libselinux-static-2.9-8.el8 >  A cU]eȸRv(+Qܒd/c5p%&)30h݆`4&CŷP7Td 9Q[΁,fZ<11B bvtf3E2$v6&8($qX}$MwdZ',wVG)Wsذ6Mh8#xR6!:0Ж]E3|~1ddr +~9ߤ$TN+m7֓Q+S̙0#:4˖(Kt{jTn[D/<m^#1'Tp}(_ݏBT8 Ԙy /t^u;*ZI5S۪xE&;q)N4c4334df20379fc96da6d5278ab461516a26e9c4e5c198d5e47013dcee897fdc3e622133558cca9bd49bf706a2026d6240aaaa1c4 \cU])w6' YA I Bj"6U73@6<?_3EwT[tc.vg wY Ww|m'#~(oZEp($w.,)@'=2f_Ck4 MO cKVd=Bm}=P֒D1qiq;[WZ?T5jWsw"ebT^sI/V! 4% ){Eb<׺Be, i 7;:~1Ɠ!y##f~ bW#1/fcs3C6;%DM/ol~@1j JIV< X .}| meW]"o/B&MK8E4/^ӞH YaZ1z_F֖jbeb{/]/ko䋇-[4C~S |w6 p>p9[`?[Pd  E IOTX Z \ `  (8N9 N:kXNGYHYIY XYYY\Y,]Y0^Y=bYGdZeZfZlZtZuZvZ[[[ [LClibselinux-static2.98.el8Static libraries used to build SELinuxThe libselinux-static package contains the static libraries needed for developing SELinux applications.c%x86-01.mbox.centos.org jCentOSCentOSPublic DomainCentOS Buildsys Unspecifiedhttps://github.com/SELinuxProject/selinux/wikilinuxi686 jc%a1d50994948dfd8867c0cde655ca9b761057396ce0e1fcf9fe83655f9ab15fb2rootrootlibselinux-2.9-8.el8.src.rpmlibselinux-staticlibselinux-static(x86-32)    libselinux-devel(x86-32)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)2.9-8.el83.0.4-14.6.0-14.0-15.2-14.14.3c@c.b_@_l@]X]@\@[@[ā@[ @[,[@[Zz@ZK@ZZZI@Z@Z}@Zz@Zu@ZTZOhZfY@Y˒Y(@YJYV@Y@Y|xY{'@Yx@Y.X-Xg@X@X @XN@X@XXx@Xv@XJX43@WH@W9W@Wq@Wm Wk@W,@W'A@W#LW@VяVIVɦV=@VVii@V@V UU@U4@Ua@UQ@U8U6;UTS@S@SSShShSXS 4@S@R@RUR&RʚRkR%R@RMUM@M@M@M@MlMQ0@MGM5ML@L-@L@L*@LLq@LN@LF@L$@KKKrK@KKqK}+KTM@KA@K@JJJJG@JG@JG@JjJS8JS8JB@J@JMIܑI@IԨIbI̿I@IV@III@I@I2I@IcGIcGIcGIG@IG@IBR@I1.I!\I!\I-HHHe@He@He@He@H@HHH@Ht@HsVHgy@H^>H^>H-w@H!H @H@G@GG#GF@G@GGƢ@GƢ@G­G@GGD@G@G@G@G,@G,@G@GG@GZ@GZ@GeGeG|@G|@GO@GO@G<4G<4G0W@G'@FF@FIFFFFF&@FF@FvFFS@FF@FF]F@FtFFzh@Fw@Fm9@F` @F; @F-@F,F@F@FF*FF @F @FoE@EE@E4@EE?Eɿ@EEEEElEx@E&E=E=E@Ex@EvEnEYEK/@E>@E4EE EgEgEDfDDDDq@D@DB@DB@DB@DB@D{DDX@D4D4D4DD@D@D~D~D|3DvDu@Dr@Dr@DlaDk@DiD`@D_2D_2DX@DWID?D;@D'Dj@C@CCC-Cǖ@Cǖ@C[CCC8@C@CC @CCqC @CCCC@CBC@C@C|pC|pC{@CyCp@Cp@CoACkM@CiCf@C_oC_oC^@C^@CX@CWCS@COCFc@CFc@CECECBnCA@C;@C:C*C&@C&@C%mCC@CC C a@C a@C&B=BۙB@B@Br!Br!Br!Bn-@BgB] B] BZfBS@BQ,@BIC@BAZ@B9q@B9q@B06B-B$Y@B#BB@B@B LB LBBAA)@A@A@AA@A@A@AyAҜ@AJA@A`A`AA@AA@Ak@AAA@AvA@AAoA]FA]FAQi@AN@AI@AF@AF@AA@A>@A>@A7 @A7 @A5A4h@A3A3A/"@A-A+-A(A$@A!@A A A@A@@@q@7@@@@6@@@A@)@@@@@@@@@~y@@~y@@~y@@}'@s@@s@@s@@l@@ia@@b@b@b@O@@O@@Dw@@9@@,@@ @/@@???E@?E@?٭???q@??@?@?@?}d?z?a@?M?D@>S@Vit Mojzis - 2.9-8Vit Mojzis - 2.9-7Vit Mojzis - 2.9-6Vit Mojzis - 2.9-5Vit Mojzis - 2.9-4Vit Mojzis - 2.9-3Petr Lautrbach - 2.9-2.1Petr Lautrbach - 2.9-1Petr Lautrbach - 2.8-6Petr Lautrbach - 2.8-5Petr Lautrbach - 2.8-4Petr Lautrbach - 2.8-3Petr Lautrbach - 2.8-2Petr Lautrbach - 2.8-1Petr Lautrbach - 2.8-0.rc3.1Petr Lautrbach - 2.8-0.rc2.1Petr Lautrbach - 2.8-0.rc1.1Petr Lautrbach - 2.7-14Petr Lautrbach - 2.7-13Petr Lautrbach - 2.7-12Igor Gnatenko - 2.7-11Fedora Release Engineering - 2.7-10Igor Gnatenko - 2.7-9Iryna Shcherbina - 2.7-8Mamoru TASAKA - 2.7-7Petr Lautrbach - 2.7-6Petr Lautrbach - 2.7-5Petr Šabata - 2.7-4Zbigniew Jędrzejewski-Szmek - 2.7-3Zbigniew Jędrzejewski-Szmek - 2.7-2Petr Lautrbach - 2.7-1Fedora Release Engineering - 2.6-10Florian Weimer - 2.6-9Petr Lautrbach - 2.6-8Fedora Release Engineering - 2.6-7Petr Lautrbach - 2.6-6Petr Lautrbach - 2.6-5Petr Lautrbach - 2.6-4Petr Lautrbach - 2.6-3Petr Lautrbach - 2.6-2Petr Lautrbach - 2.6-1Fedora Release Engineering - 2.5-18Stephen Gallagher - 2.5-17Vít Ondruch - 2.5-16Petr Lautrbach - 2.5-15Charalampos Stratakis - 2.5-14Petr Lautrbach - 2.5-13Petr Lautrbach 2.5-12Petr Lautrbach 2.5-11Fedora Release Engineering - 2.5-10Petr Lautrbach - 2.5-9Petr Lautrbach - 2.5-8Petr Lautrbach - 2.5-7Petr Lautrbach - 2.5-6Petr Lautrbach - 2.5-5Petr Lautrbach - 2.5-4Petr Lautrbach - 2.5-3Petr Lautrbach 2.5-2Petr Lautrbach 2.5-1Petr Lautrbach 2.5-0.1.rc1Fedora Release Engineering - 2.4-8Vít Ondruch - 2.4-7Petr Lautrbach - 2.4-6Robert Kuska - 2.4-5Petr Lautrbach 2.4-4Petr Lautrbach 2.4-3Adam Jackson 2.4-2Petr Lautrbach 2.4-1.1Fedora Release Engineering - 2.3-11Petr Lautrbach 2.3-10Petr Lautrbach 2.3-9Petr Lautrbach 2.3-8Than Ngo - 2.3-7Vít Ondruch - 2.3-6Miroslav Grepl - 2.3-5Fedora Release Engineering - 2.3-4Fedora Release Engineering - 2.3-3Kalev Lember - 2.3-2Dan Walsh - 2.3-1Miroslav Grepl - 2.2.2-8Vít Ondruch - 2.2.2-7Dan Walsh - 2.2.2-6Dan Walsh - 2.2.2-5Dan Walsh - 2.2.2-4Dan Walsh - 2.2.2-3Dan Walsh - 2.2.2-2Dan Walsh - 2.2.2-1Adam Williamson - 2.2.1-6Dan Walsh - 2.2.1-5Dan Walsh - 2.2.1-4Dan Walsh - 2.2.1-3Dan Walsh - 2.2.1-2Dan Walsh - 2.2.1-1Dan Walsh - 2.2-1Dan Walsh - 2.1.13-21Dan Walsh - 2.1.13-20Dan Walsh - 2.1.13-19Dan Walsh - 2.1.13-17Fedora Release Engineering - 2.1.13-17Dan Walsh - 2.1.13-16Dan Walsh - 2.1.13-15Dan Walsh - 2.1.13-14Dan Walsh - 2.1.13-13Dan Walsh - 2.1.13-12Dan Walsh - 2.1.13-11Dan Walsh - 2.1.13-10Dan Walsh - 2.1.13-9Dan Walsh - 2.1.13-8Dan Walsh - 2.1.13-7Dan Walsh - 2.1.13-6Dan Walsh - 2.1.13-5Dan Walsh - 2.1.13-4Dan Walsh - 2.1.13-3Dan Walsh - 2.1.13-2Dan Walsh - 2.1.13-1Dan Walsh - 2.1.12-20Dan Walsh - 2.1.12-19Dan Walsh - 2.1.12-18Dan Walsh - 2.1.12-17Dan Walsh - 2.1.12-16Dan Walsh - 2.1.12-15Dan Walsh - 2.1.12-14Dan Walsh - 2.1.12-13Dan Walsh - 2.1.12-12Dan Walsh - 2.1.12-11Dan Walsh - 2.1.12-10Dan Walsh - 2.1.12-9Dan Walsh - 2.1.12-8Dan Walsh - 2.1.12-7Dan Walsh - 2.1.12-6Dan Walsh - 2.1.12-5Dan Walsh - 2.1.12-4Dan Walsh - 2.1.12-3Dan Walsh - 2.1.12-2Dan Walsh - 2.1.12-1David Malcolm - 2.1.11-6David Malcolm - 2.1.11-5Fedora Release Engineering - 2.1.11-4Dan Walsh - 2.1.11-3Dan Walsh - 2.1.11-2Dan Walsh - 2.1.11-1Dan Walsh - 2.1.10-5Dan Walsh - 2.1.10-4Dan Walsh - 2.1.10-3Dan Walsh - 2.1.10-2Dan Walsh - 2.1.10-1Dan Walsh - 2.1.9-9Dan Walsh - 2.1.9-8Dan Walsh - 2.1.9-7Kay Sievers - 2.1.9-6Dan Walsh - 2.1.9-5Harald Hoyer 2.1.9-4Dan Walsh - 2.1.9-3Dan Walsh - 2.1.9-2Dan Walsh - 2.1.9-1Dan Walsh - 2.1.8-5Dan Walsh - 2.1.8-4Dan Walsh - 2.1.8-2Dan Walsh - 2.1.8-1Dan Walsh - 2.1.7-2Dan Walsh - 2.1.7-1Dan Walsh - 2.1.6-4Dan Walsh - 2.1.6-3Dan Walsh - 2.1.6-2Dan Walsh - 2.1.6-1Dan Walsh - 2.1.5-5Ville Skyttä - 2.1.5-4Dan Walsh - 2.1.5-3Dan Walsh - 2.1.5-2Dan Walsh - 2.1.5-1Dan Walsh - 2.1.4-2Dan Walsh - 2.1.4-1Dan Walsh - 2.1.0-1Dan Walsh - 2.0.102-6Dan Walsh - 2.0.102-5Dan Walsh - 2.0.102-4Dan Walsh - 2.0.102-3Dan Walsh - 2.0.102-2Dan Walsh - 2.0.102-1Dan Walsh - 2.0.101-1Dan Walsh - 2.0.99-5Dan Walsh - 2.0.99-4Dan Walsh - 2.0.99-3Dan Walsh - 2.0.99-2Dan Walsh - 2.0.99-1Fedora Release Engineering Dan Walsh - 2.0.98-3Dan Walsh - 2.0.98-2Dan Walsh - 2.0.98-1Dan Walsh - 2.0.97-1Dan Walsh - 2.0.96-9Dan Walsh - 2.0.96-8jkeating - 2.0.96-7Adam Tkac - 2.0.96-6Dan Walsh - 2.0.96-5Dan Walsh - 2.0.96-4David Malcolm - 2.0.96-3Dan Walsh - 2.0.96-2Dan Walsh - 2.0.96-1Dan Walsh - 2.0.94-1Dan Walsh - 2.0.93-1Dan Walsh - 2.0.92-1Dan Walsh - 2.0.91-1Dan Walsh - 2.0.90-5Dan Walsh - 2.0.90-4Dan Walsh - 2.0.90-3Dan Walsh - 2.0.90-2Dan Walsh - 2.0.90-1Dan Walsh - 2.0.89-2Dan Walsh - 2.0.89-1Dan Walsh - 2.0.88-1Dan Walsh - 2.0.87-1Dan Walsh - 2.0.86-2Dan Walsh - 2.0.86-1Fedora Release Engineering - 2.0.85-2Dan Walsh - 2.0.85-1Dan Walsh - 2.0.84-1Dan Walsh - 2.0.82-2Dan Walsh - 2.0.82-1Dan Walsh - 2.0.81-1Dan Walsh - 2.0.80-1Dan Walsh - 2.0.79-6Dan Walsh - 2.0.79-5Dan Walsh - 2.0.79-4Dan Walsh - 2.0.79-3Dan Walsh - 2.0.79-1Dan Walsh - 2.0.78-5Dan Walsh - 2.0.78-4Dan Walsh - 2.0.78-3Dan Walsh - 2.0.78-2Dan Walsh - 2.0.78-1Fedora Release Engineering - 2.0.77-6Dan Walsh - 2.0.77-5Dan Walsh - 2.0.77-3Dan Walsh - 2.0.77-2Dan Walsh - 2.0.77-1Dan Walsh - 2.0.76-6Dan Walsh l - 2.0.76-5Dan Walsh - 2.0.76-4Ignacio Vazquez-Abrams - 2.0.76-2Dan Walsh - 2.0.76-1Dan Walsh - 2.0.75-2Dan Walsh - 2.0.75-1Dan Walsh - 2.0.73-1Dan Walsh - 2.0.71-6Dan Walsh - 2.0.71-5Dan Walsh - 2.0.71-4Dan Walsh - 2.0.71-3Dan Walsh - 2.0.71-2Dan Walsh - 2.0.71-1Dan Walsh - 2.0.70-1Dan Walsh - 2.0.69-2Dan Walsh - 2.0.69-1Dan Walsh - 2.0.67-4Dan Walsh - 2.0.67-3Dan Walsh - 2.0.67-2Dan Walsh - 2.0.67-1Dan Walsh - 2.0.65-1Dan Walsh - 2.0.64-3Dan Walsh - 2.0.64-2Dan Walsh - 2.0.64-1Dan Walsh - 2.0.61-4Dan Walsh - 2.0.61-3Dan Walsh - 2.0.61-2Dan Walsh - 2.0.61-1Dan Walsh - 2.0.60-1Dan Walsh - 2.0.59-2Dan Walsh - 2.0.59-1Dan Walsh - 2.0.58-1Dan Walsh - 2.0.57-2Dan Walsh - 2.0.57-1Dan Walsh - 2.0.56-1Dan Walsh - 2.0.55-1Dan Walsh - 2.0.53-1Dan Walsh - 2.0.52-1Dan Walsh - 2.0.50-1Dan Walsh - 2.0.49-2Dan Walsh - 2.0.49-1Dan Walsh - 2.0.48-1Dan Walsh - 2.0.47-4Adel Gadllah - 2.0.47-3Dan Walsh - 2.0.47-2Dan Walsh - 2.0.47-1Dan Walsh - 2.0.46-6Dan Walsh - 2.0.46-5Dan Walsh - 2.0.46-4Dan Walsh - 2.0.46-3Dan Walsh - 2.0.46-2Dan Walsh - 2.0.46-1Dan Walsh - 2.0.45-1Dan Walsh - 2.0.43-1Dan Walsh - 2.0.42-1Dan Walsh - 2.0.40-1Dan Walsh - 2.0.37-1Dan Walsh - 2.0.36-1Dan Walsh - 2.0.35-2Dan Walsh - 2.0.35-1Dan Walsh - 2.0.34-3Dan Walsh - 2.0.34-2Dan Walsh - 2.0.34-1Dan Walsh - 2.0.33-2Dan Walsh - 2.0.33-1Dan Walsh - 2.0.31-4Dan Walsh - 2.0.31-3Dan Walsh - 2.0.31-2Dan Walsh - 2.0.30-2Dan Walsh - 2.0.30-1Dan Walsh - 2.0.29-1Dan Walsh - 2.0.24-3Dan Walsh - 2.0.24-2Dan Walsh - 2.0.24-1Dan Walsh - 2.0.23-3Dan Walsh - 2.0.23-2Dan Walsh - 2.0.23-1Dan Walsh - 2.0.22-1Dan Walsh - 2.0.21-2Dan Walsh - 2.0.21-1Dan Walsh - 2.0.18-1Dan Walsh - 2.0.16-1Dan Walsh - 2.0.14-1Dan Walsh - 2.0.13-2Dan Walsh - 2.0.13-1Dan Walsh - 2.0.12-2Dan Walsh - 2.0.12-1Dan Walsh - 2.0.11-1Dan Walsh - 2.0.9-2Dan Walsh - 2.0.9-1Dan Walsh - 2.0.8-1Dan Walsh - 2.0.7-2Dan Walsh - 2.0.7-1Dan Walsh - 2.0.5-2Dan Walsh - 2.0.5-1Dan Walsh - 2.0.4-1Dan Walsh - 2.0.2-1Dan Walsh - 2.0.1-1Dan Walsh - 2.0.0-1Dan Walsh - 1.34.0-2Dan Walsh - 1.34.0-1Dan Walsh - 1.33.6-1Dan Walsh - 1.33.5-1Dan Walsh - 1.33.4-3Dan Walsh - 1.33.4-2Dan Walsh - 1.33.4-1Dan Walsh - 1.33.3-3Dan Walsh - 1.33.3-2Dan Walsh - 1.33.3-1Jeremy Katz - 1.33.2-4Dan Walsh - 1.33.2-3Dan Walsh - 1.33.2-2Dan Walsh - 1.33.2-1Dan Walsh - 1.33.1-2Dan Walsh - 1.33.1-1Dan Walsh - 1.32-1Jesse Keating - 1.30.29-2Dan Walsh - 1.30.29-1Jeremy Katz - 1.30.28-3Dan Walsh - 1.30.28-2Dan Walsh - 1.30.28-1Jeremy Katz - 1.30.27-2Dan Walsh - 1.30.27-1Jesse Keating - 1.20.26-2Dan Walsh - 1.30.25-1Dan Walsh - 1.30.24-1Dan Walsh - 1.30.22-2Dan Walsh - 1.30.22-1Dan Walsh - 1.30.20-1Jeremy Katz - 1.30.19-5Jeremy Katz - 1.30.19-4Dan Walsh 1.30.19-3Dan Walsh 1.30.19-2Dan Walsh 1.30.19-1Dan Walsh 1.30.15-5Dan Walsh 1.30.15-4Dan Walsh 1.30.15-3Dan Walsh 1.30.15-2Dan Walsh 1.30.15-1Dan Walsh 1.30.12-2Dan Walsh 1.30.12-1Dan Walsh 1.30.11-2Dan Walsh 1.30.11-1Dan Walsh 1.30.10-4Dan Walsh 1.30.10-3Dan Walsh 1.30.10-2Dan Walsh 1.30.10-1Dan Walsh 1.30.8-1Dan Walsh 1.30.7-2Dan Walsh 1.30.7-1Dan Walsh 1.30.6-2Dan Walsh 1.30.6-1Dan Walsh 1.30.5-1Dan Walsh 1.30.3-3Dan Walsh 1.30.3-2Dan Walsh 1.30.3-1Dan Walsh 1.30.1-2Dan Walsh 1.30.1-1Dan Walsh 1.30-1Jesse Keating - 1.29.7-1.2Jesse Keating - 1.29.7-1.1Dan Walsh 1.29.7-1Dan Walsh 1.29.6-1Dan Walsh 1.29.5-2Dan Walsh 1.29.5-1Dan Walsh 1.29.4-1Dan Walsh 1.29.3-2Dan Walsh 1.29.3-1Dan Walsh 1.29.2-4Dan Walsh 1.29.2-3Dan Walsh 1.29.2-2Dan Walsh 1.29.2-1Dan Walsh 1.29.1-3Jesse Keating Dan Walsh 1.29.1-1Dan Walsh 1.28-1Dan Walsh 1.27.28-2Dan Walsh 1.27.28-1Dan Walsh 1.27.26-1Dan Walsh 1.27.25-1Dan Walsh 1.27.23-1Dan Walsh 1.27.22-4Dan Walsh 1.27.22-3Dan Walsh 1.27.22-2Dan Walsh 1.27.22-1Dan Walsh 1.27.21-2Dan Walsh 1.27.21-1Dan Walsh 1.27.20-1Dan Walsh 1.27.19-1Dan Walsh 1.27.18-1Dan Walsh 1.27.17-4Dan Walsh 1.27.17-2Dan Walsh 1.27.17-1Dan Walsh 1.27.14-3Dan Walsh 1.27.14-2Dan Walsh 1.27.14-1Dan Walsh 1.27.13-2Dan Walsh 1.27.13-1Dan Walsh 1.27.12-1Dan Walsh 1.27.9-2Dan Walsh 1.27.9-1Dan Walsh 1.27.7-1Dan Walsh 1.27.6-1Dan Walsh 1.27.4-1Dan Walsh 1.27.3-1Dan Walsh 1.27.2-1Dan Walsh 1.27.1-3Dan Walsh 1.27.1-2Dan Walsh 1.26-6Dan Walsh 1.26-5Dan Walsh 1.26-3Dan Walsh 1.26-2Dan Walsh 1.25.7-1Dan Walsh 1.25.6-1Dan Walsh 1.25.5-1Dan Walsh 1.25.4-1Dan Walsh 1.25.3-2Dan Walsh 1.25.3-1Dan Walsh 1.25.2-2Dan Walsh 1.25.2-1Dan Walsh 1.24.2-1Dan Walsh 1.24.1-1Dan Walsh 1.23.11-1Dan Walsh 1.23.10-3Dan Walsh 1.23.10-2Dan Walsh 1.23.10-1Dan Walsh 1.23.8-1Dan Walsh 1.23.7-3Dan Walsh 1.23.7-2Dan Walsh 1.23.7-1Dan Walsh 1.23.6-1Dan Walsh 1.23.5-1Dan Walsh 1.23.4-1Dan Walsh 1.23.2-3Dan Walsh 1.23.2-2Dan Walsh 1.23.2-1Dan Walsh 1.23.1-1Dan Walsh 1.22-1Dan Walsh 1.21.13-1Dan Walsh 1.21.12-1Dan Walsh 1.21.11-2Dan Walsh 1.21.11-1Dan Walsh 1.21.10-3Dan Walsh 1.21.10-1Dan Walsh 1.21.9-2Dan Walsh 1.21.9-1Dan Walsh 1.21.8-1Dan Walsh 1.21.7-1Dan Walsh 1.21.5-1Dan Walsh 1.21.4-1Dan Walsh 1.21.2-1Dan Walsh 1.21.1-3Dan Walsh 1.21.1-2Dan Walsh 1.21.1-1Dan Walsh 1.20.1-3Dan Walsh 1.20.1-2Dan Walsh 1.20.1-1Dan Walsh 1.19.4-1Dan Walsh 1.19.3-3Dan Walsh 1.19.3-2Dan Walsh 1.19.3-1Dan Walsh 1.19.2-1Dan Walsh 1.19.1-6Dan Walsh 1.19.1-4Dan Walsh 1.19.1-2Dan Walsh 1.19.1-1Steve Grubb 1.18.1-5Dan Walsh 1.18.1-4Dan Walsh 1.18.1-3Steve Grubb 1.18.1-2Dan Walsh 1.18.1-1Steve Grubb 1.17.15-2Steve Grubb 1.17.15-2Dan Walsh 1.17.15-1Dan Walsh 1.17.14-1Dan Walsh 1.17.13-3Dan Walsh 1.17.13-2Dan Walsh 1.17.13-1Dan Walsh 1.17.12-2Dan Walsh 1.17.12-1Dan Walsh 1.17.11-1Dan Walsh 1.17.10-1Dan Walsh 1.17.9-2Dan Walsh 1.17.9-1Dan Walsh 1.17.8-2Dan Walsh 1.17.8-1Dan Walsh 1.17.7-1Dan Walsh 1.17.6-1Dan Walsh 1.17.5-1Dan Walsh 1.17.4-1Dan Walsh 1.17.3-1Dan Walsh 1.17.2-1Dan Walsh 1.17.1-1Dan Walsh 1.16.1-1Colin Walters 1.16-1Dan Walsh 1.15.7-1Dan Walsh 1.15.6-1Dan Walsh 1.15.5-1Dan Walsh 1.15.4-1Dan Walsh 1.15.3-2Dan Walsh 1.15.3-1Dan Walsh 1.15.2-1Dan Walsh 1.15.1-3Dan Walsh 1.15.1-2Dan Walsh 1.15.1-1Dan Walsh 1.14.1-1Dan Walsh 1.13.4-1Elliot Lee Dan Walsh 1.13.3-2Dan Walsh 1.13.2-1Dan Walsh 1.13.1-1Dan Walsh 1.12-2Dan Walsh 1.12-1Dan Walsh 1.11.4-1Dan Walsh 1.11.3-1Dan Walsh 1.11.2-1Dan Walsh 1.11-4Dan Walsh 1.11-3Dan Walsh 1.11-2Dan Walsh 1.11-1Dan Walsh 1.10-2Dan Walsh 1.10-1Dan Walsh 1.9-1Dan Walsh 1.8-1Dan Walsh 1.6-6Dan Walsh 1.6-5Dan Walsh 1.6-4Dan Walsh 1.6-3Dan Walsh 1.6-2Elliot Lee Dan Walsh 1.4-11Elliot Lee Dan Walsh 1.4-9Dan Walsh 1.4-8Dan Walsh 1.4-7Dan Walsh 1.4-6Dan Walsh 1.4-5Dan Walsh 1.4-4Dan Walsh 1.4-3Dan Walsh 1.4-2Dan Walsh 1.4-1Dan Walsh 1.3-2Dan Walsh 1.3-1Dan Walsh 1.2-9Dan Walsh 1.2-8Dan Walsh 1.2-7Dan Walsh 1.2-6Dan Walsh 1.2-5Dan Walsh 1.2-4Dan Walsh 1.2-3Dan Walsh 1.2-2Dan Walsh 1.2-1Dan Walsh 1.0-1- restorecon: Fix memory leak - xattr_value (#2137965)- Restorecon: Ignore missing directories when -i is used (#2137965)- Describe fcontext regular expressions (#1904059) - Strip spaces before values in config (#2012145)- Deprecate security_compute_user(), update man pages (#1879368)- Eliminate use of security_compute_user() (#1879368)- Fix mcstrans secolor examples in secolor.conf man page (#1770270)- Use Python distutils to install SELinux python bindings (#1719771) - Move sefcontext_compile to -utils package (#1612518)- SELinux userspace 2.9 release- Fix RESOURCE_LEAK coverity scan defects- selinux_restorecon: Skip customized files also without -v - man pages fixes- Build libselinux-python when %with_python2 macro is set to non-zero value- Build libselinux-ruby (#1581322)- Don't build the Python 2 subpackage (#1567358)- SELinux userspace 2.8 release- SELinux userspace 2.8-rc3 release candidate- SELinux userspace 2.8-rc2 release candidate- SELinux userspace 2.8-rc1 release candidate- Do not build libselinux-ruby- build: Replace PYSITEDIR with PYTHONLIBDIR- Correct manpages regarding removable_context - build: follow standard semantics for DESTDIR and PREFIX- Escape macros in %changelog- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild- Switch to %ldconfig_scriptlets- Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)- F-28: rebuild for ruby25- Rebuild with libsepol-2.7-3- Drop golang bindings - Add support for pcre2 to pkgconfig definition- Enable the python3 subpackages on EL- Also add Provides for the old name without %_isa- Python 2 binary package renamed to python2-libselinux See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3 - Python 3 binary package renamed to python3-libselinux- Update to upstream release 2017-08-04- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild- Rebuild with binutils fix for ppc64le (#1475636)- Always unmount selinuxfs for SELINUX=disabled- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- Don't finalize mount state in selinux_set_policy_root() - Follow upstream and rename _selinux.so to _selinux.cpython-36m-x86_64-linux-gnu.so- Fix setfiles progress indicator- Fix segfault in selinux_restorecon_sb() (#1433577) - Change matchpathcon usage to match with matchpathcon manpage - Fix a corner case getsebool return value- Fix 'semanage boolean -m' to modify active value- Fix FTBFS - fatal error (#1427902)- Update to upstream release 2016-10-14- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild- Add missing %license macro- Rebuilt for https://fedoraproject.org/wiki/Changes/Ruby_2.4- Rewrite restorecon() python method- Rebuild for Python 3.6- Fix pointer handling in realpath_not_final (#1376598)- Fix -Wsign-compare warnings - Drop unused stdio_ext.h header file - Kill logging check for selinux_enabled() - Drop usage of _D_ALLOC_NAMLEN - Add openrc_contexts functions - Fix redefinition of XATTR_NAME_SELINUX - Correct error path to always try text - Clean up process_file() - Handle NULL pcre study data - Fix in tree compilation of utils that depend on libsepol- Rebuilt with libsepol-2.5-9- https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages- Clarify is_selinux_mls_enabled() description - Explain how to free policy type from selinux_getpolicytype() - Compare absolute pathname in matchpathcon -V - Add selinux_snapperd_contexts_path()- Move _selinux.so to /usr/lib64/python*/site-packages- Modify audit2why analyze function to use loaded policy - Sort object files for deterministic linking order - Respect CC and PKG_CONFIG environment variable - Avoid mounting /proc outside of selinux_init_load_policy()- Fix multiple spelling errors- Rebuilt with libsepol-2.5-5- Fix typo in sefcontext_compile.8- Fix location of selinuxfs mount point - Only mount /proc if necessary - procattr: return einval for <= 0 pid args - procattr: return error on invalid pid_t input- Use fully versioned arch-specific requires- Update to upstream release 2016-02-23- Update to upstream rc1 release 2016-01-07- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild- Rebuilt for https://fedoraproject.org/wiki/Changes/Ruby_2.3- Build libselinux without rpm_execcon() (#1284019)- Rebuilt for Python3.5 rebuild- Flush the class/perm string mapping cache on policy reload (#1264051) - Fix restorecon when path has no context- Simplify procattr cache (#1257157,#1232371)- Export ldflags into the build so hardening works- Update to 2.4 release- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- is_selinux_enabled: Add /etc/selinux/config test (#1219045) - matchpathcon/selabel_file: Fix man pages (#1219718)- revert support for policy compressed with xv (#1185266)- selinux.py - use os.walk() instead of os.path.walk() (#1195004) - is_selinux_enabled(): drop no-policy-loaded test (#1195074) - fix -Wformat errors and remove deprecated mudflap option- bump release and rebuild so that koji-shadow can rebuild it against new gcc on secondary arch- Rebuilt for https://fedoraproject.org/wiki/Changes/Ruby_2.2- Compiled file context files and the original should have the same permissions from dwalsh@redhat.com - Add selinux_openssh_contexts_path() to get a path to /contexts/openssh_contexts- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild- Rebuilt for https://fedoraproject.org/wiki/Changes/Python_3.4- Update to upstream * Get rid of security_context_t and fix const declarations. * Refactor rpm_execcon() into a new setexecfilecon() from Guillem Jover.- Add selinux_openssh_contexts_path()- Rebuilt for https://fedoraproject.org/wiki/Changes/Ruby_2.1- Fix spelling mistake in man page- More go bindings - restorecon, getpidcon, setexeccon- Add additional go bindings for get*con calls - Add go bindings test command - Modify man pages of set*con calls to mention that they are thread specific- Move selinux.go to /usr/lib64/golang/src/pkg/github.com/selinux/selinux.go - Add Int_to_mcs function to generate MCS labels from integers.- Add ghost flag for /var/run/setrans- Update to upstream * Fix userspace AVC handling of per-domain permissive mode. - Verify context is not null when passed into *setfilecon_raw- revert unexplained change to rhat.patch which broke SELinux disablement- Verify context is not null when passed into lsetfilecon_raw- Mv selinux.go to /usr/share/gocode/src/selinux- Add golang support to selinux.- Remove togglesebool man page- Update to upstream * Remove -lpthread from pkg-config file; it is not required. - Add support for policy compressed with xv- Update to upstream * Fix avc_has_perm() returns -1 even when SELinux is in permissive mode. * Support overriding Makefile RANLIB from Sven Vermeulen. * Update pkgconfig definition from Sven Vermeulen. * Mount sysfs before trying to mount selinuxfs from Sven Vermeulen. * Fix man pages from Laurent Bigonville. * Support overriding PATH and LIBBASE in Makefiles from Laurent Bigonville. * Fix LDFLAGS usage from Laurent Bigonville * Avoid shadowing stat in load_mmap from Joe MacDonald. * Support building on older PCRE libraries from Joe MacDonald. * Fix handling of temporary file in sefcontext_compile from Dan Walsh. * Fix procattr cache from Dan Walsh. * Define python constants for getenforce result from Dan Walsh. * Fix label substitution handling of / from Dan Walsh. * Add selinux_current_policy_path from Dan Walsh. * Change get_context_list to only return good matches from Dan Walsh. * Support udev-197 and higher from Sven Vermeulen and Dan Walsh. * Add support for local substitutions from Dan Walsh. * Change setfilecon to not return ENOSUP if context is already correct from Dan Walsh. * Python wrapper leak fixes from Dan Walsh. * Export SELINUX_TRANS_DIR definition in selinux.h from Dan Walsh. * Add selinux_systemd_contexts_path from Dan Walsh. * Add selinux_set_policy_root from Dan Walsh. * Add man page for sefcontext_compile from Dan Walsh.- Add systemd_contexts support - Do substitutions on a local sub followed by a dist sub- Eliminate requirement on pthread library, by applying patch for Jakub Jelinek Resolves #1013801- Fix handling of libselinux getconlist with only one entry- Add Python constants for SELinux enforcing modes- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild- Add sefcontext_compile.8 man page - Add Russell Coker patch to fix man pages - Add patches from Laurent Bigonville to fix Makefiles for debian. - modify spec file to use %{_prefix}/lib- Fix patch that Handles substitutions for /- Handle substitutions for / - semanage fcontext -a -e / /opt/rh/devtoolset-2/root- Add Eric Paris patch to fix procattr calls after a fork.- Move secolor.conf.5 into mcstrans package and out of libselinux- Fix python bindings for selinux_check_access- Fix reseting the policy root in matchpathcon- Cleanup setfcontext_compile atomic patch - Add matchpathcon -P /etc/selinux/mls support by allowing users to set alternate root - Make sure we set exit codes from selinux_label calls to ENOENT or SUCCESS- Make setfcontext_compile atomic- Fix memory leak in set*con calls.- Move matchpathcon to -utils package - Remove togglesebool- Fix selinux man page to reflect what current selinux policy is.- Add new constant SETRANS_DIR which points to the directory where mstransd can find the socket and libvirt can write its translations files.- Bring back selinux_current_policy_path- Revert some changes which are causing the wrong policy version file to be created- Update to upstream * audit2why: make sure path is nul terminated * utils: new file context regex compiler * label_file: use precompiled filecontext when possible * do not leak mmapfd * sefcontontext_compile: Add error handling to help debug problems in libsemanage. * man: make selinux.8 mention service man pages * audit2why: Fix segfault if finish() called twice * audit2why: do not leak on multiple init() calls * mode_to_security_class: interface to translate a mode_t in to a security class * audit2why: Cleanup audit2why analysys function * man: Fix program synopsis and function prototypes in man pages * man: Fix man pages formatting * man: Fix typo in man page * man: Add references and man page links to _raw function variants * Use ENOTSUP instead of EOPNOTSUPP for getfilecon functions * man: context_new(3): fix the return value description * selinux_status_open: handle error from sysconf * selinux_status_open: do not leak statusfd on exec * Fix errors found by coverity * Change boooleans.subs to booleans.subs_dist. * optimize set*con functions * pkg-config do not specifc ruby version * unmap file contexts on selabel_close() * do not leak file contexts with mmap'd backend * sefcontext_compile: do not leak fd on error * matchmediacon: do not leak fd * src/label_android_property: do not leak fd on error- Update to latest patches from eparis/Upstream- Update to latest patches from eparis/Upstream- Try procatt speedup patch again- Roll back procattr speedups since it seems to be screwing up systemd labeling.- Fix tid handling for setfscreatecon, old patch still broken in libvirt- Fix tid handling for setfscreatecon, old patch still broken in libvirt- setfscreatecon after fork was broken by the Set*con patch. - We needed to reset the thread variables after a fork.- Fix setfscreatecon call to handle failure mode, which was breaking udev- Ondrej Oprala patch to optimize set*con functions - Set*con now caches the security context and only re-sets it if it changes.- Rebuild against latest libsepol- Update to latest patches from eparis/Upstream - Fix errors found by coverity - set the sepol_compute_av_reason_buffer flag to 0. This means calculate denials only? - audit2why: remove a useless policy vers variable - audit2why: use the new constraint information- Rebuild with latest libsepol- Return EPERM if login program can not reach default label for user - Attempt to return container info from audit2why- Apply patch from eparis to fix leaked file descriptor in new labeling code- Add new function mode_to_security_class which takes mode instead of a string. - Possibly will be used with coreutils.- Add back selinuxconlist and selinuxdefcon man pages- Fix segfault from calling audit2why.finish() multiple times- Fix up selinux man page to reference service man pages- Rebuild with fixed libsepol- Update to upstream * Add support for lxc_contexts_path * utils: add service to getdefaultcon * libsemanage: do not set soname needlessly * libsemanage: remove PYTHONLIBDIR and ruby equivalent * boolean name equivalency * getsebool: support boolean name substitution * Add man page for new selinux_boolean_sub function. * expose selinux_boolean_sub * matchpathcon: add -m option to force file type check * utils: avcstat: clear sa_mask set * seusers: Check for strchr failure * booleans: initialize pointer to silence coveriety * stop messages when SELinux disabled * label_file: use PCRE instead of glibc regex functions * label_file: remove all typedefs * label_file: move definitions to include file * label_file: do string to mode_t conversion in a helper function * label_file: move error reporting back into caller * label_file: move stem/spec handling to header * label_file: drop useless ncomp field from label_file data * label_file: move spec_hasMetaChars to header * label_file: fix potential read past buffer in spec_hasMetaChars * label_file: move regex sorting to the header * label_file: add accessors for the pcre extra data * label_file: only run regex files one time * label_file: new process_file function * label_file: break up find_stem_from_spec * label_file: struct reorg * label_file: only run array once when sorting * Ensure that we only close the selinux netlink socket once. * improve the file_contexts.5 manual page- rebuild for https://fedoraproject.org/wiki/Features/Python_3.3- make with_python3 be conditional on fedora- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- Move the tmpfiles.d content from /etc/tmpfiles.d to /usr/lib/tmpfiles.d- Revert Eric Paris Patch for selinux_binary_policy_path- Update to upstream * Fortify source now requires all code to be compiled with -O flag * asprintf return code must be checked * avc_netlink_recieve handle EINTR * audit2why: silence -Wmissing-prototypes warning * libsemanage: remove build warning when build swig c files * matchpathcon: bad handling of symlinks in / * seusers: remove unused lineno * seusers: getseuser: gracefully handle NULL service * New Android property labeling backend * label_android_property whitespace cleanups * additional makefile support for rubywrap- Fix booleans.subs name, change function name to selinux_boolean_sub, add man page, minor fixes to the function- Fix to compile with Fortify source * Add -O compiler flag * Check return code from asprintf - Fix handling of symbolic links in / by realpath_not_final- Add support for lxc contexts file- Add support fot boolean subs file- Update to upstream * Fix dead links to www.nsa.gov/selinux * Remove jump over variable declaration * Fix old style function definitions * Fix const-correctness * Remove unused flush_class_cache method * Add prototype decl for destructor * Add more printf format annotations * Add printf format attribute annotation to die() method * Fix const-ness of parameters & make usage() methods static * Enable many more gcc warnings for libselinux/src/ builds * utils: Enable many more gcc warnings for libselinux/utils builds * Change annotation on include/selinux/avc.h to avoid upsetting SWIG * Ensure there is a prototype for 'matchpathcon_lib_destructor' * Update Makefiles to handle /usrmove * utils: Stop separating out matchpathcon as something special * pkg-config to figure out where ruby include files are located * build with either ruby 1.9 or ruby 1.8 * assert if avc_init() not called * take security_deny_unknown into account * security_compute_create_name(3) * Do not link against python library, this is considered * bad practice in debian * Hide unnecessarily-exported library destructors- Add selinux_current_policy_path to return /sys/fs/selinux/policy if it exists - Otherwise search for policy on disk- Change selinux_binary_policy_path to return /sys/fs/selinux/policy - Add selinux_installed_policy_path to return what selinux_binary_policy_path used to return - avc_has_perm will now return yes if the machine is in permissive mode - Make work with ruby-1.9- avc_netlink_recieve should continue to poll if it receinves an EINTR rather- use /sbin/ldconfig, glibc does not provide /usr/sbin/ldconfig in the RPM database for now- Rebuild with cleaned up upstream to work in /usr- install everything in /usr https://fedoraproject.org/wiki/Features/UsrMove- Add Dan Berrange code cleanup patches.- Fix selabal_open man page to refer to proper selinux_opt structure-Update to upstream * Fix setenforce man page to refer to selinux man page * Cleanup Man pages * merge freecon with getcon man page- Add patch from Richard Haines When selabel_lookup found an invalid context with validation enabled, it always stated it was 'file_contexts' whether media, x, db or file. The fix is to store the spec file name in the selabel_lookup_rec on selabel_open and use this as output for logs. Also a minor fix if key is NULL to stop seg faults. - Fix setenforce manage page.- Rebuild with new libsepol- Fix setenforce man page, from Miroslav Grepl- Upgrade to upstream * selinuxswig_python.i: don't make syscall if it won't change anything * Remove assert in security_get_boolean_names(3) * Mapped compute functions now obey deny_unknown flag * get_default_type now sets EINVAL if no entry. * return EINVAL if invalid role selected * Updated selabel_file(5) man page * Updated selabel_db(5) man page * Updated selabel_media(5) man page * Updated selabel_x(5) man page * Add man/man5 man pages * Add man/man5 man pages * Add man/man5 man pages * use -W and -Werror in utils- Change python binding for restorecon to check if the context matches. - If it does do not reset- Upgrade to upstream * Makefiles: syntax, convert all ${VAR} to $(VAR) * load_policy: handle selinux=0 and /sys/fs/selinux not exist * regenerate .pc on VERSION change * label: cosmetic cleanups * simple interface for access checks * Don't reinitialize avc_init if it has been called previously * seusers: fix to handle large sets of groups * audit2why: close fd on enomem * rename and export symlink_realpath * label_file: style changes to make Eric happy.- Apply libselinux patch to handle large groups in seusers.- Add selinux_check_access function. Needed for passwd, chfn, chsh- Handle situation where selinux=0 passed to the kernel and both /selinux and-Update to upstream * utils: matchpathcon: remove duplicate declaration * src: matchpathcon: use myprintf not fprintf * src: matchpathcon: make sure resolved path starts * put libselinux.so.1 in /lib not /usr/lib * tree: default make target to all not- Switch to use ":" as prefix separator rather then ";"- Avoid unnecessary shell invocation in %post.- Fix handling of subset labeling that is causing segfault in restorecon- Change matchpathcon_init_prefix and selabel_open to allow multiple initial prefixes. Now you can specify a ";" separated list of prefixes and the labeling system will only load regular expressions that match these prefixes.- Change matchpatcon to use proper myprintf - Fix symlink_realpath to always include "/" - Update to upstream * selinux_file_context_verify function returns wrong value. * move realpath helper to matchpathcon library * python wrapper makefile changes- Move to new Makefile that can build with or without PYTHON being set-Update to upstream 2.1.4 2011-0817 * mapping fix for invalid class/perms after selinux_set_mapping * audit2why: work around python bug not defining * resolv symlinks and dot directories before matching 2.1.2 2011-0803 * audit2allow: do not print statistics * make python bindings for restorecon work on relative path * fix python audit2why binding error * support new python3 functions * do not check fcontext duplicates on use * Patch for python3 for libselinux 2.1.1 2011-08-02 * move .gitignore into utils * new setexecon utility * selabel_open fix processing of substitution files * mountpoint changing patch. * simplify SRCS in Makefile 2.1.1 2011-08-01 * Remove generated files, introduce more .gitignore-Update to upstream * Release, minor version bump * Give correct names to mount points in load_policy by Dan Walsh. * Make sure selinux state is reported correctly if selinux is disabled or fails to load by Dan Walsh. * Fix crash if selinux_key_create was never called by Dan Walsh. * Add new file_context.subs_dist for distro specific filecon substitutions by Dan Walsh. * Update man pages for selinux_color_* functions by Richard Haines.- Only call dups check within selabel/matchpathcon if you are validating the context - This seems to speed the loading of labels by 4 times.- Move /selinux to /sys/fs/selinux - Add selinuxexeccon - Add realpath to matchpathcon to handle matchpathcon * type queries.- Update for latest libsepol- Update for latest libsepol- Fix restorecon python binding to accept relative paths-Update to upstream * Give correct names to mount points in load_policy by Dan Walsh. * Make sure selinux state is reported correctly if selinux is disabled or fails to load by Dan Walsh. * Fix crash if selinux_key_create was never called by Dan Walsh. * Add new file_context.subs_dist for distro specific filecon substitutions by Dan Walsh. * Update man pages for selinux_color_* functions by Richard Haines.- Clean up patch to make handling of constructor cleanup more portable * db_language object class support for selabel_lookup from KaiGai Kohei. * Library destructors for thread local storage keys from Eamon Walsh.- Add distribution subs pathAdd patch from dbhole@redhat.com to initialize thread keys to -1 Errors were being seen in libpthread/libdl that were related to corrupt thread specific keys. Global destructors that are called on dl unload. During destruction delete a thread specific key without checking if it has been initialized. Since the constructor is not called each time (i.e. key is not initialized with pthread_key_create each time), and the default is 0, there is a possibility that key 0 for an active thread gets deleted. This is exactly what is happening in case of OpenJDK. Workaround patch that initializes the key to -1. Thus if the constructor is not called, the destructor tries to delete key -1 which is deemed invalid by pthread_key_delete, and is ignored.- Call fini_selinuxmnt if selinux is disabled, to cause is_selinux_disabled() to report correct data- Change mount source options to use "proc" and "selinuxfs"- Update to upstream * Turn off default user handling when computing user contexts by Dan Walsh- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- Fixup selinux man page- Fix Makefile to use pkg-config --cflags python3 to discover include paths- Update to upstream - Turn off fallback in to SELINUX_DEFAULTUSER in get_context_list- Update to upstream * Thread local storage fixes from Eamon Walsh.- Add /etc/tmpfiles.d support for /var/run/setrans- Ghost /var/run/setrans- Rebuilt for gcc bug 634757- rebuild via updated swig (#624674)- Update for python 3.2a1- Turn off fallback in to SELINUX_DEFAULTUSER in get_context_list- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild- Turn off messages in audit2why- Update to upstream * Add const qualifiers to public API where appropriate by KaiGai Kohei. 2.0.95 2010-06-10 * Remove duplicate slashes in paths in selabel_lookup from Chad Sellers * Adds a chcon method to the libselinux python bindings from Steve Lawrence - add python3 subpackage from David Malcolm* Set errno=EINVAL for invalid contexts from Dan Walsh.- Update to upstream * Show strerror for security_getenforce() by Colin Waters. * Merged selabel database support by KaiGai Kohei. * Modify netlink socket blocking code by KaiGai Kohei.- Update to upstream * Fix from Eric Paris to fix leak on non-selinux systems. * regenerate swig wrappers * pkgconfig fix to respect LIBDIR from Dan Walsh.- Update to upstream * Change the AVC to only audit the permissions specified by the policy, excluding any permissions specified via dontaudit or not specified via auditallow. * Fix compilation of label_file.c with latest glibc headers.- Fix potential doublefree on init- Fix libselinux.pc- Fix man page for selinuxdefcon- Free memory on disabled selinux boxes- Update to upstream * add/reformat man pages by Guido Trentalancia . * Change exception.sh to be called with bash by Manoj Srivastava - Fix selinuxdefcon man page- Update to upstream * Add pkgconfig file from Eamon Walsh.- Update to upstream * Rename and export selinux_reset_config()- Update to upstream * Add exception handling in libselinux from Dan Walsh. This uses a shell script called exception.sh to generate a swig interface file. * make swigify * Make matchpathcon print <> if path not found in fcontext file.- Eliminate -pthread switch in Makefile- Update to upstream * Removal of reference counting on userspace AVC SID's.- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- Update to upstream * Reverted Tomas Mraz's fix for freeing thread local storage to avoid pthread dependency. * Removed fini_context_translations() altogether. * Merged lazy init patch from Stephen Smalley based on original patch by Steve Grubb.- Update to upstream * Add per-service seuser support from Dan Walsh. * Let load_policy gracefully handle selinuxfs being mounted from Stephen Smalley. * Check /proc/filesystems before /proc/mounts for selinuxfs from Eric Paris.- Add provices ruby(selinux)- Update to upstream * Fix improper use of thread local storage from Tomas Mraz . * Label substitution support from Dan Walsh. * Support for labeling virtual machine images from Dan Walsh.- Update to upstream * Trim / from the end of input paths to matchpathcon from Dan Walsh. * Fix leak in process_line in label_file.c from Hiroshi Shinji. * Move matchpathcon to /sbin, add matchpathcon to clean target from Dan Walsh. * getdefaultcon to print just the correct match and add verbose option from Dan Walsh.- Update to upstream * deny_unknown wrapper function from KaiGai Kohei. * security_compute_av_flags API from KaiGai Kohei. * Netlink socket management and callbacks from KaiGai Kohei.- Fix Memory Leak- Fix crash in python- Add back in additional interfaces- Add back in av_decision to python swig- Update to upstream * Netlink socket handoff patch from Adam Jackson. * AVC caching of compute_create results by Eric Paris.- Add patch from ajax to accellerate X SELinux - Update eparis patch- Add eparis patch to accellerate Xwindows performance- Fix URL- Add substitute pattern - matchpathcon output <> on ENOENT- Update to upstream * Fix incorrect conversion in discover_class code.- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild- Add - selinux_virtual_domain_context_path - selinux_virtual_image_context_path- Throw exeptions in python swig bindings on failures- Fix restorecon python code- Update to upstream- Strip trailing / for matchpathcon- Fix segfault if seusers file does not work- Add new function getseuser which will take username and service and return - seuser and level. ipa will populate file in future. - Change selinuxdefcon to return just the context by default- Rebuild for Python 2.6- Update to Upstream * Allow shell-style wildcards in x_contexts file.- Eamon Walsh Patch - libselinux: allow shell-style wildcarding in X names - Add Restorecon/Install python functions from Luke Macken- Update to Upstream * Correct message types in AVC log messages. * Make matchpathcon -V pass mode from Dan Walsh. * Add man page for selinux_file_context_cmp from Dan Walsh.- Update to Upstream * New man pages from Dan Walsh. * Update flask headers from refpolicy trunk from Dan Walsh.- Fix matchpathcon -V call- Add flask definitions for open, X and nlmsg_tty_audit- Add missing get/setkeycreatecon man pages- Split out utilities- Add missing man page links for [lf]getfilecon- Update to Upstream * Add group support to seusers using %groupname syntax from Dan Walsh. * Mark setrans socket close-on-exec from Stephen Smalley. * Only apply nodups checking to base file contexts from Stephen Smalley.- Update to Upstream * Merge ruby bindings from Dan Walsh. - Add support for Linux groups to getseuserbyname- Allow group handling in getseuser call- Update to Upstream * Handle duplicate file context regexes as a fatal error from Stephen Smalley. This prevents adding them via semanage. * Fix audit2why shadowed variables from Stephen Smalley. * Note that freecon NULL is legal in man page from Karel Zak.- Add ruby support for puppet- Rebuild for new libsepol- Add Karel Zak patch for freecon man page- Update to Upstream * New and revised AVC, label, and mapping man pages from Eamon Walsh. * Add swig python bindings for avc interfaces from Dan Walsh.- Update to Upstream * Fix selinux_file_context_verify() and selinux_lsetfilecon_default() to call matchpathcon_init_prefix if not already initialized. * Add -q qualifier for -V option of matchpathcon and change it to indicate whether verification succeeded or failed via exit status.- libselinux no longer neets to telnet -u in post install- Add sedefaultcon and setconlist commands to dump login context- Update to Upstream * Fixed selinux_set_callback man page. * Try loading the max of the kernel-supported version and the libsepol-supported version when no manipulation of the binary policy is needed from Stephen Smalley. * Fix memory leaks in matchpathcon from Eamon Walsh.- Add Xavior Toth patch for security_id_t in swig- Add avc.h to swig code- Grab the latest policy for the kernel- Update to Upstream * Man page typo fix from Jim Meyering.- Update to Upstream * Changed selinux_init_load_policy() to not warn about a failed mount of selinuxfs if selinux was disabled in the kernel.- Fix matchpathcon memory leak- Update to Upstream * Merged new X label "poly_selection" namespace from Eamon Walsh.- Update to Upstream * Merged reset_selinux_config() for load policy from Dan Walsh.- Reload library on loading of policy to handle chroot- Update to Upstream * Merged avc_has_perm() errno fix from Eamon Walsh.- Update to Upstream * Regenerated Flask headers from refpolicy flask definitions.- Update to Upstream * Merged compute_member AVC function and manpages from Eamon Walsh. * Provide more error reporting on load policy failures from Stephen Smalley.- Update to Upstream * Merged new X label "poly_prop" namespace from Eamon Walsh.- Update to Upstream * Disable setlocaldefs if no local boolean or users files are present from Stephen Smalley. * Skip userspace preservebools processing for Linux >= 2.6.22 from Stephen Smalley.- Update to Upstream * Merged fix for audit2why from Dan Walsh.- Fix audit2why to grab latest policy versus the one selected by the kernel* Merged audit2why python binding from Dan Walsh.* Merged updated swig bindings from Dan Walsh, including typemap for pid_t.- Update to use libsepol-static library- Move libselinux.a to -static package - Spec cleanups- Put back libselinux.a- Fix memory references in audit2why and change to use tuples - Update to Upstream * Fix for the avc: granted null message bug from Stephen Smalley.- Fix __init__.py specification- Add audit2why python bindings- Add pid_t typemap for swig bindings- smp_mflag- Fix spec file caused by spec review- Upgrade to upstream * matchpathcon(8) man page update from Dan Walsh.- Upgrade to upstream * dlopen libsepol.so.1 rather than libsepol.so from Stephen Smalley. * Based on a suggestion from Ulrich Drepper, defer regex compilation until we have a stem match, by Stephen Smalley. * A further optimization would be to defer regex compilation until we have a complete match of the constant prefix of the regex - TBD.- Upgrade to upstream * Regenerated Flask headers from policy.- Upgrade to upstream * AVC enforcing mode override patch from Eamon Walsh. * Aligned attributes in AVC netlink code from Eamon Walsh. - Move libselinux.so back into devel package, procps has been fixed- Upgrade to upstream * Merged refactored AVC netlink code from Eamon Walsh. * Merged new X label namespaces from Eamon Walsh. * Bux fix and minor refactoring in string representation code.- Upgrade to upstream * Merged selinux_get_callback, avc_open, empty string mapping from Eamon Walsh.- Upgrade to upstream * Fix segfault resulting from missing file_contexts file.- Fix segfault on missing file_context file- Upgrade to upstream * Make netlink socket close-on-exec to avoid descriptor leakage from Dan Walsh. * Pass CFLAGS when using gcc for linking from Dennis Gilmore.- Add sparc patch to from Dennis Gilmore to build on Sparc platform- Remove leaked file descriptor- Upgrade to latest from NSA * Fix selabel option flag setting for 64-bit from Stephen Smalley.- Change matchpatcon to use syslog instead of syserror- Upgrade to latest from NSA * Re-map a getxattr return value of 0 to a getfilecon return value of -1 with errno EOPNOTSUPP from Stephen Smalley. * Fall back to the compat code for security_class_to_string and security_av_perm_to_string from Stephen Smalley. * Fix swig binding for rpm_execcon from James Athey.- Apply James Athway patch to fix rpm_execcon python binding- Move libselinux.so back into main package, breaks procps- Upgrade to upstream * Fix file_contexts.homedirs path from Todd Miller.- Remove requirement on setransd, Moved to selinux-policy-mls- Move libselinux.so into devel package - Upgrade to upstream * Fix segfault resulting from uninitialized print-callback pointer. * Added x_contexts path function patch from Eamon Walsh. * Fix build for EMBEDDED=y from Yuichi Nakamura. * Fix markup problems in selinux man pages from Dan Walsh.- Upgrade to upstream * Updated version for stable branch. * Added x_contexts path function patch from Eamon Walsh. * Fix build for EMBEDDED=y from Yuichi Nakamura. * Fix markup problems in selinux man pages from Dan Walsh. * Updated av_permissions.h and flask.h to include new nscd permissions from Dan Walsh. * Added swigify to top-level Makefile from Dan Walsh. * Fix for string_to_security_class segfault on x86_64 from Stephen Smalley.- Apply Steven Smalley patch to fix segfault in string_to_security_class- Fix matchpathcon to set default myprintf- Upgrade to upstream * Fix for getfilecon() for zero-length contexts from Stephen Smalley.- Update to match flask/access_vectors in policy- Fix man page markup lanquage for translations- Fix semanage segfault on x86 platform- Upgrade to upstream * Labeling and callback interface patches from Eamon Walsh.- Refactored swig- Upgrade to upstream * Class and permission mapping support patches from Eamon Walsh. * Object class discovery support patches from Chris PeBenito. * Refactoring and errno support in string representation code.- Upgrade to upstream - Merged patch to reduce size of libselinux and remove need for libsepol for embedded systems from Yuichi Nakamura. This patch also turns the link-time dependency on libsepol into a runtime (dlopen) dependency even in the non-embedded case. 2.0.17 2007-05-31 * Updated Lindent script and reindented two header files.- Upgrade to upstream * Merged additional swig python bindings from Dan Walsh. * Merged helpful message when selinuxfs mount fails patch from Dax Kelson.- Upgrade to upstream * Merged build fix for avc_internal.c from Joshua Brindle.- Add get_context_list funcitions to swig file- Upgrade to upstream * Merged rpm_execcon python binding fix, matchpathcon man page fix, and getsebool -a handling for EACCES from Dan Walsh.- Add missing interface- Upgrade to upstream * Merged support for getting initial contexts from James Carter.- Upgrade to upstream * Merged userspace AVC patch to follow kernel's behavior for permissive mode in caching previous denials from Eamon Walsh. * Merged sidput(NULL) patch from Eamon Walsh.- Make rpm_exec swig work- Upgrade to upstream * Merged class/av string conversion and avc_compute_create patch from Eamon Walsh.- Upgrade to upstream * Merged fix for avc.h #include's from Eamon Walsh.- Add stdint.h to avc.h- Merged patch to drop support for CACHETRANS=0 config option from Steve Grubb. - Merged patch to drop support for old /etc/sysconfig/selinux and - /etc/security policy file layout from Steve Grubb.- Do not fail on permission denied in getsebool- Upgrade to upstream * Merged init_selinuxmnt() and is_selinux_enabled() improvements from Steve Grubb.- Upgrade to upstream * Removed sending of setrans init message. * Merged matchpathcon memory leak fix from Steve Grubb.- Upgrade to upstream * Merged more swig initializers from Dan Walsh.- Upgrade to upstream * Merged patch from Todd Miller to convert int types over to C99 style.- Merged patch from Todd Miller to remove sscanf in matchpathcon.c because of the use of the non-standard format (original patch changed for style). - Merged patch from Todd Miller to fix memory leak in matchpathcon.c.- Add context function to python to split context into 4 parts- Upgrade to upstream * Updated version for stable branch.- Upgrade to upstream * Merged man page updates to make "apropos selinux" work from Dan Walsh.- Upgrade to upstream * Merged getdefaultcon utility from Dan Walsh.- Add Ulrich NSCD__GETSERV and NSCD__SHMEMGRP for Uli- Add reference to selinux man page in all man pages to make apropos work Resolves: # 217881- Upstream wanted some minor changes, upgrading to keep api the same - Upgrade to upstream * Merged selinux_check_securetty_context() and support from Dan Walsh. Resolves: #200110- Cleanup patch- Add securetty handling Resolves: #200110- Upgrade to upstream * Merged patch for matchpathcon utility to use file mode information when available from Dan Walsh.- rebuild against python 2.5- Fix matchpathcon to lstat files- Update man page- Upgrade to upstream- Add James Antill patch for login verification of MLS Levels - MLS ragnes need to be checked, Eg. login/cron. This patch adds infrastructure.- Upgrade to latest from NSA * Merged updated flask definitions from Darrel Goeddel. This adds the context security class, and also adds the string definitions for setsockcreate and polmatch.- Upgrade to latest from NSA * Updated version for release.- rebuilt for unwind info generation, broken in gcc-4.1.1-21- Upgrade to latest from NSA * Merged av_permissions.h update from Steve Grubb, adding setsockcreate and polmatch definitions.- really make -devel depend on libsepol-devel- Add sgrubb patch for polmatch- Upgrade to latest from NSA * Merged patch from Steve Smalley to fix SIGPIPE in setrans_client- have -devel require libsepol-devel- Upgrade to latest from NSA * Merged patch to not log avc stats upon a reset from Steve Grubb. * Applied patch to revert compat_net setting upon policy load. * Merged file context homedir and local path functions from Chris PeBenito.- rebuilt with latest binutils to pick up 64K -z commonpagesize on ppc* (#203001)- Upgrade to latest from NSA * Merged file context homedir and local path functions from Chris PeBenito. * Rework functions that access /proc/pid/attr to access the per-thread nodes, and unify the code to simplify maintenance.- Upgrade to latest from NSA * Merged return value fix for *getfilecon() from Dan Walsh. * Merged sockcreate interfaces from Eric Paris.- Fix translation return codes to return size of buffer- Upgrade to latest from NSA * Merged no-tls-direct-seg-refs patch from Jeremy Katz. * Merged netfilter_contexts support patch from Chris PeBenito.- Upgrade to latest from NSA * Merged context_*_set errno patch from Jim Meyering.- only build non-fpic objects with -mno-tls-direct-seg-refs- build with -mno-tls-direct-seg-refs on x86 to avoid triggering segfaults with xen (#200783)- Rebuild for new gcc- Fix libselinux to not telinit during installs- Upgrade to latest from NSA * Lindent. * Merged {get,set}procattrcon patch set from Eric Paris. * Merged re-base of keycreate patch originally by Michael LeMay from Eric Paris. * Regenerated Flask headers from refpolicy. * Merged patch from Dan Walsh with: - Added selinux_file_context_{cmp,verify}. - Added selinux_lsetfilecon_default. - Delay translation of contexts in matchpathcon.- Yet another change to matchpathcon- Turn off error printing in library. Need to compile with DEBUG to get it back- Fix error reporting of matchpathcon- Add function to compare file context on disk versus contexts in file_contexts file.- Upgrade to latest from NSA * Merged patch from Dan Walsh with: * Added selinux_getpolicytype() function. * Modified setrans code to skip processing if !mls_enabled. * Set errno in the !selinux_mnt case. * Allocate large buffers from the heap, not on stack. Affects is_context_customizable, selinux_init_load_policy, and selinux_getenforcemode.- Add selinux_getpolicytype()- Upgrade to latest from NSA * Merged !selinux_mnt checks from Ian Kent.- Check for selinux_mnt == NULL- Merged matchmediacon and trans_to_raw_context fixes from Serge Hallyn.- Remove getseuser- Bump requires to grab latest libsepol- Add BuildRequires for swig- Upgrade to latest from NSA * Merged simple setrans client cache from Dan Walsh. Merged avcstat patch from Russell Coker. * Modified selinux_mkload_policy() to also set /selinux/compat_net appropriately for the loaded policy.- More fixes for translation cache - Upgrade to latest from NSA * Added matchpathcon_fini() function to free memory allocated by matchpathcon_init().- Add simple cache to improve translation speed- Upgrade to latest from NSA * Merged setrans client cleanup patch from Steve Grubb.- Add Russell's AVC patch to handle large numbers- Upgrade to latest from NSA * Merged getfscreatecon man page fix from Dan Walsh. * Updated booleans(8) man page to drop references to the old booleans file and to note that setsebool can be used to set the boot-time defaults via -P.- Upgrade to latest from NSA * Merged fix warnings patch from Karl MacMillan. * Merged setrans client support from Dan Walsh. This removes use of libsetrans. * Merged patch to eliminate use of PAGE_SIZE constant from Dan Walsh. * Merged swig typemap fixes from Glauber de Oliveira Costa.- Change the way translations work, Use setransd/remove libsetrans- Add selinuxswig fixes - Stop using PAGE_SIZE and start using sysconf(_SC_PAGE_SIZE)- Upgrade to latest from NSA * Added distclean target to Makefile. * Regenerated swig files. * Changed matchpathcon_init to verify that the spec file is a regular file. * Merged python binding t_output_helper removal patch from Dan Walsh.- Fix python bindings for matchpathcon - Fix booleans man page- Merged Makefile PYLIBVER definition patch from Dan Walsh.- Make some fixes so it will build on RHEL4 - Upgrade to latest from NSA * Updated version for release. * Altered rpm_execcon fallback logic for permissive mode to also handle case where /selinux/enforce is not available.- bump again for double-long bug on ppc(64)- rebuilt for new gcc4.1 snapshot and glibc changes- Upgrade to latest from NSA * Merged install-pywrap Makefile patch from Joshua Brindle.- Upgrade to latest from NSA * Merged pywrap Makefile patch from Dan Walsh.- Split out pywrap in Makefile- Upgrade to latest from NSA * Added getseuser test program.- Upgrade to latest from NSA * Added format attribute to myprintf in matchpathcon.c and removed obsoleted rootlen variable in init_selinux_config().- Build with new libsepol- Upgrade to latest from NSA * Merged several fixes and improvements from Ulrich Drepper (Red Hat), including: - corrected use of getline - further calls to __fsetlocking for local files - use of strdupa and asprintf - proper handling of dirent in booleans code - use of -z relro - several other optimizations * Merged getpidcon python wrapper from Dan Walsh (Red Hat).- Add build requires line for libsepol-devel- Fix swig call for getpidcon- Move libselinux.so to base package- Upgrade to latest from NSA * Merged call to finish_context_translations from Dan Walsh. This eliminates a memory leak from failing to release memory allocated by libsetrans.- update to latest libsetrans - Fix potential memory leak- rebuilt- Update to never version * Merged patch for swig interfaces from Dan Walsh.- Update to never version- Fix some of the python swig objects- Update to latest from NSA * Added MATCHPATHCON_VALIDATE flag for set_matchpathcon_flags() and modified matchpathcon implementation to make context validation/ canonicalization optional at matchpathcon_init time, deferring it to a successful matchpathcon by default unless the new flag is set by the caller. * Added matchpathcon_init_prefix() interface, and reworked matchpathcon implementation to support selective loading of file contexts entries based on prefix matching between the pathname regex stems and the specified path prefix (stem must be a prefix of the specified path prefix).- Update to latest from NSA * Change getsebool to return on/off instead of active/inactive- Update to latest from NSA * Added -f file_contexts option to matchpathcon util. Fixed warning message in matchpathcon_init(). * Merged Makefile python definitions patch from Dan Walsh.- Update to latest from NSA * Merged swigify patch from Dan Walsh.- Separate out libselinux-python bindings into separate rpm- Read libsetrans requirement- Add python bindings- Update to latest from NSA * Merged make failure in rpm_execcon non-fatal in permissive mode patch from Ivan Gyurdiev.- Remove requirement for libsetrans- Update to latest from NSA * Added MATCHPATHCON_NOTRANS flag for set_matchpathcon_flags() and modified matchpathcon_init() to skip context translation if it is set by the caller.- Update to latest from NSA * Added security_canonicalize_context() interface and set_matchpathcon_canoncon() interface for obtaining canonical contexts. Changed matchpathcon internals to obtain canonical contexts by default. Provided fallback for kernels that lack extended selinuxfs context interface. - Patch to not translate mls when calling setfiles- Update to latest from NSA * Merged seusers parser changes from Ivan Gyurdiev. * Merged setsebool to libsemanage patch from Ivan Gyurdiev. * Changed seusers parser to reject empty fields.- Update to latest from NSA * Merged seusers empty level handling patch from Jonathan Kim (TCS).- Rebuild for latest libsepol- Rebuild for latest libsepol- Change default to __default__- Change default to __default__- Add selinux_translations_path- Update to latest from NSA * Merged selinux_path() and selinux_homedir_context_path() functions from Joshua Brindle.- Need to check for /sbin/telinit- Update to latest from NSA * Merged fixes for make DESTDIR= builds from Joshua Brindle.- Update to latest from NSA * Merged get_default_context_with_rolelevel and man pages from Dan Walsh (Red Hat). * Updated call to sepol_policydb_to_image for sepol changes. * Changed getseuserbyname to ignore empty lines and to handle no matching entry in the same manner as no seusers file.- Tell init to reexec itself in post script- Update to latest from NSA * Changed selinux_mkload_policy to try downgrading the latest policy version available to the kernel-supported version. * Changed selinux_mkload_policy to fall back to the maximum policy version supported by libsepol if the kernel policy version falls outside of the supported range.- Update to latest from NSA * Changed getseuserbyname to fall back to the Linux username and NULL level if seusers config file doesn't exist unless REQUIRESEUSERS=1 is set in /etc/selinux/config. * Moved seusers.conf under $SELINUXTYPE and renamed to seusers.- Update to latest from NSA * Added selinux_init_load_policy() function as an even higher level interface for the initial policy load by /sbin/init. This obsoletes the load_policy() function in the sysvinit-selinux.patch. * Added selinux_mkload_policy() function as a higher level interface for loading policy than the security_load_policy() interface.- Update to latest from NSA * Merged fix for matchpathcon (regcomp error checking) from Johan Fischer. Also added use of regerror to obtain the error string for inclusion in the error message.- Update to latest from NSA * Changed getseuserbyname to not require (and ignore if present) the MLS level in seusers.conf if MLS is disabled, setting *level to NULL in this case.- Update to latest from NSA * Merged getseuserbyname patch from Dan Walsh.- Fix patch to satisfy upstream- Update to latest from NSA - Add getseuserbyname- Fix patch call- Fix strip_con call- Go back to original libsetrans code- Eliminate forth param from mls context when mls is not enabled.- Update from NSA * Merged modified form of patch to avoid dlopen/dlclose by the static libselinux from Dan Walsh. Users of the static libselinux will not have any context translation by default.- Update from NSA * Added public functions to export context translation to users of libselinux (selinux_trans_to_raw_context, selinux_raw_to_trans_context).- Update from NSA * Remove special definition for context_range_set; use common code.- Update from NSA * Hid translation-related symbols entirely and ensured that raw functions have hidden definitions for internal use. * Allowed setting NULL via context_set* functions. * Allowed whitespace in MLS component of context. * Changed rpm_execcon to use translated functions to workaround lack of MLS level on upgraded systems.- Allow set_comp on unset ranges- Merged context translation patch, originally by TCS, with modifications by Dan Walsh (Red Hat).- Apply translation patch- Update from NSA * Merged several fixes for error handling paths in the AVC sidtab, matchpathcon, booleans, context, and get_context_list code from Serge Hallyn (IBM). Bugs found by Coverity. * Removed setupns; migrated to pam. * Merged patches to rename checkPasswdAccess() from Joshua Brindle. Original symbol is temporarily retained for compatibility until all callers are updated.- Update makefiles- Update from NSA * Merged security_setupns() from Chad Sellers. - fix selinuxenabled man page- Update from NSA * Merged avcstat and selinux man page from Dan Walsh. * Changed security_load_booleans to process booleans.local even if booleans file doesn't exist.- Fix avcstat to clear totals- Add info to man page- Update from NSA * Merged set_selinuxmnt patch from Bill Nottingham (Red Hat). * Rewrote get_ordered_context_list and helpers, including changing logic to allow variable MLS fields.- Update from NSA- Add backin matchpathcon- Fix selinux_policy_root man page- Change assert(selinux_mnt) to if (!selinux_mnt) return -1;- Update from NSA * Fixed bug in matchpathcon_filespec_destroy.- Update from NSA * Fixed bug in rpm_execcon error handling path.- Update from NSA * Merged fix for set_matchpathcon* functions from Andreas Steinmetz. * Merged fix for getconlist utility from Andreas Steinmetz.- Update from NSA- Better handling of booleans- Update from NSA * Merged destructors patch from Tomas Mraz.- Update from NSA * Added set_matchpathcon_flags() function for setting flags controlling operation of matchpathcon. MATCHPATHCON_BASEONLY means only process the base file_contexts file, not file_contexts.homedirs or file_contexts.local, and is for use by setfiles -c. * Updated matchpathcon.3 man page.- Update from NSA- Update from NSA * Fixed bug in matchpathcon_filespec_add() - failure to clear fl_head.- Update from NSA * Changed matchpathcon_common to ignore any non-format bits in the mode.- Default matchpathcon to regular files if the user specifies a mode- Update from NSA * Merged several fixes from Ulrich Drepper.- Fix matchpathcon on eof.- Update from NSA * Merged matchpathcon patch for file_contexts.homedir from Dan Walsh. * Added selinux_users_path() for path to directory containing system.users and local.users.- Process file_context.homedir- Update from NSA * Changed relabel Makefile target to use restorecon.- Update from NSA * Regenerated av_permissions.h.- Update from NSA * Modified avc_dump_av to explicitly check for any permissions that cannot be mapped to string names and display them as a hex value. * Regenerated av_permissions.h.- Update from NSA * Generalized matchpathcon internals, exported more interfaces, and moved additional code from setfiles into libselinux so that setfiles can directly use matchpathcon.- Update from NSA * Prevent overflow of spec array in matchpathcon. * Fixed several uses of internal functions to avoid relocations. * Changed rpm_execcon to check is_selinux_enabled() and fallback to a regular execve if not enabled (or unable to determine due to a lack of /proc, e.g. chroot'd environment).- Update from NSA * Merged minor fix for avcstat from Dan Walsh.- rpmexeccon should not fail in permissive mode.- fix printf in avcstat- Update from NSA- Modify matchpathcon to also process file_contexts.local if it exists- Add is_customizable_types function call- Update to latest from upstream * Just changing version number to match upstream- Update to latest from upstream * Changed matchpathcon to return -1 with errno ENOENT for <> entries, and also for an empty file_contexts configuration.- Fix link devel libraries- Fix unitialized variable in avcstat.c- Upgrade to upstream * Removed some trivial utils that were not useful or redundant. * Changed BINDIR default to /usr/sbin to match change in Fedora. * Added security_compute_member. * Added man page for setcon.- Upgrade to upstream- Add avcstat program- Add lots of missing man pages- Fix output of getsebool.- Update from upstream, fix setsebool -P segfault- Add a patch from upstream. Fixes signed/unsigned issues, and incomplete structure copy.- More fixes from sgrubb, better syslog- Have setsebool and togglesebool log changes to syslog- Add patch to make setsebool update bool on disk - Make togglesebool have a rollback capability in case it blows up inflight- Upgrade to latest from NSA- Changed the location of the utilities to /usr/sbin since normal users can't use them anyways.- Updated various utilities, removed utilities that are for testing, added man pages.- Add -g flag to make - Upgrade to latest from NSA * Added rpm_execcon.- Upgrade to latest from NSA * Merged setenforce and removable context patch from Dan Walsh. * Merged build fix for alpha from Ulrich Drepper. * Removed copyright/license from selinux_netlink.h - definitions only.- Change setenforce to accept Enforcing and Permissive- Add alpha patch- Upgrade to latest from NSA- Add selinux_removable_context_path- Update from NSA * Add matchmediacon- Update from NSA * Merged in matchmediacon changes.- Update from NSA * Regenerated headers for new nscd permissions.- Add matchmediacon- Update from NSA * Added get_default_context_with_role.- Clean up spec file * Patch from Matthias Saou- Update from NSA * Added set_matchpathcon_printf.- Update from NSA * Reworked av_inherit.h to allow easier re-use by kernel.- Add strcasecmp in selinux_config - Update from NSA * Changed avc_has_perm_noaudit to not fail on netlink errors. * Changed avc netlink code to check pid based on patch by Steve Grubb. * Merged second optimization patch from Ulrich Drepper. * Changed matchpathcon to skip invalid file_contexts entries. * Made string tables private to libselinux. * Merged strcat->stpcpy patch from Ulrich Drepper. * Merged matchpathcon man page from Dan Walsh. * Merged patch to eliminate PLTs for local syms from Ulrich Drepper. * Autobind netlink socket. * Dropped compatibility code from security_compute_user. * Merged fix for context_range_set from Chad Hanson. * Merged allocation failure checking patch from Chad Hanson. * Merged avc netlink error message patch from Colin Walters.- Update from NSA * Merged second optimization patch from Ulrich Drepper. * Changed matchpathcon to skip invalid file_contexts entries. * Made string tables private to libselinux. * Merged strcat->stpcpy patch from Ulrich Drepper. * Merged matchpathcon man page from Dan Walsh. * Merged patch to eliminate PLTs for local syms from Ulrich Drepper. * Autobind netlink socket. * Dropped compatibility code from security_compute_user. * Merged fix for context_range_set from Chad Hanson. * Merged allocation failure checking patch from Chad Hanson. * Merged avc netlink error message patch from Colin Walters.- Update from NSA - Add optflags- Update from NSA- Add matchpathcon man page - Latest from NSA * Merged patch to eliminate PLTs for local syms from Ulrich Drepper. * Autobind netlink socket. * Dropped compatibility code from security_compute_user. * Merged fix for context_range_set from Chad Hanson. * Merged allocation failure checking patch from Chad Hanson. * Merged avc netlink error message patch from Colin Walters.- Latest from NSA * Autobind netlink socket. * Dropped compatibility code from security_compute_user. * Merged fix for context_range_set from Chad Hanson. * Merged allocation failure checking patch from Chad Hanson. * Merged avc netlink error message patch from Colin Walters.- Latest from NSA- New upstream version- Latest from Upstream- Fix man pages- Latest from Upstream- Latest from Upstream- Add man page for boolean functions and SELinux- Latest from NSA- Latest from NSA- uppercase getenforce returns, to make them match system-config-securitylevel- Remove old path patch- Update to latest from NSA - Add fix to only get old path if file_context file exists in old location- Update to latest from NSA- add nlclass patch - Update to latest from NSA- rebuilt- Fix selinux_config to break once it finds SELINUXTYPE.-Update with latest from NSA- Change to use new policy mechanism- add man patch- Update with latest from NSA- Update with latest from NSA- Add changes for relaxed policy - Update to match NSA- Add relaxed policy changes- Sync with NSA- Remove requires glibc>2.3.4- Fix selinuxenabled man page.- Upgrade to 1.11- Add memleaks patch- Upgrade to latest from NSA and add more man pages- Update to match NSA - Cleanup some man pages- Upgrade to latest from NSA- Add Russell's Man pages- Change getenforce to also check is_selinux_enabled- Add ownership to /usr/include/selinux- fix location of file_contexts file.- Fix matchpathcon to use BUFSIZ- rebuilt- add matchpathcon- rebuilt- Add rootok patch- Updated getpeernam patch- Add getpeernam patch- Add getpeercon patch- Put mntpoint patch, because found fix for SysVinit- Add remove mntpoint patch, because it breaks SysVinit- Add mntpoint patch for SysVinit- Add -r -u -t to getcon- Upgrade to latest from NSA- Fix x86_64 build- Latest tarball from NSA.- Update with latest changes from NSA- Change location of .so file- Break out into development library- Move location of libselinux.so to /lib- Add selinuxenabled patch- Update with final NSA 1.2 sources.- Update with latest from NSA.- Fix to build on x86_64- update for version 1.2- Initial version2.9-8.el82.9-8.el8libselinux.a/usr/lib/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m32 -march=x86-64 -mtune=generic -mfpmath=sse -mstackrealign -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protectioncpioxz2i686-redhat-linux-gnucurrent ar archiveutf-801ec0c5132681a643f31d2d97d97d7958ae922c724949c04d10c6eb72ac160e5?p7zXZ !#,] b2u Q{LUXΪ+tc_S}*?4nXFvPl7bPdO{OPEhI1V J& l@N_@5@ɸjr4%`0\m; ҫҺ(s(AH4*ڿY^ƔUIw ^izptX E <[\㊔ 7;$+-AJt0 gPWٳ]"PFVl6f|=l[FD P; n3tF$SWL "R,ڿaO/9N7_? Ll0`-6YDfF@ 2lfR -;5~jL ј1f/'aҟO7=<jAѼVMIA,SRN:;ԋpCvSð woF[7YlQa8&45Ojv/w t ď%89uľ=sN^M |B1 WT|oܳaէ)7| +~PD^{c A::eif ߒV딦V0oNwM>((rd}F٭4^EG8?T}91rZ{BP%W6<](b&FnF8Z;!XuL@޸r9śmlF3 c…[e:J)Ws-VQ[c'9U[6nkA6#"}#gf<"D#RcC].X2 9E7H rAQ]w߃E!>*is?LOܶ0}̰?mhۤR&ޡz:/__g@SgEqppg p$>mRޕx'mW_du E0W ?{ Jnj5d3wo덗(Є.K?+!Di*nA8{)]`D`,\M\;h-NtߥHE]B0G=! MHi.XGQKL;4 5JYj^lf%ůPz8U|z@hZsb Ė#?& qoYUiQ:ܿ'b{&K&GL3uLrӲE_L@L>\&fƨ}OD&?>'LQ>7ء.fd6+p-8 ;_[3*1F_鹄:/ yKt,϶{.XNqOF99T /`%ğ{RA,"bbw{:ͬcȱ޻#e1/Y`A3!(H + KY%C*7a|3e{(IzzsPAl>䵸ɉvueT&9k<ĊESE( viS[&Pc:'46V!7"~1͠| l.'gcaX5-l&(v1gױ*OY[ŷ /l61tps! >¾*,%`9<*DT dhDfՃ ӎ`tT_]CR,Ge *+ھvF@' #ҫF)ˁ!'6@雿y$仸 摚S~mt#n5yMϥȡf_@JCpv1*Hߓ,-ܳ)MJDxy݌9$q "X*IEy)!|7NpqHg`RP1k_jLSHu P{ROW ML%Q'6*% lJ[텖?q,Wq (p8pOKE{kh:1AdqGmp\uآ}d@+տµhOBu$doֈ$Q%shԥᐨ(@QZ)-XH֖rx,`.(N6{^bâcJe]ظߵ49i gy e*B,LzRg3*d -5eucvZm`G9xDӄMӏ#gPy|тL(:SܭB1%Ğ@4%T}u~lŠ{_h|mZ6p鑶wmlq.Miͣ5&cwx=y ^Ё<XO*3"XykQi똨-Tsk vejׁx28DI= ݼaIqRT2(ῆurkMc{PwՙgjRl%Z4kL%X^M8|PjBƼUN'BZ0hwk4!Y'hJSl&*$u :́QM֖8y8e12b06]Ɲe7v01PLI6N-V՝6W@UxpXr"DNL͖= {UN2']HLy㸱.T ϙ5>Tm )XwΓ,{{g?)#O^SJl;l _ymGLSvv5.ƸC|S 1_HH>4NTDzڂi^vhd&."$;Q]vjm2z=#SǘM)Wq^*wVE>^2AR |`թaPY彏pnPMJx̨'M =-C[C;zsOP hpLfLO z<:|HsDnG'2B{Xqw*OCN_p$BzFbmwoZ~>9fD/`Bf=/\o0YGUt L\ALb cl/;%+ח"O\M\+?;ܔzW;NZhX=d {>QhpE\._¨DIk2 Z#9WEl s EC$|-̟l$JU:ITn$V⻌FYae`2?|mp*8]Fz4-yﷶ@ZPΑәH =l{|g <ʄ4F9ZKEf)ȥUL= ADWPij-u؃ .Oyww9ʔWBz8|k'is?E4o!aD~qH*1̱]nی䦁 b7rjdt坆 UOۙ9,˔2#2if3 QuW-҄8 镖m0x!,Yq)1EE8IZ6 Y]bvƸH 4N&yJ,V(8/昂&w!eg-,7I}V"as(&Im=c(J"yΝ 7ɕ_їa.,JQ\r@ <:]V+[Da_-AeTE=M9Y-1,EMM/Ѕ%+aޥZ u"e)uQlɆ*8֗yY ShGvw _VO Y \O*evq:d34=]#YHIS̐&`:8u)z MN|`a\r=ǝ6oDa/1?U۷ܒ(c-c:0Ud"4kt_F)}*P-c]2l;UlKH~YKkOd_bS~@[kţm\ @kJ'EÉj~s-A~ǂLvd .iR=<*U&ݿZDaƒȗA]J$DbE;aWeއvjӌKi$M1(yXtȈqaSJRA`MO"_Tw+TʈyL['lHΒHY_hp:J28W}aعqb(!c' OĥS8 ]d6T.89_kB8,%ő%,!|W]ˡK-^.~}%k[0Woyl]=uZT ႉÌjuЗy. F60Xk}|n*^˔byvxNjn[SW_C44f>TH]Ѳu^OT$+b)ysbK5uipBu>j|gt/Z ڒ?Hy A-F܊zM긻,%A㹓.ћ֠BgzԄɬXZy\}z2':,Tk92i!9NOW0ؑU-,::TOxe츦|{oAq Z^WNM ʷNmqJ) kd"ѯ0պI]- u>hh"ݾ@z UkQZHSGOpb2]Gq(VUoN+4qHtLA$r<:F Br9zY_RJsH,{vmoWİwZچ| S9_7jmޭ>(NScVJ1h3p]Zy&]=Jk^Um88J֐zuyPp 3p6^^bcavz'~̜P%?ijwP/Cv9|@žy_>F.LO Ɵm5aUlԲ ,JÕWϦhFC%$P^B5еIyYZ  c ;ZhS., P#de ZM%8V^m''TD ߸>}1>˿ w*Y8'1xYX"Q:/m/0&D="4vEin 7JP]x(1F=#52R/9 wgYC$~Li>$Sչ,pF@; çi Ϊx5pfB,~͒Yvi1kJGQz1eI"uO^v|/ ˀF[{M{N·u{|5}'`ˊ56!951x1^}fM-'N>se2\i[:g\ סvk[LGTNee{SwcS\S] c/8н3.:%:jQyY0_1ƷLa kNeDBAL[afd^pUWGw}@>#SY D-!BOyA 4A9,S* G6wgx}ߩ>6ڰUcF,ܱ#Cz &O1 6IYF4"-)FF9O v2ɲ NRdY@YGTh5&y37 kF° JUk,$ CYR*O ՌCd5Qsg:soYʩ}9M9"!*E( v wx-]fO6M̄1]6jNx~QM+ g>KC<0ds/D)Hz_,o3ȧ [=/! aèJ}3sF)֢/&AM wqS*Y҅MH{_B2RWvԬ<ņy[>iYn|VA|8;n6 B' PW7+]~0nqz7p@IeozƒFXYzTὧ,c [{Of FCUzY7 ~Mvn$wmƉ]:⏀]?1񶶨$7ɔ,&mH,/_3P+|cMx'TXX10Xw2R z2Usb9h6$w=sגg](eC.μ$N@ ^2[5[!6~&t+[+9b"gֆ]c P-mn] u'ܨ'\7]KlK +DEt"a5j-aPC3ލE1۶^G'}gxq~⌨UYE?%Ʃ2L%-_hѠb>÷pq'՟,IuGJ 9LXJ=3z땛spgN\wd1 T/ѧw!^= -Eݶ0WPs6nԛl|'@OHxYcz]rFV_Y}oILu ;Mn^`H7DED_/;7 "9N'pv;2XrsI˷^ z^Q}:GGy$j];Hqz`kjlDͩqYŎ 7[`bLP,ԳbGA4S?X3(H}$ HbDQhˡV!aP6s.Wkc|odnj +*4KbTlJqR)ѷP$]]|U?*ˌ?X8 I8Y;D L$ wDX5zFN) N@7PJX`X%?6o Eծ%4ǂ[ -,/$#YԯX\h=4]k`+%4Ͼw9ȡofţ 8{C.(J?1 {Jw1':&l~Q/qE A^3^l‘L]9uAз_ʇ"0qoB A "k kybΩ}غ=pn)cK]S۝ϸx]+{LZKfu<靦bG1 һxfjvGa/#Ր'&]7Ӡ%"}z\E"K(R%UCR:' o͠n'Y 0$>ZVf-1FZࡾX)!ө0/v2pmH0nOd6"+l4 ѳ^\Lu($@ݚY:ΔPUQsz' 3"PLf"6_.E\˜b B!(ӵSqģGb8v&jN"i+IQ|JMq= v67 G 3DB;{y6bL_p*ApG"`B# զs/'{҂e;xM˭dS6.z2?]p7g )n) >oYkm>Q?ΓIkDIުZ\$M7iEB-J_:^o, AI_[,O( V4[̦+ZDmtcB_Զ&n͢'*uñzx5ԌƵV(egM{?Ļ5#&U)]4-  {a߾</nAgG,`!IAfGL7J^USګ8uE!rW7.d̝|e aRu9!$_hsyzӄȺ^yB Uh;F$mV˦%d;Q^h!:~"3Ln%sxY6QCoԡn )@<|M^ȣf$49vD|,TobM!uO ߸-(x :jEab}<@=hU$;%`( Z }=#,l5^cTk O†l!(O/S" spimiV-)jc5i(18ՠPfN qnRTL*š#)hPm>-< E }5b6G9aHNqo`Prm$X/P}@^,-7!t3+c*m/ں!:+*J/b|@5 Ǣ\ab:^ )}b'6n:en}v.#xY@,J 䁚v9)<{?Jdů;z.B_[B%V.OG\P4Ie&k QA;v`4/8}1dG+>6`QQo2T -&2Ƴ_: LW\K؋\CcBkBRWZԄfSxl+ӜY>EU.*ݣ2_"7kus=R/0^X1) /0M'ljvLHn[~D-n 2gl)RU x =e&e<{Xn %K\71BLmohm6m$i5IDHd RTN2Ң&!= +y>dHe**V*_1jDw.enG͔1K ^VTшI6z:ƐFЉMŽzX 01~T(INq| * HU+- ŵ!`1rJh\m$oBC`/N(|b0h*e^Lp(FFeuJljLO-jwF]uyiT쒟eV=qy[vs=$(Ȱ d Ϲ[ϰhwx2D6HkGg 3JQK9ZBYVKfħ[TB!2)>ݜ_dxC2fbe^02oJwV+Iq|xnb+Y~Px.<6z14/.LEt4K, eYM8oxeajVKn1M&,x͊`IkJ@c=x|EpVsr۩#ЧqybZw߯ϭ3%ɴ!%T4e)\aŊoG6=3[H$4#1bC',U?U筤m8:_lŸ?}>tiʂ')iQ\)nG\oyC0LǮܙ|_sF~&/g cn\|(RA9 j埥d`0vj#RNUl.탧=ьH^0gS\,`(QiZ{D"j Ft#Ӌt_$2tC?mR\%699o&v⊾4*zOtXIkALS2._-Fer9Ywr~MDs`hl}ce N8ޡ X3jua [dXٟ Ww3ZR`7Ґ2_REN6$aI<-b颓KHėT}ݎ}a >I)5f,HlYM+tDxqlN~cs9sFy\H&oٽ8!l=nf W#ZOPgl?juU |%S9$Xy+A`|ץr,Boh!!;Q9[>N?9-n CvZTj(錃i.ITA3>/>UUisx[!Ԧ:ЀsRȅ3z҈\G0ڧ QJ}Tǃ#!rQokqF]MO]vZ$^L,5FX]8RjlA0,JsB𭨁m|qq0/r9x6׮odE4bvO2?@g܊ ZZ!):k*GP%ba6W߮e^&Hi! 62Gdvb'zf[ܹhbj ?|,=vm p*vp@~=Y %Eq8=G{-C 6'!{=6Tc:КBg;Lw$q%B9lҕڲ4(4/hS{hӏ*ðh^k"p/H<"YTލ礱W0ۘwſ1BɆzDԷ7b>)]xW vK| e~?šgGt w]3u'ϸIpGع.H߆&d.u5)U 79|+Yh~2F~?(j;P5a@MҊ$+#e{~Ij8]nk.۞.}]HZ%qWsPEƉ+:_\,<& HLΡ%/3A4xҗc4 L27 ;k7,BA7|037ீX9=`&#s[" L o9J!>/ ,~iyJaUMPRZH*CAk^}~<:'#F2{$A:K$6)OQ^-̸ěC?>%vIQpi~ovy|앶bb +˛+7ޝ,a;NhMlJ G2GKi!/~exw2;5Q &թJu d`!jJٕ :cFe rk+5<:2oO.Gr: &8IhMx ZB$~Vʒ(Okf~k[H %ۨ=޼ݶ.۲E !#fN<#Fa:, Uel:l9Ȑ$RMϺ@; K>DZpZ00^躌z̔gLr4QVHuӑpH# fMb `oɛ\yit\Rhgcɩc@$Ԡ~,DVxӛYh Tl/`~Tm0 ;Om%hX&\ޚȘKvJV,)W{0Bzx-fK1]צ" Jmk5(O8t6g&^J ֞Z+z7laґΖDZWuhNa/E4]TH oDS9W#РT#ԋkp:N 8 .+% Fۄ 5]%֤)#:uGtP4t ,Y-yYjm"0͝1/@{2eLkW&ၕsW: Mb ߆eCu<QB#dHaѬcgx=\.Jkƛ:P[ LD Tz3LȚ5gNԃi"qy0fU¼ Eo&mѽO/eCDBhtWgideTWzRK[Xzli|a w,p'KjՇa(AT}sq#B&Y;zKHi$_Pg̝]gg:vC9BpYdMЈ ?Y/PeJGvyK~.< ` ~6 _&9Lhote2HJ7M'` Εڔ(ZHaR[Ql<<k¢Of/_< F,.(.po|J__mFYn]z'kM/JEHFHLj$NRw rDHSZ_g?(8(wKaע 'ҭW=:Onu$0Gߠ=v#IRW}=1ђ5>FeIF>YGӮ:DEVxX±n,&HP9ΰc0+'_ReXk- %ߧh}J(*WXGJd̈`88nF`v}}BW `c+FIe,fYtƺoZXN VF[i</Ղs0ԢMdD ~ :l@nB~!wq)Y'j}9I!kE\J/9m>NnS6C;ùT>Nܢ"yp#70ֶB VmT}ȓt]G ?>$ C} 5AKYAqeb P*ASgauˆP*jCz2u:x-q=;E?f"V+}gvCpkȻ| (m}]BoAh\ܧ?heM1vGr@K>J%~Z5q+yW z|L/+?7`{L4ɑ‡9ˀm yjS^UP vfii׭^-Q|ɥVdCBMqn\7j}2?qQp4ķq3yQ|Zr52/-:Yۙi)TOfi^~^ڣكߺ o!#T K`ZwR~ E?N.Sydvbw|gM( 0YOUbDwT#?<'g>l8&gWm>~*&f%qL;&cְWQdƌN]ul .2HwsSAȫgb^=`؄F45$r/{x@Ĵ7"p ]]m⋫JCfdX+s[1pĨeD"/%7 珊I ~in>c7}W\kvvDY$o^`PfN:{3>f`ɜ0PEM=fRr$%$]j`49Ld$t X&2NCE]wO36lT?^Nh\ A!s4-o? d ot  d}ljCQOzz'@ 8?'psD¯)_@bewrZEiK $ᆿjjpO4^;K_7َt/15j‰b61QcEğԅ">K(InsYK;1K[bT5@EA zaJlw%~y-"_Ɓʢ `Ps@b-$&R^Z+Ev|]/3/pVЋygr5.,%tK"t>JzXf/{0fƶQO{8dRgg%Jzzθ$;kߧxV]@{LN@]  ۀZ~$:*5H+++xȶկ֫!#1Z8V"/Bdz{u'xJ%tzK3̏_R5bnWf4pػ 1ىѝG_5NUgW~#cwN0Z&hx _I:w0o C}n=֞]Ot`a+w-e [e;kvJ +E]IN͟ifh# uV%bUN%z /_w4oƜV͙lOỵSL^ՖflxE õk3X%୍öc#C֣.הdE9f o?D-^{]Cn:UBU D2t/4D.t/h7$Y 2=d@V7?ִ9v\2"`> 잭EߠYx,p U`!G?ټȌjPd_̓ݲ=AK0 l3( {Qـ?|n0$s;zcho_h@yΥݫV=2ITRB[""Vj%~@yhN%*K-::ZJ39UM˙ԌWwGv^ܩϗfzcY#hăd:pN뀣*?pϋb%t<}f%o,P?ݠ4[r&CO~*{$4@ˑ9~ݮ@$i8K)$e'A hC-­OOIbdד93/arz☝e>oN,%pLqs 5$[6yVE.5u&\ &}ޡ3R1&RhhģOq\ 1!`UA F"^qn%.˦7snZ9V#uə| %_y5ƘnTY2vAiǝ/P m ԹWJ3+4Ǧmf5{x_=cXq dfg 6IX%F~E|2݊YG~or[i& &|?G&⵪a}}϶-ԆMjS^e`1_m]](IϙENkyKpW|a16nDۣBhXK08*хA1kALIA\P$O'Almvdcx8Wj@Mʳx!FJHZb7kSSB"QVT7EH6)TH`iԙVɧ+|4 K1p28Ω R)!HL rWgtI)]~j+H(8Ɇ _J~4U@EhE`|id9FC.i{p~G$2ұveogHa!^z]k2sgUA&+"NA8/E`M7rP;tlWZkѳ[+kBkFdcw4H1fyTlEe|Z|["\J0tI Hbur gqGpv~P2`*X14RxDһQ:<-WΛ9R^ B<]֙=TXX.猢eR:5Fkl$g[Ozka(EtJ y K~[ o,W</ ʱ)QYD,#a~nK+&у3Q-릁t=6Qtvj,O4˛ـy/"`/%m7P+Нԓ2C'EÜmawJQwdtx&º{R%e9cd Hi?N W(9p 6Suщ] ם-f'c'"eK1TuDk !jڎ%K68qLĹ7䝼yHxQ(Mᐸj5. ƁgЯ}ƉWY?qfX`t\FX)eHP0Qlv/RsҞRjOqD}V[t;ɓ,%BKMOn|t,Ajl$ .!73|0A}.E}$Mv 1t&& 䅿Bc{fWA㯙lB+6?DD%I~RE쉅<ڪg-nskOS뛻^a]g$di!j*uXDv'8xTF8i_=)(Պd,\ sîL'Wē`D*ӠG[!/S~q4n%\HRˠɟKcb7?|Hͽ=ƒLhN'u^uf { ¦RF^H18Zt!\yj.PM\ԌGaec.9}%IhJၙ؅|mϿA!VUW${f0jȒ\TV86裒VbdWv~<#MX^v8u뫶4͆ E ˓o}A)62 nR^l,;F%|`C vC_Qr$,rBFW` soY*f6vq)!zDGa"aّ cx=A*8jEnUeCVt I.[`H>i\Aл3-&u`h tȓR#wZh:p~] 'gp<:[c]jsUkb|c+~n1 ><"VTuwXXMЉɹU+zw$.3aMir{2ȵAd.۔FPRԿ\.6S]/̙ˮ ^B 3Y`LB@bǃzKPƴ6t#qa8 93^-z.]c#}IDO!kKZDf8}51 ()\ }rȳCq'~]-<,`ܨӮP-ؒfKd4 "%>WQR;>UzA㥂ˎMܾ"u5tdcly39.FtK_ӧû FV NpHbbF?ֽ2dTҭ r2Y=Vlm`d,ZvBԲժKbUt)f8X4ٝol߰HwxʽɳoPD3_2o/е-V"6K$Aϡqh [TsFLV?"=*bVIFxc-$ r<:q/5r$7d?{ 2.Gz*u٣*/sk+i_d,m"q }1+PVޓ Wr Vق#t'u.z&K$3 .Y"O1$*c3MUd+e( D9eZx8FR4ߺр$; GRm hvVb Lqvk2lBa|)9_{^dvaߘ e%Vnl]0oV|s>.+ _gn(|0~TFbuZ 4c![,hD̐қ- [a~^T?dү$=.Ҟ*TcW]]#ZgrL撁zwzhF?d;%Q &5.#4{NaONe>jxLWQ1fߌ1bvݨ1,SҫJ=щԶmtō(B:@|XViX%u su':KڄFV2%p KFALp RC6+h/-1j0օe5jۋ<9¹8 ^,<'S JCB?D Ra\!9q,YE,o[9s_@#"*TYgPHر҉NKB؝vP§Wv].ٵH<3{td|b[UPϚV5u끂Um65Igա(m>6S`ȕ͋KOtӅP7_J,ɪkPb,m/{Лaa L*Gwj | 7)꛷TgqTg9ddm8_Riqٷl8] dkXP+Q SHЬs\$7*UK^0fyCP~;_P_jh娬@%4ϣp>)U9U#f!I;d^@ jT쀼:D0ԴY7u+g̣=X%-P N6aێkE+R,<\?$(ԮիE8ozHY웫m"8ԇKqc7'bRXQyk_*(8އ --B >6s|᳐d/ #u8]p#EW9/Ve}b`9 CTĆj1YR4䬂[y˚AkG2vSYC)Piʩ^Gٹ]\_O/z \JH3QiY~a)]U!_&E5a[*IXlÆyѡj.bB@`Ÿ\ED@>YO\ӹYE8dr:'P4j)?N%xaoS`P 9*rKT٨ڼA쬬[Km2WDɼ. TsZrzpBaؔ4þz_|{^2f7!ad(cMe fK{ i7mZJw,TR9hѓk&=(__+})-oq%cAEPќ}ރHCr/?.tfk0\a2(PRiދzیa֫R6V(i/[+(OXመiD&|vicq3?Hft%翉 ]/BΟz417[:gdG.x׶b׋1!,!4f)bw XAc [I:%;$rſX_#lːi1@cWToHXnvHк o3nD9Y :P/-N dD?E :B@|p)Ueh;n@Bq-ˢ&~ck'(vo'哋Hk-D\:?.KSx q9yls;fZ{+|{H)fNd=jXT3h.QIP*B2o 6?grliԹno.2m:k;IB'T_^B 41MI +cv_[>C-}S[q[sgCPYfaȺ[nywLYzr_9r,Z&(>%I=4ͫAM6YGndHnJ>~n&uG}0&4 2A0"} ~2k6Kvq+kUMEc*%uPm^/˃Ml_P%3ۘb!!EDɻjSp#c%/C#|r:VtZ0?KS2i7S% +sB~HÂJv8M봱Vɰ"v\ci~b^}7@5ĉO>:+ڔ ꊹ*,jNV^2J.ӫxg0٩GёH8g86{hgmYE&{ׂ`CPØ4[BڔYwس~iy&]F{ gV_vW_<0tuA>eFttMPrVʞFjmkSרedgbuR!eL 7OetZ]rXs*N @NI8fckBF4iq3#W+ј.$M_Duziecݏ7N +CuHBz,ŲˆO#DИ~ovbՙk|K@#Lws:fz i6y p犞k0hUr"՞ ڞ]!WZD|o3vF:dF2&}DӸ7ǃ>kQP-rh^6(c!#@ UY,rv'_ #}Y-T1^(ݛ \]άHjB% 1*nB&=m3Ψk;dg17uHV ] pGterTD|( G=sK a{{9|Ýi c%>M'W&Wꔶԅ)KR9H؃:tf_$dEo+A6Vr2o.#+tX㸈zar8n 9'°?(ڻ*V ]rX-HhLw%9/%:9ԝ@V>cZ;s fhr># =86$ sSf^ńD'c(O*fa`Z[ָ^ UЄC9LPv9Qtw;Ogfʎ$B;qBsJj$i/L VboXHs{]~ m 6Sxt0yGr YO~ެs+fRfFh]t4lߝr5a5XD4C6*E)Q&_zKw5^Q5L!}p|x۠|bcӗ{Cx -ʆP`Bhl=<0P3E[ԜL(Љ9.7s1`9vq} "$c[* vaה(~sZ8I '*m}I9b`_tjUXe t{6"T24 N8_IIu|!tIیVx2.r+u(2W@fydr 'ڙbAd@?VpATSP5cZI\hp343hUNo@̘|?=(]=q]m]dpv8.+Gqq I9Kw.F=6ul@]-N$?@:b0EVje7ǷrKuuU k~Lyg^ޗ\k  sE20G?Ա5 fȁV͑_(?G{֨x6*N.[3{|XOSʼ}Ys]IoWÿ 7K_E3hʴԶv0h htĶF3nm|Lo&NN}\P;^@:)xOPZڜ_IpBŷ?WvOd͒_4(q-)Y^O. C^LVHEcJD&C)jP6&Ih| Ʌ ? \od02#+@ZIOهm o!tar?+DŽXL 6@VR0W`+t6-7N~aA1镈݁.TAi<.+'to{ok[d8*'f SzYw3?pV؛9b=9 !P 4^=0zC0 fjqHTϽ-Qt"E_"9PLLN,qa#$(RT׺ `~WPը$Gs=JDIi| ӡUg# 3^nTQ*OB k D34>maR *b# cdVL^3w9?ƊJя&k^fy@r=|jq/]eS!>Em?>T)冈 jRkq 4;q'H Lp\=,%,sA^4#9H`DC[FzhoiHdۑ5=mˈ4l1] `? eO`|-; fhzzWtߟ2r|(Y~0$)x{e*3z@si{j ߙqy| ? yƠMo,NW *UAg-ozk۽ L$}#ee\?ԮIY4jT69P'woMN4#{.;8xjmk16 >Vv<ϼ2.Lm H|ն^JPߪb-B)M,B3;y.s^o ڞ(,<.ʵ}cc=TK`Q_d NN&g+fRĐn0$#lA[~Cj=:FSʃ1o&=sbȺХ._amPPGZ(Y}Lr0cwn@RN}ط?Ⴍѹ7kPD35Ya{0"A "&򊪍x,('f(!~Pod*ԵCS V^Iĥ2 +t$|bPp?֚֟ƒ͢܄5Zx6' M-܉x|at @rubAq`,b(O ` wHkD?xfBX;mWͽDU|ڈZ LIv]EZqNaRUd5c])XPk6-^c#_$k !^@_8OkxgbP zke$ ukAO^PBk}ʏ5,?e Y\ԓ''{GՊ`0Of,QrZ}rźE%E( /na] h\eYs%E7~ R7]t6Aqdw(Δ&5{?t'kY|H_ \^&~EhYJR 뻚Yj.%-vqٿYJݵy5VʟeiK7a8w 'U.>던ipEdY%YB+aÏ0I8Add2iψJCo]٠NX(k[v @0fX[,rLBe&}> 6") VS88!Low,]u%=k,6s:jyx-ǭnk a8ܡ*\-E|% 9Oeyӕ:7)PpeB2/:7]08rhۻxD$mž>aŧG(pI (z Z u!R)v V7q>X5"Ijn7o#/rgx֚>>[Q{u uR@NjYh&tń=DĂ_P\3x6U뙨ʠUevWR.j8 ! IST'_vxl>(k6ڗ$y(R8WkBaGO$֬wG=VpmCX8G į¤g )xPHv2Ď#/R-96ilK^#~F''NO?\d~5@eDl64yEiaF*_(ҟ+ J`u hC[8e]>V{$=d[#euۆa2^8ֺsvȫw}'D3W̅cފ)wEK)1_獶MVq[mjW[zC5iHb\ϜgqCQ`}]dieJu!*' Bu/BYQ)EjdrOT7ZTUGzŽC?< 2ᨦ |[*^oR9{쨓ZRl!>7KN`[?{*(DMu9cϽUi]1@Xn\o Fkb6}#p =K}8$ԝsS39ZpEtP9IԆ`4C89.f^SFU$56D`Efa1"aΣh7di zC/2$Hddm^s^W9@9ݛ7%Zh^i: "[l5WY{ =  Yℌ 5>|}/#GaW'=×pҗ T-rP> 9 |\NT1fǤݬW7*,nF*|*ߧO밽B|s oB:$<>nE?XFy @OI)>)⾍DE^eEZ:-.lu;3G&ࡌu(D6<+t9ůLrjV4Ş>{c  KT))86̨GG곡Dt 5[˸AoŦ\b2>e1'Ǿ2Җ@g.6A/MV۔|0wq+%t})WyuTmV>tMZ 8*Mpg40{g\ZنP@o!>Vx`2"_{_eOqGw0`EV:Qpx]kZ1mW8,p}d-*$ Í,C-ԺAsǬ?#V \dya;Ur[l%vZ,$j]n[cm\K|,;xS8@ : Mߜi#HvGA6(aM@hzN%  ^f_6!CTk0+?ՑǠabmjW§Tk> *v\"n1~oeBGd kn+%4EG !.Z/me#qE&x+03Y ..O!_+rFE,_.5 #Ss#!<pm6e7!{˳N6T/#"oS h?pZa6Bm46Eף+& m$\4^y~ҿ=m -/JF8/|W7 qSՏ~ؕmOK!1܄7mkuQ\StyKp)rI{_gO8dC.ۨ{!_ci{a(~lc7)eme[&{_2:_YU 5ꅅ?cXFcw/؜8pE aRT 1^ɸ re Uf~:-;w{ ${ UMY/>;+z=Y򁳭=IqsJDVr|O*G) ր*…py{](g}߯Vs̡ 9Si;vi7BprD9h "!@%ϺSeMdFvT7ߒ`-b}ɜ#C< q̵<27G#YKUma@}myD34&&BBջ H V#5eK8 O~,ce_kQ8 HjJ)ɻvhUKay?wn=u)'~xz5#}C;<}U -*Mx1VRv9,H)Si3#: =Dy ,6{=ISeT%Vb5vHjf[cIz6̳6OydY0kI`pf|kMOW)uu7"'.|ʆ:Z6sR捐= o)1&n=C>wlbr.5 # ؚLAѹs; 8S.:@|j P]Yufe:s]!kfJe6siNe$;:17E ^I&/7ss&@ ^i_ OSAZiH #Kc $?9Iы?BvE]9@V]]d<6[} !8+%b 5.<wwT}8,\*c$PBI5e{V ig$J7˰5`{7~}S<+?I֎n*J0n`zpb)Jon>:ȝಖ+2|/,;o#+GB&TbݫwQ_o\/m,[tZ%HVY?r'뢏Աxi2O&rY۸RIe$7ursPҾ0ut0wt 7_[ QK¾nx9gCn<ޯZ)OOb_.phcRPD'`#`cTg48{ [8hk9J X16dG5K Yqyo }4D^ h??%z i^<EuR¤YٙCޥiJ>̏*=5TYjv4 ɒ{ ^'qGE!~wr>z[߽fuŚm?~6uϽ+zxh3-Hs悜v(Bat7B&o74ҏ*f L,"TQd],⸄ pCõ~ W.^w D,zt |^4ᗋw8Nd|V`dl/EW C>MO&C= eE(L,i{"nŸÒE}(jaAyUڻDG-ݞC6GkN0XܕtsEWݕ`;vO7/0K(b&L+Oe,8$@3@qd3Ϩ~\ dlFSyaq7?= :pY*g(|`۽EىgID|k,"A&siɇO]O>:"d6`)<{ߴ^ xN xpPRehp;Z޲} 9 {{ :j CשGGL~<8˙:ިk(ɊL#[v䋾 ƮaxdYF*RתbKQotXIQ/@¦BOT1ЕH jbw DٞV؛PPsRqEOQ$ uHjyq˫ 8qbT2]wW y+=i $^ FmKu"Bx%NYMm"Lk-$3a|i<.y Dj^TX<격c 844vŪy{1{w䃷Sl83{(a9 ?ePb/-&1'I=(ajt[ydi 7%RD" @ɫ!jn,/ ӗ43e޾D]\p ]/E˓N#}4ETl|{7*%D =;n{vzM!nq"uܽ?X `xRdL &/)c~if]J7y+kƠp OPArLv5 k|H3iye #NEe+ {yl n#bf=^_Aoz0gka+t C*oJhS<<1Bٲ\_nc9RNdo߲LY1c 7bO>Ɛ1`pRבL$z4Z1P9/R:.8ްh `=B 5\X@谑hc-d+yd88- ~ؕ HEQ*!\o|/b5Fl\`o]څ%̹Y[KKls?=;ٿ'߸m}D}xs.^/[ `ߏ|_%-]՚W:8JΠjs{~twog2B>KҮ~{Lg$/51͠zq/:@rP}S =߂?~=[U:k3|W<iOUO)=ͲfWAY& "OT5jPg?~ںfHEA0|'X9vJ3g%rvWfQRy{)d<'23-@#kdͫw)Y+n]ן馊7ޑ?HMIgWWIV[4 צC%.Ȱ~,+΅L$zy'v'A<ݾp0~+Axk-ū%VSnJaX t*% @8RTn5tV*9Ah' HH!kT45'NLdRլHUT~P._\|+1ho!avJu*5hUh`cjė9p4!Â4>hRKqJB,%{􃁘`$D@StmpPplَj\(>RZȱE-=V#D~-4y@F.(i8cGW:0xρ[LLQƵL5>ʚYȇ cjb;@''pv)D=f6E>:E[ι R==LL?`* vM4xseH9haF~uo|7D*3N ?QB49wHt+tOc|D1 H%)PIɕr75ewlb @n-ͳGS.Rj$v޽F%ݑ "ʧO+l귉 a&/u߷.!Xlv0ۓ-Yp_ح|8S" N s5ҷǵ,$W\N&=)h>69+ VkK"Z1QY&UF1> =2F&  Ѳx;81OǦyB,($ /.T"6PO)@u\djX*$/ 6>=:v0dn7RZ>q*h}cE4`A7JĶ =W@ßV~=YJ#[^qxG͙5FCyTڌ1Sl"*`!|WZ zg}}ݗ{RKcE+k#]UOՠh{#uK(y#DcpR#Q#Ab0TI,|j /%ߕ84V|}`![&Ąz^y9(ƺf(Pv-{43-niTU{DfAMu1XH7*w蕚s&ǖ,`.6 Bt̺ylS~a=$A4 FK9 |ݢ{@̳VT*LO4k DO#qU][.u.Q{zʽkXtw?tZ5JHRԳc$DgLm!gh}]%≞Ѿ)bfza*͌|xO"yQ9_N(t_DQA:jVXe&YgE71M}xq_:$}lf10465VH+U̾ U4 Yˈcim .}lԡ3.93OY0~ڏ j2hYOdm?u*/bu|G<,+47,tI؅T8HAL)m(" 0aV#GF:m'GTa9"{lioyvfLAB¨swd.m6(!6](E&Z!cdLUt`+`1mb9~(>T8a%;Rw^L94>RIC )]OkU"*&*߱Klhq?4 H$%:1.SʂjZA3+S]<FR47ֈ@EP'q1(H~ OEYϹa$dv#8Pm a V7 ф z_i 0`/֌zhdf:9<}Lyr1h¤p jѾ|7?b؝_5DT0>K+bbcg F0:@}]q 7*1e=r~P:vQ$FY B޻.{s"~PG,󜖹CNױX^V$ݴ=$֡ؑIڐ(*/6<O1u8?m0nנ"Z YxvBvS. ~ 4D(bIm`S.L v"bwl*EN0  P|%KFFmj:%2QD[ '}_ImWM,X[5j\.ˤ^f-RކOBAH# @D'N$B&H07kwn8˪,E1OID.7ܠ<~ R U0FgY-x1$kݼdd*J^]y :̽![oD> \y 8AcY߯b09W܏N(<44lh^Xև)*IX.̈́B`wnwZB硉JKM&md]@8x4Vغ#8[ᡨlw^GБ'-.!|Vx_[ XFd =-X9(D Q4dlh4ɗuA:k,B=Ѯ*ˇ.Nxy.j:(~oft FZ3*>c3beʇ a[ӍYS@ .3YiTn1,w>+=]~<ZKc9x +Sr*STGX HR`3,jy9C!$dM*~F*c|$ &cO-teFvPQӣ[12fjlG2K5u:\^KaS-ƴ⳹b )+xڐoLZum򺜜լ0H5[I/jeT]E!a;ncȽ(B(~qQI G JImTK4rs1=BJҁCM}ݧ"/bq4"0:geDxq=3E2FPۥ?Z$7'N(s_Y E!<(]OZy5E;\ Q8QF9&gΓdoԂ'5fA߳s:,C/u^Hz(jPõr9g llm$|4p?%@}3ϋw~ٿnI[a\-mdԓ w>o-G PhV;[~ⳘqXnQueoXSoڏ34/ˊgOJN@6طYc.g\)U73gFfze( xכ'׉H7R94_Nڀ#XFaU7wWn3$%ʈ ϧ(F0^[Sq1A"4,74j nV\鎳u <ᨶyU6;OȽd;9@Xv(0SVt~ |\f膁R,?ZMw˥n^ڝ =UNgG!v&dž56m?wC;[YC*?(3\f{dfc ftDt%_G +c>O6;G]^y{/VK,Yg}- w:n\'s7 !MR`D2VPPv D;@%%{,)a]|6?Oxd[1T`6־e -f>QBjILqBNE)]zu]!(]iHa6t)yu,])h|Y)|1nQc *''pc Jo_$wiP,`K<="Π3;,fM&M? =c eo%2QA\Z6ܶ;:kL'w%/ u v\C(;&[hZU>3C# aVG{ wA`#&A":)Z7'Ip(l4}qQ t}l_/6@d{Hk/wPFa"%f(=D~Ja~S1 ݝ-eű>RGm++hn m#y-hі8n%n7KF3]5V$׻9TkqxS/\<| k2ykm(O~ .i_Td-!<;*3*0EPw4Ih%=^<L+ ڱI h%k^v]kzl]R=ҦT$(@Iyiș2busa:y ASMhF7HcǞ_F>FN QΡ^5**l EG._*J.D$-|`[EӤ{pŭg+(Tv)=.*¿wl6!g0.8 ԾdE#~BW7"*֣:O=t Tb8::تw):霵6CDJb<ӓk^C GG=)"us1\0rg`2!j2&Z9nXwZKZNѵe1SvJ7X"JĔ9üνN͕1dA m}bb%$d2SuL G>AVEўw۞𿬹ͻKVԣ( 0}Ɂ(%ͱT@&?JqX^$s܄ i}hcr_HCk8(?/&qhۊ3 e5 b2SpL`W'Byt< +Jי|yYMq?̚?&wW{( ̼bAnU>uRN3 zl*1wgXu(J 6R'I$P@zbdb+nMA?>|/ԡas ` e.WDir=d/$ eF+ϭS@EHyj(k&@9O.R?t`o &Qd.E-ؓX}p<g*ƈonh2Nb='Am3 uP45%pk7Bv-ClfD/*eEh? %{0;ѱ#*+; |Selip<*HyMuu{yI9,JVO;$hPf&i l~JW%O=INjF"41E6 yY~ұ'IGZ9,Z26X?\)yU׿m*&_Q:1Luc7߶QW)>0p Kp2ApA>uBw =?^ni& V( KVT[#xX#Р'=0_AL 4C!53']%&>e߾l(Zν!|%fQ:#,L[ 9Hn7bU6ZOUgi0Q3#8ƒs o~mr p#Jup7ߩ9Z7TZlY =F'h~ 8cwoR+J%MaR|`HU\jh4j=R,oiT?roJ+$Nn#r!EJ)!5x !` kS+ˮu +Uئ=r{־|$_z _4i\239pGqsq f~ԒQ0XKӅˉBMa0UՎ\Te֛A\lIqRj0S`!_$&Jc+}UϫdG5Y̜l7\M%TegdLB. ȧ}b6nCS$  |]uNZn/fCdyc,WWrlZF5rwgUJN"P&XP=. [k%̵)1'2wXϣJ=J.o*:)1+_siTq!@<1p)Qg)pW"E׫\g$8{9-?wɯo@t܅W֢Y5f,}g#O!V K{7 ֗vTLgK:~a }m7\woȢU}plbVSBcU_L'v(otTH},JX':tO1ҽ|ۈ1m{C HRb,n6JDdɗMj ^@8M8]|@ lIǖ~ΪBFeC~$!, u%oir:}Bg^mLJk`7 ]9>wb.aA"וn4?gj>`wܴtEقQ?*ײ&Lkc޽Guo,7.ƻL}zp 3mj۳̈;fM,b}l`BB9 ZwL;#"Y3|RS+GyXD3MsȠk)TH#)X`õkxŵcp~6~~ȫ5&'$@Y\iAVÏÛ^)Nv ᄰ1mǶ?g>KUf YD;l4![r?Z0󵇕VfWlBC j&TN m*c?8; Uk%?b6hH.DcAF6,d΅JƟox=+(9/L:8\Omϕ6,jLeG\Jh U`2=-n.@fJ3xˋ))dF?z0^ۃEM8?j`zT̼8LҽfCxYopy%:K>4k ϠXw3d]djBԐd}(] Qθ F'{K7wp z|a1ũ6ۙ*jɎw&IT|'gբ77?_Λ=HLi'CX:(y. ] tWb'.aMO[ײJ4W MmE w5>ͬh'5|(bP~1 er悔bS-Ƅy#CeK>zS ͗~ֈ.CX3>l-a$Ec6r8BFCoچ) "P7+һ5bdbp5B  _+>SX{ m-xZSlK+i=H}?P9bn"f)dC?3أds-lN Dvr@N/a+ @`%%C*|8`Eư$-(|Gumy/N-i{̘#;ǮN.maqAU?ZZ~K&7,qwb-3tw l\y59,G]i>r2*sPZ$ +bnlꉶ[Q~$ <[ [A)~EָNOY[3FUPV{s/b[2tj@wPYɕ| M ғ>!(] 7afՀ,!E NhCmƥ_NG?^$o#`-`ˬ8=V?c3|_88o qM_\*OblozWuv-ݺp~9+]+W6 VH]ޣ S=9{Mp`whj`9VBHMd][Vm-ǀ~RIHd5T^gfP‚bSjcg'W9D/G&:Fw<(#hF+̑ֆtLliO{%"CaG[ё[V YNqͨfvfiT.*e~3IIlix~/,0*A#s-GKDE֝{yf?UFaHWV[wp+{:ȎVy1 Lv^kơ٬X&-qzWo] 1g- w ħLBZn(04f)$#Vd*>{#ߤBl<"qz vQ!0O?saO݊.Tҕ; /ȝK̠mZ>`MׄsryU!gnf+w{/+Xw1QUm^Í; U ' Z-#v%(sjdq3%i{rPx'4oxJˠvkop̮_QnI5OUYM!CL\cS)ZbӓS$bf 2ޱ]G~НCCXM6TVH(E yb1\#Tk.|-i}S0$q(5M%eB$) low^;gui mJ̛x : fBcGSAƿz%Ң@ma  _ޱсdW1_Z6]٣emO&Snm|+ޮ9Fsc+8"Tul'17%Tq26B;4N0#"yӋ)`͍0ujY!.Lҙol*tXmn抃r=Wl@)FlS *IC4 i *q|Lt M:4^\ ս*>] >2\|iz 'a`2]rB͗$aFkq#9 lsd_kz^#yE!t08Z7tv̔žm,.5&z&{B  Ob]3CzG`J  } ?.tϏPWP˄R Õd"w2u;ٳ=be Y">EkϩoVPWqt@+PW7 i}NYc7\ꗂhJ`yzMQ?oi˩=8fterZɏ G*6u$`&FQi3Cպu9[!2*Uܹ 䲬ieO}]$)$[UJ”݌;;b0&0zV,237wG.gvHEpR{p&IzufR{BK C#" ݿ]ڞ:߇]@ XҥSr(Mo}&o̕;.B|,5x|?P`-m5dpS߼HU!]8Wʪ2{X'6:̸/3Z\d~[mᱨARw7D[JeiR7Ζ[P.s{;}a.!{Ex(_϶R j> jݐݱ6-03CZja +p K6 o_PΙy))=Qh:Z&G,O}L <\W1pF ig xDψS4[&dbc Vӡsax<KwjZxp*icp5ZmSTw$G=9Vhsead-:;ln B?5k wjέ2As1:)Rk(>ѝ^H,vxmc&1Ij̧ϼ==uӆ)cK>%ͻWd ͓dv7 <ǎ&P/cAsEL S?TOֵRp~ lC)簹n6xWZ %$ )فgWPϸ׿!eQCJ*ۣ'5+j)ؒgO}Nm n0قOLU˙7S92O$ _i٩=CCk5\Oնawj -'2JR ġ:U۠M41[n݆WgI>G{F73-vgHZE94nZbųI߆"Un$]pDPm4svOԈpB<В 72~~8k 6.֤~AK8&=Z\}Xm^i 1ˋ|p^f:HrSKYd 0'[Yd|Ҝ>MZJxPh<عS> ?bg(H cȧK E30 $ ]H(O$&t1HT0VGt[`v+^ ) JD63lQw2+y˷l7Mf>8F)qWnEaX6]Z* E6B-ivdM(Wxx3 ) reV;ʋrg)@iYT\b%i ǥǨ~_'H-.a4tt%]3xmBE IK[BYMۖIBjh:".ey 6-٠Se}-ѿk@mqh5U8_IK~.J2薩ﱄ  mP&?aq1HWbrNd]ĦM1 j"`KcAC ,0G- f3Uu/f2o#R{XeE5^8%|)۱ȶ$k*o )"Cn: )01sߣǻzbMʑV]vP3|mq{0x8wJ_j.CY"zr&'L/1hoRyTZQ G 81lS0ql5RXBP ldm,8ٻTֿ;ǵ>4ӢҳL5X!",U[YqSIr6LSHzhw 6Xa-ߏ'^_gPt3"Sp^lK[0o·'l8 `{~ LŰ1}P~TH=0F1U#oŅ.D lã$=#|ev h>E7kfh^s#5 #Aǫb>"^ny>I@1bZ석m;Fb +sF3lq6"rU꧌ՙnkIߵS%#ߴ7 X_m!N"?C۳AU8T7_q0/-{_>6LqY_tt<L#;Tt22"h@=~gO  OA4xϧؗC[NY gz "/Ӝȸy#q6$59 w &5Oj)Q:b+xR0Mur!Ȯ,~)ob"M(}lysǛ`XoN7g -y-8ݑΓDjfznIBg=BHRz9hC !nb9&%p)S_rn&t _J|̃jx_iF "߽{FW:&6qΡϡ 8rǻ/ mT!M]t|tM5'9cc/ݞ^[ /ePnktuo'c8Ҭܘx̹'sx w{&O0\Ϝ_0$$@5[`9eݍp"+=S^۲^Zq:+C*= q/Op _=ɨl*>W)F'JbSw ߍ|'Ukp[ xcS]?bE\qУn' |V V9zrt mO!S)NPޭi|F@8EYbc|q#S|~Gޒ}!?/~R@H@!$ΘC6r U;^%k2=x[ VT-i{db9z2L͕!!fu>Z}][mnp*}kD`eO GEH,0/(]_L"ksR3li0zAo|éFې^N otRMՈZ\[R?%},y|2[BxltS)I@>X5vv[ ׆Uo'=}/Xϙo"P1IM,u#[]Ve¦%a._,_3Tu^$:Oad׈_ֳR7ꩲԳQ$5ڨD'}e.4Ż-lydr eY|O@]]v?E=e?;G0uTl]PjHk46 J둡=!b(F x1-kj_+VSP^in,ו.(GĔݥl)䯬M7stf?ȎPߝh۶!?{yq񄌭-(NYnz ",l:+Ꚓـ,}"HM0Wawwmuz_%M׵<ތ>ɻځ@j1$X6oMR#ޚ9c&}l~Ui %2>4]dz0c9t ZFݶK͈g|wB˕|*U+ܾHT#u 2@7>>]ugaf8kϦиǮҎm-}Ĥ翘R*@.fb< g`KB!@ɶ`VI0ѠPM%u@< g]`[{V |>G@2_B`BrZ]S޳K_2#.ܰa`{{$Yڐ*RB38wYQ(:mSzڃ.2UR }@z JsTK̹C`i(ESc.lK5*;3 BkښBg< 6#!3~ńߡܖSD ]QOY.=x u.*b'Jl yK /aՈ$"Bgh$S#Jíku͇dkʢ6"7oi:vdjD#Kig꿺| {:P`3LZ>FH߾h,eゾALxW hcZnBi݈;=L z2=O5A٥-գR>]KZ=]]K$ل(`߱=z09}j_{KHaqT:3#YN~䅔cy!A%'+3{Gwlf^&w_r{"YnS즎-?!"(ǘ3_WU nbK^Q|7"t5?!EKb<<@ ʀ\ie6єR 77{#;yTxFovLx8fnŬwdbh&uAH -<i?}iۙR 5)&BW4w22X{hnLQ^VQY*Eݧ{RM}^ DcCʶ\gƂ6%*ZTy\8t55#ea{AJ.Vǹp@;m;YV\ ehnezP2# L"q8(x?hJP-$$0& 2Б48mVHqmY急ںA{&-U#P&fQ_.^H#p6H~w*Ɣv76OXG}ژĘƉ aTwF V9zZXV8Brdݗq?B|^nu%.4}x'9u?@<%A)cL~FbEu_,(]oS_8{HI)Pg&."SdM יK!UtBNִS][=mpZwZȐ{qckI@z",8%Pgv\GubLïI՝Q\H~3GSJ)uAtơ'&PvKN9pͨ9JU8d9ۭKD$),\{DWIJ>ӷiLC$ STtRSmïB[QXw猶fpԴ_M}g䱳ۚSa`R' ,~s4V({[zlgpUڕ*gRtLni&2r,*mT`3\'@Rd@6eXgu& ]mv:ܣ=Gsބw`낦_vv0{j%!ŭGjYq$?ҎrY9X:Qø^H@MpwYkjj7M7)7g)cgx9hu4y(E=/톫%/^3ШȾ!Vxє*X50 l 9J*eqCvth,'V|c/ cAO#J x,0(gB1P) lrCh8,-3tH-] 8Ȗ`424_ZT/jff&ϿaD >PjǦMp7c? /lW&;TQ FyE @V.uh"uQG3JsFB4'р}Mgt rX_Ωޅ&Sw`5~nZ% ~?z`'T3Q KD*:!})zrU>\ؑ$Bá|}nכiߙROln#¦}O=\R2 O`-(sFJ˞~}":PR e\biTe|XTSj췌]~+n `ԑM [I(-?!ˍ%->`CXha`ҋ{A n@QR6(D;_- ok++ [#zv܋Dv˴CS[6循RpӮp!}jzf>`!w$o<ޗO''8Do}r{Yi(4tΈ>nj8EiPE.'Ḩk0rrfthz ׊:Y>'R5LJn;Lm1 KOf;VT,oLi<U>ͺf`5H¾|g{iR໛!cݕIR߯3N{rX#qNt,9:;Fߋ#&[)fSy3yt3.Q]cp#t>pC,'yU`nZbe"aL_^BL/#W󃘿CO\هjII72%^ɻF᎕w<|7*Th0tՄѳܴZ.iKq>18{|4hY]pVPJ=r?OiYVZ^,:x0oh6UQϻ<a·B0FOP81WӢE("B92ɱQy1=9-`~V഼Kp!:+^ j;^t(X%pNO7YFy& ZZe Vbl)Q1F!O*w?o'3Ih7. 9| (19!x~AÇ:wu['xv-)ŽIfIStFLMx/ȮÙPtB?#(Ƨd.͐.uOܿS.Mɼ|&F+@_t`eh"zRv7C};4$M)hO!Vh.ZW3RNƠTKME?в檷h{سP9+H㟄l,SWfOב* &}Qm ,Wv~{5rv+:koK$H$w[2o1{U/\> g-h`q oUO*Ձib8JNa2,kڸ{LZSE¨np7dLPv1~S0^H 1+ P6{=vC6_ Njr˜@`X1Ϥ|`STQ~+Yv?d\Zf )7I7%&jʃa̻ 6.&ejGA8y}cp0*ݧgd_B Z|;MUa1CKR^-ȡ]{,g0z@&Jޔ\ ٲLtU};H:6FclJJ~gRгZCs #;odƅm+\ 1cIR6dӫ}o' 2/ˁIKGoJn6鋪ʰ?j||)(~++7qOkvSbc ƈv)5O5U .߲"j)ת2Ol,i"=Aj 5|3L=ܢqQ =֊4=:Y,=Ɍ1|ݾXLy_ǞʾxiBLvX%6W:$;ت|m"fƇF ~\f'y/6H̜  gnKEVgsP m$"3ѨEj^bd*k y7Y"#]zr@K[Dv8» O—7~h^StH> U)\m"~ #+1$0BznY=YPE,]l:,ӹT6%4Fb6'IRNXՆe2u(QsmsIDYydĹSIR)+VJ-Jb@$֝}@S a+$+ VS/ lTp(T_=7I gfLŵZ/m_Z (bt%SUnU>ђ^YI֞!nj%,€8.%[zTjxV@Vv'tROV;n_=`~9I6&ni@&jđ.i6`jvaݢP}ԏ&E{ŬbU^MxI ۷{ R]h`.vGH\Hz "ө;S ڇmu;" dFPI̮ɱڬ>hi,R0X MoĶI23)ʅD*{*!y{2" !JjhDzJc !y(? EsiUa;Z֍D$ E\v[Br _3O,XǍxKeRUvXE8#]vEw~yPEU ] b^U5+!R\Rh U"yD/e 9Qظ>e7R8|hݥDsM8,KDn^NTVze&`֟DKvr-4E_S8Qv57m;lF黁/8ye~VWH]kث o KrBZ:.8&!H- 9$-M숄0]kۋ y::E0Fi;\G *21pz`?؟8}@پ+`|Ls(u5ڬek`)߀s]ˏh ӨΣb389P1ūtOf3Rs_P8'DJdy@xG! h>'PzPe ȕBp< /}oybT "( hiKcŭv2qȃi>!OpGF#&IfyE)|caLS8-I+GVi姠Dջ;MImL%{ H[l6ˢhf/S[[M&޹$A<{([}K\64Z5;A]wGt+]K9)![ٵXV`i)8dF}}[H$fhؓ\d?: o3r}He%@' ]G!D=E L_gԶTߑk`b9D)aR-({n %lޡ#Raf84z w@e߯AX?#Fa`kՠgH͗ KZ\lVOr?kOMfN#P zy:Ro" f@PnńiO,\*ϕ*KgAPzjJmSȐ6ŽB[s I#Shf|o䌂k4x?W`=J{0o pa3Tjӯe2W"` g. 4u?=_<%6SR3$Z#%}iOǪADSc=dQ5|ƾ?ڮ s4q]h5`A3w{YC,]hݱR;^8.FY@d@*]qWZ k1ݹyɶCҷh0qnR*0`nmKn_.EZk% S0}=AVg%)t=Rd)Pa[R%롊>R i^}C-`UnJ\<6 lU}zߗ3MEi]8L {46N_3s' ^#b ˆu膧LIaLR7b:=v̱e0"/@Wɖ*,6݂T`ܖU8^E nwHuƝ NpBc<=DO3J4]Fooy! 31! |N.bJz X){w`WpB1G*pt #O^3݄@(T;dE9j{3ذ~>Vs04%+N4 闍e;}"vlU@`~pAWN5l[רFD(D b\fFmʅ[i0CIɔMl.&;Z3g 1U.r?enԊ!9&9" P'={j\.]_FIEMJ9 Lܰۯ B!-RLɈeu48 B7ܟw,ƾ,,,\xz3oTREG%xk+q0L1+egW3b+j:}ơn=>sV[{"-0b[B,Hp1:f\?Ip?RV3L*WtWV(! Yr `A`jBTA^kU3:]ZMp'Z1o&oX_6:K,VîjO2ҩc"]]TDtA4o aіMB\.Y"P٢()sQGd<}\<ŪrVn faBfwBa xR+[Ź+= 96(he<A TjR{'BW;TFCL@R^ q ϡ<-Oi 9?;(Ӑk\ӎʞ#>5Uy7c"RfBkrʱ4Ucz\ѿbB?KS.:Q#"n}Ƕ' v2X™lK7xl-'5"v~߲ )\v&լdE/T괪42>| bzAPBJL&";'G=+Rzlv.E I'qۜӠ4E&=%qT"N} v>*͎[s}{gFǥ2;֑xKt wX{ی /SGC<2bM2ݷbV:3je&^0Ɣ}hkӹr7eFGΆZ1,jF‚zwH?ŷ CO8D?~2]/ S^J|d@Ĭԣ~/:Wj vPbBM.) h !4g:~;zNj`fd8>'itu'٤&ج3^# ޓD䴬i{/䖰Aېl|+0P>G_Ie LԂȚ7^l)+Co>'+69e?K{DVd־؞wHXiQI&Nq_N㚬#w {{RSc M.>mĝ~!>E1ƶp-_yqg.RI>T2I"HY"pnAݗ-i/Uy%I5$&hug/q`f['Gp3hKc$QEAU vI0yeA.F[rpADr٬+aPE1'썊7̳@p4-ZX5l񠵥gIo!pQ@3cM\ݜ{[K/A!*">4+34( k +hV(tOsxJESeB*YŁFF'@vXk0S`ҿp\ka;$kihL􃶆>^upT2> ݭJvegS2)A/雚c_.}ph,K.e[},xC*a3H;  8xZ FRr 'Dv ]K.pzzmaMٶ hOQ*aT*c(WE9 ?&ek9\l쯝v5ՓU٩( uV4b IL"OR;}-7 Na#'=o(tߨ}/3ifR).#G|r~gty_ݘhF T= 8Fcxp㮦CucAЂ _㚮Q @C>(1EQ Z:GAؓ~ϞVUtf'3P:wV\]*-ym ?u #N61TKt̡eU>5'qYM^̑mX&B#_`#in~psHQ>[OC]a5fH j1͆xBq&ܤrkjc)iO8]ϴ_խ UӢXG]:!u̞&\`]O>lh^:Du ̆:PnH }Fk|XA\tY6CTms_,犲~pCpÏ28Q*ڄ$sQ?5*bGС&2zxÌr5=&i6\r]}#?oVB5@j[kf7B@odh_n᤟ u]2cQ>5;5{Vy'q#$;!~љɳ}CYhycƬ V\Jrh/m;oԑ+5\1>Q0Lb$^`e6 ;˳[h8p]ժ@ n*I4Ga6t"$A 9_y)xMZi<<~pL_\Tj\6L=F& IB7REj=M) AqD 87w}*Y *1#I11X=̈#N%zY`Ԥ wjEx%&mZ\?IduZ}6qP{<.jz'JNF =!-ǼM` Uچ Hpߢ 3,9잹.blXmXGZoHz\-q|S篋t\?ث(_d3"AgZi2|x}T,7'VV[3/[ %TzBofCs Aӗ;p/oήaW@@&#)<*b9Уȓ7Q[C zF"@,dX0#\eZmN1n.Es^ꕛ^G٧U75"-'7x1Wy J–2vD(8 f&fuQ@}̀.K2>(eC[3$_ILzG \t a(KXԙ槲a8)sÕčDO& 7[8sg#daf@pr8!.??}9L eaBgtT)yk/.˅la'GfaxVmGۣPv Ӹoc]3OUN7! >dNa[|5$KC9%j.6˨8=!@/a8^з/T#"Y.S38nlܭ f>д[ó2[[ScD &h*g\O]!^)xP1mF%Q @o܅a) 'i w0+})pU?$m.Oɣ(LeL-WbPk#.0XGoOIz 9ye=p ?^eI/K*#Ki~^y ;#musR% AD4ƭ\@DiA~S|#ѹN35nV .LGXYB8Spw/u\\ ԕlȃIEXJ6-WI) sǹJEN&O#%꽬 Dh /v)9{SJ @YZMMI}@&NjX,wok@&G|mWp'qsc,r""&,Y$b{;~'ys `Q EcQ w|TikZІQ|V%I046d)B* =<+ 2X{os4gA֦t˶ٛw4MrN z{=C>-gUk٧6S]ܷVu1R鎻d>/C:P:VjP?|dE~+ҭ +Z]z8/7Fk~1 ~2gd)஼i;Puao[Qw*&,4\nΥS$(tC\IWw4̯ ֡=sS]x;'Տg\+IYr@g0n5?FiV+ S}a}AѢJ}H2:q QukbhUm:i',\5ZUq,7:5 {Kؕ=K#,f=Eˬ$D@(ܢkC.2~?!<+ ~fB3ѹ%4`|ҽds-(6S`!v}*  Xqۏ 7Ì5-6(yH1\9XS׫;%:bJE.X]o斉e? tU5[:K@p=IHII?Q(mV/-Py9kW;w1 0NKFbyU{)(fޠs..LQPS)aڲImKe;L##T :َ6l*0S4P' ho k(HZ {בY meCaRm;+=ve6c8t0yCˌ spZOoB?8;T \;R%eۆ+ YIO#ᨌ%qPHfSXgMTdS۸p뇾Bڣ}-f}z|^bS_ 3**;s ԗF]`~M{n=Tal%B}PY!",*A(m\rk4GTAy{*WH4kd:gܗN,2آ 'tqV^BS]W2UktC Mzk"NU;U1v28PЀXxOk"s(F^iŎE-lPT+\ygF]]$. >|9nv g;M>I"\*fCD Rfdܼb,br⹷:Gɠ1̡c`6u_]]JqW9h .tQ$BtMU-NV<&D2рύ9Wg[@737WaA:dn `gd}llMt !BpRY:; w"|k2iQ F4r2+/*Ť^r&΃`MD_鏸)danv~\@)q-,Ti1o߆*w{фCuP[?\lCNRiWYѤ3a & r1aĵA$J "r1HVA/"tMx7|=;V# Qa3bǾD,蜪_|PeqP'fz2pu{p=(ܯYemO<ɿjϙ21/Z7DICWM1@K1+ "˯ېҶk ذJB_N5K!IXaXyNMM(ǏسCobʗuϿ i9Na/z/abbڥf;x&pGD&"g…YrɳC%\F}d e@?v2#%b#ԩTR\QJgg3Yvw"NoC8c_͠1Av4+}&7f.GLx}=Y(1~ &kE;J.kh)w,JTKtǩOH͍ Ii6= Ys`EhcH8-Riț76h &Lr$P[%Ea+!>*:`/X}%)^1tw^'.^c.nk/HBpȼ~]Í\Bь dF{F=cG]wA{&Uuyc-vSxBWhvQAFLcݛ8'<MD_2u&#j3 S+=ͧL4%I/hq>-wV*6UCRõ .>d2b5:I<1ْҎDBLVG$`1tD\d>C2e?JQ+h[+}zƑP>ur]"MxB>E\鼖:Af 鼷j}ZbbOqC ēld [7z$ ɓ^ ySwk+6DeLˌv_8'Ww5) `!.PD_Ehͫ"Vqb{5oTfxdou8o̫'?86`έe8xC![{;H-'ږe$X2ur؝M~SDED2%ą<242] vRv) 4V)>GvGA"2cVj7Qt_Q+v1UM= {g^3Jes!Zemo((nIG`BUz =Aee[$緤*F ;_T$82YW0Գ'˰'=ZsY3{( $R:q|pq,NYQ(h8tvl\VBf}2@D8 J17>:F@Ȇ #N]UhsvCr|U͙Ҥ]E1)a3Y;O _@ mkt }ĂlѵoK5^Do|H E)Ev97%AX&*jR8FDE ̳ŗ5ZJ48v} ;CG@FF atraRT8qԪ J6 /kDKz:Ϣyx%8|aSXK+\P`l\`]<)@$,0ĉL6P  d&RүcISru~5Bae$otR+P2BAv:9Tn R\ j8]nۊ4=l}颂ҼH 5|rcؖ+tJVߠ]^Rv=ilz qAVJW\ФC|I[歵Gzo*, PrCb QMDvp_<C;Rk̟6? @&)- wK+Y֙QaMqJ`c\j`Y&v7EIQ.7G{?T4Ts䷞ͷ nͻqb]DY4v)ٰP5uh(y`g-zM`8~: .ㇼU |(Af(#1YLmKQq 0[v8kQggx+)fp  o=ixĽM; Mk܇[ 6qq.>- P&#'6lHj!I4>tn.ٳ":3nvǣhH<ZȄDYҒftf-r%T.X(Bq-` !yDԩ8>&w,}^TQZЯ݋(emiv]+nt2fY4K"2h) >/tK"yhVϔ/yUd hyO1؆lcFT^JO-eϤVR2qEK3FlA@=rjrK7ᾓ^ǰ/TZn2+=z8s'DwQˋ\+m*[}L+Dn曨< >"N\S+a#0w}uk:3e{.N"VHeFH"l!7V"c,p"~nYn~kr4_U:4c .TL o;DRgd\gKűA(}oQ_fUgɝMpŽAջjvn]oJӺ”ڌ#>Qgf*awr* oZK9Hɿ96qXɸD{'31u2 3>UA,.U3l"8&,zSKo'6\zbGn5JHHqJ[7PZimTețΥXyߞWb`z ]y!-Hgز!XA{}[oC.VsګV06\O$f;@.Cz# l@u$/$>_!lxOy` HK g :ЧG2vۜ}Zfs"\Z˩?= žqysr'݇ftn C@mr2җqEc ^9tgI%m袠X:PXkM)zW:hƞ` -36 djtVJ}Լk$98tuMK ոI0d4D!m,,0EOpv~Yi\Ab[=T LLvgaO.:(#? gAw+ (UNX6撷OI7|-d<9)A=}JJ.yP7{^h^Ձ =Y$%3VQ?J.K5Pw'&%Mݗ~2}RY,>}?VH {&?pX(R_iY=.ij_/X.³}N3qWeeV,LE (_c_"MN~ |h;J"7Xi[Lˀ'aD0ɑ^`V%{_@RE|[l*ֺ19E^Pʄ1(I~PÏzia/*׿ϥޜ}և5 fG+XE:m _nQ3,#8"-jB4gMڴDEw1_Xe}jBN|7B;"׿x~\bR)Q |y ۡٴ,i*rזU:)YKg:ґyh=Z1b!~S9 . UASYb Ow52H^fFA֬8IҎa ٿWJuXe/vU:d" {;eE=)^}2.N}cB6臎^FYN#h本@v͈7϶ؿq@5N=c|)>Hu&g\W%Ç\ꭢNCj՘{ԳtRE@DPq'F |ѡ+}7mML XP5NmVߟus*(l?.xLY,9NRu#&suR}toln]z"+5P:JԊCٴdϺbjqpv *T*7Vw]=x8 Wref]rʊ=T]*sq @y{́ hp>>sf^QLu7LT;UYyd)Ҧ($GNX]oSa6ڥ2p5XΕqfmDCe*=D'/Q: 㟥(ڒ']A֊YJ W~v˿5p^x7.t;Z9d9vc=磽ƶÃIKr׫rs}?]H ݴM6Ez=YK"͂C^ukpYUܝ;)V2H[r#z-clK#h`6cXkREhcE_&'SFN ]Nh=P;hxϕ=of-a"PWGgbV{d nI NT:)!U~Pͅ1iBT-F89E XcI8?jd=8Rn};d7;@']W I(Vx@46*N ʙ9ܳcC$y5jaá̍ `:nnBn6l?`6b /0ޫ9NO0;JzfFZ76 _xj1&q+7^eGI2Y࿆\=%)YL"$²] 5Ӿ8EF' UNo=޷*eC3s8heX%ԻDW\l#@N{t9,v%ozP jS;@ hO SBęi=~n Fh@/n)w,>Gz$TH`I08jQ]\IYT:'ے/v^ `>[ZhrQnaؕfMcHf-ko-6G;mKe39oҦ;/%zȥb-t&ml.zPI+" WIevQYH.Š3<ZZ> ϢAgh7i:nPs|78ɬ=4A<jΚl D,S⽉܍D:$xH3Jv?1[*dK XAa bʖ]3G T͌"4ݭ'511^2_ 6;a9lvW'-L7%P חG;E 66T?ӾXd5n|z, 9وy甑Yh%eJ.{QBr T.AE_OM*y "ImFNtbpb҅t̹Nn]؊| hO| Ņ`SA7?V2bH!Sg+2cB !:eC tA_Ay W_ob&4kv@D4Ha4.VoF.}b"\n<1 $ǀF DSdipV[P, y9«`kfM5-*Pvxߞ&x#s\;A{2aa|N:W~3V̴+Ow܏8cѻa4q|=P.-,/m(6!kaPipVSE$[Dweh-&#<év ,**)e4x䅲KыןR5ql'l#)ԒTUDB:[8)u|Z$GZRuih*ZuQ̨@I^lD6yI&L-ET ‰,NӿI0'^֜$end:vrz}lj7ד8퇠ύRٸ[`$gV7VC?EΙjI/f꟧#7 n\ HLSiN,h]xx ԰ގHOfDZ0Ri 払xDdKM* ᵼR6(mHuu(i)Vp*.|dnr3Xyigk^Ul4[_h%N(l*nRV@ɺ$c0;^#'QuիIc{ġV;2y\e`l ӕt>QP~v)/75IJe%د9:y'iI&rsqy [lO$wr])TJHx6Aw\cĦ0hNe7r_V|CS潥 }kw@"v;L eI ;'ߊ/zMyh!6^aG(r!4j\/,[x08eX;n#Ž&/"ԭ)~Zk@bFV5ý p T\v'](+9%)@ܵ{1ţx$,lҙՑιl$bAٖHɊdWaÂFɝރjICgD¨V@};bFbLjc).Xlmr΁E/enqZTI0i3xYmx#nV4ZN(H@k:Z+Z=GKD%f2whMh,Ѭ |uRq{M*1hFi1YBs;;hnCi hd<2 GBq9l_ݲlڳ1WZ[G JDiA]fךvv%0dU]ШW鵲Yh&nS_?X# %Vf {ZbˉGE.Ӈ̪]H %e qgƺҜ$w7vڼT9 LCʍF>!iK_3IV}߭5Cy;gȜA#ć? A++k1hQM Y.ƚLd@'7Z k"= <&scEI%Y?ta*Q͙ȿX] AorLfu%8$OTnj |c=qM)O2)tE)ɀ. 2{jBחp͚8Cj}P.(5@n[p˳ WԋIQ֝G5;~oK^H2\ YZZʔ&Н)qKSAm$mx?E$Cr#. ?![Fx("gV/T"^%|#J6 1m PPF"|.h<)rێ6O(qވ%`BrG&"v`$@tstcշTF+<)}:0mYZ֬C3Uk6_ d{D})&w&}Ad 5?%6,֓-ZF0GDwvUկ/[ߢ"AQ+F{2kE|vSU(851}JPp'sh?\c   i)ZN`8OGlO2}bpQmU}n:FE|I3 P$7lŠa}Q{%{=+-(ta՞rQbWf-|X&|]>!@1,89~Mo_*Tk6 =?YrsSȠrqJKb.]ZbsbVn =ċߖ^V"6~- DiPY BwPMq(B:RP{% 0 Mu.CGrp1gY}G0Cߥ Z|N8$AѶZĨ3$ :ո(v _\0Զ]u\1D ơM;#!f+{f#N6H{^R/3ʘ^a 5EYt޻?I.eEP?g֡$uܧȯj[sg[qCS04#EU fE;Lzyk$rbWT;ɚ@tdT1G+'oD@$͞teb9 㣼Ay-yi 2)< c?Y̽^ږcǹ |^Ej~G$TB 01>s;Y`2tyeO WV\V5tUU CPVrqCDqfL};뷜{OK.ƁMp1&srF`ŏH)N{PN^5-sS1>hvf!b= 3/xGvDCJ<|!\$v.țg6w(=d2'5Q{/#Csl wZ|YSuL ZYwl7ICOkRK7}wR|[6q(IbotZSMծ4?>Z 2Ym>PlIH|EH R;Pld*nꢔS3_15;kC}(`G&2Tv1l5jN` s+\C^ zTO"y?cF͸.Z{Fx8v n/v(O-KyK1c դR4Skmg+E'$%HBfv#!۵Tl@e,QჁewWsJbxHX=ANgcY` Auj2L< Nj0 u/9`4̙yqg4Oȇ![o=X؞FPiM,ȚɝSv,@uo}c4#\!;G &V2o)h $OAؒ4|?OZjPjlϫVԎ=^z/6=GH_O RNEWljx}z V̧ЯPg]@o|ݽbC6 OTڿO0 @̨͔]2x)mœӈY8b—9yzXڍϐ4dI lnl  5GT<n>z (K1]$ 'ID:g]-{0tKlm"iDM_Q7`CB_[Z3r"hIkdj1 1g`KT~aVWֽG.cl<Ee1JVo+&TS5NQ_&AiQM#)Qw_ͬ]fj3JMF[o+xPga}]嗋x!TX#Cs1?pGt"Ƃ(梸R;|!B'C;3.SGw3E@dFSg9ɬV4Yɣt/R}#9UBea/W=tjq-`={z9P;x3K0WG7 ʪ,_'rs'r=$EVCTO4<o[4)Lۢ@=) #0#,GםVmEa%1ƶelW?h#T/;ڴ r:0&tf|c@=28Xr-xO=.:  tqD/ #JȾiejOt$9{B*Uّ2 aUWĂ+P$q@yIR[CmrQj^|yw2UZx3.[Atg_p #2zdϞi<#d\bjUx*48gsNVyooS>!~z]=+zk&^3)?:R=۞4m(瀦~uLj]70iqS7ALo:Hџ1œiۂdD󟽨l n >=|Pw~n}mPvO=>E'n|6hnƈhe|hS7F,HDE4WfLbeXծ܃q}\;8bjl)ғNuSi{s%L'haὶP昆A&(;ZR}Kۂ50vݼS>_b@$@n`oVKZO ydBTst-uxdS܆(`)wU: L !mDu%[QKuOT'nGstt^ uʅ{7][koy T8M ;}g_T=B[fT=9ѽ n9ki[!Q;c4:Rѭ*,Ean7Չ{C7WM0hpv~u3PaYaS}%xi@>pQWx_gt$O|y0^)p`2|KG)?a8SnŊ:Ͷ~#0KhTfJQxP9 aK:X!BƸ$/$^-aO&(ЯIUtoafJ!j_}_ wpֳQ8_=bDx%%$B?{cZP`W ;f݊WԒaLމbfqJ;5:<2U8g5}Yݼu{0).A麋 X^F=f. 'd<$*l $kg,wK1Vjn,Q\idl4]xlJYٸZ 'Y+/0{I߻l%.@!q=NIn>CWOQ3'#=U ŀ9||lehx޵A e -TfU`_O_;6;5yd}; gar ᾧ6KN3JDGzȿ1w Fp?CJ)u 䘼'-"ly{im|=`Gk/d 8ʹ" _OtI}1G̘TurZ#"X(q+;A1!е8h ~\mjhJp`y~us/hLmmx\hUWi{SK^N/-٧w`RƳ(?=i(Tݢ_0T/)jW[t2g us,${IsHqN CK:o6`UgWc\mbO_(5߬en܅ DCޑ0A zhrKOb$U f0`J.Tr'}@gO3\#³2!^ObXxd {fo&XS[xqJ\,,JTJۺ%"ڽ+R y9[dO-`1um3Vq]Ѭ~iaiӶ_)./1k9L.j>,\L,}#M1~XӶAdف.]fG||4zxD#q :cS^lv_c1_CBDgEԏe].1һibݠbN$`Z FJh[on9x쬡ōG t|mlNd90;Y W OɶTSupnFdwpVXR0k,%d)N:i}6WHp^&tU@6 3!/7U{Pڶ&D?f&9   Y!NAF٨aOKPn^5q |izEٜne8[yf&A*?f퍛SMb=Vikҕ 4UMh ZGkc&؃0wB%ɿ&>e߰L۠.|h3ܠYcH[=2Vt Gk%G)ϙSTlF\n6 t2#sj]VQ6M^a}fm $<GEqlSNY>'E7g!6n4!%3{% Ua26i\ l#\ ks)4~Bw: ]ej}.Hp}y\x=n xE*Fj_[8œϷanIV uyB951lP̦==iZ&F欙Ϭϱ,~4;f[hs? Ҟ7E,*~S,@I@ X4|gwQ:=Nl un,3n<9O]2|2)V/*tl(̀'6NT xl P 8(@7>Bɜ$zUM.Jz4Dx歵;m@]?HH{Qm56VlO!'qOOA3 (͘SnE/E|ƿ7>}5S&' (CJ0};j=NVeUz,웶8)Aa>g/`7 JdgT,.A7™w$ƴJ[c# ̐j% UrZeC (Q'H;I"Tݖ7^^}HrPUyDO&=c ᓼ}@yn24jى"δ67[aJ(^~pe5KVu;A?#F?Πֹp]R)a/?[ѥ%X]%u*kpʮ"[RY:'3U<܊jn;:?,k˟?19 ?VJ:“\L-||d%Hyl:Enγ::[=G4h\M;YrB6 ǙKԚERv6+|-@VvSӋsJ(0oN늖\ܢĐ3p߾誣iW緆}Q*R;*\q.2)0lSu{r)PΊV|ej\m"vXpc6gLXQ6t ';tBi[ƀevw!+[)CK,ʼ1.ޯz߂9Bt-]"XJZ`k$#{L!Fϸ_ޜJN*g0w75]2vPi>#(_h/m.&LKSm"0{DtVrzxmb'H*۞`6bYϭ{N)}sW֧SGUEb8Yܭ钪6Dro߱TH;eÚ{N֭@x_hjc"ns++(d z0Luo4P!`lmf|kȀ* q=fWb,lg;<]f/+EDA5I!3 uPí,w/w-ېC.@#HK*h+q^wJPl+brSR]%kPp?Jz[,r{Q.`o$gN$OJvICR|Y@ ħq/[XoO#mSu@>죅)n& X @π,꛽ 6V7p69شcs+4;Z j=J l' tr*:53>X|>Ǒ 26#:۫Riy3D` UX5Rye1LpG?CПѓ@gɮ+q&JAXt=˿K4b&U A˞c1ꉟ^Ǡ U.BA"E;{k+@RHI9_†wT@`NVQ)Q޽[*18%m|'Peh,-UwYxab^ sbUꞾKb32ՙǫ8VVdO8G%n0IkԵNv ([ݧ?tEQoo|J;-[xImyﰲ]f"(LuCpΫ>$˘v1’`pUqdJKֲ(NFK[-׆۷ϲ"8 eI@4Xђ8rYg tw&%\tĎ VA-U{_c.3H p =~4<}-(ol}u+jַXF/ 4rf#bANEAHd#29؇HSG\8k*[!+A_ˮnU)pq9rx OlMA2 /D1gm*Eic㋧@E86JOWp[lH,n7J8ZFmZB@F7t0c#$: > (̣dC': ,rx)HlgO 3HO0.7حPQd`HU Ccそ n[߁r vI쯷Try 5h!+ ;HuFv)L͌|{MGhxUE N`=Lm<ə@uMAL3Q^-V@ni\97'9C@rgvZR\JH`Klf*,Rs "د=XQHmw _L9Ϙ7UkuMnCPQ:$T;gnXFHV"A w&&HgW._;^]D0ZŢr;il Ut&m ݱY/a6 ;( d;Wy U9*+ ս.҃"%'+[q2z@ AdO7\_+[yuF΋(R`#Qx^gQLDxs]&E뉣`Yc`2~$>sN GMjn͕塓#H1v Ⱥ&;#QU}FHzK6+SKGk\Єd[C_L5])nwr3}0;쫱zz}D˛]A//~$kn"9  կ>1CҲ N /N<xy݉YrBb0Bq,ޔ#vVG—Nn,37qTlEj5ɽ=*>yhpüe$٨9g;#e_) Eؘ@1N;O!TΕA1"ݽޏie1)d#]եJmM^]Zk_dJAOlraDQ("VѶ[ =Ogx_c:KB*JTDc,WyghδI dF#Cjp9G s5 c9hpqu9r2oX}ҁi2 ԧB6r z(u/sX㘪cmsVjXlS0(yD/r`qd[Qw&kgVĥ[dQ>33vEVY |"R;2įW$#%ԿĐΚĩ}G{R8Lt_ ռ(I3cP|-@4YtEaʼd F\rNz#:4oPH0rՃa^W ]T&tӛe %󐿓2rxS¢PB(sλL 2@$}'}BJS3>Qoq^)'`ptI(^xE̎ˆ8Բ?/!Sp@CY$Q-/-9 a͡_lPMȑ!8V5H7f.+Z7N4[$T"*o7LU="ӽx@a (B09kGz-NYdY)PAOT0(iܾR.`^yT1qZ?8ŀnK(0j=˰Gh\plW*efd2Lj mVT:^Kt_t:683Y=^Ev7smsɵά~:Ria8b |R5=o6iكI6iD(eu)~,(j/0qh_y dܼ(^_H*Sp1e %xȵHTzPq"fqRB.χ9Fd`7QTS )%~U?3x[s!k=?:D8+mtrY#A2((&!!=+s4>´ĵ6;{ LŬ<5p0v4K1l>cDwLcFޡ-:GŠ ؄0Hҽmzts6c˪o a-fJn,#a#V纃AFOI%[{l:Jl.=ڮc0ɧdOWͳMV D}d^JtxJWaQ"f͏\eʰWM.mӀ702Q`Etpb[{y4eAO$ T K&z>z^J̀VҮ6kqPfh̭+q;NAZ c<ܠgt 'Rz˕ 9eYu׉y&Srˮ%V2ϗYcЇڿ%ؽh`@ur]:[."%0FwoyqWe=IuvCGo 8nC0P$ϛ}Qfq\N]5O .4w-9هULGJ"ґAHx45$4PDGIsXs(f"Xkmw-!kxhJ䩒\"m383MPiة)So*<1EyKZCdX4k7"'h:P.rIΘGfgl.$P^ZXMx3$z $rj#Q[((b90bٔ*yD8`^%Uv$Ѣ(N`̏4g"x36hw`w\`DVK '?ԠރzdrQnR_)@$lv̂RaVXb[GmRmv\f-eitav; gNaGJVWU\ DhOhOg+FI}V󅿤vp[N ̍tsCP5qIoP<_gt)"3CW;x@hqV'mE?9yýܟϋ1Xe:xhAVQXuD^"m&ٹr1C;~hϢil |S5?(?mO~3oFŴF;~gv^w4†BwNs D,TGN=l㊳Oŝx+ܽI0|lx!ɰx)^?8ܭTGK_;$[G!M@nm~3 e&Ve,;g'it{%pY_`AQPnɋȁ"ۼGTf_@==NZ $)Ÿ>TPZߧ}l,=4|[@٬ `Oi+sV҈$bI͔8|%G}seEm#'zHOJkSL;s`|Ki/(R0 /T?^)g[2Iܼi# I8X+Z/B8oݤp-]ۼ#M .Q, a;?xPNU f-o|٨LX1V| sCe%MAV!% b+?BPOnƤUC+U ntVҗPSՅԸ|luDZib:w~H%Y)HkRlnv7j1~hV̘ 2X!YǦM1fUՑQlW o@&M?ɁeC<,(ꛕ};^b6%.J}&R z0X-,&meW5m'bgs>R#@&1N~#o= h~ڥfL\:v"ϡJʁ@F*}dETLf;^~V|Yx wDu٠i5mF,)5VDTۮ פ֤%c!#jYw`Hڕ9iv}kđbʢ!/P=I9K?~*Ɵ5|@d+M4bEud]r0Du|E/ =(y  ;ͻ[jdA#6>fa7hܚ6|(KQ7؊qs usv>q8p \v}S'IG&O2G* A9{Z"O}Sl7x@bd.0@GB% j' Ru#?ViS Tl-QG'"0ُD"etʮ,}ݱDZz-J$[zC]зz%[Ja_ms V(joɱSB/^zG t7;xƾxGPDF wi+mƐq-&@*%C6t@JI8僇Z͂$wwdCTf2]lO,r23 \3s|E6ޛכۺuh~,c>%hqlf4j^{fYpδ0k5caՕux VaQ?yyZ[CWm?LZ%?\4bű:˸+aIW?0 B}7Zɸ#i%9ң'#J@#OS a^9\]g7U*(Rfvlƹ7gazB߸!A&_Bk[ {bo Ym;*(3t_w?N͖FK(aZrFz˚ͯ֝Ś1l)Ͼ<孍c'"v|5|ȍg`C m4mJț eNW;(aw o.M,EDIa*֣$S7^> }9 ivCV yadQNB{~ݬTft[OJ*U*t} ɠ/ ~C8^B깪gk;g6u {-ҪͲv;o5R+k(|,4zD"݅ <$HX< f_o2?.#VmhaZeôw JQaco|rVv߁pT!f?cGAţ,4:’n2jFR\@?uFoM8+sM 6g> >S8w';uI+ښ{p& u-Q 1V9яxuZ8_z z3jd2摰HGG*zY YZ