto/hidden_def to src/debug.[hc] and src/seusers.[hc].- Upgrade to latest from NSA * Merged interface parse/print, context_to_string interface change, move assert_noeof, and order preserving patches from Ivan Gyurdiev. * Added src/dso.h in preparation for other changes. * Merged install seusers, handle/error messages, MLS parsing, and seusers validation patches from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged record interface, dbase flush, common database code, and record bugfix patches from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged dbase policydb list and count change from Ivan Gyurdiev. * Merged enable dbase and set relay patches from Ivan Gyurdiev.- Update from NSA * Merged query APIs and dbase_file_set patches from Ivan Gyurdiev.- Update from NSA * Merged sepol handle passing, seusers support, and policydb cache patches from Ivan Gyurdiev.- Update from NSA * Merged resync to sepol changes and booleans fixes/improvements patches from Ivan Gyurdiev. * Merged support for genhomedircon/homedir template, store selection, explicit policy reload, and semanage.conf relocation from Joshua Brindle.- Update from NSA * Merged resync to sepol changes and transaction fix patches from Ivan Gyurdiev. * Merged reorganize users patch from Ivan Gyurdiev. * Merged remove unused relay functions patch from Ivan Gyurdiev.- Update from NSA * Fixed policy file leaks in semanage_load_module and semanage_write_module. * Merged further database work from Ivan Gyurdiev. * Fixed bug in semanage_direct_disconnect.- Update from NSA * Merged interface renaming patch from Ivan Gyurdiev. * Merged policy component patch from Ivan Gyurdiev. * Renamed 'check=' configuration value to 'expand-check=' for clarity. * Changed semanage_commit_sandbox to check for and report errors on rename(2) calls performed during rollback. * Added optional check= configuration value to semanage.conf and updated call to sepol_expand_module to pass its value to control assertion and hierarchy checking on module expansion. * Merged fixes for make DESTDIR= builds from Joshua Brindle.- Update from NSA * Merged default database from Ivan Gyurdiev. * Merged removal of connect requirement in policydb backend from Ivan Gyurdiev. * Merged commit locking fix and lock rename from Joshua Brindle. * Merged transaction rollback in lock patch from Joshua Brindle. * Changed default args for load_policy to be null, as it no longer takes a pathname argument and we want to preserve booleans. * Merged move local dbase initialization patch from Ivan Gyurdiev. * Merged acquire/release read lock in databases patch from Ivan Gyurdiev. * Merged rename direct -> policydb as appropriate patch from Ivan Gyurdiev. * Added calls to sepol_policy_file_set_handle interface prior to invoking sepol operations on policy files. * Updated call to sepol_policydb_from_image to pass the handle.- Update from NSA * Changed default args for load_policy to be null, as it no longer takes a pathname argument and we want to preserve booleans. * Merged move local dbase initialization patch from Ivan Gyurdiev. * Merged acquire/release read lock in databases patch from Ivan Gyurdiev. * Merged rename direct -> policydb as appropriate patch from Ivan Gyurdiev. * Added calls to sepol_policy_file_set_handle interface prior to invoking sepol operations on policy files. * Updated call to sepol_policydb_from_image to pass the handle.- Update from NSA * Merged user and port APIs - policy database patch from Ivan Gyurdiev. * Converted calls to sepol link_packages and expand_module interfaces from using buffers to using sepol handles for error reporting, and changed direct_connect/disconnect to create/destroy sepol handles.- Update from NSA * Merged bugfix patch from Ivan Gyurdiev. * Merged seuser database patch from Ivan Gyurdiev. Merged direct user/port databases to the handle from Ivan Gyurdiev. * Removed obsolete include/semanage/commit_api.h (leftover). Merged seuser record patch from Ivan Gyurdiev. * Merged boolean and interface databases from Ivan Gyurdiev.- Update from NSA * Updated to use get interfaces for hidden sepol_module_package type. * Changed semanage_expand_sandbox and semanage_install_active to generate/install the latest policy version supported by libsepol by default (unless overridden by semanage.conf), since libselinux will now downgrade automatically for load_policy. * Merged new callback-based error reporting system and ongoing database work from Ivan Gyurdiev.- Update from NSA * Fixed semanage_install_active() to use the same logic for selecting a policy version as semanage_expand_sandbox(). Dropped dead code from semanage_install_sandbox().- Update from NSA * Updated for changes to libsepol, and to only use types and interfaces provided by the shared libsepol.- Update from NSA * Merged further database work from Ivan Gyurdiev.- Update from NSA * Merged iterate, redistribute, and dbase split patches from Ivan Gyurdiev.- Update from NSA * Merged patch series from Ivan Gyurdiev. (pointer typedef elimination, file renames, dbase work, backend separation) * Split interfaces from semanage.[hc] into handle.[hc], modules.[hc]. * Separated handle create from connect interface. * Added a constructor for initialization. * Moved up src/include/*.h to src. * Created a symbol map file; dropped dso.h and hidden markings.- Update from NSA * Split interfaces from semanage.[hc] into handle.[hc], modules.[hc]. * Separated handle create from connect interface. * Added a constructor for initialization. * Moved up src/include/*.h to src. * Created a symbol map file; dropped dso.h and hidden markings.- Update from NSA * Merged dbase redesign patch from Ivan Gyurdiev.- Update from NSA * Merged boolean record, stub record handler, and status codes patches from Ivan Gyurdiev.- Update from NSA * Merged stub iterator functionality from Ivan Gyurdiev. * Merged interface record patch from Ivan Gyurdiev.- Update from NSA * Merged stub functionality for managing user and port records, and record table code from Ivan Gyurdiev. * Updated version for release.- Update from NSA * Merged semod.conf template patch from Dan Walsh (Red Hat), but restored location to /usr/share/semod/semod.conf. * Fixed several bugs found by valgrind. * Fixed bug in prior patch for the semod_build_module_list leak. * Merged errno fix from Joshua Brindle (Tresys). * Merged fix for semod_build_modules_list leak on error path from Serge Hallyn (IBM). Bug found by Coverity.- Update from NSA * Merged errno fix from Joshua Brindle (Tresys). * Merged fix for semod_build_modules_list leak on error path from Serge Hallyn (IBM). Bug found by Coverity. * Merged several fixes from Serge Hallyn (IBM). Bugs found by Coverity. * Fixed several other bugs and warnings. * Merged patch to move module read/write code from libsemanage to libsepol from Jason Tang (Tresys). * Merged relay records patch from Ivan Gyurdiev. * Merged key extract patch from Ivan Gyurdiev. - Initial version - Created by Stephen Smalley libsemanage-python32.9-8.el82.9-8.el82.9-8.el82.9-8.el82.9-8.el8.build-idca73d76bb41cae5e6dadb6df6d63beab01de7a81semanage.cpython-36.opt-1.pycsemanage.cpython-36.pyc_semanage.cpython-36m-x86_64-linux-gnu.sosemanage.pysemanage_migrate_store/usr/lib//usr/lib/.build-id//usr/lib/.build-id/ca//usr/lib64/python3.6/site-packages/__pycache__//usr/lib64/python3.6/site-packages//usr/libexec/selinux/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protectioncpioxz2x86_64-redhat-linux-gnudirectorypython 3.6 byte-compiledELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ca73d76bb41cae5e6dadb6df6d63beab01de7a81, strippedPython script, ASCII text executable R R R RRRRR R R R RRRR Rutf-81a675fcd8d759a0c43f8005ac66c8ed809427a57a64028813d499509203efc4f?7zXZ !#,!] b2u jӫ`(y-DBat1u wH>eLH+B' H#ysu*ݳ)wir=)KsB@߂*xwWP>/vt,.>nzTȕ%D*)D 򼡏so R*D 9<[a1oܑNDQC$-zpѴ'*/=cmݡd|*bMYy Pqڿj̰A'NQ)ا%DRޜ~ԤQ*qe#cn8F.IKޕ\ztgǂWU%񊴾A:1Da M Me[Jݸӝ^_{EH|O"RI.E%)4vǐ[XnoԨP*-^n}f1"e-[cgH^jӾt\e=:P;ejq?xul궒N$ٶ}րAmh7ڝ&i)d4fsC~'kqm"!ܛWS5'1[~̋vY8wA1:mϨ-`F3:h5xu{`W"8$hhThi "цm™wM~WMX;/`-Qͼ[Iˈa8PV5*;ed2 rH QbOܵg٠ؾ`fB_|EpWrًP'z_9q($JҗłqٓVzf.0p^IܞW^Wǚ 7E70)Ž-x-Հf +:-9TZ% <&c2aK̾4oh6lq/K:k`P8$s_f`~~d4--lGIsДpVxAR46QyP}АC |{s D^F-}V}ߟ~}< AP9AF ?H+WL LE3QD;+`d0HaqFpm8(. 5/.1_LMtLt4eMkN)\ 52$%%SpqoLK&$_U F.H .t\ x"mBTz?}C+CDK~l oag{)ҫ]Tb%bP#($|cڼ٘ xm[߱Qco"ן+kZ}6@ZxCi_냕߆UD/,}4"ϱY>"Rҳ~vo :.jŞVOZg'P?-Q i,~Om'^.n46y3NZRQ4<%J}2iAG.g^\kdb 1|B ଠ0,NhBmap,:%;Ib,1xIHDxm66WHC!Kdh !~¼D膤*+*vv6Yzuf?Q(5QfE^.~-[K,|,KcL%]Z o hzRGk uP"\*#Z=H@S⿛P{p"1eI/#~| 4]$`TC'4Y۪TPaf"~'DCbK`z#vYKJގ[ǶPMm>|rQR\I;{޶U\!kWr$·S[WWv遄EŸ/by,q| 'F9X:Mhƴՙ!]OfKwȟ!Loxk纯6JY Px[ŠtJ/DHc~+Ð!;q_OpY Cٛ !7ےj_gf@V[އxtgR'-Dž<[>T ##]h|j-@$+SR`+4~c%c.FeA֜/:5 ,XA,$WΓlgDqBǶIN[YTCTJ4Eč[҂"h휆0mXGA$|Py9b$'Z5!1y ]& D#X-y>;ZH qփ<@'|\Gg827:;Hp6+a!z$<$47o]UZhJ.)6oKa.&vEPz;NϼA*k_t~喎u;;CV4ߨ/|eSC"Xϵ]s nXDe\Q} in\[R"z[Wᘆ{RHL$p\軋 /ٹG_pi\PYZ^:<󙇑mR1˶l*;=/h9n], aYLx "M[ߟ]O4) Ydm0kuO7ʤt񪷖D8aHb6ۡnN2sT{lAW, Lr{@Ij5+_SuV+'bf 9 >q-k?"1x]"Ag1lq3M.:bZ*3sJ_:hD,1 !g)!b/: ˀW:~Ĕ%Sڇ질аj+i=l ?kxoZ>6>S˻~~c_WuU.Y5IW3TTP ͹()!/t=QrN? VCC/U?XS>:{ZoVT1 dOa *t%mA njvld{ƶexnme4m_Vp;>cI1tUj x=rP~0>Gs&ZvQQFhק`1*~H:O /N(ȠӳL5ښ^A.4E07vL7ӬFx E3ɴ.f(f^5K l+qa;`_V%dx%nԇO'(*=؃|*$'GMh+I+j.m!;*cԐyï~04HX/ hDԆ+} r@컍V}A0]I9aoz`)J] faR_b}&#jhA]H'] q)u->{%AJ/q[q8QO.MC.@i,Z @ҏ6W.L aRC\Sl=O%.F6HTI)Ihѫa E`CeleM(=ȅfI2+OxD#sDc/U)fsKEQdeyU2>8'?KL^4iuyHLmC 4Mo9ێ(6u >k?Ycy½Pmb.1CֽO#ؓEƉX/9Dq' ŴXGUc/q@ע^L P>] cYntٹ$Ʋ]:=.V& uu|7 `| {WYl rr%"'A盲`c)"^ $>_M7-w8ڋΧ~&IK'x^l߉km^w84{u3K)9? $g3=O(c{DŽ(Vj״,0l׽0ί 0{à F:6n{iZZT؛UI|*AL ͕-::E_ ߾`!Qb1FJF:ǹ.Xa&֓ɴ"ÁS1%!2+%W`>`ϱh.43~5U&(u;3,(j.+ɸɫĶ8V%cv1yt\(4 ֝ dCd#%9,f2V )@Otq5Ksq: 1+NqSǥ:1a.T/~7hB3T뇕 QH~%8$C`RJZs,CpOEV^R*ZƭPP8-?3AN k9IL٦\8F{Bs(Z5ё A.0c r65wu揋%Iwj hE71^=M}͗a9sjbQ@+rl*pUt#9#o0XJ;L{aw7!_{ȿʀc\nDQuf+'v Ffꑴ_݂F9n`Ow.ZlgDSC*(` $*`> v/{[ G[?4TeXQu:d\۞H4^J2jA HCe h p2nE8BXx7><~q(:͉Q-8WvQF6"] A Nw頋g^rZ~,NsTQ18,dY58sp"0wk uJа X]&pfo|-و\6c17QsEPkcQן5ߝg| *k߄8UbA>NuD+#h)S|o$9٨:*+գ&y'k&Ŕݸ?M3'C1}F`l52_Һ`Ń҃c:ķ#!ߩ#ːϯKWx̎-aIPr)bN\$xƂ쐕mMI,DT@*e! W2K6٠ Luܘs_ml;6˧ =:k9e3nHeL~\폃1Ƃ^ט2:AIUqD=vvn1?rl< %Hֶ CDde!՚ds &X[dڡ&JB_%֚`A<C`$ Asx4ٻj0'vU,`.'q_X'riͯEi2 [H)o/2X%ɼB34vׄRjGN.Xk)ۂ˞ ”cl 9M[P7fn^DR! )UvAmE%g{=jK~*` p e??Rk<{1[y 75M;|뾤&}bN,jjfkt*:ߔtґ9e2:X>r3<#ɉ.fZVPd6/ahJ[~d9—]5[ΩX0NQ3 eZ.9 dy zYu- R|4Q%kÌ~0 x C#+cjl4}^dBN( V6n$h9R ^ϼ[m# zE'܁^`jܚ ~ ~Ƽf-'zo*,XFJ4{{_-r%XnR7n8<=Lt"mRy6luct6k[(?"!%[֢|pQnˣD 3O^IH7jhnۀCtG t_pSP1,zI3Nr/2LFƽ3u[5f13Kq-73˟=MgmL31nU8n}}t|]0GFz}C0ĉކ6vfQ,MPN -;Lc;gY9hx}lɹ-hs- e'zs-Ecu4+B<9= x8-g IRVGQ2; 6%.)&D*kQYN ʹkzi tJdRa`a=ýt0mAuLms\u D^S`%Qk9ߴf0ŻXނ@̸dSXv\E3$(40Љjt wPU6JU9?MQ?M0) :xo4x[Lǿۛ!4=`< Hw/r 7v5y87+bA pݽL`0P p؀qe{B0B9.IW3'X?6UiI!\*>nh)\L3%aA16C;iRez5,1(Žx1J'6P7LSϒƒ|'JЫ $XPѝX%!W@ހɖ,b!@#QCt#U.Snߵb 0m %dfUuTk| ^LvKb?t>gt1W= @tj3}թ t u=3.iBvO}Fj ]%а5]D~`}=H[cYi[㼂呁e$sm]7Dm 18>Dn'k4͵+[f}JxHcP@u5hVˆ֩X5*Ji%5Xe%|| Dj?VqiQ }7-*J!a1A[1Tޏ2^HNALXIF΋R'-p5iYFt(:|^8+praYSrݛ;}.VwyGVdFbM6{Ŷe0abCݽ\b9rŮwo9`ӾUvz32pWQ 7oHҢ6 *bEJ_ϬԕA$р^j3Ü~߁zf pʆ \>gq0.+VD#=7>9@Bu:+BD/iT#ڀT.\4ؓb09^ ?\&L]7)[O9?Db,~pd["Nݿ='W'q%thWwm@.w1Pe##! Cլ`/(P 2}3m㸥wRIG6^m 8 HsR޿EUl" [֦c9cގֆһ5Le9H,aٗOڮ$;Tp⧾쨨v~] l6mfׁ^qؾM(RI4*:$iq ŗK،ei>~ej^7ەGүTW(e`;~Q;3 ZmĻ~;2FF6se# «}\y;2w(9Me ͋LIKl '3^H1Do`V&v>~nxVC`5>.%sM" fİx(*sa<7ֲ f.{Q幾bË\CŌas Xwٺ5$٨%^7׊wD~嚢4)-ǒk+I˅E)5@<4M\ %A'7e[s_uc4K,AB(nzc(ȲaNJaQEj[ީ43A~av5"3X_vb\k2ʞ1(` ް.?e:35alV!JFpj}AbmE_혢# 5sŐ)'&u֚cwؽB!Wi: 3ߩZ#>^ʏ$2oEnԈC9!Grd1tIL A>P 9$9lTb$Uԗjx=mC1Ua.$ioXgrKo' gE+`eZѿmb 2ײP؆[-adMU0rYtx#*&6SȔ.1,*H3Ǫ'F;\lpo֫M?e?GCD׷\x{aGP>y01MfWOG`dP,<ܡQV l>UEPӂ)3l°~&eԸHخ\ۻR.vf\3ss,/?&<}H3c?]4nN^; ^<^/LYx2h y 'Rci?]ÀI'b /F \ !^@.! /iG3̼n;1+c9RU];sd$˷}3p@JMB_cS7;/MD'j;qzgB?1xnK b=q;"}^ޔfLP }2@֢_w_Vpa R)Al`Bq#i qj<`P,D4U80DUqyR茷Sаڂ%}Iz%o\ݲ$26P7gYX80mv*\c`Ts=R K;Ʀˑ3@KL YQ/uWJm-%Tw/Ќ $ L6!dx FA}^bxr6a 츇C]F/;!QޑR\NMgԚU9 ` `b6{,*P |zTR̕pÎѿI;#*Ԛ0a|nd!;v9CQeG oՑq*?`ma]PUڍ#h.zdmٟQEk~pgŸEO%I^Zk7 g=GJ?Mg?W}WrVq"P~ZN AfDv"iZ^0&"U˼L`f<৒hE;҂ 6C{ܥ3dH$Șǟ a5:F|\ڙt̚ %yUau/ox? Nt|bߝJ8t/qO@Hx!Z,ew>8K רs6XKN-0vqT17bxJZgI{OX7>/6Kː"W*>"Ж$}0z_"CRwCb b CZI m92-/U~5s7LucpO$?}m3UC%S@K#xv~ZlBni7UxV>[]Hv0 @a%`ѻq3 B{bG3Ot>i[媺TFɥap<B,8Ib2v_\A6ShrSJTEt;mȳ5r>s$N4#y LQ2IyM`<΀;iݟG'cFM Hi~Az UI0HqtoI1y$I!o^uW*yp[ G`Z|iS#JHP0 n TtqhcSA6.[8ۄa) 0UE%j<p3r >չY0I?<ڱdώ ⭧]]99>s}9Q ѶO>0[)o|s8#k0ܝʎ SbEY/w[ 9nU]PC80d WqPIE"Kgz~H?†$՞dšT fvYb}ldZhO 8j|a։^X&Ӣ`D/R~6!Eٞ&3(jn;dj0k?$B˝AHfPbJuTWGJ+yv6N7<Ͼֳ,s4Z_U ʹY茴ծ'WdH:( ˝Vgڹg ԉP!|MLx[JbWPpt!P +a`ںWƗPA-#TC&JVh1qxZld%m@pQ8ԍ׎(gX\FXQQSEbou˯=Fߴֳ>М@A}[qe~Yq8~]c0%uv |75d>eLn!,NG<_! H˱ݿo_ _ btۜ@C٪?cI4⨤S0GB@ O9J9]uP.h o^[3eiCds˜'нvϙAKn-ɑl@L@,@e"dN6u-zr& 8qOe E^YX<}n3*P=Ё 9Vn=moғ잙öiŗpQ%N>=jTd:f>*4^?ޥu([K=E#5Jz͇S~:Tʘ,Wu+p>gY'ϖ5ڿfQIG Blzk@ma+2/Lz%b7Ls5ƓUCJ'n3 ܆8@I^4'n!a޷77x|u]hEܞXz|D7{*SM_ԼC(#I"4Nrˏ5`dŵnPZ]@)r7Ghw'yҙ⏫Fq]➤OOrvԝSož|/s*釠Gwɻ`@|X9aӔpz8]<\8FMJj/GcW'߂6E3T$JT%3㐵iцi-sCwHTv=Bٮ.2D3C +4#Vkn{3gvM]kP_H ȷy۴BX1s„qk5*o;[(^`Z>yt 0Ge'o5̐c[[R]6viSf̕D_#s~et;:t˪Ö dڕ쬚4̩R̃<5J(Wk/d nT2{ɹ(Wt%x\ Ho;s"h5w#I-VKviJѩ_y5F_@L@YE:QN$D5eT՞#Cz85ZLE!q[ 4Lr'Z`}M\ ;dI53 Y[]K(WK:l{H-Xӻhƶf4cKͽ/jYwxVbŷ7FP9-5 a&\UCՒ_9/'O(IMMF;ĐN\wKs(+&-Kr9R,.ivr}mlDFcɿ VMtt҃K#6w~y{2MH_=\HxCOh=C[{4ꋦXT@ ; p"~.i".96= nTYl,V%Z1!Z%'"j_#-\}KRH 4S/}vaztmSхҙ;.j-`6BG+;ykT<^q sLJjX^C OѬk   OmO"AI}7 88F=}p,A`E̺jD/N~8qM!S/щ;@jl[~y B=떗\ L xdG-|R0D(6M߻ e#GM@>ܯpDIF h s}Y*dr^kzBc6a:(.Βj(77Ӣ\'Tastu@5 (T^# (x!^n`lx1_mi;e)[c/ͣxptk*]P3CfS@>-yE>b8>%9yCP-HTlW+`Hr5bA%nVZ)=aZ%02({ŭF~Lsz:3ԫ'P41[z,0K KdaSrl@q Žubf襨@#5oyPk>q"n  f0O~i;a֮d],QkOW÷=ÿ t=@9L`,TaҪ 7^͇cIa!PMe(~)LR~6L"ypHt˜/ x%> tq.es4{A{fX؛Lv?|WeV/(33][ݥYPGybW>W8oOvkx HeyW@j\3S'zE WU2"AvAx֗Giy3㊔e-PQՏKZD`jO҅)eݠd>P)lffʉL50}? KCa'qQ854y1Fb/ߓ"0As)` y aځμ;N*wT!J~ }H ڭa =!ZwO{h4 Ŭ+8Q3Js^dPG~sU9Nb:](Tbc"i@alIKG-Im,YDyBu4Ԝ=.əGwEh:ʠRĵoN6ΰCAp}rvUkn7GJ<՛0%d_YYt|=o}:xurA1zIgJWù]˗Mq;В1ĕB'cQKs`X_W}NNU! 3v"JKܱ? VZv l 'zlWhHsYUk KQ9Ŝ?֛cf~7b6nd JCpv};{>Ms!m}\nˎКu^֞K2(Gfv'˔Mc6$ 6K'nmojփ~6/r$xzi$[ha U+ךѭ~'a(_˚7NdOo={T|\%f&R$y[>оJs6j@=[]\tJ~gPȢZD pAVW( / ^!@Qt;p]e , fY\D\)Q $yZ@;LW& /tm}@(ɴ&'9hDž'-/Ӻ~ձqJݼ]'GJ/ OX g1 >=1ѧLNLݾ`h?=Zd-VUKYKyv0g9̘q]\~u;"}=ه`χOd@-~3 { \< ebfP ItǠ (ޓ`eC qj"Q_d|T_f% 4T Vp l>b'\σwA/';eP%gvh/hض lo2(2f}@d+Xi#ZѶNt]%S 6T3yj伣 #Ƙ|k֞9oVG)r,3j}M>ylH7Q X-B7XɝeT]vMO{";Lj:|8+O5e_1#"y?C/E,W!~nd^T*>Lf0l[¬|  ։&P$Ƚt7^ ~؏;JknL\9.^Fؑ@93ʗҡ(t[tPb.8߭OXt&– ǵMTfXe<{^/,LoQUo抡602y=D' %AV$LػOIhLϋqtOX2 -I}LPv^]kFA!Lr6jh*/C`$pn< #v՟2`rv.(zͷ-{ɶI t]h䳀fJR؟xƳ\ ȕ}PX`{;; Kf =n=v/f"ν*B`0. n|KC(h5A.¼#**bв~(>dTz'"T'Ӓ! ^~ kh`jw)(HOp&h  p!&m}dU"dc/,*+z ~,u~ 2wq8Ehr߻x{#4Fn,6Pl/SQ(o7@RϟLҺ%Of72.P:gkLg鍰)>)m/IK`([7Åfl~=Eԭ0{e.cVͪUc+vG[yR>:XȔ4ubZC & LDTҹ[*`ޢj*R&m.!&r 0/KM !Q%(G!-Q$Z,6<@,AM]?I͂ZRY_&Ixֵx^6ݔRCG? ^lFu2<.9:@ӱTKkkHͺT#+q6wn}k-a"P8he<]B8&^vnOxX 7R| .΀62df*ot6G"IhIk[Z?:jtJUᚴdͥj~ЮwL}R)T^ѣ鞭Y ZI;qdAǓg&ãsMK%w/*SKΒӃB ?$՗Œ` X9珢KGX^U0M-m '>ή믜刐 )qy-Z9]qZCr.g3'>&ScCpr5/TP都 I=¥.'%\[ww11O.hcp>na"T7K7A^ D'ɹ^Ւz5}ؓo]LKqcUOkYSKͺa5'; rşnۚw)컝Nma6N5a7qec+P!xM\|,xot͙f LN{&q"?4g-2Tyw|xT)Lݬ5, g f*FJwj>qefp6XUflǾ`Uwt4|a={n^@׷_.xLx|l$ީ9 7%=DjBhޜZ].[f3zbT0VSBQ$ʟYyy"BϐZy+Orh|gߝ -kX%kiu5 jkcSԋJ(oGJp:_䪸hթ7ˣh"Ԯl(+)a(9ՔMr}ƑBi+!JTm#-b&:i"& o GsZ^D.]-1j!ޥdv1-;_| ;ќubv.l[ lU\kȦxg5"5ֶ](a3ClJS4+?*~j@ѧ&aI>I+zy&8 ]W/04GoqN+uc-!#*WC}}8x.V'n);wˊ9W=ч'Sfz7$+Lk)˳A!텶++qtߞB2tY#B=ֲeb||H)ll׉8uB9)SPOHKe@㒾0ȧgpM2?Unlhw:\_ e8(H}[*JYN1>efC+␐ bJ|*` G1,@9&t GrKfHbX$k#_ۻx9o넬Ӆ(FuIt~69(;i3ހv{j vV,SX.? "|&E@dxf>5n{v[AeyZXf k=2dx#ɇ7<%v=B;2L`ZN ",ॠ؁_AL6ov5:r4Disu6nO^/rm+mQ" e 1)G-A. N=K!2i'0rA\MKɸo~5]F*]+8k'nOUqze#GkzydE "u!Ri4Ґ۷jjLgCK%TlYݠ8KJCMm%@zBam" E[Pjqg=a;Jl朻JVכ]Hۖϑf08|@8lx[4ᡯ#H=F:5 ~EZ-08[Ps. vj?L h9eyÖ׎=tXXX aZLC- {H*XEjz =,{: +ps& Ex60'^\J7nY8'K] =F7s >]b_c_nג`nDmiR5 wneNRV[eJX4HƧ .]㭠q^43u3! ,&DR3j-G(޽;-Wj\[B1@eT&`8}] О /ahO=fQ◒Ġd'%f9M 8(OF>ȟj${#SvEpGni8HQdz`m@Ӆ/+DNqcÏGh*j4<R֯5w'h7vb@t_B)BK&vRb+3hj{>=2s㯋R &5(!B軒%7MT}Ό,99J]X8B*(ur$  ])Yl>{:k[\_EhCC*$X?VY|T%l~rLd~˒܁yqbUNB}M/ ktkg8# zX<&Ⱥ.Ư[ШFI⢃.u5#mH`R>c? U;DsTq3Pd2B[3xiyɃQ5@qK* 47ZKOkfu.〾`׋oY|XYyH߆ #;eBrNYµ\ HV}EF,d,r=`?#(P#` 񘹤+IX%I*w~9+q'brX=Iv4;wxԐY3UgBTVXx%KbtкJNPZDqR'e>tf3ff(28Doڻ{&ѶQ^ZPۈSQT<<#Q z:a1ɤ SkH{oF$'0-[45#of xƳL<7zqCpmBu㲎~_-5=t炚z-E׈o%ZG.Hg%X,v9@RU/9)h|∥I<aXT{ܧq,T m]vAnߕU1}TaSOԁg%1R;H|Z%Q_&p8& qp߿^s.]3rDEJ-sElkSZw"弽Qi "Bb6Uny*)?2lQͳlc;5r!۠ 5g*?8W{;,zȂ|qإ,Gj.Hn0K|J +Qr#~=nkrrlLr'zZNy\O{&e 9Z#e.# V WmD=#ᢥqbyW#//d.ҌZ rKASI0!AU%[aڃcPWL*VR0,C:{ ?}WQhMyZVr屷L@¸3FBKG~ԗmH"Emֆ-FR$A%\ ץj &Z_p㙼l21IviuwG˫,\G>Q̳}0#U5p=C`߶yAlӳW|(I.O 60ic^222086*9x(Xv;~iS? []!}NGxY9@-[jg MerY-aQ:D)VGu0mՂ@?H iNg!~Hjw)L ږߘyZQ""ƨZJvlB^"sPxu.T*yqdn(Wu>mYM,8o桾za+p,`XiWy?p]@MYZ15E|a8NecW" a2 M-MnniφV4 vft#%.)S.=;!E4@Fg3 ~&<+sno0߀  n0BMHsZ8α+ zőF!P X5&φ|:͐ʩCka@Hٹ2_%n uqX?2-sWmQ :,5s9]ɭi}xzgZO=MJ9H8e+YU""Oӳ40,6t64HS[ %w,{5j-WVqF4Bc8yrӬg!)Fri3hKߞ$pkƴXEh:l:}d^һ+˜6Um;F2+?;usܒBs/PS^Q=a6L==k2!Fk-3A|VHb.hPE<1(ݥZ݊ X~uix@! kK1%#k Ѱ#;,pQo9hݛf_Rm~Zgkg`^PWJT"@,_yOjTQz)**6 J֞AbS&'i&|6B:Ս$z]`|"Wl3[Ѻ3d^aR&\`^vN _iCnD&\ص` $g^=]?. ö́Bn1k\ ӜoѼ  P[ڍa 6K ])Xv86--m@V5`Z; Kx$$e8u@2p'Ӷ}݆O4RALs^ Mdmt>.tֆKSǞ1w{$**gjF'N6_|B`9/ ]5 abb.J欙-ў؆`iWǯM`Կ@ƿCN֓2x,.~A%HV~V)`'>\98[/ 0-0E2Fo^Ɣ&¦qŧP-߄^dfuzO.r@X`|57Ї}nM_TxYyC?FpNpEX2Han&ĎN^g}FAX1bq*#pSTN.QrnvS 'GϬN갇 w ah.UhSG5YbZ%L32'l׷ tULZm#I x폔ܬ437M߆S?m]RAa*Zؾ,=AQC!Bq=\1R.l5\YF!:m 5X SWqRm;%) Zޡ42jh0&jvS_Pvz`:jL$4Ƹ!A,Ŧj]CHIn@ p>ӫŵ0=yL _ 7C=˱%}E#HTҒbgl!*>u)nH拕 wcD~[VYk>Tޜa;tmyYH%ۿ̰^4&M|@t^L,u4ąv;a'RtԦUv`71u|5܃;b^?@~=@HfؖLqG4Vg vJӽ@C9j+B0EeXBٯ9[ٺI;&ȼ_˻\=Wb&2S*A2CoϓE3Kmۃ| U?ײmx۳T}ټP%f ]Md)%5]>^@fnqE]jBo@k"\ Rĝ{Ejݜ<=7,7q5m>6i:%:`e.uXeZR+ON`)\)rX]>3+8q/}ÝvqI,1ҡm"C-G pn:HE] br3ͱ߼}@oOn1Q 'V_ˬYw8DM>!:g ohe$R kLƟɐN!EZ I F\?Թqx"I=Uҿ ~V7N\ y&dPuo)&a!@'t {sRdJS* CL݀ڸdžh/k }/`XAV WeCl@[%#TdTy_9=a|I":E$n>%Nܐn46l-6kPf YtinwP}JsG#f{E%Nlf[~jf``(RsNlxݰGτՈF I~o 5$隳Kqj?۽"7M%Jp-vdUήu - JBN 0W'jbQUnA M<ݞ #ciw5,LݔgJzisxct8J[B*A%o79@֫]/#KEYlT|tCBLg8f_|XKH "T-2^1݃NrtnkZve{6ԟ[ߠC4s)p!N}}cPR*hZ-ph,;AS+l]yh|}jrs_ L1cRv#5-& QH)7ynz(N 谁M7ē^@R: Eh; v/^13 l(h}XĪ{hOͯQ ׫U-u8/<2f -U ,?iܴؗ1t*3b m x&&J`Xe[;'tqazk:ؒ$Im~T[yM(p6ÒcuLEFThjB?^=֔S&ud SBi}줗٬.G,7r"8ۏBx7:Ư-7G63.NЬ5c{sܾS>5l¹#OL2F28=M+e nm\%Axte$:vh!BvMBp{GCR;~|׫BhW' %Ӱ5 .LIw󈆔\HëV"r,ꏬyc`J(\; $Q J>+ M,ܺWiC[lI H?>Y ʺ:H erw%i=]M!>lTYwGq(傪ЇT;N"grHS)˵撬tS u{5FǚWH^#3d<٪ 鱞|g1j7V4Vաn%C?וRnk<(B ăxx Ń@3VMqqhJtxȭ1Jܢ3q K:,a>'񢜁U5DzQGY$*?Gmp[ı3Ak82KHu7i<3",>Iz>,t#<1tYlRVzHLZ`7yKj* *}57$'._vSw#e.f3VCDmohsEk^)B %YNjOճӪGSZDܧaE-S7nWga02Y_ʲCѫŖF2Y`W,\[2㨌]aXSQ/^*5<&]B''r d@RJwBc2,wT" EE+ j+%!jZ*2u@K;C7UԣRjtQdXбI`+ +e8(.L'^-~QbvҠO HZ'~sF.eڞ& */#2EHLtOQXUͼ+s*c2r7K!uMu`WuRz)30-E+"6Y~nW^7c{R888D2 vPBd-Xj Sԥ'EBkd?pρ5fCm<>]VqֿX?&[奈0~`+OWZ5wtu>IDbm tDv::.v^4QA3t\h‘ݎhjk:4TfL"7؃Gl;%{ZZoت}hHRd] /=!>3"y` ; )ܯ IO-@E3oAStۥ'{ـ4fPX FL@ˤy|nbL,M,jRR%{^XYKݭ(wr~[ZZ0HFRKKۭ E.t(,4< ZcAjfAa0 h0t 6N\ӛ&R|-tw&.] !o)q{9*{sŐy|x{Sg}\߫7&MF+5>填d )1u('nӮs ) o^K[d{8uᰀ;4s5,V&IZCd6_-: a !Ybǖ BhjCW*i(uiz$KPǚѧujlp@EKlW0| ek#lSD(4@̊‡IO~C YnSMj8ŭi* ͭ$x F!wF}j'Na#ZE8xZwk#F PD_IOZG7Eo*!5ƙ|ZBЉJ%Vsn~Yr|ЯukN3 e)^L8ǹ& ͻDn:cH-M4~L*ӄZg8Eh B\:˨ġEQ-. 3e(:s{GټxNk=22#lՇY!n3/:8('^'컯Am.)#-jKn#zW$pY Nr8Q?ڶ@^O$NM R5Eg34Q񍋙$˛0i`!hn1aFv\c=7,'zd}¡ >.gryơ-fnJbxJ-%^Q,G kN(\̏}N3&1$IM r V4ZNX 39V¥FSFϣ.Ꮾl> VyU[b=6  ca4\l<8P˃MsHo3&9b_-$8Yd<=%O!dF-SɲJюp^t@?МPKg[:>T+22_ӵ`\l>'MƾX5 W:;bqjNȸFF[{z@@ &Cd 9v2>lvrXpRvZ >a |RIk5D.SC[.Luӵ'>8R؏8ZV\y^8njS|pR|anueKdM\\zꜨcs*~)}^UE؅z q,*>^MѫlB.ܻIֱVxj9\-:֟>28;km:rQ`jX8!&Dy2~s~ \"duTdU; fڰH5mL'*'|YDIRt[qlbGNpim ]GTt7M }U]#*)ehn=I&ퟞv:jJVV('BՌt/VL'‘K"DNe;+Pi> >1Js 'Q忻=e64|x#!낂O`tULQ@7+*]R63ޔ(ߣ[hH}>*3^Rdы3+SIX`kÛHqA>lq2j"*I[0Z_Io*Gn ORe|smn4nsuK¶Lsu^ǛK8IׂJ7]r0xIhmu$~U}:"Y| tdO: 2:sx{`˯#0 TopqΨZ>IJA]hDYa)*,*̸1c#`YiAE<^K1Mo_ɋf%=fJe?j r){҂U!orԖ}breXժ}u|Nq|Bn3.}Ek ^1p}AzIWdpʑ "7.t;ޥ]'2W,Ce&1d3_'-ngPQʷM@łJ^` R!GQ9'E2WʣdEV !g?B2g_5`Zpd9F\\QFP ς wnHV;kAiΥ-%'%N*1([?)zW;j*iQ+}>0Iw؆f\6sjv~K⻽=%a&8D!%@?-Z;.@AyHx A)pf8jOQ*S/= 5Mk2od*Q@Ŧ%|r&z-SAU!?k9KxdtDE{c#պNFY>%0[[iA'Krj }ߑO=! %rㅿudI H⪳)fبXU-ZT~ $|6i *:cYF`5PO;Αu}W&{/Pߖ-o}W&G$c!%vsHF3IOZhj٧r'.RG)mKU3Ӝ1egҞ/kfAѡb8L<װ/ m X"zo$ó~KΤ tzsa<>q,tUh8虜D.; ?"xX J:6弅BTHi / }6ByI)=-TN1.uLV:Zء^gA`K6!;7>P~aFkao_0[-۷bc$~9N{to*,C_f%qȼU$ȕ7 wȡ-IKg n) gN;zT'Nδ,hÌ+ߝ4l/iR#oL7R]?& ו]j[챪ò3)v0b2gÑ7u״_=o]@V\%lƑAڣv_9E^ _n I+lh%x.|lWHICa4wdJe|E Fu_|Os'd` `[OqT$2iiČ&#rb@- U,nO8ErקfeNYgzl5}bnJ ^ Ӊ@GneUگhlfN*>n|z)(j{IUñOyKcJG (,Vٞ3Ar$-g{p{ =;:^Aan;4OXA+yٓTPɀ8R,5m'L WUdžCM(3͹'\U mwMehx3g#e&RlwY]SERjWw\z%i N܏Lڟ|1Fpun'-}4qBθFDlsD Ʊ6qa |>Q܁˵%KIY$W7aE mc7f^Nzâtcq1j!v|~.l&9@U||ܗc!qL Z [1=ŮT4TP!P-M)E6S1PR 0]R)Ux ,>)J{RڱL\#v,*WzZ:vX'Km,;?0#]vcK]f;]{ d$#]2>N tjB ~Z҈+Dܧٸs7$p9%~>2Vp*bO'[S%CUeDv]d>8IF+otͭ$@u3"1%=$\K 3RlY\!}c8#@v KĶM2ہyo^W%OaBArO-'^jta=j*L@CDF㌋uR)ֺx٦[6hCCah򳃷kr%NWW _]q,Ȝ2 ~Hx`#I1}mm+!Msmxn4D{ƁLIL1ne*yG&N3Y]E[$a'ga$<[^ )Y욢 'C[(f˯5@chHc ![d8. ,`vn)+~gOW܏ɇ& m?x N΃fh k"tĨ"ȗ *q_b 6vy=E}CmZS+)wT;o~j%ԧ z<5koU~&D Y0.i#62u J؈~M!v0^ o" /4# ˵amY."GD\*|vOdp2]IaA~lV19T.伣.$ U%ó`Ah:DyR'TjcrʄQjaN͓@n=pLpO zd6{oku$:ƶyZ}*Y[C0x bjSg`;e39J'[3$lɭ,lq3U0hpl8=rMQZQe -}ֳ>0sQK9k+>gx(yӝD4*~ֈX㑐^@zSL$I $m֬5a I<[jޱ1`!q)85DFM@)8aP %O}ml;u-#{G-{1l3*YȲ׽!0JI}Yf0їOx>Kɟc/a] s߶n0v!:ʡk?cә[zz:"=vHJW9S-z4dP}NP,'\fL]-3\*2ga-QH@I~ɥq'Ԝr,T0 ~l'w \,&px^v}#5(<<.{:$H2^j_o-\Pc67c"{C~15oG.!}\3EɯkPp#׺z4xA25~[|=wc3;}7 kscxGv;DO؛/>[?ZqղQƳ9Y 㯥WŮ޳ydQ5-sUi$ncݾN9pf+ V0ĶhlBjXF(@ 9=5qCRͩL9jo[ejq'k^*#DU$\R+@& tc'߈^:[od}L2nY{uK{ <ҩ[0@X ]oh"X1! ZuQdeq ?y-$]2P{u$ntCJGEaS]GN:2c&*V2%+?0:Jd>1XpM-g;Nfol0xMVt sa ?E[hυũ@4cؽ@ݦiXOvHK}wBo.piH~!)`ʰBCúŅ3qpIy2\@s*ɫM9hV>>ee3K#/\}9/ON/'91.WO'ož(ەˋ sV_84#Eо P^m-Y;E"Ve;V'O~X*x|-[qG&6-sGtqLFVYJ6xؘ ضt'xf K⤲J /z#W[(9zƊ Z::íIQ$t_{[/)e,_ xjpM}JF||ꋬ  "!E{h \0cViRp 6T؀5s-7l+rf#r^IDsQ9EBJ4‘nP͊Aǻ{tK{90xӒVjeLn9Ջ&t GJ }[^Ukͷ$cd p&W HDIYrdSl(~{*?:R+fɪVnVNfJ$ WDhT&[(2A:08DʿӏlyXaN|w|LV=VSkxy|ĴUTljDPrp$,NL|\H#TP .o悚 PD׽p\b6Qa!}`)HO_?R9DSQoi7g_Ehue5X XI&WV!khEuFsǛz G0\ceK'fWjaW>'RIroỸwVG-$%&=VU;.H?yiCxoHLuWRDGځ~p>=S"K6k[_ۋ}cbŔ?=hoIWn`Đv;q~ݥŻLaO̘ꑪehs[KwJ'Q Q{M/* ]=~hNikFKLv{W i y8m[{]~*|L937K/!Zr4 Sd PSGt{ [$f֟sb Z8JyuWh()>vu{\Ɣ6VWt0ZkRf-}$5d@y}IeX)D' p==PQ_;,B^em EP0k\[ ~L/[X{!gū Ɏ}wE@@^X׍I, p #Tx5”ZIsʬ@<)M;R= hpc7?Mg@e[0'+rɄ6)7@0(J'n<+@4PZtP6(p\m𬙹Cb1wH&jzv99b5 qMC7ae6:!*Hߩ7XڥLXGN6nذ}Nģo)B#1@6n *|%EQӂ),1T[nR 01}nHi֨QjDR0$؎x6gb&R&ԾqŇN tf[67/6SSQf Z7ޟo ӷMK"κJ fK Κ]ҕ]%\3gu-B({6r<>L bAi6؇ b^U7l玶k,<_{5 L_א;r)aq6ޱlKs"<5ד*YLjRr$zu.<14 &V"qLY8"[wS*Pnƺ%\vZly}U3ql}JQ3[}jc>OP=3 Gцw!MeP w!e((]W)T4ݗWL~hiyxLSHK6+)т+ oα,[1-G۷jxAhE_|ySސ!#\#'׃)@t2bBX*YzID]SK n!ޝy`N犰a),fj8K=Iemx?_Dj a\YI'"h&^%QȹUV] c[.V)a1f T'nR6Ra`ٲ5:|WɤnC./3+@#N!s֏B)c,GГ(k 7b#tOva< UV3}O{ jp\ӼJape#~kTrD=q@T뺫e-ad]GQfU@`ס)߭KvBMm4VwϽVFx3dT5<$_=c WKswr"7wW0L}OYx(OdIY~ڣ{=\"#;D/d\Α6; t|#t kL-mEZm)} ` PEҚ#ΊC! O}!|#ww6y+ilާY"*V&!i[6T.-MÐqҜBM{ޮí>/#ahmW{W1=|zC0@9^K?J/Ų[&RhwDk\嬨N/' zvh\E{i1k( B / YTFn$> q!0WjLXg_'Ʃ2>rU$AV!mbtP^x %u*0 3G\/ԇ#Z,HH Y[q[-GzfZ> It}* \[c k5j_yű'pro7 L= /H'f>KiY : B"*y`rnfGجEd[gxɟUyw׆S%!$bZҠgpAD%9?N2 x9ँGV&n@gwt#㭍X=&D?vn?'y,uAnSZfzڳTQ qb1v(ՋGzgVi˻L~,\n,cm0$1aC>Wf96ES#zrpAQ 4ZR'LHPd{g}!O.2p->Ra|S+$4 %Cjp^(@;6TQ%q״adN%LPEicm(i@{)? j5q"}#)c2nH(S8L5oiA3S@$V)9H6(OZ$ ^<8dm^j*$kQqC<ڊa֓0^/ hQn7Vkig:32V;nlmD cST5fju/Xl`8Q0ԢJtxwa?"&R?l!|/K'a,nb7T)7aCSޕ S)@3\б 2+^c ow@MD1Cb6̲@C@JJ* MBu \`0L>Ah/I0?1_m k BLC`;4 ^X TAmG):++b5EՐlLd*=D@&%f2vA#fY"B͂eК (Ʊo٬h9ݖYul`a U c`р~]qJuꃷQ.h4dABtY 05Z/:y)'@萸0E9LZq@/_al; F#Ն +=m[tmo~J`Pgk G'0VҶ bl>zt"T }C?<o\ VRbڰs^.1Ien89"{VE=yT0 @PP)ΛX :]6ؽ-p:^Ag2w~_^hy7գkZv |M11`8Bh =Őθ* 燐kgJξH~!?4v~ղWnPs >ouI3 6k##^s2:x Lܭq6J6Zbuʣ0R#W6J8k_I&<مPz__̫ S9?r`af&Nt>?K&r`"+p~x(v#NfAEJ%__s~b]fbW#Uc DmդaixG1i:/hDm A*|nv(H+"TeMС4)w0`SBcL(YV#!i4)AύqGa0 B&:-4fW"I( bXj1\2[1/ˆڲ,LC ?!ypͰwV)G bD}N+Oi?$%o^Y/fYi`Ei@cBaopz'Hyɚʂ+ s$7  xN >rSOyʍw6'l/44>Sy)dr Js{e?6 ()"e54@ll)аVG{Y}ȁ!jR9~SR 6Ͻ@$!O|PV"u/2 @q$yUQ#R)q ?adtV.`05 χޠ7st-;DT!7)-{A+HyIV-QrsE!ݻpc(mf[0=Q!!u )wr! f+lK+\[MGJ٨?:T9Lp;\[q$xKycÎX%(´`ySsB(rH5-%YY4?jq Kw QX| f@I$ Z,obn}p܈7~h`!XݿK֥<-S. oux/gl\UFݲXwwV% M,%K!xJ%F<./Tt|u^ᐑ+tK$_8YcHPu$yY"7i*V;@>M`pJ.@FJ< ͑aɰLU,/Le+*ꪡg闤~[$|w^>N^"pƶ+*)fu>oQ*Y[-5X;B܈/Z/yl<"~ uȏWj "sePNKOϞF^ zC!![W͸zkj;R"3RΌ\\ 0"N+49%"cqB (K H"|w;dhOhR])D}8h!j2Soag1W]U`_B*^%J fyk=NfJ*eЍ[9d3nd uK"[Y9 zJ#q$CFUl8g~T|TEnB(`Za`Dư2ڗSU K:a~ JzrT-~S}偲%VWbĘFEf8#Q'A4#߽^c8dnm ѕhW!7wɏgmj IUѳN,[֘5;)D(Su.[ϢB,e6X8?e"-jߔGDlR_="VгRyBʲ΄c8ڮoy^b.$i !T^땲6!u͆^酖op>,c4 >ﾫ'n.d#sbw4*w, <X3XeĚnCuyh-!6`+ !kOVve=p$.7+ Gʎ ClXw_N:)CiX AЬB_l<2[yf xT|:wSAWY7fX 0D4̾;Gjꘛ?~;@;UyG-pJ7dwpsdzv8~~Wn FqXLlWk%IYLlJOu ~dּ6v=r.؉K8)FS (0>b0NUPOlB-g00qlλD ) MiM6Z@%>+ߍ)E7/93:AMk  %y~LTȦͯo٪`v)iggܡybv,U]ܖaZH ҩTQ?өz⑁=Q˰;(lvVfr%Ze=1Jt`i1.7A95f]`H6vӎ[J>GRsOYw[0pJ|[=W̥jI!|E=Qy]#a haI  W-@ȶPJ~=|=O(*E{coK8z+HUvB_H:r'42OD8 5W{z$V̎]ydWJOzAdJE5E6ပIQD:)ǙQB:G}Wk6M,0!.nz7\A7Cj-=8Yhpػyjx&-E,E;1è9љ'o~\K9{hZ9X@?x iZ BQ/mAY~ }ς 89!#ʩCZ|w[ż|߳%oY:D6] 4WzG9]APZ (o O<]|=YkI >E?HAJb?&zIeJB{PO>Kz#}l]-fՀ \^t@/%-q%bLE('YF|_lBmME_Ioa6 :]> 7Q7VF-;gẕu˙ g3=dNX`s] e?@+.~iB-f Bw 8?8lO hq8GuvK(vTل sǞgɕ;+s熑LJBnB!ȔE7ܢ9$^?F3R4U8֒DTWM|t݀#mtY0[fl٪9je8.D,\^.aMZ7R;ȁ>0Un$d M>uˡ1d-1YQ-OO.SPa{kG^3n4.$60ogF@ =gs,4Hm]g}yw܀/|? u%ն%]5Otw꘧"_8BdɏiURJkb,r[0*3ԮL%IX#=H#V vH`i,~H7>epAG,_NᴛלY2A.&y)Ӓ\J@dRޙ|dۂA#3ۓ Zp_,j`J )|>)$YT%^)O%e ^ʧ-OI pJlIqJF(s_ x6$K+@-I:y^ |++cees4ˑYGк.X޼Jgj2IAiZXHUыȨ9`W:Kmζ U Lid2Bj9RG߆ĎP FFK X/UQ.F6k;?I`.^MYN(R. {q%Xl諙gtG/fdC6S),~r.8"jrv7*U:3-{?NQ_X%VDyz@U"a(]Y4b)tQ+yԐKr!K) ],ފ$wQz! Ђj- C}]RlՕ%.gEt*'w(X%v|5͕>CSQW̉up0WqĪʠjȘ=,8EΘ)[ l+[m~pHz~+V1F8Sbm魂3z[\sR*VLQzJ^CJqo6!6㕱_" P[RXf{g>@5''[dWlg}oȁdG bI'w󬣘-XL{d&IqA*t]p@tMUM+6z6S/i,LSXEbE]``mug+]FwZPƚ .қtщ7?r>=q!5ه6w#ok#eNZ`:-l0Z:j3'6FG5KnM"cȿy<8 QŢ_"#d=Aot>r-D}гNR;G5laC:z1&:qPcgZ]30/Hj LU#MrD4Ð1N=3M'uN^ӊdIJqbr&33(x֛!<{+|iFt)~VRrF$syÝ66@ʙjRA:ozՍP3}?A*U!f[rVdӄXpbw*A#={PO)wQYIDڔ\oаȀ`W< 7Hbȕ2&9ps;Zk(߻YF|,T\1&q[ &uf 6[sli0<꽟*4c-\I&z/1qIttkS'樉:N!}kQ.HFP_}{z\,RaBK-uB\3mh1ΡUT+dn\[ p$٤O.+adKb[FΪ,L=Rh^_\BԞȃ{ ZKK-ތ_+w <\X\wBٲ "@# @ ȭȫ?|}cktlNN@wxAΊƕ >(0bUj7(PY#F&FMɹ3_$lѝj^_LtӔL SM/ 㻿nCFCEX7ʞE>U @9I+jszplH"6cc/y.e+O] [/0=4$AMMk脣ľeC|)1 #Wp4 n|&[#FU۰xJ'EA^q9Grkc$gQW$/}ݵ@&?c6ːA~_xy# W}#;n ?VKH }TF؛=z8o8XBolB1*vlnҀϹu^# 4rF9HϨҠ4xE͔/~' >&STWV*ŁBOb۠t~4!2C/yW{tNŢJm #48*o.f I}5FrԆk݀egW+SIH (R~.dR˟'}a}2z]4Os̖vr'l62jYyo(o(ЩYku'%f=7K%k6up/-j]- w+k3Oi$w:Ex ZmC1־N)$Q0y1i~w ,pkJ}6 7bIrK/"4prTx&TֳD< $%Ӊ@q_FgY(xA:&Q.nPZ 5[ 7å/5uD  BP%7WxiSۊ=* WFVϷ(⫢ntcPf7p}CvåHRkn0`VЄd*A XrSW]D&Y 8փ/\ǤP4qނ᥈^dTO|糦mׄ?5u_Ap ](M ;"w{_4}X)mI*H=:aQEGG,S2+69.yuemMSd\;e:aEeEysR s'һ-U <3==v$PTU:lՓ O/TP_Sp]~y$ @Mlڶ@Ц hZ ՉfP"PzTOܣ3@JjTuU' 8![>;F-KS{&P MIIBe}>T1ޖ;BXT.jݮR;jwv#;:i));W"Wt\#/#@.kзmA4@dMDDyg.0{}Am3q8@mDN0&W5{#P1DQ f?>6W/7uT%O_`+x`-~4“X؀3&EC\x =P3…b' Q_R UlicS8FuV۶Dm.r\$O9< \ra1ohH@+˃=aϡQ2LK 2hA?9'Rclyk2fxh |Q1GVg6BS0ݫE-1}IR? QV]מWQlX!_ox"\%8.gg:jwv9G}aAC_Fª(n! ޟH"ʶb[ƪ+NkE)i[GԎ0aX{t^Bd:̨#Pٲv䃗`uSZcc d 45h4}*" t3jOxй#A U}%UXsM8epH૓gw'7;5RUߟLkgBY  E#[kgT VYX_V "C;bbb@x&횖a@ݶ jNtTz8|e5G'sFڼrO"x(RV.C:y/ZYp=u\k˶ûBk+x%l @>;ik2\g'+oqe rݻ>/8ol3իƗT*ñac]^- ;AW[jχHjهHgS$2Kuռ[_OXXPئ3|w[5RJoDCVZ.mS}q~G@=Aמ4'2qM\k~Dxa(x[7yͦZb$[dc!,ٹt=F qn[F:dU+T6CZV'_E }|$TpK9~}\ޘg۞/T`4/r$)-D!؀zl"&}Un(4lzR!̵mbzaY@FޠZ/CY@-\0iǀf$PA1'[U~X/V:mC7nXn"onE3qcԃ^-,)ŠQ+Jag J#ٞd L擴7I̟.m5)Y[HzTrY߾CJ2Vٴ⥀7`̧`z/h:+?_$p VLj-=xm,p!?}4Ɨ)8Ⱥޝފ5kP[} xܜ PMs R3SgJTT3бF"(y=C}-ӓ:tLD&J:.>S n ?Mp 8Iqy"6#jUbj>(>~}Z?JR:4﷠)3g[wOެuߣEhBQwsKZ>8֤&:Msڭ:gImx\,3pX+ 3WXˮ}Ã={0wsX`Rc=/.O;*L῿=0CQ7)@v80&L9@f@qqQWТ1!8.GV7t?ƫB C3"˗ʰ@`efŁw 3e}|CK-#) Ϧ^fVLz%ب:[]P.A9[鄣.!f6cnpi(LHye !8`|e-[ӨJF4z׀9l_(3|J3 ]ST֐CNpXp~^Mg%l${k6CpېNh*c15HOa׫o / \%ӿEvGk 4ꩨV=Ƒj5  !tsC9jWq8'Œl*% Ae @BHJ S6? pN\b]~'m,}rn-'y`Ē:^|&ʊV$N$ٲ"3\Fny a]S xgF@C 'R=pM8Aڇ x!8s|^kEk7SCm KGsUc*1iԗ)IE?k"-@Wug2 <ܰ8M""m}^Ta"uP6Q?mFM]wX_}76~O̅i\AumdV4O̙ $?qhuJck '"d98K\Rʣ\ý n虎.Sϐ[I m*ƞYTxiK* 0}ˈ[f'ZOT/5 WrUs-2-}'w5cq\jѡ7-f1HIph "% ט y}5[)H486IV"^|S/$Bl99WϬH\ĄO } tD%1ze@Ͽٿk9O?2@ZklHFf/s+ᷥ 2]5&idgOތzѮ1"ܲĸoնhj$UBY;w=wZIbyD(npwZ`O߲f)-!*tv9൫$vN^1{Tzzz*5J[*-07 J-`v;ʿ;oa*{=_̒M{@|~9ԏTM=v DɟF=z"BRdZa ID|P=b@U7 T}^(yvϷ,'-#!3 d$d.\`q9:} CZ]X*ϿH$JTy%oAo7ʘ ,c)Ze1^@@am%7z<`KTJI h`93[/? *Z <%޼d,`EV(ӿZqE⟛gȈ j>(߸@'UetrEhE 2I+o}>QHN~cx1_䦆7ޜ,;и N8ZbjB[l<³Jpd%R}@?ZX$QT:?T=z˝rkfLK3"pIw5W+҅=oek –.bRםyf.ȢIb dl[Qʋ,M e$ Az'kqk2i+'hHOHz.d%H[ _ :%:vZ'qn2΋S}I D[=IgտŊזj"jIe^;ATbc/nA `W̳ 4nCrLBT#TZXڅ#Ddt~4Hz6d]wu9!~\P V.RAYyݔQZ^[Fnz!cn>Qdwγkvޖ 脍rNJjlڠd3~KtvG37s}Rn}'(".;ޢHN xt. a˘)~Jdn`ij1-Z0HCGilpL ^h+̯$P\}?qiê˛ï)cf(Kiظb\FϫϝVSyל 9Ta*J겋UJ0zAGGSNε~3N YS񾀏}]tt;0jm> Slk~`VqRPH,OQ׭NrP3/,u 2敌#{6v|mڐ,6֓Wf>Ҽ)J',%E)$U, jw+V+hs9&tq:/y_ 1'Xn]osO}o{yWʰL`ĥyԻmZ3v4 n~ZҞrvZ=i>0B[4MzZzlx.H͢joxNw|H5{GfR4Ge:&Y)=Pv22׶)eWQpppb>tzhM%νҫhڟ+ d ;w {ih~$5UNN007sr=9RVp ^0z_5f>Ě;ZiYTWj@hYuĖFEBZ]H3| tP=!imM:B=(*֬`a5^v~N? it#ѿ&-{J&Z5DPz3%Yrcx>h, |`&t33Ms+S ksM78}РK҅?ɺ_qpw >yCO=b7crѦ8ܨBR9(㯩":C(Si~-ơ~\#Gі~I|7xaS=m/ܻ'y-+6 d~.we|9&Q- JĤCr -1+"T%=G #c+¤18KJ0)5lG3 :omRpyO\NݗX $9 B$ѭnʸ!ϧY_?7yD˟ib']zlSnر6g>-Fi QRtAnA R؅ٿD/pgv+ z$I-Jy)OE_C]_ِ[Q~Qm}6_\[z#RmW$ %`dؗHLxaFOU-4u1G$.osfg9Dãw"܁d-ѦyL3 !Rb]Q+ʥ.S8;Mf۩-bT7ét:e63 &ԄԍYW8, i]H2 :Ah$8\ꍲihD)urtͩ$vT]\[eImb~˄[p jpF[+vOo⪁odmrEU^|م >bU 6Pi+o p[`24ϷW^Yհ,َ&?|&(pr%ЋBT"bv\hWPr?q:ehbI떈MkR=,3rԹ^}7m'BTE"k4o~•g7vWztaҥwJF[e cAD#)-;Ӭ9Anmx] wDe3ÂYfiߛ{ >+g%bwbrOr}v&lۥޛ|IMg 8{)ҳ}%w_"GD}@S.=,#<4Y*R3RsJ#a;8]w`CBH9G=[;BѼȩFzI~EQ5YyLtFnEXVrO7 TlIQ'F,[)U!~<=x\{k`X>~cysEf}yHcq3?3I0q _xkHwr\ 7DPE60Թd²5Μ#2kսcH7_bsWp?P-\a*`i!Qrm^ÊIg̏5ፒ@#Uv@'$0SPؽd= zHLdTLBƫ4r/Eɝr T~py|'쫹s|*7R|R5袹H1l$]]0O$#5JB-GքcC#i?+PME7ۃORS""Nي}eDPQq 3ZH|uuli~>G +F5Ienӌ -67M. No|?wziW<Ͼ#qw& p^{ `9 +Zi8$9jjx(,MFW=>@Ʃm[EFq[rcC)Ժj8 Y)7einBQE4TObڴ^vE>/i%+8D[,AWe֔F KM>UAL6pʼϐBg3}Vp!nU2Ep>xo#˚e?wEhitZQaBi$hwZrhDl` 7V;u:"?mUͮK9t64{7եޮEZ1Sݸ7  n΁wv_ 0~c:7d6G!>ɾ)yMa֞u6ڞxǢQzt,Tc۔8'4@uIHKѓ2nv]B0KD]һ?itGyQ KTLqt razQҗc9ÒE:';d@^" d:UՌFj=/,bI5/mޥdwA⇏HWQӛ2j*DOJj9L^R1KΌ@op?Bw% ]n,?wMG& Fj_j0$Ƨ>S~> ՜';rFyX#_kVkPAXiS1t>eǞ4n ۱PyR\ #G&acg?"p>@"B#TXQ+Dh] ®zXV\U HMcMM]J߼` §DHĒACaU%0{ڷ!kInZ 8. VAlߋnrV^]D~X]TڪAYڣR̋A-!n?6~x~#m6%tEUg+I5=N_?f&jm:u3g:pâ.q\\l')LZYPmj?K*)#:8CA Pģ~f`8s9_c,^DhaAb>^ybIJ@/t7mQٳs V{_;M0t/S}'=kL Z:/:|71_:X =%Β_r!]QhrrN,hnSvB\iǮx{%P^UQY8jFDM m{c/DOsNE %$HIO(b Y1iu)Eo%M{OR7B0ED) |hg)FoHBB8 BaRB{}NS>-6 *3\ 0}ryGRsoQZX6xVbrwccy+cA]OS`14Febof׀[V11|ҡBB2Gw^ӣ]!#. ͋ M?DΠrV2_6,,& RFwIq pzY]tsTVzފzn*QɽkOCgx 2$/ǒ v+1lc;gT(|*Y࣡!7 18M6)8P A`E-21 gKSyK, ]摏ڴ$3<&J x4H̏7 :z/A0ǭ(ĵ GjHB_ /qmڹfF d@ XVFu_B'WeQ#B[QJqV!G#Ȕg=:-s)5 dT5hw>زIwv~ޒ7 A9nDF9x"gO25L)3>u Oq 2˛ʅpRf2F[xne$ ?{kLZ=#MYfFX:L 2ӓ}H.onJ˫^4aҸג\a>)َ)9%LB;ןY$|%q3ƙVٛlKL 4֓[tpzӀߊ7q[z•(4 W4C3OQ9"_l幅K!d !N4= >Ne0}n&xѲr찚cԆ:7L.B?x᯹ ˵86 Rc$:G2#/Xnt>X#K׏H:{5-t  S%a'ĝiz-Oچ}6<ȽPӯD:.hG|Ɵ/ro ~ =Z$)On=$Qc~4Hт@W\SJwH" x'V" KZn?J/1-( D0 ;R"ΊsگRErJ>0;TTgtbr,0e63QiTwf\1|=Q՜X\'QN8~$6[?Stϡ YZ