libselinux-static-2.9-5.el8 >  A _0ZU]uJȾQ-dڏ^1O8ȼ25f ymm5Q"e) rb[IYT0_ZAhhE 4GEȰ $m&".3s}vw[GEyYi&,Acb4c9ae8b28cb08dda7bad1b034a9b51948881c9f98432868203d918719cfd4ac7ba2c111a6053bdf3a9b08cc315b98b7e3fd495⌉_0ZU]Dh _GNw#:.Dgᷓtnh!Ȼ"0}cVUoG1~ot~[leqxJcXS>1 vO|"T= 2Zxt؂ ^ز8 Eyظ @vĕEQ&Lvi% TlY  qfO^GFp2mXhU\A Wd|  l'HEx0UM+le{f ge/<hк3~kz!LU4 %FgtXEwiqF t4* / j_yX6q _J?I)aL`)8Kbyp?XuzϰN}x08f%_ڭoA,煀naಊ |yr8< gkY{|U?^Qx"ϖsPrS3%zeYǼb7n %^ >p9Y?Yd  E MS\` b d h    (8K9 K:jKGWHWIWXWYW\W]W^WbWdYeY"fY%lY'tY@uYDvYHY\Y`YfYClibselinux-static2.95.el8Static libraries used to build SELinuxThe libselinux-static package contains the static libraries needed for developing SELinux applications._/caarch64-05.mbox.centos.org CentOSCentOSPublic DomainCentOS Buildsys Unspecifiedhttps://github.com/SELinuxProject/selinux/wikilinuxaarch64 _/`80fd9cc10874afbf0b21ae9d42ed7dec333a6ffa5d44429812a9ea98f80efd51rootrootlibselinux-2.9-5.el8.src.rpmlibselinux-staticlibselinux-static(aarch-64)    libselinux-devel(aarch-64)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)2.9-5.el83.0.4-14.6.0-14.0-15.2-14.14.3_@_l@]X]@\@[@[ā@[ @[,[@[Zz@ZK@ZZZI@Z@Z}@Zz@Zu@ZTZOhZfY@Y˒Y(@YJYV@Y@Y|xY{'@Yx@Y.X-Xg@X@X @XN@X@XXx@Xv@XJX43@WH@W9W@Wq@Wm Wk@W,@W'A@W#LW@VяVIVɦV=@VVii@V@V UU@U4@Ua@UQ@U8U6;UTS@S@SSShShSXS 4@S@R@RUR&RʚRkR%R@RMUM@M@M@M@MlMQ0@MGM5ML@L-@L@L*@LLq@LN@LF@L$@KKKrK@KKqK}+KTM@KA@K@JJJJG@JG@JG@JjJS8JS8JB@J@JMIܑI@IԨIbI̿I@IV@III@I@I2I@IcGIcGIcGIG@IG@IBR@I1.I!\I!\I-HHHe@He@He@He@H@HHH@Ht@HsVHgy@H^>H^>H-w@H!H @H@G@GG#GF@G@GGƢ@GƢ@G­G@GGD@G@G@G@G,@G,@G@GG@GZ@GZ@GeGeG|@G|@GO@GO@G<4G<4G0W@G'@FF@FIFFFFF&@FF@FvFFS@FF@FF]F@FtFFzh@Fw@Fm9@F` @F; @F-@F,F@F@FF*FF @F @FoE@EE@E4@EE?Eɿ@EEEEElEx@E&E=E=E@Ex@EvEnEYEK/@E>@E4EE EgEgEDfDDDDq@D@DB@DB@DB@DB@D{DDX@D4D4D4DD@D@D~D~D|3DvDu@Dr@Dr@DlaDk@DiD`@D_2D_2DX@DWID?D;@D'Dj@C@CCC-Cǖ@Cǖ@C[CCC8@C@CC @CCqC @CCCC@CBC@C@C|pC|pC{@CyCp@Cp@CoACkM@CiCf@C_oC_oC^@C^@CX@CWCS@COCFc@CFc@CECECBnCA@C;@C:C*C&@C&@C%mCC@CC C a@C a@C&B=BۙB@B@Br!Br!Br!Bn-@BgB] B] BZfBS@BQ,@BIC@BAZ@B9q@B9q@B06B-B$Y@B#BB@B@B LB LBBAA)@A@A@AA@A@A@AyAҜ@AJA@A`A`AA@AA@Ak@AAA@AvA@AAoA]FA]FAQi@AN@AI@AF@AF@AA@A>@A>@A7 @A7 @A5A4h@A3A3A/"@A-A+-A(A$@A!@A A A@A@@@q@7@@@@6@@@A@)@@@@@@@@@~y@@~y@@~y@@}'@s@@s@@s@@l@@ia@@b@b@b@O@@O@@Dw@@9@@,@@ @/@@???E@?E@?٭???q@??@?@?@?}d?z?a@?M?D@>S@Vit Mojzis - 2.9-5Vit Mojzis - 2.9-4Vit Mojzis - 2.9-3Petr Lautrbach - 2.9-2.1Petr Lautrbach - 2.9-1Petr Lautrbach - 2.8-6Petr Lautrbach - 2.8-5Petr Lautrbach - 2.8-4Petr Lautrbach - 2.8-3Petr Lautrbach - 2.8-2Petr Lautrbach - 2.8-1Petr Lautrbach - 2.8-0.rc3.1Petr Lautrbach - 2.8-0.rc2.1Petr Lautrbach - 2.8-0.rc1.1Petr Lautrbach - 2.7-14Petr Lautrbach - 2.7-13Petr Lautrbach - 2.7-12Igor Gnatenko - 2.7-11Fedora Release Engineering - 2.7-10Igor Gnatenko - 2.7-9Iryna Shcherbina - 2.7-8Mamoru TASAKA - 2.7-7Petr Lautrbach - 2.7-6Petr Lautrbach - 2.7-5Petr Šabata - 2.7-4Zbigniew Jędrzejewski-Szmek - 2.7-3Zbigniew Jędrzejewski-Szmek - 2.7-2Petr Lautrbach - 2.7-1Fedora Release Engineering - 2.6-10Florian Weimer - 2.6-9Petr Lautrbach - 2.6-8Fedora Release Engineering - 2.6-7Petr Lautrbach - 2.6-6Petr Lautrbach - 2.6-5Petr Lautrbach - 2.6-4Petr Lautrbach - 2.6-3Petr Lautrbach - 2.6-2Petr Lautrbach - 2.6-1Fedora Release Engineering - 2.5-18Stephen Gallagher - 2.5-17Vít Ondruch - 2.5-16Petr Lautrbach - 2.5-15Charalampos Stratakis - 2.5-14Petr Lautrbach - 2.5-13Petr Lautrbach 2.5-12Petr Lautrbach 2.5-11Fedora Release Engineering - 2.5-10Petr Lautrbach - 2.5-9Petr Lautrbach - 2.5-8Petr Lautrbach - 2.5-7Petr Lautrbach - 2.5-6Petr Lautrbach - 2.5-5Petr Lautrbach - 2.5-4Petr Lautrbach - 2.5-3Petr Lautrbach 2.5-2Petr Lautrbach 2.5-1Petr Lautrbach 2.5-0.1.rc1Fedora Release Engineering - 2.4-8Vít Ondruch - 2.4-7Petr Lautrbach - 2.4-6Robert Kuska - 2.4-5Petr Lautrbach 2.4-4Petr Lautrbach 2.4-3Adam Jackson 2.4-2Petr Lautrbach 2.4-1.1Fedora Release Engineering - 2.3-11Petr Lautrbach 2.3-10Petr Lautrbach 2.3-9Petr Lautrbach 2.3-8Than Ngo - 2.3-7Vít Ondruch - 2.3-6Miroslav Grepl - 2.3-5Fedora Release Engineering - 2.3-4Fedora Release Engineering - 2.3-3Kalev Lember - 2.3-2Dan Walsh - 2.3-1Miroslav Grepl - 2.2.2-8Vít Ondruch - 2.2.2-7Dan Walsh - 2.2.2-6Dan Walsh - 2.2.2-5Dan Walsh - 2.2.2-4Dan Walsh - 2.2.2-3Dan Walsh - 2.2.2-2Dan Walsh - 2.2.2-1Adam Williamson - 2.2.1-6Dan Walsh - 2.2.1-5Dan Walsh - 2.2.1-4Dan Walsh - 2.2.1-3Dan Walsh - 2.2.1-2Dan Walsh - 2.2.1-1Dan Walsh - 2.2-1Dan Walsh - 2.1.13-21Dan Walsh - 2.1.13-20Dan Walsh - 2.1.13-19Dan Walsh - 2.1.13-17Fedora Release Engineering - 2.1.13-17Dan Walsh - 2.1.13-16Dan Walsh - 2.1.13-15Dan Walsh - 2.1.13-14Dan Walsh - 2.1.13-13Dan Walsh - 2.1.13-12Dan Walsh - 2.1.13-11Dan Walsh - 2.1.13-10Dan Walsh - 2.1.13-9Dan Walsh - 2.1.13-8Dan Walsh - 2.1.13-7Dan Walsh - 2.1.13-6Dan Walsh - 2.1.13-5Dan Walsh - 2.1.13-4Dan Walsh - 2.1.13-3Dan Walsh - 2.1.13-2Dan Walsh - 2.1.13-1Dan Walsh - 2.1.12-20Dan Walsh - 2.1.12-19Dan Walsh - 2.1.12-18Dan Walsh - 2.1.12-17Dan Walsh - 2.1.12-16Dan Walsh - 2.1.12-15Dan Walsh - 2.1.12-14Dan Walsh - 2.1.12-13Dan Walsh - 2.1.12-12Dan Walsh - 2.1.12-11Dan Walsh - 2.1.12-10Dan Walsh - 2.1.12-9Dan Walsh - 2.1.12-8Dan Walsh - 2.1.12-7Dan Walsh - 2.1.12-6Dan Walsh - 2.1.12-5Dan Walsh - 2.1.12-4Dan Walsh - 2.1.12-3Dan Walsh - 2.1.12-2Dan Walsh - 2.1.12-1David Malcolm - 2.1.11-6David Malcolm - 2.1.11-5Fedora Release Engineering - 2.1.11-4Dan Walsh - 2.1.11-3Dan Walsh - 2.1.11-2Dan Walsh - 2.1.11-1Dan Walsh - 2.1.10-5Dan Walsh - 2.1.10-4Dan Walsh - 2.1.10-3Dan Walsh - 2.1.10-2Dan Walsh - 2.1.10-1Dan Walsh - 2.1.9-9Dan Walsh - 2.1.9-8Dan Walsh - 2.1.9-7Kay Sievers - 2.1.9-6Dan Walsh - 2.1.9-5Harald Hoyer 2.1.9-4Dan Walsh - 2.1.9-3Dan Walsh - 2.1.9-2Dan Walsh - 2.1.9-1Dan Walsh - 2.1.8-5Dan Walsh - 2.1.8-4Dan Walsh - 2.1.8-2Dan Walsh - 2.1.8-1Dan Walsh - 2.1.7-2Dan Walsh - 2.1.7-1Dan Walsh - 2.1.6-4Dan Walsh - 2.1.6-3Dan Walsh - 2.1.6-2Dan Walsh - 2.1.6-1Dan Walsh - 2.1.5-5Ville Skyttä - 2.1.5-4Dan Walsh - 2.1.5-3Dan Walsh - 2.1.5-2Dan Walsh - 2.1.5-1Dan Walsh - 2.1.4-2Dan Walsh - 2.1.4-1Dan Walsh - 2.1.0-1Dan Walsh - 2.0.102-6Dan Walsh - 2.0.102-5Dan Walsh - 2.0.102-4Dan Walsh - 2.0.102-3Dan Walsh - 2.0.102-2Dan Walsh - 2.0.102-1Dan Walsh - 2.0.101-1Dan Walsh - 2.0.99-5Dan Walsh - 2.0.99-4Dan Walsh - 2.0.99-3Dan Walsh - 2.0.99-2Dan Walsh - 2.0.99-1Fedora Release Engineering Dan Walsh - 2.0.98-3Dan Walsh - 2.0.98-2Dan Walsh - 2.0.98-1Dan Walsh - 2.0.97-1Dan Walsh - 2.0.96-9Dan Walsh - 2.0.96-8jkeating - 2.0.96-7Adam Tkac - 2.0.96-6Dan Walsh - 2.0.96-5Dan Walsh - 2.0.96-4David Malcolm - 2.0.96-3Dan Walsh - 2.0.96-2Dan Walsh - 2.0.96-1Dan Walsh - 2.0.94-1Dan Walsh - 2.0.93-1Dan Walsh - 2.0.92-1Dan Walsh - 2.0.91-1Dan Walsh - 2.0.90-5Dan Walsh - 2.0.90-4Dan Walsh - 2.0.90-3Dan Walsh - 2.0.90-2Dan Walsh - 2.0.90-1Dan Walsh - 2.0.89-2Dan Walsh - 2.0.89-1Dan Walsh - 2.0.88-1Dan Walsh - 2.0.87-1Dan Walsh - 2.0.86-2Dan Walsh - 2.0.86-1Fedora Release Engineering - 2.0.85-2Dan Walsh - 2.0.85-1Dan Walsh - 2.0.84-1Dan Walsh - 2.0.82-2Dan Walsh - 2.0.82-1Dan Walsh - 2.0.81-1Dan Walsh - 2.0.80-1Dan Walsh - 2.0.79-6Dan Walsh - 2.0.79-5Dan Walsh - 2.0.79-4Dan Walsh - 2.0.79-3Dan Walsh - 2.0.79-1Dan Walsh - 2.0.78-5Dan Walsh - 2.0.78-4Dan Walsh - 2.0.78-3Dan Walsh - 2.0.78-2Dan Walsh - 2.0.78-1Fedora Release Engineering - 2.0.77-6Dan Walsh - 2.0.77-5Dan Walsh - 2.0.77-3Dan Walsh - 2.0.77-2Dan Walsh - 2.0.77-1Dan Walsh - 2.0.76-6Dan Walsh l - 2.0.76-5Dan Walsh - 2.0.76-4Ignacio Vazquez-Abrams - 2.0.76-2Dan Walsh - 2.0.76-1Dan Walsh - 2.0.75-2Dan Walsh - 2.0.75-1Dan Walsh - 2.0.73-1Dan Walsh - 2.0.71-6Dan Walsh - 2.0.71-5Dan Walsh - 2.0.71-4Dan Walsh - 2.0.71-3Dan Walsh - 2.0.71-2Dan Walsh - 2.0.71-1Dan Walsh - 2.0.70-1Dan Walsh - 2.0.69-2Dan Walsh - 2.0.69-1Dan Walsh - 2.0.67-4Dan Walsh - 2.0.67-3Dan Walsh - 2.0.67-2Dan Walsh - 2.0.67-1Dan Walsh - 2.0.65-1Dan Walsh - 2.0.64-3Dan Walsh - 2.0.64-2Dan Walsh - 2.0.64-1Dan Walsh - 2.0.61-4Dan Walsh - 2.0.61-3Dan Walsh - 2.0.61-2Dan Walsh - 2.0.61-1Dan Walsh - 2.0.60-1Dan Walsh - 2.0.59-2Dan Walsh - 2.0.59-1Dan Walsh - 2.0.58-1Dan Walsh - 2.0.57-2Dan Walsh - 2.0.57-1Dan Walsh - 2.0.56-1Dan Walsh - 2.0.55-1Dan Walsh - 2.0.53-1Dan Walsh - 2.0.52-1Dan Walsh - 2.0.50-1Dan Walsh - 2.0.49-2Dan Walsh - 2.0.49-1Dan Walsh - 2.0.48-1Dan Walsh - 2.0.47-4Adel Gadllah - 2.0.47-3Dan Walsh - 2.0.47-2Dan Walsh - 2.0.47-1Dan Walsh - 2.0.46-6Dan Walsh - 2.0.46-5Dan Walsh - 2.0.46-4Dan Walsh - 2.0.46-3Dan Walsh - 2.0.46-2Dan Walsh - 2.0.46-1Dan Walsh - 2.0.45-1Dan Walsh - 2.0.43-1Dan Walsh - 2.0.42-1Dan Walsh - 2.0.40-1Dan Walsh - 2.0.37-1Dan Walsh - 2.0.36-1Dan Walsh - 2.0.35-2Dan Walsh - 2.0.35-1Dan Walsh - 2.0.34-3Dan Walsh - 2.0.34-2Dan Walsh - 2.0.34-1Dan Walsh - 2.0.33-2Dan Walsh - 2.0.33-1Dan Walsh - 2.0.31-4Dan Walsh - 2.0.31-3Dan Walsh - 2.0.31-2Dan Walsh - 2.0.30-2Dan Walsh - 2.0.30-1Dan Walsh - 2.0.29-1Dan Walsh - 2.0.24-3Dan Walsh - 2.0.24-2Dan Walsh - 2.0.24-1Dan Walsh - 2.0.23-3Dan Walsh - 2.0.23-2Dan Walsh - 2.0.23-1Dan Walsh - 2.0.22-1Dan Walsh - 2.0.21-2Dan Walsh - 2.0.21-1Dan Walsh - 2.0.18-1Dan Walsh - 2.0.16-1Dan Walsh - 2.0.14-1Dan Walsh - 2.0.13-2Dan Walsh - 2.0.13-1Dan Walsh - 2.0.12-2Dan Walsh - 2.0.12-1Dan Walsh - 2.0.11-1Dan Walsh - 2.0.9-2Dan Walsh - 2.0.9-1Dan Walsh - 2.0.8-1Dan Walsh - 2.0.7-2Dan Walsh - 2.0.7-1Dan Walsh - 2.0.5-2Dan Walsh - 2.0.5-1Dan Walsh - 2.0.4-1Dan Walsh - 2.0.2-1Dan Walsh - 2.0.1-1Dan Walsh - 2.0.0-1Dan Walsh - 1.34.0-2Dan Walsh - 1.34.0-1Dan Walsh - 1.33.6-1Dan Walsh - 1.33.5-1Dan Walsh - 1.33.4-3Dan Walsh - 1.33.4-2Dan Walsh - 1.33.4-1Dan Walsh - 1.33.3-3Dan Walsh - 1.33.3-2Dan Walsh - 1.33.3-1Jeremy Katz - 1.33.2-4Dan Walsh - 1.33.2-3Dan Walsh - 1.33.2-2Dan Walsh - 1.33.2-1Dan Walsh - 1.33.1-2Dan Walsh - 1.33.1-1Dan Walsh - 1.32-1Jesse Keating - 1.30.29-2Dan Walsh - 1.30.29-1Jeremy Katz - 1.30.28-3Dan Walsh - 1.30.28-2Dan Walsh - 1.30.28-1Jeremy Katz - 1.30.27-2Dan Walsh - 1.30.27-1Jesse Keating - 1.20.26-2Dan Walsh - 1.30.25-1Dan Walsh - 1.30.24-1Dan Walsh - 1.30.22-2Dan Walsh - 1.30.22-1Dan Walsh - 1.30.20-1Jeremy Katz - 1.30.19-5Jeremy Katz - 1.30.19-4Dan Walsh 1.30.19-3Dan Walsh 1.30.19-2Dan Walsh 1.30.19-1Dan Walsh 1.30.15-5Dan Walsh 1.30.15-4Dan Walsh 1.30.15-3Dan Walsh 1.30.15-2Dan Walsh 1.30.15-1Dan Walsh 1.30.12-2Dan Walsh 1.30.12-1Dan Walsh 1.30.11-2Dan Walsh 1.30.11-1Dan Walsh 1.30.10-4Dan Walsh 1.30.10-3Dan Walsh 1.30.10-2Dan Walsh 1.30.10-1Dan Walsh 1.30.8-1Dan Walsh 1.30.7-2Dan Walsh 1.30.7-1Dan Walsh 1.30.6-2Dan Walsh 1.30.6-1Dan Walsh 1.30.5-1Dan Walsh 1.30.3-3Dan Walsh 1.30.3-2Dan Walsh 1.30.3-1Dan Walsh 1.30.1-2Dan Walsh 1.30.1-1Dan Walsh 1.30-1Jesse Keating - 1.29.7-1.2Jesse Keating - 1.29.7-1.1Dan Walsh 1.29.7-1Dan Walsh 1.29.6-1Dan Walsh 1.29.5-2Dan Walsh 1.29.5-1Dan Walsh 1.29.4-1Dan Walsh 1.29.3-2Dan Walsh 1.29.3-1Dan Walsh 1.29.2-4Dan Walsh 1.29.2-3Dan Walsh 1.29.2-2Dan Walsh 1.29.2-1Dan Walsh 1.29.1-3Jesse Keating Dan Walsh 1.29.1-1Dan Walsh 1.28-1Dan Walsh 1.27.28-2Dan Walsh 1.27.28-1Dan Walsh 1.27.26-1Dan Walsh 1.27.25-1Dan Walsh 1.27.23-1Dan Walsh 1.27.22-4Dan Walsh 1.27.22-3Dan Walsh 1.27.22-2Dan Walsh 1.27.22-1Dan Walsh 1.27.21-2Dan Walsh 1.27.21-1Dan Walsh 1.27.20-1Dan Walsh 1.27.19-1Dan Walsh 1.27.18-1Dan Walsh 1.27.17-4Dan Walsh 1.27.17-2Dan Walsh 1.27.17-1Dan Walsh 1.27.14-3Dan Walsh 1.27.14-2Dan Walsh 1.27.14-1Dan Walsh 1.27.13-2Dan Walsh 1.27.13-1Dan Walsh 1.27.12-1Dan Walsh 1.27.9-2Dan Walsh 1.27.9-1Dan Walsh 1.27.7-1Dan Walsh 1.27.6-1Dan Walsh 1.27.4-1Dan Walsh 1.27.3-1Dan Walsh 1.27.2-1Dan Walsh 1.27.1-3Dan Walsh 1.27.1-2Dan Walsh 1.26-6Dan Walsh 1.26-5Dan Walsh 1.26-3Dan Walsh 1.26-2Dan Walsh 1.25.7-1Dan Walsh 1.25.6-1Dan Walsh 1.25.5-1Dan Walsh 1.25.4-1Dan Walsh 1.25.3-2Dan Walsh 1.25.3-1Dan Walsh 1.25.2-2Dan Walsh 1.25.2-1Dan Walsh 1.24.2-1Dan Walsh 1.24.1-1Dan Walsh 1.23.11-1Dan Walsh 1.23.10-3Dan Walsh 1.23.10-2Dan Walsh 1.23.10-1Dan Walsh 1.23.8-1Dan Walsh 1.23.7-3Dan Walsh 1.23.7-2Dan Walsh 1.23.7-1Dan Walsh 1.23.6-1Dan Walsh 1.23.5-1Dan Walsh 1.23.4-1Dan Walsh 1.23.2-3Dan Walsh 1.23.2-2Dan Walsh 1.23.2-1Dan Walsh 1.23.1-1Dan Walsh 1.22-1Dan Walsh 1.21.13-1Dan Walsh 1.21.12-1Dan Walsh 1.21.11-2Dan Walsh 1.21.11-1Dan Walsh 1.21.10-3Dan Walsh 1.21.10-1Dan Walsh 1.21.9-2Dan Walsh 1.21.9-1Dan Walsh 1.21.8-1Dan Walsh 1.21.7-1Dan Walsh 1.21.5-1Dan Walsh 1.21.4-1Dan Walsh 1.21.2-1Dan Walsh 1.21.1-3Dan Walsh 1.21.1-2Dan Walsh 1.21.1-1Dan Walsh 1.20.1-3Dan Walsh 1.20.1-2Dan Walsh 1.20.1-1Dan Walsh 1.19.4-1Dan Walsh 1.19.3-3Dan Walsh 1.19.3-2Dan Walsh 1.19.3-1Dan Walsh 1.19.2-1Dan Walsh 1.19.1-6Dan Walsh 1.19.1-4Dan Walsh 1.19.1-2Dan Walsh 1.19.1-1Steve Grubb 1.18.1-5Dan Walsh 1.18.1-4Dan Walsh 1.18.1-3Steve Grubb 1.18.1-2Dan Walsh 1.18.1-1Steve Grubb 1.17.15-2Steve Grubb 1.17.15-2Dan Walsh 1.17.15-1Dan Walsh 1.17.14-1Dan Walsh 1.17.13-3Dan Walsh 1.17.13-2Dan Walsh 1.17.13-1Dan Walsh 1.17.12-2Dan Walsh 1.17.12-1Dan Walsh 1.17.11-1Dan Walsh 1.17.10-1Dan Walsh 1.17.9-2Dan Walsh 1.17.9-1Dan Walsh 1.17.8-2Dan Walsh 1.17.8-1Dan Walsh 1.17.7-1Dan Walsh 1.17.6-1Dan Walsh 1.17.5-1Dan Walsh 1.17.4-1Dan Walsh 1.17.3-1Dan Walsh 1.17.2-1Dan Walsh 1.17.1-1Dan Walsh 1.16.1-1Colin Walters 1.16-1Dan Walsh 1.15.7-1Dan Walsh 1.15.6-1Dan Walsh 1.15.5-1Dan Walsh 1.15.4-1Dan Walsh 1.15.3-2Dan Walsh 1.15.3-1Dan Walsh 1.15.2-1Dan Walsh 1.15.1-3Dan Walsh 1.15.1-2Dan Walsh 1.15.1-1Dan Walsh 1.14.1-1Dan Walsh 1.13.4-1Elliot Lee Dan Walsh 1.13.3-2Dan Walsh 1.13.2-1Dan Walsh 1.13.1-1Dan Walsh 1.12-2Dan Walsh 1.12-1Dan Walsh 1.11.4-1Dan Walsh 1.11.3-1Dan Walsh 1.11.2-1Dan Walsh 1.11-4Dan Walsh 1.11-3Dan Walsh 1.11-2Dan Walsh 1.11-1Dan Walsh 1.10-2Dan Walsh 1.10-1Dan Walsh 1.9-1Dan Walsh 1.8-1Dan Walsh 1.6-6Dan Walsh 1.6-5Dan Walsh 1.6-4Dan Walsh 1.6-3Dan Walsh 1.6-2Elliot Lee Dan Walsh 1.4-11Elliot Lee Dan Walsh 1.4-9Dan Walsh 1.4-8Dan Walsh 1.4-7Dan Walsh 1.4-6Dan Walsh 1.4-5Dan Walsh 1.4-4Dan Walsh 1.4-3Dan Walsh 1.4-2Dan Walsh 1.4-1Dan Walsh 1.3-2Dan Walsh 1.3-1Dan Walsh 1.2-9Dan Walsh 1.2-8Dan Walsh 1.2-7Dan Walsh 1.2-6Dan Walsh 1.2-5Dan Walsh 1.2-4Dan Walsh 1.2-3Dan Walsh 1.2-2Dan Walsh 1.2-1Dan Walsh 1.0-1- Deprecate security_compute_user(), update man pages (#1879368)- Eliminate use of security_compute_user() (#1879368)- Fix mcstrans secolor examples in secolor.conf man page (#1770270)- Use Python distutils to install SELinux python bindings (#1719771) - Move sefcontext_compile to -utils package (#1612518)- SELinux userspace 2.9 release- Fix RESOURCE_LEAK coverity scan defects- selinux_restorecon: Skip customized files also without -v - man pages fixes- Build libselinux-python when %with_python2 macro is set to non-zero value- Build libselinux-ruby (#1581322)- Don't build the Python 2 subpackage (#1567358)- SELinux userspace 2.8 release- SELinux userspace 2.8-rc3 release candidate- SELinux userspace 2.8-rc2 release candidate- SELinux userspace 2.8-rc1 release candidate- Do not build libselinux-ruby- build: Replace PYSITEDIR with PYTHONLIBDIR- Correct manpages regarding removable_context - build: follow standard semantics for DESTDIR and PREFIX- Escape macros in %changelog- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild- Switch to %ldconfig_scriptlets- Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)- F-28: rebuild for ruby25- Rebuild with libsepol-2.7-3- Drop golang bindings - Add support for pcre2 to pkgconfig definition- Enable the python3 subpackages on EL- Also add Provides for the old name without %_isa- Python 2 binary package renamed to python2-libselinux See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3 - Python 3 binary package renamed to python3-libselinux- Update to upstream release 2017-08-04- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild- Rebuild with binutils fix for ppc64le (#1475636)- Always unmount selinuxfs for SELINUX=disabled- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- Don't finalize mount state in selinux_set_policy_root() - Follow upstream and rename _selinux.so to _selinux.cpython-36m-x86_64-linux-gnu.so- Fix setfiles progress indicator- Fix segfault in selinux_restorecon_sb() (#1433577) - Change matchpathcon usage to match with matchpathcon manpage - Fix a corner case getsebool return value- Fix 'semanage boolean -m' to modify active value- Fix FTBFS - fatal error (#1427902)- Update to upstream release 2016-10-14- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild- Add missing %license macro- Rebuilt for https://fedoraproject.org/wiki/Changes/Ruby_2.4- Rewrite restorecon() python method- Rebuild for Python 3.6- Fix pointer handling in realpath_not_final (#1376598)- Fix -Wsign-compare warnings - Drop unused stdio_ext.h header file - Kill logging check for selinux_enabled() - Drop usage of _D_ALLOC_NAMLEN - Add openrc_contexts functions - Fix redefinition of XATTR_NAME_SELINUX - Correct error path to always try text - Clean up process_file() - Handle NULL pcre study data - Fix in tree compilation of utils that depend on libsepol- Rebuilt with libsepol-2.5-9- https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages- Clarify is_selinux_mls_enabled() description - Explain how to free policy type from selinux_getpolicytype() - Compare absolute pathname in matchpathcon -V - Add selinux_snapperd_contexts_path()- Move _selinux.so to /usr/lib64/python*/site-packages- Modify audit2why analyze function to use loaded policy - Sort object files for deterministic linking order - Respect CC and PKG_CONFIG environment variable - Avoid mounting /proc outside of selinux_init_load_policy()- Fix multiple spelling errors- Rebuilt with libsepol-2.5-5- Fix typo in sefcontext_compile.8- Fix location of selinuxfs mount point - Only mount /proc if necessary - procattr: return einval for <= 0 pid args - procattr: return error on invalid pid_t input- Use fully versioned arch-specific requires- Update to upstream release 2016-02-23- Update to upstream rc1 release 2016-01-07- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild- Rebuilt for https://fedoraproject.org/wiki/Changes/Ruby_2.3- Build libselinux without rpm_execcon() (#1284019)- Rebuilt for Python3.5 rebuild- Flush the class/perm string mapping cache on policy reload (#1264051) - Fix restorecon when path has no context- Simplify procattr cache (#1257157,#1232371)- Export ldflags into the build so hardening works- Update to 2.4 release- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- is_selinux_enabled: Add /etc/selinux/config test (#1219045) - matchpathcon/selabel_file: Fix man pages (#1219718)- revert support for policy compressed with xv (#1185266)- selinux.py - use os.walk() instead of os.path.walk() (#1195004) - is_selinux_enabled(): drop no-policy-loaded test (#1195074) - fix -Wformat errors and remove deprecated mudflap option- bump release and rebuild so that koji-shadow can rebuild it against new gcc on secondary arch- Rebuilt for https://fedoraproject.org/wiki/Changes/Ruby_2.2- Compiled file context files and the original should have the same permissions from dwalsh@redhat.com - Add selinux_openssh_contexts_path() to get a path to /contexts/openssh_contexts- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild- Rebuilt for https://fedoraproject.org/wiki/Changes/Python_3.4- Update to upstream * Get rid of security_context_t and fix const declarations. * Refactor rpm_execcon() into a new setexecfilecon() from Guillem Jover.- Add selinux_openssh_contexts_path()- Rebuilt for https://fedoraproject.org/wiki/Changes/Ruby_2.1- Fix spelling mistake in man page- More go bindings - restorecon, getpidcon, setexeccon- Add additional go bindings for get*con calls - Add go bindings test command - Modify man pages of set*con calls to mention that they are thread specific- Move selinux.go to /usr/lib64/golang/src/pkg/github.com/selinux/selinux.go - Add Int_to_mcs function to generate MCS labels from integers.- Add ghost flag for /var/run/setrans- Update to upstream * Fix userspace AVC handling of per-domain permissive mode. - Verify context is not null when passed into *setfilecon_raw- revert unexplained change to rhat.patch which broke SELinux disablement- Verify context is not null when passed into lsetfilecon_raw- Mv selinux.go to /usr/share/gocode/src/selinux- Add golang support to selinux.- Remove togglesebool man page- Update to upstream * Remove -lpthread from pkg-config file; it is not required. - Add support for policy compressed with xv- Update to upstream * Fix avc_has_perm() returns -1 even when SELinux is in permissive mode. * Support overriding Makefile RANLIB from Sven Vermeulen. * Update pkgconfig definition from Sven Vermeulen. * Mount sysfs before trying to mount selinuxfs from Sven Vermeulen. * Fix man pages from Laurent Bigonville. * Support overriding PATH and LIBBASE in Makefiles from Laurent Bigonville. * Fix LDFLAGS usage from Laurent Bigonville * Avoid shadowing stat in load_mmap from Joe MacDonald. * Support building on older PCRE libraries from Joe MacDonald. * Fix handling of temporary file in sefcontext_compile from Dan Walsh. * Fix procattr cache from Dan Walsh. * Define python constants for getenforce result from Dan Walsh. * Fix label substitution handling of / from Dan Walsh. * Add selinux_current_policy_path from Dan Walsh. * Change get_context_list to only return good matches from Dan Walsh. * Support udev-197 and higher from Sven Vermeulen and Dan Walsh. * Add support for local substitutions from Dan Walsh. * Change setfilecon to not return ENOSUP if context is already correct from Dan Walsh. * Python wrapper leak fixes from Dan Walsh. * Export SELINUX_TRANS_DIR definition in selinux.h from Dan Walsh. * Add selinux_systemd_contexts_path from Dan Walsh. * Add selinux_set_policy_root from Dan Walsh. * Add man page for sefcontext_compile from Dan Walsh.- Add systemd_contexts support - Do substitutions on a local sub followed by a dist sub- Eliminate requirement on pthread library, by applying patch for Jakub Jelinek Resolves #1013801- Fix handling of libselinux getconlist with only one entry- Add Python constants for SELinux enforcing modes- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild- Add sefcontext_compile.8 man page - Add Russell Coker patch to fix man pages - Add patches from Laurent Bigonville to fix Makefiles for debian. - modify spec file to use %{_prefix}/lib- Fix patch that Handles substitutions for /- Handle substitutions for / - semanage fcontext -a -e / /opt/rh/devtoolset-2/root- Add Eric Paris patch to fix procattr calls after a fork.- Move secolor.conf.5 into mcstrans package and out of libselinux- Fix python bindings for selinux_check_access- Fix reseting the policy root in matchpathcon- Cleanup setfcontext_compile atomic patch - Add matchpathcon -P /etc/selinux/mls support by allowing users to set alternate root - Make sure we set exit codes from selinux_label calls to ENOENT or SUCCESS- Make setfcontext_compile atomic- Fix memory leak in set*con calls.- Move matchpathcon to -utils package - Remove togglesebool- Fix selinux man page to reflect what current selinux policy is.- Add new constant SETRANS_DIR which points to the directory where mstransd can find the socket and libvirt can write its translations files.- Bring back selinux_current_policy_path- Revert some changes which are causing the wrong policy version file to be created- Update to upstream * audit2why: make sure path is nul terminated * utils: new file context regex compiler * label_file: use precompiled filecontext when possible * do not leak mmapfd * sefcontontext_compile: Add error handling to help debug problems in libsemanage. * man: make selinux.8 mention service man pages * audit2why: Fix segfault if finish() called twice * audit2why: do not leak on multiple init() calls * mode_to_security_class: interface to translate a mode_t in to a security class * audit2why: Cleanup audit2why analysys function * man: Fix program synopsis and function prototypes in man pages * man: Fix man pages formatting * man: Fix typo in man page * man: Add references and man page links to _raw function variants * Use ENOTSUP instead of EOPNOTSUPP for getfilecon functions * man: context_new(3): fix the return value description * selinux_status_open: handle error from sysconf * selinux_status_open: do not leak statusfd on exec * Fix errors found by coverity * Change boooleans.subs to booleans.subs_dist. * optimize set*con functions * pkg-config do not specifc ruby version * unmap file contexts on selabel_close() * do not leak file contexts with mmap'd backend * sefcontext_compile: do not leak fd on error * matchmediacon: do not leak fd * src/label_android_property: do not leak fd on error- Update to latest patches from eparis/Upstream- Update to latest patches from eparis/Upstream- Try procatt speedup patch again- Roll back procattr speedups since it seems to be screwing up systemd labeling.- Fix tid handling for setfscreatecon, old patch still broken in libvirt- Fix tid handling for setfscreatecon, old patch still broken in libvirt- setfscreatecon after fork was broken by the Set*con patch. - We needed to reset the thread variables after a fork.- Fix setfscreatecon call to handle failure mode, which was breaking udev- Ondrej Oprala patch to optimize set*con functions - Set*con now caches the security context and only re-sets it if it changes.- Rebuild against latest libsepol- Update to latest patches from eparis/Upstream - Fix errors found by coverity - set the sepol_compute_av_reason_buffer flag to 0. This means calculate denials only? - audit2why: remove a useless policy vers variable - audit2why: use the new constraint information- Rebuild with latest libsepol- Return EPERM if login program can not reach default label for user - Attempt to return container info from audit2why- Apply patch from eparis to fix leaked file descriptor in new labeling code- Add new function mode_to_security_class which takes mode instead of a string. - Possibly will be used with coreutils.- Add back selinuxconlist and selinuxdefcon man pages- Fix segfault from calling audit2why.finish() multiple times- Fix up selinux man page to reference service man pages- Rebuild with fixed libsepol- Update to upstream * Add support for lxc_contexts_path * utils: add service to getdefaultcon * libsemanage: do not set soname needlessly * libsemanage: remove PYTHONLIBDIR and ruby equivalent * boolean name equivalency * getsebool: support boolean name substitution * Add man page for new selinux_boolean_sub function. * expose selinux_boolean_sub * matchpathcon: add -m option to force file type check * utils: avcstat: clear sa_mask set * seusers: Check for strchr failure * booleans: initialize pointer to silence coveriety * stop messages when SELinux disabled * label_file: use PCRE instead of glibc regex functions * label_file: remove all typedefs * label_file: move definitions to include file * label_file: do string to mode_t conversion in a helper function * label_file: move error reporting back into caller * label_file: move stem/spec handling to header * label_file: drop useless ncomp field from label_file data * label_file: move spec_hasMetaChars to header * label_file: fix potential read past buffer in spec_hasMetaChars * label_file: move regex sorting to the header * label_file: add accessors for the pcre extra data * label_file: only run regex files one time * label_file: new process_file function * label_file: break up find_stem_from_spec * label_file: struct reorg * label_file: only run array once when sorting * Ensure that we only close the selinux netlink socket once. * improve the file_contexts.5 manual page- rebuild for https://fedoraproject.org/wiki/Features/Python_3.3- make with_python3 be conditional on fedora- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- Move the tmpfiles.d content from /etc/tmpfiles.d to /usr/lib/tmpfiles.d- Revert Eric Paris Patch for selinux_binary_policy_path- Update to upstream * Fortify source now requires all code to be compiled with -O flag * asprintf return code must be checked * avc_netlink_recieve handle EINTR * audit2why: silence -Wmissing-prototypes warning * libsemanage: remove build warning when build swig c files * matchpathcon: bad handling of symlinks in / * seusers: remove unused lineno * seusers: getseuser: gracefully handle NULL service * New Android property labeling backend * label_android_property whitespace cleanups * additional makefile support for rubywrap- Fix booleans.subs name, change function name to selinux_boolean_sub, add man page, minor fixes to the function- Fix to compile with Fortify source * Add -O compiler flag * Check return code from asprintf - Fix handling of symbolic links in / by realpath_not_final- Add support for lxc contexts file- Add support fot boolean subs file- Update to upstream * Fix dead links to www.nsa.gov/selinux * Remove jump over variable declaration * Fix old style function definitions * Fix const-correctness * Remove unused flush_class_cache method * Add prototype decl for destructor * Add more printf format annotations * Add printf format attribute annotation to die() method * Fix const-ness of parameters & make usage() methods static * Enable many more gcc warnings for libselinux/src/ builds * utils: Enable many more gcc warnings for libselinux/utils builds * Change annotation on include/selinux/avc.h to avoid upsetting SWIG * Ensure there is a prototype for 'matchpathcon_lib_destructor' * Update Makefiles to handle /usrmove * utils: Stop separating out matchpathcon as something special * pkg-config to figure out where ruby include files are located * build with either ruby 1.9 or ruby 1.8 * assert if avc_init() not called * take security_deny_unknown into account * security_compute_create_name(3) * Do not link against python library, this is considered * bad practice in debian * Hide unnecessarily-exported library destructors- Add selinux_current_policy_path to return /sys/fs/selinux/policy if it exists - Otherwise search for policy on disk- Change selinux_binary_policy_path to return /sys/fs/selinux/policy - Add selinux_installed_policy_path to return what selinux_binary_policy_path used to return - avc_has_perm will now return yes if the machine is in permissive mode - Make work with ruby-1.9- avc_netlink_recieve should continue to poll if it receinves an EINTR rather- use /sbin/ldconfig, glibc does not provide /usr/sbin/ldconfig in the RPM database for now- Rebuild with cleaned up upstream to work in /usr- install everything in /usr https://fedoraproject.org/wiki/Features/UsrMove- Add Dan Berrange code cleanup patches.- Fix selabal_open man page to refer to proper selinux_opt structure-Update to upstream * Fix setenforce man page to refer to selinux man page * Cleanup Man pages * merge freecon with getcon man page- Add patch from Richard Haines When selabel_lookup found an invalid context with validation enabled, it always stated it was 'file_contexts' whether media, x, db or file. The fix is to store the spec file name in the selabel_lookup_rec on selabel_open and use this as output for logs. Also a minor fix if key is NULL to stop seg faults. - Fix setenforce manage page.- Rebuild with new libsepol- Fix setenforce man page, from Miroslav Grepl- Upgrade to upstream * selinuxswig_python.i: don't make syscall if it won't change anything * Remove assert in security_get_boolean_names(3) * Mapped compute functions now obey deny_unknown flag * get_default_type now sets EINVAL if no entry. * return EINVAL if invalid role selected * Updated selabel_file(5) man page * Updated selabel_db(5) man page * Updated selabel_media(5) man page * Updated selabel_x(5) man page * Add man/man5 man pages * Add man/man5 man pages * Add man/man5 man pages * use -W and -Werror in utils- Change python binding for restorecon to check if the context matches. - If it does do not reset- Upgrade to upstream * Makefiles: syntax, convert all ${VAR} to $(VAR) * load_policy: handle selinux=0 and /sys/fs/selinux not exist * regenerate .pc on VERSION change * label: cosmetic cleanups * simple interface for access checks * Don't reinitialize avc_init if it has been called previously * seusers: fix to handle large sets of groups * audit2why: close fd on enomem * rename and export symlink_realpath * label_file: style changes to make Eric happy.- Apply libselinux patch to handle large groups in seusers.- Add selinux_check_access function. Needed for passwd, chfn, chsh- Handle situation where selinux=0 passed to the kernel and both /selinux and-Update to upstream * utils: matchpathcon: remove duplicate declaration * src: matchpathcon: use myprintf not fprintf * src: matchpathcon: make sure resolved path starts * put libselinux.so.1 in /lib not /usr/lib * tree: default make target to all not- Switch to use ":" as prefix separator rather then ";"- Avoid unnecessary shell invocation in %post.- Fix handling of subset labeling that is causing segfault in restorecon- Change matchpathcon_init_prefix and selabel_open to allow multiple initial prefixes. Now you can specify a ";" separated list of prefixes and the labeling system will only load regular expressions that match these prefixes.- Change matchpatcon to use proper myprintf - Fix symlink_realpath to always include "/" - Update to upstream * selinux_file_context_verify function returns wrong value. * move realpath helper to matchpathcon library * python wrapper makefile changes- Move to new Makefile that can build with or without PYTHON being set-Update to upstream 2.1.4 2011-0817 * mapping fix for invalid class/perms after selinux_set_mapping * audit2why: work around python bug not defining * resolv symlinks and dot directories before matching 2.1.2 2011-0803 * audit2allow: do not print statistics * make python bindings for restorecon work on relative path * fix python audit2why binding error * support new python3 functions * do not check fcontext duplicates on use * Patch for python3 for libselinux 2.1.1 2011-08-02 * move .gitignore into utils * new setexecon utility * selabel_open fix processing of substitution files * mountpoint changing patch. * simplify SRCS in Makefile 2.1.1 2011-08-01 * Remove generated files, introduce more .gitignore-Update to upstream * Release, minor version bump * Give correct names to mount points in load_policy by Dan Walsh. * Make sure selinux state is reported correctly if selinux is disabled or fails to load by Dan Walsh. * Fix crash if selinux_key_create was never called by Dan Walsh. * Add new file_context.subs_dist for distro specific filecon substitutions by Dan Walsh. * Update man pages for selinux_color_* functions by Richard Haines.- Only call dups check within selabel/matchpathcon if you are validating the context - This seems to speed the loading of labels by 4 times.- Move /selinux to /sys/fs/selinux - Add selinuxexeccon - Add realpath to matchpathcon to handle matchpathcon * type queries.- Update for latest libsepol- Update for latest libsepol- Fix restorecon python binding to accept relative paths-Update to upstream * Give correct names to mount points in load_policy by Dan Walsh. * Make sure selinux state is reported correctly if selinux is disabled or fails to load by Dan Walsh. * Fix crash if selinux_key_create was never called by Dan Walsh. * Add new file_context.subs_dist for distro specific filecon substitutions by Dan Walsh. * Update man pages for selinux_color_* functions by Richard Haines.- Clean up patch to make handling of constructor cleanup more portable * db_language object class support for selabel_lookup from KaiGai Kohei. * Library destructors for thread local storage keys from Eamon Walsh.- Add distribution subs pathAdd patch from dbhole@redhat.com to initialize thread keys to -1 Errors were being seen in libpthread/libdl that were related to corrupt thread specific keys. Global destructors that are called on dl unload. During destruction delete a thread specific key without checking if it has been initialized. Since the constructor is not called each time (i.e. key is not initialized with pthread_key_create each time), and the default is 0, there is a possibility that key 0 for an active thread gets deleted. This is exactly what is happening in case of OpenJDK. Workaround patch that initializes the key to -1. Thus if the constructor is not called, the destructor tries to delete key -1 which is deemed invalid by pthread_key_delete, and is ignored.- Call fini_selinuxmnt if selinux is disabled, to cause is_selinux_disabled() to report correct data- Change mount source options to use "proc" and "selinuxfs"- Update to upstream * Turn off default user handling when computing user contexts by Dan Walsh- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- Fixup selinux man page- Fix Makefile to use pkg-config --cflags python3 to discover include paths- Update to upstream - Turn off fallback in to SELINUX_DEFAULTUSER in get_context_list- Update to upstream * Thread local storage fixes from Eamon Walsh.- Add /etc/tmpfiles.d support for /var/run/setrans- Ghost /var/run/setrans- Rebuilt for gcc bug 634757- rebuild via updated swig (#624674)- Update for python 3.2a1- Turn off fallback in to SELINUX_DEFAULTUSER in get_context_list- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild- Turn off messages in audit2why- Update to upstream * Add const qualifiers to public API where appropriate by KaiGai Kohei. 2.0.95 2010-06-10 * Remove duplicate slashes in paths in selabel_lookup from Chad Sellers * Adds a chcon method to the libselinux python bindings from Steve Lawrence - add python3 subpackage from David Malcolm* Set errno=EINVAL for invalid contexts from Dan Walsh.- Update to upstream * Show strerror for security_getenforce() by Colin Waters. * Merged selabel database support by KaiGai Kohei. * Modify netlink socket blocking code by KaiGai Kohei.- Update to upstream * Fix from Eric Paris to fix leak on non-selinux systems. * regenerate swig wrappers * pkgconfig fix to respect LIBDIR from Dan Walsh.- Update to upstream * Change the AVC to only audit the permissions specified by the policy, excluding any permissions specified via dontaudit or not specified via auditallow. * Fix compilation of label_file.c with latest glibc headers.- Fix potential doublefree on init- Fix libselinux.pc- Fix man page for selinuxdefcon- Free memory on disabled selinux boxes- Update to upstream * add/reformat man pages by Guido Trentalancia . * Change exception.sh to be called with bash by Manoj Srivastava - Fix selinuxdefcon man page- Update to upstream * Add pkgconfig file from Eamon Walsh.- Update to upstream * Rename and export selinux_reset_config()- Update to upstream * Add exception handling in libselinux from Dan Walsh. This uses a shell script called exception.sh to generate a swig interface file. * make swigify * Make matchpathcon print <> if path not found in fcontext file.- Eliminate -pthread switch in Makefile- Update to upstream * Removal of reference counting on userspace AVC SID's.- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- Update to upstream * Reverted Tomas Mraz's fix for freeing thread local storage to avoid pthread dependency. * Removed fini_context_translations() altogether. * Merged lazy init patch from Stephen Smalley based on original patch by Steve Grubb.- Update to upstream * Add per-service seuser support from Dan Walsh. * Let load_policy gracefully handle selinuxfs being mounted from Stephen Smalley. * Check /proc/filesystems before /proc/mounts for selinuxfs from Eric Paris.- Add provices ruby(selinux)- Update to upstream * Fix improper use of thread local storage from Tomas Mraz . * Label substitution support from Dan Walsh. * Support for labeling virtual machine images from Dan Walsh.- Update to upstream * Trim / from the end of input paths to matchpathcon from Dan Walsh. * Fix leak in process_line in label_file.c from Hiroshi Shinji. * Move matchpathcon to /sbin, add matchpathcon to clean target from Dan Walsh. * getdefaultcon to print just the correct match and add verbose option from Dan Walsh.- Update to upstream * deny_unknown wrapper function from KaiGai Kohei. * security_compute_av_flags API from KaiGai Kohei. * Netlink socket management and callbacks from KaiGai Kohei.- Fix Memory Leak- Fix crash in python- Add back in additional interfaces- Add back in av_decision to python swig- Update to upstream * Netlink socket handoff patch from Adam Jackson. * AVC caching of compute_create results by Eric Paris.- Add patch from ajax to accellerate X SELinux - Update eparis patch- Add eparis patch to accellerate Xwindows performance- Fix URL- Add substitute pattern - matchpathcon output <> on ENOENT- Update to upstream * Fix incorrect conversion in discover_class code.- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild- Add - selinux_virtual_domain_context_path - selinux_virtual_image_context_path- Throw exeptions in python swig bindings on failures- Fix restorecon python code- Update to upstream- Strip trailing / for matchpathcon- Fix segfault if seusers file does not work- Add new function getseuser which will take username and service and return - seuser and level. ipa will populate file in future. - Change selinuxdefcon to return just the context by default- Rebuild for Python 2.6- Update to Upstream * Allow shell-style wildcards in x_contexts file.- Eamon Walsh Patch - libselinux: allow shell-style wildcarding in X names - Add Restorecon/Install python functions from Luke Macken- Update to Upstream * Correct message types in AVC log messages. * Make matchpathcon -V pass mode from Dan Walsh. * Add man page for selinux_file_context_cmp from Dan Walsh.- Update to Upstream * New man pages from Dan Walsh. * Update flask headers from refpolicy trunk from Dan Walsh.- Fix matchpathcon -V call- Add flask definitions for open, X and nlmsg_tty_audit- Add missing get/setkeycreatecon man pages- Split out utilities- Add missing man page links for [lf]getfilecon- Update to Upstream * Add group support to seusers using %groupname syntax from Dan Walsh. * Mark setrans socket close-on-exec from Stephen Smalley. * Only apply nodups checking to base file contexts from Stephen Smalley.- Update to Upstream * Merge ruby bindings from Dan Walsh. - Add support for Linux groups to getseuserbyname- Allow group handling in getseuser call- Update to Upstream * Handle duplicate file context regexes as a fatal error from Stephen Smalley. This prevents adding them via semanage. * Fix audit2why shadowed variables from Stephen Smalley. * Note that freecon NULL is legal in man page from Karel Zak.- Add ruby support for puppet- Rebuild for new libsepol- Add Karel Zak patch for freecon man page- Update to Upstream * New and revised AVC, label, and mapping man pages from Eamon Walsh. * Add swig python bindings for avc interfaces from Dan Walsh.- Update to Upstream * Fix selinux_file_context_verify() and selinux_lsetfilecon_default() to call matchpathcon_init_prefix if not already initialized. * Add -q qualifier for -V option of matchpathcon and change it to indicate whether verification succeeded or failed via exit status.- libselinux no longer neets to telnet -u in post install- Add sedefaultcon and setconlist commands to dump login context- Update to Upstream * Fixed selinux_set_callback man page. * Try loading the max of the kernel-supported version and the libsepol-supported version when no manipulation of the binary policy is needed from Stephen Smalley. * Fix memory leaks in matchpathcon from Eamon Walsh.- Add Xavior Toth patch for security_id_t in swig- Add avc.h to swig code- Grab the latest policy for the kernel- Update to Upstream * Man page typo fix from Jim Meyering.- Update to Upstream * Changed selinux_init_load_policy() to not warn about a failed mount of selinuxfs if selinux was disabled in the kernel.- Fix matchpathcon memory leak- Update to Upstream * Merged new X label "poly_selection" namespace from Eamon Walsh.- Update to Upstream * Merged reset_selinux_config() for load policy from Dan Walsh.- Reload library on loading of policy to handle chroot- Update to Upstream * Merged avc_has_perm() errno fix from Eamon Walsh.- Update to Upstream * Regenerated Flask headers from refpolicy flask definitions.- Update to Upstream * Merged compute_member AVC function and manpages from Eamon Walsh. * Provide more error reporting on load policy failures from Stephen Smalley.- Update to Upstream * Merged new X label "poly_prop" namespace from Eamon Walsh.- Update to Upstream * Disable setlocaldefs if no local boolean or users files are present from Stephen Smalley. * Skip userspace preservebools processing for Linux >= 2.6.22 from Stephen Smalley.- Update to Upstream * Merged fix for audit2why from Dan Walsh.- Fix audit2why to grab latest policy versus the one selected by the kernel* Merged audit2why python binding from Dan Walsh.* Merged updated swig bindings from Dan Walsh, including typemap for pid_t.- Update to use libsepol-static library- Move libselinux.a to -static package - Spec cleanups- Put back libselinux.a- Fix memory references in audit2why and change to use tuples - Update to Upstream * Fix for the avc: granted null message bug from Stephen Smalley.- Fix __init__.py specification- Add audit2why python bindings- Add pid_t typemap for swig bindings- smp_mflag- Fix spec file caused by spec review- Upgrade to upstream * matchpathcon(8) man page update from Dan Walsh.- Upgrade to upstream * dlopen libsepol.so.1 rather than libsepol.so from Stephen Smalley. * Based on a suggestion from Ulrich Drepper, defer regex compilation until we have a stem match, by Stephen Smalley. * A further optimization would be to defer regex compilation until we have a complete match of the constant prefix of the regex - TBD.- Upgrade to upstream * Regenerated Flask headers from policy.- Upgrade to upstream * AVC enforcing mode override patch from Eamon Walsh. * Aligned attributes in AVC netlink code from Eamon Walsh. - Move libselinux.so back into devel package, procps has been fixed- Upgrade to upstream * Merged refactored AVC netlink code from Eamon Walsh. * Merged new X label namespaces from Eamon Walsh. * Bux fix and minor refactoring in string representation code.- Upgrade to upstream * Merged selinux_get_callback, avc_open, empty string mapping from Eamon Walsh.- Upgrade to upstream * Fix segfault resulting from missing file_contexts file.- Fix segfault on missing file_context file- Upgrade to upstream * Make netlink socket close-on-exec to avoid descriptor leakage from Dan Walsh. * Pass CFLAGS when using gcc for linking from Dennis Gilmore.- Add sparc patch to from Dennis Gilmore to build on Sparc platform- Remove leaked file descriptor- Upgrade to latest from NSA * Fix selabel option flag setting for 64-bit from Stephen Smalley.- Change matchpatcon to use syslog instead of syserror- Upgrade to latest from NSA * Re-map a getxattr return value of 0 to a getfilecon return value of -1 with errno EOPNOTSUPP from Stephen Smalley. * Fall back to the compat code for security_class_to_string and security_av_perm_to_string from Stephen Smalley. * Fix swig binding for rpm_execcon from James Athey.- Apply James Athway patch to fix rpm_execcon python binding- Move libselinux.so back into main package, breaks procps- Upgrade to upstream * Fix file_contexts.homedirs path from Todd Miller.- Remove requirement on setransd, Moved to selinux-policy-mls- Move libselinux.so into devel package - Upgrade to upstream * Fix segfault resulting from uninitialized print-callback pointer. * Added x_contexts path function patch from Eamon Walsh. * Fix build for EMBEDDED=y from Yuichi Nakamura. * Fix markup problems in selinux man pages from Dan Walsh.- Upgrade to upstream * Updated version for stable branch. * Added x_contexts path function patch from Eamon Walsh. * Fix build for EMBEDDED=y from Yuichi Nakamura. * Fix markup problems in selinux man pages from Dan Walsh. * Updated av_permissions.h and flask.h to include new nscd permissions from Dan Walsh. * Added swigify to top-level Makefile from Dan Walsh. * Fix for string_to_security_class segfault on x86_64 from Stephen Smalley.- Apply Steven Smalley patch to fix segfault in string_to_security_class- Fix matchpathcon to set default myprintf- Upgrade to upstream * Fix for getfilecon() for zero-length contexts from Stephen Smalley.- Update to match flask/access_vectors in policy- Fix man page markup lanquage for translations- Fix semanage segfault on x86 platform- Upgrade to upstream * Labeling and callback interface patches from Eamon Walsh.- Refactored swig- Upgrade to upstream * Class and permission mapping support patches from Eamon Walsh. * Object class discovery support patches from Chris PeBenito. * Refactoring and errno support in string representation code.- Upgrade to upstream - Merged patch to reduce size of libselinux and remove need for libsepol for embedded systems from Yuichi Nakamura. This patch also turns the link-time dependency on libsepol into a runtime (dlopen) dependency even in the non-embedded case. 2.0.17 2007-05-31 * Updated Lindent script and reindented two header files.- Upgrade to upstream * Merged additional swig python bindings from Dan Walsh. * Merged helpful message when selinuxfs mount fails patch from Dax Kelson.- Upgrade to upstream * Merged build fix for avc_internal.c from Joshua Brindle.- Add get_context_list funcitions to swig file- Upgrade to upstream * Merged rpm_execcon python binding fix, matchpathcon man page fix, and getsebool -a handling for EACCES from Dan Walsh.- Add missing interface- Upgrade to upstream * Merged support for getting initial contexts from James Carter.- Upgrade to upstream * Merged userspace AVC patch to follow kernel's behavior for permissive mode in caching previous denials from Eamon Walsh. * Merged sidput(NULL) patch from Eamon Walsh.- Make rpm_exec swig work- Upgrade to upstream * Merged class/av string conversion and avc_compute_create patch from Eamon Walsh.- Upgrade to upstream * Merged fix for avc.h #include's from Eamon Walsh.- Add stdint.h to avc.h- Merged patch to drop support for CACHETRANS=0 config option from Steve Grubb. - Merged patch to drop support for old /etc/sysconfig/selinux and - /etc/security policy file layout from Steve Grubb.- Do not fail on permission denied in getsebool- Upgrade to upstream * Merged init_selinuxmnt() and is_selinux_enabled() improvements from Steve Grubb.- Upgrade to upstream * Removed sending of setrans init message. * Merged matchpathcon memory leak fix from Steve Grubb.- Upgrade to upstream * Merged more swig initializers from Dan Walsh.- Upgrade to upstream * Merged patch from Todd Miller to convert int types over to C99 style.- Merged patch from Todd Miller to remove sscanf in matchpathcon.c because of the use of the non-standard format (original patch changed for style). - Merged patch from Todd Miller to fix memory leak in matchpathcon.c.- Add context function to python to split context into 4 parts- Upgrade to upstream * Updated version for stable branch.- Upgrade to upstream * Merged man page updates to make "apropos selinux" work from Dan Walsh.- Upgrade to upstream * Merged getdefaultcon utility from Dan Walsh.- Add Ulrich NSCD__GETSERV and NSCD__SHMEMGRP for Uli- Add reference to selinux man page in all man pages to make apropos work Resolves: # 217881- Upstream wanted some minor changes, upgrading to keep api the same - Upgrade to upstream * Merged selinux_check_securetty_context() and support from Dan Walsh. Resolves: #200110- Cleanup patch- Add securetty handling Resolves: #200110- Upgrade to upstream * Merged patch for matchpathcon utility to use file mode information when available from Dan Walsh.- rebuild against python 2.5- Fix matchpathcon to lstat files- Update man page- Upgrade to upstream- Add James Antill patch for login verification of MLS Levels - MLS ragnes need to be checked, Eg. login/cron. This patch adds infrastructure.- Upgrade to latest from NSA * Merged updated flask definitions from Darrel Goeddel. This adds the context security class, and also adds the string definitions for setsockcreate and polmatch.- Upgrade to latest from NSA * Updated version for release.- rebuilt for unwind info generation, broken in gcc-4.1.1-21- Upgrade to latest from NSA * Merged av_permissions.h update from Steve Grubb, adding setsockcreate and polmatch definitions.- really make -devel depend on libsepol-devel- Add sgrubb patch for polmatch- Upgrade to latest from NSA * Merged patch from Steve Smalley to fix SIGPIPE in setrans_client- have -devel require libsepol-devel- Upgrade to latest from NSA * Merged patch to not log avc stats upon a reset from Steve Grubb. * Applied patch to revert compat_net setting upon policy load. * Merged file context homedir and local path functions from Chris PeBenito.- rebuilt with latest binutils to pick up 64K -z commonpagesize on ppc* (#203001)- Upgrade to latest from NSA * Merged file context homedir and local path functions from Chris PeBenito. * Rework functions that access /proc/pid/attr to access the per-thread nodes, and unify the code to simplify maintenance.- Upgrade to latest from NSA * Merged return value fix for *getfilecon() from Dan Walsh. * Merged sockcreate interfaces from Eric Paris.- Fix translation return codes to return size of buffer- Upgrade to latest from NSA * Merged no-tls-direct-seg-refs patch from Jeremy Katz. * Merged netfilter_contexts support patch from Chris PeBenito.- Upgrade to latest from NSA * Merged context_*_set errno patch from Jim Meyering.- only build non-fpic objects with -mno-tls-direct-seg-refs- build with -mno-tls-direct-seg-refs on x86 to avoid triggering segfaults with xen (#200783)- Rebuild for new gcc- Fix libselinux to not telinit during installs- Upgrade to latest from NSA * Lindent. * Merged {get,set}procattrcon patch set from Eric Paris. * Merged re-base of keycreate patch originally by Michael LeMay from Eric Paris. * Regenerated Flask headers from refpolicy. * Merged patch from Dan Walsh with: - Added selinux_file_context_{cmp,verify}. - Added selinux_lsetfilecon_default. - Delay translation of contexts in matchpathcon.- Yet another change to matchpathcon- Turn off error printing in library. Need to compile with DEBUG to get it back- Fix error reporting of matchpathcon- Add function to compare file context on disk versus contexts in file_contexts file.- Upgrade to latest from NSA * Merged patch from Dan Walsh with: * Added selinux_getpolicytype() function. * Modified setrans code to skip processing if !mls_enabled. * Set errno in the !selinux_mnt case. * Allocate large buffers from the heap, not on stack. Affects is_context_customizable, selinux_init_load_policy, and selinux_getenforcemode.- Add selinux_getpolicytype()- Upgrade to latest from NSA * Merged !selinux_mnt checks from Ian Kent.- Check for selinux_mnt == NULL- Merged matchmediacon and trans_to_raw_context fixes from Serge Hallyn.- Remove getseuser- Bump requires to grab latest libsepol- Add BuildRequires for swig- Upgrade to latest from NSA * Merged simple setrans client cache from Dan Walsh. Merged avcstat patch from Russell Coker. * Modified selinux_mkload_policy() to also set /selinux/compat_net appropriately for the loaded policy.- More fixes for translation cache - Upgrade to latest from NSA * Added matchpathcon_fini() function to free memory allocated by matchpathcon_init().- Add simple cache to improve translation speed- Upgrade to latest from NSA * Merged setrans client cleanup patch from Steve Grubb.- Add Russell's AVC patch to handle large numbers- Upgrade to latest from NSA * Merged getfscreatecon man page fix from Dan Walsh. * Updated booleans(8) man page to drop references to the old booleans file and to note that setsebool can be used to set the boot-time defaults via -P.- Upgrade to latest from NSA * Merged fix warnings patch from Karl MacMillan. * Merged setrans client support from Dan Walsh. This removes use of libsetrans. * Merged patch to eliminate use of PAGE_SIZE constant from Dan Walsh. * Merged swig typemap fixes from Glauber de Oliveira Costa.- Change the way translations work, Use setransd/remove libsetrans- Add selinuxswig fixes - Stop using PAGE_SIZE and start using sysconf(_SC_PAGE_SIZE)- Upgrade to latest from NSA * Added distclean target to Makefile. * Regenerated swig files. * Changed matchpathcon_init to verify that the spec file is a regular file. * Merged python binding t_output_helper removal patch from Dan Walsh.- Fix python bindings for matchpathcon - Fix booleans man page- Merged Makefile PYLIBVER definition patch from Dan Walsh.- Make some fixes so it will build on RHEL4 - Upgrade to latest from NSA * Updated version for release. * Altered rpm_execcon fallback logic for permissive mode to also handle case where /selinux/enforce is not available.- bump again for double-long bug on ppc(64)- rebuilt for new gcc4.1 snapshot and glibc changes- Upgrade to latest from NSA * Merged install-pywrap Makefile patch from Joshua Brindle.- Upgrade to latest from NSA * Merged pywrap Makefile patch from Dan Walsh.- Split out pywrap in Makefile- Upgrade to latest from NSA * Added getseuser test program.- Upgrade to latest from NSA * Added format attribute to myprintf in matchpathcon.c and removed obsoleted rootlen variable in init_selinux_config().- Build with new libsepol- Upgrade to latest from NSA * Merged several fixes and improvements from Ulrich Drepper (Red Hat), including: - corrected use of getline - further calls to __fsetlocking for local files - use of strdupa and asprintf - proper handling of dirent in booleans code - use of -z relro - several other optimizations * Merged getpidcon python wrapper from Dan Walsh (Red Hat).- Add build requires line for libsepol-devel- Fix swig call for getpidcon- Move libselinux.so to base package- Upgrade to latest from NSA * Merged call to finish_context_translations from Dan Walsh. This eliminates a memory leak from failing to release memory allocated by libsetrans.- update to latest libsetrans - Fix potential memory leak- rebuilt- Update to never version * Merged patch for swig interfaces from Dan Walsh.- Update to never version- Fix some of the python swig objects- Update to latest from NSA * Added MATCHPATHCON_VALIDATE flag for set_matchpathcon_flags() and modified matchpathcon implementation to make context validation/ canonicalization optional at matchpathcon_init time, deferring it to a successful matchpathcon by default unless the new flag is set by the caller. * Added matchpathcon_init_prefix() interface, and reworked matchpathcon implementation to support selective loading of file contexts entries based on prefix matching between the pathname regex stems and the specified path prefix (stem must be a prefix of the specified path prefix).- Update to latest from NSA * Change getsebool to return on/off instead of active/inactive- Update to latest from NSA * Added -f file_contexts option to matchpathcon util. Fixed warning message in matchpathcon_init(). * Merged Makefile python definitions patch from Dan Walsh.- Update to latest from NSA * Merged swigify patch from Dan Walsh.- Separate out libselinux-python bindings into separate rpm- Read libsetrans requirement- Add python bindings- Update to latest from NSA * Merged make failure in rpm_execcon non-fatal in permissive mode patch from Ivan Gyurdiev.- Remove requirement for libsetrans- Update to latest from NSA * Added MATCHPATHCON_NOTRANS flag for set_matchpathcon_flags() and modified matchpathcon_init() to skip context translation if it is set by the caller.- Update to latest from NSA * Added security_canonicalize_context() interface and set_matchpathcon_canoncon() interface for obtaining canonical contexts. Changed matchpathcon internals to obtain canonical contexts by default. Provided fallback for kernels that lack extended selinuxfs context interface. - Patch to not translate mls when calling setfiles- Update to latest from NSA * Merged seusers parser changes from Ivan Gyurdiev. * Merged setsebool to libsemanage patch from Ivan Gyurdiev. * Changed seusers parser to reject empty fields.- Update to latest from NSA * Merged seusers empty level handling patch from Jonathan Kim (TCS).- Rebuild for latest libsepol- Rebuild for latest libsepol- Change default to __default__- Change default to __default__- Add selinux_translations_path- Update to latest from NSA * Merged selinux_path() and selinux_homedir_context_path() functions from Joshua Brindle.- Need to check for /sbin/telinit- Update to latest from NSA * Merged fixes for make DESTDIR= builds from Joshua Brindle.- Update to latest from NSA * Merged get_default_context_with_rolelevel and man pages from Dan Walsh (Red Hat). * Updated call to sepol_policydb_to_image for sepol changes. * Changed getseuserbyname to ignore empty lines and to handle no matching entry in the same manner as no seusers file.- Tell init to reexec itself in post script- Update to latest from NSA * Changed selinux_mkload_policy to try downgrading the latest policy version available to the kernel-supported version. * Changed selinux_mkload_policy to fall back to the maximum policy version supported by libsepol if the kernel policy version falls outside of the supported range.- Update to latest from NSA * Changed getseuserbyname to fall back to the Linux username and NULL level if seusers config file doesn't exist unless REQUIRESEUSERS=1 is set in /etc/selinux/config. * Moved seusers.conf under $SELINUXTYPE and renamed to seusers.- Update to latest from NSA * Added selinux_init_load_policy() function as an even higher level interface for the initial policy load by /sbin/init. This obsoletes the load_policy() function in the sysvinit-selinux.patch. * Added selinux_mkload_policy() function as a higher level interface for loading policy than the security_load_policy() interface.- Update to latest from NSA * Merged fix for matchpathcon (regcomp error checking) from Johan Fischer. Also added use of regerror to obtain the error string for inclusion in the error message.- Update to latest from NSA * Changed getseuserbyname to not require (and ignore if present) the MLS level in seusers.conf if MLS is disabled, setting *level to NULL in this case.- Update to latest from NSA * Merged getseuserbyname patch from Dan Walsh.- Fix patch to satisfy upstream- Update to latest from NSA - Add getseuserbyname- Fix patch call- Fix strip_con call- Go back to original libsetrans code- Eliminate forth param from mls context when mls is not enabled.- Update from NSA * Merged modified form of patch to avoid dlopen/dlclose by the static libselinux from Dan Walsh. Users of the static libselinux will not have any context translation by default.- Update from NSA * Added public functions to export context translation to users of libselinux (selinux_trans_to_raw_context, selinux_raw_to_trans_context).- Update from NSA * Remove special definition for context_range_set; use common code.- Update from NSA * Hid translation-related symbols entirely and ensured that raw functions have hidden definitions for internal use. * Allowed setting NULL via context_set* functions. * Allowed whitespace in MLS component of context. * Changed rpm_execcon to use translated functions to workaround lack of MLS level on upgraded systems.- Allow set_comp on unset ranges- Merged context translation patch, originally by TCS, with modifications by Dan Walsh (Red Hat).- Apply translation patch- Update from NSA * Merged several fixes for error handling paths in the AVC sidtab, matchpathcon, booleans, context, and get_context_list code from Serge Hallyn (IBM). Bugs found by Coverity. * Removed setupns; migrated to pam. * Merged patches to rename checkPasswdAccess() from Joshua Brindle. Original symbol is temporarily retained for compatibility until all callers are updated.- Update makefiles- Update from NSA * Merged security_setupns() from Chad Sellers. - fix selinuxenabled man page- Update from NSA * Merged avcstat and selinux man page from Dan Walsh. * Changed security_load_booleans to process booleans.local even if booleans file doesn't exist.- Fix avcstat to clear totals- Add info to man page- Update from NSA * Merged set_selinuxmnt patch from Bill Nottingham (Red Hat). * Rewrote get_ordered_context_list and helpers, including changing logic to allow variable MLS fields.- Update from NSA- Add backin matchpathcon- Fix selinux_policy_root man page- Change assert(selinux_mnt) to if (!selinux_mnt) return -1;- Update from NSA * Fixed bug in matchpathcon_filespec_destroy.- Update from NSA * Fixed bug in rpm_execcon error handling path.- Update from NSA * Merged fix for set_matchpathcon* functions from Andreas Steinmetz. * Merged fix for getconlist utility from Andreas Steinmetz.- Update from NSA- Better handling of booleans- Update from NSA * Merged destructors patch from Tomas Mraz.- Update from NSA * Added set_matchpathcon_flags() function for setting flags controlling operation of matchpathcon. MATCHPATHCON_BASEONLY means only process the base file_contexts file, not file_contexts.homedirs or file_contexts.local, and is for use by setfiles -c. * Updated matchpathcon.3 man page.- Update from NSA- Update from NSA * Fixed bug in matchpathcon_filespec_add() - failure to clear fl_head.- Update from NSA * Changed matchpathcon_common to ignore any non-format bits in the mode.- Default matchpathcon to regular files if the user specifies a mode- Update from NSA * Merged several fixes from Ulrich Drepper.- Fix matchpathcon on eof.- Update from NSA * Merged matchpathcon patch for file_contexts.homedir from Dan Walsh. * Added selinux_users_path() for path to directory containing system.users and local.users.- Process file_context.homedir- Update from NSA * Changed relabel Makefile target to use restorecon.- Update from NSA * Regenerated av_permissions.h.- Update from NSA * Modified avc_dump_av to explicitly check for any permissions that cannot be mapped to string names and display them as a hex value. * Regenerated av_permissions.h.- Update from NSA * Generalized matchpathcon internals, exported more interfaces, and moved additional code from setfiles into libselinux so that setfiles can directly use matchpathcon.- Update from NSA * Prevent overflow of spec array in matchpathcon. * Fixed several uses of internal functions to avoid relocations. * Changed rpm_execcon to check is_selinux_enabled() and fallback to a regular execve if not enabled (or unable to determine due to a lack of /proc, e.g. chroot'd environment).- Update from NSA * Merged minor fix for avcstat from Dan Walsh.- rpmexeccon should not fail in permissive mode.- fix printf in avcstat- Update from NSA- Modify matchpathcon to also process file_contexts.local if it exists- Add is_customizable_types function call- Update to latest from upstream * Just changing version number to match upstream- Update to latest from upstream * Changed matchpathcon to return -1 with errno ENOENT for <> entries, and also for an empty file_contexts configuration.- Fix link devel libraries- Fix unitialized variable in avcstat.c- Upgrade to upstream * Removed some trivial utils that were not useful or redundant. * Changed BINDIR default to /usr/sbin to match change in Fedora. * Added security_compute_member. * Added man page for setcon.- Upgrade to upstream- Add avcstat program- Add lots of missing man pages- Fix output of getsebool.- Update from upstream, fix setsebool -P segfault- Add a patch from upstream. Fixes signed/unsigned issues, and incomplete structure copy.- More fixes from sgrubb, better syslog- Have setsebool and togglesebool log changes to syslog- Add patch to make setsebool update bool on disk - Make togglesebool have a rollback capability in case it blows up inflight- Upgrade to latest from NSA- Changed the location of the utilities to /usr/sbin since normal users can't use them anyways.- Updated various utilities, removed utilities that are for testing, added man pages.- Add -g flag to make - Upgrade to latest from NSA * Added rpm_execcon.- Upgrade to latest from NSA * Merged setenforce and removable context patch from Dan Walsh. * Merged build fix for alpha from Ulrich Drepper. * Removed copyright/license from selinux_netlink.h - definitions only.- Change setenforce to accept Enforcing and Permissive- Add alpha patch- Upgrade to latest from NSA- Add selinux_removable_context_path- Update from NSA * Add matchmediacon- Update from NSA * Merged in matchmediacon changes.- Update from NSA * Regenerated headers for new nscd permissions.- Add matchmediacon- Update from NSA * Added get_default_context_with_role.- Clean up spec file * Patch from Matthias Saou- Update from NSA * Added set_matchpathcon_printf.- Update from NSA * Reworked av_inherit.h to allow easier re-use by kernel.- Add strcasecmp in selinux_config - Update from NSA * Changed avc_has_perm_noaudit to not fail on netlink errors. * Changed avc netlink code to check pid based on patch by Steve Grubb. * Merged second optimization patch from Ulrich Drepper. * Changed matchpathcon to skip invalid file_contexts entries. * Made string tables private to libselinux. * Merged strcat->stpcpy patch from Ulrich Drepper. * Merged matchpathcon man page from Dan Walsh. * Merged patch to eliminate PLTs for local syms from Ulrich Drepper. * Autobind netlink socket. * Dropped compatibility code from security_compute_user. * Merged fix for context_range_set from Chad Hanson. * Merged allocation failure checking patch from Chad Hanson. * Merged avc netlink error message patch from Colin Walters.- Update from NSA * Merged second optimization patch from Ulrich Drepper. * Changed matchpathcon to skip invalid file_contexts entries. * Made string tables private to libselinux. * Merged strcat->stpcpy patch from Ulrich Drepper. * Merged matchpathcon man page from Dan Walsh. * Merged patch to eliminate PLTs for local syms from Ulrich Drepper. * Autobind netlink socket. * Dropped compatibility code from security_compute_user. * Merged fix for context_range_set from Chad Hanson. * Merged allocation failure checking patch from Chad Hanson. * Merged avc netlink error message patch from Colin Walters.- Update from NSA - Add optflags- Update from NSA- Add matchpathcon man page - Latest from NSA * Merged patch to eliminate PLTs for local syms from Ulrich Drepper. * Autobind netlink socket. * Dropped compatibility code from security_compute_user. * Merged fix for context_range_set from Chad Hanson. * Merged allocation failure checking patch from Chad Hanson. * Merged avc netlink error message patch from Colin Walters.- Latest from NSA * Autobind netlink socket. * Dropped compatibility code from security_compute_user. * Merged fix for context_range_set from Chad Hanson. * Merged allocation failure checking patch from Chad Hanson. * Merged avc netlink error message patch from Colin Walters.- Latest from NSA- New upstream version- Latest from Upstream- Fix man pages- Latest from Upstream- Latest from Upstream- Add man page for boolean functions and SELinux- Latest from NSA- Latest from NSA- uppercase getenforce returns, to make them match system-config-securitylevel- Remove old path patch- Update to latest from NSA - Add fix to only get old path if file_context file exists in old location- Update to latest from NSA- add nlclass patch - Update to latest from NSA- rebuilt- Fix selinux_config to break once it finds SELINUXTYPE.-Update with latest from NSA- Change to use new policy mechanism- add man patch- Update with latest from NSA- Update with latest from NSA- Add changes for relaxed policy - Update to match NSA- Add relaxed policy changes- Sync with NSA- Remove requires glibc>2.3.4- Fix selinuxenabled man page.- Upgrade to 1.11- Add memleaks patch- Upgrade to latest from NSA and add more man pages- Update to match NSA - Cleanup some man pages- Upgrade to latest from NSA- Add Russell's Man pages- Change getenforce to also check is_selinux_enabled- Add ownership to /usr/include/selinux- fix location of file_contexts file.- Fix matchpathcon to use BUFSIZ- rebuilt- add matchpathcon- rebuilt- Add rootok patch- Updated getpeernam patch- Add getpeernam patch- Add getpeercon patch- Put mntpoint patch, because found fix for SysVinit- Add remove mntpoint patch, because it breaks SysVinit- Add mntpoint patch for SysVinit- Add -r -u -t to getcon- Upgrade to latest from NSA- Fix x86_64 build- Latest tarball from NSA.- Update with latest changes from NSA- Change location of .so file- Break out into development library- Move location of libselinux.so to /lib- Add selinuxenabled patch- Update with final NSA 1.2 sources.- Update with latest from NSA.- Fix to build on x86_64- update for version 1.2- Initial version2.9-5.el82.9-5.el8libselinux.a/usr/lib64/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protectioncpioxz2aarch64-redhat-linux-gnucurrent ar archiveutf-894d6097bc6a8b67e46f46a34a33f116b7c6ac964f0a48e93c96c9e8a18a75194?p7zXZ !#,aR] b2u Q{K;׽L<[dFC MٙόTbxXUe? #UoNb.Ww2f~TӅP"dޡR7f3ґ ﷡ %m f n40'*j%4WJ?ط'(@ "9Žhu_kІ[='SȺѧ_m;;~DB=m5 epxN@ww>LٻO3}I(}0/[I!nt@?hbb} EA/{ֵDttGHl>|2aN;QȯyiJv?7U%n$8ܼ .GrH`F9Tp(V.:X, V?4sl;qfSGMҽ3v;v+7jK'\pr;2v @R`1M9kC#t*=N+u evuA|A"媨&9_rpүv&󘢾敁n֧ު8ʃCa7[,4T#R :Gw0Num(k$V1y  X;Ш)mR7u`L`E~jKiR䆧#lIQ~e9]ڛ4=%oe;՗ <skJq*4&$ ~nZ)S[%g<.(48-/{ot<},N ?Ko/y']@rTxz?Fϱ* ~j)pQf!=L;@Qző ۑmw XoˌaTz_YG| hj.{7sR2Cs+;K $]^cQ5ذ8Zv}ܐ=p2(0juR6QrΪV4)heEcljސYP)hiK>eeV{WNu(tJ&Ij{3 4^9]s=ae4CxV JW+KWn0IOh!OrAS#a))xoنM-cM`%\!le L +O՘]_dk)y #VJ,&^u!VԱqT>^vB}ؗ+Mt?9(<:%EZ8GeX OCC,]E~=#s ,34.k>OG<˚,m{|wA6`(cQ.If$ 9t o$`ĝ}S>S{ؾcHA SsM= hJd$#˙BS.4tRh[n͊b`D. {2 U~g`'=_i>*ܰxER9Z4l4&\Ȇ]u=JA[2<ί)l7W5*|g cmqa1SrWF*m0 {vGX搹*Чhz! ^'] 1=iNl2ӌ*:qhzRi灙D}۝ ƤHQlaRpo$UESgB2ke"AX'Y#M QuK#ȷ`l1Ujbr!č}1*Yp>ȣ/W+襟uЕ0Eeޖ6M; _.*5on qmA +%fLjnQR :wu = p x=7l|J#쀇N|) )(낆qt=Q΁Y><{֖_~;xDA4 %꣡䧄9 dye81o;( 6;[1>zj ͸[[e#j44ѾonehH<,Z7ɱ]9t3B[ œ KJlCK|m"q%\( V`q"ƘqڰkxZ/z+`z~Xof0]K&.MGm/)Aƀ, @.--]`{q=y[-FHݎ0<^Gd J.#榱c f~2ة/1QO*WqE\ ŢKUv;]ͪ.yљf-.#sBo7kt(*+l5&r>d(~&RȦĵ88+Fi; :(= +)jKnFÉO 7}v&~i[;3bC#f6#* ^yf+n _&^ΝAr( ӝB*z* HA!!b5Ȥv:&Y)!QAmԾ>Y`Vf6=A#l@6F WFf̯13eh!p)/Zbl?H'pl)櫕Wlk}: hGh?`bSZ@?A0\ָ9΄_H)haz פ6@@@ou1\KhE!{Im^ c{`ͩ~S !;kH NDr8)ƆqrS0s Qn7S!s>ˀ+ ex3ɪMbs_u} txr(89]ʔo#] 046P11Ut:iY}XրE}ԳsF?^@qsc[/u;չ0Ɋ~F,; pQ^)mN~EӊZvﳥd+ξ v'5$0ڪ`kE}cIgß(P  R`: v. dityVfO!h}tx`w=2BO< ܞ^v˻!eaYox[=ڡbHT.y!> }ezQ?CT99+.k2~/ З'sQb&Ad ʔ8OڎI tax9F2^ '}PE-;+ (*WKoR,yL>0Qp&UI4}^τ6U;EDW hN%:> Β'^hCYQ2B~`锟]5vg B ^cX=Bz`-͡iHxSU]m;lFN|Xez_52_ &#̘xJQ 7;$>y#wfA^辂 l2T(Ɣ3=z>+X>v{㹋30"h(P{YRue%j1(*bd*Tij~dx&(o|\5[a)Is> F{O.\L:Gcl9szչd.iޏ1H}^_Z kVhQ,?jSwwCC薣uW^2) @ϋ(eӬVdgtF^Bޥ[?&ɞq&(`cG(OC9iD8f.@k B-'WY%*qxŵHw۝Q= 4r^aǾfUO5jL[c5_ S/m3"FpZ?7֎^:S/noJW? UԢ -(Pd,xaJ_qhY `)uV×pL/Qudpܿ   3$ri$Ky8;ƝȎic1Nħ>Sg~3ܕ* q: !,1'\osrVAuT=vFeK},΃̵$F}&C(i"?؄J'5rT‰bWW*KT>u-GVW˽GޡMƞrLUnaVf|yՂ2\m $bzP`؆'I鶳)Gk.B7ֻ$^L0Z-j>,^jэidk 35=u#%ؘXX83 R#nB֣t&d 42lc x95gWBt #d_4oJi%2/izΞ2;H{ 0WÙl ^zj,%$j<]1h9GHldFOD2;eIW< $1.MG?\{fPW ^p2`"ӥe}m )$e j1dde+S8;_#<{:a6Z[ѦVZ)kV{s/) vcU eM9,8Hl3nV4v)Ngvɪܖarsރ|;KMְ-='tZ#ʹOn_ @F`tdBcBSSn Y79Q$6awܦ(# iERD)CBHp14WW{@݋s>;E)TkA;}B_+|wג,TXm+vl={nraO)Q¤Өq` ]1mm:ݍEk1wT|ԡGǥRU~QB+w吠$c+񅓷Fdq!ːggVo@wJ15O`-WaW,<G褩-5,X[Yŧ誯I+6Sgix ;[ q{ހHz]ܾfj')Â{=Ṱ-^}?CGd(pj;eǗB_rMFBä'xH;L(z7R~Lc*3al%:aLAd iCG`H^]HLU!!P4'ѯ<=2Wki*JmR 8%\2S>~1 S"$]8[ۮྗ@ڻfTqn'L_qr|,k剺0=j44?c%\Tz6tGRK0b&!1_|i_i s-^ y_CDg>*?$deUKBk ͕\{lq2k)P Pm޶msue *EZKARS _`~Z!CE;T7,T}]HkzS~r7? !ƾ#:mw*Of4SN52'> yIƗیõ8B#}FZ E:й>43 H\D =N'>l5J Su5&׋z1>ёʗ/ vҮOpK|*!&ǻ%K_u 4% pm}܋D0yxѳI8$?9Rm,ox^NͺVZwjSҿANm/U 7-V]V&7'>/ XIUN[a9hER }fI{k*#H'gRN6&"s6̅a,Ϛ#M8m?"]}A<Mi60NT.J_`~_>gKYlD)ݿc&z6"ff |;q>miύi<̯" T  q/&7HPZ\ /L;bпu pk3KAGAK :yrӢb\a™)U3 B>nod N鑇Cì{_˝e8S0n<}>Yn;菣^ªnObA_'' rS+CB˩EW+P6Z=qA(QZ8TW>.?bp3!3oo[ `\|V ?c獔/q-A@庲/pI'%VfM Xȩ}5TOT N4+yj u@F{5pbz%!?؞v0zu4t5v؄g,[-y[Ul-x ewwX>g萟 -*1tKG&`Zj s YS%_yl C؆9m`̡쥩yv}FVP|m&-_d'qU[,eG睬=`);_VF㾈]=pZE]FK;`2֨+1& KsQ~!Ǚ QyyvdkI0v<;\4\-{z>.;yDR0'#mp.,MZB\Ʒ)xH5h 0pi} KTl}C !um[jE+(XA}븄7)CS=7DC9鎘:oڥ'ǃ7v32{`sh]r667 /[/ zAcZ- >W0#z@N? 7|Bŵ"YRꉡ|9#A\ԹZ (ܺBt@ ?H8/}eٸ CW0˭;2r lw[ɁH 㘑t'[hgGJllú&&~{6/dbÚ!pc^(B`ZaKaAD:F%X+' pnҜ+U"tFi>c2T*ZU.5]+A&v1f)Pb oZ@:Q~yan9hN4uQM'Qw/>St{#)ֹ \8F)$[ˣLCŵ/)mbv1!nD%qzͣ7)jA*񡝞&,&$ Hz]ܯ<)B'I)M@)߳glՖzwrp)O0yč)ȽSItR玁MkV@pDvg:k]pd`8ym,Ng"^2S1*)`3Lxk];ݳ^IgjڔۮPrn2V3aj3wP#Km0gW66.UZv 9lHѣm'RP׵NR-oX0 bb/I#YS> 4"bKJkLЬʧRۭ( {N`qؾZ-w00X+Aً}XVVfTzP%)Zv򁵼HHep<(7,(Dqqhi %tܐeCV(T<8k+jœkTO#grb~Th6qEbE)=|.ƺҕX5w4 B.qH`KregjnER}l׈^oPJ-+DYot:^|\)腅E>ҔLY6{csv(_:`@y#3xjZ7L>=w!5S͜lgkY*LOaܻ-KҞ̶Ѡ/YNܩgiz7 #Y4{\QMPDteF73O}pF l1>i5}:,䥎FHz}s >?xd$OSHYBG!rO5تE2orl.{ԐM+Jn PYk?.P ,Q"\nL#3Pi6 ǡ&` Xjql5sC j3szz8uG6ˤއ˃lŭDnd,zs($U?Ly_vf)QNMd4f!h)ISR.0 v&@ ){+%xV^t|҄sč˥^u.Qe=(BMD[fi4e +m%gñp>-a/6#=PVM@y |llu d+7yΖͻs1eVޛb} ;"H>Jfb[#'7]no~=#:zDjl}؋^p{B _.[̏B堵#fIpB;F` ;y*RSW>8n X_Z[#5/ՈymJ9j B(G[CUo\qNV F>lziƹwq܎PL,'1l>O(`&a3_8΍^_ۛyg/9c(5&nVV\XI\3$=r|Ya4}Gh1D`LW / K@|CtkJ2'@ddۂE=F"*pKaח~RIkj)k;-1v]|h6,pM5Ԡ);KC(Q xb2aIOс?.<],OEN@d?`_f=ƭg|ZOME ~*tj}؍]JE|ƞ)'ML"VbfƉ(ʱs :tSj @~( 1vI$[ܙ6e a}p %;ZIIhǝnrd]rx!q%LVMwԁew C~&^L{ց/mEft6z}2?%\HR^=+PR&ڝ' G5ŏIb ik;=V+MnbKia&6' <{XuUdIRxz"£ !rZ+_$;?LŰX˓jU?+%UrtvipeB7O#hxx ִey[ 7k4x%*F^6[Ci#倗1edФԳ\ }%u]<RcnBQ" %u\vɫ3=(P2ul#|X޷XD3NJ8g5 H= xZYYc`uٙN:3ËtY 4juF?<^@f|:@{<,Sޮr-kꋧcQuGx{X8}ͫ)uIU]p 3{>$у*ev V"̍䅬ghuHB|gۉ {/ygfmo~ESrqUpo9e$wSkȥOzWS+(ONiEL s$M-ݯkζI?Zz1]{b:fMix?tϪ >I ^||iEƮZrBc^I&Qn 6sxN֨Lјb;*Ozd&bNpH_10(<"6pQ$[dBF4*?橹rV.G~dԠ:ZϿ铑´v/ (#xA5B5)t\DKmk8DE䞑Ra3>STYl%;W_eZl=&)-רsv 0!bi'JoUB9Ms>~bukȠE}CwP3^^] g%'sՆ&lhAHr<]-ݟ] >- ٵ/e=eIFUC8WqZ,6 gM|+3g(f|oUcEV&d⿵n31b'`;(FX2"CI 0%3ww.^\!u͞cv!c#^ՕlЗ$Y sqO$*#,@Y. \'r&QARJ(8yGFdJZ*m@~:H+]4hbf۠F-9?nG54=12dy'I%leSX [ \D}*DTsҫ=QRnm2# {cAi[O/P d"vV9TW$u:\q0ž=hRGqXoi( VW+k`fdL1ɶv$2_GNS?Pe%|wM<43էrim5?sBć܇meLZ+yRPe!kC;b`e\?Qg)2_׎*uB"=N-Sl!Y+Dx^`<^*d ܾ4d@*xs5`%{,'TSt &Hഽk5F!'D":\# Tm( Q|,n0^v\f#(t'?*NXYc9kPÉv;X7xd_t4> 0T0O\a_6W5HB,@ C~Wxe6ٸ!Ey\W]/ >cAUGsjfҧn0h ^0:_?Ls f,wM-+;,gXJ۵o? Z#4MLDpXew/b ЋB-ƹlj^p*K+u&͞yH~% }Q"@p=㑜)&HS,:7 iegS@1 (@PV'\ dIkܤ]W!iaPUR"z*.2ZmBe"5[d<(1 ù.L/L|P2&g: !nbfټMKHɫ3M-23hƩmx X6$ b 5q6F֚<g30Y P}gP^ܳ +h0e uIHJFtCmzs.AE1c9Hq\D%x$H.b7{[0Jވc. tv@3 Scj}J[8"h۞  2&B~+v)[N=ޱɖnYĺq!I5Il3WMJ+HZf/LAzm1 oFيbhlg^"A!?`[ Y[XkDd-uE#w-ڀYEU@MeV_"~q>j;|7&D%Gʐ\x2gGҘ+޼F<<_fv[F !E) ) &LxN/QTe!X0EpYOt֟_ ! K5e<0%Žξ0QcE_T3x5C =b L0]9  _  g@iUuQ PqD'~,~ M;yVJ2yBG id:YTa#DkV(%-u1k9xm9^Ki&"(*MiSjv Iĩ3TAVQW$}X\7AAfw?Z(%ذUldmOoQ >#K_>ʆ3at6[sg@[7.MEG&OU~=0_ 2 dTU`W2tLr1!KmI`Ge0oP~W)a'(u􂛀zTUYy]!ǶEhQI(/J A3<[t{ [@S5x2ŋPkaXbԝ>4ovs(GܙHG^|4\1i\̏cd O}Y?>P%LˋLb&^K5 Z{[㙈|J=3J!N ^rh&8`M eރs7ЏS= < $o !$M`-H#w9=xX<6N1k1e~Qv4kdZMgҹ /‹$}Xݦ6kZW,,_[Gb-w*4% : IG+f:/L[rx~:}^\YwͲ+[1ݾYmk>,ˮB.NnC<_m됿nDa+ @YM-cuTy#+.^C\0Iΰ::Խ(%h-@0S$|;tvA*m+R˰EүQX`dyڂZ6tyc ;cFͼqaz=`d36 WBҰ9ZxD4i'x٧m F10|uŤ:<dZX.J~7Jӣ-MGI‡iO9/L`r$yk.Acfti(5;H l ~:3JiV)$k(<Ѕ܄D2p\HESޕ{2*C@<=Nf v}}1 0G,w¿miG3 e8ksf;* Dekn%̠~^4?AJ|MTV٩IAva^zm&*#2xϜjB|H>Kĸy"%֭'a'e< sth)%hh\@UiS)Zn"b1 "iN0xUnT_.7v3Wɠ} "tKS2y>(C{ڕY*p]3_ovR8vQVרt1h6&.f 8&* x*@ p@{EzSvF(Ѵ2 t(aB3\RSL {C`6E~K#<ڄ6BSԞ.]֘>0l7#2Mz[6$ɕj!^̈$a܆hvS qc8:-t 7عNd@ Bm't6it^ ϵ֐K`jL<0@M;85@_Ow $Vc ǝ9nxyi;n1M塂RHa !NP([2oR<0|T/Vva$2}y owQK%U捂;mfjy-w*Y%s}ktE|ѓ&t)Y|~dRhQ$$uS kJ/@p L.dႚH oa9 5O2&.NvDR;Hqik$e.+ j2;C K|Γ{ w .5Cjh%~l8狇d3/+=Es"C5!MhX#,}S72!SOWPP(_E&ݭK5ADf@͎/%$zγ]o-n/ p&[(ݨchy(y%_].xfe |+l+INGkBV qIGtPo4֢myL ǵo3s+A*yۻʯjxQq4[͔j.@Tt:i,1ciiq"ӤM> LZZQ0f;Wd7:LAI4h< J OuCV#9]V36Xo~; [|O řFyfbYU!'uYT840Kwd?؟t4Xb6;/m|g5C-?/ (R z[%?2-a݉36bJ)>y# mkLΚ-eYMX+ vC$ )Kz۝Mug_-J *$"CšӸfḿfsmqϥ z)w('x|K' SŃۮX!:֬@Ax_,J`q"iپJ.»mE㽲ZѝhUw(r^VxK8g!+ϰzZ6 =IuͰ0 ]MYѼzU{4 Ph!Q_c2 Nǔdn{ӺcgԏJ˸еꄎ8!`O:9Tq?|X xG^.-f 9~+ɕ:+ךUL9NJVhʂTQ~cJ#C Fp/ޛiB:Qԭ/_ĘJAb?t =!OO` $H}i@;Վٺ&n~q}OFYH,۪J  WwKHրa29rnd[_YqԢ%0m}@W$4"lW5/zIy|)jGt:)ުV; w9٬P l#,bAdk:OW&)#p]hȓ \ j qm!q< O[UOv7LpuǧW3 &gCw =J<#GDї8aW3T"YMDtW/3W :+a\6Ŏe~|';PF(u.s P9\L0:S*CWDe%JC A8O!rArTI%w!/BF=k (ĦX7gVزUʬ (ZVV \ӄh1죙fZz8nSgXV~GB: ޼b-E 5Ɨ2ØxG3ϱ 5QkZVqfNZNc [y JP}n:c7?1[$1y( TȥsT9k֝t{L"˪^# S@`K5㑸K Hߜ%;8$ ),xr\&2Z@ P\PfPW$l G7=(N&5%;nԾ |G|^9:Ib9qx|"}DpD؊D  /'yp7><2a@,?ݲ>kyH܁bXL'pw$A]mkUƪ]Sޘ ޤB|NlX9ϖe m\}K%lprjA?-+ e_cђM'"z@gC:g3)S(HkLTb# |(C=Oxk~z`6\dٓGNL,Vufˋ ,Yx>\jf{jq2$@.2jk,X%Bp\ ҜF"ecb2LW*[qo ^ވ5dpɩ'ʒϾI4OnY;|\覉3l3%_+ lAqM ;|fp\عP)64,r$&ծ?/ !(ۑȋ|4$iH2CveQ(],̸h؛\-p2u e!gx\r5D*q]L j[ZV1Cq]<}wo,Gg =]lq_p"TvK7,'lS|`rkA5m(vǓ-A[ zPr@ ӒOFE̜bR}ݳ+ct Ā`}ɡ~>Y|]Ho]kSRAgqEwZ;e[p c>ѽ)9c^xfM[J/K{<ubEZٓRia"8JU._[:gP,7X\f!f#"oѢ8 ,>#ޑC0wqz~LD;t?<tQr 6Xw p5ې+=_, H%$tH_΢2}7;]Ъg;IH)}0+ܱmY<ՠP!K}  CjHo*`xtuzlb~2!H!P?dB!FXVr[gw%_ZQ'i3͖#ZJBe)Iu5zM`k0%}5VC䙷fxӰ٣ h[S`QAO41Dr<}N-#4tc">vwZ6zP{m=9y.è3)|͍͌1 V)"bfS[~n#R2YQ͂C}ҺSf~Ԋ -9PG13LѽsFGJNOLA16(lnC +;!S/0ye $M{pE +it| 6 :,*!K+g$.\hc%~#f~EE0.)&Lu)Xrd|uଫٽX~R4utLCIO&U23c`"(:rnhӅRH8"*V dn*a!<֍mᱜ;ࠅ4\"c E.5:M#*9O%t1(%93gm$%|0fKi8Y#H(3N&E<h's r, .ߣ!(p@Y|N !OEccP@ U퇔d,`aQ|Q@r>P5'rҪt\~gҤ/ݖFʳfk>^o SAL^NN> MHv[D;&*>S7ݤOR=pn}!G[1,dw$s {= NE:FOLF(h^g_%@e_ X-v4=z*'g(nA w2iQb1OZz鳏=5ov{m'45=O|f"j[) 7%HyeU,iaj¶4|A25[̼*5*}*gSx<&x\Te$zqNcN.J7JzԭƘ(X{O~cZ>:DzQ~\S1Y,Y]rէp4x~{)i@lI⺚ξgFrpLVӤ>P'ӢS5e=ڮ G-H>莾AT 5s.ۮG@X1f+RJގcK|n1K=!3nPp&E8};LeBԒ+JFl>-h8-<Sjځ2k563RiO#"N3}-oqHQb!٣&/Ǔ%k2f*R^[{ZQ8~StؕE}k^wzWzF&8Vj0=&ÊKnȃ.Up^T;>ǾD OR\4!B ;٥KFH¹PtVe+/tiElL3-7/BX ]rtlY 1A$zӲ;Kٹʕ-W9MI{q9W4Z$.Tq"Zp$ @}ԃ5[ YT=ubr^8+{Hs*Q^8;˅z[`cL}*C'^7X]hF<_ n,dy c.^j)}?sB%b3TlOvOw .?-@]xm՛bɅdBFebx :;"S='*X)>q?R]t:;'j öۍׂBy"ըʮ c%#lQl9i7moe.U)+5EIpe>GkUJCg=AjmKX q{qcwgnkwQ*xhvbzd$4O{I9*A˘)]@,R~ ͂Eg3> #Uo 2֜,]k A /$k jx 6\*Q+, 8+IWE9}O&zc*fYXbrɏGmD.Cm?KI1;bYw=Ĵ \"u*(vĎr(b-^ηEÝ?7 IX"szz I"qj ;(FVMQUg:P#=xVNXTkbx'TAԯ-wfk@=lVNSn:c.l1ۇ /z&ãۑbMw,냰k[d񙑾s&(1Qx@uyj ,XH[dDlyCQ6zZ4! r۰(C]=k`cmEޮ~H>Ȃ=~Z: `ES-7fWIU-?BjwPRbFǥ73?%# ;.iz1O811\+ek;UҍXԅv.`);/)]]b_?5^nLj`(a@^52f=d$߀6>=(% ݚ.<ʤ I]sy+G_"j@EG#-A jX|QҾsgߚ0aA12D6ÿP Q Ʉx%;+HU ABM0y:T6#hlYy^9J0@=O ox!Y c~޻nou_YSe z u*܆mU1ٓy!=WVٶTc̈́B_KXơ[n{pD;ۿ( 23r,=dG΀o>\V0ҩj|uP3|hm5E-Y?zGت8/""GL[fnwO&NAA!I %h]ߞK> te֯Ɏ %Bͨo=Yt]mݥ^aev+?|)Q0Q> O@ipb\PP Uͼ(98~n+m. rh5PԺeHPI#>Z}hWg#*.֣ұ9_y<=# z )(EASϏϜEyqqTv އ2_A9~$DAhgxS }ߤb4#sC~d^]x hAG#vD:xcԁ{`'͢CҴI.4Y2' ؘ¦e%Bfq-o#ή hZ*B2W.{,_YTm$T~Xtf ,cNi=?(:b KOPk$q&%C wnQxUXr {7,h6I3re8 Hz{wASP-8^gF jB1~'I"^%8Er~"*j̃h]H+R|+l:4PMAԷEzG5Ǔo:N0̱Y>-O%Qn%?I4A1bw{y|;K)Ժ$kDKIbWh23Jla%fb ::;[}2 IV7>z|]}$ fM۰nrl)\T5wASzVLĎ!J\ݯg;zEa &lWW }}G:S Zxؒlo aeR921I ΎF\2}Nj BΚ37'e5k\6% Lr'm,e'):,#F_QnzUfT"'S([=K (\Zr@k+h'hә$ABD+'"RH #r$;"~cfٜړnVڕy|[9xftPg..m,4:l1q/]Lix|UĈW9>ϫVo>"=v&DPtt\ QH'oxH84@ YrCajs(1CzjVW-'$/Oyyql|ڦpi lVxr_c[Uz}* Q@L12 +h^R(3'y[@=o63? cb[-l&>nf!')k Bk}M~%QM0:$&[FeY ,4Heb Z5!ہZߟ.̴) 5HEla@,!~:Q-n+$_{FWjm&oG _?ڇa@;B4 B~OcuI߀oAedݾ>fڞ Q0RgN 8g(t,8t^r3ÈRW*@%Bb*)G B9iw䣰c9^ďRVl">¨ؗbߛt &~P*㙡%e,$9 l奖OXY1mhɺީf L6JK1Ll.Z ɉ 9=},4r]eDʻ} ,xz PsYe~*osrv.ĵ0ly3PpmYMⵈPԣGTUaYm`k%#oQ6Y9S )Dr֙U+{/?\fyLd}CBӣ`EbйR=t  {XMs,E*F&й]ɼ[%􋷫z6549P^_ZfU_Lk UtsZUǓgP~K݅<8nd_?b (A?/Z~ڪOV5|کt;EH!-ו>Htv>ս2 RUB#V&|fmW6 ӧY< ֈن?eF/Q܈lxaY%`)5-< 40è:4*z1wͪN)k+utTc]ZxHhnE?rIԠ͚-aNrnT1O~Iː$Xj_J!gEu@.#m^>P,Vpz0C ԭ}5$pFm8';Qq Jz/ed3"!\zLq| u}};e &i֩W[iXzSf*sԔ;U. Xs#fWZ =71ļ~5r|Z5A`1,slޯrSCd;:8K -fz޸y 嶾goQ/;W2V_uP?͏$M{$2Éј?]yЉf&.O!/ӧis`}`sq?+ U >HoUL-5Z?cQ{rJc'Abj3>EY3V8^*q11 OjM+>[fz%޵b+=sfaƅ]:Cgl#)Zyɬ"G< L ƎkOgnXi\YQV48_ɏj  .YJFjA(;{X/Uֲ HEn$xcL32ʽB| 껬5C= FҺ ^d%3wRNCxwwKF=eZ2[ A/7Esğ9Cn@`37hҩjn L~dZX8bx b):2L=X5t*& !ϗ"M"q~sgS(4I [ujA]ӂʻCˏ6/K_#ۤr`XۊqK%VLj=p6MgKH7d{߱[ \$cƿ;"hz7Dzu'=6]/i;VQ^.0mVCAiN+$?]ZEz /ʺ=*k\7G<@/]Em@m.UE$_iI*9VvM$l=W(w +݃qv`md廿\#+jQJSK&1-nHkӖ>mbFD3]Q~ dHnnE*=wØBdR, 7Q-_%(@M0V մ'G. @E5%[b+@ OL6DmJ\N Ӫ4#ѹ-<;2ZV;Oʁ^)"=K2VM!ObYk%x6T;U^9ЩGy9:+PRꨦxnY6:T:"xu 3M%їĦ*:J?O;]f+2sOקL- ^CbzB{s.d5&*܊=Ͻzk&m1-֑ԖUu&6[5YzoQǕȀQ8f\a0fivzs{mP2)$|ә*Z+P̎⦲&S,L-bBk l߉[3qvN^\fKP_5&G3G9' W\\,6+ށ/.`iEqژ"^Yȳi]*/ ꉰavU9<弘ɖMS8bM*52Q^ϛ IԊ~ IDF}_aA,A]YI@'HPH[gܫFByn|>jK붴?stI{x&$A2bY6$wr:-HКƨt5qXߗ S;Rw4X9&ވ7).Ǟ9XSIg&;bF?P<޴UCqߞ Qiq +"~ѽ>f/?c/Yƌ8iV~~L4@}Bw UXYZascxFIp.bE{}Ǯj+>{YDQTW_hN̰rrn Jn霅2Iߩ^liX8ק:9͚R%hovD=ژq$՚U;(+p{ǔ k l[}i2mp6nф85iR`L|[~63ףXլ(;-DCۆ{2sCmUdAKB =v5ߡ_F=?E5tl;؏da.2۩{z  a`KN-8/NdWgWK1K8Tn0D$*! 1:!ReT*MWAm9KlT5P?c~+ǷFt T92єLU%} ?t%|G̜upÞP`[a5zvyMNYK67!bd6ql˜LpK86F0TNL{όHSAT6 ?!V顰LB\; o)Ľ뼤UoZ ʮt޶.ݍ57;-Gr.F=+y;F WXF?.ɇچW&݇N5I9$t1dv{_Q?JKCՈf br|eJfos2 A[B|vq@u.o@˳%e?3j]6/qiX" A k80uQIw^6cZihj {'}ZTuLc3ܓ3\8_0Ǎ(y8Q5)Xjx3LtSEQ$KXkQ4"]4O6s`lh+PJXw젛 Q08 w7IN.[bX]T,gNFz e+2밚f`(d»QCGCu8TdHkH-S4@NP?Dھ8ӀҠB1IV8 1sk>`ݭM`TS^Z{S&v;$SJ6/'"p+uAKP>dXue);>014&;#=`DƲ&[E\u*ªYIwW wۖ#gl/noDZ<: σ$KF?6nO7݈0 /9 YFw|% hVrlG{\9 Vc2GpX#h{UThy 8ѳz'xU&S3hD #@~TO=BG%SF?z寗Am3UcqP>>xS >o ~?y -pr/ @g?%xx 0v/2װ_ۀf4a|e?ڻ6@XV_p4vvK5>`Xq3,Cþ]{9Tcʿb(g_ ږ3zovf,XεAS0DmP¾kK|/WweTdI=&vwl=w^.TJv_[50-^s&3v|PY$J[q!Mh?dҋInzƠb\kޖη:a(+ֲ ʕ;XX6ڞ,&0Jѭoؗkڼp:D"|zoz? +vLGvH^U2hf'MiiU`-R\kK?hΩ0Ϸk:t=+BM^(bL@Hgir!oޡfNI7Qާ e/T:n[٥vēqRb?Dgu@,uq[Ca00#G ،4]K,i(t^5h>/+e,a}v2Zo+̻m;VII{烗,orsH=z nOpy`h@߱bg!zKF8;8?HFx&B)=huGT*꾽{;P|A`+f@-|Rf: Ъlbj+ʝBȰk)uӖcRA+qJ恂L, H5 }v׊6A*aUFJ4|!5ڼ mgCh AC>BʔW$X%2 w|x/}ڲwc(g"* '& G0ɽApnL^/th+6e5|p5kZK9k}4D7Մ Pɬ\.ݜ6z>vUmo<^6etw-1ܨ=ҶP@GwmS`d鉍e PiaZ74JN]IZOo=$jϋw{:Q~qyaX8TߒsܳkulqCz-״$"wZ?ߦߙf0lBc sΜy$,lSocc-]JR8!Wg(R G }"z: ^5s VjA:NmjfKզP]Ν.jY)֝!d/Q0aM~[{4m`l)h⠀ߟ*ÇTv@2s2z72i-vGe!"VGO/=*H66%!}=UIC$>䗆)O=)Ti8>gǽdqPk)zh&j/\sXoCv#ZF=R-UjC/ V _ݰoF#|ԋ~d?BݹퟳO 6{{P7oo jMliX%Y*؏u7dY+O7WX?sl:-oNoiE]agtf'&Bo-i<#Pϖ+\|Mԯսc[ls9Xc v-;ŀŕ n_i:'&ٝ]t@Mqy36)G0?oQ; E 8k^h: evO&cmT<|~?\P 7WyX7Qkq_HRݼl2ĩdm@+ J|ZYkxR? !t~>ɭӔ*0 y-Y[Whϱ; r!z馜({|M/:$WpVX_ v6Fi^@"kTD97α if1H;24Y|S&f.ҵEa``2pVhd@)Mij<Ë<\Z>=H.&uY=$ Sk? }JGOI6д~ql SG!8K-ط2.ꌔƄQz$@dv XR <9:/SS! OI4m\Pۚ{UC>l! rGxOxvKo:+go.rejpWguW6mD|1X|yTb=z9ki1'fsEiG5Y}UWύ+R*nqt dZ1!ۥ\Ck, _-'rI"fsz|~1jVd i)CI"`ã"2]nDitL]9H%s`:q&q3Q},* /:Kp |6gX2Z+g~/X3Ȧ`ZO:,z{pa :0rBSwK8ldL@%Ѳw}RO:&doJ+ p&s3m҂&|V,oy48d g1i } #:CnYh:g$IOr(qG瑄lH]ny`l;|c{@!=Nqil})$_ 7B'ccޓG{H Vw,u#4w$WbfG2S/?|~5AJLsUr.ҟtږ?C:'@,Ɏ#T_YAҁ 5 _ޖL EgCMƬ՘Amѭ(teZT;?{uņ@gi؛Fp+H!RSLTZW88ƹݚ&> 31k|N:@NW'Lj?zXZTi}aB{p:jowDgBW?V0??<vK1}CD i|@(̹S][U2[j@pK|Vp>o qP XCBPgs&Z̸ FLk.P(:_#7Vp>oZQ _ =okNW T#ݨ:w׀[<0v&]h[G/D7|!o ZNU{yǹ?Ǜ*hek4ddU,CSY =:Ēux 0]xҁэ|o,R*x"|ciږ#GP%  +JY ;PZTOޥ4rgP᧊qP)6vܛ)]>?Sz*[-6AyMm/=yM=Z+wU@%-*V/.8nP]ZZOKjYǸU&RZ+yF%qMl;n9<1U֊!(Qr*1&1?rh6WlCSSP>YGiދu*z g-Xcj^ÆynVk_<ˍ(OO 843P>{\m(≳ jg<`F䗰m8-A\ ~MDsRâ|~QJfI h hb]A'feH BQ COԵ"#`N2 5Cu*3+`hMSQ< g'P[v2\XRe׃G`%. dNhb˸C",A;˹6v9?\<Ζor-<94ю>55$Q>OHD=?(U Ļä llSL$.Ei4 in/f1ſE0#yWQl.[S>SrBy[%é(k9)ޑ`)CB}$A3#!]UĻBt! ]EWkE1BF)-]q?~}*8Ix\ANT+UFUFY0R唼G]U~2a[0NDz(82|YX>Xa6\Mo D'bf]83ԱK;Ha.s^8'q كV y3< $֕a aٱWݳoS+hpG1 A}'k'd39Vq/qÂ|HG4[ӑm}V߻0QO.!N\&뛻}+ C61pf,k^5g@Ro?yV0BMr%~sL~d+ֵ,T˝Ӈq['8G DK;q-UL D&> :[OzYif\ŧ(20DVY<{z kr,j飳`93|nt$W6/ w)PW]M+ꑍئg)%<8ĈeښRx=!?>8TwHgv^ԦaӨ{T`hc8UеK6a2\錾ar^fsӳ1Ep[,WplހFԘȔ9&5,}ޠHakލhK/m^ 1‡0drj)i[^nKꀴLSf"4kN9&g}Lǟ"ix~n^f~xݷj&르>49A_i6?ƒ?CPj!*0I1Oi$I7ؼ A\<.jl( [Eo[=Zć\H?pnihS/Oe 좜)gVeXecx/'̘Gg|VVνFm(vAҸbIX-uŋcϸz09_Z=1{16M}쉛4Fd~9ӳWRK.qH2~qp;T.3`Eas䲦/≽9':>bXo| 53z 8cT7҆-B/0+ aHn鹳:tmE;iZEijkྗ2U g&@>=j# ź"5$̥$fK夗=b% }ш>b +Uʩ+#ovUCxJмl/m`OrUG5f'V]N$_A},ݔaLTJq M#gȉ,4鐫C !ChmrWn.1)3~*TtmX1]F3g@c;k,}q,%iPh(?@|N}ǔ%Y7/ByTxJ8`Wͬ?++W-L82F^r e;A"oSH@kd,*-1)ҫ yַ|AW(:VϾο_-|Q*CHLN%L%m/O+9RJӎZe9n31̱v $Tq*bvr7kn,7c܈ɟ1;hS=]K~ ֊ zXd"=X4[ ⾅5_S,[2|JX9 z #h` d)|*5n.OTnL!\%荲ZBBT%Q|xr(/V]}GE-"h>9k xS 㻢+b*i` (*,玲q6&[d%; @#GLq<{]~e9d'CYOj?<0?vhMmd ,ݙJ`++> Fn81Xfa?j[L96J묈\mK? #L;^Ee_ RJ Vud<.#`%\i7g]c?&lJj{ub^羪B9H}kڬ$k4{wЩJ-t'AQH>czԑz(N;.-`˃d_N>_W1c34>-1Bް!WJf'/hC 3 !S]a )~eb *B)|63zMǝ9]uQߟ%3u3O-䡗nZ,}gIa~ua;w2 ~4]+OBȭW$%f+R.kziiC=ZNȖSQ0ðtKDۍm(eg*q7>sSFHfro)lRFLi1~ayWqP+`^rW ޫ ංwO:ȹ40o'TuǞ-eq AV/F^Ka~gVEQFEMee62&']8WjޥzD>)W7nٰ/ rk?~iQsDO ꑤu9j,5풯c뀚H-P}t; L{!M]×x9]`Ֆ껬HRRߙ kI1;@|apryK]l-ݠBӾ$eu9׷[- ]Nu\WM;Sxxag"Cq=§[lJFh+H%Dz"bPbJyCrn_wR!/Wjм/~NU/vt՟w aΚ#ti.oGT^}dJ-gQ~cHkoK&ͽmK1NjG"Nh >L}a2l$ZbSQ͜{V72p'OAB|0:}&p?w~Iǟc-lKbPD <"IG'H\~3[Qg)qq 566 8ܐ/Ǽ&dųmtfZe]$0 A}5xLEJ` .#)LAY&lȼvȪ v*~ %Y +]ا%[`d20~~bƴzmk~cEuiܵDE$x |'8U*i>Vnp̾6{Wi¦GE(Zנ\K"*nlkRCmzY֩78I>*v/ZT@zZG8? w;r86zЌpr`>$}33)ڃ+QG8(AFPNaOx낥1;ϑ뤉܅Co?eƸ0eTц0݁{(cEѫ@ބ&uswkW/x_j=D3V] Ky @'?UgN ; #Џ]Fyj*JoHLH-d,/E/t~z R-MUW UG!eow.Y\6B 2}2\// nY{991; I}GܘXPڞY.M ٪^|?|R(vs"GU*SQ9]yu\;7u g凵0>A]hH5hTtoIHoLAܹCnBAMX5ls|<촩gzM`6evQIEIr3~t Tla=rppJ8mު U= {C2m$"x>Y@53? N( uu39hw(%5ټɘ܇Gj(Lr t3"Sb:f6F3f9$iMha(Sq!+nFh) g濆45X5]0gÙzy$M݊;V g}>.vS"ɬB cP|FXј 7P&_=5%Rp.TXAw؃Yh6ZtߓQBP~=їcPnjh"Ѵt ZSf`YhSZŜeA*;M2 xU';u}{\Jy+͜LRIT6EN{.׏( ZU{ "M 哉Y4Auۙhd&/Tp\U ioBVC\78S6v(q֓(B;l*NU4URz}uR}\ pB!?vdIvK.h7' מ%'je!z?!휀ŷ^5ƾ~brS8J(R>?xMm=b wwvȀo-+PB;dr4CGʣ?\$N)E&_P !ps#D];==X3V Mgyb$[!6j@x/U?<Ήݸl]fh {1 g[qV26Mz.7̪YX-3G% ;K Ikl_ 0y~ O6Y+?ֽ/hnK >,#h@:`v1C/ 촫=SPer֤7[@s7 ^+^]ئbnWdeFѾkRuq"eb~yX1& &PC0vR)UÿHz'ĭ;@w &#wp&| v#| _ "L$M9 aJEJCc1ðnjzo" x34聍xK&(M2&ICҟPDRDoQ!; ["S=GCxnks& y bTbi8Z.n/n80}~Is(k+QQN? =7vB/HZZ4Csl>xJ4]n#7׼QFF5 bVkd$J`Mr=)^I]Ւn2lc'w zWk zϲrzmt޹Rp ; kVc."`.c{@*YpU+t=1@D eYdf.>U'~>צBI~cgȎ•1(|-K6H7ɧ͖FI M1뺡v~5mkxȠRp/q=Xy||zB;HpϪN %>i7GJ/8?30M14Yr wk|L}¡U[ilua}[ 8ҢWXf! |PJ 33Ό(ZCflI`,FRtGFIz:qb'GP(g|R<nVTղfO*%CYپtږ o K{C&X<\3rn3i'Yz-7;2;ef-f!WwoE;tuaYη"olG~N8M71ȷQUGb)݇p}D{ga̳~ xsW/}vV;˶մ8$UYwvפ왌JQ^{A0qoZK[r|w3hYca#ԝ5`<pdOz] O`O.Y 7Q},ܪLr\.$$,Ѿ\}µZP-p0꿄4i( ȱwT1;sU YIlJ`q[xՇA+ g? F氚4ij% k 8‹aWfl΢"8:0Hм7M/l%:Lͬ}\(_te*Ӷ߾eo4<ƭzCW*f+#פ[q9I}RY nQ(Yp}X4c L}OyU:cڲIA\V(b"@­naT``qoD]L/DF] ȕ2p"4xߩ~"UMswn VB r%q@pz43'yF1GAږk UqwB_LXR~BJQ\()hs t ю1ֈC߷wMN0ĥ¾0OSl3𪯇nd# _r'o4%,ߔ#E>N6BA˃٦Od qL VF6^WJDpik [hh&ج]rMLzAtN<Y2/ZR^tשLpJN:h\C[,q˕.H<_'xtgIYJbuK#F.B#P4E.`V(sqnIKP FЦI9sZftÄ OoHcPN3>@e"H IH$@" Nh-Y)|4>_ :ߪ:{VsbA8u:-*\6-]{#'Ws1& wTpx{KSU:܉v@)g+R t$ãt5z ; -4Z:t0!qx6~AUd@]B$DoH6H#Cw1bR1aymVg.6>)gf*) e|[Lx[ zlΗs#.a ZFMjZ| 5v b< ;* i Dz3%\/3 :xXT1v%,AY"f'h͑;ʁ>k^ߥffpK|*!D %ky5SPcHXc$(( k.=9ΫI2= wi᫟vn2we\Y=|߿Ъ%Z6qFP_XPmC0`HFVv|97N9+ f) pn&p3 ~`Ev3ds#0;k̦~}ԩBU{?d-}3'9 o ۩Q6>3++A2VOݛ8#h#!i y=xsle1;g@ζCP t2rɊ$h`o%K8$ew]~D%~:ra$z2 _^X7Ale"7֟g f?!Z̸(D㌓}ygcdꁱΉkOH~\}_B2[F,{"EHo ^H C"CMQh][ڸ 6A;9ɼBl!"/^Nŧ0>Jt6*}C6UUٲWyM\[b.9h-XzM_1['b[𨁍!kj_. /A"A4a9" ft {mfZAT^ `7]UDJ?} _mNq?s͇YsV: m9xT~PPoY0 k'[x-ҝbGx7>髈x9bB7|wӱMfUܑ#Bo:W$6[$yN)ua2ҐQY7y^G UUI|DFq˟, [3Z8Zxo.7u,#<ӵ!{6&* B=SMHhj&w99OtuIؼp <*[㴄r R_ bUgz`G7`asbhc\4қ^APʼ|fc[ڍHtdfzUi&==7kuyx0TꪟXQ;PȊch5.Ylu9❊^0тnc"Y L:LJ,` EDIE_Qr$["Ȇ9GT=axm-7K3 5HG2:t}ϔ2CiZ?I4ϠfiaZ&I%ΣD efMR-wge9Sx᝝M2_.7Qf-lEk¤t{OZ2 #Swuʫ})&Neٻ߉#N0 $0b8=S?biQz#4(p կM5P)LN7"\ÒﲩT/Rbiy{]xE3AFADG4qBUAWƐn1CZ]hB Cbt b2C&1ÅW{}f9- Z)_L^V F(XU{j"i#`tjvajT{3v&:}pg<9.5P;~"jN {Eٓ]u93VqrCF}>1. t"9R=>I)XDݦN u\,{^|'*۹82I17|-Ç@Ȳ eKu:k2f J.(*L .1'w[LܙI1BJgds2RmPJHP*OŒao*ޭ^˷9vUReL!H)hk z4x7B#vs'9ginJ3ڣspaqw.睿Σ:}Ŏr{ =k.rW}d37v?OB}I,LY6^0h6jrMr)8^n<.(J@]YFT3Ybùwr7G7ǠP3AIaq\p/B:b6$>q}hr9)Y|S|Ea5ӎRY Y7n~ .~wwC4C(AwÇ R bˡHn'fK X`P\\LȀZh?)~pY?+Q;vؔ&':X A߲h0p9eA+t(iK1p%^2F };dSyGꥸR'e/А'N[@m6] kP}ezx`{Y~.![CgL $COf+T.<p<abD,=1*<A_ 04Fy3i _ѵð>AwJ$bZ0BQU~Eȸr,Хz/tP[Gm?譋7V%0RI&a$ <ɜ&]Eh+hrjTP=e> r+kW[WpkݶxuVv,d- ]y'55ZvZC,Xݜ uB]zU(gF[+NʂE:曋e;,L_bhb' R;IÝxgU%W/C&Lꁷ8q-@%Q'$T`5ԊS6TN5s >kVo0[K煎ӴN o{+ĥ5c'd!; Ju~䆌q3zMWr֨W;ߴDux]G5kM݇T"\:M<aAa{A+)(- |R'֞ Sޛa|1!ay>*,r*']Hʣ%VJ8O>ٗ?p~Da'bIK[Ê7W ,?Jk 3MgC_HI: ,殮 l4 [G]@1yBߧ}qJWXː'nx uT*!#L; h$MuC$\; B~4a3'=*n6M?ƃt͢ 3lɇ:C 0F Ԛƚ4eX-.ikCr"rF8}F iE%u7?.@sI2ݏXN2 I.40avPnHxHPܾ%q*VKuQb576Div2 ɶݦEy~Řg71cґ=) f{_0lqK*IIT2p!u}b; * ӣA3&do@+uim]±L`23bAH㧤$ӣMR#F%+>%/g0|+\Y|+^)}GBBS׊@3aZ پ`A BNGP#HE~{$ Ҝ"IVi޳Zlud'0Z_Ս\{&LVa p߭,7rN':N1gߙytO/7Ymj2SץW @SCGU eF"%w [E .Gd;5'm^ b^k^yڿ r}h)+ mWqߊp*^3`6,Pl f]ҋefCM MҕtN4wy=?ӹz0j`+=T'=NQy/`~WO/7ae=~IC|6y Ez1{j j[p j^RӿR:RBHeչȿ+AV7pgV,Ns t`Cȉ"֛2ëH78*R=>Ш}U&]cb! RrmWOg63{SvVX鰣7`'C^+U )Scٯ. fWZX\Ʌps%M=qGϣ(%{Ʌ׆jkpy ⩵fkS;c4W.2`CdgVe1È[.oRiaryf 65`N2BoxO}p>^Y7ggIPH<=ژ4WKu(Ee򼔿BmEv !ӠDHCDM?(o<=" )VPL VI9Zo{C[Ձ, 7dxPyb.C8g 鹽5w{ le~N!_6 tOWhN ( n7і",{`i2\2e?޿LܦZCe M@Tl2Ll@( erԑ))Yq9`G v0;᛼+wï<3'][%F9 P1 TbO2b0[H]ʝ#0-P /Iit Bh(oeH>7x56?I7mSv9T{@;5m&6 (e 4 ĝ:]!0&/gYW+sfN!p=cǪlUoQÙ665p;X` /S/r bB$y hs5K5]mFFEC'XMO[Zʓ; `vx^nom8 Ѝ=b &\J* r5.洃)c<ҧpBxD ibU @gxajtJ6'ד;lixK = NjnԯjNhG/_>EZ5N&ɣ'fǤ' "u=Br@ ޡnyIB NV0{׳%MuCz>ݫ(Wjx?DVU㤺X |FzG:Ga2 Ё([ Vtotca9>uoq.&&CG+_/>䬣w rkYJc창_`7@ǘ~O8Of`E.azvͩsϟx &~`PAc>Q'Wx&scKɰ.M(؎Ye,ޭN GHS]S?.v*I26 fmAԢx[{0i"Tv(cv䁣,l8e̡꽁pM`cxf-wi6&F  > '` fmPxKX@DmBftSǫ,ΎfbBܒE8;RkvjkyCn!k G@i|c2tBʮ/Gb .Z/fW7v9LFb|nf{~r᫢ "N?o1L ^pogWƜz"@`px*+6 "}f ?Z/ \w$J$yL|3V&k9/O>WS585mTcJF^x'K,L:CdtʂYk^~:)Q&9 x0#ب,@C2 4UՓ.j>,}([5& /02L.gԯuakf ;¡;!S|齭ˬ_*3N4^M CZ08D% ? ϋD`T<&=O/o2}9cblp_~nE9xa[P :o!l@1fYEw4Yp:aaDCC~3煯VQElX)gDzD!ɪ#qO7roupUʑ]iwĘ~dtBFL&jw|C)؉? @73@>rΫ-b[_Fs6JO{'0#qy;;k:u'e'e}5Tn`4VyR_ 4`s{!I;gN?rP˼"]cI%UXk5UrUĠVxՏtakkU/RD'ҝa`2]b8uw!%s4zYϑT޲'AƖɽOgaHBb,Ʈ``0tX-M0L=c(hJ^܂%8w_e^fFEu(pg1 A\LL et/p>kwVl `#Hhq ZQsP-XsNdĨ3,'A2= U]յF>ak 6s^G$wO%L]5oexkHۜ%YM{]Wk՛(PD3oNrZ=ԧ|w_Sg!϶a"=E?F\/_P[Ml#*<}?^>N'NyP{.)shhrEWTC䁨v. :ڤ2*8aDJ lBE Q9A⋢֡ BߤrM z^fwZ$D 4fx.M^8B.Pcjz ,ʬ> F{h%i,DWӑ>q8T !O s:eVCi ){y!yJT1W^ H2c+ dP TL "6}]JIW[W̛!_MRڳT_qFRI2U֪C/9sR}ZH?~]nhaћE1ghuQY7B4[!stvqu<ԁcր I\ں"8eY̆LA#ҧ15UՆ(喻0Uma$43,(eB[eO(g/Q Vm:ٖDw8ù|r/CE86y5C:+32~<^ܐk7X%֬Oq%9a/1TQ#}C;v-,罗1pߖoL;R,#~ǘ(K>Zm␺b1iDZ>R і!^DfPdGDwW_GŐd9GTgyAv؉ h9CmRYkv~v(o3l|5ܞs߮ @nrOVζ\I&<@d~OhɌDc ]v౫ztG,:2?jDc-!wșh0fH߽YNVZmĖ\W푗%E7XBVI>||B*eHo˲}3<ΪOsޏoԠ#T 7ŭz3ަbɧE!AƸu,}ZKu SgoNy < C G(54"OgL;@AiEAIg=] [ d#Nkױ8Pvn ?+Q֬Y BQ+BmW yIrKLg/C<Kj4Wa(c7S#0f"J6aB =*B?.8epxhSJ1 T!RjTTTxz~#fv(Vō5Z I>:`k"@ihvBs yy_jL봤N6|Yb f2by-Tـh?A-hAHwgB"&LðM@UGd$RIVLAsok]ٱo5VPxb @eL5!EMx ^ `zq,iC'r5>WɚGF yKnì1"ӡRq QݡȮ\ȽPRQO6iLTr%m n( jN "r~jT*g#.ct9ȧDT { Yw'pvVP{݀Y(Mj4}A~4[c/~-& !@_ga(Tg HPkc6&7J:5.Wv=UvPk F*+…Efe]| z'@%ʑ=ej͗͆J~s6X|ԵYirRN MNT]q@.R-st@}C-:",aGWuMFNLX#"xǣKEFxZ5l;~K}DjnoU@gPV|46E4#σu0N{6OSJZ\ٝImt.գ_s1;tK!~`/-[FI#!wMfْtw e }d zKĖl9BԚ: pw5"'ز!> [~B3Ӂ]L@ D}\gdd(]d*% jl6ڶa;>MXr JAjb)ȇmB!qD[- ` P_UC H4yF:B^r!&^:2!m,2.8Ϗ́孳=ww~]a{ ":z]@(tȒ|gd8Npr} d9 IQ)i$マAbFt/Y[iM>:e) xv}wu^R>V9vB_-kȟc}*r]_5?3.r聪a'yRdx93Vz]b1Qć֟yTcuo@;\Xeh>9i}$z PP1奏Ab.+0)nOtvZ?}7 Cf1BQϟ&oDvX7gout%\>myITɒO:$"Ҽw1hoʖxxh+>L"7 Q1*cumdligim{>*TmwMW:dV^u&,8rD-ߠ+>NG 95^]ǃə T2-Dܺ氖?P4st!P@: A{/eXFԱ6٨σ2Ag=DCXO^0Y*mE^^a\R~Oj'ϳ2K$G&QHߵexJ&֗A+lNӟuJĆ͜*v ;J`j!fM;_ki00'źs3-׫*2#F)U ;5 G2ٵ:Mvu-pNo)h*׽3îwpBbpH6n_㟎q)`UMr (ߴ Gى *]%I ݾXf,ErpN=?)ЏivJ/v"Д)Cר")cLFAX|a./+}ҋU|z6Dw[CcG W.g$A]$a*XBHgm(K=2q Q&(ۜVGor <ChMB'Âxb>rLt)bzmɜ˾1umąrp'n7 SOJzzP͊Y|oJ" ł:|iF] g 7f:O*ʣ"CnOX"_?!0eS%%#䖭M_O>],b:F|bbIFŚIy`&3p׷~ /?p:Ģ" x_hy?1-&8 j]imRjL&! ΨFLNT? `0ZeǬye8 wmb?8Fw",(6,}SFCiZA<#tɀwB7Ij$ " $2J($m{nMT }> L~~#OowAteyP>N^ZiYM.f_-pwx(a)XO7 {:d, &qbPFjadr}"@3 l{AeA۱>ޚbɞqYwW$1_RU7boA+`,atnO=Zb? 2D30峩م~2YM Jy/qY0Va8*AQz:>R+Z5n!Ή3nj"_)#F{]A 8a?@,'5*R|=14,eM ";7ϟ.Ruy.q2TLͽ5۶i"@ڥCډ&DC{F ,b> hbؚ5r4vB\Xv2EKåؽ&Yo EHr}yoY/g$X\Aӄ)Ul{C{u TaZtSV #xf5'ABjIʢ7X5؎рy4܁e O`Yi'p(R{ǒe?諿tX2}0E*$+p2dǔ:A45m)5A/N5P_و> aqfcJN]_(p!tK z&6a!x0'o%n:ێmtlPhŨ8A,7J xv^G".<&|;̥A\|>h`1#R*4D{+,>* hڶo,J؀|.ۂ |z>uֹ.y J}́CuD͟2вUD 05|ۣ d[=\v?rЄ(w:BIƲ=*3F]un%aF+߽A>DX8I]g ^?& ^P#G=|hj#5C$?spcJFD?nS[r~׵BI]n˿?u*[`9 -OU~Gnu=jLfV`b0l;Xw㷋gHv٥-k`ZHZrR hnlYt@V.RH4e˦_gF\^@[vT8B䕧^ ۇ~ιSr_;9y]Sn|ڃ;˛`ᷧrWnz@)!).7绖مwqS3#j!0R 4-6VU8%{e~Aͦl]y>-$^M[]5oRR+W IC'l3ٯ +qe* -j zLvw sѡ"RdZ,Sǧ3@⎯s]C"@+<̇z #"ZMۻmȕvb2@"{'O@uDܵ5 ^-;;'vQLqCdm|>`UoV?Y 9T(`@\PyؕBtmioJhXºtY^ 28AJfY-(T%`-9QO0˭1y33) !QLŊ2 ZxvQ_l>ڬʷdX'vuJ#"zFؠ*t1=YE/]@xW֎ S_xS#k] êa_`IZkmSkn-16e3jtpkRXR@TU|§3\g=;NT|.s1hWA5'\@qx&YLkhJ=tVnC &;Yt͢m*(l#ahY"6U=2s,5Z1>؇ _~ݫFKo2:1^6=RkGFgƕw3<_/*\7r} ` ]=GND[2&WsʐbFsc%4; s-8H`y7˄oK pў!P2P5xKRAP{SWTf.jgIJ֬+T!ʇRq)8t3iN/ =0pc@ʻn$|V(aV|V@$:5#*I(RpVqDTN5QQud ,kwHvƜi~$!eZ#w1"}r5)!a)snsX s~zv<*d;Ղd_@pJOwݨ0 CQ $\G6oQzJRq<"x I }Hۉt: $QĭQ>:z(w01 E]Y&iJ1t@=g|j%b% &3d2 L-;k N% Ely!u\M[l Y2D$b0S{ssǸZ4GvF7iV{(8+sZ(8Dvh*8ƭU;'7hki3]<-*,M8۵i6jTI{^\jx6ʭ2 -;?D]CsR^a8 `*ma:c[`y<9вOM!NOhES;ZoH!&^롓qGƷ,iG1\sč5ޫ$w1s_^"\ac?j[_[)d~2)E_U)Ym0'.pڗ@;F;={>gŝn5s(_SO1tcE3ji1Kʰtk͡ o KYM}| c,3W^/MQ;~)2_~QMfOCz._OglV,+nFۃR(W =٩0\)] bXF\XyrP#Yҿb~1X ݴ>{1Ǥ|Oس`,Vbeh{@tfm[, .3tm=4N(w?I|QqIS[#:k J"^k]ZO cT\ Y둇LlVHwd!ßf?Jăx `}f%N d~<*د>K 524ZLdc~@|DߣX2p^(ڵάO2=S)4jszJ` 8lI{+Ṭ@|gk7abO犃)\MCRuQݝL!j!#vb8Hs=ʕk~J'ŝ ؟bL;ohM{RPˆĀw'I\n_ϿEN20ٟėSp^~a,&]`YL o2 p Z%\PI#nw<ޫ+dm]t/"?Jп4"uuAp0s%St}K)dsI.v9']C EA|rKlrSE&&Km?X:wG;5PS*Ap .$w(RcMk0 ÞQb~KLfs"`>Nl[F("֑6Y ԍ5q!mPh˖y%MlMgMvk^|aEDBV1LHX*\ :DWK`;0WԴY'7Ε@fvyŅnZ%BXPD}=^]~صcc(Y v(>BŎ3y^v^~PfuM5rlοwV0ғJ˟kQwuҌECQu=qpt ãcA /B&o p9J6#}P6]ٔ^gy$8`QxhZ(]6SWۆYG/zuAMaf }w[JPSoT NIn*slW*P (%T2\NJOkHȽg I/9ݤ@Fͺjܪ_>:gck9gW\.YueB#'r",TBGbmhW-P}7%XOΙ,θxR(Ȏ.5k^w,rąg2!D4P8&;e{3Va6͛f0)\fAÌQ ҸyD߇ZÍv#ùVr~Ԙ*NRi RǸe8m Vk ԩ4@SERf vn偺"%),O #O^6 XSek% LLT sDb[U[3Ox3TTV7[QB0!/bkʅEXY=meT/eyȶ-ǣ.ܲ(EF^Quut~%#i$$2`cVիZ ޶~;1^Wo鄳i5| aE陚)+Us$W(픦5{)\0S.&}t%4F91 yF1 [XͮW/ N~Rv_wn7%Ud[մJΆv!f&+^FKy/oB ']nrH wo(ա ɩr,& sRe_BѓC^ԻX|%$wHf*_lD3jriSvJKUeOwZݵ[ĠXYD"^oRA'y*Iudl h  #Z%/K )z\+!lp<^hzr"V %۲iWwP6GfJ eaGDf'!8M+Vo!:}iTg|_zI0,H2)<@GQᶍ/f:֥ATD;n0KxbTR*Ջx['$d6ӳњṖO/a҃:14!&M=)Mr2|\o>(msUo_*f2Nt)Cw<[ }8{7Fܙ1ޡJ2O&W5C-!D \Y JbyW}!Av!{Z00AyӠ2FȔz4q|"fqt5rACAD˄P`x͗g"+C#C)p-OӱAQ F>y>!ƃ7Mn$iO32mVNl[N uEa8°wmAlњ ބhA|0ǷYq_x )g4]B1dǶWT(D?V|7 B.pX">O6oBuQIw,h"rњ|_ 7 "aB81/qzRGة9Vw*,Y"E*gMǵJx|(o^~ o/]E,Z$g_mu_nw*uL;xuD0g0̊fÚnm«艃U'@R~ɳ\:QXē6㟭U=X P?7<[H.l;Nb+cJi$0ݖk MwA'\Q/)3`.cZ_7MduTI?g%['c.IAjh" k36wʤ~I!d"uz{M+"X2hz=1ӐzIg"z~ڄgX.K.;:(阦AwiV~_{@4өrns sޞb*1=]0"5I/Bih?(c%c1ZhH?Ru;W;raR6I$-*U2mZzGbAHSP'NO4V-I"RINլMhvQopa{kl<-m/M"dt\iɃc#Gvu~xL'),:R֧ooCb3n?K Q^/;.ms7 40?S?MZrYdP^U2y_Z)AC {6:(YD{BZLdJk,=G,] c PKbទq WVtPHqg#wf ,so!UPzJh_ўLT:N?t%ͧ VCl- ɜ@1bƃ5r> Ԙc<8H i f2vo_n#NC^ǂێ!|n;\^|@q9erڜK-_.4{w?|;2/h]n=B.{UE 7%i~ ?:க *T:'֊w4~ <p] L=?Jɗy3:wlo(UᄲJt{0U䩼vhƾe`}Z\"TOAVar8}U }tTR ʂC`GE0"XB),Qf}@AB#MT{eeF#xmB],o68-=N*%z Q f8p#>'qgʥ+Zӗ]K,'ڌv#?t#( '8dbkh`@˼EQ}/R_YBj.59b_R(?g&JN%gPz㉾sBhR nM#+ᅅ=(;yћ{A!yu;ة^~QKK8]j*L-t_Go9lJQ|ss. -(SM DڮG|c}>~KRlli:Ёsa )s{ &)lNތ]Ge>`?!Jer偃 vC<*aK-h(Uch%#=sV%1𸖩<կ57d ޵9Y|zs{|B?ݴߘR/crE^ 9.mtAӜ͝­&A>9\i(h_<K1e'm J[N1&`%pn[XFIԈ6fWi{ǰ)11o`rba#HHI\jkOt:&Cl/|r5w3v]` 0}◲f3^mLG. Iu~s̅'esn1(712Sr`'wkɤ9|N &n0+ I(q]$&É_c{+ARF4&U \8p/&[XIn Fh90[pO%|B9^a8!y0̣c6\Σ={P5_>^/ RSzԶǶ&cZ8N ١=;b ۗ5@Sߋх}:EwgLvB +k ,#j7*_ 40Orhk ~o0W%8s U kA LZjIm`t .c;A<㸛aT3ӝ:q O {j3< &|'ճ^ |22#72g>sbKaMgdȠ!Q]SZP;e/u Ö bҐ@cBQpqm8L%fdQ7wU$Ȝu C ?rT9yr+f!yXcC[EU9* W2 W|rfa7( F 3rJ.I^5J=dw25_2KsX48c t]#ޠ$WITӝ?eIƵn/8KŒcJlz9 Ha9Y,es"ݻ$`gdT*0]K V~U%*+'9F|!`xdy^^B2E|L&⪠H1*XPk6-(:*Pl!#/%Bp1CtR Iേrz^+?;Y% 4F L$:hRϸN< YYjAG* +~c}"S+~ׅ(~a_Xj waViJDJz3롷>@!{–;@U-|, DlBIGҀPE0v0^ןVA|?K6([$ȵM}!E;қGOP\8lT#IHug`@3Ϫ_&c"2Fݯ)AH{{_+9hR^<ՅNz-\'/SFa%cp;X6FS;3<E'!5%jsfJ,J R,1_CAWU9d(.>1?+x <2p 4}pNmyì2!Ex1fq+-,aNPLou=0]΢xZdO%]j&G1zz#[̣SNUC0+$>v*D\~$5Ȣ)Ws!8BU@!ffiP_n v9M\tIX;AZa/MIF_/T_p+BsBGCg~(D VL03kT`J5j++o KT:Ad U?sDk.DǺ0/DwYϵQB@eWU d>]/Ġ|R]M,Cj(uacg$oDCR'R׽k1o4%w*(0̩g/vٮ}KގkSVF o鬐]_u8ۑZ]e:aG[=5 ;WA Äſ4x{X>ީ[i @*|o阁^'rwDqHHڧTz78)|3VU>nJ@A?Ot65ÈK7G=W.r}@WzvBEveGIj/PO@ Xt;֡揋JeLGO?O^C #}Ru G ]f/ UALusY1]u]|-lp _C0Vշ&Rva9Uat8n>;ُf5#()P|Zm,&jEbխ1Z 21m{6MEh?UI2@#a4fY" reE'☾ďrΥWb~1b7FbB藐xb z6 m f/8liNI)-8SLwd&z#FƼEw@ng_iqCN<"S2Yf)]IlL4l#h FEċ(E=uW=zT/zDa>g%^nPuyw 3JŽyFjK4ftĮV*բ*!3o a^_{xio[ܳ/(GU}llJ\Z/*)(P 0tk$Ͳ0&=GuM8s6!gNJA}E]e&#4 ^͸Ë^I"Q)o ugraLwWS31Ehyv0*%jCۨ s{Tis$ɲgߥ3siPP%ky*֤Hd=Kd%4uLEwY/Mx/H+{Y<9@FP5#ia@dkg?l1t>< -Ză(H%Wࠞ{j.Nn6JY|6RO͟rN r zE/4 V:^5ACKѕA5[e?\ 5c%;mv=.q& X3Epi_9)mSmoľD@ bNޘaB-D|bsd[!"3:L=Sᡅ>ך#]Pso:׉E8ޠʴn(2[ d?.­e:[M'j40b>c`ÊtoA JHdHPWddsOR*J: b/QZ.s,y055TmTzPrwkoCTFzxigmvֳ~m㪉o$lfol DӮOΆuq H?kOIwQΖ-"6[{>TVL %[k23ynTBHE6Ϛ i 09}~wꢑ Ǿ0>&/|f^ɪwo[aˮ%<猣ʦл&Խ)&IGB>cŹѾz|I ; 3$F5'! 2fjDut#JVz\wjd0LmYVso\ǡud3>$%ᬐ/8畞fA۪G>KWyt#نv=|IuLHiŪ~ߑ Z9^o980vmozP4TCH@93H-#wUN[A on LS>ZxL1m7lka f?hbH(O,H2VWUZ}\5Hu17Vuz3ub,t!-%(,Wfj|ت nkxl맘q/rʤiV5ׯl?a*}6y#WLF;po74*e }= %3G% g*yEBŽr :Ydž)aB]Eư:Gt*J٢.'x)Ł¢#ɰL0giUI]N"TE2$pKwGDߑ&tXcwO^w=瘆amRHk/ ț:S<%3Us} ?lD2+6`OpC.؀eb DʵԀ8(a> o"Jrc߽rprm<=6[+9tI+gNP6N= ӃIGt5>;{4tF8SXC3$2L ٪k |c 4#*GG8tk^B+نLVbDhBxm3 : `뽇*m@+mWdFEi&8 sקb|c6w$"(҈oay_ЭC; $ z>D?g٩9#=%.- E )FE8 eaon>6vÈqaTP*̼IAIs`"X;."bwUʍ@aAOoQfȔ|=rvȓc^^)4XjwwyyjS)Ǘ"8hT7<5=,T*K*HHIq"B~r@R_IJ?H? DGoW5wmuL~d+){!LT yz{B«E]h ?,4N./o4N ebs_8*x4R$hZ`fBqE# % LDEU4yhں>@).L:80gpN=0#Hҵ=CɄCh}z~Nk3?5OEtQV#P +Jlk[Loك'S5, 63)E9҄N%fDR-'Ŋ؆`Ajsx!!Ϗa^=nBk֨{6hCӧRMޅo8GO䇶޳ PC+EHǍj5a6 p"@MJ `&B]L]5KzbS}0U$SMT U|)Q= ΦĪ> ywT\"{vu$I6BP+ӣ1 KN++M*5@GdLsPM8?-ZӉ}5r>tgA|qbxY41x4PtPE2w-R&M>vyOmc wh`aT tu^d"-X:Dl˃uV`p6sқAU!4dy> vԄO&R8WGhor8\aw̏I=UB )-4 8=Aky:K  .Fgg40f-U\ȓ{C֯eMSQpjMY[l <P,=1~Qj] ?|_: (76IU -W67b*Z #|2.i=0 o%X<x>lAus4MscT1 OgᶤV>UA5J&|5!ڃn,Ⱦm(i$!Y%ˡXĮު ˈNZ|K*.smCxϱwǠM>M;9l})'j"Q9KenT;^7( LD鄍Q˸I0\ 7yQf^/`nUu~5]-"U5ͧЂhb{yvsR~׃ a3P,@B;ۤџi?Wqv]`6ﱌ&&{՜儈" M$-" n&'؃_V̵ kj(9QRU6j)VQp4ZwkxV7Cbt;(aOz`2DK1mS҄hWoe+w2z-n)P1n JhVx$K'T͙V/~)lCB \8[]6ocyWHb|̟&< Vu7-g=e'iF;/JE~țT5,I3o#(Dٷ( dtO8,\I-ۙ!UҞ[{:7!Y vqfg*I#jUs /Y9[Hkt8gl#QJ.7\惜-ȥ=?t9YE|{24r c}#k *i.xcũ{,xEе,PA P)-oʢ%qlO(l7"!-߯/o lh؃xE- 00Ts&4TOmG}hX)@hU: ^+uHh?a^q1*LIsײگ5BhjM*@F qm ai0s^' rll=Q_e5/-1$ŪqbP5PIYa^=iI`SP쳰(] }YTy|vi+k}Va4DNP+oRTo*ސ7!3/tɅvfDʊV -p '5xk@H M2Y??ɽСq+bi ^ v 'r:Mb5dADث^c2d'g>~zi^d"ߣNk*CM~LaLm]cvp _DPJc>Y٭Z5ۂTXqc@QϲOpG(x쇲4C K۪MLqۄNd;a~8=x+6@?jMk|Ev;$=KFTBZ{S.FtZ RvnK_E{nN1p?TL:pX*4W)g۸gџK=Bӥvy]FjlKfiSE FiOыw p/6L.K/-j6̄s %:n( GO)2CRAQH_:I[ӕ1Y5uyߥw~sKU嵰Lg^zrjَ{#XQ".1f̡)R$~6ImٜጐU Q˭ 4@BZAE @ lCS&^|@:Fb{cuR ³=W] *=KGumS'-iNn!3?2{:WHC@}mXIJnUH&wJ *oZ`eҊ:? w؞E^ц=}\Vw+VrCԇl@*)N6QKVI5|g ~(Hbf-[d,clAĄe9I?тgE%yJ)S:輳Bıً[Tœ봗 ŘdttMy [C4Rw `ǀ7HV|vQ\{fx.+pǫ Q\[M6Ԯ :ص{S֠}dzv'f%wSLԅeѠK0NPJcyhrI~3m 3CH>(M}t[gvryv?k0O P}O9^&"fHoOȔ/$v%R6S H;A4s~kJV ו@{۵|\+% (0]0N,鸰QG/?^}K(0 bq œ<_$IՆ;X@ANQK ck9"э`2`vNy$mYÇ_rY.ȑmMGڿ7'mfb[fjϵ.bwZNuhJ}q50kԛ%0Ȇal8.dʔ6.?d:4}2ꐀ,qPO>o|z"֢Jay3Un' }}IJ:\l, HVZ"L.__QpX>x*ЮKkƉ'77GY52!RX ?ߠk=x .1{˳SE1/&||Mb3c؛Rǵh|>  %[[~˟:!.\nVpM1g#ZkMFu^.2f|Ah}`EN~)ʞɺv28E+<^WB . <7_[WCn6xsݰՁӆH]ТkCEQQ0v깕B#LE=S/AS ]Z].ڔr WeC4>cVGhޞwX9Ect f~R]Rա~itFy+u/{`tN!f~?a+2]y0FBys)~jYFZΝ6@av#XMoJKuLvj7N[Fr-->fJq"nNQ{,I/K8HzS>Thg"ӞW¹00u>FW5lq{ oQ0oN{ p%2slH4S>cKigrǔalLŰXTR ܰ9Gj.&&U~Hs &1]nدMD<-';&h :mmW5, kB!cܚChjCsbK+|^F9wX6oz/Hc=Ff-nbX잞cJxBS#geRȪ!șҬ3V}ޥd_8EU)Fk6ʹ._n ؂ E3VxI])rhF1LL)ަGFV6}M@۾M狀ɇ%MR9\.?lsJpτ3 nˆUgЧyVݦg7p:0R<Ѿp|i hco+ͬg x"!l~,8B= m^;ݰzlsɾ]e.U2 R9c/Lmvp) ƙ!/ B2 I,UBlnKص Xn(3;Zd yQ)^BEʋ Auƞ<`_O<0Zʀ*}%ϓkg$|Aѭu1h jvO'.8[Yjk9A-hxY^!/)d%aO~j2`^u`OcZv#9X _rIpнT 8@T(ycksJ҃˷HKM^]ɧeglHU7NZ_  xX}%K/= ]K9`Eϗm+j#{2zaR ?#ު'bЄa![Nw c|'9ri']89]@O6+t;ͱ;BoTBK}3HX] A .gYNj @xrMΧWvˑJA`{ ]-&qHt߲0P&P kl/u_T:Wø/To , CZԝ4mrT[V LKrjP׻L0 wd Իijj69.?ðq;2YmbݖwޱqIkjv8?/Iًn'S8*E}:4+Θ 7j>-Rc @!S[ =PYwŷL8^[ %[)tx=5r:WO~?ۛ EPxfT8B4G%z^jdL$]E4dy ?i.5ˈ),VERqphQgA8"#GQWTl!UcXz:vRT#&{A% = 4'f>f&HFmg U]rР?KB1N7+ݞ㐦!h҇t-铏a j7'&> _~':RDvC@Z\|bQ5Fd%3;^͵nӰU?`.}8g$Ots0~_ܗtLnY$T}K?F+l\H6T).E?HS][pހb[{P()I /Dߴ0#c?1h+krK;X3E7Ƌ"p\E<+eW ,nSm8ң 7lMG*ݫ| $SsITʉ6JJA@gDA͏P+I9+ܘ _Az~Irahъ;uxH&NFoN(6E ,zi[x%aqTh6*"?~/oԜR:AEpYh i S"vÁnӚ $ yWBlpY 5F +r0qTlu4}8$ΞfP7vK'lh=*] OSm $q2 @=֤"D/^4M>Á"nVT/dubN9awFɦU/Xٛ&'AӒ8Z9s/[ҭ]꣑)Vy_esv|aC|6d@N:?hI sڋ"ǥ:l\6rEK$87(GN* ν74u-ZUK5Z[-iCK\m#3!E ĆJ|( a rA(C-,QgŒ/M.~!AүsofUΣ11߃VùnZPޞH4W8#^$n"XTIq|?u7OE::AP1J2C[k,֜ۤeUi f괃@k@mCa6.Ͽ ,CP]#ƎBx-fX^h%fN46}91k7&,״az~KMaG;"}@O!!ʊtQgaT M!׈^-kU$1W~-c!-mO]@N&gM]MPpH$ .dБQ+0$4$2y-g |&ګ^ $g}6^ftoYVvU,RVv4ŦZe5@j`Mѳ\+{}Ɀ{oOyȧ #: lȶYXM_z02PU<,uj6&Tw!:h㬢J}GQQxV} jf)w~4ng%Tk"s+eQ.^=o4ajInǫ|%¼,(Jgg+ Sx@V᤯,HqOOrEIm?tnP~tDOwW %;v囝moWʄ AgDwĈ[}밍fH'y>:V>8X-@;L,|v%H۾`QnlT|E|$eKxE!|@ m'HX@{[j";+ /1 >m^ hYB*0+l[~KW9V)c*]`PӢϦkC>`qރ(O~f43jؚNIG 6C;wj;ɭ?7E¾ĐEe7/a !(CKQMl[!޸&0:}g I&fZEck蒑 |B_(qΩ\""KńHZ0q=,8erzN-wlH PfLZDl̉{Dza?)z3[@W%6pI/Fu}a&TɦVT"6H9cA9R;R\7zӅŰA|c++aIpF}L *Y鞛HߛA?R3ڞ`Ӯ!qF$t>_*  otrkg*XL8bjWߡ|俕4ܑc^QPzN0yE6m.]Iݨ;31 > ڞ2/3c}(CNW;UkS( 3:3?!^`OD@f.+N gN>N˨GCHMp=(?O4e"矐=]TH5Q{t GH*-oZ]LAT@OƩtq8ExT@f#vG9)IgX7vI5kRL'q3RCdTmƂ:Cɒ/ 3 /8Vv*fCwEҶ*FvW9jF(lmR<6blΕ7FEe%)`"Φ2 `R8~)jI.g;s)p dWg'eÙUp"Zo{x̐ZWF_Zv=: 79!c`s᥆zNa gbn#u+F[r>K_2)<[yX?9ɯ U %y,m|zhh*BNYrYҳ^ٟ:`O^z)ץvҪl-}NI3VR7oO9 Z'XϾ-a\^-laF{e$4qڣ-P|GhSjlL@c9Go٥Ai;8 HHi06tP&2{5mܜˎnj~M .3Q$msQ]0<nXe& 7 \}ca= |I00B9Ի}< 17Ql<,5w$WY9L8BX sbi4Η~MT4lxL8s!#c_"9 /W(K2#f eQD:"<'BS*@}69*(Pk_˳F˵^ͱ8xM+NۅGYUlʙ\ gzaX5 v4ٙA@k=Cq>lUQXuK.BUY>$&7o?}ꖨ֧3M XBpsicd~V<NN»H%#sG? ^6ȷ.0SRM@0 =LQㅹp*Tpiȁ)"‚[^i]:,Sĸdȩ8䡣Raήk|5S{pZt-=WI>X/'qMTo{ cT-} NrNbcGnp,D e 5B|U/(gЖtr5vhsґM ]J"vZE3n{\k64@Ub.ms##I?Nc'kjBDQE,u"N${gMg(T4W­a1U&"< bT+ uwyS:zyIƆϛCe5'YDFOȘC(5?zYwKyrT)G]\BeyRy(lB{4c985NVSm*z?LˌzN NjZ'}ݝPp.Gk'AsOM"bqڵ?mrO+W8WPv\ dm6^U/A`Ǹ&u{ #`XT=x".Xb' ڶYhe3+}6HzO1,v;rG"pcS 9=ȍ7 u5dJ|>&{M]n PgIщ3< q!@ayzfxql-(l̷  x_gvf͓ 4D3R4Ȓ<2) C7%{N$PCB2:D*pcF(?kYx)$?bSC>rI(NdțwEŔnMP d-n'JxtQ]3EC[80^MxBuF!ϾglK.;ˮٸ:w13i/(ȸK2' b;=g܇M }H֐K:a ]D#U&Cr_w` 1HdɗY|z5:s0Th\ ~nOmo"Ԅ#hCVWA&-]NR#B% zÎZm6.` WFmdm>oQ(Y=Td J7i_>0gOwd7Ly~\Eb~ 5ճJ,\oF@o>Aj87oD46!f`V M~l[$ la?@ͼfia4eRZ1lZ۱7{ TjFc퇄4 l. t YZ