libselinux-static-2.9-6.el8 >  A bU]?XT[|=}6x&Gs%|Aᤣ2y%aEPrbx>p.:#JJ*%/|Zŕ;,.8+ eO2{ò܋eDRGT G@}8b`#/OY67w2 ׊i- 1y"I53 @hBYĘ;#!)[;} d~̞*-o_ε OK5ҝُOqg"m3+v- ^!6}|fFQ6ȔIHj]l@LVN2l^?wjO"~d@sh%ѡ<"e20a5b7dcbc526bee50524927ba004209158cb70e6fcae4c91795f36eb55159066403cd4b54b21b69ae63d76f0c71a753c1ffe4aPbU]Fޫ>! mد{9?ē^=`󠑮S=}~\zЉcs(KXcb ]}&<P3&wR>` 7:")t] ګO:'>EVOyԂ?)i/l-"L}XGgtc/f2&S`f/9P @C'䷁d%CI[0^#0};4'Z]=>g8W0cgZ;;upj} 8`LH)Y[eMS* ,K~O0׿IPh2+M-ߊ.x(MX u:;>0x9"pK"pbCm9 .yl|뤳Ib92Cb, BOnim%Yx-p9ZL?Z<d  E MS\` b d h    (8L9 L:k LGX<HX@IXDXXHYXP\Xd]Xh^XubXdYeYfYlYtYuYvYYYYZ8Clibselinux-static2.96.el8Static libraries used to build SELinuxThe libselinux-static package contains the static libraries needed for developing SELinux applications.baarch64-05.mbox.centos.org CentOSCentOSPublic DomainCentOS Buildsys Unspecifiedhttps://github.com/SELinuxProject/selinux/wikilinuxaarch64 b5858f6d418483bbae85f51f50552ac23d9520bf78061826527cebe2ffba78ffbrootrootlibselinux-2.9-6.el8.src.rpmlibselinux-staticlibselinux-static(aarch-64)    libselinux-devel(aarch-64)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)2.9-6.el83.0.4-14.6.0-14.0-15.2-14.14.3b_@_l@]X]@\@[@[ā@[ @[,[@[Zz@ZK@ZZZI@Z@Z}@Zz@Zu@ZTZOhZfY@Y˒Y(@YJYV@Y@Y|xY{'@Yx@Y.X-Xg@X@X @XN@X@XXx@Xv@XJX43@WH@W9W@Wq@Wm Wk@W,@W'A@W#LW@VяVIVɦV=@VVii@V@V UU@U4@Ua@UQ@U8U6;UTS@S@SSShShSXS 4@S@R@RUR&RʚRkR%R@RMUM@M@M@M@MlMQ0@MGM5ML@L-@L@L*@LLq@LN@LF@L$@KKKrK@KKqK}+KTM@KA@K@JJJJG@JG@JG@JjJS8JS8JB@J@JMIܑI@IԨIbI̿I@IV@III@I@I2I@IcGIcGIcGIG@IG@IBR@I1.I!\I!\I-HHHe@He@He@He@H@HHH@Ht@HsVHgy@H^>H^>H-w@H!H @H@G@GG#GF@G@GGƢ@GƢ@G­G@GGD@G@G@G@G,@G,@G@GG@GZ@GZ@GeGeG|@G|@GO@GO@G<4G<4G0W@G'@FF@FIFFFFF&@FF@FvFFS@FF@FF]F@FtFFzh@Fw@Fm9@F` @F; @F-@F,F@F@FF*FF @F @FoE@EE@E4@EE?Eɿ@EEEEElEx@E&E=E=E@Ex@EvEnEYEK/@E>@E4EE EgEgEDfDDDDq@D@DB@DB@DB@DB@D{DDX@D4D4D4DD@D@D~D~D|3DvDu@Dr@Dr@DlaDk@DiD`@D_2D_2DX@DWID?D;@D'Dj@C@CCC-Cǖ@Cǖ@C[CCC8@C@CC @CCqC @CCCC@CBC@C@C|pC|pC{@CyCp@Cp@CoACkM@CiCf@C_oC_oC^@C^@CX@CWCS@COCFc@CFc@CECECBnCA@C;@C:C*C&@C&@C%mCC@CC C a@C a@C&B=BۙB@B@Br!Br!Br!Bn-@BgB] B] BZfBS@BQ,@BIC@BAZ@B9q@B9q@B06B-B$Y@B#BB@B@B LB LBBAA)@A@A@AA@A@A@AyAҜ@AJA@A`A`AA@AA@Ak@AAA@AvA@AAoA]FA]FAQi@AN@AI@AF@AF@AA@A>@A>@A7 @A7 @A5A4h@A3A3A/"@A-A+-A(A$@A!@A A A@A@@@q@7@@@@6@@@A@)@@@@@@@@@~y@@~y@@~y@@}'@s@@s@@s@@l@@ia@@b@b@b@O@@O@@Dw@@9@@,@@ @/@@???E@?E@?٭???q@??@?@?@?}d?z?a@?M?D@>S@Vit Mojzis - 2.9-6Vit Mojzis - 2.9-5Vit Mojzis - 2.9-4Vit Mojzis - 2.9-3Petr Lautrbach - 2.9-2.1Petr Lautrbach - 2.9-1Petr Lautrbach - 2.8-6Petr Lautrbach - 2.8-5Petr Lautrbach - 2.8-4Petr Lautrbach - 2.8-3Petr Lautrbach - 2.8-2Petr Lautrbach - 2.8-1Petr Lautrbach - 2.8-0.rc3.1Petr Lautrbach - 2.8-0.rc2.1Petr Lautrbach - 2.8-0.rc1.1Petr Lautrbach - 2.7-14Petr Lautrbach - 2.7-13Petr Lautrbach - 2.7-12Igor Gnatenko - 2.7-11Fedora Release Engineering - 2.7-10Igor Gnatenko - 2.7-9Iryna Shcherbina - 2.7-8Mamoru TASAKA - 2.7-7Petr Lautrbach - 2.7-6Petr Lautrbach - 2.7-5Petr Šabata - 2.7-4Zbigniew Jędrzejewski-Szmek - 2.7-3Zbigniew Jędrzejewski-Szmek - 2.7-2Petr Lautrbach - 2.7-1Fedora Release Engineering - 2.6-10Florian Weimer - 2.6-9Petr Lautrbach - 2.6-8Fedora Release Engineering - 2.6-7Petr Lautrbach - 2.6-6Petr Lautrbach - 2.6-5Petr Lautrbach - 2.6-4Petr Lautrbach - 2.6-3Petr Lautrbach - 2.6-2Petr Lautrbach - 2.6-1Fedora Release Engineering - 2.5-18Stephen Gallagher - 2.5-17Vít Ondruch - 2.5-16Petr Lautrbach - 2.5-15Charalampos Stratakis - 2.5-14Petr Lautrbach - 2.5-13Petr Lautrbach 2.5-12Petr Lautrbach 2.5-11Fedora Release Engineering - 2.5-10Petr Lautrbach - 2.5-9Petr Lautrbach - 2.5-8Petr Lautrbach - 2.5-7Petr Lautrbach - 2.5-6Petr Lautrbach - 2.5-5Petr Lautrbach - 2.5-4Petr Lautrbach - 2.5-3Petr Lautrbach 2.5-2Petr Lautrbach 2.5-1Petr Lautrbach 2.5-0.1.rc1Fedora Release Engineering - 2.4-8Vít Ondruch - 2.4-7Petr Lautrbach - 2.4-6Robert Kuska - 2.4-5Petr Lautrbach 2.4-4Petr Lautrbach 2.4-3Adam Jackson 2.4-2Petr Lautrbach 2.4-1.1Fedora Release Engineering - 2.3-11Petr Lautrbach 2.3-10Petr Lautrbach 2.3-9Petr Lautrbach 2.3-8Than Ngo - 2.3-7Vít Ondruch - 2.3-6Miroslav Grepl - 2.3-5Fedora Release Engineering - 2.3-4Fedora Release Engineering - 2.3-3Kalev Lember - 2.3-2Dan Walsh - 2.3-1Miroslav Grepl - 2.2.2-8Vít Ondruch - 2.2.2-7Dan Walsh - 2.2.2-6Dan Walsh - 2.2.2-5Dan Walsh - 2.2.2-4Dan Walsh - 2.2.2-3Dan Walsh - 2.2.2-2Dan Walsh - 2.2.2-1Adam Williamson - 2.2.1-6Dan Walsh - 2.2.1-5Dan Walsh - 2.2.1-4Dan Walsh - 2.2.1-3Dan Walsh - 2.2.1-2Dan Walsh - 2.2.1-1Dan Walsh - 2.2-1Dan Walsh - 2.1.13-21Dan Walsh - 2.1.13-20Dan Walsh - 2.1.13-19Dan Walsh - 2.1.13-17Fedora Release Engineering - 2.1.13-17Dan Walsh - 2.1.13-16Dan Walsh - 2.1.13-15Dan Walsh - 2.1.13-14Dan Walsh - 2.1.13-13Dan Walsh - 2.1.13-12Dan Walsh - 2.1.13-11Dan Walsh - 2.1.13-10Dan Walsh - 2.1.13-9Dan Walsh - 2.1.13-8Dan Walsh - 2.1.13-7Dan Walsh - 2.1.13-6Dan Walsh - 2.1.13-5Dan Walsh - 2.1.13-4Dan Walsh - 2.1.13-3Dan Walsh - 2.1.13-2Dan Walsh - 2.1.13-1Dan Walsh - 2.1.12-20Dan Walsh - 2.1.12-19Dan Walsh - 2.1.12-18Dan Walsh - 2.1.12-17Dan Walsh - 2.1.12-16Dan Walsh - 2.1.12-15Dan Walsh - 2.1.12-14Dan Walsh - 2.1.12-13Dan Walsh - 2.1.12-12Dan Walsh - 2.1.12-11Dan Walsh - 2.1.12-10Dan Walsh - 2.1.12-9Dan Walsh - 2.1.12-8Dan Walsh - 2.1.12-7Dan Walsh - 2.1.12-6Dan Walsh - 2.1.12-5Dan Walsh - 2.1.12-4Dan Walsh - 2.1.12-3Dan Walsh - 2.1.12-2Dan Walsh - 2.1.12-1David Malcolm - 2.1.11-6David Malcolm - 2.1.11-5Fedora Release Engineering - 2.1.11-4Dan Walsh - 2.1.11-3Dan Walsh - 2.1.11-2Dan Walsh - 2.1.11-1Dan Walsh - 2.1.10-5Dan Walsh - 2.1.10-4Dan Walsh - 2.1.10-3Dan Walsh - 2.1.10-2Dan Walsh - 2.1.10-1Dan Walsh - 2.1.9-9Dan Walsh - 2.1.9-8Dan Walsh - 2.1.9-7Kay Sievers - 2.1.9-6Dan Walsh - 2.1.9-5Harald Hoyer 2.1.9-4Dan Walsh - 2.1.9-3Dan Walsh - 2.1.9-2Dan Walsh - 2.1.9-1Dan Walsh - 2.1.8-5Dan Walsh - 2.1.8-4Dan Walsh - 2.1.8-2Dan Walsh - 2.1.8-1Dan Walsh - 2.1.7-2Dan Walsh - 2.1.7-1Dan Walsh - 2.1.6-4Dan Walsh - 2.1.6-3Dan Walsh - 2.1.6-2Dan Walsh - 2.1.6-1Dan Walsh - 2.1.5-5Ville Skyttä - 2.1.5-4Dan Walsh - 2.1.5-3Dan Walsh - 2.1.5-2Dan Walsh - 2.1.5-1Dan Walsh - 2.1.4-2Dan Walsh - 2.1.4-1Dan Walsh - 2.1.0-1Dan Walsh - 2.0.102-6Dan Walsh - 2.0.102-5Dan Walsh - 2.0.102-4Dan Walsh - 2.0.102-3Dan Walsh - 2.0.102-2Dan Walsh - 2.0.102-1Dan Walsh - 2.0.101-1Dan Walsh - 2.0.99-5Dan Walsh - 2.0.99-4Dan Walsh - 2.0.99-3Dan Walsh - 2.0.99-2Dan Walsh - 2.0.99-1Fedora Release Engineering Dan Walsh - 2.0.98-3Dan Walsh - 2.0.98-2Dan Walsh - 2.0.98-1Dan Walsh - 2.0.97-1Dan Walsh - 2.0.96-9Dan Walsh - 2.0.96-8jkeating - 2.0.96-7Adam Tkac - 2.0.96-6Dan Walsh - 2.0.96-5Dan Walsh - 2.0.96-4David Malcolm - 2.0.96-3Dan Walsh - 2.0.96-2Dan Walsh - 2.0.96-1Dan Walsh - 2.0.94-1Dan Walsh - 2.0.93-1Dan Walsh - 2.0.92-1Dan Walsh - 2.0.91-1Dan Walsh - 2.0.90-5Dan Walsh - 2.0.90-4Dan Walsh - 2.0.90-3Dan Walsh - 2.0.90-2Dan Walsh - 2.0.90-1Dan Walsh - 2.0.89-2Dan Walsh - 2.0.89-1Dan Walsh - 2.0.88-1Dan Walsh - 2.0.87-1Dan Walsh - 2.0.86-2Dan Walsh - 2.0.86-1Fedora Release Engineering - 2.0.85-2Dan Walsh - 2.0.85-1Dan Walsh - 2.0.84-1Dan Walsh - 2.0.82-2Dan Walsh - 2.0.82-1Dan Walsh - 2.0.81-1Dan Walsh - 2.0.80-1Dan Walsh - 2.0.79-6Dan Walsh - 2.0.79-5Dan Walsh - 2.0.79-4Dan Walsh - 2.0.79-3Dan Walsh - 2.0.79-1Dan Walsh - 2.0.78-5Dan Walsh - 2.0.78-4Dan Walsh - 2.0.78-3Dan Walsh - 2.0.78-2Dan Walsh - 2.0.78-1Fedora Release Engineering - 2.0.77-6Dan Walsh - 2.0.77-5Dan Walsh - 2.0.77-3Dan Walsh - 2.0.77-2Dan Walsh - 2.0.77-1Dan Walsh - 2.0.76-6Dan Walsh l - 2.0.76-5Dan Walsh - 2.0.76-4Ignacio Vazquez-Abrams - 2.0.76-2Dan Walsh - 2.0.76-1Dan Walsh - 2.0.75-2Dan Walsh - 2.0.75-1Dan Walsh - 2.0.73-1Dan Walsh - 2.0.71-6Dan Walsh - 2.0.71-5Dan Walsh - 2.0.71-4Dan Walsh - 2.0.71-3Dan Walsh - 2.0.71-2Dan Walsh - 2.0.71-1Dan Walsh - 2.0.70-1Dan Walsh - 2.0.69-2Dan Walsh - 2.0.69-1Dan Walsh - 2.0.67-4Dan Walsh - 2.0.67-3Dan Walsh - 2.0.67-2Dan Walsh - 2.0.67-1Dan Walsh - 2.0.65-1Dan Walsh - 2.0.64-3Dan Walsh - 2.0.64-2Dan Walsh - 2.0.64-1Dan Walsh - 2.0.61-4Dan Walsh - 2.0.61-3Dan Walsh - 2.0.61-2Dan Walsh - 2.0.61-1Dan Walsh - 2.0.60-1Dan Walsh - 2.0.59-2Dan Walsh - 2.0.59-1Dan Walsh - 2.0.58-1Dan Walsh - 2.0.57-2Dan Walsh - 2.0.57-1Dan Walsh - 2.0.56-1Dan Walsh - 2.0.55-1Dan Walsh - 2.0.53-1Dan Walsh - 2.0.52-1Dan Walsh - 2.0.50-1Dan Walsh - 2.0.49-2Dan Walsh - 2.0.49-1Dan Walsh - 2.0.48-1Dan Walsh - 2.0.47-4Adel Gadllah - 2.0.47-3Dan Walsh - 2.0.47-2Dan Walsh - 2.0.47-1Dan Walsh - 2.0.46-6Dan Walsh - 2.0.46-5Dan Walsh - 2.0.46-4Dan Walsh - 2.0.46-3Dan Walsh - 2.0.46-2Dan Walsh - 2.0.46-1Dan Walsh - 2.0.45-1Dan Walsh - 2.0.43-1Dan Walsh - 2.0.42-1Dan Walsh - 2.0.40-1Dan Walsh - 2.0.37-1Dan Walsh - 2.0.36-1Dan Walsh - 2.0.35-2Dan Walsh - 2.0.35-1Dan Walsh - 2.0.34-3Dan Walsh - 2.0.34-2Dan Walsh - 2.0.34-1Dan Walsh - 2.0.33-2Dan Walsh - 2.0.33-1Dan Walsh - 2.0.31-4Dan Walsh - 2.0.31-3Dan Walsh - 2.0.31-2Dan Walsh - 2.0.30-2Dan Walsh - 2.0.30-1Dan Walsh - 2.0.29-1Dan Walsh - 2.0.24-3Dan Walsh - 2.0.24-2Dan Walsh - 2.0.24-1Dan Walsh - 2.0.23-3Dan Walsh - 2.0.23-2Dan Walsh - 2.0.23-1Dan Walsh - 2.0.22-1Dan Walsh - 2.0.21-2Dan Walsh - 2.0.21-1Dan Walsh - 2.0.18-1Dan Walsh - 2.0.16-1Dan Walsh - 2.0.14-1Dan Walsh - 2.0.13-2Dan Walsh - 2.0.13-1Dan Walsh - 2.0.12-2Dan Walsh - 2.0.12-1Dan Walsh - 2.0.11-1Dan Walsh - 2.0.9-2Dan Walsh - 2.0.9-1Dan Walsh - 2.0.8-1Dan Walsh - 2.0.7-2Dan Walsh - 2.0.7-1Dan Walsh - 2.0.5-2Dan Walsh - 2.0.5-1Dan Walsh - 2.0.4-1Dan Walsh - 2.0.2-1Dan Walsh - 2.0.1-1Dan Walsh - 2.0.0-1Dan Walsh - 1.34.0-2Dan Walsh - 1.34.0-1Dan Walsh - 1.33.6-1Dan Walsh - 1.33.5-1Dan Walsh - 1.33.4-3Dan Walsh - 1.33.4-2Dan Walsh - 1.33.4-1Dan Walsh - 1.33.3-3Dan Walsh - 1.33.3-2Dan Walsh - 1.33.3-1Jeremy Katz - 1.33.2-4Dan Walsh - 1.33.2-3Dan Walsh - 1.33.2-2Dan Walsh - 1.33.2-1Dan Walsh - 1.33.1-2Dan Walsh - 1.33.1-1Dan Walsh - 1.32-1Jesse Keating - 1.30.29-2Dan Walsh - 1.30.29-1Jeremy Katz - 1.30.28-3Dan Walsh - 1.30.28-2Dan Walsh - 1.30.28-1Jeremy Katz - 1.30.27-2Dan Walsh - 1.30.27-1Jesse Keating - 1.20.26-2Dan Walsh - 1.30.25-1Dan Walsh - 1.30.24-1Dan Walsh - 1.30.22-2Dan Walsh - 1.30.22-1Dan Walsh - 1.30.20-1Jeremy Katz - 1.30.19-5Jeremy Katz - 1.30.19-4Dan Walsh 1.30.19-3Dan Walsh 1.30.19-2Dan Walsh 1.30.19-1Dan Walsh 1.30.15-5Dan Walsh 1.30.15-4Dan Walsh 1.30.15-3Dan Walsh 1.30.15-2Dan Walsh 1.30.15-1Dan Walsh 1.30.12-2Dan Walsh 1.30.12-1Dan Walsh 1.30.11-2Dan Walsh 1.30.11-1Dan Walsh 1.30.10-4Dan Walsh 1.30.10-3Dan Walsh 1.30.10-2Dan Walsh 1.30.10-1Dan Walsh 1.30.8-1Dan Walsh 1.30.7-2Dan Walsh 1.30.7-1Dan Walsh 1.30.6-2Dan Walsh 1.30.6-1Dan Walsh 1.30.5-1Dan Walsh 1.30.3-3Dan Walsh 1.30.3-2Dan Walsh 1.30.3-1Dan Walsh 1.30.1-2Dan Walsh 1.30.1-1Dan Walsh 1.30-1Jesse Keating - 1.29.7-1.2Jesse Keating - 1.29.7-1.1Dan Walsh 1.29.7-1Dan Walsh 1.29.6-1Dan Walsh 1.29.5-2Dan Walsh 1.29.5-1Dan Walsh 1.29.4-1Dan Walsh 1.29.3-2Dan Walsh 1.29.3-1Dan Walsh 1.29.2-4Dan Walsh 1.29.2-3Dan Walsh 1.29.2-2Dan Walsh 1.29.2-1Dan Walsh 1.29.1-3Jesse Keating Dan Walsh 1.29.1-1Dan Walsh 1.28-1Dan Walsh 1.27.28-2Dan Walsh 1.27.28-1Dan Walsh 1.27.26-1Dan Walsh 1.27.25-1Dan Walsh 1.27.23-1Dan Walsh 1.27.22-4Dan Walsh 1.27.22-3Dan Walsh 1.27.22-2Dan Walsh 1.27.22-1Dan Walsh 1.27.21-2Dan Walsh 1.27.21-1Dan Walsh 1.27.20-1Dan Walsh 1.27.19-1Dan Walsh 1.27.18-1Dan Walsh 1.27.17-4Dan Walsh 1.27.17-2Dan Walsh 1.27.17-1Dan Walsh 1.27.14-3Dan Walsh 1.27.14-2Dan Walsh 1.27.14-1Dan Walsh 1.27.13-2Dan Walsh 1.27.13-1Dan Walsh 1.27.12-1Dan Walsh 1.27.9-2Dan Walsh 1.27.9-1Dan Walsh 1.27.7-1Dan Walsh 1.27.6-1Dan Walsh 1.27.4-1Dan Walsh 1.27.3-1Dan Walsh 1.27.2-1Dan Walsh 1.27.1-3Dan Walsh 1.27.1-2Dan Walsh 1.26-6Dan Walsh 1.26-5Dan Walsh 1.26-3Dan Walsh 1.26-2Dan Walsh 1.25.7-1Dan Walsh 1.25.6-1Dan Walsh 1.25.5-1Dan Walsh 1.25.4-1Dan Walsh 1.25.3-2Dan Walsh 1.25.3-1Dan Walsh 1.25.2-2Dan Walsh 1.25.2-1Dan Walsh 1.24.2-1Dan Walsh 1.24.1-1Dan Walsh 1.23.11-1Dan Walsh 1.23.10-3Dan Walsh 1.23.10-2Dan Walsh 1.23.10-1Dan Walsh 1.23.8-1Dan Walsh 1.23.7-3Dan Walsh 1.23.7-2Dan Walsh 1.23.7-1Dan Walsh 1.23.6-1Dan Walsh 1.23.5-1Dan Walsh 1.23.4-1Dan Walsh 1.23.2-3Dan Walsh 1.23.2-2Dan Walsh 1.23.2-1Dan Walsh 1.23.1-1Dan Walsh 1.22-1Dan Walsh 1.21.13-1Dan Walsh 1.21.12-1Dan Walsh 1.21.11-2Dan Walsh 1.21.11-1Dan Walsh 1.21.10-3Dan Walsh 1.21.10-1Dan Walsh 1.21.9-2Dan Walsh 1.21.9-1Dan Walsh 1.21.8-1Dan Walsh 1.21.7-1Dan Walsh 1.21.5-1Dan Walsh 1.21.4-1Dan Walsh 1.21.2-1Dan Walsh 1.21.1-3Dan Walsh 1.21.1-2Dan Walsh 1.21.1-1Dan Walsh 1.20.1-3Dan Walsh 1.20.1-2Dan Walsh 1.20.1-1Dan Walsh 1.19.4-1Dan Walsh 1.19.3-3Dan Walsh 1.19.3-2Dan Walsh 1.19.3-1Dan Walsh 1.19.2-1Dan Walsh 1.19.1-6Dan Walsh 1.19.1-4Dan Walsh 1.19.1-2Dan Walsh 1.19.1-1Steve Grubb 1.18.1-5Dan Walsh 1.18.1-4Dan Walsh 1.18.1-3Steve Grubb 1.18.1-2Dan Walsh 1.18.1-1Steve Grubb 1.17.15-2Steve Grubb 1.17.15-2Dan Walsh 1.17.15-1Dan Walsh 1.17.14-1Dan Walsh 1.17.13-3Dan Walsh 1.17.13-2Dan Walsh 1.17.13-1Dan Walsh 1.17.12-2Dan Walsh 1.17.12-1Dan Walsh 1.17.11-1Dan Walsh 1.17.10-1Dan Walsh 1.17.9-2Dan Walsh 1.17.9-1Dan Walsh 1.17.8-2Dan Walsh 1.17.8-1Dan Walsh 1.17.7-1Dan Walsh 1.17.6-1Dan Walsh 1.17.5-1Dan Walsh 1.17.4-1Dan Walsh 1.17.3-1Dan Walsh 1.17.2-1Dan Walsh 1.17.1-1Dan Walsh 1.16.1-1Colin Walters 1.16-1Dan Walsh 1.15.7-1Dan Walsh 1.15.6-1Dan Walsh 1.15.5-1Dan Walsh 1.15.4-1Dan Walsh 1.15.3-2Dan Walsh 1.15.3-1Dan Walsh 1.15.2-1Dan Walsh 1.15.1-3Dan Walsh 1.15.1-2Dan Walsh 1.15.1-1Dan Walsh 1.14.1-1Dan Walsh 1.13.4-1Elliot Lee Dan Walsh 1.13.3-2Dan Walsh 1.13.2-1Dan Walsh 1.13.1-1Dan Walsh 1.12-2Dan Walsh 1.12-1Dan Walsh 1.11.4-1Dan Walsh 1.11.3-1Dan Walsh 1.11.2-1Dan Walsh 1.11-4Dan Walsh 1.11-3Dan Walsh 1.11-2Dan Walsh 1.11-1Dan Walsh 1.10-2Dan Walsh 1.10-1Dan Walsh 1.9-1Dan Walsh 1.8-1Dan Walsh 1.6-6Dan Walsh 1.6-5Dan Walsh 1.6-4Dan Walsh 1.6-3Dan Walsh 1.6-2Elliot Lee Dan Walsh 1.4-11Elliot Lee Dan Walsh 1.4-9Dan Walsh 1.4-8Dan Walsh 1.4-7Dan Walsh 1.4-6Dan Walsh 1.4-5Dan Walsh 1.4-4Dan Walsh 1.4-3Dan Walsh 1.4-2Dan Walsh 1.4-1Dan Walsh 1.3-2Dan Walsh 1.3-1Dan Walsh 1.2-9Dan Walsh 1.2-8Dan Walsh 1.2-7Dan Walsh 1.2-6Dan Walsh 1.2-5Dan Walsh 1.2-4Dan Walsh 1.2-3Dan Walsh 1.2-2Dan Walsh 1.2-1Dan Walsh 1.0-1- Describe fcontext regular expressions (#1904059) - Strip spaces before values in config (#2012145)- Deprecate security_compute_user(), update man pages (#1879368)- Eliminate use of security_compute_user() (#1879368)- Fix mcstrans secolor examples in secolor.conf man page (#1770270)- Use Python distutils to install SELinux python bindings (#1719771) - Move sefcontext_compile to -utils package (#1612518)- SELinux userspace 2.9 release- Fix RESOURCE_LEAK coverity scan defects- selinux_restorecon: Skip customized files also without -v - man pages fixes- Build libselinux-python when %with_python2 macro is set to non-zero value- Build libselinux-ruby (#1581322)- Don't build the Python 2 subpackage (#1567358)- SELinux userspace 2.8 release- SELinux userspace 2.8-rc3 release candidate- SELinux userspace 2.8-rc2 release candidate- SELinux userspace 2.8-rc1 release candidate- Do not build libselinux-ruby- build: Replace PYSITEDIR with PYTHONLIBDIR- Correct manpages regarding removable_context - build: follow standard semantics for DESTDIR and PREFIX- Escape macros in %changelog- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild- Switch to %ldconfig_scriptlets- Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)- F-28: rebuild for ruby25- Rebuild with libsepol-2.7-3- Drop golang bindings - Add support for pcre2 to pkgconfig definition- Enable the python3 subpackages on EL- Also add Provides for the old name without %_isa- Python 2 binary package renamed to python2-libselinux See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3 - Python 3 binary package renamed to python3-libselinux- Update to upstream release 2017-08-04- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild- Rebuild with binutils fix for ppc64le (#1475636)- Always unmount selinuxfs for SELINUX=disabled- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- Don't finalize mount state in selinux_set_policy_root() - Follow upstream and rename _selinux.so to _selinux.cpython-36m-x86_64-linux-gnu.so- Fix setfiles progress indicator- Fix segfault in selinux_restorecon_sb() (#1433577) - Change matchpathcon usage to match with matchpathcon manpage - Fix a corner case getsebool return value- Fix 'semanage boolean -m' to modify active value- Fix FTBFS - fatal error (#1427902)- Update to upstream release 2016-10-14- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild- Add missing %license macro- Rebuilt for https://fedoraproject.org/wiki/Changes/Ruby_2.4- Rewrite restorecon() python method- Rebuild for Python 3.6- Fix pointer handling in realpath_not_final (#1376598)- Fix -Wsign-compare warnings - Drop unused stdio_ext.h header file - Kill logging check for selinux_enabled() - Drop usage of _D_ALLOC_NAMLEN - Add openrc_contexts functions - Fix redefinition of XATTR_NAME_SELINUX - Correct error path to always try text - Clean up process_file() - Handle NULL pcre study data - Fix in tree compilation of utils that depend on libsepol- Rebuilt with libsepol-2.5-9- https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages- Clarify is_selinux_mls_enabled() description - Explain how to free policy type from selinux_getpolicytype() - Compare absolute pathname in matchpathcon -V - Add selinux_snapperd_contexts_path()- Move _selinux.so to /usr/lib64/python*/site-packages- Modify audit2why analyze function to use loaded policy - Sort object files for deterministic linking order - Respect CC and PKG_CONFIG environment variable - Avoid mounting /proc outside of selinux_init_load_policy()- Fix multiple spelling errors- Rebuilt with libsepol-2.5-5- Fix typo in sefcontext_compile.8- Fix location of selinuxfs mount point - Only mount /proc if necessary - procattr: return einval for <= 0 pid args - procattr: return error on invalid pid_t input- Use fully versioned arch-specific requires- Update to upstream release 2016-02-23- Update to upstream rc1 release 2016-01-07- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild- Rebuilt for https://fedoraproject.org/wiki/Changes/Ruby_2.3- Build libselinux without rpm_execcon() (#1284019)- Rebuilt for Python3.5 rebuild- Flush the class/perm string mapping cache on policy reload (#1264051) - Fix restorecon when path has no context- Simplify procattr cache (#1257157,#1232371)- Export ldflags into the build so hardening works- Update to 2.4 release- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- is_selinux_enabled: Add /etc/selinux/config test (#1219045) - matchpathcon/selabel_file: Fix man pages (#1219718)- revert support for policy compressed with xv (#1185266)- selinux.py - use os.walk() instead of os.path.walk() (#1195004) - is_selinux_enabled(): drop no-policy-loaded test (#1195074) - fix -Wformat errors and remove deprecated mudflap option- bump release and rebuild so that koji-shadow can rebuild it against new gcc on secondary arch- Rebuilt for https://fedoraproject.org/wiki/Changes/Ruby_2.2- Compiled file context files and the original should have the same permissions from dwalsh@redhat.com - Add selinux_openssh_contexts_path() to get a path to /contexts/openssh_contexts- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild- Rebuilt for https://fedoraproject.org/wiki/Changes/Python_3.4- Update to upstream * Get rid of security_context_t and fix const declarations. * Refactor rpm_execcon() into a new setexecfilecon() from Guillem Jover.- Add selinux_openssh_contexts_path()- Rebuilt for https://fedoraproject.org/wiki/Changes/Ruby_2.1- Fix spelling mistake in man page- More go bindings - restorecon, getpidcon, setexeccon- Add additional go bindings for get*con calls - Add go bindings test command - Modify man pages of set*con calls to mention that they are thread specific- Move selinux.go to /usr/lib64/golang/src/pkg/github.com/selinux/selinux.go - Add Int_to_mcs function to generate MCS labels from integers.- Add ghost flag for /var/run/setrans- Update to upstream * Fix userspace AVC handling of per-domain permissive mode. - Verify context is not null when passed into *setfilecon_raw- revert unexplained change to rhat.patch which broke SELinux disablement- Verify context is not null when passed into lsetfilecon_raw- Mv selinux.go to /usr/share/gocode/src/selinux- Add golang support to selinux.- Remove togglesebool man page- Update to upstream * Remove -lpthread from pkg-config file; it is not required. - Add support for policy compressed with xv- Update to upstream * Fix avc_has_perm() returns -1 even when SELinux is in permissive mode. * Support overriding Makefile RANLIB from Sven Vermeulen. * Update pkgconfig definition from Sven Vermeulen. * Mount sysfs before trying to mount selinuxfs from Sven Vermeulen. * Fix man pages from Laurent Bigonville. * Support overriding PATH and LIBBASE in Makefiles from Laurent Bigonville. * Fix LDFLAGS usage from Laurent Bigonville * Avoid shadowing stat in load_mmap from Joe MacDonald. * Support building on older PCRE libraries from Joe MacDonald. * Fix handling of temporary file in sefcontext_compile from Dan Walsh. * Fix procattr cache from Dan Walsh. * Define python constants for getenforce result from Dan Walsh. * Fix label substitution handling of / from Dan Walsh. * Add selinux_current_policy_path from Dan Walsh. * Change get_context_list to only return good matches from Dan Walsh. * Support udev-197 and higher from Sven Vermeulen and Dan Walsh. * Add support for local substitutions from Dan Walsh. * Change setfilecon to not return ENOSUP if context is already correct from Dan Walsh. * Python wrapper leak fixes from Dan Walsh. * Export SELINUX_TRANS_DIR definition in selinux.h from Dan Walsh. * Add selinux_systemd_contexts_path from Dan Walsh. * Add selinux_set_policy_root from Dan Walsh. * Add man page for sefcontext_compile from Dan Walsh.- Add systemd_contexts support - Do substitutions on a local sub followed by a dist sub- Eliminate requirement on pthread library, by applying patch for Jakub Jelinek Resolves #1013801- Fix handling of libselinux getconlist with only one entry- Add Python constants for SELinux enforcing modes- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild- Add sefcontext_compile.8 man page - Add Russell Coker patch to fix man pages - Add patches from Laurent Bigonville to fix Makefiles for debian. - modify spec file to use %{_prefix}/lib- Fix patch that Handles substitutions for /- Handle substitutions for / - semanage fcontext -a -e / /opt/rh/devtoolset-2/root- Add Eric Paris patch to fix procattr calls after a fork.- Move secolor.conf.5 into mcstrans package and out of libselinux- Fix python bindings for selinux_check_access- Fix reseting the policy root in matchpathcon- Cleanup setfcontext_compile atomic patch - Add matchpathcon -P /etc/selinux/mls support by allowing users to set alternate root - Make sure we set exit codes from selinux_label calls to ENOENT or SUCCESS- Make setfcontext_compile atomic- Fix memory leak in set*con calls.- Move matchpathcon to -utils package - Remove togglesebool- Fix selinux man page to reflect what current selinux policy is.- Add new constant SETRANS_DIR which points to the directory where mstransd can find the socket and libvirt can write its translations files.- Bring back selinux_current_policy_path- Revert some changes which are causing the wrong policy version file to be created- Update to upstream * audit2why: make sure path is nul terminated * utils: new file context regex compiler * label_file: use precompiled filecontext when possible * do not leak mmapfd * sefcontontext_compile: Add error handling to help debug problems in libsemanage. * man: make selinux.8 mention service man pages * audit2why: Fix segfault if finish() called twice * audit2why: do not leak on multiple init() calls * mode_to_security_class: interface to translate a mode_t in to a security class * audit2why: Cleanup audit2why analysys function * man: Fix program synopsis and function prototypes in man pages * man: Fix man pages formatting * man: Fix typo in man page * man: Add references and man page links to _raw function variants * Use ENOTSUP instead of EOPNOTSUPP for getfilecon functions * man: context_new(3): fix the return value description * selinux_status_open: handle error from sysconf * selinux_status_open: do not leak statusfd on exec * Fix errors found by coverity * Change boooleans.subs to booleans.subs_dist. * optimize set*con functions * pkg-config do not specifc ruby version * unmap file contexts on selabel_close() * do not leak file contexts with mmap'd backend * sefcontext_compile: do not leak fd on error * matchmediacon: do not leak fd * src/label_android_property: do not leak fd on error- Update to latest patches from eparis/Upstream- Update to latest patches from eparis/Upstream- Try procatt speedup patch again- Roll back procattr speedups since it seems to be screwing up systemd labeling.- Fix tid handling for setfscreatecon, old patch still broken in libvirt- Fix tid handling for setfscreatecon, old patch still broken in libvirt- setfscreatecon after fork was broken by the Set*con patch. - We needed to reset the thread variables after a fork.- Fix setfscreatecon call to handle failure mode, which was breaking udev- Ondrej Oprala patch to optimize set*con functions - Set*con now caches the security context and only re-sets it if it changes.- Rebuild against latest libsepol- Update to latest patches from eparis/Upstream - Fix errors found by coverity - set the sepol_compute_av_reason_buffer flag to 0. This means calculate denials only? - audit2why: remove a useless policy vers variable - audit2why: use the new constraint information- Rebuild with latest libsepol- Return EPERM if login program can not reach default label for user - Attempt to return container info from audit2why- Apply patch from eparis to fix leaked file descriptor in new labeling code- Add new function mode_to_security_class which takes mode instead of a string. - Possibly will be used with coreutils.- Add back selinuxconlist and selinuxdefcon man pages- Fix segfault from calling audit2why.finish() multiple times- Fix up selinux man page to reference service man pages- Rebuild with fixed libsepol- Update to upstream * Add support for lxc_contexts_path * utils: add service to getdefaultcon * libsemanage: do not set soname needlessly * libsemanage: remove PYTHONLIBDIR and ruby equivalent * boolean name equivalency * getsebool: support boolean name substitution * Add man page for new selinux_boolean_sub function. * expose selinux_boolean_sub * matchpathcon: add -m option to force file type check * utils: avcstat: clear sa_mask set * seusers: Check for strchr failure * booleans: initialize pointer to silence coveriety * stop messages when SELinux disabled * label_file: use PCRE instead of glibc regex functions * label_file: remove all typedefs * label_file: move definitions to include file * label_file: do string to mode_t conversion in a helper function * label_file: move error reporting back into caller * label_file: move stem/spec handling to header * label_file: drop useless ncomp field from label_file data * label_file: move spec_hasMetaChars to header * label_file: fix potential read past buffer in spec_hasMetaChars * label_file: move regex sorting to the header * label_file: add accessors for the pcre extra data * label_file: only run regex files one time * label_file: new process_file function * label_file: break up find_stem_from_spec * label_file: struct reorg * label_file: only run array once when sorting * Ensure that we only close the selinux netlink socket once. * improve the file_contexts.5 manual page- rebuild for https://fedoraproject.org/wiki/Features/Python_3.3- make with_python3 be conditional on fedora- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- Move the tmpfiles.d content from /etc/tmpfiles.d to /usr/lib/tmpfiles.d- Revert Eric Paris Patch for selinux_binary_policy_path- Update to upstream * Fortify source now requires all code to be compiled with -O flag * asprintf return code must be checked * avc_netlink_recieve handle EINTR * audit2why: silence -Wmissing-prototypes warning * libsemanage: remove build warning when build swig c files * matchpathcon: bad handling of symlinks in / * seusers: remove unused lineno * seusers: getseuser: gracefully handle NULL service * New Android property labeling backend * label_android_property whitespace cleanups * additional makefile support for rubywrap- Fix booleans.subs name, change function name to selinux_boolean_sub, add man page, minor fixes to the function- Fix to compile with Fortify source * Add -O compiler flag * Check return code from asprintf - Fix handling of symbolic links in / by realpath_not_final- Add support for lxc contexts file- Add support fot boolean subs file- Update to upstream * Fix dead links to www.nsa.gov/selinux * Remove jump over variable declaration * Fix old style function definitions * Fix const-correctness * Remove unused flush_class_cache method * Add prototype decl for destructor * Add more printf format annotations * Add printf format attribute annotation to die() method * Fix const-ness of parameters & make usage() methods static * Enable many more gcc warnings for libselinux/src/ builds * utils: Enable many more gcc warnings for libselinux/utils builds * Change annotation on include/selinux/avc.h to avoid upsetting SWIG * Ensure there is a prototype for 'matchpathcon_lib_destructor' * Update Makefiles to handle /usrmove * utils: Stop separating out matchpathcon as something special * pkg-config to figure out where ruby include files are located * build with either ruby 1.9 or ruby 1.8 * assert if avc_init() not called * take security_deny_unknown into account * security_compute_create_name(3) * Do not link against python library, this is considered * bad practice in debian * Hide unnecessarily-exported library destructors- Add selinux_current_policy_path to return /sys/fs/selinux/policy if it exists - Otherwise search for policy on disk- Change selinux_binary_policy_path to return /sys/fs/selinux/policy - Add selinux_installed_policy_path to return what selinux_binary_policy_path used to return - avc_has_perm will now return yes if the machine is in permissive mode - Make work with ruby-1.9- avc_netlink_recieve should continue to poll if it receinves an EINTR rather- use /sbin/ldconfig, glibc does not provide /usr/sbin/ldconfig in the RPM database for now- Rebuild with cleaned up upstream to work in /usr- install everything in /usr https://fedoraproject.org/wiki/Features/UsrMove- Add Dan Berrange code cleanup patches.- Fix selabal_open man page to refer to proper selinux_opt structure-Update to upstream * Fix setenforce man page to refer to selinux man page * Cleanup Man pages * merge freecon with getcon man page- Add patch from Richard Haines When selabel_lookup found an invalid context with validation enabled, it always stated it was 'file_contexts' whether media, x, db or file. The fix is to store the spec file name in the selabel_lookup_rec on selabel_open and use this as output for logs. Also a minor fix if key is NULL to stop seg faults. - Fix setenforce manage page.- Rebuild with new libsepol- Fix setenforce man page, from Miroslav Grepl- Upgrade to upstream * selinuxswig_python.i: don't make syscall if it won't change anything * Remove assert in security_get_boolean_names(3) * Mapped compute functions now obey deny_unknown flag * get_default_type now sets EINVAL if no entry. * return EINVAL if invalid role selected * Updated selabel_file(5) man page * Updated selabel_db(5) man page * Updated selabel_media(5) man page * Updated selabel_x(5) man page * Add man/man5 man pages * Add man/man5 man pages * Add man/man5 man pages * use -W and -Werror in utils- Change python binding for restorecon to check if the context matches. - If it does do not reset- Upgrade to upstream * Makefiles: syntax, convert all ${VAR} to $(VAR) * load_policy: handle selinux=0 and /sys/fs/selinux not exist * regenerate .pc on VERSION change * label: cosmetic cleanups * simple interface for access checks * Don't reinitialize avc_init if it has been called previously * seusers: fix to handle large sets of groups * audit2why: close fd on enomem * rename and export symlink_realpath * label_file: style changes to make Eric happy.- Apply libselinux patch to handle large groups in seusers.- Add selinux_check_access function. Needed for passwd, chfn, chsh- Handle situation where selinux=0 passed to the kernel and both /selinux and-Update to upstream * utils: matchpathcon: remove duplicate declaration * src: matchpathcon: use myprintf not fprintf * src: matchpathcon: make sure resolved path starts * put libselinux.so.1 in /lib not /usr/lib * tree: default make target to all not- Switch to use ":" as prefix separator rather then ";"- Avoid unnecessary shell invocation in %post.- Fix handling of subset labeling that is causing segfault in restorecon- Change matchpathcon_init_prefix and selabel_open to allow multiple initial prefixes. Now you can specify a ";" separated list of prefixes and the labeling system will only load regular expressions that match these prefixes.- Change matchpatcon to use proper myprintf - Fix symlink_realpath to always include "/" - Update to upstream * selinux_file_context_verify function returns wrong value. * move realpath helper to matchpathcon library * python wrapper makefile changes- Move to new Makefile that can build with or without PYTHON being set-Update to upstream 2.1.4 2011-0817 * mapping fix for invalid class/perms after selinux_set_mapping * audit2why: work around python bug not defining * resolv symlinks and dot directories before matching 2.1.2 2011-0803 * audit2allow: do not print statistics * make python bindings for restorecon work on relative path * fix python audit2why binding error * support new python3 functions * do not check fcontext duplicates on use * Patch for python3 for libselinux 2.1.1 2011-08-02 * move .gitignore into utils * new setexecon utility * selabel_open fix processing of substitution files * mountpoint changing patch. * simplify SRCS in Makefile 2.1.1 2011-08-01 * Remove generated files, introduce more .gitignore-Update to upstream * Release, minor version bump * Give correct names to mount points in load_policy by Dan Walsh. * Make sure selinux state is reported correctly if selinux is disabled or fails to load by Dan Walsh. * Fix crash if selinux_key_create was never called by Dan Walsh. * Add new file_context.subs_dist for distro specific filecon substitutions by Dan Walsh. * Update man pages for selinux_color_* functions by Richard Haines.- Only call dups check within selabel/matchpathcon if you are validating the context - This seems to speed the loading of labels by 4 times.- Move /selinux to /sys/fs/selinux - Add selinuxexeccon - Add realpath to matchpathcon to handle matchpathcon * type queries.- Update for latest libsepol- Update for latest libsepol- Fix restorecon python binding to accept relative paths-Update to upstream * Give correct names to mount points in load_policy by Dan Walsh. * Make sure selinux state is reported correctly if selinux is disabled or fails to load by Dan Walsh. * Fix crash if selinux_key_create was never called by Dan Walsh. * Add new file_context.subs_dist for distro specific filecon substitutions by Dan Walsh. * Update man pages for selinux_color_* functions by Richard Haines.- Clean up patch to make handling of constructor cleanup more portable * db_language object class support for selabel_lookup from KaiGai Kohei. * Library destructors for thread local storage keys from Eamon Walsh.- Add distribution subs pathAdd patch from dbhole@redhat.com to initialize thread keys to -1 Errors were being seen in libpthread/libdl that were related to corrupt thread specific keys. Global destructors that are called on dl unload. During destruction delete a thread specific key without checking if it has been initialized. Since the constructor is not called each time (i.e. key is not initialized with pthread_key_create each time), and the default is 0, there is a possibility that key 0 for an active thread gets deleted. This is exactly what is happening in case of OpenJDK. Workaround patch that initializes the key to -1. Thus if the constructor is not called, the destructor tries to delete key -1 which is deemed invalid by pthread_key_delete, and is ignored.- Call fini_selinuxmnt if selinux is disabled, to cause is_selinux_disabled() to report correct data- Change mount source options to use "proc" and "selinuxfs"- Update to upstream * Turn off default user handling when computing user contexts by Dan Walsh- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- Fixup selinux man page- Fix Makefile to use pkg-config --cflags python3 to discover include paths- Update to upstream - Turn off fallback in to SELINUX_DEFAULTUSER in get_context_list- Update to upstream * Thread local storage fixes from Eamon Walsh.- Add /etc/tmpfiles.d support for /var/run/setrans- Ghost /var/run/setrans- Rebuilt for gcc bug 634757- rebuild via updated swig (#624674)- Update for python 3.2a1- Turn off fallback in to SELINUX_DEFAULTUSER in get_context_list- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild- Turn off messages in audit2why- Update to upstream * Add const qualifiers to public API where appropriate by KaiGai Kohei. 2.0.95 2010-06-10 * Remove duplicate slashes in paths in selabel_lookup from Chad Sellers * Adds a chcon method to the libselinux python bindings from Steve Lawrence - add python3 subpackage from David Malcolm* Set errno=EINVAL for invalid contexts from Dan Walsh.- Update to upstream * Show strerror for security_getenforce() by Colin Waters. * Merged selabel database support by KaiGai Kohei. * Modify netlink socket blocking code by KaiGai Kohei.- Update to upstream * Fix from Eric Paris to fix leak on non-selinux systems. * regenerate swig wrappers * pkgconfig fix to respect LIBDIR from Dan Walsh.- Update to upstream * Change the AVC to only audit the permissions specified by the policy, excluding any permissions specified via dontaudit or not specified via auditallow. * Fix compilation of label_file.c with latest glibc headers.- Fix potential doublefree on init- Fix libselinux.pc- Fix man page for selinuxdefcon- Free memory on disabled selinux boxes- Update to upstream * add/reformat man pages by Guido Trentalancia . * Change exception.sh to be called with bash by Manoj Srivastava - Fix selinuxdefcon man page- Update to upstream * Add pkgconfig file from Eamon Walsh.- Update to upstream * Rename and export selinux_reset_config()- Update to upstream * Add exception handling in libselinux from Dan Walsh. This uses a shell script called exception.sh to generate a swig interface file. * make swigify * Make matchpathcon print <> if path not found in fcontext file.- Eliminate -pthread switch in Makefile- Update to upstream * Removal of reference counting on userspace AVC SID's.- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- Update to upstream * Reverted Tomas Mraz's fix for freeing thread local storage to avoid pthread dependency. * Removed fini_context_translations() altogether. * Merged lazy init patch from Stephen Smalley based on original patch by Steve Grubb.- Update to upstream * Add per-service seuser support from Dan Walsh. * Let load_policy gracefully handle selinuxfs being mounted from Stephen Smalley. * Check /proc/filesystems before /proc/mounts for selinuxfs from Eric Paris.- Add provices ruby(selinux)- Update to upstream * Fix improper use of thread local storage from Tomas Mraz . * Label substitution support from Dan Walsh. * Support for labeling virtual machine images from Dan Walsh.- Update to upstream * Trim / from the end of input paths to matchpathcon from Dan Walsh. * Fix leak in process_line in label_file.c from Hiroshi Shinji. * Move matchpathcon to /sbin, add matchpathcon to clean target from Dan Walsh. * getdefaultcon to print just the correct match and add verbose option from Dan Walsh.- Update to upstream * deny_unknown wrapper function from KaiGai Kohei. * security_compute_av_flags API from KaiGai Kohei. * Netlink socket management and callbacks from KaiGai Kohei.- Fix Memory Leak- Fix crash in python- Add back in additional interfaces- Add back in av_decision to python swig- Update to upstream * Netlink socket handoff patch from Adam Jackson. * AVC caching of compute_create results by Eric Paris.- Add patch from ajax to accellerate X SELinux - Update eparis patch- Add eparis patch to accellerate Xwindows performance- Fix URL- Add substitute pattern - matchpathcon output <> on ENOENT- Update to upstream * Fix incorrect conversion in discover_class code.- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild- Add - selinux_virtual_domain_context_path - selinux_virtual_image_context_path- Throw exeptions in python swig bindings on failures- Fix restorecon python code- Update to upstream- Strip trailing / for matchpathcon- Fix segfault if seusers file does not work- Add new function getseuser which will take username and service and return - seuser and level. ipa will populate file in future. - Change selinuxdefcon to return just the context by default- Rebuild for Python 2.6- Update to Upstream * Allow shell-style wildcards in x_contexts file.- Eamon Walsh Patch - libselinux: allow shell-style wildcarding in X names - Add Restorecon/Install python functions from Luke Macken- Update to Upstream * Correct message types in AVC log messages. * Make matchpathcon -V pass mode from Dan Walsh. * Add man page for selinux_file_context_cmp from Dan Walsh.- Update to Upstream * New man pages from Dan Walsh. * Update flask headers from refpolicy trunk from Dan Walsh.- Fix matchpathcon -V call- Add flask definitions for open, X and nlmsg_tty_audit- Add missing get/setkeycreatecon man pages- Split out utilities- Add missing man page links for [lf]getfilecon- Update to Upstream * Add group support to seusers using %groupname syntax from Dan Walsh. * Mark setrans socket close-on-exec from Stephen Smalley. * Only apply nodups checking to base file contexts from Stephen Smalley.- Update to Upstream * Merge ruby bindings from Dan Walsh. - Add support for Linux groups to getseuserbyname- Allow group handling in getseuser call- Update to Upstream * Handle duplicate file context regexes as a fatal error from Stephen Smalley. This prevents adding them via semanage. * Fix audit2why shadowed variables from Stephen Smalley. * Note that freecon NULL is legal in man page from Karel Zak.- Add ruby support for puppet- Rebuild for new libsepol- Add Karel Zak patch for freecon man page- Update to Upstream * New and revised AVC, label, and mapping man pages from Eamon Walsh. * Add swig python bindings for avc interfaces from Dan Walsh.- Update to Upstream * Fix selinux_file_context_verify() and selinux_lsetfilecon_default() to call matchpathcon_init_prefix if not already initialized. * Add -q qualifier for -V option of matchpathcon and change it to indicate whether verification succeeded or failed via exit status.- libselinux no longer neets to telnet -u in post install- Add sedefaultcon and setconlist commands to dump login context- Update to Upstream * Fixed selinux_set_callback man page. * Try loading the max of the kernel-supported version and the libsepol-supported version when no manipulation of the binary policy is needed from Stephen Smalley. * Fix memory leaks in matchpathcon from Eamon Walsh.- Add Xavior Toth patch for security_id_t in swig- Add avc.h to swig code- Grab the latest policy for the kernel- Update to Upstream * Man page typo fix from Jim Meyering.- Update to Upstream * Changed selinux_init_load_policy() to not warn about a failed mount of selinuxfs if selinux was disabled in the kernel.- Fix matchpathcon memory leak- Update to Upstream * Merged new X label "poly_selection" namespace from Eamon Walsh.- Update to Upstream * Merged reset_selinux_config() for load policy from Dan Walsh.- Reload library on loading of policy to handle chroot- Update to Upstream * Merged avc_has_perm() errno fix from Eamon Walsh.- Update to Upstream * Regenerated Flask headers from refpolicy flask definitions.- Update to Upstream * Merged compute_member AVC function and manpages from Eamon Walsh. * Provide more error reporting on load policy failures from Stephen Smalley.- Update to Upstream * Merged new X label "poly_prop" namespace from Eamon Walsh.- Update to Upstream * Disable setlocaldefs if no local boolean or users files are present from Stephen Smalley. * Skip userspace preservebools processing for Linux >= 2.6.22 from Stephen Smalley.- Update to Upstream * Merged fix for audit2why from Dan Walsh.- Fix audit2why to grab latest policy versus the one selected by the kernel* Merged audit2why python binding from Dan Walsh.* Merged updated swig bindings from Dan Walsh, including typemap for pid_t.- Update to use libsepol-static library- Move libselinux.a to -static package - Spec cleanups- Put back libselinux.a- Fix memory references in audit2why and change to use tuples - Update to Upstream * Fix for the avc: granted null message bug from Stephen Smalley.- Fix __init__.py specification- Add audit2why python bindings- Add pid_t typemap for swig bindings- smp_mflag- Fix spec file caused by spec review- Upgrade to upstream * matchpathcon(8) man page update from Dan Walsh.- Upgrade to upstream * dlopen libsepol.so.1 rather than libsepol.so from Stephen Smalley. * Based on a suggestion from Ulrich Drepper, defer regex compilation until we have a stem match, by Stephen Smalley. * A further optimization would be to defer regex compilation until we have a complete match of the constant prefix of the regex - TBD.- Upgrade to upstream * Regenerated Flask headers from policy.- Upgrade to upstream * AVC enforcing mode override patch from Eamon Walsh. * Aligned attributes in AVC netlink code from Eamon Walsh. - Move libselinux.so back into devel package, procps has been fixed- Upgrade to upstream * Merged refactored AVC netlink code from Eamon Walsh. * Merged new X label namespaces from Eamon Walsh. * Bux fix and minor refactoring in string representation code.- Upgrade to upstream * Merged selinux_get_callback, avc_open, empty string mapping from Eamon Walsh.- Upgrade to upstream * Fix segfault resulting from missing file_contexts file.- Fix segfault on missing file_context file- Upgrade to upstream * Make netlink socket close-on-exec to avoid descriptor leakage from Dan Walsh. * Pass CFLAGS when using gcc for linking from Dennis Gilmore.- Add sparc patch to from Dennis Gilmore to build on Sparc platform- Remove leaked file descriptor- Upgrade to latest from NSA * Fix selabel option flag setting for 64-bit from Stephen Smalley.- Change matchpatcon to use syslog instead of syserror- Upgrade to latest from NSA * Re-map a getxattr return value of 0 to a getfilecon return value of -1 with errno EOPNOTSUPP from Stephen Smalley. * Fall back to the compat code for security_class_to_string and security_av_perm_to_string from Stephen Smalley. * Fix swig binding for rpm_execcon from James Athey.- Apply James Athway patch to fix rpm_execcon python binding- Move libselinux.so back into main package, breaks procps- Upgrade to upstream * Fix file_contexts.homedirs path from Todd Miller.- Remove requirement on setransd, Moved to selinux-policy-mls- Move libselinux.so into devel package - Upgrade to upstream * Fix segfault resulting from uninitialized print-callback pointer. * Added x_contexts path function patch from Eamon Walsh. * Fix build for EMBEDDED=y from Yuichi Nakamura. * Fix markup problems in selinux man pages from Dan Walsh.- Upgrade to upstream * Updated version for stable branch. * Added x_contexts path function patch from Eamon Walsh. * Fix build for EMBEDDED=y from Yuichi Nakamura. * Fix markup problems in selinux man pages from Dan Walsh. * Updated av_permissions.h and flask.h to include new nscd permissions from Dan Walsh. * Added swigify to top-level Makefile from Dan Walsh. * Fix for string_to_security_class segfault on x86_64 from Stephen Smalley.- Apply Steven Smalley patch to fix segfault in string_to_security_class- Fix matchpathcon to set default myprintf- Upgrade to upstream * Fix for getfilecon() for zero-length contexts from Stephen Smalley.- Update to match flask/access_vectors in policy- Fix man page markup lanquage for translations- Fix semanage segfault on x86 platform- Upgrade to upstream * Labeling and callback interface patches from Eamon Walsh.- Refactored swig- Upgrade to upstream * Class and permission mapping support patches from Eamon Walsh. * Object class discovery support patches from Chris PeBenito. * Refactoring and errno support in string representation code.- Upgrade to upstream - Merged patch to reduce size of libselinux and remove need for libsepol for embedded systems from Yuichi Nakamura. This patch also turns the link-time dependency on libsepol into a runtime (dlopen) dependency even in the non-embedded case. 2.0.17 2007-05-31 * Updated Lindent script and reindented two header files.- Upgrade to upstream * Merged additional swig python bindings from Dan Walsh. * Merged helpful message when selinuxfs mount fails patch from Dax Kelson.- Upgrade to upstream * Merged build fix for avc_internal.c from Joshua Brindle.- Add get_context_list funcitions to swig file- Upgrade to upstream * Merged rpm_execcon python binding fix, matchpathcon man page fix, and getsebool -a handling for EACCES from Dan Walsh.- Add missing interface- Upgrade to upstream * Merged support for getting initial contexts from James Carter.- Upgrade to upstream * Merged userspace AVC patch to follow kernel's behavior for permissive mode in caching previous denials from Eamon Walsh. * Merged sidput(NULL) patch from Eamon Walsh.- Make rpm_exec swig work- Upgrade to upstream * Merged class/av string conversion and avc_compute_create patch from Eamon Walsh.- Upgrade to upstream * Merged fix for avc.h #include's from Eamon Walsh.- Add stdint.h to avc.h- Merged patch to drop support for CACHETRANS=0 config option from Steve Grubb. - Merged patch to drop support for old /etc/sysconfig/selinux and - /etc/security policy file layout from Steve Grubb.- Do not fail on permission denied in getsebool- Upgrade to upstream * Merged init_selinuxmnt() and is_selinux_enabled() improvements from Steve Grubb.- Upgrade to upstream * Removed sending of setrans init message. * Merged matchpathcon memory leak fix from Steve Grubb.- Upgrade to upstream * Merged more swig initializers from Dan Walsh.- Upgrade to upstream * Merged patch from Todd Miller to convert int types over to C99 style.- Merged patch from Todd Miller to remove sscanf in matchpathcon.c because of the use of the non-standard format (original patch changed for style). - Merged patch from Todd Miller to fix memory leak in matchpathcon.c.- Add context function to python to split context into 4 parts- Upgrade to upstream * Updated version for stable branch.- Upgrade to upstream * Merged man page updates to make "apropos selinux" work from Dan Walsh.- Upgrade to upstream * Merged getdefaultcon utility from Dan Walsh.- Add Ulrich NSCD__GETSERV and NSCD__SHMEMGRP for Uli- Add reference to selinux man page in all man pages to make apropos work Resolves: # 217881- Upstream wanted some minor changes, upgrading to keep api the same - Upgrade to upstream * Merged selinux_check_securetty_context() and support from Dan Walsh. Resolves: #200110- Cleanup patch- Add securetty handling Resolves: #200110- Upgrade to upstream * Merged patch for matchpathcon utility to use file mode information when available from Dan Walsh.- rebuild against python 2.5- Fix matchpathcon to lstat files- Update man page- Upgrade to upstream- Add James Antill patch for login verification of MLS Levels - MLS ragnes need to be checked, Eg. login/cron. This patch adds infrastructure.- Upgrade to latest from NSA * Merged updated flask definitions from Darrel Goeddel. This adds the context security class, and also adds the string definitions for setsockcreate and polmatch.- Upgrade to latest from NSA * Updated version for release.- rebuilt for unwind info generation, broken in gcc-4.1.1-21- Upgrade to latest from NSA * Merged av_permissions.h update from Steve Grubb, adding setsockcreate and polmatch definitions.- really make -devel depend on libsepol-devel- Add sgrubb patch for polmatch- Upgrade to latest from NSA * Merged patch from Steve Smalley to fix SIGPIPE in setrans_client- have -devel require libsepol-devel- Upgrade to latest from NSA * Merged patch to not log avc stats upon a reset from Steve Grubb. * Applied patch to revert compat_net setting upon policy load. * Merged file context homedir and local path functions from Chris PeBenito.- rebuilt with latest binutils to pick up 64K -z commonpagesize on ppc* (#203001)- Upgrade to latest from NSA * Merged file context homedir and local path functions from Chris PeBenito. * Rework functions that access /proc/pid/attr to access the per-thread nodes, and unify the code to simplify maintenance.- Upgrade to latest from NSA * Merged return value fix for *getfilecon() from Dan Walsh. * Merged sockcreate interfaces from Eric Paris.- Fix translation return codes to return size of buffer- Upgrade to latest from NSA * Merged no-tls-direct-seg-refs patch from Jeremy Katz. * Merged netfilter_contexts support patch from Chris PeBenito.- Upgrade to latest from NSA * Merged context_*_set errno patch from Jim Meyering.- only build non-fpic objects with -mno-tls-direct-seg-refs- build with -mno-tls-direct-seg-refs on x86 to avoid triggering segfaults with xen (#200783)- Rebuild for new gcc- Fix libselinux to not telinit during installs- Upgrade to latest from NSA * Lindent. * Merged {get,set}procattrcon patch set from Eric Paris. * Merged re-base of keycreate patch originally by Michael LeMay from Eric Paris. * Regenerated Flask headers from refpolicy. * Merged patch from Dan Walsh with: - Added selinux_file_context_{cmp,verify}. - Added selinux_lsetfilecon_default. - Delay translation of contexts in matchpathcon.- Yet another change to matchpathcon- Turn off error printing in library. Need to compile with DEBUG to get it back- Fix error reporting of matchpathcon- Add function to compare file context on disk versus contexts in file_contexts file.- Upgrade to latest from NSA * Merged patch from Dan Walsh with: * Added selinux_getpolicytype() function. * Modified setrans code to skip processing if !mls_enabled. * Set errno in the !selinux_mnt case. * Allocate large buffers from the heap, not on stack. Affects is_context_customizable, selinux_init_load_policy, and selinux_getenforcemode.- Add selinux_getpolicytype()- Upgrade to latest from NSA * Merged !selinux_mnt checks from Ian Kent.- Check for selinux_mnt == NULL- Merged matchmediacon and trans_to_raw_context fixes from Serge Hallyn.- Remove getseuser- Bump requires to grab latest libsepol- Add BuildRequires for swig- Upgrade to latest from NSA * Merged simple setrans client cache from Dan Walsh. Merged avcstat patch from Russell Coker. * Modified selinux_mkload_policy() to also set /selinux/compat_net appropriately for the loaded policy.- More fixes for translation cache - Upgrade to latest from NSA * Added matchpathcon_fini() function to free memory allocated by matchpathcon_init().- Add simple cache to improve translation speed- Upgrade to latest from NSA * Merged setrans client cleanup patch from Steve Grubb.- Add Russell's AVC patch to handle large numbers- Upgrade to latest from NSA * Merged getfscreatecon man page fix from Dan Walsh. * Updated booleans(8) man page to drop references to the old booleans file and to note that setsebool can be used to set the boot-time defaults via -P.- Upgrade to latest from NSA * Merged fix warnings patch from Karl MacMillan. * Merged setrans client support from Dan Walsh. This removes use of libsetrans. * Merged patch to eliminate use of PAGE_SIZE constant from Dan Walsh. * Merged swig typemap fixes from Glauber de Oliveira Costa.- Change the way translations work, Use setransd/remove libsetrans- Add selinuxswig fixes - Stop using PAGE_SIZE and start using sysconf(_SC_PAGE_SIZE)- Upgrade to latest from NSA * Added distclean target to Makefile. * Regenerated swig files. * Changed matchpathcon_init to verify that the spec file is a regular file. * Merged python binding t_output_helper removal patch from Dan Walsh.- Fix python bindings for matchpathcon - Fix booleans man page- Merged Makefile PYLIBVER definition patch from Dan Walsh.- Make some fixes so it will build on RHEL4 - Upgrade to latest from NSA * Updated version for release. * Altered rpm_execcon fallback logic for permissive mode to also handle case where /selinux/enforce is not available.- bump again for double-long bug on ppc(64)- rebuilt for new gcc4.1 snapshot and glibc changes- Upgrade to latest from NSA * Merged install-pywrap Makefile patch from Joshua Brindle.- Upgrade to latest from NSA * Merged pywrap Makefile patch from Dan Walsh.- Split out pywrap in Makefile- Upgrade to latest from NSA * Added getseuser test program.- Upgrade to latest from NSA * Added format attribute to myprintf in matchpathcon.c and removed obsoleted rootlen variable in init_selinux_config().- Build with new libsepol- Upgrade to latest from NSA * Merged several fixes and improvements from Ulrich Drepper (Red Hat), including: - corrected use of getline - further calls to __fsetlocking for local files - use of strdupa and asprintf - proper handling of dirent in booleans code - use of -z relro - several other optimizations * Merged getpidcon python wrapper from Dan Walsh (Red Hat).- Add build requires line for libsepol-devel- Fix swig call for getpidcon- Move libselinux.so to base package- Upgrade to latest from NSA * Merged call to finish_context_translations from Dan Walsh. This eliminates a memory leak from failing to release memory allocated by libsetrans.- update to latest libsetrans - Fix potential memory leak- rebuilt- Update to never version * Merged patch for swig interfaces from Dan Walsh.- Update to never version- Fix some of the python swig objects- Update to latest from NSA * Added MATCHPATHCON_VALIDATE flag for set_matchpathcon_flags() and modified matchpathcon implementation to make context validation/ canonicalization optional at matchpathcon_init time, deferring it to a successful matchpathcon by default unless the new flag is set by the caller. * Added matchpathcon_init_prefix() interface, and reworked matchpathcon implementation to support selective loading of file contexts entries based on prefix matching between the pathname regex stems and the specified path prefix (stem must be a prefix of the specified path prefix).- Update to latest from NSA * Change getsebool to return on/off instead of active/inactive- Update to latest from NSA * Added -f file_contexts option to matchpathcon util. Fixed warning message in matchpathcon_init(). * Merged Makefile python definitions patch from Dan Walsh.- Update to latest from NSA * Merged swigify patch from Dan Walsh.- Separate out libselinux-python bindings into separate rpm- Read libsetrans requirement- Add python bindings- Update to latest from NSA * Merged make failure in rpm_execcon non-fatal in permissive mode patch from Ivan Gyurdiev.- Remove requirement for libsetrans- Update to latest from NSA * Added MATCHPATHCON_NOTRANS flag for set_matchpathcon_flags() and modified matchpathcon_init() to skip context translation if it is set by the caller.- Update to latest from NSA * Added security_canonicalize_context() interface and set_matchpathcon_canoncon() interface for obtaining canonical contexts. Changed matchpathcon internals to obtain canonical contexts by default. Provided fallback for kernels that lack extended selinuxfs context interface. - Patch to not translate mls when calling setfiles- Update to latest from NSA * Merged seusers parser changes from Ivan Gyurdiev. * Merged setsebool to libsemanage patch from Ivan Gyurdiev. * Changed seusers parser to reject empty fields.- Update to latest from NSA * Merged seusers empty level handling patch from Jonathan Kim (TCS).- Rebuild for latest libsepol- Rebuild for latest libsepol- Change default to __default__- Change default to __default__- Add selinux_translations_path- Update to latest from NSA * Merged selinux_path() and selinux_homedir_context_path() functions from Joshua Brindle.- Need to check for /sbin/telinit- Update to latest from NSA * Merged fixes for make DESTDIR= builds from Joshua Brindle.- Update to latest from NSA * Merged get_default_context_with_rolelevel and man pages from Dan Walsh (Red Hat). * Updated call to sepol_policydb_to_image for sepol changes. * Changed getseuserbyname to ignore empty lines and to handle no matching entry in the same manner as no seusers file.- Tell init to reexec itself in post script- Update to latest from NSA * Changed selinux_mkload_policy to try downgrading the latest policy version available to the kernel-supported version. * Changed selinux_mkload_policy to fall back to the maximum policy version supported by libsepol if the kernel policy version falls outside of the supported range.- Update to latest from NSA * Changed getseuserbyname to fall back to the Linux username and NULL level if seusers config file doesn't exist unless REQUIRESEUSERS=1 is set in /etc/selinux/config. * Moved seusers.conf under $SELINUXTYPE and renamed to seusers.- Update to latest from NSA * Added selinux_init_load_policy() function as an even higher level interface for the initial policy load by /sbin/init. This obsoletes the load_policy() function in the sysvinit-selinux.patch. * Added selinux_mkload_policy() function as a higher level interface for loading policy than the security_load_policy() interface.- Update to latest from NSA * Merged fix for matchpathcon (regcomp error checking) from Johan Fischer. Also added use of regerror to obtain the error string for inclusion in the error message.- Update to latest from NSA * Changed getseuserbyname to not require (and ignore if present) the MLS level in seusers.conf if MLS is disabled, setting *level to NULL in this case.- Update to latest from NSA * Merged getseuserbyname patch from Dan Walsh.- Fix patch to satisfy upstream- Update to latest from NSA - Add getseuserbyname- Fix patch call- Fix strip_con call- Go back to original libsetrans code- Eliminate forth param from mls context when mls is not enabled.- Update from NSA * Merged modified form of patch to avoid dlopen/dlclose by the static libselinux from Dan Walsh. Users of the static libselinux will not have any context translation by default.- Update from NSA * Added public functions to export context translation to users of libselinux (selinux_trans_to_raw_context, selinux_raw_to_trans_context).- Update from NSA * Remove special definition for context_range_set; use common code.- Update from NSA * Hid translation-related symbols entirely and ensured that raw functions have hidden definitions for internal use. * Allowed setting NULL via context_set* functions. * Allowed whitespace in MLS component of context. * Changed rpm_execcon to use translated functions to workaround lack of MLS level on upgraded systems.- Allow set_comp on unset ranges- Merged context translation patch, originally by TCS, with modifications by Dan Walsh (Red Hat).- Apply translation patch- Update from NSA * Merged several fixes for error handling paths in the AVC sidtab, matchpathcon, booleans, context, and get_context_list code from Serge Hallyn (IBM). Bugs found by Coverity. * Removed setupns; migrated to pam. * Merged patches to rename checkPasswdAccess() from Joshua Brindle. Original symbol is temporarily retained for compatibility until all callers are updated.- Update makefiles- Update from NSA * Merged security_setupns() from Chad Sellers. - fix selinuxenabled man page- Update from NSA * Merged avcstat and selinux man page from Dan Walsh. * Changed security_load_booleans to process booleans.local even if booleans file doesn't exist.- Fix avcstat to clear totals- Add info to man page- Update from NSA * Merged set_selinuxmnt patch from Bill Nottingham (Red Hat). * Rewrote get_ordered_context_list and helpers, including changing logic to allow variable MLS fields.- Update from NSA- Add backin matchpathcon- Fix selinux_policy_root man page- Change assert(selinux_mnt) to if (!selinux_mnt) return -1;- Update from NSA * Fixed bug in matchpathcon_filespec_destroy.- Update from NSA * Fixed bug in rpm_execcon error handling path.- Update from NSA * Merged fix for set_matchpathcon* functions from Andreas Steinmetz. * Merged fix for getconlist utility from Andreas Steinmetz.- Update from NSA- Better handling of booleans- Update from NSA * Merged destructors patch from Tomas Mraz.- Update from NSA * Added set_matchpathcon_flags() function for setting flags controlling operation of matchpathcon. MATCHPATHCON_BASEONLY means only process the base file_contexts file, not file_contexts.homedirs or file_contexts.local, and is for use by setfiles -c. * Updated matchpathcon.3 man page.- Update from NSA- Update from NSA * Fixed bug in matchpathcon_filespec_add() - failure to clear fl_head.- Update from NSA * Changed matchpathcon_common to ignore any non-format bits in the mode.- Default matchpathcon to regular files if the user specifies a mode- Update from NSA * Merged several fixes from Ulrich Drepper.- Fix matchpathcon on eof.- Update from NSA * Merged matchpathcon patch for file_contexts.homedir from Dan Walsh. * Added selinux_users_path() for path to directory containing system.users and local.users.- Process file_context.homedir- Update from NSA * Changed relabel Makefile target to use restorecon.- Update from NSA * Regenerated av_permissions.h.- Update from NSA * Modified avc_dump_av to explicitly check for any permissions that cannot be mapped to string names and display them as a hex value. * Regenerated av_permissions.h.- Update from NSA * Generalized matchpathcon internals, exported more interfaces, and moved additional code from setfiles into libselinux so that setfiles can directly use matchpathcon.- Update from NSA * Prevent overflow of spec array in matchpathcon. * Fixed several uses of internal functions to avoid relocations. * Changed rpm_execcon to check is_selinux_enabled() and fallback to a regular execve if not enabled (or unable to determine due to a lack of /proc, e.g. chroot'd environment).- Update from NSA * Merged minor fix for avcstat from Dan Walsh.- rpmexeccon should not fail in permissive mode.- fix printf in avcstat- Update from NSA- Modify matchpathcon to also process file_contexts.local if it exists- Add is_customizable_types function call- Update to latest from upstream * Just changing version number to match upstream- Update to latest from upstream * Changed matchpathcon to return -1 with errno ENOENT for <> entries, and also for an empty file_contexts configuration.- Fix link devel libraries- Fix unitialized variable in avcstat.c- Upgrade to upstream * Removed some trivial utils that were not useful or redundant. * Changed BINDIR default to /usr/sbin to match change in Fedora. * Added security_compute_member. * Added man page for setcon.- Upgrade to upstream- Add avcstat program- Add lots of missing man pages- Fix output of getsebool.- Update from upstream, fix setsebool -P segfault- Add a patch from upstream. Fixes signed/unsigned issues, and incomplete structure copy.- More fixes from sgrubb, better syslog- Have setsebool and togglesebool log changes to syslog- Add patch to make setsebool update bool on disk - Make togglesebool have a rollback capability in case it blows up inflight- Upgrade to latest from NSA- Changed the location of the utilities to /usr/sbin since normal users can't use them anyways.- Updated various utilities, removed utilities that are for testing, added man pages.- Add -g flag to make - Upgrade to latest from NSA * Added rpm_execcon.- Upgrade to latest from NSA * Merged setenforce and removable context patch from Dan Walsh. * Merged build fix for alpha from Ulrich Drepper. * Removed copyright/license from selinux_netlink.h - definitions only.- Change setenforce to accept Enforcing and Permissive- Add alpha patch- Upgrade to latest from NSA- Add selinux_removable_context_path- Update from NSA * Add matchmediacon- Update from NSA * Merged in matchmediacon changes.- Update from NSA * Regenerated headers for new nscd permissions.- Add matchmediacon- Update from NSA * Added get_default_context_with_role.- Clean up spec file * Patch from Matthias Saou- Update from NSA * Added set_matchpathcon_printf.- Update from NSA * Reworked av_inherit.h to allow easier re-use by kernel.- Add strcasecmp in selinux_config - Update from NSA * Changed avc_has_perm_noaudit to not fail on netlink errors. * Changed avc netlink code to check pid based on patch by Steve Grubb. * Merged second optimization patch from Ulrich Drepper. * Changed matchpathcon to skip invalid file_contexts entries. * Made string tables private to libselinux. * Merged strcat->stpcpy patch from Ulrich Drepper. * Merged matchpathcon man page from Dan Walsh. * Merged patch to eliminate PLTs for local syms from Ulrich Drepper. * Autobind netlink socket. * Dropped compatibility code from security_compute_user. * Merged fix for context_range_set from Chad Hanson. * Merged allocation failure checking patch from Chad Hanson. * Merged avc netlink error message patch from Colin Walters.- Update from NSA * Merged second optimization patch from Ulrich Drepper. * Changed matchpathcon to skip invalid file_contexts entries. * Made string tables private to libselinux. * Merged strcat->stpcpy patch from Ulrich Drepper. * Merged matchpathcon man page from Dan Walsh. * Merged patch to eliminate PLTs for local syms from Ulrich Drepper. * Autobind netlink socket. * Dropped compatibility code from security_compute_user. * Merged fix for context_range_set from Chad Hanson. * Merged allocation failure checking patch from Chad Hanson. * Merged avc netlink error message patch from Colin Walters.- Update from NSA - Add optflags- Update from NSA- Add matchpathcon man page - Latest from NSA * Merged patch to eliminate PLTs for local syms from Ulrich Drepper. * Autobind netlink socket. * Dropped compatibility code from security_compute_user. * Merged fix for context_range_set from Chad Hanson. * Merged allocation failure checking patch from Chad Hanson. * Merged avc netlink error message patch from Colin Walters.- Latest from NSA * Autobind netlink socket. * Dropped compatibility code from security_compute_user. * Merged fix for context_range_set from Chad Hanson. * Merged allocation failure checking patch from Chad Hanson. * Merged avc netlink error message patch from Colin Walters.- Latest from NSA- New upstream version- Latest from Upstream- Fix man pages- Latest from Upstream- Latest from Upstream- Add man page for boolean functions and SELinux- Latest from NSA- Latest from NSA- uppercase getenforce returns, to make them match system-config-securitylevel- Remove old path patch- Update to latest from NSA - Add fix to only get old path if file_context file exists in old location- Update to latest from NSA- add nlclass patch - Update to latest from NSA- rebuilt- Fix selinux_config to break once it finds SELINUXTYPE.-Update with latest from NSA- Change to use new policy mechanism- add man patch- Update with latest from NSA- Update with latest from NSA- Add changes for relaxed policy - Update to match NSA- Add relaxed policy changes- Sync with NSA- Remove requires glibc>2.3.4- Fix selinuxenabled man page.- Upgrade to 1.11- Add memleaks patch- Upgrade to latest from NSA and add more man pages- Update to match NSA - Cleanup some man pages- Upgrade to latest from NSA- Add Russell's Man pages- Change getenforce to also check is_selinux_enabled- Add ownership to /usr/include/selinux- fix location of file_contexts file.- Fix matchpathcon to use BUFSIZ- rebuilt- add matchpathcon- rebuilt- Add rootok patch- Updated getpeernam patch- Add getpeernam patch- Add getpeercon patch- Put mntpoint patch, because found fix for SysVinit- Add remove mntpoint patch, because it breaks SysVinit- Add mntpoint patch for SysVinit- Add -r -u -t to getcon- Upgrade to latest from NSA- Fix x86_64 build- Latest tarball from NSA.- Update with latest changes from NSA- Change location of .so file- Break out into development library- Move location of libselinux.so to /lib- Add selinuxenabled patch- Update with final NSA 1.2 sources.- Update with latest from NSA.- Fix to build on x86_64- update for version 1.2- Initial version2.9-6.el82.9-6.el8libselinux.a/usr/lib64/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protectioncpioxz2aarch64-redhat-linux-gnucurrent ar archiveutf-8d4e0b003efcf4c23335c951e019b5bc5208a8546462d4df8ded468cc19eb5dd1?p7zXZ !#,Q ] b2u Q{LT24GMr;珜2>֨GCdB7=*TuJ1Eo@! R0TɇScPXڀ12ri/t:A0+.% _# 9/Wi<OAFTg9mF-ЦQJ*m;"+j\*qfaS@8nһk[C8SeE,eur 4GlFh_'PjclU ]s]wx񝎛@;N0!?#D) kW!BUZԬ sL}D-n%ݥ4Z9pX?LFď(wD-h]afx,t'P:b8k ZI+oM1R?KC|keᔛqɡr~}AavG~i lwTǔn_5iNO֋@]4k ãfTHJ >ŔZJ=^ ˯QrK,#n[-p`\4dź`/|4y~Ms/[UG?گ咽n\Efxy7(pGa}?@zܖ~lu܍D~4`8{q MM(7P,t-RD?HNcߧn8ȗq='c.ij̄҇.!U:?y[{i꼚Q`hKp`eݳÒB#*-t˶`HICȏtg8xoD?'k)VEɏ:VZ3CNhݾ(;RAֽ >\"\ >[MJڧ-(֔O"3|KybJ 좜O]-,)%UtNZzy19=Bh2"J<ڠ`iSy+p&.e]~e d/gLs L y{Xzj+>]Q {X7%v'o9k:x:a®c(Zɑq~+!"`"8"+y>=WJ.DzEh" 6hJ5@eXlcm38p&1.Ycx'19P<>vTeV %G~O۽-b;.j\i sLKO::|- k "4uSR~>-dC[Yj1s=VGUn1 |kes>st E@C d̅qS5 2t X]YҶ{'T?Xp1ז!A/syҷ4hTcFƗ5T%?l䠇2Mưwo};-:{3||g9C+bvF.%$`:iĄXFbR `'@c|(8 (Tf2}Z: ?cMz>!i.^-XfY]2)Tj^i#tW+QĢ>l[^}5P*T$R5C8݋ 9}4Ua4#n6ety>REL;BE](|A݁mD&1=6$8;j(7 "jKq],{q>Ͽ[5f*;ыn%K v^HQ%5"!-#JHκCެ\yuU2u2!fCМߒNnR]8NS4nu-K'p˪F~H=}u7iY7*UxЬdnjKNsǞ5e۲ף",,Ae'"۷ ʝ$GӺPaץV~CdjT_(Z )z%0vpCJgh @.K'8o<+@ WR'a7\S92N)`~Zku+xQ+F=O"#D2WcfTA`oy0& ]@‚Jٌ;8V1Mtgs޲~mhlia,I4/)vd k Tz@0&!\Ɉ6 G.H\GN4kY1BU6Oj1qYAC|t\msd#uj!<#-me OS~6KS tą>l' a~<$֪UY^G[ j(\l -+gS^̀G8zxat;$^3&"ez~D S6/cRSVs: ft!٨ Y z"`YMȖEsmUP+\HOZ5ijsh\ s0d\Le('܅O6]d[n}&\c,CS#$nMvs&>G%s   uO xřy|0C( aNy 9̉sws Gf4t4Bⴐ;zm+<W9Ǣ%3IϐzXxTUaHOִr]L>))sSхC/|gye@N]Ctۛ%Fe*dj賒u8$-Sa 6Di|ЅBt3^\/Ԝup67V I\qXiMY*SU"i6uy6S4g@/KS6n39@8tDW*.|#n,yp΃%: O/(2_Unz:*jARee<5Su-(,oT"<z Ww`ƙt&F]jQLIk|QIOB1e6ZKL|Y;j ZfTf:n8dO=E|88yMKڒ0%Q#s_|DbUZ⼞nrnl]gRYb)cgxZh/IeAu͌ J~ew0D0,-Qg* Ր{5 @d"0Dy(؂ޯ;<9meW{/!ؐҸih׍n8@!l]bc '&$7A_q23QN{6#)Ƭ$w7&K H'{-ĚXܼK &b^FE<$tB2=8A_J\kXّЦP^<˧e%.@S̗XXRY޾[v# |&\"QفCKV%:wk|)Le@fyf&B0Ȧ@O4Cz^Rf_uyoW]^5*Z;dގpôu ncف5_ xıy>ɡUlK r#QĊ/2m1&e1Zz[Q-8bG>݂\p ~HXH¼/i9L%%\pa ŷOS#i\@,RMQI25J$fvܦ9atm]֣D =@cH!P|Kw@4V -B#TY t.Q}7d Rw6{L!6 8V!TɁTT 6 _܇=vVQ[M"ݝym.J{oV ,Jg3{6h0fH&1( +7S7c˝Js>7zn5ӬN~?^i>3oo5!$ 1(~Σ+_+S`>R<>ti)j&u.}G|xO90vO*q&35MZz_{z m ~)Y!&%?P`\pQERo-h0}u]UQk*9WGqΥ$6T@âq2{cI`{0|^%LB:b V"jRM`t+. oaȺ˟7$d-㩾JA bޜ|)Sϗ/ 4/W!DH-4#o̱w=azW9H3zp۝-| rNN|D0@f&*/>noדxBes'CѰ *ӛ4-Ad§R0˯LL#u%DNKSyc `O] #\ׯ;DpUaȮ=0 M0kƿ~bXd d1]t(ـԳlno؄U/yGҗwSXLwJB%˪p`!>nVBu r?㦎i⇅!- ۯЪ쒠 Rc(*u"^1nm٤Hɞ>P4fqE{.<[^j .&JCSg =DQ:Q-yl!#iaˇY_=lY6{#U5P)*C & *}Oy蘆\Ҹ~AJz<] k&ӫ;ϗ:kLI6קm+s5ս >?d@qv GϰmĒc2)uPBb-GCR^6Gu֕&V{$˴:!Uw|OSL3a`< elm;M@%'73:rhdUVri (MӪ0'4~n^] dyRgg8HW9_iHs&e'uQL6$-ӮM5 gNdذV41 A. _V=)dB.{` :\Ƞ7Y̔q8܌%2fxM_ Ư&ۀnIb+jKn_'A02b pTxBzCc KOMߩ×\46 {tta.R'FkLEAku>pQѯF)\^5)(\b7MY mX!=ZvT'KG+-'UΚRlioX"q]xK߰`dNrM8ԑe006"+ I훘L5ꑅ/V YAp|go?B)~כubV3*qtbm!4I8ጔr`d]h⢞ͺxD]BMX<,]=YMok.',&= *om(|7a#uIC涔;ʒ&Ij\O#! )Q+ɒ'N '*?+Knd#X*XVt8LV) :k.x*n‡&c$*mJ"*Vg!M,Uk&?Y)eG9#4Mx/G.ămpn-7+c*~V'PN?s4q(J7oOS 嬃TS9DC/h;]CK`S/XB-e9 g~Cs\tI8 `lf97xŒ9 6ZyX /E>-U·s4l{.Ib-~Ğ$9,O* OA?NFT i^ BrQ0&Oz2&52cp$*3@UՉTS,3mU!T;Dݡm&ooc% •Uʹ3?i iD)Zo*MLIKˆuN.I] fٛd]'H&L[\wK-qxKzO&KUN01JM˿ORSkQ7? _Xjʥ3N#i 68uVٻHeq*v^ܺ"ZSkc!xU:5 <#rDk4׳ 3~*s- , ,zu4V|]4חnk@O:P%T6T3eTCu HBY5NVX 6(/M$w='%;IՏ)5zvt }5b;>Io||q@̘\ 3rM|-k@~@Qҿ/_=鶃 )8n|a$aߓS ;)-qVJ{r=&̎Է5 ~]qt(~'@Pi|A#["P~mjF$p]aL{wβfI;6;oWFrwl QͫM5 {dh'\qGe2p$h6 G/BxNBS{ \uDXgÄa[[Fhެ˗[][=N͗녢٘-(wZ(FHBj|=?Ї~$w:HwnyQ'6\}@^Yo ]PB|9qʁimhbs'^wAWvB qz"˿f [_$#/5MY&*_V{o3@9)H*1|ی;l~&݅0:cl7J .Xmz@ۑH[Q xezi *WE0LhӝP^jZsaW%tOnnUԁd"u-=#5~ fN1\wP[?j{5Szk[鯂(7C]pc ʡ/y(@=?*07ϔ4cNkTiFrHVfG,ߡ]GNJDa^Gյ J<(GUb\̰,c '1ʺnڨӵ@ Ξg8Wf[B">&Z"Vg4G(K$BxNҫ;ai~xhKPŃ[ӫDӣ&0r!y^<-ؗ1 Oh|qy* {!LFDf[wBGOu.跏Bڗd?R,2 XkC/*ߌȲBϷe@O72B"I-^TE7  ƐF%PD} -b%_z(i,V7mh_lNʠgx#x IUfUR\ȅaF{2c$ipxe=P,yGZ]VmTpwfG]k0XLLrCxWB]IAE;CU)1%S)nb'ċв~`="@}hag%w s̿,H1PJqڈHvdAi;UHفl^˶<+@<†K,)^P[J%޸#Oe}KyO/͢1NmUBσ_pS2r2=D7UfoBС۬n?,u#= e@T|]Ki)z9dSܦZu;5M` hfT*CA(VnűɚuEkCuC+(X(IK]E5V\Si}"(ϡwW(Iai c|"~ )D4u~=,c/udẨs:0'x$+?k{iLMAq7zhN:@]T~$iiR~;M=w,ܴw:[薪:H δbKϝ>-Y5v ;_TH7rˆi)aN6sK_D 5~f@9Q ۉeEfIU9]lu&݉'drd!W6~aq"bTwc,£~IГ*f1_ƻ%F9E{9;`1Kx`];UYLnȁ}@ƾ( 1W(b\HReMoMRɢv|5g1߷#QVbw`SVFo`=q\ғmTu2)ujkv܁VAAmXK$ zSZ߫Z w,(P0\,8 me2#ח75'Pf!XKŞBJ^Zּ,iFdyhK{7 n:؉ϻ|QjPވ嚤 U+_p&go᤯y>ʞa( #3(EKD~{<0Z]}݌CxNq0ѮIɞN=ygr}"NڊXye[y2s 1u̺@w5Xw*o\!xݟ ~ ߮P\\}Ԥ8 ΍t&cMˤw&vAZJ!c%P-]l(i/}ddГ&V|}kzt)FDHhBd\${´zlaQ`-A"AEwbDa C1 d<g"QX$c;Mk_ș'yޜpcZr3dI4B{jOUAo*,6LkE Tn3YfG47ЩŠ6 kTY~tGWA$nB,NadzƥEKk󽚢\w!JeDEq:c}·|8[;KISs$Z#rc?j!=0NЏ=L/Y&(hnkj\CGuf40HSc](xg/WNW@Q/oڐ0QTdA4PыzuxM1/KDծUe=#v-Jb)յIrE-G&JF!Κq:qGD/%:߇8xab8w:'(>*Yo 274ms/PִޒةQ5!Gp:Cga\e6ipM%6cXZ͐J(W)aHcK@.GR lZs'I) x]LmԮ:㹰UG'c'x񙌈*~x6Ƃy.^:0 v1?G_ŝ;.f-BD:%}!`hWE[A' U ŔTS6_&w'S)κgNyG|]mv~mo91Ɇe$I6%]COS:+t5T+cNV̆Eˏ3qbcGaheGg\J3<ܱ T!4~XJӁ  n״4' P9;j10)"Mm8#I)PH`,6y'0KY㤖պvݙҡK>?+=熻hܝ ypzU&JN11aAĬNjGp}XFETt_4s$'a|Uk7Z\#[%BwLHXA̛h@mpȁ )&kBm tKȬB+Cư4~VEZ7b4Rk'X 9*FMƛ!2uax fQO:,(|iذWi126#EEejeR5kжP˞'kbġ "]!l]Zla9u?lG)0߱r p);ܛJ_H2Q. <6\#j:W(rW?mEhᬍN%XmF̘2XBY'ƬVH<+pLh;Y'BH]󟬌оnftL~!;߹4& $'ͬX$I)Xo͸c1YK-; yqe{%gE՘.:a츻M8=mpJ('á~ 3)?øeDFF+6>J,y]|^W ~ܗ.tߓ13 C˨Ywaw'&nQx)UIu׏asrKj L'|Bb;Xc*/19p3nݹCqfYo8$g~32#@YJ'>N~_"1]0gWx$o-Vu@>ms2rpg{V 72JxEg,t /QFҼ+0TMQ>-H!rx5HD͈f1? xw\#1V",Cѓ\CSϖM~TA/L._.5#HPCkEVP(W&suX $["&DFs:BJwoʉ+U6Vppyм;its~L9f4$ Fs(%d PVZK%bpm"85 c^I+޾ I4P/] k oJbi>fLq/Fx\9sΦm b\GʘᔥiT'sK9P*,*X)-1@Dom%In*<嬈%^jW+! )=3P ݮif[SHWх%xrQ:'dI vouK&A(OwOx_2/ă.+HNjcƚ3hNL/z>!Pu"жwBFudyl/\yQBtek_BE4dxzl:) Gĕ=NX{_ {ݻq.0yQӝ-p[u7V!6|Bsg]qjɋe}q Pkb 7L~Fk˳ / T9t]XP.3;xpb c&@$Mĵ铱oDrZ :%M-[[AiKmc}g?t丱0%7B^}) "?̪,L0``5]_{[ wyufM MNFSz.y:K8K +ٔD4O!!I%K~I \/أXj3ZXDE11{IuC0$t=f5Tʱ̊4딑? c,RQ gA@SH'~8&%u䴭ңݓ(LtgFcl8y7- pAw̐;@$nߪ|뀮W `U%5ApҶ\ot&y-Z[TIl^x>u{ lMO[,i]hHܵ_(@YDn0w-]?v1yW-Q}9?j>)(@{8̳%䏨 _qPP[YR=]xwZY԰H 8DgyѾ$jqW.#@: qPŮG~S:磍d P&_ХcT*h5ީq ?褧5b% m\7Yz _$c#9E`<4ViN|4 ~ſ׏BMa/$Ry54ӡ6Vx𖉒d`zn9rf9k愧+v@^ ^P# EzW cd6PԲmmbzBtvdXu0P|߄1x95Pi[:l,D4k9]J[#plTs}(pW؅.tq=Ɣy2z):µZWX-NhVfpIx"݇8.uW KY!JK~m%̧k>/tu h_-8o0o.viaPC蘝%GTo6W8lyvh0f#7PU[^%C7=\Åg9S-`EGܬ<W +sv뀰;"Y h~&"DlݪƊdԁg.cEaLp6rA}9SgH'tpT8[yyY(u"z+'ƫTf*ٿL68_zVi<5\[ōG -aaAHp^K -SxR|Ӌ2mT i d!>FcuÉFmPhϋ4v]*1&sM9BpS&P-Ч[(X 6;K@^ij^Q_IY,::bʚ؛3{YXI >T;ÛL 5FNb`^{}]oeQ/)=-‡&<Wf<ђm%+&_{CnWL؟]S:{_. V!O]}:E*~T7jGi^KhtDF♵υ2cݔVD>_~ᩨ:.;3typLLŢ ˳gÖyq)h8T`9C'+_=,$A̰H0nƓg5um? ThcQj磋-J ?𤀦2׸hO$$^ MJ%Ҽ7NVb?QĂUHr3keL ?%g=궡D)Yų!!ENt,Z{heԎt)UߚG0Rv7lx3%s Z*S+tavOvySЋ(a"Ͱu(Ɍŗ^A z1)57nЩ}M1&@+RG`i~=^rJ$E*#¢Ԯ J@Bl$K0ka֛UsKRoxa$5^Vd1_xߑ չ I"X.Y8O Rʷ+W 8yE/qS&bPFHD|tӬRh5}9ES0';Ex1a9QkLТHxȒ%h;l$A HxW 1iH4}J:7Dk-?^3*v*Qro Ñg=4P t0 Y K&B*rӸ}%ښ{V1V!85<{PUhP#I! `ҲC%]͌* kR!`P,Uxy85(3)_BD 1BE 2iDnN=ppe""sK͸ ޹?dkòJLnLQiQ UkݷUcǻpO979y請{?Y& K}xCadDo6ɲ 1 eBu)< OQ,",DGgaڒ' yjٺ}=+ח@B3r쟄a:ryye%+`HEr{ʕl62+eKMZfB&!*ɪ!kY޼DX ~<{G,ĝ#4SZ]յtrw={ ’b ;lv݂7geĕb-7#qX+˚1s O8JXN4`0/%K4CzLk"x|cCmBG騜Vp~h4MSqHz\>+[י2ӃSX>Ze6R}c<)Puay\]U(>7kcC8륔62g Ba,iztP[XpfM՝&7hcf5)\,YLGF<ۃRl53Ae2'J^8?5Ld dC/ԔMrsY~kF0yKY$=ɚ0^:X1{qn5 J-(݂eڂz®hRvŬ0۵s%>es- 訲P1R+8[ ~hMx[ P&vj/!RK۶s%8Nܬ΃0;>|> 2P 2YE^ J z$K7V2OrAWqt1ef}'Naə(60u 9G"MЌfg.ltkW 5?]Rx@z^ (ZhG~@`5 Prξ%dI* ߒ<:dkj>zr9E9xF #* 3ɒzD-z3.Qѣ=0T=0;ʅxO ,ݢX`\b/VØ|Y)/)9;㞮ES9zB "}?0*/זSm5xY)42qˉfuLdd§ѷ>#$ز~@7l7*պ2`Fݷ#Kx+%Ɋ!W7v%=v!9o /Z q;a4[&PݠA!TYsE L F"B+ZC&%c33`7jͼ&[rSk`2aþφba@D,O(7'-x;`S]q* JW8sⲪsJUQy;kPP=Hs5 DDeRB!ܴ gqDDo4LAW Qw)K+d`{O0-3ut9lD?g32?Ή4.x*'ǍU4&Tr 8SmNm~CHQ yJ:e"Ӻ,``~)| ʯL0îmqo4L4/zJԫx#B$2z3Uܛ41yWr$9p9R>FB+V;DuroGL ͛1rv,"aDCc:'\Yn׉|d KL2tn yخkP ?s"_iJ{ZggK=SV.l@g|cZH, tO eOPQbr v g]ǫ>9?Nc} &2j ]F5`ߞNmR1ӆ0W:3N/KKHFժ;;syV(CcYmg4zueT]%%@"::> EuvM?:m5 [٢{/y]qS c(A%v1[]%9OL Gl٫6d :Ŀ>T.>F(03 :U V!}F{\p* JBkzD͐ɕa-ٓYcSX-~yTRyT ֫^_)Lvv΄lK8Y@ x.&U^JJF ra李jќ0#1y4 )Ec$V"Wn}Ctqwn ?j_riSyˬCAӥlLJÂkeB]F5C"qZz(W8W譍&g\1=`kp*9x^28`YP뤑c5޷LP"!Ӏ qF6RwW<1|FLֆbוEM{E}xrN4ZԆ >P;zul yH_cFP\sS,QNq\NM`|Dx|`ΎawhNVD^% 66>Is&Q`8>bd.¨?C=8P1KɔZ^uOP ;@W(P'2h, ۰9ހ5t2P&/YK/R/#=I& 4?G6wN" QcŨw^(E#zv7pFާT;IшVY>Tf;a "r|3TҤ3 5vg3UViǹヂ3vMԬ1%uFsPa].!HTWڃoa21X 15Gny4."R$G𸅚ArV ٧,Oп`EJbpU|gqD!|$̀ƺFT8K1i|]5U :߰?Qg?[KfdB9 ,F'y/o8 tMz +Dmڄo/ҥ Ho[t4mnՀ;#pm!걡p|-w5ʥr <Uby\T420 _y-;HQ* H}5)T[~h `IR]jѐVuiE'>k 5ik2ȥ @G^@}Ҡn2 T{| dTٵjG=+xh?\06u҃s 7̗L)/i Ls9ZPN7-?noKزsY}28+7;C$ᇠux$ޅ9 GH5uvIB|iu)Y"Bxay}N>v А!1b e5K4bK¯4).nO;ҁ3~QKϮN0@j_,e4DZlU)Z/.:_Y!2=Lw-n>o=.+WLVO:)>$cI̖ N|}R=iu\RjLp((w BNzs4G1V;VFwjl>pdt͞٫!⾐W؆o2ZX"vg$!6#Ѓ\]:AiJx:7r*\GKFAޔCdN!p9 w?s]XQpifkoI#Y|{O|ԬR*{49UҰޛZwsш9dF\ {f}RUfeik@K.h'ZIPIA0EeyӉ9\;bUPSR&u[`$ܕww rAegىNb1BRK_Oc15hJԜ%K~ 'v2ʁ1IBFU7$'y!ND/ePB`AP>m^#ɿqqP2789NV+)߃ N(l 2ylbcPp^^^Lw-'@T7% ߫Xb] Pc`#V冼e:ғŗr4f9:?c!?z1EH0P:L0-qj:~n7Ԏ` I}P KG9~GUaDot9mɗ8`Ċ_٤kY\cQ J0̧MANek9\H6odVL&-A;j!zl8!#XL :p SG;f} ?q'nK:Z~d$u6d*Us A Pɶ#Ǻ"\NE`d%mC؜XLޥc3Իō-"D̵SԀDSULf y3w=+Th)/ yY eU蜽DdQjNK/sW iy%\=St1 㑬mBvo|OE H:1 a. -TH#јOwSdz Ex]P%etu\pPm㘃nYC繥FاnP%xSF%6Bk8^)WLQ=<@':|~ed=)G_AJ>N#b;E䄆LQI8Un)If'F@Ҽ71^T-wމ>$\:bͻСbbXQf 6 iunQO-v1 0Rh&v-AЪDNd,|gD5.MD8ĩ010ƣ}{΢]@S2csIhN ݮ]EL~͝f*5*;?L +|2J-s1/̼CxP=|U Uf?)5l옹WHWڒ<5$#/ V|L)[ADzqEz(NymIZ,zD;R&nɮbRO\s KR`_f;D98>᯵% # up|41xX "oN*ϚOE)$;w(o&NqS& BNPu/_1+ŽR>@Fp.kRH Xg<_S'J:JN17B):8E3qgVFe:'սu( ST("7?60j-{[;xͯ>LU>MsU nA=-JCWeI\!V-rP|wi/682 KxN_Rҵ?J/IP{Y< x8@EGk$֔Mӳef\-Zڜ2!6S&.UZZsw˯IN K fs,6.Yi*z͇ Q`DMU0/s @Z ԰Mo<L*k4sd$ -&:,C9Lmv6XY@5H.UN'=3K=Hu;|.e](Cݯ*1k:SܚH h.oґ #P8E|I: 34H|s-W]2 dzet ``+5|t ?`c~-ЍO$Wi{CE1H%"a5kXψyeei#Xlf}2D!3Żn?P)M zSQdslJ`u bZ !SZκT(X >u1?(؞N%ؿ t{I)'XT)eІ6,/mm.LngL'O 4uhTi𧩘 )ʎgQ.`r쩑#61Gt:~ >,ヵhU|E/5@/#N/:" [0z%E ˻ӏqs}c$<\uz(r9&ie/ Z_;>zP&Q-'TU4Φ<{at8μ6Nwkoxr\J\%e$Wvkj~] Six[WȋWZbGRMjYT*uW #U}vN)Tv5<}277X:v?ٿLmްDҵ9nڜJJ &bK"ujR7eD[ࠢ XiX.x#)4uGTex>Z0QhDJ yM>m5%-ufZ_JED $;ӒOE].I|`Qw12PibO  ^Z-4; Cc(Yg5ˬj_p}1,+ >PMj,+)%&nU1c ]ٰ{ksiQz>pw ˄˪xo邪NQ! =XӇ5.ȇyNTf>&ь%8:g - SMx&7b'^ 7MTs43P'cI^˔ fp_CKz5ճ. l4sq^ LY E *$]l޳4nԙH8|A)d$pߐ!2d1&o %VANRجBe e7b 1olZQvJﵞ}Zl4o Ө*ly7YLg춊7~5 'sB0l!DqYf30֖sJ0ZnNRZqdk F Wr肛jΝ˜/SʪU3)7GD2Pcj/Fy.E=H+5?k^E.ݥ ߊ򨀗θXz}y2gDaFqLoR%ݰ̭ix/?@j ^XvPw"}f^y${}^ybzpAL73$8e9J丁~v,@P՞ h@D18ԑ9 ZVE$ p2_qE#$am}:篧닞%UgogSh\wq28=_NK>TPZ>3:(UF7Vވ_ 5!K߽,XW܀w([EƉQ)YsFx6sM}2<¸쥫䶺F[Z{=,ZuiYcn ZW x}J/C/Vⵌ7F 4S&q Qo0 ULm[ڱ]͗w]RAY SZz u{AR2KسGk5'"ɘA|(bXlVo^)r@+2JoaY{\j,,%^3}Q-Vt7=6Y}wTx)ȅiDnp[wm`'&B鵫/S%2GjW S럶c-*7l ᐩH3:lIW-AEӄ^:hԫI2Qf)E?iP5'TD72>{#Y KV-)\6mOV,ϫjdJ`b+"8">cU@'ہqH%fC6WHDn@z{Lo1mH>zsT*1A_Y< 鐥,p3-^@jTCd+"RpG OAl@XП6-+pk䝙S3&@zPI:Ȧa4cOɸO{Xz}px@ {Ëc1?LQQB͑r,hźΣd\[j*@%0.#u1lJl(QBF4}e6ȳ-VSCㆽ1#5@B}/&?咩h/j^|xu {loQU-Zv G^- Aq3l.)S~!1FC%FPۆ;Z1cLcjQ'cNbܦauaDAWn1_Inj!շqlr<563_~:MXIJ hXӬvԠj*ȕJepRasYkGjݥ-7;mt|zPM讝Cq^)XJ*<0K1$WfP%* *O0B#3aL2U rt U' SOؤbrkR7{3$_zs#7H QNyW' MlؘHrI BEy}O,E/jƒsd!VK(;OtiJ j]5\%/mC'TCﰴ ɗXD׸ 'q:  \'>R5cL:ܺUR|Ycw%ow$"[t7?L;&ن{u.uR҈{;J'^{0֐ٷ!q:ҎʽP4I#2*#H)ӵjAD#۬jٵX*hu)dH:-{X51)VuσPzfFx]3PiY*xqlM7ZЊvs\ :`FhUWKxMex*bGHhIe=bu4N6<DtCڡ. `<ô0[:, O/aH|3zn,OZ9ea_ꊕ>Љ p1qN\3b 08edԜR fƯ.W3\BvyЊ"3ȭ2e z QhJ hN5W{נ鈁`Q n˸J٘nKJ"+ yEMk"XKttmҭWPMNe|RAߑ7$/l,]q 䪹ko\01‘sG%ʮV74M8F1$µtE 4hEFFbiT203MJI6Z0܎eЮmDnYn]w"OtDc]f5W8}WD7j6Fe3I#%2cS*?qgm9[H53ޜij$bXMb{o.i#]L=LM%cOQ| XU% 𕭅y)(BHu%D5R8BJe QМ^gvVO%z=a}ǼN SiP5@DaGJBBŞ0ݞŚ9z $)➲&{BpU'|@H|CmI O6CNhH{5C; :%9x9mk:2B 9g?T:~c :G nDH~ h.jڢ92s.ιJ!| <~Pu!J|H$՞>:n;[kBE埘% g}ݚXv0&gGj2L'M'QlF{MiU67$Յ8.f_-?ObΣf=~ܡݴ:ڶ 'F8EiZK崙{Delݪ>*Ҿm1FEyUn3SdKG [;T+[ ~D=-ܢM8.0DV)ƅʏ{lAk !6@?WSO#3+m2qZc4 iW}OZρM+ h828ҫd`X©=POUMd5e~p ph|78!xO?mn^?,]E__'eq^ͅGU HIr*G}la..]u?EܷOB0K(NHeKã6Tz%`!\z2tWMv-żRqoǕl͹\J^ >߰_-{~pv!_n9oOv}g0j!.8澡HmK:}'VҚ\F} ዁/l|7fSb\x|P#N9gUL}vsKP8˳(`LNJ5,m]*3Ur*K[Z?smDyQ?1 7 1]U0M0V;y}P3u+IǮT5 mVh$]cMBUڊ%Y:*6G vZ1]bi*v=9$ĕ2eFSSjЄQHIׁ~ b/~UzcaMP0=eP!77P c ['icc]X-Dj4v8>AM˗ϙBŒ1*zW`zXX$'%FA+].8X#t ASxojӏgK?wT,16[X#U|5L$ŧ<"?+55Yl5=k3Pk{sCeevOq6?]fk[&:N)YI29(ՉVXȱ:BK@>ǧ5kCB5Ec^e,[񞒃6Ou>s\H{?p 8¥:#D;dbА!ׁG^\=Zŗ^E*ax w v:q?ݰZLQi9Ao9&S=$3]=T7 waI\!C ɺ] \k&RRrh'ctL~uRkq0AoEk>Eq ɝqx'JsE %ى 7}ɲ@IaC` n`LCE5Lŀ}c9!n vާ_pyGAm`|ݗ$ lTȅw$YmI^1ěhh>O wA{KH@ƿx*XAU jIX&eRuRK'HHݐ}:'RڮmV ȫ/<¿XTe(G'h\q培At85U.w\L2y|FѐbIцT Fcn B. fSSfDhQkW̸hJA銱!{6>yTPNOcU N5/Nzb0 *1*b­IoKdV8u/j .G ⥓~N/c{&h.zR+Q):GU'Ju2'$.G;X.R |(#J;߮F]7S`Up޽ [J \<A!Yn6z_\#B)F[WuReݒ2x}zLûpZQf6+CaQ,/.ok|maۙ㏄k0hGn?$@7_`~)XvGGݱN.l&4T =,1~˝C&("!'׺bU|d́jy?CJ#)&:u؝-`!j :U ǓGUzEH4ila8te.{=qQtgm&zĜf,*8pd%[;A o VN,|K~+fMP 1J y1xETl5(*&$"a/4ueDY搏ʻ1dp0뢊M\i2w3|oBDWa>/`I_ʥ#]:Sl?6bIӔŝV=p,.x$Rh+#\xT`xt!ЄlxyI-RmUbS"Ӗ#m~g%VSJNre3Pi.)z(ö1k2vTphVQ <8JqB BBhjB"m|St `Rp~Ҷ7fܵ{ 6{_[\ײ* Ԫodd(L^u͚` o϶$b19={܆0Ya a9VeO=a2r;{h>8JfY?\S~`{LZ e4W>R#2oG={ h0t3x# Ro' өjȒnvh)T[ZU W_ h^H(ȅS*_R)M?xHa#y}S4UM@*% a _@ɻmpLNl+Fh%gCáKfc!} 2,`ޮ7S|lN^7Դ0L%68gsg yY! ŌY +k[Xf$-d"+y *t⭣I.ЃΏk#2I!Dm:I9ĂH Llf1'*7*)bk:-X7w9jd9VSX¸Rza9`YF?'p]Q7 PLR7;w<0^8Dͥ ~3'i9ᱟ%R)WKfDT@g!vߣQw9dP͊@niH2i|*pĬrHӺUr]E)oʋo//7`N6R B˜:緰fI,Å}\؆w}+%IƘi4A7INMg<,cE~uQYxSz/׋ k Ȅ'̰8#U] nc oja`^{0jOXAefx+02ZvB ET`q;EH"1ItD9B, j#}B 6DxxOMl!w\PqUJ"Hx@˸?9sA@LtV\U JyrRw EqxZlx+D56QCR)F݂ !]u8-.Cgzu)0Sk@pVmYېU9"Iw?bش * *xv4$:EIrXF<19hNPrR^)BK>IWvOc<_CHL澭1!KX2~(ɒhۆV!y5oPrzs`N[YP }26X >`V=w 1OmIc=?[}='~ǭ` 6wUv̀@"Od= ͑@#.|=>%}i'К467>x@hoMw,A<37#Ž LObM3k$J]Ec"WdkW g#j^n3u?6y>]1Ou0ʐB~|Hg1_L*Ҁ78 gh}~G饴'm2i^QYZIq.%8VQy=_4  PծSzlf<Sl>!=n8;&޻n=[" `HXY4W@Z6N:vzd{F;L[í4ٱHwqjVW"&|J-ZMFoB={T9sJw9;1vHSiCe\yT4m1uN!Ε W4{=oqp1X/NVr?bJ-y =PDρ/RYQVKᏜ OY<ǫدC:|Dt8(6-MK+4濫VT))Jkw iϺOwfXf@J閘eE^LrR?E+wK.e(ŋF#pݶ_biMUQ¤.)(|thtI"Ku!fo d˿I&!}iz.7{±l@L/PX^瀦;u }5GU/7<:Z;o=< M\9%>-)zyv$jbX 2Y^RNF:A39ġѱ WPWCjEddVì|ܸآSĴ^L\ 9JA#ACk ՄmZo/ 7ӝj?B.WѴ௦d׫ҝ{!Fy.qۣ@uGNWijŠ\kKXiact:{RXgCBWi VVaot~SRxUKݟ} F-v暑טZ^DY V<[ :mlz dw>؃\K1W4yQTfuZ. +W6Qigޢ*x a(me'R~ Ӵ9X>'S}N艿UzQٺžw 4riۆT5[ h]Ui@6~!HT` t$W] m#, dž"lwxTϏq|ݏ[Ay~Le7$ƂF6 = x? TYsrDFc$zGEItUCsu褖kl$rH\ZLКcUŨ%=QQ$Z3yKϝ#lx]4+r 7j 3_%S8f5lAtEy>ն܅n8LmVv>sn]J8#t4j!Qg`{28F(qE{K20M" j>!o)9P#PŦ|C%G!L2i:93_q]4N-: 7|/w˯xj5O} iw'-AUSa`#2RoPKce%AU5h&%ڵ9?q/c{413 AemwWIOjԄ<+ `Hd!J,rP%%GSZK5ٽܛ8%\$jupm1[3%yXf,vH8W6^r^lADؒMgcD/e? )Nb5LM10C-qGK!i-5 <c\W=79eJ<dGIs5oc9( )&l0F^g܅&}ߦ>I^ ֘P%)[c)2K)a8^l<+Q.#hL6i"  #vf>Hrwum}}.k{;ӝ;ʳNZz)뫦F#ȅQr+ː )avm풷(#V(gSZ7¹YePݽQpr{b:MI{rEͺ%(hZ)'S6v9%Fޮ4'0?Ĥ.%]+8af>fҵJe{꛹8 `=hldNDw{KI ٹJ撟?guC7NdzF{ˆؘi)"jr|m{T̊TzAvSR~PS5EH$ZXCRI\D'@IjHZ_G8?Ms,̝}Pf#~sP]@} s'5]#Y@oApz/NwO@ve~i0(j{.PQʪ2pSտA@VP.UO6P(+XA=|!F 9e><|8s@riڈ΢c5/-ZD!dqFbɣ GRf~{6*b[ )DtI#u_l3 Ӣ%l$ &<j_vk}q.1X95exK[<e' _$J Qw, wdD{ʎPH" u1SvUu1+uFa;Z0^#-;C ݭ,Lh20a@6}N10ߟQͶ( %Tȸ6XcӻŒe\-q}~pxQ{u|clr{;^gU3Y *yt'ئ:-0i=a"*ҁˇP *V4 xy }!~M^9(~?s{4TI8:5* Zh~$.WTҒdMXʒ?"k>67p Y#W$ &Ht%T W6|0#rzR =>ҫL-kt\o(q"ۣ>% HsU4qjve>YzOM'PpCuB.[N4I kx@\]"O 7vLs߼DcTr)bNr %~[\<ݿ9%|uGF׏2|jOcmNP=L4#r+Qo<"{L$ 4MEiT_/IPI١6&>?urPߘrd180GiڐFc` L4 Op%La*螪'&=Xr{Mj.Ɨ1I6ŘYgLs?ϝD OG'*gqO^4^u+=h*W* 08Mdjq/mVՇ(bcށ>!<˽DdZ x@o^gYar#y?"D~G߳^C?a1JV2x(:QԌE<a'e#*hR!0Ν^rOqemf!4*ĞJnM2~Q}gMZrG36lD*=U3cvx`ІOHxTȮ^)zGAf(*2}@8(nFxc.?s =?Xr # ߽Uq ޖpjnca8l'؜*F4qTk.po^V)ZCRO`C;HYC&>kztr{tLr̺mn'x4{7 Yn(W%` ]վ'ֳDkdNK֢z혚Z8;j 9ecy$fl)e NRNJJU %.+>[$jG.g0k?RY[cstV6W Mj5}Sp,'ם3_M%Ob2R{3mԪݿ >_ ^L UN?@!!މG$<Í %I3 $r*Srͺߖz A)!L#uk޳tt0΢4YY[oHb=n/ay4M*SX^C CX^]aP4sh_^g LCi~0gʠ1Bj{J;b f-BotU9Ԁ$<̳_N|ZP6XÅyZE~;e!A4;-lFSt~f2?b62(S̳ RKoe !=fvum)6$-gqfϜa଑=矵x@. g#4Dg u uwzaY\qF|8 }w@\Ľ凅juM^Bs-e5B ꄒ3Uh&|gYUH+H KyxP%2]s^3R`7O IL236 'o]_!Vmn ;tOuʣcY_DOIx$ə~urjM|b~BkɁkk3[ŹG1. q3- MkYorP_.HJg𔐔z0|h=7mF ǨԊ2.#oDBǐ_<[g\|nYu6:$}$@gE8TO,Q6ok 5.w4#kY۠ħQ>K59Y7h桛da74R<8J6l@^ޕNF+qMVe0 `5sU41,рt e2%bQu?5ocyy3k@JEFh$'0dm)EiiR Icx!3&DQA74=묮bN{x_yY1M¿v%}`Pbq iZ'6F['LcPtԾeN=h8N+4 CIY'Io5eBںzR l9yKaKz΅W#f|Oƴ_BDUtFױ̘ J}+ UmU""..ޠz&ۼXHx`<k~E<ATK!5]:n9s`l\YEWboi!6{)*FvѾ$瞟WC֎G5,S61P)zљLYE0TxF[aX A$Le?WO@`4TIa* Lʊ5ی!=b`AvtFp/ntϊ - Up y1P'՗h>)<0Я x2  _mJL#]&0@‹˪[PB /8P1۱@ g{=J&!U.?I,H%cFuZ7a&F)N o;%%΋]e湯dIט21ldYn|`JCxI-tL8+%yR .`n >keb DIZg["(ì\ Zg>Kt Q5#ol4V6/ʐ'=[,$zU┟cC/>+itwy̙;[!t>VlySn>2ҳ'-::Ǘ28c~}MCLs3ĢήމA@\pɮ6iܗ+gRϘ*v/Dp6H+SAZ:qͿn OI@^9d{)b3dM7`lF~I\N  [e/hմ>TrԁNaA$L G8`կ'sOwDHUP9 }."E= ̱& <4|j#7YG6C5R220a7 / BsLhpd Đ2[ }66ܨTu=I4 ?Y\ߋO0 .7ЃxL>331sӤ*9א* SxB<fjh<,b^&`@H~\un]Gq#]q&7N BWΕU&|x9,3[Lhv'6;̟.f>=FwչE&o%.[:%&.;PvRuβo+r@Rڋl״hU9nTK2Kw70I̛#84h/8)4o\EITjJ8s`SD݌=A1uD,7ЉsǶP7¶WLjo>W!rW,fN <%>EW#Pmp-cZSTXaC5oHJ9:\EᇤP aF 0q%?~ݔ 66l52_zJ %?ۚ)V<6S= E3|;_k کl-nVʽ@Nf1UGێ+G4n !ɲO x 9FYiC`9d0?=e>QDY9o ;%h=!]|qA]\欍."s,̨h1ߵjY0%A r9lRn Ћxos&kN2<ݚ'pi֚scguO7ђ-n}f)_<ƕ_SQTK=ebŢټiV>7Ǫz FҪ zuUi|(ʲp/y?vBu(=*>$,ke eCTM;%)l[zy?Ep}CCPʦsE4z:(mNdƅ-w#h%&/֦)k(Pcv;}'Gtvɝ4U Ћ! dlD0Y#XL P髤|+hMzlhlZH\dDR[0ø8ezKܵX#3pnun./<!ҶѪXo!&&ցC1H{0%h3}kN&>ܔ9X`#T|{/qL, Gf"* Q?܏dB?+߼kv6u&t`\~O&\uxޯ} ?S| 5O#dpo>[sW?x$acN/h_e7czeP{]$L[/k]t5M cL\~*q-\-PFN_KTAŜ̓voA Vd 3)\Om"^8n;'>z`;eE]G T$P;ț6GS\Z9o'OޢwBLJd!nwd՟uNqO"@1+V Tf>(,'8k0G;U3 ^)p6kے#m7Kxy te 񅔏t$va[6񆺽2]UnIl:ٵ$#52 8> s0)SHjJ?܁ C^#9W, K eJXzMG,&oT,L ݉f!5kY2 x } QҪ;~`|4|BSI(N9~TbAB lb)^;D67waܭ4+xcA'A]"^ط'!DB>lv<^6YS2Mψm=xk/-Љ P|qK%s #{gȧuO2?;<>N=IF"NfKչڣi$Fz8 &X`ct*oѤr qE]=由X%n'!H341Voc P_V="Yn۵%B y8i[NuTWL֫((EAf}4Ojmr/VVCȋщ)2Čz%0BnPd]gG3CG~qZlڂ sRʰȀ 3 q 1s==]u2dg&~t93MV1kTN_9lo%rpe˃m1'99iY2訢W5d"e/Gފ9dsjg}ｩHy /ó^mh@v&&[ƭiJ 3ڲųJn8蠟J)% 4(^\mas@ O35bf-qG%u&z#ͮC{ 8`׏`Jdu0rم%vC2/2 `"4y˴ +)vJ cA4b ڟX&D!qיsB)g5.n1̬܂? 0 QH[p=׺~0‚pc+FW#ـtu STfjfVPBx3"m~[=Á*=84t&NQg9A.yS,ΙPk|AߖڤgbPNd81LC [\HT5 .YWG5udhQz9(盡y0–2 #SV V쪍ҀD|3+(@X ęG3%">*$6q߼^ҭ50ZlI/K@u{vadV)vޠ? =_/I(nP ywzk ?%Ki;ɻRKo7+NG̖+. e.%`Q~+0֞Հ 4$f) ,ŹN7=z[ZG rUJɎ:V ] _ %jre;?'b|F2Rqq Q_!,ُ\\A=Ź^Z}n tRat4OBS>N[m밮9g!*NO뀿JM?|` [IW ~Y:I{f"TC|KL.鷫E*vs7b' dhЄo({fcd"H`7[b6Wvd:=8A9Vzs*(荠E«t0> |陔 =DZߞM٩ ܙԍehR?FU멓Os7֗P2"fGX i%uwjyEr ߺĹV9KW͜8n*x-s!~rLG `x@е^/'&@k|b lU~ɚa1 V=-pڇVj{M rЌS0T46Ȉ¬4q] ՁN4sv4rަ5Y# mˎщ*Gsj*dߴwn2q#i2+)oXk2\sE dXh׶15ЎӔ 님 @, Wħ!wdؖ H BM'm^2N7VpU7hZ~=6| yS_&&R .]E\htXxH`KQ:*W3Ǹ§;ii1@ `Nz1HihRR's#'0x˯`T(\e۪cCg!L.wL286Χi@_D)}nYěʭDZϻeuo>d̥aݝ0i9J; '=(_tJw5%Z.V1LEp^mSA]Ed(*aeN]cN΂#} ¾$z'\M9P|i)~j#ĒV~Up)@=H M~x/Cp׮B x(a(/y,@<\9|x*HZ#`yprWybg[hȋٰ9o%ȏ\7^V EU8;"[3iP1xV[R;KhO SG5lXXb $w K1+cNX G |mj+ad_!I[.z=x_G6?WɃffqX[? ׅ`rJi?]50U1@ Ҙi'h|lDFYƛ,Ohi@RjBӤΐ8%x"DP1h?*,n@*"u)(9$̻6#Zn=\\qClCn=U|? 24I9.\ P Ů-A ʊ=l=TG|rSy%ynT/>mCYx#yLQ>j(֔:|hd}YJR\w!.*/TmaLs9:PuU $zJJƤg9qjα0A$pPdڋI \C:h1 |Ԧb^5kیeGIhyd!UlE]Lt$>)͏؞@XF)7vSa0*:6vB\ԝP5oN=: +?'Ng* eT/cz-Ƈܧc)ٮgP-PM_9nsZoߋ=T !$1RL-HB|b8Q*EĞ~1:o oڎ5jX.z'uRHJT4߱ކU &VSx98&}xR0 0wn Ȏ̟do7WB__ޖR?.wmԌ!*n3H5h2( eGNo2=oMUD2Gv0S~>W-ThfݶStI&c03&ܢ`"oUyHC,yc+>K֠ĺe0rE Dt@l!z$_G[&EbOC %Fâ[l a;S۲Hi@' -0//1&orbG41doz}Uד~xM|Cib}z&x{'4HL9&.dz[fIM'Eι U?'DV5o_pY{S@QE% A[8Q}sVO~G4N5OZ@[5a"n'~(1<)2n^o3<܎7;p#A䋔WVg ٧*{=VuMĸRq`ٰda ))Inja:e%ˬ\O^e&T BĎ{Z;Zf(+_#+^{%eVc,n .2Y=R3·0h8JEo z-GF jyTlcBz/hݧ 7,6̞IQ/1xia;lt mm-%ԊkË*2aU5Z+H™@V: t|wq0~Gtn%,7" ./qտFok%קq<}\@S6 -jϊ=i׊ڂ?S! #KnnLQ5U?Z:E\mPOjm-J0uNh*ײـJSh5qy12EbBXI'rN#i[Ga5Xl$ ;߄^m2W p2xׂtg^T@D,j%%ȧo։ h$@ʟGvҁUys^-HC~Y+^7SX@IKNܹ}gټ]_5(fẴiDvegQh^S |6YiFy/5IX??!&i5iC^63r9U^;1"H l8轼{NM5zk8,S}ˋ bE R.S[wH UV9̥AZWOxiy"owtN,xx I 'ŰW99sD^}pBQb?1dHe=O1gV@e5~^: ÌbCOhg BB OMKr0oB^l44-=*]OCWgԘ:QBdcC ɶ5 b 7z~Zןꝅ?zcߢqvWΈ0)|׸2TwڧU2 Kzp{3ʡuZ￰s@m#_!^ʪYY%cSlcȨHk)r=^n׫= nTa7JA;YK|n%!&.%N(ẕ+6`&nqc3 *59g3- ToKV rWۖ}cTU?g^/wlɦ9: ṖybtMLȝNj\})ӯQs2a^g Eϣ-"'O O.R%feY._XDi+RեU /ZϘqw ӚENaO[E>_Fs%uj롚&O Okpf9)^0s;/gB_P<[ !76nVgA߭*(/Ƒ,'pmc_Ndop=uCzBpfohFR61%].^6;G*-`LjSd|>X'shރ )JLT& feq q)~"BgHY5oC6mʷ֗ٚnn# +BIVRo2^|ǤcQd/M -׺'8Ȋr/,"gcG7Ól֌7}l5}U2sutt~3|4[&ƬӒyR&FS6~KxHJ8:N0"I8`^Q+s03,0B~UJ6*?&-rQs+ȏ Xп6oFEҼ̪4Ξ iTyչoP@/I+,@=MIbY d '4#XޢB3u cGt~X`[6QF#^Bm[7K@:coZ|!]pp@t哰O[ת<;&1<(D6xr8E_4vX l- 8TEw[HlwNq1 Iv :'+q/ХQ ³d2Ԑ6!@Wl 띈)?`P ݉4ך_nU $5<%$numuoؿ kf_ |`\Y=h&!a'B[UC5#j7\±9k,!HyFecw4xP*l0-E(z2 iGlo>5^9=͝'`C]V͹b)q-E?!8|-B-pw@?ىmJ;9ڱt6XDkD)^_m0VNq9U+PBR` =rء]t"^at^AJEoZI@a0P-' -? L 48R9A"\%qáSZV9q$<;"6nҠD3TX?`:Rm d{u7"wWܼ]~~L ʬIs%bj^Q1Lö9{چ{hu6/ n~u',qV(\=1]\mѱ#µhUn`Q0fa0  R/Oläŏ4-CaBFquo=X3l#)TM 9;GRNZe?w*_O $k"/CYЈ2q0R~3< b ۨfOJp4gW-.ụؗG!R{rHj'C&e] DTV;$l,u7x]@WZl3 @$GA=4Mo e>o2IlfԖ⺒GZa'tGV{rE› '^ffWBe#l^|mMP Zෆ;V9 %{cBhf@BvH]!wGShSK0"%~M:rlhc^HeYrc1N(.4=/NQ'uwph/FvPQsdQո4mj̦׌vSzޗwOx _phxOߣS1w2ppb2˶1;c" B$WkMF_{! ^N5Ёel+X4`.=2A7N$[9N)PO~sF~CswF@7$@vI%n{c29l\7 U(, 22)նl _Fv'%[oƱGtb #8k肇<7/um+Y&tºƠ7Y OlYV?|13 DƘz6_Y~-/1ޓ ^u蹝A+}AwSτEKa8FTMLRR`ܯfz8O#.-L#ބ37Xf!F0.; L탤S d6qlGH@PyqB( 1b%ڧQ'BHcX^!kۉV?,1YK jM"|7#abÖi=wޏCԸ /#6k!fl mH% } ȻgpѲl^]4ȈBB^Jo#Xy귡)jI=[A4V!aw5ߙs/hnuAU:v#)Ukţ=^;Yh^ԫ-URN ھ9c[.Pu|pW~.-X9o̘T*3Q Bu)UDeqmY`<ݸԠps~ @Oɂ6@!$G\&tp3.(3[W0:N]:Emq2##qЃ9H!v'g,/g[Е)حJ$*eW% +J68mˆ}*o/iRv+v>ASRR|"ѳtT,.8|]_B2\^NNp<$0i%yV C%ݧۮXox;f3$Y^}z%35pgC%A'џ$#_ +CObn@L@|G/:34Qm˅#lٓZм 1//XkNf :+W1,㊝T뻺*-_kT5N:CʣCpPlTx d  ?snBS~~Oɵy:T -4u~btZ2_JhhQא2캏fz̯o^~q~"j&|;Io&j"'X< OdyF_d1 X+?+H;$/fxؾ ")_uzCInNjT 9!']jv+9bQJz\,;Z%M9Ex7U ,`J):>n'l#嚛vdN,e؛;֊8v LCN/WKϜUl+J9ZVJLJ:˫ ]?.V]u'"01/o@mDDc."|IgN~^ذ6U&=Bȃi'?wI 8~y5|51 ^Zq %UJ2$k`b%opⲱmNŷ1mh ue0mA#Y%Ŏ_hB pz}x-K{9$y[Nq`U|̊TCyV]lGgGNcY\y@="H*&5h_R`ws1}Sؖ+"TqO靑f!kr tajs!򧘅 S(Iø| ]zl+F°c$ֹيJcT,.D%r|ʺ*!}D[G>GCf_N(j9r ƢC~} H3 O/E.-=1 Kumm߿'fB)B#$ˡ3owJ!Hzlu:K?(1ENϛ%}M#~V;,deiJ?Z4e)! XJT2y@Xf |} Ch ’j PX}2VW_B@lR*`6J +7Fq%]=sQ1lݹPCu# (e(ĝo]rad}x{?@';~"W.҈zgxx2i]ߠn$i2P)2hJ6?I$BjL! ݂@uLZNˠVXқر]i~Bq~ 0U4 M!/ z#fX87Yu{TўԞũs]*7bR,b?"5N"(Nػ@BE²HeTl:y?lKbFɱ0& Î>APy2-"wL椼v;X GԱ\ʅxu /CBgx߶KA-tuxxܝ4dÖ<}EOiRpMҌ"YuqAZ;3>y]E2`iq]rBre 2L, 4n^6*ŷk]}C"sg}WBκ$"Z+7Eb)5K.+&E9pkL{*@$!nhopNƾĞ ^ XY5p3ѱf{8eB!0!2EHpFdW xmFR$[.:Yݥ4^"˷u`,^|<lz# c6)Ò|}Q6GAc=^9[XQ/4!be4 Y9Jzv6@x+CRx&F]̤Ю0m iFl)xRFԁKx3?:*yN'[.ƈT+xWTj*j5Kٯs7 %!齱hVP;`C r:IՈ\0v.^-hlOTlr)vǚ/w-`[ڞx;sj2%+pД[ƾΩq4bm"U'wQ)(k7gGGpfnG ff_5AHHN:kxs]RHKYNEȋ}#RoN9צfD%zUw0OT+bMҺȦ}O\,s ZC`5WW9-Vᘪs(ݦ%hLAN뼠3ga,upMStt2sZ<'Od>Ĵ`0~Z8s!d48sq?0]C?s[ڠ(My.2km)uK)veomAנA;>A8 xh-vZu<1oq~  N5@) F8NKO^ٲ{G9]BP@xH|fؒ]z"罌"۴wA?):sVQ qd=beMS?:p7:;,>(i*Fj=O+YI#[4e&- ּ e:; 2#e|G l]G@>'B'PE;X\.:tE ZikA^BDZjB9HQ6dR&O5}_WKc)K[q=@^>Èp ݺ=Cb iw+-pdSw.-Eē.#({^ 5[܉E.+e+4pUdxgGͼUwQIf}u()auBRl=,כVB«Y;a}9V|?0VC9K>GRDOczDgs,ݣ0+>^ʴ*bMS5u8jGDУ~%>mນ#w._!@VΊHC64tЙ3ԗ.{JP~9Ûf"zƵٰe^87Փ8IĴͮ-cSzkBxڎ.Dn!Zr(3\')!K6~DCi#W_?9)Cq S{TJ7S;b^Hw,+\l_;z.!Hd1) G̈ڵs]wxfSh!%0vRU[kKHL}WOЊיMokx z54.9ɪS$x3G_.3=mӵh mrj$6@տҔFp|l̼'C4ZOC"!i9b{R"xkC F*3q(ͻ$#mA8&;RQwGy]-7Cmg",k1T*qU; зd+|w THu8d@5q:x@Kfb=̫!$fpc2uMW[[Z \Zki3@#6Bo <PV0ᶂt1h' ]=LsÄay!|^soGW`4hI75~K>>DjA*QGUdB8nX501E*\uFFmM/{NdSSeT:Ѯ_[;[fU`;ZIr,{9f>jۢ%&JQS.K@kYްG3].-S;@f W`;H أ[s@xNf;èQ^r&Z5~2T=)'95.Uk,aheTc^Dd3IN]ot߀> pQ\bDzj#r@~F;\NfU,ق Ye psOH`jD[[=#V@Z2s~ˀπDa!PA9K7p SCl)또" 4e氡𮉠 3{\"9mC>g_c uK[@ *ñ_𒞺_lsukx1DkmRn<Jś#5Sk>uIs  s&~6Һ_ܥoUn2JW[5Š]3;,+%dO5FN(Y e"@/Q;ki#zxSk5ps̨X&tRP6y),eO:"9u1Ơ.vSAA ʂ) `nl"'ET^Ԯ&)CFQ wάcce(˲b,sSq,LD+1W-Ѹ .PVn} Ĥ^3IaFm]̭V&94ۆ%ӱ'lj&E:2ĐsMVC22G-*R]MUB:h1=>0jTDh'qݺ2Ck"R;L~}?l޼7sne CR~!DCo6|l@kYUe uu륻#,Ay2='rӔ:*uHQFMޭ#$^3: `HGV}{3Mxmœ&lA[[b#jbǜ2Aͽ1j LW^tU5]*tЈ~6ꋉ](@> K,, zxnfRB3 4Oy4 O8O1H>^?|Ȑ(cd 7ynjx>$}%'z6~ku[We.ȎV@K,y':̖է_#0c OKߋ'9p<8Vfy1GLOIuʋ:*}E7Ӊ._a 3Կ2CUnmgo|i4F"| QBv䁅Ϻ~O}]a,.ߞ.\Xy[jH^G yi/9FU佻 cab;'*쬘4;Jü1R-cyEf% [/\_&~GX`<@EvH(ܷxLPz$B^DUk@5HuW+żRN»PxN~Oݯ7?'j.cv;/& qu pv?ۨ"Dρ1u=BA<,u~8]s@cwk8phLC2.yPw җe <9eY1 vLJ;l F0fcQWe@F[ͫ2~h#2!/Ti1Dq CmA$O&jк6눉L;sz|m0;\\>s}ꡋBH{{EV ya%/-ܖ(&>A%Wև KR:'!l>QlN_,~ kE=nY M\1/*UA vlZ~HQW& ӄgχjTZj!'"m2#~n`a_Dv9^YǾ _ JaXŅq& 5{(H*c$}2^oQǹPNӛH1R٩D*jL,P5XM7 .;>$MNxc@ȤǟC vd+5VyPPc{;dDz1ixNY[`;hp`u:׀z)~ . dujPm@d_{|z֦#J6Dξ Y=rv'~%c r]q))N(ov<=+ l[Rt2.ұ,TD!bg l0bD9jw9]7ʦ.Bݠ_$)Ө&~OLo"~nh\puszV&ځ>]v$K@DgnȖqn׳_yr"KZFv^#ߥZUd@AEz⫯(\ [OaE}Ix4BUr90Eլ(sW+f-:(0N"=9QH0Mg@& ʔ꜉f@E ?pڀQa$Yk[^ &Q es%e|˲vt//4kq1=?g=e  3O摰 (0C`~{z41UG~@͆R/{|g9 ׮)b a/5J>cvΣzKrߌ/ȂZy51z;."R|]RT'u9Lt Qӑ ,U ;4*]d l|p=򶽇kD5cǃӯ- 90B*㏇8_]ZO߯tlr[JF' d(8ş.XШG"hq's(A>}_ZGoxr˓Ȃ;i<2mTeUj,q>H"/*%kHP˅vZT_>>+vLu܄cUDChob 'ly%1Cs*T/iZ,sM ҶJ"c&|H]{eUF!X:$2%:Z~ˤUᥬO܁qꈪ &pY6ъI:,Izw:Jj]鮩`붙f>OkP0$_) ܊¿#[>o(S$ܶD{_nh-6[p+~r Œ*tpӗ9*/-x qJ^DI]2 9~i6ko{bȹyթ`tʸuCk=0qEÅcdIRyUydrNr*8EH -\|~: M'Srִj0nsm)S׽@t=J"O5cb/d Lx0hU[!5`91ڬid)/0Y.` #ξCF:IXz9zh@2]5Rz,{ b]`uk*cEsA T|7 0ӓڲ˜VVUdt[M z) n]Eled`mO4b]S4*8R[6yN"jO!'BEHtҜ)H TUA2o:],Do0N]g"0)<17W.f~ x'Iі;=>/#[&E 8[fqdO2t9/0hk:-1y77{y@]WLՕrkfE? z0l6F7o"d-Xo6? l4ՈTRk <8 3[E6FJLԑۦQv(E%~~_ @\֖#@$/\ ʀ`6)HF.ŵ6{UqG[7zSYR7'"^Y}zѫnJAFZY"!cƀ-":&^u5i4_VyJҿވ:鷴RG Θ\$AoLJwBlϕ=Ug?b_FEnvۮnϹ j -Ŋ=ݤFU; u*JbL?sGt݁-o/鈿dad$Y7BӈuYvT8>ځhQF"VxWdd;"VAYEQSm=,vG}QxE]]P.pѬ:Gl!#)} mTr SdG#*j24@@+bZZ:u*i7-]B>Ql1Ov&8 8\c^#cYAe5YiT/[N0^&E&NOafgZ[6ezN5à̸Q?:O#Uڊ+N {AyEVC ƚ)v@^̪&#XXB ًTϰ +j3z\^ #!{G7*k@pF BKUa5Z:\g F };ۀ$#ic԰S]ƒ9)P%Ż3vk_L8W)1e-nLKJ|A2:h\7jo'9):9(#qLERD g2-=E Su)k%yUKb4OT6P\g)>nҟj65|8TՋ0>rIc8{F\rP$EY^2>Ib.chFYԄN-0ĝ Yj<ŏ|nE%FL9 n<>m|"<&}D ݔr%6({U0?'D'99mnBմpaL}T TQhFԵ:-wKyag6B)`"giiLj\/ Oex'ʦ Xhچ7r[cP<۵'TWu_-NBXl-N95PSDmD{Z/oֿ#F −u BSgKl>*(8+{ѼJٷjlb 86bMVܫwAȱXݪOGls9ȹM_zQqBGyqëMOo$]͟ju{no(ԃ7*2ZG+eΧW> W/${Ⴠ0yDʑ!a]z[5(;p7;yOR!pe|)*@JJP=Ӫp TyVjoV: 5h+DLa_S03 /V*K܇"rRFnůT]Zʱ/) ELT!aqx4/eq'@O?rT;I?g}̢~+~>y7@V4NaTW]3nJz#8 ۪0UEi:o0H[zqR0OP˺,:3x6b,xεMzX.Gݱ"Ov}%UZߦZK|>UVOWֶWq SL=IF`^T>MK Vzb>_bU؉8Ah&Ք|B L^xb\vg/\GA'G)w]diXΥe:2kxO4{;:0ai8hN<C `׳Mx _h+"Jc7YNҳD*~.D~F Ok{ 0z%b'aiHgIRچ9^f&u*Tm]:S!0ZG#lsC I:Ue6C [-f9퉍Ls42xU 4X 9fyܶG7+ro;Xx;6pV?99fX.Z+,$+kK$"i25߀*X܊Uq$1r t &Dgxari{*5 l@nZz #|y^% e09Z bwf]]TNM9{iޑ?a'VB).r><`v+ -Vt7؍|rm5}]PaQ>ywviq_g=DEd@&ƓEM,a\2Qi1ќ͐kSQoJ,pq791c lߴ&sbV1].ʎ{uDOZ+0l XM­:=G*rxr@Ns.KM{]˻1;^2(,ݨMi$_()iH.8ft}e N0m,FUd޳7!Z>@:?9;&bp7 M\*X{Æ[c/% kܷ]K* YX>{XW׏d&S,as p׊{4huq-HdiM |lR5 wix(AlV{,UP_!wNC(ċO@s\\OxnEbR)&q] 23PP.0m` 1d/,I+ !"yOqAQI?rRDr,p\!.̌DQW[ Z {BL54]im܎P)EbH0C}6:Chj.d5CԬ ciȽ; oAj: :xI{nG[S'D<,ty|@|DA} V 4a?2 :h͎},OM U,p0#!_ FM H_uO`A+XsGf _ R0'4)X+ky7ˀ0WlH,VQ؆frQS-O_m[/+zۛx ggd,a;R0𧵼y<ԐK4X E1!Oh7#+z/EU$}CvUP:*e7 >9_[iC~.fLJvڅnBqQdL7ú_{cI%,IOf6{ 'NãKR0XG|U.VN]-,4Ϣ0^\ ɃO_Hj!W%Th!)BZ?Nf %r qgtRHV9-RZ>yٖS_r)\ $9lRȚ4&<0OL7I C%NizrG9|-엨 @Rr*7$@tA[E8*J|80U%IRD˃k 6? ~d9-/TcC̹6$cBnˣ\QgR^EMB)j9,KڏңS~O%,'-a/CM!ha\e6qtZ֣w߃V_l޺s9Lki lѰK-{{O] 鑉2LEU,ȉ w$<OC{{0& Y 8]@һnTUpXQ[o)EѳU.F} cs@`c&40vah? -hʝ_cvK?V.ϥ VP@H*;"2}e%SSphl"bD6&aL QNmL\zb# 꽝N)u6fH{anXq'4K@R`iע<_ ON*΁;4-(H/?wyH"c*կ^mN<{ K,( Ӓ`v/Wp(wz~`GW򨅚a1Bl nfbIO@\Cz]q8̌q/wPByr^:]'76K@x$t$BD7('W z4x~w<\:ZWW0~lϏ|X Ζ!Pԅ&iM̡ x 5)Ѐqc T<%냊^| CНz<Bz%Je_lpMO ¥)0}qq10GΙKJ@*%Ue3믶veBO+^t4dsp"SQfs7y1V m`H-#]$@niF5„Mir/[Ȕ 9T.Q H^`ِ\:4k'm}T UgyV0lDzJ8nq;n:4gs/S[A߯7ƟSP$q]&Oz'n I;dxՊ%mIĎ;MjeTN_p~T7(Yzxzw3e0W;} X:l}~"Sq]-q?-@pO+n(LA0YE9}ǤHӒj 7J%1]Em>UQbHq{*2m?dTOYiuzPealzG\5p0;VښBm ,Τ9) TFw1ZGw,ȋɿOӗts"tD[=x~Jح؏L iKwa'U9 -[cmkh |-b+Q KV4]߾fsG(yԳ1Q}n@a44sTLLD)= ѵj(Num=xųGn!f )Fv7:M/C>xCD~ SA6&=dKpȖt52հ U ,j[I~};/"[^2 _I>8fw[45TUw'D}җh矉 bFq~necjod2ֹ!WlZx<+eL|s`:Y?9'7I' FO{ ٵWDt|%,4 L;*#2`u@A bL+O( Y\p~Gn|ͱ=n>T zug5ة. (80-F춗PZ؉J;TKa#} ]oButlOăr⨻ qvx)Ѭʬj٣G|4NzwOrl=Pjk lKgwO{dfHcW1Ifr m_DXsJr:'NRh#6&EbEWJ?A9liZUח,yע&[Qt!tF@y8)ж6>E'o륾)KjyID{AˊG1*A h+\3P ^x8X(7|t_(9K׃H]!tw<--` [="E-7/} 'kzܴnB9?I/3AjE [ hDt: FTϒnSpueFϺh. P$a69w Mn{$p7m/w" Y?ekĂ 5Nc, u-$߄-k%I@% ݧ;z\E>˽QEQͪ>_DxB`$r0T2_Fm8;U><7S|dWO5VLm3ܒQu$JΐGig%XLbcI )xƨ\و *b1[l`u;;5B]IY1 欫͸WWpRк$#giGWjpcC\inIfb:ͬ>?{.JYb݂KHQg-ݗu<=FݤBz|5eHXw tGaC@koܤvSsH67Зռ$p r0wfޖ́"Ɂ~`nհ1K޹>㴢TV4*62eJ*,J lUx-. Ǡ8_zM 0c+5ˡY H`t}VkGOc S2/. ?3((YAh\#<;wf `',X֌Z*"@|k3n5(}Dfm)lL@l=Ta;V ՛=V%1@/d(R=PèYNfԉĨkKtT?Q A sx)Ϧ~(Лp)FԬ ,D41=I*YX՗={wkVZB13QG !2gqHhs|f9"<[_L]MyTFN—D& _q1VqLRH< UT(fX!+ZVv*w9ͤ-` y_P?3ǀPC;H[VҠb*.ssj˥>Z;/CZ7XOWR q0Mi>HCqf̴~^µvqҜǨLsOCK#Y֧}(cmhOLe1%)BLoU}<,ZPXeπ9{êdI)tAߟF>A;pbZ{> [_[zb#)$C"d&*rŊ-#Mگv.y WgȒ=-?CJ#g{)0^恑=Z)MHLؔRRG)X!] Aɋ&D^]Q45(7#iy:yvsZYp 6C|ӧt QK=<>8LtIqZwq$c7/8).OP)*E?4ʓ A6+_3&<4i pOMFWir?rm{IU%hh)q[uB^dhXC$PYfJ/3k.oR(3}2ZFwS4~?Oٮ&;[W&cS1s 4Yܓai1 7y&`JۻN7bGU,^l'֔%[ K-S/Є#Nq렷+;󚦬 s"> nŴ$b/ػT/%q3rLOS v"SA#k,_]tpH =nA7-ฑp`ՙ:kWMj!g1yk$YzTw߅hUڙI0rsvgbK/vPA[pq9}C & q@=Xj2+/&0,5/cETK|IϤط}u&ǔo߲~NWϨwOI1i^>AC;O$~D$+'k<w$:ɻAET 9#皮F?~$)'Y<P"y(gڃ/֏'e}So`[]}ߊ"QǶQ׸bUl^l'apoH ]ijߑC0ٛdYϑv` WuIay P@7qvicז$}}ib=iYtאu}Q5ytAWʽy3^y/T{VW)h *&4 '77L,y,A7^eZ/BFfeaBsz5OEÓ9:It ʖWXŜ =ޜz ӁeCÅ n6dCk@HF]ĂYU圁睈U~uuS7AX,A5]>LDsU.RZ,"cׅkL "h?H{}>hNʆL3J?lqtAW^X'Yg rL|'4f.8s}zKP:=|C")dȍuÿdzhFp#dΑCV>f\Au%.?_-GvU)w* {y Ls ɫCP23>V=;Q'*LVg)&N5UGNb'TPגY>72PCuJGjYA5grOTjV Cy."%@nqwE6<چ[BUe_~Kg稬ϼC[:ȵNϪtkT `y|V8UlTMeNB4% W,ĮNc`I;4%칥HZ!z;IwJuu6:{|oXR9^}omYCQwW8ujӳlMH kiH84A5~{B㪠/nhSEY$-,"k%w+?icL&$_~9:LzNroDQ:u"[7'Yɚz\<Vd+yrTl'PTn0`>VQZ[ Տ}s;!Ӭ`ZcךUZ<̍4&embV<8Mad%.U̥:"3]quw'H s7Hw$ !0}/`3mF%u&%d8xreex$hbf^i}Z5L+b~]Q0lӟ!+RxR7\S54r5]"L. h@Tp=Ȉ[GXi{3ޭG,F6^J\UCx_MPq,iiDbߡGdbϒ-V<<6Қޅ-f 6 EWҭ~n•L-/&% TUfkTFPc>\B*&.ҁ^'>w1^jrYݡ}^oJJE]j\9q6^2JX9C"ԙū+2rq&z|]l LfAp8T0]@~zHՈ?{qٙ5Pa2tM,mB]fh}ێ`V:"AB}:݉2E\"*ܷ X9 XvB`aWJC#x.v_NCO\6 LxT/; ďPvmd肠?a:©^YIE47G%`/FerxtӇa1 )%n$=ny ,jekv.WhljTtcx3x+2<s>tFx- ]kvR fW6ӹ_eaf nFdmN“[?<@fUҹDvw9SY\G^#b ~{(@z|}CoPl9&NCĥ 4(q k>Ztt:ۧ :0q|AG&T6ϝ<BT&LSˈX wn=kW ynRHL$V:xeeEB#&$vĢGV1V+_[I1hW},[,Jȃ}6gRƨZ lY3Ȓ~3ˌ{vf(KR_&2?Uu[FCCLf>d"֑$ȃx:OJQ))T]eϢ Exd셔ڰ {XʿokHeMr-sAoCعF}3/ܺ7>7k]B I :5cPOkѸRn]MRp; (A른LyV7MZ#PSMNHI=g[рX[1#% Z7Y÷i֐M@ނPC!jg/b5YPoc>8vz.?8i؉¿i٩vDkYӻn xǰrlqX$&qTB+jMZHGվ>l y1nV9iyMiɎ1bac +@u3s ;< OesyOIB%ǹ6."YٚlM\J@ہksƚ5YC .4M1Ǧ~*$iT(6{ od9C6MRyb9:Gcq`uPyt-قE;.p(;&Pdδlo=0'drxqq?hv=1$셭$|nqX*_05Y¬Iho/7?;c`;%$͆o#] |BOJq7.U8*$(?cp:KCn؃%RhQ${9e =#[zfڼWtN24,j>&ݪ+Z-U,!uBʃ@Тz1yx5d.hDJ+w3 G2u]3[fr ezt0^ ף?tF؃q'2}D1:8m!?EXF*rn#-2K%nf]O_Sq'xAoI"!GeFC- ?r\`KF˜ {K#$Fp3]UN^2qXe.Fʤahqդ>C:>)PjZ4}llFg9<m,KdͽoEPyTq^k:TmH1HyZzKX-5Ix PM9wSk*%[o/'j0u]Ycb E!*DP url6B=p "vzDɃdx8F F/YЛ=A-U'ȃ*sEA+?LzGQKFbqÎ5rcW`6vPx~mf H( eXUۆ&_;ҟ䟔Nώq _uV.Aϛ YY͐.Z[]MRi"pnWLE'Ĥ$R 7 0}gNֽ)S#(m8E$`H,.gZ:xW$\t-ʄ)hAVa OV5!e6HqW#WgCv(vZg3Ts wN^VK%_rEۣ>ǁҙIYd ii5JT@nN- ';[a>QP:_?K(:t`TPލ& : ` y&>w~kM!g>Ƃӆ rjGLw,}ƏSd:xx\jعښcP;Qn^'uјJ4Vvp'*o^_gN= {P}\WH@4e{c8{".Fxtc7ltZEhxp?M9Q5Qy1: ñ߂S7? TZ+U3E'҇ tMiCy<%S~C#%CTɊ-|ṑpq/"թ9dA]kod*gvVacR+Kg3#CAʉT \ذ" #3Wx3LoDzP$FiUq8KYh` 5}y0PˤBH oZSe`& -G}؎A=N^5NS$ݕ'rh^UL) el쯫='ݸ(&!Iݜ.b-ųf5a;saO1c1 𔳿+c=DS!v 9;؉])ovX392OIɖFe;e}Þ[~;gt"Z\OA *i$ BpcmDhrҷ6^ ԝr ݺެIxkC鈧, t{63^4ŭ<kN|ehV/+'܋ʼՀrAمBed2`]8vv17`ްbNT;R< ΫߍI(EX>DFrr?FnO˾w䛃!ZȣBnt7|!MSL+`grܡq:|\jAVs['>g|;&&' Ǎup\v3Vf{πHZ&-oqhr&iyn* Y)8c|LĐO` SV xiYi.I @m;E  [N 8{tL-w6\{ԹxIr&|&]g6K$µZd-Pyd m<Z،xȒ@VWwˏCnB]Y%R șd+ 1T|+n1o=y/cΥë@/`jCZgl|})I`t;0!3l9!yWYZ[L1;Da;VqNYVI&Ic(b\Z/NF2-R꾰eW"~ɭs0wI(^:1cZǶɋMGE0U^vP4?I?z`4 5W$D(N(+!J^M! f&1ha{B)[nd\gyg,q:Yp?\(OvD |v]&vQ'QQ/P{(tɠ}r,8wm q0&﫵dS;x:֏$>YݹUT2ϨUik֗}ڨH6;6daMbO]n/V-jz&ڠwd?~ע[uh"PFCcr uHf o3Tc OXc-'F)~s쪾^Sm0dH}N6Ζgv>L#_~'j抲3t@R8 ت1c$m5Xw-pI 55V:`)VQegAqϟyiY@m('fKkX5!h*%SB@ٰ|1C"1d[?^ ڟϢҖTPn%2-/DtԠ pP{\Q^A9\->sVCtHMu/]6y'pyCye E+~G2RQJu^0Hߨ)MOY2ܵ hщ3&QK/G@]>ѱ]ogYFJM*S cWAM}=dg7> mD(x5;mP]ڞl> ~!Gr SJxd0'ȹt־G!cѥj\݈d)t㩢;EoA݄;Ōگ\{KY&?Mobe:ђ[xO i_i 4frjˉ-xܢwxRRJS^pS;9etb!M5\0Q_sş9][J@;x<13.:!c􆅲h99Os?Y\s#ɶO( $.UoPA7j8.N[K2؇ ~e(7CY;Jȗ YMt!^ bXFVw|stg.(<ؐOxp1xGhlw) B@30$DЫe][HlsMoJ5N-1)rl ɬ65ܑSI)} {fovh^ޠ4)\}V|^yTrqwb!/ZM`c \CeL=]1F]B֨~6۵Fkֈ|vH '?×_?Pw&EWFgN6~*vN SlDw"-u aitQռX]df.3+CI__*qB+8}qο}| ꠕzn~C=|eל1qI÷/_-Kc;E@_ u딠wUY_Fkk20ZIicU 1* 46p[5&RŢ0ׄ7@pD#B{kύlZzR-M\I>q. ^}wGZV&|EUoJIB{it'7l=\8B&N|u5 Ev~l{j q]ԕiZf63Se;O.ʪѮ]o4w$f)]u@"HSכƌ\Să|?TEw\ֽgٌ]9Be/{܁,jl%YGh=9ɓM'K8}1RGNՄdLȓ$PH̔ M MtM9ޙľ$}b#Rwi'#<0U%e`/Hf:gWd͊eԻ[by>I4^PiNBk!ɸcr Q:`Rb$=/O+{*\\*oL 2n㒚$JG_+>!`F q( ?[~0ǛD~&>隄&g$?yt&$ _}Xc}]5}25I&0]=S }iӸ_e Un٥t+Y c\tȍM8<ȕbzQ"BUQW8d Kd)D2}8QJ%}0c~;ߪ()UZf:oAZ9?d&[!L;b(Rf@nv]EP^̊]MVGjKk24 Q\KMaSsG?|_}PѼ["^pJ<{K-V/?%:lAQAN4 [V %ӿ/@<ĉck* &Qzߚu?!!_ш u4E-fDv1F, & ::9_e{9 *4C7fL/o˰֞1b ԾqʅO3=լ)݋+RI]B|,+/|ed ߞX WR0<]j؟0`bo-, kc!$6e_Vw])#2["M6+Jh\.9J'*g^.b-A[ "i;`*FtPkEuLry}СGd2OJ8KZU Ed0.ܳ ?Tu^H[{=;ӧCv_͚vdT;m^7Ӟi.O.rؗD0԰qN' 6qFITi Cg3,Xo͟TvxU{YyK@5xq$+.V$K-`E|AMRwkA-TqP-Z(`+wt9ڪx q`Ekj f(\`yuJYkslWJSW-?#?pp<