libselinux-static-2.9-6.el8 >  A bU]]OHQ翐0tCLL fIqOldwOZcAA|č>xӛ֜OA_ (_`䜆Q*mL@J)J20Wp ǩ-e}L lt&sV3ROOJQTrJ#t(V>tk3X%Bwު*v\E0OM>}ۭ#:]*<2Dhƨ_+Ǵ/.TlE^ !ӳ/\X \~iZ^wHdxpe mg&%WbviWMyvxzHu4[z5}^yK$Kf@dwXQ11o![Kɯ $ZYס#I梚ad5a8a7e41359c132be831b554bdde6d1be04b3d64d77a92f7729ca23f8f48669e2c238168ea3be5122b473a65b5a8a2ef719c93bU]Tٹ1}ĎX + 1>p9Zh?ZXd  E IOX\ ^ ` d  (8L9 L:kLGX4HX8IX<XX@YXH\X\]X`^XmbXydYeYfYlYtYuYvYZZ ZZTClibselinux-static2.96.el8Static libraries used to build SELinuxThe libselinux-static package contains the static libraries needed for developing SELinux applications.b_x86-01.mbox.centos.org CentOSCentOSPublic DomainCentOS Buildsys Unspecifiedhttps://github.com/SELinuxProject/selinux/wikilinuxx86_64 䁤bBd4aecf58e5abda8b195771f9af43217ea81c938432664fd3efe166480d6e5017rootrootlibselinux-2.9-6.el8.src.rpmlibselinux-staticlibselinux-static(x86-64)    libselinux-devel(x86-64)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)2.9-6.el83.0.4-14.6.0-14.0-15.2-14.14.3b_@_l@]X]@\@[@[ā@[ @[,[@[Zz@ZK@ZZZI@Z@Z}@Zz@Zu@ZTZOhZfY@Y˒Y(@YJYV@Y@Y|xY{'@Yx@Y.X-Xg@X@X @XN@X@XXx@Xv@XJX43@WH@W9W@Wq@Wm Wk@W,@W'A@W#LW@VяVIVɦV=@VVii@V@V UU@U4@Ua@UQ@U8U6;UTS@S@SSShShSXS 4@S@R@RUR&RʚRkR%R@RMUM@M@M@M@MlMQ0@MGM5ML@L-@L@L*@LLq@LN@LF@L$@KKKrK@KKqK}+KTM@KA@K@JJJJG@JG@JG@JjJS8JS8JB@J@JMIܑI@IԨIbI̿I@IV@III@I@I2I@IcGIcGIcGIG@IG@IBR@I1.I!\I!\I-HHHe@He@He@He@H@HHH@Ht@HsVHgy@H^>H^>H-w@H!H @H@G@GG#GF@G@GGƢ@GƢ@G­G@GGD@G@G@G@G,@G,@G@GG@GZ@GZ@GeGeG|@G|@GO@GO@G<4G<4G0W@G'@FF@FIFFFFF&@FF@FvFFS@FF@FF]F@FtFFzh@Fw@Fm9@F` @F; @F-@F,F@F@FF*FF @F @FoE@EE@E4@EE?Eɿ@EEEEElEx@E&E=E=E@Ex@EvEnEYEK/@E>@E4EE EgEgEDfDDDDq@D@DB@DB@DB@DB@D{DDX@D4D4D4DD@D@D~D~D|3DvDu@Dr@Dr@DlaDk@DiD`@D_2D_2DX@DWID?D;@D'Dj@C@CCC-Cǖ@Cǖ@C[CCC8@C@CC @CCqC @CCCC@CBC@C@C|pC|pC{@CyCp@Cp@CoACkM@CiCf@C_oC_oC^@C^@CX@CWCS@COCFc@CFc@CECECBnCA@C;@C:C*C&@C&@C%mCC@CC C a@C a@C&B=BۙB@B@Br!Br!Br!Bn-@BgB] B] BZfBS@BQ,@BIC@BAZ@B9q@B9q@B06B-B$Y@B#BB@B@B LB LBBAA)@A@A@AA@A@A@AyAҜ@AJA@A`A`AA@AA@Ak@AAA@AvA@AAoA]FA]FAQi@AN@AI@AF@AF@AA@A>@A>@A7 @A7 @A5A4h@A3A3A/"@A-A+-A(A$@A!@A A A@A@@@q@7@@@@6@@@A@)@@@@@@@@@~y@@~y@@~y@@}'@s@@s@@s@@l@@ia@@b@b@b@O@@O@@Dw@@9@@,@@ @/@@???E@?E@?٭???q@??@?@?@?}d?z?a@?M?D@>S@Vit Mojzis - 2.9-6Vit Mojzis - 2.9-5Vit Mojzis - 2.9-4Vit Mojzis - 2.9-3Petr Lautrbach - 2.9-2.1Petr Lautrbach - 2.9-1Petr Lautrbach - 2.8-6Petr Lautrbach - 2.8-5Petr Lautrbach - 2.8-4Petr Lautrbach - 2.8-3Petr Lautrbach - 2.8-2Petr Lautrbach - 2.8-1Petr Lautrbach - 2.8-0.rc3.1Petr Lautrbach - 2.8-0.rc2.1Petr Lautrbach - 2.8-0.rc1.1Petr Lautrbach - 2.7-14Petr Lautrbach - 2.7-13Petr Lautrbach - 2.7-12Igor Gnatenko - 2.7-11Fedora Release Engineering - 2.7-10Igor Gnatenko - 2.7-9Iryna Shcherbina - 2.7-8Mamoru TASAKA - 2.7-7Petr Lautrbach - 2.7-6Petr Lautrbach - 2.7-5Petr Šabata - 2.7-4Zbigniew Jędrzejewski-Szmek - 2.7-3Zbigniew Jędrzejewski-Szmek - 2.7-2Petr Lautrbach - 2.7-1Fedora Release Engineering - 2.6-10Florian Weimer - 2.6-9Petr Lautrbach - 2.6-8Fedora Release Engineering - 2.6-7Petr Lautrbach - 2.6-6Petr Lautrbach - 2.6-5Petr Lautrbach - 2.6-4Petr Lautrbach - 2.6-3Petr Lautrbach - 2.6-2Petr Lautrbach - 2.6-1Fedora Release Engineering - 2.5-18Stephen Gallagher - 2.5-17Vít Ondruch - 2.5-16Petr Lautrbach - 2.5-15Charalampos Stratakis - 2.5-14Petr Lautrbach - 2.5-13Petr Lautrbach 2.5-12Petr Lautrbach 2.5-11Fedora Release Engineering - 2.5-10Petr Lautrbach - 2.5-9Petr Lautrbach - 2.5-8Petr Lautrbach - 2.5-7Petr Lautrbach - 2.5-6Petr Lautrbach - 2.5-5Petr Lautrbach - 2.5-4Petr Lautrbach - 2.5-3Petr Lautrbach 2.5-2Petr Lautrbach 2.5-1Petr Lautrbach 2.5-0.1.rc1Fedora Release Engineering - 2.4-8Vít Ondruch - 2.4-7Petr Lautrbach - 2.4-6Robert Kuska - 2.4-5Petr Lautrbach 2.4-4Petr Lautrbach 2.4-3Adam Jackson 2.4-2Petr Lautrbach 2.4-1.1Fedora Release Engineering - 2.3-11Petr Lautrbach 2.3-10Petr Lautrbach 2.3-9Petr Lautrbach 2.3-8Than Ngo - 2.3-7Vít Ondruch - 2.3-6Miroslav Grepl - 2.3-5Fedora Release Engineering - 2.3-4Fedora Release Engineering - 2.3-3Kalev Lember - 2.3-2Dan Walsh - 2.3-1Miroslav Grepl - 2.2.2-8Vít Ondruch - 2.2.2-7Dan Walsh - 2.2.2-6Dan Walsh - 2.2.2-5Dan Walsh - 2.2.2-4Dan Walsh - 2.2.2-3Dan Walsh - 2.2.2-2Dan Walsh - 2.2.2-1Adam Williamson - 2.2.1-6Dan Walsh - 2.2.1-5Dan Walsh - 2.2.1-4Dan Walsh - 2.2.1-3Dan Walsh - 2.2.1-2Dan Walsh - 2.2.1-1Dan Walsh - 2.2-1Dan Walsh - 2.1.13-21Dan Walsh - 2.1.13-20Dan Walsh - 2.1.13-19Dan Walsh - 2.1.13-17Fedora Release Engineering - 2.1.13-17Dan Walsh - 2.1.13-16Dan Walsh - 2.1.13-15Dan Walsh - 2.1.13-14Dan Walsh - 2.1.13-13Dan Walsh - 2.1.13-12Dan Walsh - 2.1.13-11Dan Walsh - 2.1.13-10Dan Walsh - 2.1.13-9Dan Walsh - 2.1.13-8Dan Walsh - 2.1.13-7Dan Walsh - 2.1.13-6Dan Walsh - 2.1.13-5Dan Walsh - 2.1.13-4Dan Walsh - 2.1.13-3Dan Walsh - 2.1.13-2Dan Walsh - 2.1.13-1Dan Walsh - 2.1.12-20Dan Walsh - 2.1.12-19Dan Walsh - 2.1.12-18Dan Walsh - 2.1.12-17Dan Walsh - 2.1.12-16Dan Walsh - 2.1.12-15Dan Walsh - 2.1.12-14Dan Walsh - 2.1.12-13Dan Walsh - 2.1.12-12Dan Walsh - 2.1.12-11Dan Walsh - 2.1.12-10Dan Walsh - 2.1.12-9Dan Walsh - 2.1.12-8Dan Walsh - 2.1.12-7Dan Walsh - 2.1.12-6Dan Walsh - 2.1.12-5Dan Walsh - 2.1.12-4Dan Walsh - 2.1.12-3Dan Walsh - 2.1.12-2Dan Walsh - 2.1.12-1David Malcolm - 2.1.11-6David Malcolm - 2.1.11-5Fedora Release Engineering - 2.1.11-4Dan Walsh - 2.1.11-3Dan Walsh - 2.1.11-2Dan Walsh - 2.1.11-1Dan Walsh - 2.1.10-5Dan Walsh - 2.1.10-4Dan Walsh - 2.1.10-3Dan Walsh - 2.1.10-2Dan Walsh - 2.1.10-1Dan Walsh - 2.1.9-9Dan Walsh - 2.1.9-8Dan Walsh - 2.1.9-7Kay Sievers - 2.1.9-6Dan Walsh - 2.1.9-5Harald Hoyer 2.1.9-4Dan Walsh - 2.1.9-3Dan Walsh - 2.1.9-2Dan Walsh - 2.1.9-1Dan Walsh - 2.1.8-5Dan Walsh - 2.1.8-4Dan Walsh - 2.1.8-2Dan Walsh - 2.1.8-1Dan Walsh - 2.1.7-2Dan Walsh - 2.1.7-1Dan Walsh - 2.1.6-4Dan Walsh - 2.1.6-3Dan Walsh - 2.1.6-2Dan Walsh - 2.1.6-1Dan Walsh - 2.1.5-5Ville Skyttä - 2.1.5-4Dan Walsh - 2.1.5-3Dan Walsh - 2.1.5-2Dan Walsh - 2.1.5-1Dan Walsh - 2.1.4-2Dan Walsh - 2.1.4-1Dan Walsh - 2.1.0-1Dan Walsh - 2.0.102-6Dan Walsh - 2.0.102-5Dan Walsh - 2.0.102-4Dan Walsh - 2.0.102-3Dan Walsh - 2.0.102-2Dan Walsh - 2.0.102-1Dan Walsh - 2.0.101-1Dan Walsh - 2.0.99-5Dan Walsh - 2.0.99-4Dan Walsh - 2.0.99-3Dan Walsh - 2.0.99-2Dan Walsh - 2.0.99-1Fedora Release Engineering Dan Walsh - 2.0.98-3Dan Walsh - 2.0.98-2Dan Walsh - 2.0.98-1Dan Walsh - 2.0.97-1Dan Walsh - 2.0.96-9Dan Walsh - 2.0.96-8jkeating - 2.0.96-7Adam Tkac - 2.0.96-6Dan Walsh - 2.0.96-5Dan Walsh - 2.0.96-4David Malcolm - 2.0.96-3Dan Walsh - 2.0.96-2Dan Walsh - 2.0.96-1Dan Walsh - 2.0.94-1Dan Walsh - 2.0.93-1Dan Walsh - 2.0.92-1Dan Walsh - 2.0.91-1Dan Walsh - 2.0.90-5Dan Walsh - 2.0.90-4Dan Walsh - 2.0.90-3Dan Walsh - 2.0.90-2Dan Walsh - 2.0.90-1Dan Walsh - 2.0.89-2Dan Walsh - 2.0.89-1Dan Walsh - 2.0.88-1Dan Walsh - 2.0.87-1Dan Walsh - 2.0.86-2Dan Walsh - 2.0.86-1Fedora Release Engineering - 2.0.85-2Dan Walsh - 2.0.85-1Dan Walsh - 2.0.84-1Dan Walsh - 2.0.82-2Dan Walsh - 2.0.82-1Dan Walsh - 2.0.81-1Dan Walsh - 2.0.80-1Dan Walsh - 2.0.79-6Dan Walsh - 2.0.79-5Dan Walsh - 2.0.79-4Dan Walsh - 2.0.79-3Dan Walsh - 2.0.79-1Dan Walsh - 2.0.78-5Dan Walsh - 2.0.78-4Dan Walsh - 2.0.78-3Dan Walsh - 2.0.78-2Dan Walsh - 2.0.78-1Fedora Release Engineering - 2.0.77-6Dan Walsh - 2.0.77-5Dan Walsh - 2.0.77-3Dan Walsh - 2.0.77-2Dan Walsh - 2.0.77-1Dan Walsh - 2.0.76-6Dan Walsh l - 2.0.76-5Dan Walsh - 2.0.76-4Ignacio Vazquez-Abrams - 2.0.76-2Dan Walsh - 2.0.76-1Dan Walsh - 2.0.75-2Dan Walsh - 2.0.75-1Dan Walsh - 2.0.73-1Dan Walsh - 2.0.71-6Dan Walsh - 2.0.71-5Dan Walsh - 2.0.71-4Dan Walsh - 2.0.71-3Dan Walsh - 2.0.71-2Dan Walsh - 2.0.71-1Dan Walsh - 2.0.70-1Dan Walsh - 2.0.69-2Dan Walsh - 2.0.69-1Dan Walsh - 2.0.67-4Dan Walsh - 2.0.67-3Dan Walsh - 2.0.67-2Dan Walsh - 2.0.67-1Dan Walsh - 2.0.65-1Dan Walsh - 2.0.64-3Dan Walsh - 2.0.64-2Dan Walsh - 2.0.64-1Dan Walsh - 2.0.61-4Dan Walsh - 2.0.61-3Dan Walsh - 2.0.61-2Dan Walsh - 2.0.61-1Dan Walsh - 2.0.60-1Dan Walsh - 2.0.59-2Dan Walsh - 2.0.59-1Dan Walsh - 2.0.58-1Dan Walsh - 2.0.57-2Dan Walsh - 2.0.57-1Dan Walsh - 2.0.56-1Dan Walsh - 2.0.55-1Dan Walsh - 2.0.53-1Dan Walsh - 2.0.52-1Dan Walsh - 2.0.50-1Dan Walsh - 2.0.49-2Dan Walsh - 2.0.49-1Dan Walsh - 2.0.48-1Dan Walsh - 2.0.47-4Adel Gadllah - 2.0.47-3Dan Walsh - 2.0.47-2Dan Walsh - 2.0.47-1Dan Walsh - 2.0.46-6Dan Walsh - 2.0.46-5Dan Walsh - 2.0.46-4Dan Walsh - 2.0.46-3Dan Walsh - 2.0.46-2Dan Walsh - 2.0.46-1Dan Walsh - 2.0.45-1Dan Walsh - 2.0.43-1Dan Walsh - 2.0.42-1Dan Walsh - 2.0.40-1Dan Walsh - 2.0.37-1Dan Walsh - 2.0.36-1Dan Walsh - 2.0.35-2Dan Walsh - 2.0.35-1Dan Walsh - 2.0.34-3Dan Walsh - 2.0.34-2Dan Walsh - 2.0.34-1Dan Walsh - 2.0.33-2Dan Walsh - 2.0.33-1Dan Walsh - 2.0.31-4Dan Walsh - 2.0.31-3Dan Walsh - 2.0.31-2Dan Walsh - 2.0.30-2Dan Walsh - 2.0.30-1Dan Walsh - 2.0.29-1Dan Walsh - 2.0.24-3Dan Walsh - 2.0.24-2Dan Walsh - 2.0.24-1Dan Walsh - 2.0.23-3Dan Walsh - 2.0.23-2Dan Walsh - 2.0.23-1Dan Walsh - 2.0.22-1Dan Walsh - 2.0.21-2Dan Walsh - 2.0.21-1Dan Walsh - 2.0.18-1Dan Walsh - 2.0.16-1Dan Walsh - 2.0.14-1Dan Walsh - 2.0.13-2Dan Walsh - 2.0.13-1Dan Walsh - 2.0.12-2Dan Walsh - 2.0.12-1Dan Walsh - 2.0.11-1Dan Walsh - 2.0.9-2Dan Walsh - 2.0.9-1Dan Walsh - 2.0.8-1Dan Walsh - 2.0.7-2Dan Walsh - 2.0.7-1Dan Walsh - 2.0.5-2Dan Walsh - 2.0.5-1Dan Walsh - 2.0.4-1Dan Walsh - 2.0.2-1Dan Walsh - 2.0.1-1Dan Walsh - 2.0.0-1Dan Walsh - 1.34.0-2Dan Walsh - 1.34.0-1Dan Walsh - 1.33.6-1Dan Walsh - 1.33.5-1Dan Walsh - 1.33.4-3Dan Walsh - 1.33.4-2Dan Walsh - 1.33.4-1Dan Walsh - 1.33.3-3Dan Walsh - 1.33.3-2Dan Walsh - 1.33.3-1Jeremy Katz - 1.33.2-4Dan Walsh - 1.33.2-3Dan Walsh - 1.33.2-2Dan Walsh - 1.33.2-1Dan Walsh - 1.33.1-2Dan Walsh - 1.33.1-1Dan Walsh - 1.32-1Jesse Keating - 1.30.29-2Dan Walsh - 1.30.29-1Jeremy Katz - 1.30.28-3Dan Walsh - 1.30.28-2Dan Walsh - 1.30.28-1Jeremy Katz - 1.30.27-2Dan Walsh - 1.30.27-1Jesse Keating - 1.20.26-2Dan Walsh - 1.30.25-1Dan Walsh - 1.30.24-1Dan Walsh - 1.30.22-2Dan Walsh - 1.30.22-1Dan Walsh - 1.30.20-1Jeremy Katz - 1.30.19-5Jeremy Katz - 1.30.19-4Dan Walsh 1.30.19-3Dan Walsh 1.30.19-2Dan Walsh 1.30.19-1Dan Walsh 1.30.15-5Dan Walsh 1.30.15-4Dan Walsh 1.30.15-3Dan Walsh 1.30.15-2Dan Walsh 1.30.15-1Dan Walsh 1.30.12-2Dan Walsh 1.30.12-1Dan Walsh 1.30.11-2Dan Walsh 1.30.11-1Dan Walsh 1.30.10-4Dan Walsh 1.30.10-3Dan Walsh 1.30.10-2Dan Walsh 1.30.10-1Dan Walsh 1.30.8-1Dan Walsh 1.30.7-2Dan Walsh 1.30.7-1Dan Walsh 1.30.6-2Dan Walsh 1.30.6-1Dan Walsh 1.30.5-1Dan Walsh 1.30.3-3Dan Walsh 1.30.3-2Dan Walsh 1.30.3-1Dan Walsh 1.30.1-2Dan Walsh 1.30.1-1Dan Walsh 1.30-1Jesse Keating - 1.29.7-1.2Jesse Keating - 1.29.7-1.1Dan Walsh 1.29.7-1Dan Walsh 1.29.6-1Dan Walsh 1.29.5-2Dan Walsh 1.29.5-1Dan Walsh 1.29.4-1Dan Walsh 1.29.3-2Dan Walsh 1.29.3-1Dan Walsh 1.29.2-4Dan Walsh 1.29.2-3Dan Walsh 1.29.2-2Dan Walsh 1.29.2-1Dan Walsh 1.29.1-3Jesse Keating Dan Walsh 1.29.1-1Dan Walsh 1.28-1Dan Walsh 1.27.28-2Dan Walsh 1.27.28-1Dan Walsh 1.27.26-1Dan Walsh 1.27.25-1Dan Walsh 1.27.23-1Dan Walsh 1.27.22-4Dan Walsh 1.27.22-3Dan Walsh 1.27.22-2Dan Walsh 1.27.22-1Dan Walsh 1.27.21-2Dan Walsh 1.27.21-1Dan Walsh 1.27.20-1Dan Walsh 1.27.19-1Dan Walsh 1.27.18-1Dan Walsh 1.27.17-4Dan Walsh 1.27.17-2Dan Walsh 1.27.17-1Dan Walsh 1.27.14-3Dan Walsh 1.27.14-2Dan Walsh 1.27.14-1Dan Walsh 1.27.13-2Dan Walsh 1.27.13-1Dan Walsh 1.27.12-1Dan Walsh 1.27.9-2Dan Walsh 1.27.9-1Dan Walsh 1.27.7-1Dan Walsh 1.27.6-1Dan Walsh 1.27.4-1Dan Walsh 1.27.3-1Dan Walsh 1.27.2-1Dan Walsh 1.27.1-3Dan Walsh 1.27.1-2Dan Walsh 1.26-6Dan Walsh 1.26-5Dan Walsh 1.26-3Dan Walsh 1.26-2Dan Walsh 1.25.7-1Dan Walsh 1.25.6-1Dan Walsh 1.25.5-1Dan Walsh 1.25.4-1Dan Walsh 1.25.3-2Dan Walsh 1.25.3-1Dan Walsh 1.25.2-2Dan Walsh 1.25.2-1Dan Walsh 1.24.2-1Dan Walsh 1.24.1-1Dan Walsh 1.23.11-1Dan Walsh 1.23.10-3Dan Walsh 1.23.10-2Dan Walsh 1.23.10-1Dan Walsh 1.23.8-1Dan Walsh 1.23.7-3Dan Walsh 1.23.7-2Dan Walsh 1.23.7-1Dan Walsh 1.23.6-1Dan Walsh 1.23.5-1Dan Walsh 1.23.4-1Dan Walsh 1.23.2-3Dan Walsh 1.23.2-2Dan Walsh 1.23.2-1Dan Walsh 1.23.1-1Dan Walsh 1.22-1Dan Walsh 1.21.13-1Dan Walsh 1.21.12-1Dan Walsh 1.21.11-2Dan Walsh 1.21.11-1Dan Walsh 1.21.10-3Dan Walsh 1.21.10-1Dan Walsh 1.21.9-2Dan Walsh 1.21.9-1Dan Walsh 1.21.8-1Dan Walsh 1.21.7-1Dan Walsh 1.21.5-1Dan Walsh 1.21.4-1Dan Walsh 1.21.2-1Dan Walsh 1.21.1-3Dan Walsh 1.21.1-2Dan Walsh 1.21.1-1Dan Walsh 1.20.1-3Dan Walsh 1.20.1-2Dan Walsh 1.20.1-1Dan Walsh 1.19.4-1Dan Walsh 1.19.3-3Dan Walsh 1.19.3-2Dan Walsh 1.19.3-1Dan Walsh 1.19.2-1Dan Walsh 1.19.1-6Dan Walsh 1.19.1-4Dan Walsh 1.19.1-2Dan Walsh 1.19.1-1Steve Grubb 1.18.1-5Dan Walsh 1.18.1-4Dan Walsh 1.18.1-3Steve Grubb 1.18.1-2Dan Walsh 1.18.1-1Steve Grubb 1.17.15-2Steve Grubb 1.17.15-2Dan Walsh 1.17.15-1Dan Walsh 1.17.14-1Dan Walsh 1.17.13-3Dan Walsh 1.17.13-2Dan Walsh 1.17.13-1Dan Walsh 1.17.12-2Dan Walsh 1.17.12-1Dan Walsh 1.17.11-1Dan Walsh 1.17.10-1Dan Walsh 1.17.9-2Dan Walsh 1.17.9-1Dan Walsh 1.17.8-2Dan Walsh 1.17.8-1Dan Walsh 1.17.7-1Dan Walsh 1.17.6-1Dan Walsh 1.17.5-1Dan Walsh 1.17.4-1Dan Walsh 1.17.3-1Dan Walsh 1.17.2-1Dan Walsh 1.17.1-1Dan Walsh 1.16.1-1Colin Walters 1.16-1Dan Walsh 1.15.7-1Dan Walsh 1.15.6-1Dan Walsh 1.15.5-1Dan Walsh 1.15.4-1Dan Walsh 1.15.3-2Dan Walsh 1.15.3-1Dan Walsh 1.15.2-1Dan Walsh 1.15.1-3Dan Walsh 1.15.1-2Dan Walsh 1.15.1-1Dan Walsh 1.14.1-1Dan Walsh 1.13.4-1Elliot Lee Dan Walsh 1.13.3-2Dan Walsh 1.13.2-1Dan Walsh 1.13.1-1Dan Walsh 1.12-2Dan Walsh 1.12-1Dan Walsh 1.11.4-1Dan Walsh 1.11.3-1Dan Walsh 1.11.2-1Dan Walsh 1.11-4Dan Walsh 1.11-3Dan Walsh 1.11-2Dan Walsh 1.11-1Dan Walsh 1.10-2Dan Walsh 1.10-1Dan Walsh 1.9-1Dan Walsh 1.8-1Dan Walsh 1.6-6Dan Walsh 1.6-5Dan Walsh 1.6-4Dan Walsh 1.6-3Dan Walsh 1.6-2Elliot Lee Dan Walsh 1.4-11Elliot Lee Dan Walsh 1.4-9Dan Walsh 1.4-8Dan Walsh 1.4-7Dan Walsh 1.4-6Dan Walsh 1.4-5Dan Walsh 1.4-4Dan Walsh 1.4-3Dan Walsh 1.4-2Dan Walsh 1.4-1Dan Walsh 1.3-2Dan Walsh 1.3-1Dan Walsh 1.2-9Dan Walsh 1.2-8Dan Walsh 1.2-7Dan Walsh 1.2-6Dan Walsh 1.2-5Dan Walsh 1.2-4Dan Walsh 1.2-3Dan Walsh 1.2-2Dan Walsh 1.2-1Dan Walsh 1.0-1- Describe fcontext regular expressions (#1904059) - Strip spaces before values in config (#2012145)- Deprecate security_compute_user(), update man pages (#1879368)- Eliminate use of security_compute_user() (#1879368)- Fix mcstrans secolor examples in secolor.conf man page (#1770270)- Use Python distutils to install SELinux python bindings (#1719771) - Move sefcontext_compile to -utils package (#1612518)- SELinux userspace 2.9 release- Fix RESOURCE_LEAK coverity scan defects- selinux_restorecon: Skip customized files also without -v - man pages fixes- Build libselinux-python when %with_python2 macro is set to non-zero value- Build libselinux-ruby (#1581322)- Don't build the Python 2 subpackage (#1567358)- SELinux userspace 2.8 release- SELinux userspace 2.8-rc3 release candidate- SELinux userspace 2.8-rc2 release candidate- SELinux userspace 2.8-rc1 release candidate- Do not build libselinux-ruby- build: Replace PYSITEDIR with PYTHONLIBDIR- Correct manpages regarding removable_context - build: follow standard semantics for DESTDIR and PREFIX- Escape macros in %changelog- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild- Switch to %ldconfig_scriptlets- Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)- F-28: rebuild for ruby25- Rebuild with libsepol-2.7-3- Drop golang bindings - Add support for pcre2 to pkgconfig definition- Enable the python3 subpackages on EL- Also add Provides for the old name without %_isa- Python 2 binary package renamed to python2-libselinux See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3 - Python 3 binary package renamed to python3-libselinux- Update to upstream release 2017-08-04- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild- Rebuild with binutils fix for ppc64le (#1475636)- Always unmount selinuxfs for SELINUX=disabled- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- Don't finalize mount state in selinux_set_policy_root() - Follow upstream and rename _selinux.so to _selinux.cpython-36m-x86_64-linux-gnu.so- Fix setfiles progress indicator- Fix segfault in selinux_restorecon_sb() (#1433577) - Change matchpathcon usage to match with matchpathcon manpage - Fix a corner case getsebool return value- Fix 'semanage boolean -m' to modify active value- Fix FTBFS - fatal error (#1427902)- Update to upstream release 2016-10-14- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild- Add missing %license macro- Rebuilt for https://fedoraproject.org/wiki/Changes/Ruby_2.4- Rewrite restorecon() python method- Rebuild for Python 3.6- Fix pointer handling in realpath_not_final (#1376598)- Fix -Wsign-compare warnings - Drop unused stdio_ext.h header file - Kill logging check for selinux_enabled() - Drop usage of _D_ALLOC_NAMLEN - Add openrc_contexts functions - Fix redefinition of XATTR_NAME_SELINUX - Correct error path to always try text - Clean up process_file() - Handle NULL pcre study data - Fix in tree compilation of utils that depend on libsepol- Rebuilt with libsepol-2.5-9- https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages- Clarify is_selinux_mls_enabled() description - Explain how to free policy type from selinux_getpolicytype() - Compare absolute pathname in matchpathcon -V - Add selinux_snapperd_contexts_path()- Move _selinux.so to /usr/lib64/python*/site-packages- Modify audit2why analyze function to use loaded policy - Sort object files for deterministic linking order - Respect CC and PKG_CONFIG environment variable - Avoid mounting /proc outside of selinux_init_load_policy()- Fix multiple spelling errors- Rebuilt with libsepol-2.5-5- Fix typo in sefcontext_compile.8- Fix location of selinuxfs mount point - Only mount /proc if necessary - procattr: return einval for <= 0 pid args - procattr: return error on invalid pid_t input- Use fully versioned arch-specific requires- Update to upstream release 2016-02-23- Update to upstream rc1 release 2016-01-07- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild- Rebuilt for https://fedoraproject.org/wiki/Changes/Ruby_2.3- Build libselinux without rpm_execcon() (#1284019)- Rebuilt for Python3.5 rebuild- Flush the class/perm string mapping cache on policy reload (#1264051) - Fix restorecon when path has no context- Simplify procattr cache (#1257157,#1232371)- Export ldflags into the build so hardening works- Update to 2.4 release- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- is_selinux_enabled: Add /etc/selinux/config test (#1219045) - matchpathcon/selabel_file: Fix man pages (#1219718)- revert support for policy compressed with xv (#1185266)- selinux.py - use os.walk() instead of os.path.walk() (#1195004) - is_selinux_enabled(): drop no-policy-loaded test (#1195074) - fix -Wformat errors and remove deprecated mudflap option- bump release and rebuild so that koji-shadow can rebuild it against new gcc on secondary arch- Rebuilt for https://fedoraproject.org/wiki/Changes/Ruby_2.2- Compiled file context files and the original should have the same permissions from dwalsh@redhat.com - Add selinux_openssh_contexts_path() to get a path to /contexts/openssh_contexts- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild- Rebuilt for https://fedoraproject.org/wiki/Changes/Python_3.4- Update to upstream * Get rid of security_context_t and fix const declarations. * Refactor rpm_execcon() into a new setexecfilecon() from Guillem Jover.- Add selinux_openssh_contexts_path()- Rebuilt for https://fedoraproject.org/wiki/Changes/Ruby_2.1- Fix spelling mistake in man page- More go bindings - restorecon, getpidcon, setexeccon- Add additional go bindings for get*con calls - Add go bindings test command - Modify man pages of set*con calls to mention that they are thread specific- Move selinux.go to /usr/lib64/golang/src/pkg/github.com/selinux/selinux.go - Add Int_to_mcs function to generate MCS labels from integers.- Add ghost flag for /var/run/setrans- Update to upstream * Fix userspace AVC handling of per-domain permissive mode. - Verify context is not null when passed into *setfilecon_raw- revert unexplained change to rhat.patch which broke SELinux disablement- Verify context is not null when passed into lsetfilecon_raw- Mv selinux.go to /usr/share/gocode/src/selinux- Add golang support to selinux.- Remove togglesebool man page- Update to upstream * Remove -lpthread from pkg-config file; it is not required. - Add support for policy compressed with xv- Update to upstream * Fix avc_has_perm() returns -1 even when SELinux is in permissive mode. * Support overriding Makefile RANLIB from Sven Vermeulen. * Update pkgconfig definition from Sven Vermeulen. * Mount sysfs before trying to mount selinuxfs from Sven Vermeulen. * Fix man pages from Laurent Bigonville. * Support overriding PATH and LIBBASE in Makefiles from Laurent Bigonville. * Fix LDFLAGS usage from Laurent Bigonville * Avoid shadowing stat in load_mmap from Joe MacDonald. * Support building on older PCRE libraries from Joe MacDonald. * Fix handling of temporary file in sefcontext_compile from Dan Walsh. * Fix procattr cache from Dan Walsh. * Define python constants for getenforce result from Dan Walsh. * Fix label substitution handling of / from Dan Walsh. * Add selinux_current_policy_path from Dan Walsh. * Change get_context_list to only return good matches from Dan Walsh. * Support udev-197 and higher from Sven Vermeulen and Dan Walsh. * Add support for local substitutions from Dan Walsh. * Change setfilecon to not return ENOSUP if context is already correct from Dan Walsh. * Python wrapper leak fixes from Dan Walsh. * Export SELINUX_TRANS_DIR definition in selinux.h from Dan Walsh. * Add selinux_systemd_contexts_path from Dan Walsh. * Add selinux_set_policy_root from Dan Walsh. * Add man page for sefcontext_compile from Dan Walsh.- Add systemd_contexts support - Do substitutions on a local sub followed by a dist sub- Eliminate requirement on pthread library, by applying patch for Jakub Jelinek Resolves #1013801- Fix handling of libselinux getconlist with only one entry- Add Python constants for SELinux enforcing modes- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild- Add sefcontext_compile.8 man page - Add Russell Coker patch to fix man pages - Add patches from Laurent Bigonville to fix Makefiles for debian. - modify spec file to use %{_prefix}/lib- Fix patch that Handles substitutions for /- Handle substitutions for / - semanage fcontext -a -e / /opt/rh/devtoolset-2/root- Add Eric Paris patch to fix procattr calls after a fork.- Move secolor.conf.5 into mcstrans package and out of libselinux- Fix python bindings for selinux_check_access- Fix reseting the policy root in matchpathcon- Cleanup setfcontext_compile atomic patch - Add matchpathcon -P /etc/selinux/mls support by allowing users to set alternate root - Make sure we set exit codes from selinux_label calls to ENOENT or SUCCESS- Make setfcontext_compile atomic- Fix memory leak in set*con calls.- Move matchpathcon to -utils package - Remove togglesebool- Fix selinux man page to reflect what current selinux policy is.- Add new constant SETRANS_DIR which points to the directory where mstransd can find the socket and libvirt can write its translations files.- Bring back selinux_current_policy_path- Revert some changes which are causing the wrong policy version file to be created- Update to upstream * audit2why: make sure path is nul terminated * utils: new file context regex compiler * label_file: use precompiled filecontext when possible * do not leak mmapfd * sefcontontext_compile: Add error handling to help debug problems in libsemanage. * man: make selinux.8 mention service man pages * audit2why: Fix segfault if finish() called twice * audit2why: do not leak on multiple init() calls * mode_to_security_class: interface to translate a mode_t in to a security class * audit2why: Cleanup audit2why analysys function * man: Fix program synopsis and function prototypes in man pages * man: Fix man pages formatting * man: Fix typo in man page * man: Add references and man page links to _raw function variants * Use ENOTSUP instead of EOPNOTSUPP for getfilecon functions * man: context_new(3): fix the return value description * selinux_status_open: handle error from sysconf * selinux_status_open: do not leak statusfd on exec * Fix errors found by coverity * Change boooleans.subs to booleans.subs_dist. * optimize set*con functions * pkg-config do not specifc ruby version * unmap file contexts on selabel_close() * do not leak file contexts with mmap'd backend * sefcontext_compile: do not leak fd on error * matchmediacon: do not leak fd * src/label_android_property: do not leak fd on error- Update to latest patches from eparis/Upstream- Update to latest patches from eparis/Upstream- Try procatt speedup patch again- Roll back procattr speedups since it seems to be screwing up systemd labeling.- Fix tid handling for setfscreatecon, old patch still broken in libvirt- Fix tid handling for setfscreatecon, old patch still broken in libvirt- setfscreatecon after fork was broken by the Set*con patch. - We needed to reset the thread variables after a fork.- Fix setfscreatecon call to handle failure mode, which was breaking udev- Ondrej Oprala patch to optimize set*con functions - Set*con now caches the security context and only re-sets it if it changes.- Rebuild against latest libsepol- Update to latest patches from eparis/Upstream - Fix errors found by coverity - set the sepol_compute_av_reason_buffer flag to 0. This means calculate denials only? - audit2why: remove a useless policy vers variable - audit2why: use the new constraint information- Rebuild with latest libsepol- Return EPERM if login program can not reach default label for user - Attempt to return container info from audit2why- Apply patch from eparis to fix leaked file descriptor in new labeling code- Add new function mode_to_security_class which takes mode instead of a string. - Possibly will be used with coreutils.- Add back selinuxconlist and selinuxdefcon man pages- Fix segfault from calling audit2why.finish() multiple times- Fix up selinux man page to reference service man pages- Rebuild with fixed libsepol- Update to upstream * Add support for lxc_contexts_path * utils: add service to getdefaultcon * libsemanage: do not set soname needlessly * libsemanage: remove PYTHONLIBDIR and ruby equivalent * boolean name equivalency * getsebool: support boolean name substitution * Add man page for new selinux_boolean_sub function. * expose selinux_boolean_sub * matchpathcon: add -m option to force file type check * utils: avcstat: clear sa_mask set * seusers: Check for strchr failure * booleans: initialize pointer to silence coveriety * stop messages when SELinux disabled * label_file: use PCRE instead of glibc regex functions * label_file: remove all typedefs * label_file: move definitions to include file * label_file: do string to mode_t conversion in a helper function * label_file: move error reporting back into caller * label_file: move stem/spec handling to header * label_file: drop useless ncomp field from label_file data * label_file: move spec_hasMetaChars to header * label_file: fix potential read past buffer in spec_hasMetaChars * label_file: move regex sorting to the header * label_file: add accessors for the pcre extra data * label_file: only run regex files one time * label_file: new process_file function * label_file: break up find_stem_from_spec * label_file: struct reorg * label_file: only run array once when sorting * Ensure that we only close the selinux netlink socket once. * improve the file_contexts.5 manual page- rebuild for https://fedoraproject.org/wiki/Features/Python_3.3- make with_python3 be conditional on fedora- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- Move the tmpfiles.d content from /etc/tmpfiles.d to /usr/lib/tmpfiles.d- Revert Eric Paris Patch for selinux_binary_policy_path- Update to upstream * Fortify source now requires all code to be compiled with -O flag * asprintf return code must be checked * avc_netlink_recieve handle EINTR * audit2why: silence -Wmissing-prototypes warning * libsemanage: remove build warning when build swig c files * matchpathcon: bad handling of symlinks in / * seusers: remove unused lineno * seusers: getseuser: gracefully handle NULL service * New Android property labeling backend * label_android_property whitespace cleanups * additional makefile support for rubywrap- Fix booleans.subs name, change function name to selinux_boolean_sub, add man page, minor fixes to the function- Fix to compile with Fortify source * Add -O compiler flag * Check return code from asprintf - Fix handling of symbolic links in / by realpath_not_final- Add support for lxc contexts file- Add support fot boolean subs file- Update to upstream * Fix dead links to www.nsa.gov/selinux * Remove jump over variable declaration * Fix old style function definitions * Fix const-correctness * Remove unused flush_class_cache method * Add prototype decl for destructor * Add more printf format annotations * Add printf format attribute annotation to die() method * Fix const-ness of parameters & make usage() methods static * Enable many more gcc warnings for libselinux/src/ builds * utils: Enable many more gcc warnings for libselinux/utils builds * Change annotation on include/selinux/avc.h to avoid upsetting SWIG * Ensure there is a prototype for 'matchpathcon_lib_destructor' * Update Makefiles to handle /usrmove * utils: Stop separating out matchpathcon as something special * pkg-config to figure out where ruby include files are located * build with either ruby 1.9 or ruby 1.8 * assert if avc_init() not called * take security_deny_unknown into account * security_compute_create_name(3) * Do not link against python library, this is considered * bad practice in debian * Hide unnecessarily-exported library destructors- Add selinux_current_policy_path to return /sys/fs/selinux/policy if it exists - Otherwise search for policy on disk- Change selinux_binary_policy_path to return /sys/fs/selinux/policy - Add selinux_installed_policy_path to return what selinux_binary_policy_path used to return - avc_has_perm will now return yes if the machine is in permissive mode - Make work with ruby-1.9- avc_netlink_recieve should continue to poll if it receinves an EINTR rather- use /sbin/ldconfig, glibc does not provide /usr/sbin/ldconfig in the RPM database for now- Rebuild with cleaned up upstream to work in /usr- install everything in /usr https://fedoraproject.org/wiki/Features/UsrMove- Add Dan Berrange code cleanup patches.- Fix selabal_open man page to refer to proper selinux_opt structure-Update to upstream * Fix setenforce man page to refer to selinux man page * Cleanup Man pages * merge freecon with getcon man page- Add patch from Richard Haines When selabel_lookup found an invalid context with validation enabled, it always stated it was 'file_contexts' whether media, x, db or file. The fix is to store the spec file name in the selabel_lookup_rec on selabel_open and use this as output for logs. Also a minor fix if key is NULL to stop seg faults. - Fix setenforce manage page.- Rebuild with new libsepol- Fix setenforce man page, from Miroslav Grepl- Upgrade to upstream * selinuxswig_python.i: don't make syscall if it won't change anything * Remove assert in security_get_boolean_names(3) * Mapped compute functions now obey deny_unknown flag * get_default_type now sets EINVAL if no entry. * return EINVAL if invalid role selected * Updated selabel_file(5) man page * Updated selabel_db(5) man page * Updated selabel_media(5) man page * Updated selabel_x(5) man page * Add man/man5 man pages * Add man/man5 man pages * Add man/man5 man pages * use -W and -Werror in utils- Change python binding for restorecon to check if the context matches. - If it does do not reset- Upgrade to upstream * Makefiles: syntax, convert all ${VAR} to $(VAR) * load_policy: handle selinux=0 and /sys/fs/selinux not exist * regenerate .pc on VERSION change * label: cosmetic cleanups * simple interface for access checks * Don't reinitialize avc_init if it has been called previously * seusers: fix to handle large sets of groups * audit2why: close fd on enomem * rename and export symlink_realpath * label_file: style changes to make Eric happy.- Apply libselinux patch to handle large groups in seusers.- Add selinux_check_access function. Needed for passwd, chfn, chsh- Handle situation where selinux=0 passed to the kernel and both /selinux and-Update to upstream * utils: matchpathcon: remove duplicate declaration * src: matchpathcon: use myprintf not fprintf * src: matchpathcon: make sure resolved path starts * put libselinux.so.1 in /lib not /usr/lib * tree: default make target to all not- Switch to use ":" as prefix separator rather then ";"- Avoid unnecessary shell invocation in %post.- Fix handling of subset labeling that is causing segfault in restorecon- Change matchpathcon_init_prefix and selabel_open to allow multiple initial prefixes. Now you can specify a ";" separated list of prefixes and the labeling system will only load regular expressions that match these prefixes.- Change matchpatcon to use proper myprintf - Fix symlink_realpath to always include "/" - Update to upstream * selinux_file_context_verify function returns wrong value. * move realpath helper to matchpathcon library * python wrapper makefile changes- Move to new Makefile that can build with or without PYTHON being set-Update to upstream 2.1.4 2011-0817 * mapping fix for invalid class/perms after selinux_set_mapping * audit2why: work around python bug not defining * resolv symlinks and dot directories before matching 2.1.2 2011-0803 * audit2allow: do not print statistics * make python bindings for restorecon work on relative path * fix python audit2why binding error * support new python3 functions * do not check fcontext duplicates on use * Patch for python3 for libselinux 2.1.1 2011-08-02 * move .gitignore into utils * new setexecon utility * selabel_open fix processing of substitution files * mountpoint changing patch. * simplify SRCS in Makefile 2.1.1 2011-08-01 * Remove generated files, introduce more .gitignore-Update to upstream * Release, minor version bump * Give correct names to mount points in load_policy by Dan Walsh. * Make sure selinux state is reported correctly if selinux is disabled or fails to load by Dan Walsh. * Fix crash if selinux_key_create was never called by Dan Walsh. * Add new file_context.subs_dist for distro specific filecon substitutions by Dan Walsh. * Update man pages for selinux_color_* functions by Richard Haines.- Only call dups check within selabel/matchpathcon if you are validating the context - This seems to speed the loading of labels by 4 times.- Move /selinux to /sys/fs/selinux - Add selinuxexeccon - Add realpath to matchpathcon to handle matchpathcon * type queries.- Update for latest libsepol- Update for latest libsepol- Fix restorecon python binding to accept relative paths-Update to upstream * Give correct names to mount points in load_policy by Dan Walsh. * Make sure selinux state is reported correctly if selinux is disabled or fails to load by Dan Walsh. * Fix crash if selinux_key_create was never called by Dan Walsh. * Add new file_context.subs_dist for distro specific filecon substitutions by Dan Walsh. * Update man pages for selinux_color_* functions by Richard Haines.- Clean up patch to make handling of constructor cleanup more portable * db_language object class support for selabel_lookup from KaiGai Kohei. * Library destructors for thread local storage keys from Eamon Walsh.- Add distribution subs pathAdd patch from dbhole@redhat.com to initialize thread keys to -1 Errors were being seen in libpthread/libdl that were related to corrupt thread specific keys. Global destructors that are called on dl unload. During destruction delete a thread specific key without checking if it has been initialized. Since the constructor is not called each time (i.e. key is not initialized with pthread_key_create each time), and the default is 0, there is a possibility that key 0 for an active thread gets deleted. This is exactly what is happening in case of OpenJDK. Workaround patch that initializes the key to -1. Thus if the constructor is not called, the destructor tries to delete key -1 which is deemed invalid by pthread_key_delete, and is ignored.- Call fini_selinuxmnt if selinux is disabled, to cause is_selinux_disabled() to report correct data- Change mount source options to use "proc" and "selinuxfs"- Update to upstream * Turn off default user handling when computing user contexts by Dan Walsh- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- Fixup selinux man page- Fix Makefile to use pkg-config --cflags python3 to discover include paths- Update to upstream - Turn off fallback in to SELINUX_DEFAULTUSER in get_context_list- Update to upstream * Thread local storage fixes from Eamon Walsh.- Add /etc/tmpfiles.d support for /var/run/setrans- Ghost /var/run/setrans- Rebuilt for gcc bug 634757- rebuild via updated swig (#624674)- Update for python 3.2a1- Turn off fallback in to SELINUX_DEFAULTUSER in get_context_list- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild- Turn off messages in audit2why- Update to upstream * Add const qualifiers to public API where appropriate by KaiGai Kohei. 2.0.95 2010-06-10 * Remove duplicate slashes in paths in selabel_lookup from Chad Sellers * Adds a chcon method to the libselinux python bindings from Steve Lawrence - add python3 subpackage from David Malcolm* Set errno=EINVAL for invalid contexts from Dan Walsh.- Update to upstream * Show strerror for security_getenforce() by Colin Waters. * Merged selabel database support by KaiGai Kohei. * Modify netlink socket blocking code by KaiGai Kohei.- Update to upstream * Fix from Eric Paris to fix leak on non-selinux systems. * regenerate swig wrappers * pkgconfig fix to respect LIBDIR from Dan Walsh.- Update to upstream * Change the AVC to only audit the permissions specified by the policy, excluding any permissions specified via dontaudit or not specified via auditallow. * Fix compilation of label_file.c with latest glibc headers.- Fix potential doublefree on init- Fix libselinux.pc- Fix man page for selinuxdefcon- Free memory on disabled selinux boxes- Update to upstream * add/reformat man pages by Guido Trentalancia . * Change exception.sh to be called with bash by Manoj Srivastava - Fix selinuxdefcon man page- Update to upstream * Add pkgconfig file from Eamon Walsh.- Update to upstream * Rename and export selinux_reset_config()- Update to upstream * Add exception handling in libselinux from Dan Walsh. This uses a shell script called exception.sh to generate a swig interface file. * make swigify * Make matchpathcon print <> if path not found in fcontext file.- Eliminate -pthread switch in Makefile- Update to upstream * Removal of reference counting on userspace AVC SID's.- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- Update to upstream * Reverted Tomas Mraz's fix for freeing thread local storage to avoid pthread dependency. * Removed fini_context_translations() altogether. * Merged lazy init patch from Stephen Smalley based on original patch by Steve Grubb.- Update to upstream * Add per-service seuser support from Dan Walsh. * Let load_policy gracefully handle selinuxfs being mounted from Stephen Smalley. * Check /proc/filesystems before /proc/mounts for selinuxfs from Eric Paris.- Add provices ruby(selinux)- Update to upstream * Fix improper use of thread local storage from Tomas Mraz . * Label substitution support from Dan Walsh. * Support for labeling virtual machine images from Dan Walsh.- Update to upstream * Trim / from the end of input paths to matchpathcon from Dan Walsh. * Fix leak in process_line in label_file.c from Hiroshi Shinji. * Move matchpathcon to /sbin, add matchpathcon to clean target from Dan Walsh. * getdefaultcon to print just the correct match and add verbose option from Dan Walsh.- Update to upstream * deny_unknown wrapper function from KaiGai Kohei. * security_compute_av_flags API from KaiGai Kohei. * Netlink socket management and callbacks from KaiGai Kohei.- Fix Memory Leak- Fix crash in python- Add back in additional interfaces- Add back in av_decision to python swig- Update to upstream * Netlink socket handoff patch from Adam Jackson. * AVC caching of compute_create results by Eric Paris.- Add patch from ajax to accellerate X SELinux - Update eparis patch- Add eparis patch to accellerate Xwindows performance- Fix URL- Add substitute pattern - matchpathcon output <> on ENOENT- Update to upstream * Fix incorrect conversion in discover_class code.- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild- Add - selinux_virtual_domain_context_path - selinux_virtual_image_context_path- Throw exeptions in python swig bindings on failures- Fix restorecon python code- Update to upstream- Strip trailing / for matchpathcon- Fix segfault if seusers file does not work- Add new function getseuser which will take username and service and return - seuser and level. ipa will populate file in future. - Change selinuxdefcon to return just the context by default- Rebuild for Python 2.6- Update to Upstream * Allow shell-style wildcards in x_contexts file.- Eamon Walsh Patch - libselinux: allow shell-style wildcarding in X names - Add Restorecon/Install python functions from Luke Macken- Update to Upstream * Correct message types in AVC log messages. * Make matchpathcon -V pass mode from Dan Walsh. * Add man page for selinux_file_context_cmp from Dan Walsh.- Update to Upstream * New man pages from Dan Walsh. * Update flask headers from refpolicy trunk from Dan Walsh.- Fix matchpathcon -V call- Add flask definitions for open, X and nlmsg_tty_audit- Add missing get/setkeycreatecon man pages- Split out utilities- Add missing man page links for [lf]getfilecon- Update to Upstream * Add group support to seusers using %groupname syntax from Dan Walsh. * Mark setrans socket close-on-exec from Stephen Smalley. * Only apply nodups checking to base file contexts from Stephen Smalley.- Update to Upstream * Merge ruby bindings from Dan Walsh. - Add support for Linux groups to getseuserbyname- Allow group handling in getseuser call- Update to Upstream * Handle duplicate file context regexes as a fatal error from Stephen Smalley. This prevents adding them via semanage. * Fix audit2why shadowed variables from Stephen Smalley. * Note that freecon NULL is legal in man page from Karel Zak.- Add ruby support for puppet- Rebuild for new libsepol- Add Karel Zak patch for freecon man page- Update to Upstream * New and revised AVC, label, and mapping man pages from Eamon Walsh. * Add swig python bindings for avc interfaces from Dan Walsh.- Update to Upstream * Fix selinux_file_context_verify() and selinux_lsetfilecon_default() to call matchpathcon_init_prefix if not already initialized. * Add -q qualifier for -V option of matchpathcon and change it to indicate whether verification succeeded or failed via exit status.- libselinux no longer neets to telnet -u in post install- Add sedefaultcon and setconlist commands to dump login context- Update to Upstream * Fixed selinux_set_callback man page. * Try loading the max of the kernel-supported version and the libsepol-supported version when no manipulation of the binary policy is needed from Stephen Smalley. * Fix memory leaks in matchpathcon from Eamon Walsh.- Add Xavior Toth patch for security_id_t in swig- Add avc.h to swig code- Grab the latest policy for the kernel- Update to Upstream * Man page typo fix from Jim Meyering.- Update to Upstream * Changed selinux_init_load_policy() to not warn about a failed mount of selinuxfs if selinux was disabled in the kernel.- Fix matchpathcon memory leak- Update to Upstream * Merged new X label "poly_selection" namespace from Eamon Walsh.- Update to Upstream * Merged reset_selinux_config() for load policy from Dan Walsh.- Reload library on loading of policy to handle chroot- Update to Upstream * Merged avc_has_perm() errno fix from Eamon Walsh.- Update to Upstream * Regenerated Flask headers from refpolicy flask definitions.- Update to Upstream * Merged compute_member AVC function and manpages from Eamon Walsh. * Provide more error reporting on load policy failures from Stephen Smalley.- Update to Upstream * Merged new X label "poly_prop" namespace from Eamon Walsh.- Update to Upstream * Disable setlocaldefs if no local boolean or users files are present from Stephen Smalley. * Skip userspace preservebools processing for Linux >= 2.6.22 from Stephen Smalley.- Update to Upstream * Merged fix for audit2why from Dan Walsh.- Fix audit2why to grab latest policy versus the one selected by the kernel* Merged audit2why python binding from Dan Walsh.* Merged updated swig bindings from Dan Walsh, including typemap for pid_t.- Update to use libsepol-static library- Move libselinux.a to -static package - Spec cleanups- Put back libselinux.a- Fix memory references in audit2why and change to use tuples - Update to Upstream * Fix for the avc: granted null message bug from Stephen Smalley.- Fix __init__.py specification- Add audit2why python bindings- Add pid_t typemap for swig bindings- smp_mflag- Fix spec file caused by spec review- Upgrade to upstream * matchpathcon(8) man page update from Dan Walsh.- Upgrade to upstream * dlopen libsepol.so.1 rather than libsepol.so from Stephen Smalley. * Based on a suggestion from Ulrich Drepper, defer regex compilation until we have a stem match, by Stephen Smalley. * A further optimization would be to defer regex compilation until we have a complete match of the constant prefix of the regex - TBD.- Upgrade to upstream * Regenerated Flask headers from policy.- Upgrade to upstream * AVC enforcing mode override patch from Eamon Walsh. * Aligned attributes in AVC netlink code from Eamon Walsh. - Move libselinux.so back into devel package, procps has been fixed- Upgrade to upstream * Merged refactored AVC netlink code from Eamon Walsh. * Merged new X label namespaces from Eamon Walsh. * Bux fix and minor refactoring in string representation code.- Upgrade to upstream * Merged selinux_get_callback, avc_open, empty string mapping from Eamon Walsh.- Upgrade to upstream * Fix segfault resulting from missing file_contexts file.- Fix segfault on missing file_context file- Upgrade to upstream * Make netlink socket close-on-exec to avoid descriptor leakage from Dan Walsh. * Pass CFLAGS when using gcc for linking from Dennis Gilmore.- Add sparc patch to from Dennis Gilmore to build on Sparc platform- Remove leaked file descriptor- Upgrade to latest from NSA * Fix selabel option flag setting for 64-bit from Stephen Smalley.- Change matchpatcon to use syslog instead of syserror- Upgrade to latest from NSA * Re-map a getxattr return value of 0 to a getfilecon return value of -1 with errno EOPNOTSUPP from Stephen Smalley. * Fall back to the compat code for security_class_to_string and security_av_perm_to_string from Stephen Smalley. * Fix swig binding for rpm_execcon from James Athey.- Apply James Athway patch to fix rpm_execcon python binding- Move libselinux.so back into main package, breaks procps- Upgrade to upstream * Fix file_contexts.homedirs path from Todd Miller.- Remove requirement on setransd, Moved to selinux-policy-mls- Move libselinux.so into devel package - Upgrade to upstream * Fix segfault resulting from uninitialized print-callback pointer. * Added x_contexts path function patch from Eamon Walsh. * Fix build for EMBEDDED=y from Yuichi Nakamura. * Fix markup problems in selinux man pages from Dan Walsh.- Upgrade to upstream * Updated version for stable branch. * Added x_contexts path function patch from Eamon Walsh. * Fix build for EMBEDDED=y from Yuichi Nakamura. * Fix markup problems in selinux man pages from Dan Walsh. * Updated av_permissions.h and flask.h to include new nscd permissions from Dan Walsh. * Added swigify to top-level Makefile from Dan Walsh. * Fix for string_to_security_class segfault on x86_64 from Stephen Smalley.- Apply Steven Smalley patch to fix segfault in string_to_security_class- Fix matchpathcon to set default myprintf- Upgrade to upstream * Fix for getfilecon() for zero-length contexts from Stephen Smalley.- Update to match flask/access_vectors in policy- Fix man page markup lanquage for translations- Fix semanage segfault on x86 platform- Upgrade to upstream * Labeling and callback interface patches from Eamon Walsh.- Refactored swig- Upgrade to upstream * Class and permission mapping support patches from Eamon Walsh. * Object class discovery support patches from Chris PeBenito. * Refactoring and errno support in string representation code.- Upgrade to upstream - Merged patch to reduce size of libselinux and remove need for libsepol for embedded systems from Yuichi Nakamura. This patch also turns the link-time dependency on libsepol into a runtime (dlopen) dependency even in the non-embedded case. 2.0.17 2007-05-31 * Updated Lindent script and reindented two header files.- Upgrade to upstream * Merged additional swig python bindings from Dan Walsh. * Merged helpful message when selinuxfs mount fails patch from Dax Kelson.- Upgrade to upstream * Merged build fix for avc_internal.c from Joshua Brindle.- Add get_context_list funcitions to swig file- Upgrade to upstream * Merged rpm_execcon python binding fix, matchpathcon man page fix, and getsebool -a handling for EACCES from Dan Walsh.- Add missing interface- Upgrade to upstream * Merged support for getting initial contexts from James Carter.- Upgrade to upstream * Merged userspace AVC patch to follow kernel's behavior for permissive mode in caching previous denials from Eamon Walsh. * Merged sidput(NULL) patch from Eamon Walsh.- Make rpm_exec swig work- Upgrade to upstream * Merged class/av string conversion and avc_compute_create patch from Eamon Walsh.- Upgrade to upstream * Merged fix for avc.h #include's from Eamon Walsh.- Add stdint.h to avc.h- Merged patch to drop support for CACHETRANS=0 config option from Steve Grubb. - Merged patch to drop support for old /etc/sysconfig/selinux and - /etc/security policy file layout from Steve Grubb.- Do not fail on permission denied in getsebool- Upgrade to upstream * Merged init_selinuxmnt() and is_selinux_enabled() improvements from Steve Grubb.- Upgrade to upstream * Removed sending of setrans init message. * Merged matchpathcon memory leak fix from Steve Grubb.- Upgrade to upstream * Merged more swig initializers from Dan Walsh.- Upgrade to upstream * Merged patch from Todd Miller to convert int types over to C99 style.- Merged patch from Todd Miller to remove sscanf in matchpathcon.c because of the use of the non-standard format (original patch changed for style). - Merged patch from Todd Miller to fix memory leak in matchpathcon.c.- Add context function to python to split context into 4 parts- Upgrade to upstream * Updated version for stable branch.- Upgrade to upstream * Merged man page updates to make "apropos selinux" work from Dan Walsh.- Upgrade to upstream * Merged getdefaultcon utility from Dan Walsh.- Add Ulrich NSCD__GETSERV and NSCD__SHMEMGRP for Uli- Add reference to selinux man page in all man pages to make apropos work Resolves: # 217881- Upstream wanted some minor changes, upgrading to keep api the same - Upgrade to upstream * Merged selinux_check_securetty_context() and support from Dan Walsh. Resolves: #200110- Cleanup patch- Add securetty handling Resolves: #200110- Upgrade to upstream * Merged patch for matchpathcon utility to use file mode information when available from Dan Walsh.- rebuild against python 2.5- Fix matchpathcon to lstat files- Update man page- Upgrade to upstream- Add James Antill patch for login verification of MLS Levels - MLS ragnes need to be checked, Eg. login/cron. This patch adds infrastructure.- Upgrade to latest from NSA * Merged updated flask definitions from Darrel Goeddel. This adds the context security class, and also adds the string definitions for setsockcreate and polmatch.- Upgrade to latest from NSA * Updated version for release.- rebuilt for unwind info generation, broken in gcc-4.1.1-21- Upgrade to latest from NSA * Merged av_permissions.h update from Steve Grubb, adding setsockcreate and polmatch definitions.- really make -devel depend on libsepol-devel- Add sgrubb patch for polmatch- Upgrade to latest from NSA * Merged patch from Steve Smalley to fix SIGPIPE in setrans_client- have -devel require libsepol-devel- Upgrade to latest from NSA * Merged patch to not log avc stats upon a reset from Steve Grubb. * Applied patch to revert compat_net setting upon policy load. * Merged file context homedir and local path functions from Chris PeBenito.- rebuilt with latest binutils to pick up 64K -z commonpagesize on ppc* (#203001)- Upgrade to latest from NSA * Merged file context homedir and local path functions from Chris PeBenito. * Rework functions that access /proc/pid/attr to access the per-thread nodes, and unify the code to simplify maintenance.- Upgrade to latest from NSA * Merged return value fix for *getfilecon() from Dan Walsh. * Merged sockcreate interfaces from Eric Paris.- Fix translation return codes to return size of buffer- Upgrade to latest from NSA * Merged no-tls-direct-seg-refs patch from Jeremy Katz. * Merged netfilter_contexts support patch from Chris PeBenito.- Upgrade to latest from NSA * Merged context_*_set errno patch from Jim Meyering.- only build non-fpic objects with -mno-tls-direct-seg-refs- build with -mno-tls-direct-seg-refs on x86 to avoid triggering segfaults with xen (#200783)- Rebuild for new gcc- Fix libselinux to not telinit during installs- Upgrade to latest from NSA * Lindent. * Merged {get,set}procattrcon patch set from Eric Paris. * Merged re-base of keycreate patch originally by Michael LeMay from Eric Paris. * Regenerated Flask headers from refpolicy. * Merged patch from Dan Walsh with: - Added selinux_file_context_{cmp,verify}. - Added selinux_lsetfilecon_default. - Delay translation of contexts in matchpathcon.- Yet another change to matchpathcon- Turn off error printing in library. Need to compile with DEBUG to get it back- Fix error reporting of matchpathcon- Add function to compare file context on disk versus contexts in file_contexts file.- Upgrade to latest from NSA * Merged patch from Dan Walsh with: * Added selinux_getpolicytype() function. * Modified setrans code to skip processing if !mls_enabled. * Set errno in the !selinux_mnt case. * Allocate large buffers from the heap, not on stack. Affects is_context_customizable, selinux_init_load_policy, and selinux_getenforcemode.- Add selinux_getpolicytype()- Upgrade to latest from NSA * Merged !selinux_mnt checks from Ian Kent.- Check for selinux_mnt == NULL- Merged matchmediacon and trans_to_raw_context fixes from Serge Hallyn.- Remove getseuser- Bump requires to grab latest libsepol- Add BuildRequires for swig- Upgrade to latest from NSA * Merged simple setrans client cache from Dan Walsh. Merged avcstat patch from Russell Coker. * Modified selinux_mkload_policy() to also set /selinux/compat_net appropriately for the loaded policy.- More fixes for translation cache - Upgrade to latest from NSA * Added matchpathcon_fini() function to free memory allocated by matchpathcon_init().- Add simple cache to improve translation speed- Upgrade to latest from NSA * Merged setrans client cleanup patch from Steve Grubb.- Add Russell's AVC patch to handle large numbers- Upgrade to latest from NSA * Merged getfscreatecon man page fix from Dan Walsh. * Updated booleans(8) man page to drop references to the old booleans file and to note that setsebool can be used to set the boot-time defaults via -P.- Upgrade to latest from NSA * Merged fix warnings patch from Karl MacMillan. * Merged setrans client support from Dan Walsh. This removes use of libsetrans. * Merged patch to eliminate use of PAGE_SIZE constant from Dan Walsh. * Merged swig typemap fixes from Glauber de Oliveira Costa.- Change the way translations work, Use setransd/remove libsetrans- Add selinuxswig fixes - Stop using PAGE_SIZE and start using sysconf(_SC_PAGE_SIZE)- Upgrade to latest from NSA * Added distclean target to Makefile. * Regenerated swig files. * Changed matchpathcon_init to verify that the spec file is a regular file. * Merged python binding t_output_helper removal patch from Dan Walsh.- Fix python bindings for matchpathcon - Fix booleans man page- Merged Makefile PYLIBVER definition patch from Dan Walsh.- Make some fixes so it will build on RHEL4 - Upgrade to latest from NSA * Updated version for release. * Altered rpm_execcon fallback logic for permissive mode to also handle case where /selinux/enforce is not available.- bump again for double-long bug on ppc(64)- rebuilt for new gcc4.1 snapshot and glibc changes- Upgrade to latest from NSA * Merged install-pywrap Makefile patch from Joshua Brindle.- Upgrade to latest from NSA * Merged pywrap Makefile patch from Dan Walsh.- Split out pywrap in Makefile- Upgrade to latest from NSA * Added getseuser test program.- Upgrade to latest from NSA * Added format attribute to myprintf in matchpathcon.c and removed obsoleted rootlen variable in init_selinux_config().- Build with new libsepol- Upgrade to latest from NSA * Merged several fixes and improvements from Ulrich Drepper (Red Hat), including: - corrected use of getline - further calls to __fsetlocking for local files - use of strdupa and asprintf - proper handling of dirent in booleans code - use of -z relro - several other optimizations * Merged getpidcon python wrapper from Dan Walsh (Red Hat).- Add build requires line for libsepol-devel- Fix swig call for getpidcon- Move libselinux.so to base package- Upgrade to latest from NSA * Merged call to finish_context_translations from Dan Walsh. This eliminates a memory leak from failing to release memory allocated by libsetrans.- update to latest libsetrans - Fix potential memory leak- rebuilt- Update to never version * Merged patch for swig interfaces from Dan Walsh.- Update to never version- Fix some of the python swig objects- Update to latest from NSA * Added MATCHPATHCON_VALIDATE flag for set_matchpathcon_flags() and modified matchpathcon implementation to make context validation/ canonicalization optional at matchpathcon_init time, deferring it to a successful matchpathcon by default unless the new flag is set by the caller. * Added matchpathcon_init_prefix() interface, and reworked matchpathcon implementation to support selective loading of file contexts entries based on prefix matching between the pathname regex stems and the specified path prefix (stem must be a prefix of the specified path prefix).- Update to latest from NSA * Change getsebool to return on/off instead of active/inactive- Update to latest from NSA * Added -f file_contexts option to matchpathcon util. Fixed warning message in matchpathcon_init(). * Merged Makefile python definitions patch from Dan Walsh.- Update to latest from NSA * Merged swigify patch from Dan Walsh.- Separate out libselinux-python bindings into separate rpm- Read libsetrans requirement- Add python bindings- Update to latest from NSA * Merged make failure in rpm_execcon non-fatal in permissive mode patch from Ivan Gyurdiev.- Remove requirement for libsetrans- Update to latest from NSA * Added MATCHPATHCON_NOTRANS flag for set_matchpathcon_flags() and modified matchpathcon_init() to skip context translation if it is set by the caller.- Update to latest from NSA * Added security_canonicalize_context() interface and set_matchpathcon_canoncon() interface for obtaining canonical contexts. Changed matchpathcon internals to obtain canonical contexts by default. Provided fallback for kernels that lack extended selinuxfs context interface. - Patch to not translate mls when calling setfiles- Update to latest from NSA * Merged seusers parser changes from Ivan Gyurdiev. * Merged setsebool to libsemanage patch from Ivan Gyurdiev. * Changed seusers parser to reject empty fields.- Update to latest from NSA * Merged seusers empty level handling patch from Jonathan Kim (TCS).- Rebuild for latest libsepol- Rebuild for latest libsepol- Change default to __default__- Change default to __default__- Add selinux_translations_path- Update to latest from NSA * Merged selinux_path() and selinux_homedir_context_path() functions from Joshua Brindle.- Need to check for /sbin/telinit- Update to latest from NSA * Merged fixes for make DESTDIR= builds from Joshua Brindle.- Update to latest from NSA * Merged get_default_context_with_rolelevel and man pages from Dan Walsh (Red Hat). * Updated call to sepol_policydb_to_image for sepol changes. * Changed getseuserbyname to ignore empty lines and to handle no matching entry in the same manner as no seusers file.- Tell init to reexec itself in post script- Update to latest from NSA * Changed selinux_mkload_policy to try downgrading the latest policy version available to the kernel-supported version. * Changed selinux_mkload_policy to fall back to the maximum policy version supported by libsepol if the kernel policy version falls outside of the supported range.- Update to latest from NSA * Changed getseuserbyname to fall back to the Linux username and NULL level if seusers config file doesn't exist unless REQUIRESEUSERS=1 is set in /etc/selinux/config. * Moved seusers.conf under $SELINUXTYPE and renamed to seusers.- Update to latest from NSA * Added selinux_init_load_policy() function as an even higher level interface for the initial policy load by /sbin/init. This obsoletes the load_policy() function in the sysvinit-selinux.patch. * Added selinux_mkload_policy() function as a higher level interface for loading policy than the security_load_policy() interface.- Update to latest from NSA * Merged fix for matchpathcon (regcomp error checking) from Johan Fischer. Also added use of regerror to obtain the error string for inclusion in the error message.- Update to latest from NSA * Changed getseuserbyname to not require (and ignore if present) the MLS level in seusers.conf if MLS is disabled, setting *level to NULL in this case.- Update to latest from NSA * Merged getseuserbyname patch from Dan Walsh.- Fix patch to satisfy upstream- Update to latest from NSA - Add getseuserbyname- Fix patch call- Fix strip_con call- Go back to original libsetrans code- Eliminate forth param from mls context when mls is not enabled.- Update from NSA * Merged modified form of patch to avoid dlopen/dlclose by the static libselinux from Dan Walsh. Users of the static libselinux will not have any context translation by default.- Update from NSA * Added public functions to export context translation to users of libselinux (selinux_trans_to_raw_context, selinux_raw_to_trans_context).- Update from NSA * Remove special definition for context_range_set; use common code.- Update from NSA * Hid translation-related symbols entirely and ensured that raw functions have hidden definitions for internal use. * Allowed setting NULL via context_set* functions. * Allowed whitespace in MLS component of context. * Changed rpm_execcon to use translated functions to workaround lack of MLS level on upgraded systems.- Allow set_comp on unset ranges- Merged context translation patch, originally by TCS, with modifications by Dan Walsh (Red Hat).- Apply translation patch- Update from NSA * Merged several fixes for error handling paths in the AVC sidtab, matchpathcon, booleans, context, and get_context_list code from Serge Hallyn (IBM). Bugs found by Coverity. * Removed setupns; migrated to pam. * Merged patches to rename checkPasswdAccess() from Joshua Brindle. Original symbol is temporarily retained for compatibility until all callers are updated.- Update makefiles- Update from NSA * Merged security_setupns() from Chad Sellers. - fix selinuxenabled man page- Update from NSA * Merged avcstat and selinux man page from Dan Walsh. * Changed security_load_booleans to process booleans.local even if booleans file doesn't exist.- Fix avcstat to clear totals- Add info to man page- Update from NSA * Merged set_selinuxmnt patch from Bill Nottingham (Red Hat). * Rewrote get_ordered_context_list and helpers, including changing logic to allow variable MLS fields.- Update from NSA- Add backin matchpathcon- Fix selinux_policy_root man page- Change assert(selinux_mnt) to if (!selinux_mnt) return -1;- Update from NSA * Fixed bug in matchpathcon_filespec_destroy.- Update from NSA * Fixed bug in rpm_execcon error handling path.- Update from NSA * Merged fix for set_matchpathcon* functions from Andreas Steinmetz. * Merged fix for getconlist utility from Andreas Steinmetz.- Update from NSA- Better handling of booleans- Update from NSA * Merged destructors patch from Tomas Mraz.- Update from NSA * Added set_matchpathcon_flags() function for setting flags controlling operation of matchpathcon. MATCHPATHCON_BASEONLY means only process the base file_contexts file, not file_contexts.homedirs or file_contexts.local, and is for use by setfiles -c. * Updated matchpathcon.3 man page.- Update from NSA- Update from NSA * Fixed bug in matchpathcon_filespec_add() - failure to clear fl_head.- Update from NSA * Changed matchpathcon_common to ignore any non-format bits in the mode.- Default matchpathcon to regular files if the user specifies a mode- Update from NSA * Merged several fixes from Ulrich Drepper.- Fix matchpathcon on eof.- Update from NSA * Merged matchpathcon patch for file_contexts.homedir from Dan Walsh. * Added selinux_users_path() for path to directory containing system.users and local.users.- Process file_context.homedir- Update from NSA * Changed relabel Makefile target to use restorecon.- Update from NSA * Regenerated av_permissions.h.- Update from NSA * Modified avc_dump_av to explicitly check for any permissions that cannot be mapped to string names and display them as a hex value. * Regenerated av_permissions.h.- Update from NSA * Generalized matchpathcon internals, exported more interfaces, and moved additional code from setfiles into libselinux so that setfiles can directly use matchpathcon.- Update from NSA * Prevent overflow of spec array in matchpathcon. * Fixed several uses of internal functions to avoid relocations. * Changed rpm_execcon to check is_selinux_enabled() and fallback to a regular execve if not enabled (or unable to determine due to a lack of /proc, e.g. chroot'd environment).- Update from NSA * Merged minor fix for avcstat from Dan Walsh.- rpmexeccon should not fail in permissive mode.- fix printf in avcstat- Update from NSA- Modify matchpathcon to also process file_contexts.local if it exists- Add is_customizable_types function call- Update to latest from upstream * Just changing version number to match upstream- Update to latest from upstream * Changed matchpathcon to return -1 with errno ENOENT for <> entries, and also for an empty file_contexts configuration.- Fix link devel libraries- Fix unitialized variable in avcstat.c- Upgrade to upstream * Removed some trivial utils that were not useful or redundant. * Changed BINDIR default to /usr/sbin to match change in Fedora. * Added security_compute_member. * Added man page for setcon.- Upgrade to upstream- Add avcstat program- Add lots of missing man pages- Fix output of getsebool.- Update from upstream, fix setsebool -P segfault- Add a patch from upstream. Fixes signed/unsigned issues, and incomplete structure copy.- More fixes from sgrubb, better syslog- Have setsebool and togglesebool log changes to syslog- Add patch to make setsebool update bool on disk - Make togglesebool have a rollback capability in case it blows up inflight- Upgrade to latest from NSA- Changed the location of the utilities to /usr/sbin since normal users can't use them anyways.- Updated various utilities, removed utilities that are for testing, added man pages.- Add -g flag to make - Upgrade to latest from NSA * Added rpm_execcon.- Upgrade to latest from NSA * Merged setenforce and removable context patch from Dan Walsh. * Merged build fix for alpha from Ulrich Drepper. * Removed copyright/license from selinux_netlink.h - definitions only.- Change setenforce to accept Enforcing and Permissive- Add alpha patch- Upgrade to latest from NSA- Add selinux_removable_context_path- Update from NSA * Add matchmediacon- Update from NSA * Merged in matchmediacon changes.- Update from NSA * Regenerated headers for new nscd permissions.- Add matchmediacon- Update from NSA * Added get_default_context_with_role.- Clean up spec file * Patch from Matthias Saou- Update from NSA * Added set_matchpathcon_printf.- Update from NSA * Reworked av_inherit.h to allow easier re-use by kernel.- Add strcasecmp in selinux_config - Update from NSA * Changed avc_has_perm_noaudit to not fail on netlink errors. * Changed avc netlink code to check pid based on patch by Steve Grubb. * Merged second optimization patch from Ulrich Drepper. * Changed matchpathcon to skip invalid file_contexts entries. * Made string tables private to libselinux. * Merged strcat->stpcpy patch from Ulrich Drepper. * Merged matchpathcon man page from Dan Walsh. * Merged patch to eliminate PLTs for local syms from Ulrich Drepper. * Autobind netlink socket. * Dropped compatibility code from security_compute_user. * Merged fix for context_range_set from Chad Hanson. * Merged allocation failure checking patch from Chad Hanson. * Merged avc netlink error message patch from Colin Walters.- Update from NSA * Merged second optimization patch from Ulrich Drepper. * Changed matchpathcon to skip invalid file_contexts entries. * Made string tables private to libselinux. * Merged strcat->stpcpy patch from Ulrich Drepper. * Merged matchpathcon man page from Dan Walsh. * Merged patch to eliminate PLTs for local syms from Ulrich Drepper. * Autobind netlink socket. * Dropped compatibility code from security_compute_user. * Merged fix for context_range_set from Chad Hanson. * Merged allocation failure checking patch from Chad Hanson. * Merged avc netlink error message patch from Colin Walters.- Update from NSA - Add optflags- Update from NSA- Add matchpathcon man page - Latest from NSA * Merged patch to eliminate PLTs for local syms from Ulrich Drepper. * Autobind netlink socket. * Dropped compatibility code from security_compute_user. * Merged fix for context_range_set from Chad Hanson. * Merged allocation failure checking patch from Chad Hanson. * Merged avc netlink error message patch from Colin Walters.- Latest from NSA * Autobind netlink socket. * Dropped compatibility code from security_compute_user. * Merged fix for context_range_set from Chad Hanson. * Merged allocation failure checking patch from Chad Hanson. * Merged avc netlink error message patch from Colin Walters.- Latest from NSA- New upstream version- Latest from Upstream- Fix man pages- Latest from Upstream- Latest from Upstream- Add man page for boolean functions and SELinux- Latest from NSA- Latest from NSA- uppercase getenforce returns, to make them match system-config-securitylevel- Remove old path patch- Update to latest from NSA - Add fix to only get old path if file_context file exists in old location- Update to latest from NSA- add nlclass patch - Update to latest from NSA- rebuilt- Fix selinux_config to break once it finds SELINUXTYPE.-Update with latest from NSA- Change to use new policy mechanism- add man patch- Update with latest from NSA- Update with latest from NSA- Add changes for relaxed policy - Update to match NSA- Add relaxed policy changes- Sync with NSA- Remove requires glibc>2.3.4- Fix selinuxenabled man page.- Upgrade to 1.11- Add memleaks patch- Upgrade to latest from NSA and add more man pages- Update to match NSA - Cleanup some man pages- Upgrade to latest from NSA- Add Russell's Man pages- Change getenforce to also check is_selinux_enabled- Add ownership to /usr/include/selinux- fix location of file_contexts file.- Fix matchpathcon to use BUFSIZ- rebuilt- add matchpathcon- rebuilt- Add rootok patch- Updated getpeernam patch- Add getpeernam patch- Add getpeercon patch- Put mntpoint patch, because found fix for SysVinit- Add remove mntpoint patch, because it breaks SysVinit- Add mntpoint patch for SysVinit- Add -r -u -t to getcon- Upgrade to latest from NSA- Fix x86_64 build- Latest tarball from NSA.- Update with latest changes from NSA- Change location of .so file- Break out into development library- Move location of libselinux.so to /lib- Add selinuxenabled patch- Update with final NSA 1.2 sources.- Update with latest from NSA.- Fix to build on x86_64- update for version 1.2- Initial version2.9-6.el82.9-6.el8libselinux.a/usr/lib64/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protectioncpioxz2x86_64-redhat-linux-gnucurrent ar archiveutf-84ade89d3985c033abded0b721dd2e39112eaec07b05f5b5c3407f5ef3c00d262?p7zXZ !#,T&] b2u Q{LT24ggUR^{mA*:GW  &'2C+& Kh|t%-w`# 2T@h;B~4_m/eMq~=螒gQOS$gT'HsF&qalj'W'5%> pL ֗j>S-UB] ًsưS #+EtAge#AXQ ݂:]wEUry0Ŗ-~N+B#e*0+M1ڤn x=<{pT7w=ٞ ֫qg3<=]VpFJV>u+*|Rњ]W2"o6#^ v%;2n=r>;qzQMÁ*GQi2.pWgY&QwPSW, !B\/BEƘ>yoވ!M{VM0#$Qٕ:zD/ڜ7k7h ,S365  s:7kBG@e~)h UЌ_g|JDJrPuc5.d<ǶS;鱍*6i1Rr\QM  $<8hъ3CjQ! 9wͬyFb!VU({+܅_\+qRsKz,)!O|{I/zOTԍm\͋@Y̦  dHn]kI ocW\kS t_=ɂ`(EG?wuK,#`T&;D^~'"Wv*GߓNsYьNyP)ʔ 6M,Z0+H g6.=vtq-jUiQFH҈9{HJZ=_`Z귟7GG\6{W:GMWQNDca$X dP,R|ʜM;k +Հ5]@v[MϘy\ \n.Kox L UdS6r YUP0m|S6(A**pMrǛ_k=s|8S0e?i/6D8"$c# _v{UqPHإM@.⒩l]f4$z/u_J K}-\NEә h2k@'Q0OJEA!XERl ;Heg )@=_U1ȇv35~`1DXKl?ehXzp^lOݭ_Fmi&GyW~pN"DY'£fZyLPk5XשĕL,rIWNDhc49a)vȊ\vuD[!%bJw/a<"1in_Z['wq SA_Sa7Jq( B,oADT=6.quuxvJԆl_Z#Q}|otjhYل>&̕]xjjYF?Hov0||9Õt3iBlyh>) 19UJ B"MӸ1B22y``p tI9{T7y(G!%ϙ7awҁPWAvX-@'6M)5؍Tlj' ϯr|G|:$ѢA/"Iծ¡;ww.c5Bm;nPAxt+d"W{kjƇH}∰Xi -t />)ƹIb6Y<>mO̽t!6^b~QL:hq~)i{L4ֻYz|*Tx~c4#_5dH\tWd :H^sz r-58^/1e~2 JaSOJeݮ$GF?VOd6.,P,% {4ΩOQR43v ؄#}*["pNjryXg|e"7?b%,=ul}85 Z!P$ e4,PvPccgC p;=l^:+c"$B2@%1s҃%2lE H(% NjW {Eeވ]@s=Up^m$uhiNP4ꬻauX)8'eekm^PLG2~ o_YВWxqg=" gɖ=7($9Ŏ8PvcϕpH1WemNNB_imI&|^рc9d>3+?4 ;PU"$TRaRe9_ȷ.B,C .>g)JfQ>BHRyܥऊ)iԐY%IO]9Ne>`B#=Mvа&* P&&-(כSQ/,^6[CۂOk#˜t㈞ж1un\a&AdfE6dB>C| /K pKt~pc-Μ$VŜ<2S&US9]*SUBuYu +nuۮew]i)_[*|@UVe1=S༇^j_=aT/1EGQi6K:̡ jk~>v @h\]">XalBMÆV!tl3O3P-)rcļs"c]N(6AhH׎=O]4>}tc=IDk#R0_'H^O#lupc-]|98.~>rg+oule\fܤF~uې1ZVl(xMjB6pE?M0 ťW" 1^cxa~FEP8+e@Gh$!Pr@?ƠOf $`SrahG}hx3~C9u+)ZW@ktQFRJA,ɽm*xc1|/'k o 3Bǫ^D 2"R -FE_OL2Av͠`&P2!u '-P'?=3XH҅@dvPb__ļ~߭`ei{wBv XHkHFcS7K)MyD,k=BhQ/eLl@idL\6׾;eKkD's/VY';?6y]1}ݐAmGiNN' ;\;iae#UL[VHlm!yh?!0X8V(~ËbxLn>TZH7^-pߡYeeͿJ8{Z<_V\ gm7i đܛXHBU`bF I @-y { 3%e| ^Gtuҷs.4O>pIO j"v!AxB2ml9x+ ;c펈lH!Q t.J!FDo) XI_hvh^omHuBfc39/Hzh fI0,VyNȺbe7B(`{"6}rN"EQ |InT2YƊrv-_(pdLGL7d(lрCt7 )9:=R杝O o_K4th_B֊VPSQ:J,;wo#[?r)OrmЁXLHWȟ=ND4Ǖ?'ޣVVgՌ(hCu}|`J|uCPj |K*%ovXbe9&ގ9XHexqRCjWWk+mavgP3eV#]8Ļm=J㜓n .=MW/TJ l.R$HiUزJ  77\A[Uo\mJcJ%Y/]T_z |غM##"]Jbonր6TKI]9J?ǧAˎ,ikh"IY+Sx!쨰-AF͞HI /Y~e~==E|Fw0҂jJtUjX\oeƢ¯–J^E*,ƝhD`[͆ 7xpgPL8ᘱQ޵d,"$ͻaACvPZ( `glᢿVaڄ6! n :Gk9'.x(>ڴ'y d~0napZ#1KUR#آTtm,籷e S]v="Rwq,vnܔ-}8"=OF(+XRy̻^4%3 ydm̥m h_״ ̪G /m>s?*X4VřsO9A gn(K/ydޮ̨i ;Tbb&? UJC_61V- 4SǶd[0vȞϽ ν `kUhVI%,:OYv d~idik^_CJs-4L 4HMse9. ,d2mͦ0!}puU:kSeCQnZD R#Aݧб=N#i_ԋD*1]$~LNVmͤ@2P@5 Xn}t"SMT 4kzww4cő-B>h_iS;AN.._?l Pu9AW;.rt=h H]PD9yYe;swT@Ƭ=[%hn2|QN`Kc'Ip]AӼ82n}`Kp[RPFJumAkPrr]9#mDᕰ{U/k")gl7]Ǚ HXYj 0V?lN>߳JmqGDZe!mmu|-j ٵ,JKN(5a||x n;W8'}j<6? +4+s%L"}~Zh_.ExljHF@.'Mbg >1=wpbdS؃}2͠&9r?7](-#8P{J{°i5qN%[]+N2iK7F.r:t J|7DO?v'~E]aHCA)0@pT5!ˑl;#.}|^!TY Hkh^ K{2?卡^%M i1u ma% w~8^5ǏEC9qQQ9 <݉+ZBab_h+joYCFR&h RR}劚FR`@UmK9EP$p&gߥ$ alժHL O/ЛK ZyFw-xK*{vSe+Cpn HlBomE<՛Pe_K :!Rs&k"аoN١H${B"mLFϛrGL-<']^N Bk0Tb+ Q\Л]bޫG\^LGW>t7%ŷwʅoIdaO.75==DDuF͋Ê|s0WhJ::CwB2v@x)Q`1蒴P! 5@A4l)"Q\7"^MUat`4[㝑0'`]8%9$-`/d ҼSg=F:%@O~@=8lFc"sgPiBJN ux"W7Xtm Ks(@C8 vt/YF\%9't[Z_S{+R^DV:$ y߲;H~p)G'vp܏YlpaxᑳVdOA긿x zHby#"ˎhu`#6FDhnE% a(B|UpW7Wƙxbdv/0Zqy+ṈO놯aX[3ZbsNpܙuB-% 3[^LS @l: `v-B%N'R@#vU LU&M \V5V/Zk (a$>aDH"GK=qC!>ɝ*j;Z* J=g`f&1v 4oR4͸<}I~(UƚP-o)|L[-ZAf0v $7T2i)vMg9s##);"ٰ*/j4Hn1i{l7VE,9 Zuh%Q6hPzG $##2&# W}O+P~."i:OT< m4럴T ۙA&csQ\cC<=4E _שxjxJ'cPIwԣv@W:EpNIC$ioFn*e:GSn=`+}8jM^Sgp5ǔ(vk}UW&>M!2%NtDZ+luGCOG`q:?钵e&*Puryk&2<ӯfTKNkpf|;ZlIq,r^֤$UqX·I[lwb=2Vy bFwYfm yfG`y[ߣ+"J&(Fcs dK"QuM#`Fǽ_q~cH3cPp Co9/s]ll`W+伅ηF(")vG(+5cO0`bPsal]'m@G,Q[эUȐ,37ikztghK^&l3,c h?ކm .!XUEJV!?8{OkPI:u|11ȁ;_}Nޗ̇ "E&oM5Emy09%!c?Ycy+Hy.N>0X#:᧎ oI1הoPԱ8kSAfɒ[yǜ`:CSFWy]2f&ø7s fazaLW4R6XvKGH'&T)*2j?O1"aڸY?<$(Y{HŊLg D|1k*XtSd$G$:zņ#k%] Cs²o{(c1O"b۞owbU"톢}LKxZ⼴YݼmD[0jKCP,{ZSC.\pX8 G>b);!ߖ.΅0Бr&NVQl'34 RnNglSc`j:$ܩrUvR#?.$xԶ+pDG˩b  vVJ VMw7ʹ+9P:)q{ HۘMHs\q}'aAxap/ɵv!UᔂKsFdJ3'#K({ |24<hg"/?_ZK;dn >I}8+LkCwi1U }w6fN\,1={)|Sp}Gi #"òd3-KcXkǷv,գVd-$B*Ob1G`Ɵ' \"A5(jvhՔ>Ojom*Vᓩ^=gRg`hVc}aM@^w]TM~s>Ç\O|f#ݴK{Xn7l>3΋޺4Hf׷"s1bpl!8ѝڣ DȯŤ%C/-;`ni>xvs޳Iӣw0}Jm+znQyQ(x'UܸϢ=ҋ͑+)77ǾNV*D $9#o8U3;-p~ $+;,fuLssj=l0:v Qls u2fNT8 [tr[}ƿEK8̲)LbG^`,.9cX9G|FsRCq@N R5Nfb=_>v0o1(U (b:2*ŜO[lfJ#Rʱ8}I^lAL ?-UuA HsӞG9%t#쐃HgZ }j|H]"цJ]#w WQDh"!d%t c ▙eCd}5Dw^֍AYXǜ]yx []MzbF :c .'ZU,W\Ŷu^9RZI/Bk_8`D^Z(5C) ~7tL~l֤ =C̒Yw ˞Z }(L 2n}itޗae6x JC%$!7'o*i 1 MHtꢆ?_SD[.]f+E2 W5u0Slpֽeap \,t$A1S'FԨ>u"x=̩NX&a6ĝ[ܾ߾}\/~u]p't\7 Sb^\KtS0+0u88X 3ƒ^`K J%_cVؠ_RGOl7é{N0`=y}d%"M{;o.+\3t/VV2lʡT]C$ k0`m$Ο/y֥1E*9QHzSJaΊGl@rbݝzi6ߥN%,X͙9qY\r(n RO1z:Kbem$AoсϪoC$eC@C̽ZϾwt+UԹ\ ˻wBOraJ I؀;XE|F99~\F 4<3 y['JUm;nEo2Eo?&TVBh)H}JwN=>Gva=NU5MW$68$vv|>gFu6QYyRhGc&6${6*$5&~0C;Vtm(< 7Y;Vo vN{6!+G cR=%:Ɏʜ~ovPϼbWcKbyReYd8,_Aɉ@*S Yx哤9el&Ig"\_ n#s.ȬeTjKbb+:>ґ$4Y8N!#`qA֐"F, fk9̹}daKHgTK %8EǩiKdlxɨh^Ewv0k.G0pE5XII9{&n:7d\Jv$K'QqI*8%v;@9xi47ujNO. eaX\h Ӥ`"knn^|Kd F||N긴SN|PPH~}"躠pN$:13-cOaNC͡]=<@H,TQt@sG/ʓ4Nj; {u`g5401[S< b;;.ex6fuT8Ч2 Q]qxcz87j1 xBtFÞZxG-+`e z =k\T!AmuYUCJ٤?#AB8Id]U}T:^8wXLX%6͐oՕ|ʏKvlٕnep3a=H-dl).~MP,8*؋f$G2CJ."AQ@~^%SeKz7\/WϠ]O,^D8;J sGQcCάJ@aH2k:::~[Mul<Nq/t+p0v0K0d!0PaWܽf3W{IRoId-f&4p hRҗ_hE㶾:/ ގy\j )`AQ8yz ]=<5`󺪊s{nj 04E2:?L}yE79T}Q_: y7l,2bbiԧ΍&{_H02h4m"՟j5a(Cb)x_v n&|Sj8Fjub=|PGǺ[#N v;8/.t_+f8HR{R^tTBtdTz'jV)x5JEC0/%r8txZ?ct% B♥e7Yog,YM5{Ҥ9a^!qBv}ZsXSCD9%7Mԉ^3(rh.JIX+/4)וlx#-݄vQڅ :Qw%ɟQ25W% 6ؐ9U/16fZ,Dxe2Ux&{]YPRnucBp!cߴDha9*f~%X TkȲiBfq t+s{1FNC1;:%KYnx{ݣ+b"ܤL_~CytRP`Jy0tVoJ R4W1V(J4B̵:R6,JJ&H>J}sJ5I lXH~C<臧ί*7Y4_P n۾;@zc0*hptY(v).-ۼ'`0YueYIBʭ<ޥ-BCЄ?HF dZ8TW^i*Cگ?ɨvZRY9Yhz rSHayރ}Po+$_ގkY*J ǀt"oN*KEph/ôk1c[j25JK(j§3f =0DI"Lب' 2ٵjVփ`J`lJSd@wx2<H1wh(lCh-EԨazђ9pZS[D#ZAɖ oS.b#n$VjnQ#{(-VІ byWS4mS &Z|;PDSaHNU1LeO77Z:32L6@/tyڣ R xSz8(!514!ʼ~R]2\3|4 kQa9q9)-,]}P1h3_ȃ'\$AԦcF XvDn kq|Z.|-bUW*m29f&hMCL֛sfxLNw^bF).sڂ6f)u8c4oޛN.B)y]w}'6Ls?zZG+l UªBvGa]f\ӿ\_Cܽy K f0׽ҔwFoVOs/YKg~KdM9ײc/X2:P߇n&2`|mozA&_ޞ RG}ƶ"ؗs#F}>Sj-x䢘JEA=.a>UdtO'TZ;W (tWJyV=҉O{Ng3g߅N2FX NpVrѡǼ(FY9ahCWs~]2X/v_@E6:Y?;`*R")d2fx0Jzūdk6r NR&j!DZ ]o d寤jໃֳ0ݘ|?GDEE/$ωNzդX[B00.8׹0֟ &袽A^5!8S5 la{oʢ<-CsR.  xUgӳ:!n/SSyͭP );,gR( E}D<뒣OFev8ѰCA+5 ƠR-,lh*cLzT+ގOu}) &[qh^^iH~Nhj7FhsB_.p>5dߕ-إG$u_Nc#)FBl"Czw;J8`K{tc vՀYgӘ%YU^NvNY,`Ft+nȸļLXET/4e_嗨4֭?4p0pOB)y9;ӞeV0&z˞NVw- pVS,ɬz ͅs9$+ PIg~D:]$cETS=m 1,]zq'\udg,l7eɅ~ CaeLsp^ -f{ҪO("Ph2-r@'g4Zj< ? 'Dr-ma[٥ܬᕍgmMYFt Yjj(l*U_?'X;ȝ ןd#+PQ ,f͹٢ElYk{e|NK[sշu;.z| izyDFL%vxP0;pCkQFd4}> ˶+ea.zLoHF?} H447ʱ%Arai s8|-E~ Aʟb_ׄg0XhF/Nc+s-u2Um2itËxfmSrU{XǼ#x\RJ8G ;T@mJgi@g-\)KpF|aIsK0-Dnp@9g!#6볩y-=e*Ũ 7vͻd.IL?@tp;_eWhaho{3*yERPcQ萐4TCL95 &}=ÈI\6,#͍V\o,/ˡ݄N$tl͒ ^rxb䍞aw՗Mʶ["dE%Dxs5VG-[sZ98VÜ9oJĽcr/\hTcXCri&!\gN6WHhU(i4ܽT;>F\ _li= Ϲ$gzRPҊ7+5Sל͏>Wnv:0z}%hh\$>S|ܔcp~{8j`:]ԡ1Q3>T]L7s/϶,q̓H[%RO A8v!8O9JɯG_w/tzV`'1L&?O  {E?b$0DO18t :}$bϳF;H, ~Ф^ͲcqiCʙ3Salmi}V=)AYK]՛rqF4٪R j֋^K.el71y$ν:Z/? i ")8 lbOwwn9 O`QjE?f^7SC":,MtWZ7Hziʩ*pB#3mDOp,v g(1L;&3啉A]KtA!S5~7PO9\"*_]*GEimi#UkU#~0@ \/5_PD`D㊲RLo}W_39 uJ Ek02ֶrc*ǔ-Ge~/ӐxqBN,.RGo%S#lt inI@lSA?S&`>i<0mΒ>ҕ=@u ,-NQ"d9I&6Da,Ƅ9_43,y/y|;_w ,Z2=%&*>MmH C!{,W.ᎱZ^vm lx n'zWh9!کN'=E9!hNox6АLǣ:6zV&8k,;JiUMŵHTv߿! =F.h7"%2d3EWnkoV|YiaXӄD A2f89ey4n >9xz*hN=i{nIWI]w形H\mλ2.Kdc~TT {.]GfP0E6L)lP82wh 8 j&ӡr@ka]9`kZIQ/tZ W dӛv|x' &xNc_m0h^U#!$=j|9דW|PXV TR}mheHL#?qUs2k% 5ve}6`:?.$J^5"ך=B)#&77${3'`a"L|:Y⸔b>dKJ3ʃ].69󖼮3XN y'T i9Nu$Wqx@;LBr0P"Id,8a- `~ZadYT@Ie45 knl+ziKDr0$mkPlYvAʬюSWYudrNCbuo] d8Љb؞wrXa뒫c^,@'A3<>z=*?u8^Bnv!/hl ~KO lujI #yd!4NvܪsC+hiw!"<,PUTYL[, m<Yx02j?Is@=Y^?gëM=}]w!VYV),>yW5mୱ5)e7{z% hG\(9S+` 'C\>J7'뷤U''a(㲺kdɂkƽYz|׃PSKȸ岌-&k'0${= Ӆ4掓yl"+|ۼZtإھx!UeZ6AI1`BG?<."ΐ&^%.byĹP'0-=ǏrTtqMܺ!KՄ?8Q,jpR: OIP56wXYiR?>J,DcQrt WpY~uq^q/?jYkr$0ЁRU!AE{xji~1薧څ?J;u"YhSm"7/_9Hhy<,P0{jyXMS׵t`0Yi b]1lW+ YOmp-dK]I(q YPyJ)--A5'tq-Z-1dW ]K䉆2$RޟlD Vr9k}.TnO~/.<_}wՇvSS X-goEFL+W#")|벣#ǸW ôdZT54MLկCqH+Vy`o)N,m0IyZZy(`юv0*I%:3sz7|ZG>(Ъ^< jD%v+5YH~z3H*v/ X@lYOBݚ=hѐ\R:b]@/rH_>)ȵkC&8B|v*0R~WX5DJk!I0p]|b|HUdmCQD(IZ%hKښPZkay Ϙd:HVQQWlD(^X'rvw'ӱd o>"_2hBKO03c*(V LZ՜ l#.`xuo;!ȿِZ|_ǰ"S `Uꓥ ou6|wf&-1,?wQ&AJ&'E ^6ϚQ2*8Sz S m!cw1|L,ǭ6ځNFz?׬Bm&'σ\D^ĺY)V(YMDŽRk>Hl f1W{6 Qd^mp6`YQJ4]28}enyh`k wA}pjBF|@^:uV$ZX`2}R2ǭ Z)vh p-1!,זY;Pz+}di3R V'JB%6n/::@ni0o6x<%VEx,;t9).BhUgv7g˕n_,⫞5Lȓ_kRBuT&?m6`)mPyZ8~$SuRa;paGKv\B9~C˒2H Գ!]Li:֏UVM؋ ]e5eDhuc\OwW!bu <K'1"[&@>MVrtʐj Е:5b\Ae2dKCu\՝] @Y$e-"K ϒE0H}C('hes>N+ ~7!pV*UBseDA ޳7qx62^h}VR~$1gVL`SƲJzfU*/,GݼMfUbrJ$>*HrC*oU\8AIPW@I uAWk3Sf$)pHw>R11) 0+i2ّK81&A,tB:nyT,л9Mra*>H$Cs8q_Ig9gHڥ8c &T_^o{%aʛf2%-m /#[ρB\!%EO{VsB< y KBzx` 3t԰T$ [0X_:Qn,X%/&[Tځ7gy:4&QY#UG\ %[ERCip ({$|5V}K qDe!=c@ShPp\J uEp9*z:}czC{N䄰x7>h! ܿn`vyqI[2S(WN9#FsK|eTFO):JSiwj:ٌ>N5ٸZIqBl'Ms~-pEDlPvXS8T"_̍BT`f4|?U9-h.pUWEb.td}<ҞD𴟌ܗJ7Mz碼 `o83 rkfJd^R0P?]ٜX'Kghp}1i;ᛵ e]!YaUfAS}|P?o~9?'ԖRCs maR<󻩱QOTFb)P?sh1D{% KC@Q;{#sBO UfB.%#TfNjEͬJ¾Z g"1]{ֺӦF f9B\ۺ3 Hm>X(fuуCs&bޔ#yBoۦ9!\ՁtǺm΁f@|8S$ A&{jOH6%DCe (p{8bs|#UAIJD/]iW8;o0~ ^ g%z. [xs#,04ѹ),m/tN:ꗝ&/ߜ86ޣ-16C4q(-9i.ګ< S=+@Tzڦ|sޢ;XnQ(]rߐ¥hC'&O/r8%W =˰z,owpsbR @n2븺eW:W6y IaB5r@x&%SSŮ\:Ԭ71v֭Zm؝Yg-iQ?`)BGY|Md̈́0 o;h6- (kI?ϫ[B1U9,#1D]:Q zg,&J}}|XV 9s~gLրJl Y wBB4/f3CqA9fY2(躔 N(9$^+G\$o͎nX~Q߻2\7xotO圀7qi s{ hGm]Ӝ' RkNF(/* ]Q\eC̭E ϩE&A9%WqK.7\\J)?7#.(+ydME$%Nof>z/YXeꝜ Jbo'!"]hs|%Pl|pxay79o|F=!V]Hxp7iDJNQk]D)h~-K/'wCH la\8[< UꉍyYRiLW;IC/!W#ݿ.៟t N΍H{˓g-"zZNTH*I5@*S VG;Xj7ʶLlF*)Rg>Աy z.@}{€fZ m[μطZ N7%%su.}S<8Ik/Fck Kt@ كQMah{jCUw@ܶWf~ToW5bЪQ}?d;U 6 7'ԥ {{u0XU8Q_7`jD4̘$~H)Cm7Efos \ Yn@~BBEE aB`oA^/7 ~W"HDt/԰TFN$Da3!7ĥE3[b4ȧ+ \ng;9t2gkbGE.RbO?z t#LFӚ7Mv'syAt}N}c qQx> ( )9 ΓƛW"3s~]t^a<쨂x{&&Nxi.9%SJ_: \@wL5>Cz컺?#qQ h^ ~' ea&%w_X9'nӮTeUPLRy=9 6"hzo19k?|0m8κnnR&vэ2#6M*P_Aͭ SpVn0-ndAR]'Vh^/WWFRtJ?TPf5A U~T&:ڠhO+//s0,J|RDl6z㏶%$ؓ \S0ԓNbk:u-! q/Q-! D%"?.H'͖-;̆T-7R됰61&?tXy z5󣈄 MŐugR5MdIHE'Ti]%!]#%rW@7mkI)Ր'G$v8X2SsvH+=%kt>&eu= }l5{>EK7Kh^cI9>" jDdVO} [x:d?7ʬr~N<)kE4Ô"|"ٮ >w7șߪgk N!G-SбeطTc5=yG=#o.wCn9~`#Ogj|f7 bQȅgh}Zҽ]hLA*Yۗyh [ h Dc$$s{Xz׍N%Dd3qU0滛M^b5" /m,J ϟcѤ躘&¯fvfGgYDUujT%{DoTe-{E.I*oV@^7q~gcpj\Ҿ2ap ŪNAeXS#2e89b vU:ѱ>]G["4񲓪6az2P*ΜM>I0Mv}%XE( \Ǥ]+o>'NnOɘ: 8P9N ,xö(~ٷdLy Mסf"MG$ʬm+k׶:oc9mk9\+ NjW.Y'S} MZH1/f,-P vM[Frs#h݋'BC3#ӊrre.GI˂%1Wd*L}p>~Gǽ3CUΌؿ(F Mq=P̈́+'^]p7{]A]),&(JB3Dd`"_YDh/1ϳ9E;{SҮ͛TDj5br_ʭP|({As!IUK*Q e#j%*x1K<$Š@nA1FX&HYNyQ&Lr-IU"*Wf$7~b,b? u_8?D(VJJ:AUr8 {Cպ~'HW &iu=xI(=G9F ]'h8+*U>̢@[ bL)T~A\B0!ZTFVhz1C؞]J]TflZTܻ@]9}y1LAd>oDBiXB_\-&(iF=%,KdLT'lE-^s`ϷB!qO?}g&mp]]RŽ4 ՗8&vTaQuTg JQXϿUUN($`|f}ІywSSdAh`6F屍h%P3Y˽Wƕ"È@=eSA«hV 9[QU9vOjM^-?~ Pq*5~[mȁ|L Rh^0h;GuZ42$09a+SGPro|#uȅ_,Iy^c!s[itczDːc%XûU1,KكuLpˁʹ/C_љrt!3Pt7T&R桥!rkstffK׎8C++ A<: lG} s5?iԢ{@֏Jw6TS>(ݕh/ZT2s}91~Co@tJ /\q:d:P)gUKrxR֡z 2c6r4K1(ᚍؤNBIw] B% . >3G40Ga$j4o"ӳJC{j <,qfOKIw"^+!*faśJQ)]zh|ܸ ᭛6uL-Fd|Fi%\AӒQcNyR?fPYz_0.Ѯ4D9fN:(w^wFlG< G?x\d&^A3շ{FNeyC6\=[>M\A>nc mVm5_i2oiyBًdGs(KhLav1;E!j:vYRF US+@OT Z-iZz`Z9^AF [mYG i:nѝTӎ8T)xl M"}jԱ&BEwHٷj8Ed?F4Ֆ]}bZԞ e6nhI^~ٹd(oLRDYIk5k RS4ع΍V] Q]҈ f96 I\G2Ga;aR{/ *+bg 1 染q`fENJ;@͏yG𠍰q6LLcz)JM$esy|2悒lVLʦUՉcdS/c:*":p9JU G[=dA4c .i%0q+?8.=U 5j͇~3/bDɿ#!l53YAL˧_&=]m̕\GK, X{o)7RBlh;'wmF|8D) g>gYE$/p]/y4Zaܐ˨Ku¥9k'/ME!>($bJ6hsi00[AR!Ezf w2fN+WS+R}ں#3m)JPDY6y,KIe1ftԊ|NX6 [S"qi­-Mt9-h {[ yhE/g@U;G#[t Ig6g:0_Zը ƎG9x/hK4UeXtseNǬ%C86-ҮLNFJL(F'vՊt֓/SNõlHtv'}6NL\u1W=ɷs\\똸Mߡ#N+lCOEvW5)-ȞF8+bBo}10U1(2,83u:]5bo-/)ٮVyMm ࢒ ڔآHSRր)o]$M4,T>E 6AJَ3=ƍ;#@;U}r-$dIf4:ׯa ‰Oj&)!,eܝ30K2A4w\؛,+`UKf3A`"t"u n OzΛz!>/'^N=*6B/cz9CGZ/sfF -B0`$~$X&($" ͗ SQ:߭MIu d*JKa^t/`Y{f-(9~H 'ѵ+N&gXz׍TePcϩN2@vrꃌ>˵4,;U&coݶTxBRTj?zPlH:T-3˭yyN!&R$яy='n.(td`N{8I5*or~v"o9_ ;]Q^}=Hm _&ĄЀLK3ҝGlg%Bҧp;G(-ixXww1Jԙ*q ;lw~L*O|Tlx>nP@Vm?1:hQ n'̟q3iNLVEy~U7"=V8wbhciY7oc6hRo(Q!wj0}m0]iֲ0(.F ER L&rZL Vmsv. unKR"#U_ ~siTſĕ~,j%TVS\y_iod<S7Xj+yADNHpe#Tزec*X{! Gq+Z ٌ@P +n$N%٤:A&i|@k~3n,ajyeoxy3".wrɁ"mGS1uԈ,⤥LL > t5ӛD+xy.<iͲ W'W -\lKl~{O[:M AAy4dNSfI M 0MtNn#/}M3PJo!kZ( @F}p/Дsn5Kݔ&\@)ZY)nd${Gx(0ԹDI5QۣSu+ܨ`*ZybU[P+X|6_@o Z膾aPlS¸=)B}ע0oKc>eҔ]՞\dIӲ1.}cJR$ZMTK cίHEL,U*z1UR^*t9tXmWVTZk9t#D طȜK{HԾVlO[b)nuoh :,L=oa$Μ3 pW{O}\} }qW#4_ D^!n[W @%i_[n^(L]$)?L=ker-PuP>N&=Qf lv腠Z[\leewE97!/ %A#.''cw$e'|GOqT(V2_u@5sOb0=C!1R?:ܔ6e[6₮#s}F,!2 %!.%ؤ٧ 67ÛqD6chvSPY|MW][DmiV>ř37Nwu9b3]fUy2%(bY9@1"!#!kdq{r$pnrqcCSu_3:?>:>BX,/=uO4 U!#`ArRP/XmCϓNU5R]2<_VQa r+ɖy9nҳ'3%LϘ$i{ uJ(e{8*w6+?>S:Pp,H`yu)M{y/tE-cg=Dg]+$KZ[\u?IHz:NW*\]j?=똎-cmV!Ij5E9JYcG̙Vsވ9^.˖7:uJ͹WY) [h< 8opHk|{pzJ9d^-BQ*^FY&Bcohʘ/<ׅQ>Gjԫ0JZ4pFheVx& xR[.W\hpQ%xjQA_v}"7rz06XxFs`D;/'9%v3Ss<#J-,4D|_{j٢~ڑ89G}{"oxg&p~*޵D[:;>'CM\ ac4t9A|mUVD2;&r%En(u@lUIl[;qso3Y=ujG{:Ua4Y8Pxz8ѱ3. XW1?]P;O')WdWn~{,t,Q~u O> ޯwYUfJn5[MraM6W&:/V`Cɦ(8&<.fI' #ǴI&w,`^wL'w3܎X3R5ߩN;E~hZ^Gxm$Q; svs]WBs傳#aj=+>UGtшp6zp?><*M#Նg49} OmwηVĉ sYtЊFӓzJ&ju4#4\y#pak P [R>N {-|_AŐ_.PVccL2O2\viuxp Twm77s]l1L1{"TA٪fTI[$4֩4Ft]'R^j=Oum5?d4x[ 3j|(O@>p P=<yi"Dk)(lQ[sz*-`"EC12u2K,bVҰs(5 eC2>7aLH$j[7]HU*v/Oj>+~H~dq%pE#6* ӧ3T6φ?3Ƿ, tZH_3.[n1ܺع$@iWb%iϸ(+jƑӾN()(?,}KfӸiN(goDѢNbѥ]:i YrDF s%C"p<@^ӾTySjFl9tqۚ-A_$ *)dlAs:t#X ө[^LXs }BL&kbhQbEȘșs5e ;$W4f?`OY܊`8tH.IݯW~ӳ=]9k†p~$TbawSxqao?(  " )͊,z"Ⱥiao;CKk& د,[ j+ ]ҭBta|iXKoxF"̭T=~ka3&vXx8-r4Sp]mHҤ w0ymYU?9YKpMt8 bs,z{?7qf )cC XS6 $Եc,'ozf8f1֍S\5t(%71BhH (خ+[|c/Ex ITx{1 `!g0e f;089ƎlK%/v?B~*_}LrؖNM/ O :=sGbnclFoyTњei_xEo>SUpvtw -z-nh1!c wᘜߣn C{jQms&x-Vp>j| yEw3 d&~Tݔq?x0~=BD9щU,^+?JI)iK1%+s{YFud@c?.8u^ka+^KPʨo4g\"U!y2cr͸͓Q -;rx@W|Ip OGϭ(rZ6Ȝ=UmӼJ'HK|-v4%4+:]T ,3qfyQrv2d 8D~Λ]Y*:z/+D8U{zPrX[l3dDRS7nhO|{rN ‘Ǔ3PAGZ"Yʶj#Q x@q(cXy3ӛƖD2FH@ydlA9 붘)gQeHa)Pbe/;S2%0QbXZq>j{R?0(~6w2MaQxw-Q+@ jڳ//@׆AX[њ8AVh;I6޾F$w{\$V1_5r'm^SFCUnLH}21-/ՑD2 g1A):;_{EcVrա8EMus$ӝ,;CFh{o:Ö3fcL8p{V f(OG]Q sx㍏56E b ~^3yrm,}p{ed9ibe VAv|dK8Dl]th7tXMDmjqB:!!"[Z@)P*@um ֽxG=sj#4/@͹0 j{Phe; e;OPzQq{r4q$r[OV@) BE媝Tiw"k[}(,MB8@*K)xRŴGlț$m5wd98lÅ#2ŠhI|By?V,]TKW#MaIhVl&r)F__]ʘS,<񈳤 y&Fobv|XF@_,T:ɗ"uS("LNdrPY\r5W;+a$U]ϖ3BA >_Z"2L? PhxFMui Hʴ ) ojYzЏ'LdR#o*x,u3F- ?:&zwѫÔV('oeƆH7w 3.;?Mâ&sÁTVV.fblfA^ Mkr7 PoG'X$Jjl3N(kBn/ct<\%hB(lk* ~b-fN4}=.@ﯸdđ J,L$<`p 'E8L|h_MBmb' 7GeL6`Rm1UNZ k >v:q@`]&*HA fxc!{jsh+ Ma?Xz%m#"GpmVorX.L] փ_Nwr >\!%TϟVr7"9Ch\r=:tm(ըrAL;{:]&vb&-kGN`tIcQ[ rf:>Bt݄2AafmMJE8nPYѷ2hc'=%d&?Tz#9N;A{<5ıpçT#߿d(Fl蠄dKc? !K¿EweHǡ%8c{"tDz)쪋GNBԤ +f=;Lwx7:Cqy($;$%Vҟq??}L?Wo@^wJ_m_ B61RWP|HfiCG,"y-;5/w% 5x `}L6h׆|@ZK^Pb#w|o_ }hOavslFSg[+YAF@0 YMzx5ICuXPf* GŷR9v$ƨo=l?Z^c+/l!U4k bdkM!XK״&54i{0F2d\E{o^ ǀD)[sʣk q-oͅG-e[09Sh&ޢiRgƄVvqbSY6e$i&h #qV)wR9ֺl!1SPg W uNlnQߍܘ rZ&2Tdx@v/`|Yv/n ; j ]7t;_8˽sgg%c]G2n3}woJ,C&hxZt21Mh9$tBjS"K!pFAI$ ~G}ur_9dR&Тi|kb˨Jykj~L# gjQ,X*^P'6(3SېrYx.ŋwuLaȓ_쁽X6,i]}/K?kEP& |[~JM|Z a2f׷YlVUCX>_d`"%M!Veׄfw[+ \H2\|xy`0Tֱ !zZא0U?jl?B;JÉ> yV<߽v6wjlRZ .MmN Y쬢~T9FpMB_wMi3@sd\DnA9ф):k;IBzz Zd҅&y!Ѓ< [N )5ZVwhnmj @.cKj. #t`6=ͅ_j YG|EXMi\Y5R0xV#kSAq0 @VT]-L*DN e'蚏8&%ZawfT*ZP~ ąѴzKP'/n)ѧPWR|yr}Ku9J G𚆫7|ђ<  +Hu포v-#l3,0'nDY+Zj+"(p&|*p7o6y@nʈ]2]Oa󘌰}9)L1,Խ_d`3WHVp<~N:Бc{O#Ex0$E)-P4d|B.:\]QNbЏ|V^IűC\Cq.69+srqN 7|Ftߐ Nn|g?jgFWv]E}>}aqA*3([AsF ~R@X EM `Tv)zޑYzV_+YػS5>]%BJ)"1̑nE{\)vÂ`WiP;ZUY$5(.NՄ:u NIiIs|-–A*|l`?)N)h\Z>{jl3ΡY&Ʌ?LS'5b7a D~}}m:4M&tSU) TҪ3'(ÝxRvf{RhК9t.w/[pfV>k<)G)\%񻡆&u}au0"T@E`R ?#dMy > ~TFi6R4Pȣ!I-,Oȳ=GBpe=ODžĤxPD!5sx/5_7Ӄ;(j`0}o9۾TX 繕 u5.@g䧆aW);`dSzІ:p)3;m4S,< HO q()(-&};:  i^'&P[cɓVgC!, (M\wgK 8g\а Y W9g: Z`Mw1?_f3Em×c"B\q=sM'FW7UĖYVs46f8r8TGi1 Azx Bgo_'32F;f<,P_wd'fu3b9  3̹\Pə)NmF]YG(B/93!!hSF!W54:60eA@gq7ȄGړ? ܝniJw"ٝ)\$I-^PX|zBcY^o@wl %\@Czm;Yl_Srh*2cKKr8'o ѰÄ"ʲ&b.m-MSC(]0] >9i˻]hC,PK"8WWCqnO)EFf]_fV~nתfU В_ٶTemԻS!#hЊ8ɋ!%o J:{{!V> M&Q~ً vuFأ[h'8N ~5,8^/0[׸Au_(*yq+ضU LP!Ñ.X ((p@}V&Wvt9Y6ב8]>VP7;?^IMmdV1hgMH1 b\\gЋ+iQ3yvWd'v -]2Ob|&`/nBsy4(/2 "sct?QeX;0k<ق|@ǟ_ez1ګgϝe8 9CdF+FoĤ%Yc)X}v8&QN @8nE8g hRSʧ,s?ʎ pE5rRqH}'ܖ.LT,= 5 pW#SYwv :x v`f }'YJK%MS]iF(Ϛ3u=)묵 ]KlkD J`$hR,zG7R*IeqHubrߴnJ4χTU- =gL[+=`*ޚNq'S^K+G/vy6c;ج톰ThJj"O%dy,A#xi .e!Xӥ˵-~j-3 =c4GԘS^ Ch$W~-S\ yw&XsVVX_w+ DYfhv|t ",I1V%hU!7E:G容zw1woIl)n= &/ R%JSH M[GK='rX^M6T}_5Z uÍgTR^kPL*3v_4٧6}%nbVGm%¼ӶH ay-b3fRLer1fc H5d9 6&[ " IVw0DXٯufͦI${,JKVwY\ds &]fAIp鑜VA4xѩ?tLG͏ȏupRue w `jC$ƸKߪ`fx}h&qGmح-, GQ#<;M~H}EI{C֙|{~ ܆#Io~㸙^co7[\MJP9AGSx;dp yӍ!>l$Jω8sz;Ys{ 0 AOs#D V⇖1w^[c'%zT6T]!{(gT&݌R'E41"}\l4w \vc2jiY VanA6E,gNxu Zֳi6kf0WdT;[UkI+Zc߀lVb%IxLR:o֟ Еƺql$@cEdQBzYqT^˓g{SͦHC])֕gA(mj[SDY1z7-CSd~h̉Z]{= [kG[}>˰]V7.BsxOYubp" Wδu2ϓ31V<Ab7Iw}y%.T9YvmoYqcxF?Aݱd颻EAp> xD5vMj!K:tߞbuR8س`M=6KR"! %XXUA .cHdPcp!c'W&l)}N %JqQ;#ct9=K8Z&uF# RpMиym!\_.s}{q jR?۪esvmD řYb_`# hl]KyOɻ x[Kgy UN foۦDjKJ5// N&x1m: ;) ^kDZU/E \ƶy-b5K0ǿ"6փn?dzٵpj־sЈm5u6.AU)=TkkkjZ3Y-`9 %A $v᷵?)l Lb UF(D})$ԉ}m2ZQ>\?P֧؟g!8CMoγGLUzD:4F&l c_*"OGGJA֖h :5.vr:ʼn1m5 1d?/Bup QP?G5)GA'rpoa'H;xLIe߿Wr'f9kxyupSچ]RY&,DrT&ptU O07ç3 DcPoRn|ȏK!v˜87j-d>͜a? I&: ) Pz`;h1V)YJB}E!A,#WwUgeźWҪg6ʵD>`N=nsWtNo:8qIZQ"0%I "KB{j_/|XG6]*_pu g&fod3x):L=R1`aR)vN[;oy\,ӈQYi4kVyy akBuT=c!6& Kr}}&%*+{>"#ΜK?*8Jw,3#}v0X,h3.)sB?m> Yu<iIv^\:mľi([ȗKw@V|fV/Bj S3vr*#Խl6?p nT-7yhsId)#]Ħat;0H?o~f]"VIt#20^IN$ 8AHlIQ>`x ^ 7IffZ~*RB{,Իx1QpbNQ0. DDxD"ݤ0K-\ҫPcw]3yV v $o2-C<#b\([?u߈a{dSzUyD]Vp%7R/_*]~Ui-[x 0.5w}IH!]Ft)oX7'UBJsT,bwg.Okx;)RL-?wn%Oh2r #b&T@ט8U|W8VJ ΂},24S E ]7j2kڛa W3tcρrtͦ1.LN'0s-3 Hf/}vxЕ >=\U2,A_W?mjtr U@v3_B$4u?uwFt_q]S!?`STኜc6ϗ;/CqVvbc|MҺ}J6o-Ad'0ri+I[⏒EKpkZ˶8loguK$ZK _uJ-@T% |zqD ,$YnXmp=|Xx S= sX_;!7QhwjW0k&-1p[bWI(Be 6Mm#PTi1cFLjJ&ORI 3 e\OFZTSg܀ro᱗Mڙ1-Z*pu}J|Trl5ؾH,˷j6ZR჻C +ǘH(Ȓv?FOǶPkNd|r=ɇUjPy|@:uOs-H/ĘN]7LR[ӈ Y L,QRɍq#jn~! :& ֞LJEL'h^f[I2|i}nMyJ2yķҘŰCpzLĞ{1 e2K5UahNs_܊RgP'K%$pqlC祐tnӓ`"sZpiQ/gYAk4~f+ZXB4-~ș| ڏH=*P걇chg)$e)!Â6L .} ?eǀ^ #0jCy=8`rsK{r\ݸAo' _K nPidWo1kmōڥjvpw MsYąn.6I0M]*2s6*ێʵȋJi͈0Y{\3 ŁV Z7B:y]E99FajJwbX1NY`ŐΤz:,?`i}J&3.1lѮJp8OX)A2:AUuVv'JG\cVd_ %k`!O}6k$h(G.e5 }3!d!=,S,l5&l=|f6۳>>^hC76Rn8-S»_6pwى9eHY8[FI`сhxVDS!Kb `Qc}A?JdU~es8?ʄPyYyޛfy %l5 8gbl6(|bӅtdeOG sg_}pZ8OeQ"*&Nq"Uhϒ# u+aVO>ϛFoH])CD<8ՃVSoZVJ">uBKkH\фCq'ERf^+TWqlgV@Xi(9٧J K gɧ(Yhkb߬QSpb^,Zst_ yE=,:z4ūpՊk&S li6"c]K(ʤ1t RKXjV]4=ó $VGwe+X59KT ܠє68OvKL!x iJn8v$q9\?+C 7i~eѐ't&e۴#K>$3[˫F?SRO\$v5;#clLDЬn.&w V_ |r5v%)ћXOCxsj+z]u Qqp 4[p q]S@ .9w`" l{kKqhl[Ԭ&TvfRN[P!伬JC2ۑάO8'xYB}~\{fbc[5Ѩ[A 5o6! R0 lz\+.#To:| \B i,pFs7ɢJ[9}INzא̒(a6-;;`\eK s2%t {"Z;Rj4= _U)?q"dO)a yW`C[:m\ אH ˞(;%u.G|);#`tF=%o.Z2]w $8㯏.c1t1t!^SXKFDgjr=NhCiELiWl._"˚ UFS~]vowAX^SzDN$X8h9:/XhDl7.l`D90h%Bsf&\$!1D }r9FŎ7d5\Qeyt d&_MW8Ipv)՚x~ѮٍgJXWbŷSŢz tX[L ^AJ>#D %dMe6#&.u,]Q\[=u^WZĔsyHs!R /q3—K2yp=<Ssd$K'Z7R{aAX9)FWc;gOKi1ɒ0GAehɌHnЂ2gzq.w\/aB[ت\@ mėaMٺgC㭜+RbKXdr)L:bG;h_K)T®\6^IQwMCN%[>a^zG0@mhKɦM ՘/0ja Iq4<X:So[8]MheMЍ`P yDd23;,ʹ$M/#сɽ]jPeOP?DM|Sp hKvg >G%dN3|%HOD`H&ը'l,//ctN (+}Eu4e鱃 0ge*ҏH+^JypGY}- q>% l]~P@\VBD HBg|ߍ V}CE8J2R/{g>eg%aHo^ |k9dSknq+p]Ί@yN0tKT:ͦŤ,>SחByWGcnq(jlY $7y/oURYaA~73Gt4r ٧6$n|}Z[mVJ{ (FE)t'7oM#æcx6 %zJX q9j/ l(Xr@H/%Xi?<_Z*11JǍn @F]#3] >c3lXJO 6Եv+4N}NPHDw5`Vn[zl ZcbэH{ Yzeq׶>ImdJLㆪBi[%yINo 8r2FZt>s%nqNN)bN+<1*i`5#dYrRdu\>_НO[|Q*z='u׫ {y@}6^Ƌc| Ip<\olbdԕaCʁ +ujF88v+bŦ/ұh溭SOme,p%'YXGG3T| `p}$? MԹ"9wtdܶOBK)DᵇgEq؞m]mnR p=0զa+\p_S@) xUﲋRPEG(AHWDvt`V494k8ϰ k{ {K'PZ&`C(Qcɽ.&Xy}!!mEpYXOb.Xٓn9]\*GF5G)qEȭRi7br#vGb0oYIZWI8R,"/8PN?U.?Pk]21dujȶ*44xL;|瞚gHE,ؚ]BFRＤ8si0 %όڄPVcP7ۿR8 "Zx 8 k8t\%LQăG:{P[c"5;OcUvvQW"\xmڝoM0`` u9wq:P2}D-$jΥmg>!_g=X,VR-%-*Ұb!خROoBNS@־n| M'uQ:u@ $vQJ=~M.q"#&;I:ʬҢ$'ꗖl^&13R4;ωJI<䖖kЊ@$MCA#>`@fut=05@;~39C+$XN_זg A!D_Ѓ$ޜDS}s]qeOnQ& M*@K Z V$ zLQ9ԕ'(J7CS+ƪ|sŏ-;X,Lhϋ*]D ߺz,ҢtTP_﹋1uʼ9kю/b J,n6scS-~%#/}~ɫnN?*0sUP$䴰PN 7&倝# 9p|4R/hudu<jmG-j@9`wXkQ_)Fy}^ -UѼ^pv NmY]߶%5-s_ij+s~nW|X&سtzI}*tgۗ"'|C{K Ix9Gݟg To}htm $K}&1Ě4\M,2}/qL-P9&&$BDt'Ԇ # T?Wj1i@9׺FT9. aK#@,WrK ObWTjBIfk'Gh'F49(@({m8O1:ծt paۺX3L<32v_>R9<̀Ǖɇ͂:lcϢ-]vM mPDzsEe䗆? d_?J1K(;b&V#Ǒj.LFy\O;Nq\ #m;vcw*WsEO{\TRYaiX-4q 2Я,6,RIG7m ՛8fr1|kBf;Vns2wvE.a$<"w|cp캴Xf^n-?֋j)+Er裷9]> kg)nOwo~FWQм;Wl%\3 {g i6l\JEPK! 9\ aZrT'Cqw$Ҽۃ|U ͎iрKrSxylQWg+1POR 2jN4x.|1p.xݣFX"Suv?fCoeRb|+&g5 ;63X Й\@J^}DB+շ]AS0Xl] i캃Ćq_ټS1'e<clr/zCf9[k: U?S"̀WT`xueq,HᛀjN @;jI=O#A[")")uҘLW~0mhK&paq5[4t*sn}M?~Հ$kS?[LPߕoeȑmT= )NkfOnP;84Kmttgi:Hxlѡns\Mp&zf/JN G+=gZ1)9GLERh#(s5jowtOeE _pڗe "~,[Zw7 5wJV&eo$Ň{+W&:P.1Ǟ,5_Ha, vf㤀J8L=!3o_,l/(6"/8uiWx3*YY}EI=A6'd h I@I,J"Bzwy۽r'H&y{'RCF5G_W!V%ٔ&(c4#Xb8rPH%IxΨ8N5(ӺME*oXpذN?8?(Fm)-.n7PcG>%kR_j:9 6. M3lg̀})x=iO>)$7103⸩Kw`9 4Ye.ؓESuѐK6ږC3TlnA]$|>82"..fe)p4+Qa+U-rH8P~޹tUp{qP=JDڲ9fh=e^xv t r`.?zlӧڥpD곱pwEIzEcItE+S8) uhI Zj͌!&fLõɐE4O:Nov :aNQB7|Df{Mߠ^@qCr}{L[1rz JHwmBfOSuOErr9DZgyhYɝ(yU0vDk"2Xъh`"`4|օzx<$q{iny;EonirakUNImˏ7AZ =[2ڳz_."#Gfë~ˁlF Q). ^t;g x >Jll Zy~d8) )UrUԏGRHϾh:?Ё: ,$03wZ ln@g{ zxfT>eg/:ӹwd^Hͤiw$A`훈r޷~Gj[1;W‰%f1JJtt ]0سCܰ~R.Q &+<þT1BP0 ylڌđYG^9T|zJuhѪ٠EJ9̹vΌNj J$MQ1%UX*v7M\&XvJz,MYʺ <iA18][m:3muı$L\AjMg>@|T8]& MoWz!U"Е&lU]xTRK5Dk#''7LȇF[>Gt˝gPW_W\sn)'pλeJ޽ዑZ: r&Fj$}tŲ{ԴۢrÞfE/pO0>!{n=mt0uGyL%fcDjQ=寢ɤ6@+v,v?X\gT'՗~ndX~gW?BjH/3\il˾ސȿ՚Nod{]"eʻ|+J(/ivk%)w@t mRM0:qy]26mѰG/.l"ݚ槱qMNV(־S]H#oX #0Lu7FpK4}S(B^|}(Սn^#+wMO؅+.ɣ/; )SMkoxD :{ t-1rC,VY6C./a#m!yuQ}?t"VS*9*ٗjENe1ܿ&kWLp;ا2AYfho0Mmw˫P㠤uF֘DEX951qo.f5=R9grwEֺX*k9V 6 4K]<**Opϝnx%{PE>"*^ɫa}1E.|7O/ktP[k y &"nTqѝ UQ]9]i LT sJi5AƿwI4eh⠥tu0|zbubHCg/F )$v|XJ,H)("U\ܚbi(J]r԰挢u5(a'C0&-c/\ ?qcbP$w{ e>"cK%n cʟ,R~뿮N#A@#\YA!;tL#sM FeF<قQWΓ"'bpx*HR ڶ` SSRqWmK SEu/!8 œj07JB)l%1qw`:Krd/ 2dR2(y<oׯ ZtEU_d i:7N淉xчCA|I*ڿ*j+Dޠ/_TUOv{s, NH-!͏ p;9`9X6\Q_-ez/w#̯d|k2%~;\ms--M#d8eeZVCҸW+) ٪QxMw7̣=aAB'ؙ}]طC.jE2ƲU'ID=]o|z J$YY}댙&Iz"`f[kɛV;\'l"U`E$=-M3i1sSx8ju8}w/$_م<_q;\)JPE4̉iDr)H` =:F5R}|c%{,s\ai$l"/. :Om~ ֡ ZJ Th4V6MaGtTI O}.6a)oį)7-ٲz'&tdrw|#SIXє.9f ˭WI" :#x֙pՄ_p-3vQ 7tLR޷'y-G'dg}G Em&`%O45{Cy?:\axٍ#zC#-inTǷ-N~?6FzijcN83[ o)65D˥pby@y+ҴDjG ,+Mǹ^KgKyEJڙ"T;=bdq`|(,R|ȧ1nlg*H>pw]_} 1AbJpSw$_P^s*dQTeO, gF=j<Ȩ2qjfXA.Էj{wu(сٵ1N8!Lynn-]3A1پ6ho =SdH {XFl=7enLn#yZN:uq *"|lejt3RV0|%[3| l)Тg0˵Dvj*I|l= y1HV~ŵHuWO b=}t-ŃDJvf%DA=5-h[AI۞@տo0GU]qdLgȟUV1JS;n C'$29߾=8o# jkcynEd#\Rk)+ L2TM݊Y!GQE5IgԟeÚimSMUbuj$+JuCCu Q4gXJ/U^::& ']݃u$E?EBT܀ݷVG a1iTj1S_5%jTƑ샾ICxJ/:UCBFx҇eE=Z+?3Iz?J bҀV4ǣ|p8""nL]a IC3(Sv"gORD1F$ fvQ (S;l] 2J++dJϦviJ !ڲG9mQ+}!i0H*`+Ҟ\rxj/bslF:)9,$Hzj̻;ọ4FOk k,CgS]] ~"IfS ig U" љ0|}d mIZuoyI6q d9%B:$Nb*-``0W+^Em(tߨٹA>&rxBbTXQJ\,4lXePc/5œ䪓E,VDo;p:@U~.m4lƒ$9RVK>z4de҄L|0:<{It1y@gX/ 6'yH2ˬ!*oV&))_ mI .9HTLATd8fN"Oqa׈ {O&,!: }QhTH N2Uk~:i;))NvKU߃ph8MdQ:yaY@{A*Lh+&E{yךp$\BEbR;"xʹ3Y ʟБeKb`G[?iqB;巧},'v9"9'#͡*(KȎy6邨A}Y0DljbkbRI3.3v~QUZ^.>J|hX*ȅ&z$S6J߄Dy%/Lb:|nro (&kg3LTR/gI>U3[HY5h,DsYS0[O} WbW](rcք4'mPOl'*[?n'~5sPamB G.:bJd2GԂᭉY~RvwSqZ-ABJR[-$($dx>7ZpH-;㉐4 ͊A7cs-, " I~SXL.gj>٩ q:XbZry/B7vt'Aiñl FsT9􉼖:)2jC,À#Q4:-*v#s?1~[E UlN*Qujt#&ب 8'JX&ߌr"yI|Q`+bA8m2Fu`[ͬ@ܪ[SdPRIh؃ˎU+R @N&-.k~0 йX!4kIYDP2*ۯ♘~ZDs?[٬Se:E*[C E!hvb^ϴ/m>uM:.5xYf 0-\3%Lt4[(kÍ:@O0C3򅙶Ajpt"ߪh#OnxW /D='摖jIh,_kΤ7w4=?F"#'T+<[bXK%b*,x4^}W]1P]^ϲ<;iŀám7dvHbtvN;sIc=l^t5WTvdfPW瓴^=#ǭg 7?]K.rCb䢬 hn|C.QݶKKxO cnSHԈ|T%g~*zm9E5o0;W02aή8b>J0\2m >eIok~WHڟ oRy|5LY WR~oZ+&?+vaWotnЩ7\zj> Q+Nd{ƻ_bvu'0}&Քb|R/]B7r>J)+fn Uԛ:MoݘOZO6ͽj2qZDǰAF|A<`pW^s |Fwqm[WCT,'_K+XNJ>tWaJxTҌZYݠ y);`*5Bz, G ȝdR輼&홦DPE ;" 1ia ]s|g{ZS`yG)I4ٴV*3wq >$YZ-IWŇ# n&(7e\(.ELF7w{zH69[yzO:"FdWT_8_ؙ?ߋ`a 6.6c`q'n3"=*$JCvc餈M kJfB.Zw!_sfhߖ55~G!Pf A8ŽxTrHFqj8W)_ zKh3rL;MK_ᨌIϐ$:I󌮷4hί0yna54B+vk5 e#+59_g[ [BPTA>=ݖrfU6RQAܪEnt^UTGK(å"4 _8§cެ-88zo-Nf[ b^43Gb/M@ SF=vIJ0ʄ-A5dYʲ:cA0 >yI3_s0:)_$ oӐ/(a.N@*Bɿ[L׉I>%(v,twa0pwڋTz?o4)Ϗ?:]8A9/n<|~b#_,aU1" 4y/T]-’ӟ#햒kfq0C* kM/ `]_sO81}4s,3F?wyef#Pwb 0l%!&' CeW*z΅B1#,ߜ͠r>N)ICx49 vs23lU##DTv[<M^`,:g" 壘&8M>J%,XOo~B{K*6fʵ9i?W[dUcp).ba=|'Crֈސw4'XzdeZ>1]iO<(0m2a: `qY?p8XU񸦈f莈(<}Xרּ!({wuXW(TrF,oF$٤qT6D l;EiaBh6vƥtM^ȱAپIH&9y,Dp,P{՗0n zV:wX#g TBGSUͮ0Zo9Mޓ&&kJePP:`.2{f yEϘ@Nrg[;ڢ.r"+j E %f{":hwb^[^5Mβ>:fѝgk<6XIz6׉!|bE8:*|6WKy 9Z]=M1~t;!}]<`([W5yiZpП’;p#^?pS2Efʹn1~<#J ?PV2/.OeRKJ2w`6#E5y ix!GY!YspxLZ8^S+HBQҕj-v+3OQ2iYU</;d12`VM,RlH"sܗb=c|^Jj[(Mh¡X:.oLA>(D"-7P  9SO}nv '.7WF>pP/74n D{b;yQd]Xtz`R*\l7x3(&V*i`"z&{dH 2; ]i>`\.T{G8:]5/yj)=ʚGv\8e`a׹[pmy Κ:Χqm2:Y7Y.DKf|ت{Έy/%k[*F<o5="frX_X [M-T0\`fX́~l)I AXxﶜ<(YkE=>OQ!5Z ܹ<-ɥ%! C#e㩟*">= 6i`hm =?aldrR8|F9A-%juq Ҏڮ3RgZqg~ f5 5 @? ʳ>h5C U^TSKpMQ,ҕ2(1NGZe;C%ƮT*3jRR)\  c)QrNYED`ΧL: '[iV݄ŪUYo= Ѝq6`43.LCKc)'{7ݬʐITY/]Qh$@fʸSz@?š=aԅ 膢-Z zqAQ\;">o\_Op6FƷP9b… Xh\~jW٣&O,:ACLx7'_B -6yzg\)^q!E?Է9Bt-qyL7y.ƀhvS2tX:&6V3v)DE\`UZf]EEdHUP6A]ҽU냁j2—)ͅbA;؟5H H$> 4S۞6Fq.-r쥟U} !RsGSلV#hK"ÉI:^>KcEa'z0-,X]ǐwוRؗdCE XJLը""9m@%\bfTs?>\]۞Wq0ϊtyU@Ӓ1 t1ABbei+4 oDw`߈%"!|n6W#/(g#o"pd9\0y(UdR]ةrlSEq?=@djTSXmWLmvYŧs3XL+VJs֎Tͩ& V_R:7r`:VQ7ϋ='B cowX8~A>MrTjiO8/%- ݟpB9J5Ig1e[SFͤV}Ur-TC#=;"<ݑ*!u bIљv4/ CY{UU:M1C)umX]#M{y!yVD<ٰM<~%D=YCX(Q#NJ!g1AyO`ի '3Tx f$WƝs[1rE| xp$NkZJ*TxV\/qʀ^LrS!J[INIkK=J&0/GSf4o{j3c@*Ժ*0z@9r?JxZ4DıM \yxP?Tj(/X0QVb2 T2m͸SY; lX˶qf+iKZSA rۓ MkAIa k/fOӴx U99هz}$K r-B1zRH;b{xK(o; jz䧪{Gt- nd1^ޫgٱ+ ]J~I?cjX2aBPmxsgEzۺ=a~Em]_HJΘ:ԩ`@hK,!&(A&0=_h?fm_까X{|*KSv]xjE{Ii=̘SN{|);3NQo3pnn[{ $)v[=sՕfKa]x+htN|<;Qt3⚏e4E6+ZʱB4>U,5E6 S-8:'ڤg)vo6}mqGTx8'Rl0)gv;˞nU(?o,tW.zVX/3i*i%}'{x߹u35~JlR>HA|]F2}V' B vzxADwz}]@[W~7̤ -VR1 {o,Y]QUiHQr?O/L<^Rf j`s;iQW5ѧ Dy9 X2ލU dւB]b ('_VXl2Lw4E-h;M { =[b#ڔY-%23=ό~6&WuVP&1dnqnnv۵^hk/pњd8CnzL(ڥ7umWiTҵKZW/2vQ0!b}l/U?/߿9zϏG@\"plCRڱ8>0Imty["UHWwt4ᣡO%;VU9(OV^ԡWc"L9wmƅ%޾%F~ʹf0BIH0n<31I6 %dǚڟY'`E@0ʂS&*7Q^`+)nռK䎢RHn4nϴQI X2 X1CZ 8J' |V]Q0wT6'5JtE|ed$GSqGƍć* ~Nj`9"EU8,Ao)`vi7xIn5L77~oЕ @BE/&7\jqyWԺav U2xɢKV\0_=vAD9 XҠ珓)<}pDC\h ^zN %(4n|s-u>E.R-#*@Rh/I/7 5[z Iߞvx C`x;bs~۪9U9*-铧I6aVCJi|iSQ^/aCW(BNW؟D*yp Jy$)+lt n%=}y9Ra!LʍpUFg.xƘdz 'a'?\M!tXw7a[cWԗ^+=1ws{̚V8Q{uM.BE3cʞxdͥL(!.>X 3% IEANo'*^Yj8Mu;-z0 bZ޷x<' &_xwȱve.z@g; i6}= HcF7!WXG XlYtAVX3Ix`S+Wp3yG\y&^J[з FD'-6Vvpпә2¢0:YD),t)d^JD"4X:Y#\_A1n3QC+X޸ R0Db}JAb0z3_qr?)#A3I6N5g:n Caphz1%Ғ7h3 T{^@)C l24p #Ԃ 6!Ybn ;ȅ \֒+OՄ‹8 c51›J-TM|lM2mOW>Sn){km^=I5rCIx`?|3((R*D`*'dIl%Sy~HsvH@b,Kʪ%X|qDH|Y {KZ͚DD5)HF[m9oS)8 pSPxDMak+o_@%e#GѬU4Kt+ 2Ꙭ,gm,'pI-s SW!.S!J$ʇ};=wcU_9l4jv>Fy ʇg(jիdŀ\heF~x>?ޯK|u[Shs EV8Set>]L&&p#8~ !' އ@ 64Kχz%Ոh6"٭C$$0;!h2-L{Nqϛ_˟6\| T(־~.'j:xonfo%S7){a/('3J2KZWBxnZ|Vo/5ߤ"Rw!vQ`z7e(b*HܥS'w|OpOv9ZaLKDu SjIMȫrS,sɂ8K p hfHm :; h\mAv]҆l\! uWTXCYh?EtcW |MuPq%d-ɾxI Rh!@7"忪dhIM/zLϓ¨\w RJ\ʼHm70^5 #JɈt.=&AsҢԹ*//NVSeGM+˄<' K>g)Q BFqј+4-ZGJMٜĭRM6G $>-$)׽̉\(,WvlQ 4et2Re6[ ⚮bU0f9|+6mazw<'qsfkXU:D]c.Ӱ[&]Nuq3*"P%$GlJU؇_{Ml+ 鳞v zfU2>aj05E>༌moF91-z_iT"r y=z[r8m$Ù@:Ǔzuwan̚"2ڼY~g`r@XUwJp{kzxvir"E½RyjījbY tYD4\C {I Λ*d:j Wߣ%hgJ}¦71C:fC>:qVVfs@eL\jK>̅`L+Z;\m^ }֒;U7gbgp0+8>1F)rU?}]芕/RtD,v3:*p35B>~%r/LeCΧ>D~aY#nLi X*9165"t8Kpo L-L36Pa|M?H x*x,kTP0ӊrf28Fl3T_k}N'/~]zғwϰE ۡL'>O#X2ku=OKf>;(!SR14Z~] 4*&COg!i(a"sT){ک?qؙ{<)V蘅xJqoPW7Zd2;PFAQ.ݿiWey̳ᓇ8Hٹü5Ah_`U eI㺔Wq1hV~Mg{zbxPp%R&nCcM{̮tbB{`huQ<23#2Hм ) $/R.eE 8vp{`vm3a~#{+o#@- &_ _!ԐVȴ-{3 5!$!xo뢲.ndtb#x w09q&S}WIZ]Ilm2nZ=cɋv-ڲez傆̘!v. X*իzYHOՍ邂Qjӆy"7 ⛏.r˵։OF n6(HjC#PIĦGEb (dǮ;zR @? ~[CI b@ ֐VSN\ʼfVV9lcs>r;L`YJ~҆x\w;0|T] oO*`aTi Dx'Ex,rdWOvb@3?Bۣ u0g%`̉_50Ȍ튼(Nv؉gK}Œh@^6Hv@%aZ 8XBeELDnn@BNzTKyQNwC=}fbm—`vv3x/}I'9D~@bhXTRiա1AID brBD*N-*i0N8Cf^+u2gK/ez(OGBr\p%jd`7rhj]?;{׽C/ E$i4z0N?&ex+k*ە dgy०ޘX6X| ]7U]k!J.]TݧpB)' 6ذ0^]L \(!i\QsZHA-:RPG2ޣ4 :-E $ZA`^50ԧ+(A4~= nUQ[Fx\iq /BK3#0~ytr|",PvKn!z4 ŤGİ?uN7ý?8P=:!`yUKr`p6fI=縮V"Ka> %ڟ+ok!#`XLD -cx,)l*rknlj37R G?B# ~F=a9ap N2ޏ;K+Gv%&PTtI]ɍKbxt|{sg.!R%ٖ–k4F%kxG/m3~^xc΀U=(l f暹*ÄUKshs(df^93݇'q̂5@=gTeJ]SSsMikRi=\Oz@o99F2)j;#E&*OQN&.B7t<w+U(=8F98*Ruy6rP)gZ#!:y{՜W҈LS <%Q|[ ˔a]4Nī+Eכּ"&El&Ɓ{W=:̜iD`]#B_(p|}O NhxPa/WxP$rHQbC^-w ;B&͌&B fuj[ҜB~]Q\Nigl I/b߹U|6+W65&,Sx `mhh3/ŽOcnPYIͬJ>6Dґ4/n/E #r]T$}[!d GR]mH Z&K,|qja&^7N4sD)xQ$zwLȤr{2JO_X=%4џ#L sowE0P'-TP$LC>x+e&/o]= )p6b#?Z%ڛ%Ľ̽ϙ* !8=Y#-KBYk׋O'8oZ7d:e?"LmNưlM-$Ś9i3;ߌrwQH2R~DRH-h(3I1lfCVPbÈB?hQ*skC|ZH 9bbg,, 9~`Q Xdp(R7RɞSkSZpSpFsg"/Jz-ZiFC=1*KN 8_7/uiDx-bilRG}#] ꜞVi8RgnjW^ʳ9"4Cam䋗x5;U?> #?Cw4IQ.V.j~ԡbߦ AJ`'gk{1#e?%Jz߈mTU ,dsk4=AfД\ .H &,baRUi<@tɹPgd7D_^fa~cL9țIZb6ƜJ=tݺ2ud)fBb5O ȌsBKx4d`b(A.RqCHv-Gf0\s=vΑ*G"&/TQl>ibIbx2)tv͓᠘DOj~5D{4mM͡&d7<#ؽ̢ nWJfjZ0 }02ӊKs^y_VmY{I@JSBQ]B]~:6 >;0.¶HMTl/%*kq|BH&$BuzJRq("[MƬ۝Yo*v`'qśhs4{64侷噏 7ɆMN_ \i%oq6(|fchl@)&{ɞ#*A|3F %ZPZᶗsZb:;oUYPۂ߁c-t%s3 9T.fpN쉬di GJc0jb hBvsTYͱ|b"lǂ.P1I񐧪dO YļDkCTBD΋ꀙ9݌+%]h;qJZ}ONY_!,YC'-}5@%Jc!\y>m`[L˝o#+0:ڱ8$sD̶1LG=< qP`񣥟A(1Akzь{fiO^o,DC.Ã. C\'0S GMS^5b #Wpfѝ8f 5FsB Ͼ'|Qbf5%c p!ׂ<s32Ke$'1#}N5=JB HNS7)꩕l0, C|Rsӈ-!<xLlYn"=?VnIkKMnptT!\<D VX_S[寫:92Hu S1`5LD ?sיdGo/ENIk,2l1yDbQb ͑Mcz}+y팁kwx&Y2UqFCJm<+L_tpgRI*#zt*)Nh VPuvg7u_U&<.H"O@1?4·^X$TQum"- ;`:Zu =Wl^ZiZꫲ2ء^EB$H5r kg!\ky ZcMg-|1RQ`: X;f1oQZbqڕ|wD|?;l !4nԪR WSuܳtIXI4(23idkecR rK>=~衍ޅȇr>71(ocf, [Xe:3 ۂg+f wδ1y)fjoUp@GwtؿV&e zFXH`z4 x*m.}E3Trap-ma8*?6O9iwXĕ>ailηV0-4+Z>MO6rn&##U\CW7 -6Ş=_F3!ݎ!ҎXʡfd <6bIlFv9"(H?-*c(Fɴ[$#{@0M) 8XJ9hLJ=<Z 3==g! ģdGjȠՒX^JW#֕6µs1G,͟N5)(Y{-.RNDIQ]okn]^_ii"9`TuPtfa7U/FEIڏ93!7H}]YcA^f6?.'w-IӂzTWEs-$AjZ.$Lj|pf)_ǁAEmcB9[!EMy>=9m&R): '\-0N,l;r3F{cmSD^)[1R.SEo}Z(Xk((B[RX3=ȚWd_fFjMտmv!d>bR$lss?N͓z\ɎFзq6Ps٫s*ѝ#9GjmƐO_aQH9Z0vg,+t>sp!g Br$4>#R9C \CއwB$"[[,DQO}RT os.JU:4TCSܤAf;:GjO^10$A__<bk|<2ɉf{"L^N-vd1J3%b^n+HrCn4躗REvHkd,#F!'Zk)%i7:?vQbv`vN"5W3يc3;xFHJGđ; +n۶󙡱ܱGpUÅu lb=:xr7PpD=GEp{v2}#>%Ф1-K&d;{T8FY_Kg)YX%Ib " ,ď&8aZ`0dPȪp9鍋DpM38PtnHB-ݖ? KG}3IRp0_pQ_, fQٸn*Ys~NpA<7 =ۏ'q¨q!PC8tlM~:TNX|)-=imJ2 |X/ͳo?l%DG7@&PCs䌓xlDsj %͊03 i<** n M=bxT:uGʜΤ=a{ӗ/ vڕwX/gKku#*AHM5+}rߡ=@ױo*Jt 1jf(A$Y&q3X@P$Ȗ6ٿj%/)9/y lR|rOə4+bkZCH&cŽ +Up њlX$t ⶬ !:ּ|Pt2좂yW`ȾzX6r hY vKʀpy|p+rL4@ggV!W'hO. OfLׇ*ST39H+} 1 @!KMѮbǵa`I{% MNNlu+`3n?޴nBCJS~ .+*ϒM>)ԫHWa0pɐ;գ ^ X4qd>;OOo 1o8hkMගț3WYlm#}Z TSMA߮ :L>zharG\ifUYj݄[ i8ęGfrYV1[9J _' F6X b~FA7VdJMk؄eWφ]_9)٭LfI:K+ fmYDy5WsTǟea48˅emV(+u+M2g(utߓ\zBZV2wɾtlSOq (]~^jG'İDdž(TOz:$b$eX Ĭ /#ʅ൞F'%kq5,\1VvQE7?/|X})p@Eĕj ;~W&: @p*z?¥,5)Y|彌k5!q(*Uk <1kgN}UV` egI4*(ʀqi\TuۺdBV?9z$a $G){\SX7K &":W*K08( xK :Wuo]`>l{r1Jv;L~pccD=QY&\-( rdS,撠Mcu'=V7ؕL΢ZwLX%e ;L܄2~Ys^ڎ> }?ٯn^LgAyT=QI,>gQ:eIȪJd0 O m'qu`)aմi{gVO٘1fYgg&9asug=m1w!wǿ'o027x7즣?5FI+C!b%wتjS f~e/^ r24sGVT7 #ͻߤX#^T(,V} *ŭTpOmIJt{'RJ-`=s5U['^tˍrkQނ#bI5`YP s舨 =ԃh)X4GAعZৃY(#Ȱ05xYOڶ-aAnYN1dmt7ͧ,+h[21clݺ%ع:C H1v$kP#?4=L;A`5ʼnZp<pDZrc0wW2T [xw$h%9fbF_I)!#u]%\qðXI&MݕUKDVQ* D UpK@~4/6\\>MgMeT {l j1Z]_9`~o%(KrdEHE5 @i]7n;Fh{.Om't+6@X&>eM>XD\Y%*B/IO鈢$/HF7E(NDŽ8CȎ&9J,~#^EeAV]! O<|R/ע<{zfsHya¸0H_l $}|ped;B6#˜(x.f\<;L5O9 +#Ա1c!]XRFx+#bI@\nP^aa7]`w o m2j㢤i'~E;O v,uvXăP0 KXJi$E^H2ee7"@s=ѸMu׎ gڭt;&DtBR|DŽ0( |^Z_n[''|T1P5qQЖHd.尖m06Wp:87wR[]rכPSb\ő\y5hZHxwl"jo±NRiL-%沢lܨF^6870\ttZ;NP猟ҏ+1D#{'֩]zs/#D`V`8&1GFxƝ1ho_@+u7EԮz:aՇI%|f3ضfS"|!:d@--^hLPh GqEwct \;K:gxտU|3i'l`?/O:> Qo4ppmOMSfApcCn#ܔ[׽U4d-Rԅ!\s ?)E@ |"T6y@TWg} -\j?hOPz֗Pwz+b47բfmJ#2Og6sJR$NBs"M,#sw#\S\PϏ$Sfyq\Oe=~n|]kR` Kʋ!')@Gq|_n%WXRW%5D{7=9F+;wu}.&5GZw[1hL8^ 7(Vh.YI5 H7C#P:߭yD@ͱ53Y_Oh2p^t"6.Q3 7a%-,u![,H|:PLƣ1v`gyyBgG3E4RRHf ȺXz.@;9Le`N5x =Ԑ~#sEӿ(LCcv8%g_g+@Zb/HKio(ʭT?9`R2v:s2>k!],$@-.LZ-xݒ8j6ԅ]ъ<,'Ґ%$c[l2:祿32{Ǧ#x'{pAqȑضtt5 ]r1IQ| h$ Gf吚8{ Qhqxݎ΃w4Y4XT~u(]*AyB9/I,޻ bmh`$t`ֺ2l~o)q$Υ\#Wr$"_#|fH.UMdVpVպvQ?`dSQ9.khyo{q"^/Ofe5|#Im6C}1_67@7 1/گ^㹰iG&0.XUqə̘6je.X0X#|vd44IfK٭IA]!|qS+r[LhyIL't1TemLaԙBW{^z@d[ )+bf|2eמy4X|{iC[4|?UDM4FL}6f4+;mŢA7QwQ:1K:IS}ˆFu( #D$2s!(2o+JXrVuvkvKLޝÑYNJ 2]=S|?/Qze [|y$OPBfr?L2~dai\z&SUWD@1{X 8pkH:t3ȻCnCQvd_CfسV5쏼ndcAѭc LGS_"pA0̒ҏKfajԁaAΒ)Q+F Myڰ 颫ee28;8-flj O." 9ΉJLmۊ[⺡NVC&΍ 2'45ޓ^a`il gԯ^NY_cr2߈[Eopͦ픈3fC=ދϧ4ѨP mmy/sS&2\v*$j;%2$*!z,nKַPI !pY^Ϭ[ 2(htiUpu쑻& ᱝ:cqf}`苾'"RRcIh읙 ɏ)=@]y2dYWmYYgwYrHRj{Gv8=6vBzJ輣Vվ Xx$͢샑DuINir/ܣ ' zɵ=co ňnEܦqW9`:@^ 0r wunڮ52^L\ݝ4: rSN/ ULxFrN*x |'Dȕx0ta>~'} ,Q7 wJ<1z[gS#os'n3~ZEӗcqt@;VT5d|^#ΫX[4`>/t%$X3XcGK}ayWZ}́AmgtMaԨ ɟ+TrEF)暥`F1 Tz2ֿAX[e5MF7iEHSQҷ4>9T+^آA4Qq ,ehgHGٚ,JH\6/cAre~6㇝F}bW܏XL+p63iBms9"_b$#5lH2(GBKh  ( t1 |8x,PzQL$λs57i"X!k  b5&)5@OMMK/2'2f-ST<xZnٞ)muiYATef_O1r옟6wfZpݗπٍGZˉy" iFd^ҤL!\1 M+Q[r1:VQINϞ]]W /wmOW9'r)8YP($jjPDxXUFwu@3e3ȡ{S;1@Pi@vuzZ؀%aAidckʳ 5m*Oq Vt .Q^ Q{żolmŕDRىwO'(8D.)dT2s+ӳcSfwpeumIL1qW} .a<Ùyz쒰%skhvY\گ ^ϺǓ+(]X6I.l̊`]? K)0 ~w֎*jҪ+sD9!S*K w%l`x:M Y8#Jbh|5 a)kͪWc%NMU7/QcR y<>K*~ĉ 8烝l 0HEr]RLMp6KAͼ'5oPXt4bg??7\#h8t'GğH$RꇃX;E<S 󨏊ea\>.NP#ICb5.t eY  wVsժEY6zۮxI>e෌$XٗEm:5). ][V5!u~Eݩ@!7{@LtKɖ"'NBk] -F9>oϺ`u<nr?:Лm&eAYܔMT} {]yz8>9@<',n4)xsxO5jv%{WcSPz/ p}KrMTAh}Qmwb,]L[l2=uPrz$iZ|8I2ܢ:4p_UuL+¤q/{jP.ŦE_|A=och5,h4W62D7b8jNsX(XJ ><gQT9 Bu.mcs ؕӫ[=&UK }VbN& phLPd u$$QrvZl@)17T؆mI$mK.M0 (81YBEAҨZ[D94TCxsxoC^+1Y=1>8}}RYN[ـ83RzPT^5!{9pv8dmxhkNdB, 7 H[FS򇸵/66"}GyYED"ٔ;$ EMd^ 'cpNȜooB)f2]a $O 竩7LPϭ[/72.o JjK%`{ZH!<|&]Kn^Inû^BLŭp5Z+ UXboTGj{ƴx#c ]Y8J ?y\K:SX_ |Di&B,<'@{91nA#Zrl`'$7jۀ2]<=Gf'Qpa3f'moKtk1 $+jz@,N ڳmRWn~`|a4l{( 0'GuzV/~2-'яޛ4Y3뒭Dɖ o sf8 #c`vRL$-ݱ23Qe^ްJةmW'A.xT]uOTl]Hd^2Mzoj큊cX 3 pvmol=P^+M%v}e(wƮk Ld+Uxw@֫/ĭlފ{ADբ-$"=L=s}{8UڜVXUރL%Vu 6YΡ.c"]NC4{Eg, #TG9ܾGd3+^HRby ,5U/`}6DBQvYI,ۂ1'AX{2Y\(w7xǔ%@-#GV&\G+eKt1:(Na:4_Ӿ:ZVB规KX5*lqV؀J)pIjmHШ=rHoao(P4hI!@,x**6 K ᴬ2嵅6!쐁r-2).#悑ٰL!W6b:V!}Ĵw̒M~93.o[h<+}+UL,F^fn CnI,$uڵ\=hǓ.Q&lz>/CmY~z7Q~fu[V*0I@ۉ3V+j YZ