libselinux-static-2.9-8.el8 >  A cU]U;N -Jj{FB87*<&iwx7 BqaP;{i6u,}P7pP$ V[OyU|D*b^UI{R g%(iR A8-R3KD,\9Gz#-m^hbϡv%] 45$jօ{:<%zuY/gd:Lպ.n "sR=e6'wh>Ŝ< X:oKxkіʝF3$R@E ^8[oO~1bpRD 8~Uw079ba3083c185f350fe0fc1132ad9cf1301b6ad2dcde098b7e07adf618b1d23a15d8f560c9f8201baeb44e898e9af4a590c8d5ec$cU]ƥ,윰 uF4+g.Cyl7ta~ُ맇Q0M)cRKÄ75՗X+h_Rg,Ӹf[ٛ0N8ba:fIGQ ңxp"b_zH::oH]9,?p(oT&4 rt*6ƒ93ԯy*7'W0`#3YDTTb,\:wĨ@r]AȠm#]ղRlp~Y$HդtrCg*3w][d4lS `EC,p9[<?[,d  E IOX\ ^ ` d  (8N9 N:k\NGYHY IYXYYY\Y0]Y4^YAbYMdZeZfZlZtZuZvZZZZ[(Clibselinux-static2.98.el8Static libraries used to build SELinuxThe libselinux-static package contains the static libraries needed for developing SELinux applications.c%x86-02.mbox.centos.org CentOSCentOSPublic DomainCentOS Buildsys Unspecifiedhttps://github.com/SELinuxProject/selinux/wikilinuxx86_64 켁c%01d934c4ca766eb6291e96bb5e091a6adea993c7051042998da7a9f917b4f8b3rootrootlibselinux-2.9-8.el8.src.rpmlibselinux-staticlibselinux-static(x86-64)    libselinux-devel(x86-64)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)2.9-8.el83.0.4-14.6.0-14.0-15.2-14.14.3c@c.b_@_l@]X]@\@[@[ā@[ @[,[@[Zz@ZK@ZZZI@Z@Z}@Zz@Zu@ZTZOhZfY@Y˒Y(@YJYV@Y@Y|xY{'@Yx@Y.X-Xg@X@X @XN@X@XXx@Xv@XJX43@WH@W9W@Wq@Wm Wk@W,@W'A@W#LW@VяVIVɦV=@VVii@V@V UU@U4@Ua@UQ@U8U6;UTS@S@SSShShSXS 4@S@R@RUR&RʚRkR%R@RMUM@M@M@M@MlMQ0@MGM5ML@L-@L@L*@LLq@LN@LF@L$@KKKrK@KKqK}+KTM@KA@K@JJJJG@JG@JG@JjJS8JS8JB@J@JMIܑI@IԨIbI̿I@IV@III@I@I2I@IcGIcGIcGIG@IG@IBR@I1.I!\I!\I-HHHe@He@He@He@H@HHH@Ht@HsVHgy@H^>H^>H-w@H!H @H@G@GG#GF@G@GGƢ@GƢ@G­G@GGD@G@G@G@G,@G,@G@GG@GZ@GZ@GeGeG|@G|@GO@GO@G<4G<4G0W@G'@FF@FIFFFFF&@FF@FvFFS@FF@FF]F@FtFFzh@Fw@Fm9@F` @F; @F-@F,F@F@FF*FF @F @FoE@EE@E4@EE?Eɿ@EEEEElEx@E&E=E=E@Ex@EvEnEYEK/@E>@E4EE EgEgEDfDDDDq@D@DB@DB@DB@DB@D{DDX@D4D4D4DD@D@D~D~D|3DvDu@Dr@Dr@DlaDk@DiD`@D_2D_2DX@DWID?D;@D'Dj@C@CCC-Cǖ@Cǖ@C[CCC8@C@CC @CCqC @CCCC@CBC@C@C|pC|pC{@CyCp@Cp@CoACkM@CiCf@C_oC_oC^@C^@CX@CWCS@COCFc@CFc@CECECBnCA@C;@C:C*C&@C&@C%mCC@CC C a@C a@C&B=BۙB@B@Br!Br!Br!Bn-@BgB] B] BZfBS@BQ,@BIC@BAZ@B9q@B9q@B06B-B$Y@B#BB@B@B LB LBBAA)@A@A@AA@A@A@AyAҜ@AJA@A`A`AA@AA@Ak@AAA@AvA@AAoA]FA]FAQi@AN@AI@AF@AF@AA@A>@A>@A7 @A7 @A5A4h@A3A3A/"@A-A+-A(A$@A!@A A A@A@@@q@7@@@@6@@@A@)@@@@@@@@@~y@@~y@@~y@@}'@s@@s@@s@@l@@ia@@b@b@b@O@@O@@Dw@@9@@,@@ @/@@???E@?E@?٭???q@??@?@?@?}d?z?a@?M?D@>S@Vit Mojzis - 2.9-8Vit Mojzis - 2.9-7Vit Mojzis - 2.9-6Vit Mojzis - 2.9-5Vit Mojzis - 2.9-4Vit Mojzis - 2.9-3Petr Lautrbach - 2.9-2.1Petr Lautrbach - 2.9-1Petr Lautrbach - 2.8-6Petr Lautrbach - 2.8-5Petr Lautrbach - 2.8-4Petr Lautrbach - 2.8-3Petr Lautrbach - 2.8-2Petr Lautrbach - 2.8-1Petr Lautrbach - 2.8-0.rc3.1Petr Lautrbach - 2.8-0.rc2.1Petr Lautrbach - 2.8-0.rc1.1Petr Lautrbach - 2.7-14Petr Lautrbach - 2.7-13Petr Lautrbach - 2.7-12Igor Gnatenko - 2.7-11Fedora Release Engineering - 2.7-10Igor Gnatenko - 2.7-9Iryna Shcherbina - 2.7-8Mamoru TASAKA - 2.7-7Petr Lautrbach - 2.7-6Petr Lautrbach - 2.7-5Petr Šabata - 2.7-4Zbigniew Jędrzejewski-Szmek - 2.7-3Zbigniew Jędrzejewski-Szmek - 2.7-2Petr Lautrbach - 2.7-1Fedora Release Engineering - 2.6-10Florian Weimer - 2.6-9Petr Lautrbach - 2.6-8Fedora Release Engineering - 2.6-7Petr Lautrbach - 2.6-6Petr Lautrbach - 2.6-5Petr Lautrbach - 2.6-4Petr Lautrbach - 2.6-3Petr Lautrbach - 2.6-2Petr Lautrbach - 2.6-1Fedora Release Engineering - 2.5-18Stephen Gallagher - 2.5-17Vít Ondruch - 2.5-16Petr Lautrbach - 2.5-15Charalampos Stratakis - 2.5-14Petr Lautrbach - 2.5-13Petr Lautrbach 2.5-12Petr Lautrbach 2.5-11Fedora Release Engineering - 2.5-10Petr Lautrbach - 2.5-9Petr Lautrbach - 2.5-8Petr Lautrbach - 2.5-7Petr Lautrbach - 2.5-6Petr Lautrbach - 2.5-5Petr Lautrbach - 2.5-4Petr Lautrbach - 2.5-3Petr Lautrbach 2.5-2Petr Lautrbach 2.5-1Petr Lautrbach 2.5-0.1.rc1Fedora Release Engineering - 2.4-8Vít Ondruch - 2.4-7Petr Lautrbach - 2.4-6Robert Kuska - 2.4-5Petr Lautrbach 2.4-4Petr Lautrbach 2.4-3Adam Jackson 2.4-2Petr Lautrbach 2.4-1.1Fedora Release Engineering - 2.3-11Petr Lautrbach 2.3-10Petr Lautrbach 2.3-9Petr Lautrbach 2.3-8Than Ngo - 2.3-7Vít Ondruch - 2.3-6Miroslav Grepl - 2.3-5Fedora Release Engineering - 2.3-4Fedora Release Engineering - 2.3-3Kalev Lember - 2.3-2Dan Walsh - 2.3-1Miroslav Grepl - 2.2.2-8Vít Ondruch - 2.2.2-7Dan Walsh - 2.2.2-6Dan Walsh - 2.2.2-5Dan Walsh - 2.2.2-4Dan Walsh - 2.2.2-3Dan Walsh - 2.2.2-2Dan Walsh - 2.2.2-1Adam Williamson - 2.2.1-6Dan Walsh - 2.2.1-5Dan Walsh - 2.2.1-4Dan Walsh - 2.2.1-3Dan Walsh - 2.2.1-2Dan Walsh - 2.2.1-1Dan Walsh - 2.2-1Dan Walsh - 2.1.13-21Dan Walsh - 2.1.13-20Dan Walsh - 2.1.13-19Dan Walsh - 2.1.13-17Fedora Release Engineering - 2.1.13-17Dan Walsh - 2.1.13-16Dan Walsh - 2.1.13-15Dan Walsh - 2.1.13-14Dan Walsh - 2.1.13-13Dan Walsh - 2.1.13-12Dan Walsh - 2.1.13-11Dan Walsh - 2.1.13-10Dan Walsh - 2.1.13-9Dan Walsh - 2.1.13-8Dan Walsh - 2.1.13-7Dan Walsh - 2.1.13-6Dan Walsh - 2.1.13-5Dan Walsh - 2.1.13-4Dan Walsh - 2.1.13-3Dan Walsh - 2.1.13-2Dan Walsh - 2.1.13-1Dan Walsh - 2.1.12-20Dan Walsh - 2.1.12-19Dan Walsh - 2.1.12-18Dan Walsh - 2.1.12-17Dan Walsh - 2.1.12-16Dan Walsh - 2.1.12-15Dan Walsh - 2.1.12-14Dan Walsh - 2.1.12-13Dan Walsh - 2.1.12-12Dan Walsh - 2.1.12-11Dan Walsh - 2.1.12-10Dan Walsh - 2.1.12-9Dan Walsh - 2.1.12-8Dan Walsh - 2.1.12-7Dan Walsh - 2.1.12-6Dan Walsh - 2.1.12-5Dan Walsh - 2.1.12-4Dan Walsh - 2.1.12-3Dan Walsh - 2.1.12-2Dan Walsh - 2.1.12-1David Malcolm - 2.1.11-6David Malcolm - 2.1.11-5Fedora Release Engineering - 2.1.11-4Dan Walsh - 2.1.11-3Dan Walsh - 2.1.11-2Dan Walsh - 2.1.11-1Dan Walsh - 2.1.10-5Dan Walsh - 2.1.10-4Dan Walsh - 2.1.10-3Dan Walsh - 2.1.10-2Dan Walsh - 2.1.10-1Dan Walsh - 2.1.9-9Dan Walsh - 2.1.9-8Dan Walsh - 2.1.9-7Kay Sievers - 2.1.9-6Dan Walsh - 2.1.9-5Harald Hoyer 2.1.9-4Dan Walsh - 2.1.9-3Dan Walsh - 2.1.9-2Dan Walsh - 2.1.9-1Dan Walsh - 2.1.8-5Dan Walsh - 2.1.8-4Dan Walsh - 2.1.8-2Dan Walsh - 2.1.8-1Dan Walsh - 2.1.7-2Dan Walsh - 2.1.7-1Dan Walsh - 2.1.6-4Dan Walsh - 2.1.6-3Dan Walsh - 2.1.6-2Dan Walsh - 2.1.6-1Dan Walsh - 2.1.5-5Ville Skyttä - 2.1.5-4Dan Walsh - 2.1.5-3Dan Walsh - 2.1.5-2Dan Walsh - 2.1.5-1Dan Walsh - 2.1.4-2Dan Walsh - 2.1.4-1Dan Walsh - 2.1.0-1Dan Walsh - 2.0.102-6Dan Walsh - 2.0.102-5Dan Walsh - 2.0.102-4Dan Walsh - 2.0.102-3Dan Walsh - 2.0.102-2Dan Walsh - 2.0.102-1Dan Walsh - 2.0.101-1Dan Walsh - 2.0.99-5Dan Walsh - 2.0.99-4Dan Walsh - 2.0.99-3Dan Walsh - 2.0.99-2Dan Walsh - 2.0.99-1Fedora Release Engineering Dan Walsh - 2.0.98-3Dan Walsh - 2.0.98-2Dan Walsh - 2.0.98-1Dan Walsh - 2.0.97-1Dan Walsh - 2.0.96-9Dan Walsh - 2.0.96-8jkeating - 2.0.96-7Adam Tkac - 2.0.96-6Dan Walsh - 2.0.96-5Dan Walsh - 2.0.96-4David Malcolm - 2.0.96-3Dan Walsh - 2.0.96-2Dan Walsh - 2.0.96-1Dan Walsh - 2.0.94-1Dan Walsh - 2.0.93-1Dan Walsh - 2.0.92-1Dan Walsh - 2.0.91-1Dan Walsh - 2.0.90-5Dan Walsh - 2.0.90-4Dan Walsh - 2.0.90-3Dan Walsh - 2.0.90-2Dan Walsh - 2.0.90-1Dan Walsh - 2.0.89-2Dan Walsh - 2.0.89-1Dan Walsh - 2.0.88-1Dan Walsh - 2.0.87-1Dan Walsh - 2.0.86-2Dan Walsh - 2.0.86-1Fedora Release Engineering - 2.0.85-2Dan Walsh - 2.0.85-1Dan Walsh - 2.0.84-1Dan Walsh - 2.0.82-2Dan Walsh - 2.0.82-1Dan Walsh - 2.0.81-1Dan Walsh - 2.0.80-1Dan Walsh - 2.0.79-6Dan Walsh - 2.0.79-5Dan Walsh - 2.0.79-4Dan Walsh - 2.0.79-3Dan Walsh - 2.0.79-1Dan Walsh - 2.0.78-5Dan Walsh - 2.0.78-4Dan Walsh - 2.0.78-3Dan Walsh - 2.0.78-2Dan Walsh - 2.0.78-1Fedora Release Engineering - 2.0.77-6Dan Walsh - 2.0.77-5Dan Walsh - 2.0.77-3Dan Walsh - 2.0.77-2Dan Walsh - 2.0.77-1Dan Walsh - 2.0.76-6Dan Walsh l - 2.0.76-5Dan Walsh - 2.0.76-4Ignacio Vazquez-Abrams - 2.0.76-2Dan Walsh - 2.0.76-1Dan Walsh - 2.0.75-2Dan Walsh - 2.0.75-1Dan Walsh - 2.0.73-1Dan Walsh - 2.0.71-6Dan Walsh - 2.0.71-5Dan Walsh - 2.0.71-4Dan Walsh - 2.0.71-3Dan Walsh - 2.0.71-2Dan Walsh - 2.0.71-1Dan Walsh - 2.0.70-1Dan Walsh - 2.0.69-2Dan Walsh - 2.0.69-1Dan Walsh - 2.0.67-4Dan Walsh - 2.0.67-3Dan Walsh - 2.0.67-2Dan Walsh - 2.0.67-1Dan Walsh - 2.0.65-1Dan Walsh - 2.0.64-3Dan Walsh - 2.0.64-2Dan Walsh - 2.0.64-1Dan Walsh - 2.0.61-4Dan Walsh - 2.0.61-3Dan Walsh - 2.0.61-2Dan Walsh - 2.0.61-1Dan Walsh - 2.0.60-1Dan Walsh - 2.0.59-2Dan Walsh - 2.0.59-1Dan Walsh - 2.0.58-1Dan Walsh - 2.0.57-2Dan Walsh - 2.0.57-1Dan Walsh - 2.0.56-1Dan Walsh - 2.0.55-1Dan Walsh - 2.0.53-1Dan Walsh - 2.0.52-1Dan Walsh - 2.0.50-1Dan Walsh - 2.0.49-2Dan Walsh - 2.0.49-1Dan Walsh - 2.0.48-1Dan Walsh - 2.0.47-4Adel Gadllah - 2.0.47-3Dan Walsh - 2.0.47-2Dan Walsh - 2.0.47-1Dan Walsh - 2.0.46-6Dan Walsh - 2.0.46-5Dan Walsh - 2.0.46-4Dan Walsh - 2.0.46-3Dan Walsh - 2.0.46-2Dan Walsh - 2.0.46-1Dan Walsh - 2.0.45-1Dan Walsh - 2.0.43-1Dan Walsh - 2.0.42-1Dan Walsh - 2.0.40-1Dan Walsh - 2.0.37-1Dan Walsh - 2.0.36-1Dan Walsh - 2.0.35-2Dan Walsh - 2.0.35-1Dan Walsh - 2.0.34-3Dan Walsh - 2.0.34-2Dan Walsh - 2.0.34-1Dan Walsh - 2.0.33-2Dan Walsh - 2.0.33-1Dan Walsh - 2.0.31-4Dan Walsh - 2.0.31-3Dan Walsh - 2.0.31-2Dan Walsh - 2.0.30-2Dan Walsh - 2.0.30-1Dan Walsh - 2.0.29-1Dan Walsh - 2.0.24-3Dan Walsh - 2.0.24-2Dan Walsh - 2.0.24-1Dan Walsh - 2.0.23-3Dan Walsh - 2.0.23-2Dan Walsh - 2.0.23-1Dan Walsh - 2.0.22-1Dan Walsh - 2.0.21-2Dan Walsh - 2.0.21-1Dan Walsh - 2.0.18-1Dan Walsh - 2.0.16-1Dan Walsh - 2.0.14-1Dan Walsh - 2.0.13-2Dan Walsh - 2.0.13-1Dan Walsh - 2.0.12-2Dan Walsh - 2.0.12-1Dan Walsh - 2.0.11-1Dan Walsh - 2.0.9-2Dan Walsh - 2.0.9-1Dan Walsh - 2.0.8-1Dan Walsh - 2.0.7-2Dan Walsh - 2.0.7-1Dan Walsh - 2.0.5-2Dan Walsh - 2.0.5-1Dan Walsh - 2.0.4-1Dan Walsh - 2.0.2-1Dan Walsh - 2.0.1-1Dan Walsh - 2.0.0-1Dan Walsh - 1.34.0-2Dan Walsh - 1.34.0-1Dan Walsh - 1.33.6-1Dan Walsh - 1.33.5-1Dan Walsh - 1.33.4-3Dan Walsh - 1.33.4-2Dan Walsh - 1.33.4-1Dan Walsh - 1.33.3-3Dan Walsh - 1.33.3-2Dan Walsh - 1.33.3-1Jeremy Katz - 1.33.2-4Dan Walsh - 1.33.2-3Dan Walsh - 1.33.2-2Dan Walsh - 1.33.2-1Dan Walsh - 1.33.1-2Dan Walsh - 1.33.1-1Dan Walsh - 1.32-1Jesse Keating - 1.30.29-2Dan Walsh - 1.30.29-1Jeremy Katz - 1.30.28-3Dan Walsh - 1.30.28-2Dan Walsh - 1.30.28-1Jeremy Katz - 1.30.27-2Dan Walsh - 1.30.27-1Jesse Keating - 1.20.26-2Dan Walsh - 1.30.25-1Dan Walsh - 1.30.24-1Dan Walsh - 1.30.22-2Dan Walsh - 1.30.22-1Dan Walsh - 1.30.20-1Jeremy Katz - 1.30.19-5Jeremy Katz - 1.30.19-4Dan Walsh 1.30.19-3Dan Walsh 1.30.19-2Dan Walsh 1.30.19-1Dan Walsh 1.30.15-5Dan Walsh 1.30.15-4Dan Walsh 1.30.15-3Dan Walsh 1.30.15-2Dan Walsh 1.30.15-1Dan Walsh 1.30.12-2Dan Walsh 1.30.12-1Dan Walsh 1.30.11-2Dan Walsh 1.30.11-1Dan Walsh 1.30.10-4Dan Walsh 1.30.10-3Dan Walsh 1.30.10-2Dan Walsh 1.30.10-1Dan Walsh 1.30.8-1Dan Walsh 1.30.7-2Dan Walsh 1.30.7-1Dan Walsh 1.30.6-2Dan Walsh 1.30.6-1Dan Walsh 1.30.5-1Dan Walsh 1.30.3-3Dan Walsh 1.30.3-2Dan Walsh 1.30.3-1Dan Walsh 1.30.1-2Dan Walsh 1.30.1-1Dan Walsh 1.30-1Jesse Keating - 1.29.7-1.2Jesse Keating - 1.29.7-1.1Dan Walsh 1.29.7-1Dan Walsh 1.29.6-1Dan Walsh 1.29.5-2Dan Walsh 1.29.5-1Dan Walsh 1.29.4-1Dan Walsh 1.29.3-2Dan Walsh 1.29.3-1Dan Walsh 1.29.2-4Dan Walsh 1.29.2-3Dan Walsh 1.29.2-2Dan Walsh 1.29.2-1Dan Walsh 1.29.1-3Jesse Keating Dan Walsh 1.29.1-1Dan Walsh 1.28-1Dan Walsh 1.27.28-2Dan Walsh 1.27.28-1Dan Walsh 1.27.26-1Dan Walsh 1.27.25-1Dan Walsh 1.27.23-1Dan Walsh 1.27.22-4Dan Walsh 1.27.22-3Dan Walsh 1.27.22-2Dan Walsh 1.27.22-1Dan Walsh 1.27.21-2Dan Walsh 1.27.21-1Dan Walsh 1.27.20-1Dan Walsh 1.27.19-1Dan Walsh 1.27.18-1Dan Walsh 1.27.17-4Dan Walsh 1.27.17-2Dan Walsh 1.27.17-1Dan Walsh 1.27.14-3Dan Walsh 1.27.14-2Dan Walsh 1.27.14-1Dan Walsh 1.27.13-2Dan Walsh 1.27.13-1Dan Walsh 1.27.12-1Dan Walsh 1.27.9-2Dan Walsh 1.27.9-1Dan Walsh 1.27.7-1Dan Walsh 1.27.6-1Dan Walsh 1.27.4-1Dan Walsh 1.27.3-1Dan Walsh 1.27.2-1Dan Walsh 1.27.1-3Dan Walsh 1.27.1-2Dan Walsh 1.26-6Dan Walsh 1.26-5Dan Walsh 1.26-3Dan Walsh 1.26-2Dan Walsh 1.25.7-1Dan Walsh 1.25.6-1Dan Walsh 1.25.5-1Dan Walsh 1.25.4-1Dan Walsh 1.25.3-2Dan Walsh 1.25.3-1Dan Walsh 1.25.2-2Dan Walsh 1.25.2-1Dan Walsh 1.24.2-1Dan Walsh 1.24.1-1Dan Walsh 1.23.11-1Dan Walsh 1.23.10-3Dan Walsh 1.23.10-2Dan Walsh 1.23.10-1Dan Walsh 1.23.8-1Dan Walsh 1.23.7-3Dan Walsh 1.23.7-2Dan Walsh 1.23.7-1Dan Walsh 1.23.6-1Dan Walsh 1.23.5-1Dan Walsh 1.23.4-1Dan Walsh 1.23.2-3Dan Walsh 1.23.2-2Dan Walsh 1.23.2-1Dan Walsh 1.23.1-1Dan Walsh 1.22-1Dan Walsh 1.21.13-1Dan Walsh 1.21.12-1Dan Walsh 1.21.11-2Dan Walsh 1.21.11-1Dan Walsh 1.21.10-3Dan Walsh 1.21.10-1Dan Walsh 1.21.9-2Dan Walsh 1.21.9-1Dan Walsh 1.21.8-1Dan Walsh 1.21.7-1Dan Walsh 1.21.5-1Dan Walsh 1.21.4-1Dan Walsh 1.21.2-1Dan Walsh 1.21.1-3Dan Walsh 1.21.1-2Dan Walsh 1.21.1-1Dan Walsh 1.20.1-3Dan Walsh 1.20.1-2Dan Walsh 1.20.1-1Dan Walsh 1.19.4-1Dan Walsh 1.19.3-3Dan Walsh 1.19.3-2Dan Walsh 1.19.3-1Dan Walsh 1.19.2-1Dan Walsh 1.19.1-6Dan Walsh 1.19.1-4Dan Walsh 1.19.1-2Dan Walsh 1.19.1-1Steve Grubb 1.18.1-5Dan Walsh 1.18.1-4Dan Walsh 1.18.1-3Steve Grubb 1.18.1-2Dan Walsh 1.18.1-1Steve Grubb 1.17.15-2Steve Grubb 1.17.15-2Dan Walsh 1.17.15-1Dan Walsh 1.17.14-1Dan Walsh 1.17.13-3Dan Walsh 1.17.13-2Dan Walsh 1.17.13-1Dan Walsh 1.17.12-2Dan Walsh 1.17.12-1Dan Walsh 1.17.11-1Dan Walsh 1.17.10-1Dan Walsh 1.17.9-2Dan Walsh 1.17.9-1Dan Walsh 1.17.8-2Dan Walsh 1.17.8-1Dan Walsh 1.17.7-1Dan Walsh 1.17.6-1Dan Walsh 1.17.5-1Dan Walsh 1.17.4-1Dan Walsh 1.17.3-1Dan Walsh 1.17.2-1Dan Walsh 1.17.1-1Dan Walsh 1.16.1-1Colin Walters 1.16-1Dan Walsh 1.15.7-1Dan Walsh 1.15.6-1Dan Walsh 1.15.5-1Dan Walsh 1.15.4-1Dan Walsh 1.15.3-2Dan Walsh 1.15.3-1Dan Walsh 1.15.2-1Dan Walsh 1.15.1-3Dan Walsh 1.15.1-2Dan Walsh 1.15.1-1Dan Walsh 1.14.1-1Dan Walsh 1.13.4-1Elliot Lee Dan Walsh 1.13.3-2Dan Walsh 1.13.2-1Dan Walsh 1.13.1-1Dan Walsh 1.12-2Dan Walsh 1.12-1Dan Walsh 1.11.4-1Dan Walsh 1.11.3-1Dan Walsh 1.11.2-1Dan Walsh 1.11-4Dan Walsh 1.11-3Dan Walsh 1.11-2Dan Walsh 1.11-1Dan Walsh 1.10-2Dan Walsh 1.10-1Dan Walsh 1.9-1Dan Walsh 1.8-1Dan Walsh 1.6-6Dan Walsh 1.6-5Dan Walsh 1.6-4Dan Walsh 1.6-3Dan Walsh 1.6-2Elliot Lee Dan Walsh 1.4-11Elliot Lee Dan Walsh 1.4-9Dan Walsh 1.4-8Dan Walsh 1.4-7Dan Walsh 1.4-6Dan Walsh 1.4-5Dan Walsh 1.4-4Dan Walsh 1.4-3Dan Walsh 1.4-2Dan Walsh 1.4-1Dan Walsh 1.3-2Dan Walsh 1.3-1Dan Walsh 1.2-9Dan Walsh 1.2-8Dan Walsh 1.2-7Dan Walsh 1.2-6Dan Walsh 1.2-5Dan Walsh 1.2-4Dan Walsh 1.2-3Dan Walsh 1.2-2Dan Walsh 1.2-1Dan Walsh 1.0-1- restorecon: Fix memory leak - xattr_value (#2137965)- Restorecon: Ignore missing directories when -i is used (#2137965)- Describe fcontext regular expressions (#1904059) - Strip spaces before values in config (#2012145)- Deprecate security_compute_user(), update man pages (#1879368)- Eliminate use of security_compute_user() (#1879368)- Fix mcstrans secolor examples in secolor.conf man page (#1770270)- Use Python distutils to install SELinux python bindings (#1719771) - Move sefcontext_compile to -utils package (#1612518)- SELinux userspace 2.9 release- Fix RESOURCE_LEAK coverity scan defects- selinux_restorecon: Skip customized files also without -v - man pages fixes- Build libselinux-python when %with_python2 macro is set to non-zero value- Build libselinux-ruby (#1581322)- Don't build the Python 2 subpackage (#1567358)- SELinux userspace 2.8 release- SELinux userspace 2.8-rc3 release candidate- SELinux userspace 2.8-rc2 release candidate- SELinux userspace 2.8-rc1 release candidate- Do not build libselinux-ruby- build: Replace PYSITEDIR with PYTHONLIBDIR- Correct manpages regarding removable_context - build: follow standard semantics for DESTDIR and PREFIX- Escape macros in %changelog- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild- Switch to %ldconfig_scriptlets- Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)- F-28: rebuild for ruby25- Rebuild with libsepol-2.7-3- Drop golang bindings - Add support for pcre2 to pkgconfig definition- Enable the python3 subpackages on EL- Also add Provides for the old name without %_isa- Python 2 binary package renamed to python2-libselinux See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3 - Python 3 binary package renamed to python3-libselinux- Update to upstream release 2017-08-04- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild- Rebuild with binutils fix for ppc64le (#1475636)- Always unmount selinuxfs for SELINUX=disabled- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- Don't finalize mount state in selinux_set_policy_root() - Follow upstream and rename _selinux.so to _selinux.cpython-36m-x86_64-linux-gnu.so- Fix setfiles progress indicator- Fix segfault in selinux_restorecon_sb() (#1433577) - Change matchpathcon usage to match with matchpathcon manpage - Fix a corner case getsebool return value- Fix 'semanage boolean -m' to modify active value- Fix FTBFS - fatal error (#1427902)- Update to upstream release 2016-10-14- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild- Add missing %license macro- Rebuilt for https://fedoraproject.org/wiki/Changes/Ruby_2.4- Rewrite restorecon() python method- Rebuild for Python 3.6- Fix pointer handling in realpath_not_final (#1376598)- Fix -Wsign-compare warnings - Drop unused stdio_ext.h header file - Kill logging check for selinux_enabled() - Drop usage of _D_ALLOC_NAMLEN - Add openrc_contexts functions - Fix redefinition of XATTR_NAME_SELINUX - Correct error path to always try text - Clean up process_file() - Handle NULL pcre study data - Fix in tree compilation of utils that depend on libsepol- Rebuilt with libsepol-2.5-9- https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages- Clarify is_selinux_mls_enabled() description - Explain how to free policy type from selinux_getpolicytype() - Compare absolute pathname in matchpathcon -V - Add selinux_snapperd_contexts_path()- Move _selinux.so to /usr/lib64/python*/site-packages- Modify audit2why analyze function to use loaded policy - Sort object files for deterministic linking order - Respect CC and PKG_CONFIG environment variable - Avoid mounting /proc outside of selinux_init_load_policy()- Fix multiple spelling errors- Rebuilt with libsepol-2.5-5- Fix typo in sefcontext_compile.8- Fix location of selinuxfs mount point - Only mount /proc if necessary - procattr: return einval for <= 0 pid args - procattr: return error on invalid pid_t input- Use fully versioned arch-specific requires- Update to upstream release 2016-02-23- Update to upstream rc1 release 2016-01-07- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild- Rebuilt for https://fedoraproject.org/wiki/Changes/Ruby_2.3- Build libselinux without rpm_execcon() (#1284019)- Rebuilt for Python3.5 rebuild- Flush the class/perm string mapping cache on policy reload (#1264051) - Fix restorecon when path has no context- Simplify procattr cache (#1257157,#1232371)- Export ldflags into the build so hardening works- Update to 2.4 release- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- is_selinux_enabled: Add /etc/selinux/config test (#1219045) - matchpathcon/selabel_file: Fix man pages (#1219718)- revert support for policy compressed with xv (#1185266)- selinux.py - use os.walk() instead of os.path.walk() (#1195004) - is_selinux_enabled(): drop no-policy-loaded test (#1195074) - fix -Wformat errors and remove deprecated mudflap option- bump release and rebuild so that koji-shadow can rebuild it against new gcc on secondary arch- Rebuilt for https://fedoraproject.org/wiki/Changes/Ruby_2.2- Compiled file context files and the original should have the same permissions from dwalsh@redhat.com - Add selinux_openssh_contexts_path() to get a path to /contexts/openssh_contexts- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild- Rebuilt for https://fedoraproject.org/wiki/Changes/Python_3.4- Update to upstream * Get rid of security_context_t and fix const declarations. * Refactor rpm_execcon() into a new setexecfilecon() from Guillem Jover.- Add selinux_openssh_contexts_path()- Rebuilt for https://fedoraproject.org/wiki/Changes/Ruby_2.1- Fix spelling mistake in man page- More go bindings - restorecon, getpidcon, setexeccon- Add additional go bindings for get*con calls - Add go bindings test command - Modify man pages of set*con calls to mention that they are thread specific- Move selinux.go to /usr/lib64/golang/src/pkg/github.com/selinux/selinux.go - Add Int_to_mcs function to generate MCS labels from integers.- Add ghost flag for /var/run/setrans- Update to upstream * Fix userspace AVC handling of per-domain permissive mode. - Verify context is not null when passed into *setfilecon_raw- revert unexplained change to rhat.patch which broke SELinux disablement- Verify context is not null when passed into lsetfilecon_raw- Mv selinux.go to /usr/share/gocode/src/selinux- Add golang support to selinux.- Remove togglesebool man page- Update to upstream * Remove -lpthread from pkg-config file; it is not required. - Add support for policy compressed with xv- Update to upstream * Fix avc_has_perm() returns -1 even when SELinux is in permissive mode. * Support overriding Makefile RANLIB from Sven Vermeulen. * Update pkgconfig definition from Sven Vermeulen. * Mount sysfs before trying to mount selinuxfs from Sven Vermeulen. * Fix man pages from Laurent Bigonville. * Support overriding PATH and LIBBASE in Makefiles from Laurent Bigonville. * Fix LDFLAGS usage from Laurent Bigonville * Avoid shadowing stat in load_mmap from Joe MacDonald. * Support building on older PCRE libraries from Joe MacDonald. * Fix handling of temporary file in sefcontext_compile from Dan Walsh. * Fix procattr cache from Dan Walsh. * Define python constants for getenforce result from Dan Walsh. * Fix label substitution handling of / from Dan Walsh. * Add selinux_current_policy_path from Dan Walsh. * Change get_context_list to only return good matches from Dan Walsh. * Support udev-197 and higher from Sven Vermeulen and Dan Walsh. * Add support for local substitutions from Dan Walsh. * Change setfilecon to not return ENOSUP if context is already correct from Dan Walsh. * Python wrapper leak fixes from Dan Walsh. * Export SELINUX_TRANS_DIR definition in selinux.h from Dan Walsh. * Add selinux_systemd_contexts_path from Dan Walsh. * Add selinux_set_policy_root from Dan Walsh. * Add man page for sefcontext_compile from Dan Walsh.- Add systemd_contexts support - Do substitutions on a local sub followed by a dist sub- Eliminate requirement on pthread library, by applying patch for Jakub Jelinek Resolves #1013801- Fix handling of libselinux getconlist with only one entry- Add Python constants for SELinux enforcing modes- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild- Add sefcontext_compile.8 man page - Add Russell Coker patch to fix man pages - Add patches from Laurent Bigonville to fix Makefiles for debian. - modify spec file to use %{_prefix}/lib- Fix patch that Handles substitutions for /- Handle substitutions for / - semanage fcontext -a -e / /opt/rh/devtoolset-2/root- Add Eric Paris patch to fix procattr calls after a fork.- Move secolor.conf.5 into mcstrans package and out of libselinux- Fix python bindings for selinux_check_access- Fix reseting the policy root in matchpathcon- Cleanup setfcontext_compile atomic patch - Add matchpathcon -P /etc/selinux/mls support by allowing users to set alternate root - Make sure we set exit codes from selinux_label calls to ENOENT or SUCCESS- Make setfcontext_compile atomic- Fix memory leak in set*con calls.- Move matchpathcon to -utils package - Remove togglesebool- Fix selinux man page to reflect what current selinux policy is.- Add new constant SETRANS_DIR which points to the directory where mstransd can find the socket and libvirt can write its translations files.- Bring back selinux_current_policy_path- Revert some changes which are causing the wrong policy version file to be created- Update to upstream * audit2why: make sure path is nul terminated * utils: new file context regex compiler * label_file: use precompiled filecontext when possible * do not leak mmapfd * sefcontontext_compile: Add error handling to help debug problems in libsemanage. * man: make selinux.8 mention service man pages * audit2why: Fix segfault if finish() called twice * audit2why: do not leak on multiple init() calls * mode_to_security_class: interface to translate a mode_t in to a security class * audit2why: Cleanup audit2why analysys function * man: Fix program synopsis and function prototypes in man pages * man: Fix man pages formatting * man: Fix typo in man page * man: Add references and man page links to _raw function variants * Use ENOTSUP instead of EOPNOTSUPP for getfilecon functions * man: context_new(3): fix the return value description * selinux_status_open: handle error from sysconf * selinux_status_open: do not leak statusfd on exec * Fix errors found by coverity * Change boooleans.subs to booleans.subs_dist. * optimize set*con functions * pkg-config do not specifc ruby version * unmap file contexts on selabel_close() * do not leak file contexts with mmap'd backend * sefcontext_compile: do not leak fd on error * matchmediacon: do not leak fd * src/label_android_property: do not leak fd on error- Update to latest patches from eparis/Upstream- Update to latest patches from eparis/Upstream- Try procatt speedup patch again- Roll back procattr speedups since it seems to be screwing up systemd labeling.- Fix tid handling for setfscreatecon, old patch still broken in libvirt- Fix tid handling for setfscreatecon, old patch still broken in libvirt- setfscreatecon after fork was broken by the Set*con patch. - We needed to reset the thread variables after a fork.- Fix setfscreatecon call to handle failure mode, which was breaking udev- Ondrej Oprala patch to optimize set*con functions - Set*con now caches the security context and only re-sets it if it changes.- Rebuild against latest libsepol- Update to latest patches from eparis/Upstream - Fix errors found by coverity - set the sepol_compute_av_reason_buffer flag to 0. This means calculate denials only? - audit2why: remove a useless policy vers variable - audit2why: use the new constraint information- Rebuild with latest libsepol- Return EPERM if login program can not reach default label for user - Attempt to return container info from audit2why- Apply patch from eparis to fix leaked file descriptor in new labeling code- Add new function mode_to_security_class which takes mode instead of a string. - Possibly will be used with coreutils.- Add back selinuxconlist and selinuxdefcon man pages- Fix segfault from calling audit2why.finish() multiple times- Fix up selinux man page to reference service man pages- Rebuild with fixed libsepol- Update to upstream * Add support for lxc_contexts_path * utils: add service to getdefaultcon * libsemanage: do not set soname needlessly * libsemanage: remove PYTHONLIBDIR and ruby equivalent * boolean name equivalency * getsebool: support boolean name substitution * Add man page for new selinux_boolean_sub function. * expose selinux_boolean_sub * matchpathcon: add -m option to force file type check * utils: avcstat: clear sa_mask set * seusers: Check for strchr failure * booleans: initialize pointer to silence coveriety * stop messages when SELinux disabled * label_file: use PCRE instead of glibc regex functions * label_file: remove all typedefs * label_file: move definitions to include file * label_file: do string to mode_t conversion in a helper function * label_file: move error reporting back into caller * label_file: move stem/spec handling to header * label_file: drop useless ncomp field from label_file data * label_file: move spec_hasMetaChars to header * label_file: fix potential read past buffer in spec_hasMetaChars * label_file: move regex sorting to the header * label_file: add accessors for the pcre extra data * label_file: only run regex files one time * label_file: new process_file function * label_file: break up find_stem_from_spec * label_file: struct reorg * label_file: only run array once when sorting * Ensure that we only close the selinux netlink socket once. * improve the file_contexts.5 manual page- rebuild for https://fedoraproject.org/wiki/Features/Python_3.3- make with_python3 be conditional on fedora- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- Move the tmpfiles.d content from /etc/tmpfiles.d to /usr/lib/tmpfiles.d- Revert Eric Paris Patch for selinux_binary_policy_path- Update to upstream * Fortify source now requires all code to be compiled with -O flag * asprintf return code must be checked * avc_netlink_recieve handle EINTR * audit2why: silence -Wmissing-prototypes warning * libsemanage: remove build warning when build swig c files * matchpathcon: bad handling of symlinks in / * seusers: remove unused lineno * seusers: getseuser: gracefully handle NULL service * New Android property labeling backend * label_android_property whitespace cleanups * additional makefile support for rubywrap- Fix booleans.subs name, change function name to selinux_boolean_sub, add man page, minor fixes to the function- Fix to compile with Fortify source * Add -O compiler flag * Check return code from asprintf - Fix handling of symbolic links in / by realpath_not_final- Add support for lxc contexts file- Add support fot boolean subs file- Update to upstream * Fix dead links to www.nsa.gov/selinux * Remove jump over variable declaration * Fix old style function definitions * Fix const-correctness * Remove unused flush_class_cache method * Add prototype decl for destructor * Add more printf format annotations * Add printf format attribute annotation to die() method * Fix const-ness of parameters & make usage() methods static * Enable many more gcc warnings for libselinux/src/ builds * utils: Enable many more gcc warnings for libselinux/utils builds * Change annotation on include/selinux/avc.h to avoid upsetting SWIG * Ensure there is a prototype for 'matchpathcon_lib_destructor' * Update Makefiles to handle /usrmove * utils: Stop separating out matchpathcon as something special * pkg-config to figure out where ruby include files are located * build with either ruby 1.9 or ruby 1.8 * assert if avc_init() not called * take security_deny_unknown into account * security_compute_create_name(3) * Do not link against python library, this is considered * bad practice in debian * Hide unnecessarily-exported library destructors- Add selinux_current_policy_path to return /sys/fs/selinux/policy if it exists - Otherwise search for policy on disk- Change selinux_binary_policy_path to return /sys/fs/selinux/policy - Add selinux_installed_policy_path to return what selinux_binary_policy_path used to return - avc_has_perm will now return yes if the machine is in permissive mode - Make work with ruby-1.9- avc_netlink_recieve should continue to poll if it receinves an EINTR rather- use /sbin/ldconfig, glibc does not provide /usr/sbin/ldconfig in the RPM database for now- Rebuild with cleaned up upstream to work in /usr- install everything in /usr https://fedoraproject.org/wiki/Features/UsrMove- Add Dan Berrange code cleanup patches.- Fix selabal_open man page to refer to proper selinux_opt structure-Update to upstream * Fix setenforce man page to refer to selinux man page * Cleanup Man pages * merge freecon with getcon man page- Add patch from Richard Haines When selabel_lookup found an invalid context with validation enabled, it always stated it was 'file_contexts' whether media, x, db or file. The fix is to store the spec file name in the selabel_lookup_rec on selabel_open and use this as output for logs. Also a minor fix if key is NULL to stop seg faults. - Fix setenforce manage page.- Rebuild with new libsepol- Fix setenforce man page, from Miroslav Grepl- Upgrade to upstream * selinuxswig_python.i: don't make syscall if it won't change anything * Remove assert in security_get_boolean_names(3) * Mapped compute functions now obey deny_unknown flag * get_default_type now sets EINVAL if no entry. * return EINVAL if invalid role selected * Updated selabel_file(5) man page * Updated selabel_db(5) man page * Updated selabel_media(5) man page * Updated selabel_x(5) man page * Add man/man5 man pages * Add man/man5 man pages * Add man/man5 man pages * use -W and -Werror in utils- Change python binding for restorecon to check if the context matches. - If it does do not reset- Upgrade to upstream * Makefiles: syntax, convert all ${VAR} to $(VAR) * load_policy: handle selinux=0 and /sys/fs/selinux not exist * regenerate .pc on VERSION change * label: cosmetic cleanups * simple interface for access checks * Don't reinitialize avc_init if it has been called previously * seusers: fix to handle large sets of groups * audit2why: close fd on enomem * rename and export symlink_realpath * label_file: style changes to make Eric happy.- Apply libselinux patch to handle large groups in seusers.- Add selinux_check_access function. Needed for passwd, chfn, chsh- Handle situation where selinux=0 passed to the kernel and both /selinux and-Update to upstream * utils: matchpathcon: remove duplicate declaration * src: matchpathcon: use myprintf not fprintf * src: matchpathcon: make sure resolved path starts * put libselinux.so.1 in /lib not /usr/lib * tree: default make target to all not- Switch to use ":" as prefix separator rather then ";"- Avoid unnecessary shell invocation in %post.- Fix handling of subset labeling that is causing segfault in restorecon- Change matchpathcon_init_prefix and selabel_open to allow multiple initial prefixes. Now you can specify a ";" separated list of prefixes and the labeling system will only load regular expressions that match these prefixes.- Change matchpatcon to use proper myprintf - Fix symlink_realpath to always include "/" - Update to upstream * selinux_file_context_verify function returns wrong value. * move realpath helper to matchpathcon library * python wrapper makefile changes- Move to new Makefile that can build with or without PYTHON being set-Update to upstream 2.1.4 2011-0817 * mapping fix for invalid class/perms after selinux_set_mapping * audit2why: work around python bug not defining * resolv symlinks and dot directories before matching 2.1.2 2011-0803 * audit2allow: do not print statistics * make python bindings for restorecon work on relative path * fix python audit2why binding error * support new python3 functions * do not check fcontext duplicates on use * Patch for python3 for libselinux 2.1.1 2011-08-02 * move .gitignore into utils * new setexecon utility * selabel_open fix processing of substitution files * mountpoint changing patch. * simplify SRCS in Makefile 2.1.1 2011-08-01 * Remove generated files, introduce more .gitignore-Update to upstream * Release, minor version bump * Give correct names to mount points in load_policy by Dan Walsh. * Make sure selinux state is reported correctly if selinux is disabled or fails to load by Dan Walsh. * Fix crash if selinux_key_create was never called by Dan Walsh. * Add new file_context.subs_dist for distro specific filecon substitutions by Dan Walsh. * Update man pages for selinux_color_* functions by Richard Haines.- Only call dups check within selabel/matchpathcon if you are validating the context - This seems to speed the loading of labels by 4 times.- Move /selinux to /sys/fs/selinux - Add selinuxexeccon - Add realpath to matchpathcon to handle matchpathcon * type queries.- Update for latest libsepol- Update for latest libsepol- Fix restorecon python binding to accept relative paths-Update to upstream * Give correct names to mount points in load_policy by Dan Walsh. * Make sure selinux state is reported correctly if selinux is disabled or fails to load by Dan Walsh. * Fix crash if selinux_key_create was never called by Dan Walsh. * Add new file_context.subs_dist for distro specific filecon substitutions by Dan Walsh. * Update man pages for selinux_color_* functions by Richard Haines.- Clean up patch to make handling of constructor cleanup more portable * db_language object class support for selabel_lookup from KaiGai Kohei. * Library destructors for thread local storage keys from Eamon Walsh.- Add distribution subs pathAdd patch from dbhole@redhat.com to initialize thread keys to -1 Errors were being seen in libpthread/libdl that were related to corrupt thread specific keys. Global destructors that are called on dl unload. During destruction delete a thread specific key without checking if it has been initialized. Since the constructor is not called each time (i.e. key is not initialized with pthread_key_create each time), and the default is 0, there is a possibility that key 0 for an active thread gets deleted. This is exactly what is happening in case of OpenJDK. Workaround patch that initializes the key to -1. Thus if the constructor is not called, the destructor tries to delete key -1 which is deemed invalid by pthread_key_delete, and is ignored.- Call fini_selinuxmnt if selinux is disabled, to cause is_selinux_disabled() to report correct data- Change mount source options to use "proc" and "selinuxfs"- Update to upstream * Turn off default user handling when computing user contexts by Dan Walsh- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- Fixup selinux man page- Fix Makefile to use pkg-config --cflags python3 to discover include paths- Update to upstream - Turn off fallback in to SELINUX_DEFAULTUSER in get_context_list- Update to upstream * Thread local storage fixes from Eamon Walsh.- Add /etc/tmpfiles.d support for /var/run/setrans- Ghost /var/run/setrans- Rebuilt for gcc bug 634757- rebuild via updated swig (#624674)- Update for python 3.2a1- Turn off fallback in to SELINUX_DEFAULTUSER in get_context_list- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild- Turn off messages in audit2why- Update to upstream * Add const qualifiers to public API where appropriate by KaiGai Kohei. 2.0.95 2010-06-10 * Remove duplicate slashes in paths in selabel_lookup from Chad Sellers * Adds a chcon method to the libselinux python bindings from Steve Lawrence - add python3 subpackage from David Malcolm* Set errno=EINVAL for invalid contexts from Dan Walsh.- Update to upstream * Show strerror for security_getenforce() by Colin Waters. * Merged selabel database support by KaiGai Kohei. * Modify netlink socket blocking code by KaiGai Kohei.- Update to upstream * Fix from Eric Paris to fix leak on non-selinux systems. * regenerate swig wrappers * pkgconfig fix to respect LIBDIR from Dan Walsh.- Update to upstream * Change the AVC to only audit the permissions specified by the policy, excluding any permissions specified via dontaudit or not specified via auditallow. * Fix compilation of label_file.c with latest glibc headers.- Fix potential doublefree on init- Fix libselinux.pc- Fix man page for selinuxdefcon- Free memory on disabled selinux boxes- Update to upstream * add/reformat man pages by Guido Trentalancia . * Change exception.sh to be called with bash by Manoj Srivastava - Fix selinuxdefcon man page- Update to upstream * Add pkgconfig file from Eamon Walsh.- Update to upstream * Rename and export selinux_reset_config()- Update to upstream * Add exception handling in libselinux from Dan Walsh. This uses a shell script called exception.sh to generate a swig interface file. * make swigify * Make matchpathcon print <> if path not found in fcontext file.- Eliminate -pthread switch in Makefile- Update to upstream * Removal of reference counting on userspace AVC SID's.- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- Update to upstream * Reverted Tomas Mraz's fix for freeing thread local storage to avoid pthread dependency. * Removed fini_context_translations() altogether. * Merged lazy init patch from Stephen Smalley based on original patch by Steve Grubb.- Update to upstream * Add per-service seuser support from Dan Walsh. * Let load_policy gracefully handle selinuxfs being mounted from Stephen Smalley. * Check /proc/filesystems before /proc/mounts for selinuxfs from Eric Paris.- Add provices ruby(selinux)- Update to upstream * Fix improper use of thread local storage from Tomas Mraz . * Label substitution support from Dan Walsh. * Support for labeling virtual machine images from Dan Walsh.- Update to upstream * Trim / from the end of input paths to matchpathcon from Dan Walsh. * Fix leak in process_line in label_file.c from Hiroshi Shinji. * Move matchpathcon to /sbin, add matchpathcon to clean target from Dan Walsh. * getdefaultcon to print just the correct match and add verbose option from Dan Walsh.- Update to upstream * deny_unknown wrapper function from KaiGai Kohei. * security_compute_av_flags API from KaiGai Kohei. * Netlink socket management and callbacks from KaiGai Kohei.- Fix Memory Leak- Fix crash in python- Add back in additional interfaces- Add back in av_decision to python swig- Update to upstream * Netlink socket handoff patch from Adam Jackson. * AVC caching of compute_create results by Eric Paris.- Add patch from ajax to accellerate X SELinux - Update eparis patch- Add eparis patch to accellerate Xwindows performance- Fix URL- Add substitute pattern - matchpathcon output <> on ENOENT- Update to upstream * Fix incorrect conversion in discover_class code.- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild- Add - selinux_virtual_domain_context_path - selinux_virtual_image_context_path- Throw exeptions in python swig bindings on failures- Fix restorecon python code- Update to upstream- Strip trailing / for matchpathcon- Fix segfault if seusers file does not work- Add new function getseuser which will take username and service and return - seuser and level. ipa will populate file in future. - Change selinuxdefcon to return just the context by default- Rebuild for Python 2.6- Update to Upstream * Allow shell-style wildcards in x_contexts file.- Eamon Walsh Patch - libselinux: allow shell-style wildcarding in X names - Add Restorecon/Install python functions from Luke Macken- Update to Upstream * Correct message types in AVC log messages. * Make matchpathcon -V pass mode from Dan Walsh. * Add man page for selinux_file_context_cmp from Dan Walsh.- Update to Upstream * New man pages from Dan Walsh. * Update flask headers from refpolicy trunk from Dan Walsh.- Fix matchpathcon -V call- Add flask definitions for open, X and nlmsg_tty_audit- Add missing get/setkeycreatecon man pages- Split out utilities- Add missing man page links for [lf]getfilecon- Update to Upstream * Add group support to seusers using %groupname syntax from Dan Walsh. * Mark setrans socket close-on-exec from Stephen Smalley. * Only apply nodups checking to base file contexts from Stephen Smalley.- Update to Upstream * Merge ruby bindings from Dan Walsh. - Add support for Linux groups to getseuserbyname- Allow group handling in getseuser call- Update to Upstream * Handle duplicate file context regexes as a fatal error from Stephen Smalley. This prevents adding them via semanage. * Fix audit2why shadowed variables from Stephen Smalley. * Note that freecon NULL is legal in man page from Karel Zak.- Add ruby support for puppet- Rebuild for new libsepol- Add Karel Zak patch for freecon man page- Update to Upstream * New and revised AVC, label, and mapping man pages from Eamon Walsh. * Add swig python bindings for avc interfaces from Dan Walsh.- Update to Upstream * Fix selinux_file_context_verify() and selinux_lsetfilecon_default() to call matchpathcon_init_prefix if not already initialized. * Add -q qualifier for -V option of matchpathcon and change it to indicate whether verification succeeded or failed via exit status.- libselinux no longer neets to telnet -u in post install- Add sedefaultcon and setconlist commands to dump login context- Update to Upstream * Fixed selinux_set_callback man page. * Try loading the max of the kernel-supported version and the libsepol-supported version when no manipulation of the binary policy is needed from Stephen Smalley. * Fix memory leaks in matchpathcon from Eamon Walsh.- Add Xavior Toth patch for security_id_t in swig- Add avc.h to swig code- Grab the latest policy for the kernel- Update to Upstream * Man page typo fix from Jim Meyering.- Update to Upstream * Changed selinux_init_load_policy() to not warn about a failed mount of selinuxfs if selinux was disabled in the kernel.- Fix matchpathcon memory leak- Update to Upstream * Merged new X label "poly_selection" namespace from Eamon Walsh.- Update to Upstream * Merged reset_selinux_config() for load policy from Dan Walsh.- Reload library on loading of policy to handle chroot- Update to Upstream * Merged avc_has_perm() errno fix from Eamon Walsh.- Update to Upstream * Regenerated Flask headers from refpolicy flask definitions.- Update to Upstream * Merged compute_member AVC function and manpages from Eamon Walsh. * Provide more error reporting on load policy failures from Stephen Smalley.- Update to Upstream * Merged new X label "poly_prop" namespace from Eamon Walsh.- Update to Upstream * Disable setlocaldefs if no local boolean or users files are present from Stephen Smalley. * Skip userspace preservebools processing for Linux >= 2.6.22 from Stephen Smalley.- Update to Upstream * Merged fix for audit2why from Dan Walsh.- Fix audit2why to grab latest policy versus the one selected by the kernel* Merged audit2why python binding from Dan Walsh.* Merged updated swig bindings from Dan Walsh, including typemap for pid_t.- Update to use libsepol-static library- Move libselinux.a to -static package - Spec cleanups- Put back libselinux.a- Fix memory references in audit2why and change to use tuples - Update to Upstream * Fix for the avc: granted null message bug from Stephen Smalley.- Fix __init__.py specification- Add audit2why python bindings- Add pid_t typemap for swig bindings- smp_mflag- Fix spec file caused by spec review- Upgrade to upstream * matchpathcon(8) man page update from Dan Walsh.- Upgrade to upstream * dlopen libsepol.so.1 rather than libsepol.so from Stephen Smalley. * Based on a suggestion from Ulrich Drepper, defer regex compilation until we have a stem match, by Stephen Smalley. * A further optimization would be to defer regex compilation until we have a complete match of the constant prefix of the regex - TBD.- Upgrade to upstream * Regenerated Flask headers from policy.- Upgrade to upstream * AVC enforcing mode override patch from Eamon Walsh. * Aligned attributes in AVC netlink code from Eamon Walsh. - Move libselinux.so back into devel package, procps has been fixed- Upgrade to upstream * Merged refactored AVC netlink code from Eamon Walsh. * Merged new X label namespaces from Eamon Walsh. * Bux fix and minor refactoring in string representation code.- Upgrade to upstream * Merged selinux_get_callback, avc_open, empty string mapping from Eamon Walsh.- Upgrade to upstream * Fix segfault resulting from missing file_contexts file.- Fix segfault on missing file_context file- Upgrade to upstream * Make netlink socket close-on-exec to avoid descriptor leakage from Dan Walsh. * Pass CFLAGS when using gcc for linking from Dennis Gilmore.- Add sparc patch to from Dennis Gilmore to build on Sparc platform- Remove leaked file descriptor- Upgrade to latest from NSA * Fix selabel option flag setting for 64-bit from Stephen Smalley.- Change matchpatcon to use syslog instead of syserror- Upgrade to latest from NSA * Re-map a getxattr return value of 0 to a getfilecon return value of -1 with errno EOPNOTSUPP from Stephen Smalley. * Fall back to the compat code for security_class_to_string and security_av_perm_to_string from Stephen Smalley. * Fix swig binding for rpm_execcon from James Athey.- Apply James Athway patch to fix rpm_execcon python binding- Move libselinux.so back into main package, breaks procps- Upgrade to upstream * Fix file_contexts.homedirs path from Todd Miller.- Remove requirement on setransd, Moved to selinux-policy-mls- Move libselinux.so into devel package - Upgrade to upstream * Fix segfault resulting from uninitialized print-callback pointer. * Added x_contexts path function patch from Eamon Walsh. * Fix build for EMBEDDED=y from Yuichi Nakamura. * Fix markup problems in selinux man pages from Dan Walsh.- Upgrade to upstream * Updated version for stable branch. * Added x_contexts path function patch from Eamon Walsh. * Fix build for EMBEDDED=y from Yuichi Nakamura. * Fix markup problems in selinux man pages from Dan Walsh. * Updated av_permissions.h and flask.h to include new nscd permissions from Dan Walsh. * Added swigify to top-level Makefile from Dan Walsh. * Fix for string_to_security_class segfault on x86_64 from Stephen Smalley.- Apply Steven Smalley patch to fix segfault in string_to_security_class- Fix matchpathcon to set default myprintf- Upgrade to upstream * Fix for getfilecon() for zero-length contexts from Stephen Smalley.- Update to match flask/access_vectors in policy- Fix man page markup lanquage for translations- Fix semanage segfault on x86 platform- Upgrade to upstream * Labeling and callback interface patches from Eamon Walsh.- Refactored swig- Upgrade to upstream * Class and permission mapping support patches from Eamon Walsh. * Object class discovery support patches from Chris PeBenito. * Refactoring and errno support in string representation code.- Upgrade to upstream - Merged patch to reduce size of libselinux and remove need for libsepol for embedded systems from Yuichi Nakamura. This patch also turns the link-time dependency on libsepol into a runtime (dlopen) dependency even in the non-embedded case. 2.0.17 2007-05-31 * Updated Lindent script and reindented two header files.- Upgrade to upstream * Merged additional swig python bindings from Dan Walsh. * Merged helpful message when selinuxfs mount fails patch from Dax Kelson.- Upgrade to upstream * Merged build fix for avc_internal.c from Joshua Brindle.- Add get_context_list funcitions to swig file- Upgrade to upstream * Merged rpm_execcon python binding fix, matchpathcon man page fix, and getsebool -a handling for EACCES from Dan Walsh.- Add missing interface- Upgrade to upstream * Merged support for getting initial contexts from James Carter.- Upgrade to upstream * Merged userspace AVC patch to follow kernel's behavior for permissive mode in caching previous denials from Eamon Walsh. * Merged sidput(NULL) patch from Eamon Walsh.- Make rpm_exec swig work- Upgrade to upstream * Merged class/av string conversion and avc_compute_create patch from Eamon Walsh.- Upgrade to upstream * Merged fix for avc.h #include's from Eamon Walsh.- Add stdint.h to avc.h- Merged patch to drop support for CACHETRANS=0 config option from Steve Grubb. - Merged patch to drop support for old /etc/sysconfig/selinux and - /etc/security policy file layout from Steve Grubb.- Do not fail on permission denied in getsebool- Upgrade to upstream * Merged init_selinuxmnt() and is_selinux_enabled() improvements from Steve Grubb.- Upgrade to upstream * Removed sending of setrans init message. * Merged matchpathcon memory leak fix from Steve Grubb.- Upgrade to upstream * Merged more swig initializers from Dan Walsh.- Upgrade to upstream * Merged patch from Todd Miller to convert int types over to C99 style.- Merged patch from Todd Miller to remove sscanf in matchpathcon.c because of the use of the non-standard format (original patch changed for style). - Merged patch from Todd Miller to fix memory leak in matchpathcon.c.- Add context function to python to split context into 4 parts- Upgrade to upstream * Updated version for stable branch.- Upgrade to upstream * Merged man page updates to make "apropos selinux" work from Dan Walsh.- Upgrade to upstream * Merged getdefaultcon utility from Dan Walsh.- Add Ulrich NSCD__GETSERV and NSCD__SHMEMGRP for Uli- Add reference to selinux man page in all man pages to make apropos work Resolves: # 217881- Upstream wanted some minor changes, upgrading to keep api the same - Upgrade to upstream * Merged selinux_check_securetty_context() and support from Dan Walsh. Resolves: #200110- Cleanup patch- Add securetty handling Resolves: #200110- Upgrade to upstream * Merged patch for matchpathcon utility to use file mode information when available from Dan Walsh.- rebuild against python 2.5- Fix matchpathcon to lstat files- Update man page- Upgrade to upstream- Add James Antill patch for login verification of MLS Levels - MLS ragnes need to be checked, Eg. login/cron. This patch adds infrastructure.- Upgrade to latest from NSA * Merged updated flask definitions from Darrel Goeddel. This adds the context security class, and also adds the string definitions for setsockcreate and polmatch.- Upgrade to latest from NSA * Updated version for release.- rebuilt for unwind info generation, broken in gcc-4.1.1-21- Upgrade to latest from NSA * Merged av_permissions.h update from Steve Grubb, adding setsockcreate and polmatch definitions.- really make -devel depend on libsepol-devel- Add sgrubb patch for polmatch- Upgrade to latest from NSA * Merged patch from Steve Smalley to fix SIGPIPE in setrans_client- have -devel require libsepol-devel- Upgrade to latest from NSA * Merged patch to not log avc stats upon a reset from Steve Grubb. * Applied patch to revert compat_net setting upon policy load. * Merged file context homedir and local path functions from Chris PeBenito.- rebuilt with latest binutils to pick up 64K -z commonpagesize on ppc* (#203001)- Upgrade to latest from NSA * Merged file context homedir and local path functions from Chris PeBenito. * Rework functions that access /proc/pid/attr to access the per-thread nodes, and unify the code to simplify maintenance.- Upgrade to latest from NSA * Merged return value fix for *getfilecon() from Dan Walsh. * Merged sockcreate interfaces from Eric Paris.- Fix translation return codes to return size of buffer- Upgrade to latest from NSA * Merged no-tls-direct-seg-refs patch from Jeremy Katz. * Merged netfilter_contexts support patch from Chris PeBenito.- Upgrade to latest from NSA * Merged context_*_set errno patch from Jim Meyering.- only build non-fpic objects with -mno-tls-direct-seg-refs- build with -mno-tls-direct-seg-refs on x86 to avoid triggering segfaults with xen (#200783)- Rebuild for new gcc- Fix libselinux to not telinit during installs- Upgrade to latest from NSA * Lindent. * Merged {get,set}procattrcon patch set from Eric Paris. * Merged re-base of keycreate patch originally by Michael LeMay from Eric Paris. * Regenerated Flask headers from refpolicy. * Merged patch from Dan Walsh with: - Added selinux_file_context_{cmp,verify}. - Added selinux_lsetfilecon_default. - Delay translation of contexts in matchpathcon.- Yet another change to matchpathcon- Turn off error printing in library. Need to compile with DEBUG to get it back- Fix error reporting of matchpathcon- Add function to compare file context on disk versus contexts in file_contexts file.- Upgrade to latest from NSA * Merged patch from Dan Walsh with: * Added selinux_getpolicytype() function. * Modified setrans code to skip processing if !mls_enabled. * Set errno in the !selinux_mnt case. * Allocate large buffers from the heap, not on stack. Affects is_context_customizable, selinux_init_load_policy, and selinux_getenforcemode.- Add selinux_getpolicytype()- Upgrade to latest from NSA * Merged !selinux_mnt checks from Ian Kent.- Check for selinux_mnt == NULL- Merged matchmediacon and trans_to_raw_context fixes from Serge Hallyn.- Remove getseuser- Bump requires to grab latest libsepol- Add BuildRequires for swig- Upgrade to latest from NSA * Merged simple setrans client cache from Dan Walsh. Merged avcstat patch from Russell Coker. * Modified selinux_mkload_policy() to also set /selinux/compat_net appropriately for the loaded policy.- More fixes for translation cache - Upgrade to latest from NSA * Added matchpathcon_fini() function to free memory allocated by matchpathcon_init().- Add simple cache to improve translation speed- Upgrade to latest from NSA * Merged setrans client cleanup patch from Steve Grubb.- Add Russell's AVC patch to handle large numbers- Upgrade to latest from NSA * Merged getfscreatecon man page fix from Dan Walsh. * Updated booleans(8) man page to drop references to the old booleans file and to note that setsebool can be used to set the boot-time defaults via -P.- Upgrade to latest from NSA * Merged fix warnings patch from Karl MacMillan. * Merged setrans client support from Dan Walsh. This removes use of libsetrans. * Merged patch to eliminate use of PAGE_SIZE constant from Dan Walsh. * Merged swig typemap fixes from Glauber de Oliveira Costa.- Change the way translations work, Use setransd/remove libsetrans- Add selinuxswig fixes - Stop using PAGE_SIZE and start using sysconf(_SC_PAGE_SIZE)- Upgrade to latest from NSA * Added distclean target to Makefile. * Regenerated swig files. * Changed matchpathcon_init to verify that the spec file is a regular file. * Merged python binding t_output_helper removal patch from Dan Walsh.- Fix python bindings for matchpathcon - Fix booleans man page- Merged Makefile PYLIBVER definition patch from Dan Walsh.- Make some fixes so it will build on RHEL4 - Upgrade to latest from NSA * Updated version for release. * Altered rpm_execcon fallback logic for permissive mode to also handle case where /selinux/enforce is not available.- bump again for double-long bug on ppc(64)- rebuilt for new gcc4.1 snapshot and glibc changes- Upgrade to latest from NSA * Merged install-pywrap Makefile patch from Joshua Brindle.- Upgrade to latest from NSA * Merged pywrap Makefile patch from Dan Walsh.- Split out pywrap in Makefile- Upgrade to latest from NSA * Added getseuser test program.- Upgrade to latest from NSA * Added format attribute to myprintf in matchpathcon.c and removed obsoleted rootlen variable in init_selinux_config().- Build with new libsepol- Upgrade to latest from NSA * Merged several fixes and improvements from Ulrich Drepper (Red Hat), including: - corrected use of getline - further calls to __fsetlocking for local files - use of strdupa and asprintf - proper handling of dirent in booleans code - use of -z relro - several other optimizations * Merged getpidcon python wrapper from Dan Walsh (Red Hat).- Add build requires line for libsepol-devel- Fix swig call for getpidcon- Move libselinux.so to base package- Upgrade to latest from NSA * Merged call to finish_context_translations from Dan Walsh. This eliminates a memory leak from failing to release memory allocated by libsetrans.- update to latest libsetrans - Fix potential memory leak- rebuilt- Update to never version * Merged patch for swig interfaces from Dan Walsh.- Update to never version- Fix some of the python swig objects- Update to latest from NSA * Added MATCHPATHCON_VALIDATE flag for set_matchpathcon_flags() and modified matchpathcon implementation to make context validation/ canonicalization optional at matchpathcon_init time, deferring it to a successful matchpathcon by default unless the new flag is set by the caller. * Added matchpathcon_init_prefix() interface, and reworked matchpathcon implementation to support selective loading of file contexts entries based on prefix matching between the pathname regex stems and the specified path prefix (stem must be a prefix of the specified path prefix).- Update to latest from NSA * Change getsebool to return on/off instead of active/inactive- Update to latest from NSA * Added -f file_contexts option to matchpathcon util. Fixed warning message in matchpathcon_init(). * Merged Makefile python definitions patch from Dan Walsh.- Update to latest from NSA * Merged swigify patch from Dan Walsh.- Separate out libselinux-python bindings into separate rpm- Read libsetrans requirement- Add python bindings- Update to latest from NSA * Merged make failure in rpm_execcon non-fatal in permissive mode patch from Ivan Gyurdiev.- Remove requirement for libsetrans- Update to latest from NSA * Added MATCHPATHCON_NOTRANS flag for set_matchpathcon_flags() and modified matchpathcon_init() to skip context translation if it is set by the caller.- Update to latest from NSA * Added security_canonicalize_context() interface and set_matchpathcon_canoncon() interface for obtaining canonical contexts. Changed matchpathcon internals to obtain canonical contexts by default. Provided fallback for kernels that lack extended selinuxfs context interface. - Patch to not translate mls when calling setfiles- Update to latest from NSA * Merged seusers parser changes from Ivan Gyurdiev. * Merged setsebool to libsemanage patch from Ivan Gyurdiev. * Changed seusers parser to reject empty fields.- Update to latest from NSA * Merged seusers empty level handling patch from Jonathan Kim (TCS).- Rebuild for latest libsepol- Rebuild for latest libsepol- Change default to __default__- Change default to __default__- Add selinux_translations_path- Update to latest from NSA * Merged selinux_path() and selinux_homedir_context_path() functions from Joshua Brindle.- Need to check for /sbin/telinit- Update to latest from NSA * Merged fixes for make DESTDIR= builds from Joshua Brindle.- Update to latest from NSA * Merged get_default_context_with_rolelevel and man pages from Dan Walsh (Red Hat). * Updated call to sepol_policydb_to_image for sepol changes. * Changed getseuserbyname to ignore empty lines and to handle no matching entry in the same manner as no seusers file.- Tell init to reexec itself in post script- Update to latest from NSA * Changed selinux_mkload_policy to try downgrading the latest policy version available to the kernel-supported version. * Changed selinux_mkload_policy to fall back to the maximum policy version supported by libsepol if the kernel policy version falls outside of the supported range.- Update to latest from NSA * Changed getseuserbyname to fall back to the Linux username and NULL level if seusers config file doesn't exist unless REQUIRESEUSERS=1 is set in /etc/selinux/config. * Moved seusers.conf under $SELINUXTYPE and renamed to seusers.- Update to latest from NSA * Added selinux_init_load_policy() function as an even higher level interface for the initial policy load by /sbin/init. This obsoletes the load_policy() function in the sysvinit-selinux.patch. * Added selinux_mkload_policy() function as a higher level interface for loading policy than the security_load_policy() interface.- Update to latest from NSA * Merged fix for matchpathcon (regcomp error checking) from Johan Fischer. Also added use of regerror to obtain the error string for inclusion in the error message.- Update to latest from NSA * Changed getseuserbyname to not require (and ignore if present) the MLS level in seusers.conf if MLS is disabled, setting *level to NULL in this case.- Update to latest from NSA * Merged getseuserbyname patch from Dan Walsh.- Fix patch to satisfy upstream- Update to latest from NSA - Add getseuserbyname- Fix patch call- Fix strip_con call- Go back to original libsetrans code- Eliminate forth param from mls context when mls is not enabled.- Update from NSA * Merged modified form of patch to avoid dlopen/dlclose by the static libselinux from Dan Walsh. Users of the static libselinux will not have any context translation by default.- Update from NSA * Added public functions to export context translation to users of libselinux (selinux_trans_to_raw_context, selinux_raw_to_trans_context).- Update from NSA * Remove special definition for context_range_set; use common code.- Update from NSA * Hid translation-related symbols entirely and ensured that raw functions have hidden definitions for internal use. * Allowed setting NULL via context_set* functions. * Allowed whitespace in MLS component of context. * Changed rpm_execcon to use translated functions to workaround lack of MLS level on upgraded systems.- Allow set_comp on unset ranges- Merged context translation patch, originally by TCS, with modifications by Dan Walsh (Red Hat).- Apply translation patch- Update from NSA * Merged several fixes for error handling paths in the AVC sidtab, matchpathcon, booleans, context, and get_context_list code from Serge Hallyn (IBM). Bugs found by Coverity. * Removed setupns; migrated to pam. * Merged patches to rename checkPasswdAccess() from Joshua Brindle. Original symbol is temporarily retained for compatibility until all callers are updated.- Update makefiles- Update from NSA * Merged security_setupns() from Chad Sellers. - fix selinuxenabled man page- Update from NSA * Merged avcstat and selinux man page from Dan Walsh. * Changed security_load_booleans to process booleans.local even if booleans file doesn't exist.- Fix avcstat to clear totals- Add info to man page- Update from NSA * Merged set_selinuxmnt patch from Bill Nottingham (Red Hat). * Rewrote get_ordered_context_list and helpers, including changing logic to allow variable MLS fields.- Update from NSA- Add backin matchpathcon- Fix selinux_policy_root man page- Change assert(selinux_mnt) to if (!selinux_mnt) return -1;- Update from NSA * Fixed bug in matchpathcon_filespec_destroy.- Update from NSA * Fixed bug in rpm_execcon error handling path.- Update from NSA * Merged fix for set_matchpathcon* functions from Andreas Steinmetz. * Merged fix for getconlist utility from Andreas Steinmetz.- Update from NSA- Better handling of booleans- Update from NSA * Merged destructors patch from Tomas Mraz.- Update from NSA * Added set_matchpathcon_flags() function for setting flags controlling operation of matchpathcon. MATCHPATHCON_BASEONLY means only process the base file_contexts file, not file_contexts.homedirs or file_contexts.local, and is for use by setfiles -c. * Updated matchpathcon.3 man page.- Update from NSA- Update from NSA * Fixed bug in matchpathcon_filespec_add() - failure to clear fl_head.- Update from NSA * Changed matchpathcon_common to ignore any non-format bits in the mode.- Default matchpathcon to regular files if the user specifies a mode- Update from NSA * Merged several fixes from Ulrich Drepper.- Fix matchpathcon on eof.- Update from NSA * Merged matchpathcon patch for file_contexts.homedir from Dan Walsh. * Added selinux_users_path() for path to directory containing system.users and local.users.- Process file_context.homedir- Update from NSA * Changed relabel Makefile target to use restorecon.- Update from NSA * Regenerated av_permissions.h.- Update from NSA * Modified avc_dump_av to explicitly check for any permissions that cannot be mapped to string names and display them as a hex value. * Regenerated av_permissions.h.- Update from NSA * Generalized matchpathcon internals, exported more interfaces, and moved additional code from setfiles into libselinux so that setfiles can directly use matchpathcon.- Update from NSA * Prevent overflow of spec array in matchpathcon. * Fixed several uses of internal functions to avoid relocations. * Changed rpm_execcon to check is_selinux_enabled() and fallback to a regular execve if not enabled (or unable to determine due to a lack of /proc, e.g. chroot'd environment).- Update from NSA * Merged minor fix for avcstat from Dan Walsh.- rpmexeccon should not fail in permissive mode.- fix printf in avcstat- Update from NSA- Modify matchpathcon to also process file_contexts.local if it exists- Add is_customizable_types function call- Update to latest from upstream * Just changing version number to match upstream- Update to latest from upstream * Changed matchpathcon to return -1 with errno ENOENT for <> entries, and also for an empty file_contexts configuration.- Fix link devel libraries- Fix unitialized variable in avcstat.c- Upgrade to upstream * Removed some trivial utils that were not useful or redundant. * Changed BINDIR default to /usr/sbin to match change in Fedora. * Added security_compute_member. * Added man page for setcon.- Upgrade to upstream- Add avcstat program- Add lots of missing man pages- Fix output of getsebool.- Update from upstream, fix setsebool -P segfault- Add a patch from upstream. Fixes signed/unsigned issues, and incomplete structure copy.- More fixes from sgrubb, better syslog- Have setsebool and togglesebool log changes to syslog- Add patch to make setsebool update bool on disk - Make togglesebool have a rollback capability in case it blows up inflight- Upgrade to latest from NSA- Changed the location of the utilities to /usr/sbin since normal users can't use them anyways.- Updated various utilities, removed utilities that are for testing, added man pages.- Add -g flag to make - Upgrade to latest from NSA * Added rpm_execcon.- Upgrade to latest from NSA * Merged setenforce and removable context patch from Dan Walsh. * Merged build fix for alpha from Ulrich Drepper. * Removed copyright/license from selinux_netlink.h - definitions only.- Change setenforce to accept Enforcing and Permissive- Add alpha patch- Upgrade to latest from NSA- Add selinux_removable_context_path- Update from NSA * Add matchmediacon- Update from NSA * Merged in matchmediacon changes.- Update from NSA * Regenerated headers for new nscd permissions.- Add matchmediacon- Update from NSA * Added get_default_context_with_role.- Clean up spec file * Patch from Matthias Saou- Update from NSA * Added set_matchpathcon_printf.- Update from NSA * Reworked av_inherit.h to allow easier re-use by kernel.- Add strcasecmp in selinux_config - Update from NSA * Changed avc_has_perm_noaudit to not fail on netlink errors. * Changed avc netlink code to check pid based on patch by Steve Grubb. * Merged second optimization patch from Ulrich Drepper. * Changed matchpathcon to skip invalid file_contexts entries. * Made string tables private to libselinux. * Merged strcat->stpcpy patch from Ulrich Drepper. * Merged matchpathcon man page from Dan Walsh. * Merged patch to eliminate PLTs for local syms from Ulrich Drepper. * Autobind netlink socket. * Dropped compatibility code from security_compute_user. * Merged fix for context_range_set from Chad Hanson. * Merged allocation failure checking patch from Chad Hanson. * Merged avc netlink error message patch from Colin Walters.- Update from NSA * Merged second optimization patch from Ulrich Drepper. * Changed matchpathcon to skip invalid file_contexts entries. * Made string tables private to libselinux. * Merged strcat->stpcpy patch from Ulrich Drepper. * Merged matchpathcon man page from Dan Walsh. * Merged patch to eliminate PLTs for local syms from Ulrich Drepper. * Autobind netlink socket. * Dropped compatibility code from security_compute_user. * Merged fix for context_range_set from Chad Hanson. * Merged allocation failure checking patch from Chad Hanson. * Merged avc netlink error message patch from Colin Walters.- Update from NSA - Add optflags- Update from NSA- Add matchpathcon man page - Latest from NSA * Merged patch to eliminate PLTs for local syms from Ulrich Drepper. * Autobind netlink socket. * Dropped compatibility code from security_compute_user. * Merged fix for context_range_set from Chad Hanson. * Merged allocation failure checking patch from Chad Hanson. * Merged avc netlink error message patch from Colin Walters.- Latest from NSA * Autobind netlink socket. * Dropped compatibility code from security_compute_user. * Merged fix for context_range_set from Chad Hanson. * Merged allocation failure checking patch from Chad Hanson. * Merged avc netlink error message patch from Colin Walters.- Latest from NSA- New upstream version- Latest from Upstream- Fix man pages- Latest from Upstream- Latest from Upstream- Add man page for boolean functions and SELinux- Latest from NSA- Latest from NSA- uppercase getenforce returns, to make them match system-config-securitylevel- Remove old path patch- Update to latest from NSA - Add fix to only get old path if file_context file exists in old location- Update to latest from NSA- add nlclass patch - Update to latest from NSA- rebuilt- Fix selinux_config to break once it finds SELINUXTYPE.-Update with latest from NSA- Change to use new policy mechanism- add man patch- Update with latest from NSA- Update with latest from NSA- Add changes for relaxed policy - Update to match NSA- Add relaxed policy changes- Sync with NSA- Remove requires glibc>2.3.4- Fix selinuxenabled man page.- Upgrade to 1.11- Add memleaks patch- Upgrade to latest from NSA and add more man pages- Update to match NSA - Cleanup some man pages- Upgrade to latest from NSA- Add Russell's Man pages- Change getenforce to also check is_selinux_enabled- Add ownership to /usr/include/selinux- fix location of file_contexts file.- Fix matchpathcon to use BUFSIZ- rebuilt- add matchpathcon- rebuilt- Add rootok patch- Updated getpeernam patch- Add getpeernam patch- Add getpeercon patch- Put mntpoint patch, because found fix for SysVinit- Add remove mntpoint patch, because it breaks SysVinit- Add mntpoint patch for SysVinit- Add -r -u -t to getcon- Upgrade to latest from NSA- Fix x86_64 build- Latest tarball from NSA.- Update with latest changes from NSA- Change location of .so file- Break out into development library- Move location of libselinux.so to /lib- Add selinuxenabled patch- Update with final NSA 1.2 sources.- Update with latest from NSA.- Fix to build on x86_64- update for version 1.2- Initial version2.9-8.el82.9-8.el8libselinux.a/usr/lib64/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protectioncpioxz2x86_64-redhat-linux-gnucurrent ar archiveutf-84cb7a9c14eafa5948dbd4b19b121884d992ebfb803f658630a6290aa8dd230d2?p7zXZ !#,T] b2u Q{LUXΪ җ JJU>G\ b֟p^c7b0U"1㋬y:m9RΚE9*邩jk& 152tj]~/p<r[09.~FĄQ>!QwB$v2/,C++5I KLwOͧuuijV nC Eȁ\I!ow2L\z* ᓬEA?֫zjb +m͊cx(axq0!> I]̘SS3mɔe&;Lܼ x0@+_c~#MM3yec11T(`I~ ew;Ecbx8~Ť: myFO=cu6!RRu.+e*jsB-NGyp)NU@dmIayU% *=]Dsֿ1"w%~_9_9ی^uBnu4D+) ;[eFԑ$HBeߣ]pBaLnRui{_V᭭k5V⥜GA% ;/\- x:|ky҂viŏLoUѭ_<}yRucvWI+WwB4cH=V\okݏy="/f" \P_ή(ϣzR;01)ˆx&@J" 3y\ LP*xâV^2/?֜Zʃ/dP T1N&Xtre7AR/6gRqgʍwmdY*E>ܘoaxCr,sRǞ[bcA0?s[t]𒋮175 o c M5|`DĜZM\vԂ&.P E 6V5:?lXAp9 (xݤlk?}UB~#̶zj2^\$&fD ; &s6&%=uG{u C<+7rg9MEj÷\tn&uތIpIHva01m!2@ӓ<΂@Qߗ?4m˾ϳ!DJ&O3xu@ϵO2ƃ#&a8`9G3:SXQvUe5 ,";$s@w $x]p 3ƕ~4*Y|-LvxbnAQm'2g; YS]6ai Kh>?ܦ>1ƄdW8V渹!#ۋO"A㼂mjՋ SXݠ=mNQ{YLFtqؘC_}ȟc}(U,F{g.i^>hHj:"|K-BWZʞk?+ϚT0ZQi[%(% mHRC SBQ8?ǒ[+$}_EBOn%]y!XNwap8Ȯ/ŭƪ='PRڬxc  0Rmoĺ̥=]"0ĵ;'L 8ix,daHYJ$$$Z= Sj6뚰ٲb(r+wR&z% Ȳ촹S:}v'x@H ><0YIc0$p]s?yM[sebua(_ d"/TQ<69<yv ql&?]BrfD\ڝ μb 0X,.{kUIx)}(㫹jzJW8!*W5k'acsZGs0D4@ܨGZҸDH.gFlͯŊk"F|=AXDP謜`ia7Ev@nQL[ 'nѧj /A N+Ȫ"x w`|{B9*y|&sb 'B~\xZ@-L3|^PGW|]ޛ@e<r_ D0|gĠVS7zddؑ YXvrŁ|^}sEs]}7DڻOĽ@J ~nJ[6 Nbo8DȡL_(fy;>;d -`a#c<^wTn?"ࠠѥ P&)e*"શ`"JTZL +GkRhkh߉YAU:밙4}'ҕ):-k]@L?`#9~YzIS'ؠH1[D vZ537Ql{ ~i{z6kL( `X ;2'CJOh3Ű1sP@U$eGmxQ&gUwi~BAz_oCCabQ+*ˑyv[Z4>+^/nI33xۙ?e"ch:Qgv]mf%ʲWy<&T0gS <욅X0OHU# .8iΩDOM fiUhM0;R]<$d5 '}1z٩C!a 2 ɺ0Ssp~,w7+#*8I ,.[L5=I1wD$@["_]iFV)ˋ0-wAEk}pIr:M#*}qwP!JҖ(1VN="Fy>%ȉ4~t:R2\,kY虜?(=ЏK89;Ԥ& !^$aM@M10d:>{FVG`V)dZFc\e9k#3B+ Ӣ_ON KY98xٛJΨHhN&7OK2],zuM9:,N wc$tgM%5*1 7lQ[C1CUB me&A7Ny鰎hE?&㭥{[OP t#{d{ i?xuŎv,xڶAi|!X\`cU3H"\+hIw[Zˑ4k+1SPM24` Hh$H"IޥDv f4jsҢR1pmXKA4}΃sCav4$]$]jc# Ι9:g]OⲎDHl  Ù CGEGŽAO=s2%ZLyX)E#s0Rɺk3'&!@ܝ͈y|"mMG0h $zGI$&&v铅ɼN90/u"F ELc2j¾:Ķ}2{K!=`qJ/#h"Ա{J 2,ԃxl_ 6z`%NjE iDI@`/di\`超&n^Ppl1R ŏA1>c_Fo8K[UV~L*A7ȟp̌_S۪M ɑnTZ}i_ߠ=b'`{JU_qTIGO弢zglB`plS.e#Z㈐.g=k ٍªд " Տ& p[`5"M4zLqO6rt=ڒ qo6(Wd9.UH-q-.Ὠ^O-Y*⤜_kƵD [g۫~ݬ=G}2ydf'nOwsws2_06ZT S_)yJ\|?^fTB@| ȩlKٍu=t;EGpd&>s$ 3枃<euAA4ޓYA^lBY_Qg!:?zw —Byg&>9O-_7Ѻ6^&Qayc0!3QKپ0VI h|on\I=|CXZs ŲYސI+H)_MVrِGA'𜹃0[+1tcÍZۻM: jsAE?0UilԤg0spH֌4֎4N^(Oa%M۴@XNI_>;n.<*jA\p8ĘzW&Fԡ櫢7nJy]!GmH!v_M-0‡l#Lp8}1NQ{ݵڕ6@1[C[$: f 5 Erp.)!xW; ,3s0uTa;[VAAŵ]S7l$ >[ ^c2htUp7+X oގ$_WQK6Ҥ 3ɜ 1sNM C. x#N4|o)j{ϹQP. ^2GA\M+'iTw ɉeOu_s64Q{6:?|hHhXu8JIjΙvbAv_J¨cau0W{LxoJWD+AS! Tm =~m Ž4b:~~,f() d3~V]+`^n6NُӁqҩ*^9ߊɿΑab}:.9\HeF v~!φRab~vCЈ/jS&Ed? t7Ah2:\S~s GL^ .KOUIz5q7GVH;AUiHݵV1Ońzm:7k#Lm`ʢ'zƟNmL\\L zVXf|E 0p1me`b+[̪:F^$4* )uaX~BAm(4k="Q4Xl|JkQrэ8Ety[ 4Ӿh/h(L8o;̊[֩Z r:AO:ǿ fb CDzd o˭"uG&5يO D!Jrhj>*@=6S6RZV$'CT\jfOOQ0LLdv60h5vDFޘg ZG9^aL$8]LWD`ܜ+hd ϐx`þjueݞGe,[!ܱw[l {(D~-&šh\f=W3*~ŨIn\  K#2=u ݋E$#%, " \$T} c`zji tʽ#{vಯma|")[{MX`XnCfLѯLË~ڡSis:rw/$P>\f8r.fHz:MV #$@OFVmWȾROPJyʌJ"SQ@l $bN-Wgi MKڪ>c2t="i%rGZ6r { }tKIHSĞ̩F ( ̎N7VSsA:JjNU:sއЬtmt<ODž%|{`8J Wނ"3"--xA/:0gVXkTD*x9&WW Q36Fk{NrTʯ#QN7Q=3bOOSQY@Bقh[\:6&6CR<+'OF}jHN};^NU\esFbH 0tۻVJَ K7/SX*-6IPCP[iCSx$z<#omf -kȢz&7&`+@E"ӒʟqeqOw/No_C?ry>6za%Yn@dȠ igpgA_t;!֏aHzI.~$jC[`[v[2='eIO,"ڤ;Ù _ UCWN B0gSrB+lݨ\"2_KFA@`~m$jA="r )7p(^2"g".=Z JzT_>TZq7&-k7nd:3ǧȂtSOgKNheN' kN~BU߶:CKSY"oNw[͏*ۥ{[ b Ʒd}ݭ7\;ujl҃wؙ$?4 b*b*? n_d+=Zi{8!/_`z*., \q_oIAʶV0o8xAWs|E{-iTMd> {{arHO`@Gw:PcqO[JCve2u k[;.{OR@^tY5F۰:tgN} T< PpXqdas7fd445ѹ)ԓ.AKhM}"hK%DHBC鿖!/ܨ|öB;*Douy}x9m Ji&ܳ?>d1hd W^8(}GpҊN OzIu_Zbs!ηtm^83ɃJeXӬT5"RֈGjKaƤY!k\]@!fT>!sQgc1}ڥĜ`Js 0#!CrGK‪&߸ڇ3*w&*`+S1j˪NO>ǘ u@3Ul]Nm;,uZXD]-MSY)E^-tSA՚;Ƹ\Hc9uTK։ 3nY/bʨ/S3PW`vDIBY{H$kE_F. 'qp;Iه]5[̐ńd(iT\ƻmOR⨮k+l:h!`Zty+(밂ٶ}D8`g^CJl\p_ke -\CUHP*>m'lqG0a 6+ѶzjҜFMɼrLC)3Q:SKeZmWe b)ӂ ƚOUQ >.nٙ\7J[v 5] 9벑E yYrXtBMf,p-~ej<ڧiջp3xYE(uULZ(c}YtT=0Xկѹu{~wO㢍+V{Q0K'}!+'gOrw&zKg\oz)ZnVsD;"ʆx<|Br3l/sF BPD":%[\ڜ:)yO?E`p] jwBlPI>1b>uvc}LߗpijD%3nx:-ꮏX3;:)%,ͻH]+Yoi1.W}HMͥu9}8de`){ѡvP$VWFԑ ]Aw\<"6`2'NJVhoⱚ&c n)-[ ٧lWFJ|z1 z4GNcK5Zk?oaS@ *~ǥ\`ͫ@.6a5pPr71vkp|h/pAݕd405 O(dh6& zXkX6Jë 0 ?ػf'FH vZNo̸Aޟ6~9qlϲ'rp}v4U>r_kf _}އCxI# YL×]i{?5+T,?$[V/:WmJ{^>]%Me@fh5w6KQrN'u~ꍝV _|# 2A_4{Vzs04{|iM-NpIV盍1ĸMd@BR>t'>qnj eϹ:LayYWYԞ/wӎIz(zW ~ za)jZe&Lij6þ2P;^ CN/Q0E(K6ؚ+Dq4>9!J -jrz^5D+𖨽E4kv Hjzq1WTc3"OAU$gMEPfcň'ԏ ֽ뀉6w-DDxOX ZZY‘P@*亦pbcYRp۴zGg>t>4Nc Urk^MpCg[t%akp-|\uMK;7n%ŔFVkco-''v\=#kwflE^=_{[>*K*E!v_5bLz6ۋ$.W7aN?E- OjE}7J?϶RgjjnkNy~u{4c-xRV]MM, :{߃E-G:;t&%m|nv9Tr%.xhLd]#ʋ¸B4>Cp[ɋE6ⷤ8BtOu=" v'}I Ǒ)r?DʳYԟƠni Dra%=fvurMRe"U<2ݏ-k2 z؁͟%ʐMQP=d1Yf$ RU ;Beov{hvFtyؽ|m>\Rռ❀ kmƻmmvge8e,0w Po`.u l="91vLD6];9DH jV[UԈYxV;P+%s*3;"p9A2Ҁ /C%n-_;bd=n80LKzv Lnuz+^KPԄ̀zqmVKc/>@t=oNoHDU󖱷?h`3R<@ kQP50Qm $L3g=gr6#Mv`Ʒwb5\t"8EVk(}w;PDῠ?I6T;fSa*~>,J晕{0f-J"45Iw OZU]X[= ^'ӵw$TXAasgU GpkCNl/ػ{aziqqQw|@B?*`i%ґj^CB~e4W|֕c1OoLL˿VcЫ^$Ld#ya ѴP\7I(VIv 7puAP8H*l $*agy`e%שQK΍oz쨑^fvNNlER#>O yc'jn'JG%t}:z ø[W؇/7#oUgɇ,?ar~j%<-U7}zK Ƨ}`IHweuMҐ,oGr+7LTʔKrbj݄qXRޕͧoH:p'2A(PܐQe tJ7 ˏSJԬ5M.t/fkeOjGkYѠ(ť;!@bߌ$  <TVD`MI._I CQ TG[pf56eGx(i4 Ͷ:ۈT ,,Uy;_R(bD$5&_G@i<:0i<<ծ5Y4Z=ml.ܬi<)]o#Ew[T%9zZ?X>Ͱ.L44ENk"3b뿺(6 ׵{i&=y+K@5/| 5̗!ФDzV Վ{:.2l2 NKaC&x1S7n^ p*h|8DEn.m\)A3nM;t0h&n)k^ L #XD?qUEkE>(G ?:{PaѲ uە.Q\΍fN~I)"zjRx?BN#`y"?BM&ۺz \G5>7DJ+n_CtIyq-Y\E  ΕTxZϥ5۱7.ኤ-fdCCJgkl rl/I5'ڞ#$0`M4zϦ[g]{2,2I׽Ppmr"o_3B?ݠ h#G'XӉ87/8f>*zLlo+Qs KSaNhhwMUt>~MEb~ŒJ\x+Z/^@J(}NHYR 1ypu> n*3޴W~Y,ī4IU).'1SOEbQab[xd {ib=\v҂,3ٹ\#ISh<;JA_7F"4C+.$Je8lpP[7%=ҩܠۙݤ"C2Һ;;L) VWDgY/Өگĩf)Vozy??mɘ7m+c? P%rhUB^mZW[`NMt 2}{ex, z&׈B39vރ?f~;5E䓣y \8gEA9qlꎯ-,h! H>ց"o&EDU`";jN1ݗPSn~,bA?fhv/HX}nBzZUb`)G?1pB'Q6|Z~v׹3wk1WxٙnnGV7I6nCŜ-A3|pT}Dܖ٧D4}H[9h%2V(YޢS-qOԩwnłR`dcmdOP~zpcC^EB3' j!$ƒX zN .4 ڮQtdtj#}P%UĿ=5G|n3e]k^zO4cl}SWKab 1d jĹoA&l9˒Sj6udm0Mm w-m|=r+' [5灵 J;'7Y5GvNwAI$0MZ}Y{|ƒk.JVn]Wg_8i+`U|Qdj\c; #pԴLjs$>HWɸ 55)Oh~"-횰O"ј!dSZK:ڥE?`C3q}Q>6գR/~C<: S8BkL<&R,-.7-ڑ\ ^{E ՝/}\mY{O.tɛZňMi r췾e:] [o hdH쑖תz/^fbq;i?WOO\$z@>E᷑2[x-i <c~6_21Cr+1xji>ČTm_w|0+)v3{ c83$,1EγXeN(dVDORO5?E F@M&qE]Ie%/& E<bRO!3ۍ`5(] ,8eM@,Ͳ3Rp]S&@g%S8Y[U"a`}3R waSMGD!R_ *եy#M;}~'<On @uf-0@1rLvh7m!/= {Hٔn\YZUDT Ľ߷C{BdI]? r U_"t{Bu;.4# )[?]zwg]yiQ |C- ċi!5qu!upS,?ȈzGP $&dgG&ϲd224.>=95T=߅̚akZ`sHP^_C)G*EoUl(Fd96m~39;O^у'ut,Z'gLw;B?R{g&v:'!;1ձ*%~?@59N.,vCZK'.9{sVc4*Z>ag7`ͭ"d>s0':n (lF4W'JqR#9 G Ƴl,z 6 񑫕zqJc`sA 1{R; 4D/-WH)n}:0,8i8=犌5RB|$$|_]yv0vZ$|AujEV. L*}PS8r<ѤB62wFo)"ONu[b`n& ~(8x7=t҇+t}Q jFl^k 5d粘 4 9,%xi,cŢ$~7p2|.y.pIBP`<[t6z7/< xu?}<'[QsߏvoZ,:rp7?S: 'LR3uP9OTL(yiڳC؀NQq3H%?%{~i[Ҿ)syCCIg_s}+I+F%01ynj[qn zuAb+BRJi |_;ܘcah k18bDAI&GTo4IalS_ p ;,QOܧb٘Ҁwk$ Zh>PHMHH8fdW宣ZcRwGەX[ZEFsKbxfY/y Q:ש-LØYx`h pf -idW:]Xy0n@~!yu]?f42`mOG,a'8 SJx;, o(DIu і8Wڑ ġf3KP.gtB# >^^ W.hwJ}:=ZHz:8Mnj*N _!pƒ’h )4T$:guJS=/~DJ"+'Fa@,Y,ټqcr$`a_rɆ'}Í$G8~ИF0B~&uiC@[xΙRZ'r$oحN'Err\?6g)  1s"ne=V}5 Ȁa< HAvb!t۷1Vj(;,=pU|rZ ?/:mNnD|Tm ;q.$ml/3O`譴!LV%q ]o)k,ݒ_AWK2s ծ[T {ǎQz$`sKB#Xgliz.Xc]Ja;&amrX7!cLdMP%M荙+xũ 4XfA( DDwcM :40#WDm"AuQ5B-=\`8݌]`Р*@ʇC̘ئ:f%J3Ub鯯ʴʪ"ǎqqPu"N3Vb>ݛ/?N?\Y韨 cc9)F'N5H:"+ ΐVu'Of.aH>IĖ4XAօO:+::2`ԓ9ĔG b@S:_CGՇ:QGDu͘-dP~7 wQ$7C{42„x$e^ϙ>%CNП;"X?xMPn,Z~ʿdܝZ 6 ԶsdLvP΢TJXf8ʉ.n~lRN>~tg8-n6;dώ4ɏ;ǨH5dI1eHU`D}<}ɴ!Jэ\?Cu מޙI-TF]}Uj!lY9ɔ(I.1vRv"x'u3i䵈$#2ك#7U$}S6ae?ū7Z 5r4ǝ8N'h #s''S !U h^ |D95]b1 TAH^c4qؐ(P=4sB*L[I"]ٚx'o].*ޕlC݀'QUissv  ZGb _ІTӃ9t`֨\"arvrB76!B^2R=wt=l.7p]ә =Np0L\>+2JumEшQXeּ"l,H3.=/ 0#j -M!)#&eP]H+E£Vk#)GJgDU)/VQ&fb4C"+UDv這!=7X~۠H#B$ehw!p(qLHk[XJmMqPM4kk\Sn!knAM:h D->f֖7ӌ T(Ƕ #駦mueL*,;ޮd۷kӞpUF0yۃQG $";8>%]:0@eP-~}ȘܓFTp Ov(M,k=}!zE^NU_} b}@ ZXJ'ac;1{3eGQ1Qv8/(Vj"x4D#4ejj}"il'ދOSX0آr]!~# Zμ!}j||.PSy<5KiQcVIKW{FZvm:&Qzr#'P] i402xT'^oHV#nj,yM^,i[V'#܇<6M% s>0_DJEjVAD}+OUJ視A%㧧96Éz;Q|RUZXHz\Ȑ.;MXs%8^!j qn_f>Nh8Ҳ !@XYh"ўRbEoe]X^,\Y9~ u؎J:Z IN'$gyFUiοZhcDj^T}3y ?d.lmTyi`ު0zzj D¦QdG`X>BvM"a$j&DtM.izY=YG)f~ẍ́a Ec4~!m?S8'`mk+&~ >/ tnJℍ0uX7DHO`D毅=FL*$7ř<tci ar/ie4k.WUW52+ Tu>1,"JPVF^U|ݡ)vQՂN$d ?Qp2+f\R0~Z- |?l[֤g5Ȗos\0rrpٖW]Hfv "6eu,Jg!vˆk}u,o[3-tJuZg dEdƪbTB!o@;ɹ#Aa/5?A =beM)ȱ7 !O[4!E֘C|Y'O l<ع v8̊Tyɾr!Hk+b*?' "<{&B{޺1 ݔBq-~pG5*Kqe:!A硣ܺf(>m'頉O0Exa&d1)5l#O%@ՍA4Sǧ0 ɗ#SV4fT -nc+qk -0F:]|(XWZn~B)v0yFtc=SA$i?z@Fl7 7 jٽ|Ovca![Al.A(@VC++(҃;:z% u<9C|%K_u$ًlA |:^QU@౭ +{9DBr^dNY4l;s*;ʎRZO[%>āKz(+\bnM|k^H<il?] k[&X*]c~0\䂼&]X{9_@/zA wa]KyHT>9֦haytxKPd5PG;)&IOZo|++X /(^Fzzh_ Woaՠd˨Ͻ}@/[ ҹZ3Lw%˓lT` ] &\8j Ћ"F g;8Ic23AX]ۢY) PfzHiBV&oj<@O斬BcLIQ3 Xω,Oܨ˪.pQm C`h&ZTo9T ]t~+ ?)1>|קzqϨKۭfƹ*mZn-wjS-& @ ?R .aAĿYL4Zɗ }6Zjq#4n$xA(SJWwc'͋t \A} j>SHX1!#qHx׷u^#-ږe[S ށ:%8n'2%fw~ĥՔ;9xfYebY:!"|0jl9T>XZufD ]q%}T!Ym{w']=Un4[尷"W!=J(9r0(rGasJ/):"שLR#*ծ挶"$YlU 0vpZ w#~ dDx$`S}clLq 䗖V"0mx{CmuCtpq-pGh^*Y%HoB@ RY]L;՘.wIs`B (%WyUH nzu@V`lؘ; W"!SzO ӛ7kn:iĈdE֢5?j]muu_#؎2Z<ۢ4M@ڏ[ຮ8H1L4=U=&g/HXt'%Ct zP^4L"-JKQٺٸT''F؈v)}6I{%H7^DyGd)箓Q|V n焐n+q  VY]1jV621QldilgtIa*+iB\ 1! PF̂?P X'Vy9 XtZ^[=\lDmճ"bu݆s-xh 6iGqoYڝ=ȸ:ٰn9 .Ƈi{ʳ}4^R{ (Xb Vj*r{Ws ol69g;ՙɡX$ {n Ǝ`ֻ3?ht4{3Ft?Ғ(l"N"7םmgu'n!p9l(YFoCί4[÷WnCQ .lT_IO24]kzk~"*t>M[riϹW&qS8sohr|l}PlD_{KO=Lɍ( Wft< sdީΧs aʩ3 ?Y* ['c;&Ű:\91I@"M[dD&8¬&@A<>m|ˢvIwBmףh{]L0iȫx'}D[U+v =\kN\Q4idI'Tgwrݑ w8ؽ˥zn]ËS\ v֒p{c0)!\mǭ7U L0F[j0M8on|q2D~IvX S6NݖMc[@2 +:e'o P8rh1Sx@3Tmm"ok&TW?G7Eo`DVw[>zmj^zgTb[fn6=Ch)j0E|h#ivauxEn) @HytM|zYBٞolH^.hUo=l[9zp`rٔ;K6-~zBH|#<\UK ̠V@ϗ|#ْ@eF8"BL;%U;%M\톱*nQSgvTjPo>!@-{w@"о+hc/_B;L WW0=&D%A;7[ίeLWİ+E^9j:MSKP &2pKe01GLE~s`ii "EdHMOR<z?iP!˔eaF4'=2ZLm%ڕ=E ܽI X}ˠ:#a/" $qj8y*xc/ƊHJAs$%I2C?fkzxrtO;vc3>)G:6er䓲ޓbB9<G-NO=tˬ_d,`nmT,!s g 6##9a8n>@oT! 儲$lCTYuΨf<>c"A|`!eG@Tv&/MU L <|b WܠnZ<]EP}#?h-uN2:; " M~] [ePe*pw^؏q|RPᒥjnMBq- Wg~˰f#JdX]|x | Mrb.8>ݡ'֘WD{+2fE$oޤށ,B!<ܿz͋d֤2r26/~h-"(Zlepyw>?f*B̸_Vݝt=obA'#ts-QC<4LJbKow6܇ ^ LJmf85s9ru*L8$< OVC"EW77Hrڈז# ?-|+\G2[&P;.x(H\t`_ }`ۮV,t%P\R^'@2*#*{PrWGNWCz فaejuN]>ߜ~+M$O7'6rfS'l4׹ A̗.俶?R8KBzrS:I{Ò8z,a;I4EIb,5+ T;\ N/` CvhB=ƀSꅗn荂)?p<--Y@596;ɻ)e'e @cI2haP0x-k>=n~ff{0"Y1\s ;iUӦl`H5_5@gr_"mhmj;,c,X,>`7X^0ؘpZ:mi~ٟX[alh(ͯ۫} STZ)F4)vG!t@O:Lrd?mH/|V, P84z=Q[ !Z1[៕0|{QVL@9l W5a7)Y@O+-$~[L~GZ\I$3ga俰6umۯK ~=ur~+:l!WK<_R6 N<8R_G'~YC~9q8зe193VZ-⣢_!XSF+j脬sʝlތcsY{'C%t_`nߐ5rWElWoEC`C}T8ARƜ[C&qD=]A$"^?T<ʼE] P@@ɟi*ZG#!Ak>ZOy_ `Ӗ`F< v]QvWvӚ8`gܟhxG旌>~c:k33ۢr"vcj8c4Ib%ޛVL-'>͘8ŘԬ&_Ep9Bl=i4QAk펑qIů5&[毤xrKV5ꅠ+oI`;amD1:I˥9:Sh!ፃA0Ӛytu`޸M>#*#q;zʑܗe/؍gb~]" (GRON!qda!D VPAܽ>I 7nC;$ߦƁ7dۋ)[j"bqP^vLOt` p`Z<4YV| ^^0OСQA?з-j J~.π@bCFMzdUwYŖ_U]_Ijb9,:wdG8.h ΁Ee  |;iϓ @ {RVvKb.e۫^[llte 7K66^gfp%ӺK#}!HeȮZӄ ܑPMm^m3} ۀ6o!/vlJYy)~xD83NYwdmGEka[ %ץ}2j~:yd? 3LΟۦF<`o G-B i`(yR0Q "=dO|Q\_hpZ̦B0(nc|Qz⅏ `Ż&_LKټ}ЅObGsYkN#bۍ] jƘ5G',֓=f%IV8>f=<^~tO Fx#iL9d#ڂ,1 jQH9͍ Z@)0ءHKr3<r:BIH!VU6V Byy7i(㉉7 dMUDF(/]:-̆,/ ݩih"O5l$hDySF/C3$xNa3ˡ#%f(]|֨`(}> =1{طBj.jfj-\Ut@Q`$=t\zkcÌi\ވJ^3G*nao<yɁQoU{9Ϩ\z,cbZe6ygDXr:(c0U'",oVgW';s0kQAa=- d~^/> #w:DTV"i`gt k9Fl;,<+'{bT=b8?R_S!5*4T%ԋ!$IR|5CE`HJgqe!FB>s9E(|Gдȕ0hN"*P:D7PL^ f&L%D4\np*dxM?~(;csNm>cFHUC^ F$w4QCƇ&F4_Boe}g8(MecDK^T¯g i9k慠>C %`=,4Q9 v^4>X4 /sJ uŻe麬R}G6˸~H= ,PR?Ss$ߎ*GѺ 2ʡw{ŝMbX ðU?<ׄǀX(~ n̷7/:*pR&c߸i}#cCڧ*ԧR婲U.vh{fHCTiX 1!Fl, -3 Wp5kU~`^&L!{mB#<(gh࡯kQ֚^/oa~)'F䈤Ha{E`헩oI,E,3!vcS?cqTHt9h7 J=2? qr12g^MancMq' #F]J|GXTDx ×F88 u?j%!'7Ly hs]f.Kp@mY/ӷfxw&֩ԯpd l}'=,,2| <Pz"٬{qXa.3t $ߩP'571 H `|i+?ut?OrՆIt1I[xCM@4;刨-;<n}b''!6ž\&-.$ZQ yG9㥺 Rv!?`чtt_hfPl[x;N{ a@r <R{'h;TOaV^· $ xO6{y(`Fw ޏ0HUJ +=]~0EKZE qD Tk-r8;X k#"ULCI7*v]#CcqM|#U^5xm:XơF'+IIdy 4O,fRZ@Gh5ߤ̧ ;Bqe ㄖAs, ִ%3n&~Au !JA׏ETOY+PHYG.Ft2$(,fR:1}*Yjr^.TS;m) WO+$+멾>Vzo: [bpt*vE{x8r/-4lV=lo}uwj%mM*3E y=s+A}R(2.ls [80uqt Dn^9OtQ|^湎8rnDeBu$4Aq*_9NnGܭƷpRFT0^5\#,r_SArkN1i(SG[PЇ2ۃpN _/o9-٣BFMsF@h4ZÖ7g<3})&¿撜.|#JVg>.];|(ޙ˭WbMBr JY+MׇƠ wu\ݚ)OwfT5 hFon壀*{BjSÁaгNZh=?0tamtJu8.eq4x0X)\[~b? 8 GI^{ Lk-KHv'S6ri-Yf -igWn]=5u$}')R>g9P{3By-[A]MW[c eںbYj1.xJ4M{RZJ'&u΁ \FhӶ%(nz4AMB>obe.Bh0kWWau եX"ؖe,D$АqI]ӂJG|n,K[d 8-Kȳp۰b?/aTblםѓTaH3H]3R]V+rE} 2aUxk+CQ+]86+d +W /I Glݞ#mO;lRTwM*NnY]'\W)d Dܩ:ZuO_WWftRM&>}.[rw[B6.9p5jɒ BtY6L(Sr=:^f dcHu?ťJJy> c+Luհ6^Vm/o1 L*3D HSS.(`~7bMP?X|I⏣5&c7W>ڨhXCUQmFsεK/TπqӒ`^BXXCaޏwcd?I<6=;WKg~"{ȾR,NF3C?%nHA73t+QFs;dA7 <@}?>>2:qq\D}Eaq;(jD629~@PÉ@hs`܍= Ez˻[-c^s I­c;\(U  4$&v:b8w] jubNg57OfX@eꎃɑɍ=xe2bt$1E\aq X)95О0ЈWO+ ӣyg:!|Ctu?"Slulj<[R)NUB\&;."6ԊNf[Krk%yffGO룦  6@!_}7r0E7ܒ0J>/}.?dh,}fWܷQ^ŋ,=5\\dΛKR,[`N/s=y/l0*1Td'ЄN瘤~w)#?{ ͥ CHD^>7ߤ؞oU=5CuHVl3P%Dt#/demE)'_k#:aZbg|6H؛\]Qf xD &jt cCNsmzpQ,_)18SK`5⻵Y59 ߻i,NPRwI ;Sf(l@ʾxWؕ1ܐy]\U0R3y/W>v.Fg~_v>˱zwH6sBYc`Rя޾bʢ;nh5\jh/y1lND^$!*"[M>36CctK㏠Z^HYE9b6BF٘=Ebo}ne#< i_ >7Rw?#QKͺfE oL7UvUur'ϟGQ iG;sM^w_2־یWz N߱j:G3% {p">BgڈNF> sGv T˴-Q/AbZoC < Z5^P @ſ"iAL+pX c~ԭ'cC: _j; %4z8OՉY7y2cdχʚy&$& bKkY)x_p)#0M7trwTGq~o@#@>$p{9 kl8r2iъc ; x%_KHZ$(WnC(]rM<_-Wնtq*\kpm;< ~!cŸ6UDa'= 1ɧ>D墔3gڎj,܈*_{A:~&Ae_,yx*,K~<\vˮpZ%w$˹5 wc WP OЈ^Nfc 3!J.;a\[q}艥0\b7wJE2.ʥvg3G&U- `| dcWKk)Zo#0b@h͙bcɗ_#$Xt~<K<\d!E sL0$._X3#bh6dӾz[uDx GA "&t[o  xY;";f 5DXUw S樟T'ի;)DB+T@%R,<⍗eJFPs h۽b'58Cr,a9'Q^qPŘL"e $>nI3PhlsZv]ZŪ줉!a ,jî%a||O蜐ަs^#iUkN_\d^0ʛ֛dl `^ Ulmb?kX0gAԝz=Lp Ov0Eե^cF]ԥ#)Y'I7~9 ˈ^Un2@'g*[l j{ulᥕmf7jw]JTԬZt٧tpsv7[VE 1V;+qcG/ؒ8?L=# !?gҬbJU,ܼ I;8}'F/,FcIg |]~ȍ.qSi&b=wP\@`(TT 4W8 &( ˱`??'w*-nOSܱ-p>6RV!d8٣]&Dl<F: U}7{]R)ʤ.>nKnvz'xѪ~w7 I[HW]@82;4f蹺1DTRJDIiKo2KV' y"9VI-nP 8L:ՄѝS s]['#HKi3$VǀGU/UmM꽌\~(kJ lD&SXUD8gGY7sJqPݮ>O7w~ӂ?έp&9E:5{;0QSʲ:zDАq Osh~8яxQ[bGY-gC=niZΎv-?0['(ژQ&y yEw֏ wAV}9/+~*7 D\ƪ¹qMj /](V ,wagwɂ'9]bQXK#؀ҏb*(uulQCfpipTxq)r8"ȡyHr>49Á H r>.,#wQ5J?f5&UcuH8"ee-+@VSV  Hd|{k{N/x`:74%o "%֌Mĺϖd#؉uL_+l 6w~Qcӷv1;ԯZV#Ïh̚+(.r.w("9AޣT[ȃfE~WCmrrK ?O8gy6GDk5eL VvW~a>~΄"vik: Ё`RQ©OT ~=w`fMt.U ֽfn ,p'fe FAdZ Um tW(2ZN ӋLڏr|WcKkqu$M nbeF9$#mП'"T/t yQ!: |j@j 'y, eц~Z[;yЌ%O'㮕 )~CP[i?]6%mdK+6 .FP+D? .\m nPbwL^Nv+2 91L@XD̏JqyNć-.,c7 aŮl˖߿tEృvJTYAڞ;@m 0[r|w?B>g>y!)su(#?6D̀oA ֏W%\Tg{: Px9 q,}5+ՏMhͬGsW,&E~6f,Oƚ5I[Ux6fC{iD*i@J> #?!)X3z\ӳ X7gʅa2Qd`~v?Dr~ yNm.\)DaKZC$\ ͬYI!yDV\cJ7 x 4/9=_sfA7[рkxe<ގ,-_;ņBEj'2D6 Hgi9͛ ?Vy+7Qs.kib>I^D[i{ۏ4@J_#vөϬZ ݂ҧON&1F,0#\ǛԻ_ВJ0-,̔mNkv^(YP̿M`C- tб*p6 T fn;w] ' @Cɶ# oZY'u^ {U\pn7ŷ-iLqQWc)ݝs w$=f4H0*8)@v+Kv-Е&g`&/YiG0)%ZzB #ժe؅2˶`i׷b=3^Wi!HW:Yfc<qIʇ|0yNao0B0H2̗eA,5^`܏mƑ {FI;w+Pxu z(|ZxI}5c(Vk|pUyfZ$sp(HCa("TJF:"P_r} Nwƅ*l*+ݢ) vpdB[W2'繚Ҝk(UP"أ$hP/\ܮ#D{,+gKHh]AUasa&ԣ?-,:Ə0xHkCO* %dIpd< =U)SAZտm L 3>`Yh^KhQ 8v#n sL+S oK$H@Gh2BJMortP&<_" ^b{o]d*y$Tk]GgX1YOB}3Hw9j^`AE(؄:j/i%5NP qc]`dsnAvc}kŽ< \6 ٬ Ed?K#ģfrDZZ7쏻$Uö'5먮?~J\Iɍ9?>?ltsܑw>SjXlhG)} ~]Ko$xmRl{=L5+VPK#|%w3 ',[[$KN]s*%?w_FZ5KڴH !1I1v7D.By];z,Gۊ<!hs$bҵԱ]v_pXo)`+!Sӊ Poo \vgʏ`te; f~e@5NtԍMߍ Ow l_ȩX>Qz}6[l!<9f r/:7ַJ{gLw_ٽ' K ҎzOː&D6ܔPT!IT)b*.!u+F+Ѫ"HHtqO '.B_Vv5t tC}. v$gLqx2*Jou}HQs^/>3uoR$|d!D&FxƗ㨇/o7:F3{4"Vn?t.}\ZY.W% r 8f<I"ypuѳi,hYP$O7O޺8XCa0'FY%}R7V[{hX2L7T xM[ސtON[c=! lhkL= ]/ƱZ.of:gK#UZv4XkJ'[.r=p%}$ 7~b/!_xFzy:z5꫹KK[ōQ;>L$LT0#~j>^m-DA~E:y95 ;Gwqem\OlSb]ű2IHtB /sYFQ3lOb- \s`Nf&dL̓S5dAz<ԫ]GcnƍLv@(#EByGgSZUARP@Z(2{t^m}z㱘Q =KFRB֠u_ջQ]J< K0e~  <sgvщ Gw>Q+"n aH>:!wgTDphV&J y][ߞ[DžpY%̕l^6Z_>w 6SI\&}3Q,]w6 PY:7|#Л T}BMI5!%ܵom".UײPx3ZJzbqX $Ǩ5eFD+rDn|퍌CO5i"ZԿr[r~EPH]D *_H<Fd61p w+jWˢPKw{! wJz'6,{.F(4yYѦ,4M),DN&\Tשa–pI%tv[v|If:CtCl*YcX$ n Ƙ,wV{z6vAi"'ܒ ea0r8gmz^(LCsѨptx: >?LaW祵G&C v7W`{>zHMX'we'DI>Y*, 1k&"^3.lsm a~:tO FTU\E:dBn+«x TCf @5*ǐ psl;H܉гalh6I_^0u 蔵9V:nV;`#*pq:i$(Cq,`(  , Jg^SS^J-LR)WQlbYK;"l*_KͫU Zh7߃%}LUOX^-@/'V|4ZKe=cq̹"ȩFzóް{KWt]xp+{q_N4llql[<|-;P/pX,nX3._:D;] AOǭ*ks"fk2i$sWh%>wjH$9P2e>l濴fΟ;z}ST6:*-b`ВL\& ♶Iȅ[}OCz6zXwK"̷qI><(ٱ9J-LQ!uDҎ,miJkpy=cxh0Bg9^LĤxH#"HɲØA.NAMDĭJRrgL Ĵ އMlJ*m`qF':^BJ̹3%gsD!Y awIQ&dXt C3H\k^YK^*4T1<8cS! ˃%}`%'+Wк'Diݱq]fvAf i#*sa=|<Ϸtk_5q#zyɕ מb%߉o`>"KwhVb^.bYR'/"`cϒtlV*VgԾP^'?] B X?;Ir%'ڷ. 1s(F,5KZh7Lud0lX]@[P,y/1ޒ`X;>,&NtdO=륑c3EؒE!key@dn]p jew`ex&pKfis;AR@f'73sbP샘He>[7LYMk^#ĉ `vQDWp!|[uvKB7.h܈'bXd)-1 YTŲ059l'$HRX<{XPG8i! bxk(M,`2&hHq4/ @OR_ېJa1,> 'GڧTb pn@'WH*0]cn~'`ki*YAIRI6Z 81s[^y=ic>. !m:Yk8|cY [*s4)ԧ)YaА&Q(/N_ CZC# 56;dwmttojYZMYܞZ{Bޏ BV}S6ĽJ.AUnST)"1]ȋvB ۙ[{:M+" Lrzk/HQm-f %YN)\9͝RuնK/bN4a}eu9Q1P,,rzN1CMbg@}eJՇPNq,ܑ\ɻ;7 1!NsTI)}l`?zs$Z"-%Ϟcy)~ vc83RC h2҃;7aPFkx@XOUm#4yDϾ.&46d/=7 XB|(Z}ܗ dP Zy̙w6N@XlL=W=4_{"9R1ez\n:P nJA?W@Ur p ^FU4+VQF((.<0( hk=t̔_/8ୣ6:u5jRE\*YZ }S2"x+VtQ'6N]&)40y+ l\c]Qm*)y!C7jL`ُު㽛(@>.b^iINv%@`Q> @F $: UeSxb9+ _{ pk]E0 hN:|r]4j zcC򀙧"OA?% Y<7x<#獊b+^7On"ƺ'zWo .f/qdҭ3rY[e@`?/(8 r&i/2d l%/%j3I.sݳKpW&s#;Tc`'<3& 2rvs7bMj[)‰N0 20<8-հ ꟽ;*V\Wx>BJ&g7qhaWՋ=[uJ%h;|/6^sFpKZ&/?.d?Kx?e| ypRqwh9$Oټ+3l,?G5=fV )tіj3OY=av,ԉkZE+*vuzE\3q( w^~nOx7HA HoÊ` `\mQ֬i,4eO\mO]eUzWX ~j)oh*VӯDn,Tk/\)h/ GM{r3/ҳP`hcOI6qA S˛QLT:ج,i R{)9U<.A̷JD}y+~&j7EHB^J9֜Y5Hj3CȣocѢN^`<M O?\ qUCShBT5SEޡsGP':.:y]IʢQ11v5pFƗ~!l%V zK)KSiO4)ħ~n%V.,m dwZȰ{ ▃G7k~ )ADngUP &$gz)%CIܸ a4r=uĕGcоIpqu(pG5D,y=-؋sL! ٫E'o).?jq"o -:4geVjF☧;+E0*uO22F))>V{.~ێor6JGWzX&PESVKWX>@ 5Bo Ȕd ˦/#m-L6,ǧZ$$P4iwVC7炫}UZj\@DR]9,!IsH"/zּ}@_2fXR:n|?Ov{sYEN%?(~eZmJsJ&kk\Vfv^ &cTA$q ɇ`;V2u%ZΥRYc@u :3I}MTӈɕ0NCsnPnM%.:MDxVm@=6ȹRٛյ D]!;So 2| +#  J$J\/Ę@WXYY,}@l}e ƶpiR~+rclzl1]'`*“fV2 . rCGa4sR_ĢVљNS-gh~VOC{G7NN$0LRLNjjqI˶8ZԉwSfFraqsz~,ԮL=)V/v奲^I\l .KZ[|;Ke}j5q1&q' xe5d L?{ c[(/kH/Q}_~n1_4@1p'~Js` n'[*d/a'jS d,pB@#lO̞/SB?4̵έ#Vų"iKE`ţ[oouԕX.\E(M!()DL`]eiN).@{ɵzHsl0dRSyhg f^x^P h VK{+mÌa1 /&J3^Y  ,9p 2j;Dld?@^+3°. 9&A2NFGX6#.-uaNs2:sƐ~&+#4>1,[:-Z/A^OH/gd^7S\V|eݩ.LHl_P0YJۼd)1*T_+A<>QГ;L6 6kƇx=W~\<ߎ7Q,>T%:%GkE!wMc4I}\_ߋ2m kmx/ql^>[Bl&&JЈy4WdS_\un{)iuH6T8?a 7ER&n6TD  pAZ8~ O? cgղޠ j\ãȕi1;7wCވq'M1V=4B |Qp 겇Yhaۮ0g-o;.xb:Y(kE7E,Kr9&"gSBh ]NROj9MÙRoTbA|^;r%ސ=1I_͊;5 MZ xV5+r!K-ġ Bښ_[$M1l8bSfj~lJykr8toa!*yƙ(Y6mx`wIo}uy73!~XBplwa&r%D³BgɋaaΝQFiO~iR)2;j-5@J\?KDKTp4`߄!)Ȉϋh;[J+@y,j8X$鶶\H>8BӴ*p OZSh#C;c^ ~Ň`;.^ ~-zfMc;;b,Ԛ!I>% KH4S&-#8|qviW Jjs,V'uL=o1e߷dIK0QbQE q>amffͦV z'q,)r A_32d<5H]RaB"H˯o3B/X/V(w u33s"|Szd}3sg 94k9/ozo!a{0el@|VJ̏='h1܎D / e  ;1v7R~=Oݜ\9QکLr3Ǿ3wOyGQfy۰}!]UBbnwHѼ&6~fՂ Do:2sO<_*n{BS+ ?z f X|jDcx巁}t̡+Ļ/L$"B CC0=i"uεTN}4 {fH؇3!Μk&Y;-썊]T t?kFnEU :UUZRQ՞vu \ݷ52^/\.~%O_be]0F^.`9s_UvT 'Vbh);\7mJ"[;s}%CXFc_,nk$NHʞߋvZi7& hZw (f ]xNprp<2=On <'0#-Y@DВ9i^OXY=mD)>"`m[񦊒b~iy6AҝHk TDtg-/fی6 c麴೸ qjMbmV YI/y5pфng= *zMJVS򎋞t7Ur, 褘X]w-PzZU]_8Ul %%ܶ>kf} 4+XvtƥpE cLTO2VKؽrD տF}j 0M?S,|+%g8ސ<셯dV{ib~gW \GG 2_=R !̰ʔen!`VD+$ 9;}QŜ8կVҶt$9ؑw .vD:j.Xc^,XZӍ耤rnwԷPpxE%vHQR?vpzsP,RLЬHvB' m=\o47僕&bBXts~r.:y4:K%@7xʥ!산VmRMfJQ ,afy"[m(R_3׃(iAknZ1mQ-OlTIǀ&X yS@.sgo;-}ȂXьuJlF{1`B3.:QR2ePRI5*טNۗOpEE_]R$r1K%{g_lyDm}18q:R]wʎ=?*1~CTi+`9loxt↴vWG'LTJ8 }OfBQ4Cl4>"Ua@g pon'U moC[i&nY+RW!O=p$a׀3&$έ EDdži Oԃ!iP3CGaK :09e#Ix%ێ뗋9TM.%$UX | 6 e>/lyasq{`fABڤMp`|t \Jz'|";jRKAWԖvuM(]U p,laq-:GqI8) :A63#\k^3f{5K꽴`7@@pC?ŅKGHO5j]HȯrMc ~B>O PfJcHwY= lQsK1{QAkMFݚeֲ jlf҆8ٖG~?܃54`up)l\\U;WV%vJiUxb۩@Cn+"\A祑o׻X%%\ͼ`qʳi)Fl.ꑮs{>||z"b/*jh= 9)"@Ȇ@gMO:Uv}'us (pY\q.8|gz >)b Ǎn1#'aLZ 3:5X ^(?tVkjh;>Ռfj;ֲM/J ձ$񑿎@)IϝI!e5J|GAJfeyB/4 R.b|?2i",K/k{v\KN/u ʱd;8=SAث(ِV:pGAw,7@-!C͔XJd6Q/d'y7qE6+knGc|9KhSKtTʱ\(ĚUF(c65v) 53j*Mp['`.Ҁp}zMDrK3ٴiY$2?;,x'0o8?7K4f 3!lqDz \I2qeldR(Sup k{dle (_FrP}auRO=#..$<^FYG=ϻc lno L6K蕒D1,~ɸ$y .hOmei.{FTвq֚7s>Ɣ'K˗Xgx,Q $AU?Qf-RFȈYġV )z_z|?H;-&U ʼn=PFd0i݅_*N/EnYN btJ^VJ0ikb)Ә:Pt<J//.ONx+KnyEpR2R?/f}Η|Qh<@ 1&ι[8'zo3 7/>9Dl.!].ܳqd)lcw](`NG ,ۛF/ɝX\lDzמ $R?6^4d8S!GNa^_TJVT V7IlZy'|xwgDz/eˮG$)o?P[ 7n׭}2xfUnG9 G> ~ 12lo(K9j}6,iScףeԲ <@ Oa2ޓ T ^a|?W2x_i*X52S-1ҸNxK:=a30ݬ,{tq  El{qmm}7Td$z \|4 mJ_d=%d lNmȒ`p'9iq0 Fђ* ѿd Uʹm\?>ffMp7~]PM7_`j̳(CDW@ *[F+K`Ru g(ЊFǞiJy>80`w@)7~ D, s_Pbg˒Rc_³րWtjS*ÝOs_YcSEs/W8!͟˃07g.Eg P myq!h\`dL0 ϭy,ۅzl'#ۓtݩl0tM>Yr8# AgO$@X ,>.E8c%X/s=Os Ir&#!*!p+hƝ <"6 4 wlPR#{Wo+q f#唏\1d bXJ1ځ<|XTmm;Es;<^OsFo8,Qtd[y 7D$XIݐi+φ$粊n e(u/U)j3})[+|̗`}N/*0QhY>҅W TAOT>F8<b}BZ@ m,OYq/;]`d+킐4sq7г,pHi!Ob}ZȼG 3N {氠%teaZ??ug7A*e|1Lc;;JM%2sv=LUrPWL(99=R0Kc7LXH+!W#n^ BcտA¤*'ˁUhdkep9(Hy Q东񲆒O>kʘ}`e2:oqe(7zXW3#AXP\ _+&lL/~s}&ߎNn?C0C\K Rl~@ykU{tQs60Lj9 _Cj[8ZЇ2KjvERXhх_\,w*iӐm:d h=[g~qQlj^.uF7/~[dkYpD@=ÿ*3G*uk+`N^/PQ 2SjjA~eta, e}'i ? !Ԡ2YV#5}PiJ[_=YJg(#1b t羳řH20(M{HH&+H88fY[OǫW&0_sa3wNitBwN8I}OJ~6lyԆ=PgQ,.[TtJ|>z";T4yh.}riUM ͝e],zP[jRx: '{t3틬HBqa?Fݩn)l:0bFD0"; $ʩNjl#Yb0NEw"HgKίYyrOcQ 3[wst=35+nk9[ oHHq"IOķ'&4ږ?w/M{.8Y%_t uq^"7s%෨4ii/-JޱQ嚫s+כo)&?6&N*&"/8Zz̞cycEC8 ϬJgwʄc@l;˕i/DnCtIZJzBs m+TPC˥32uveםuePHMSqy0-1t7(:)R;h&%H?>ezľKdI?c:xw$ޯ.e>*M=}±Kگkm`  Y$t'MR 9$F[9=gR^T(peI/ ВӘbN0'4 D!sA("U7)B}j@|9Z\mcj hI11mп_5_=# &&QNy)*_0xH[_/ ={둇xI6H4$`%VWQүM˲2+ Q |vkY bT*o^Fģ\?sBlV}ra]9Xs4>O*VH)$_Z +iu[LrҁW}4A q <(JCxP0C$,VqYʜtLgRJ:Jn@Q9qdz+tTַOM[~ ^&,z}ݑJw t0}ѕfxu5q9h0ya-XeS鵱 W?@tf+mQ"ݾZ+:xdÉ]=Ғ mjv,i[_¡Fa_x g5!Aߺ.d99Ghip>},u] X2A_%u@*ݬIAR\} $6{5 7GIZEne(CR/ٕMM_{te z1R:lu<Ge4[%[)gJo\jgaX۽J}X)R6TEn/t7w[s W1ai+~;^ cwu2"Y/yP]Y" A^àM9.\UC3%=QVpS3'-Pw S]{$X b=~\6?-٭P&efV_v#sbܽ`Ƹ0:հu7Pֳ;#eWrD;˳&ˮO3# |lzfLw˳] l͊EzЖN(6Ԭn~G)!5CWqóTe!kqak:,9i}+#F@bG[yU<tNS ¯ ,8PƍV{ukY78U-X0G(h֏1"J5R*[Lۑa?9xͽ?lv\B.Z\Y], A`pbnjz+(0OZ /AR]34:gWYa-NZer&Kȓ7b)CW_'lX -utʳ/OTqW,NJ{63/dL IgVڱN*}FexGAsC~RN8eI|ҜѝFqp$d~WV%egPTz3o窕xj[ծ.'?&=ʔi96frV+6^o\2 G~>7>O tFȎOLVc 47׃͌+ x yX,OI79cjRpQ6blQG+'4SEoPjh[[Z/mιRf6I [>'~NB0n&nIZl֭k[Ƌ.X#TH J5|߀:zϰ; #~zjq 2Raz͔ޞvXStrs̏S~ o@{ =,2%H*lZt>LO%-ܲ  Uע⢸Nh'=p`6 AHE4'OwI}TxqK~`<=1GPa5rFeBBmuEyeliU7%OJe81[M!;3kVIyֶWYk8B9KCEu70dZhL\rT5vҢx5UjS O.qYl1(m#pr[I]lAR:9ͅk5b%@HlG\laO٭n^_hsFT}lbuL+YE#^4sgL1C7yeԯ˺>ISC׿E-@FRm /`{ Ypy4\qxշ`HJ s,G63X۪;X0YtJ) :o"xr) L9t@f!_vjnfȇMK 44ί1RqwU='7X]qrHA}Ҭ?@8at_ad T2>-$i)}!7r\xp/F=+#;( WS"^`]iwʌNr_Yr/hB= L ȵaamRQHELrpXks`$ d+bZo+Ȓ&<Ǥ*W[N@;{y:R'[޴_9Q۠j&>5Z*3,>/uV3UD-q("wI#OVS+%!;k&mvŃFL'z9_3Kxfty$RNݭg|j@zkC'=#k!DԩJnhL#B&l <1|c\.T5L[LnV9,"*"ܖ\ c`zvs|}gkKUL̀M))u/,x}U^^lL:im 6Mfh^ i.:ga):<4".خZV^CIt;6Һ|i}[VݯA M= M QT:yk;$Dzc3;C J~;q{4lbM1ę?Ru$IX/KۥTD2v6q?NǤ{z6vĽ8>S[ nޞލADpe /vfYJ0w#QlF+NFsۉw$KdcTKwY 'm;;"2?f T2z5,&мl࿈؀*gw1qxIe -veI7Jj & hcԙ.U@ tg ivk(vav4nd01oՖ;;`e&hTJZs9 a\;[g7j^>b0e+=8WH7aXyJBA#JD1P?6۟1 8è绥)8o1-@YA%t`J"^8;&k$T.a,|H7 (oWz'@tLiS8&E9#B.7@\'\Md~%'@Rx)F"i@s(%|}Ev9^wһ?<[pͅ=DX<޳ӯ1'XӁWγ?Gߤ'$jF[U%X⚎6UI(ռUȺ}b)8EniIm;@fҌitlvMhN_ZXm֤&Lz$|&'^["ZV:@4K a< |%&*&:2/ܮƝFm=5;p.Yp?8IG8մZq9ra(GS$`JVswhINx5DS_OF~" t&d\9QyM$]w.sKEfٿA{$iM!bm"zA Hd %o۠퉍+zt}@+nXZP`>eٕ&vU-? ރ~36f q%.z Z2 ]QΘT,'U(]>6Uc"D=J밟H4sSCx(0ʧ92ɱZGlÈ{T:&s}H-Mmա9u11euUMWoF9݊ ANϯ PQ)D"O@;Vkܚeђt8MO;Ki flͳ2v ^vǴ=P;s_gG1@P]]{q *l%}@~޻(mr)=wNg55Gh9kɅ;M (DOD.k /;@T oNeb8ĂvT+f)#Z_<61"X2t_$/:7X.\;K:Y6@>YDYkWpBs)nG4-53ٓKe, 4; 2"]=mx^ew0W4b7EGy#Kt֐*U xlj^I_Zu|c[oL^)V0#:lJ–FI"Z-!COg$jjP=<*ә}-X 꺁CǼў]8 e&ξ#&k5jG8'/>EޝS=j0SHVc7uY0c#UXѯ2@=Q/)뼕*O\v)_| Corm#BW_&OP^d9Ek8|tng9%M̝sJ}b_?hOKpBz C{T Af҆Ng2$F}V$pԲ#lW~җ!۷ yl7r&"L<P̫Wef+fڑd,a LWPJvWL)6w85=H#O%*z t[~*-2ylU)'sp8 ,NeD^{n\zF7HvQ75ąXz7-֧vQ }*T9xZ 4AǙ{V9 09CR2Cџ .a JGzq װG,ø^ʻb]"hgشJ_s2 ㊈pim߷{IԪ/yV W[0Jt6>tNٞn_Y(}5V~3 1ѝW<Е@4ՉJ(t & [xo3IZh3B+N'% I`޽:n{m2ab"Nϋqm?9"R~3%35_@*lN綏b]-: ܪsKL shAdpE3淲쿌3`6!6o5"8Fs(GW߮$oB1_IŐT+,&rHA#"JRTX2.-pwU!J7O/zJC8S@  _Sɮ|SVZb}{AZkj8VHSQ_]ѹ 5c`q9"x3&ỳF覼l ky z✭qtDp&8op f+s{]| =bW.o^u#<;B Wm߿b[tMɑgh)*ܿz RN+a_: LIXYJT璗SRded4񓿑/Ot1 =hF?RT29+o{HjV{|ٌ 7y^p"mbTyEP=wFTR+dه#Øt|HDG-.XjPGZW.z5\y/MB ȵN?9LJo 45E1 m1l0n%+=ѥ] jXeZW}؈ 7ᚤ?:lJx)]yTo(b6eqs{4SbdN !ݣc#&=,*z?F1C0T̉"- \/A5vGD4$Ʋf)dڌQbU;WbeͶhkMH.A4e}lG5@`4%'r/V*9Hbl`7sEh r3ܚM,5 kl X9$.]&N$tŠ4z/&X@P3~LFw~FN7EJDŽ"Vi,,,>>i8Ԣ*>wŲ1alBi'Nh#SIxʲLMCr_n;e8I)؇!L/x+mc@H˗?~b,o xsxrOqN &h]h Ô}#ߧrՀFgMj(_1t?@,nUO%ĝkx>EhXV;A}4f4 /xV( aB݉XvܓJO^q˙͡ {t)^UВxݦ<)oX;#\8$GBh}1II[-|WD^*LV!8Z-bWștm@IҀaJ8$cGiLt`9-{[?E,'|T U8N/H$K.ԹCv+{ro_V^wa}P2%a}*:g;_ 7"}ڔ|Mk)8"u_ƕvuT=< i!zM{hchШxC,IP7feLobzZ"4zQw&`Z<ԙ'bU4lZ/2Q(S34 mj+o_ɦ(y[/8ɨ!.@Y`DUUf/',[sd *aͲA_pG0a~$0v5ѦJ(RM4APLF#G5C" ?2M:8h,fNfޒ{^4DDK6J)}}D(P/Wݶq?\jR>΍?9 G ZN4W.zm}&cANK hP㉤o\g0א,l q1b>e;Ha8{1tg&drٸ=!R[3= rt;FTd/T 7kt!cTSqj;] xȁ/WJ  z~&iu8 Xik*.m7 [o$bA#F6T-ԒZ(kNФUR:J1LF0CYtí׹A`q)h3$?ď;Id̛j$G[%8.ap@ެO$S޷X;ߞj>6V*HBJ޵dN5ʱ$gG?L%,t`?VgIja}M09XU4+%=\7VDX*!'dQ ke/0{F8ҷs5~?Q5P'E/'ngLjJ+E })sUtd-Ȯ҃rvJ;_fZ!sO`+t[QstU{f zU613AVO< ' |mml]Q?gׁw/YL{p9}㞩 jm8Yܜ ]-3d ˃>t+40&?߫-  rbf9bMt uĀ'߽uK7:t,+Ao)yFi1ӈfΡf.~2!Њt VX(֦oSCItl nH5V#<-?OM0ELFBߺ& [\R} a.,#Ӥ"g." 0u|BڃB 1;<Nڕ7`1L`üb{f}0Xi`ѧaV7if Фf|){YƷF374r`=bRvH'N\HA˙@;ˬoisgw捝''FAH/4ۈbD7o`9(Nт˽2 YJ1DgnZ2ў]2;oB<3]Ž-stхu9΂s~f*2޳*P?]q,H|A1*T Xν 8iShmnqM(~i?ͽvL/Cqk:fm/,ʣh܄\ _;ExϹ@c%D#zQyûEFo„P~O6RoB)g`#l=6)LnfsԼȷ7*75}`AWmъrJv݄tj Z3 ~3d8* @d?t WN1'6?qB1X,j[%GKZyt|#q酫rJ¯fl+9!~.z?:~SARq%D&$\ю]jFZTATS+ZL1n+q&8BZN&c| VN9%Vzc<1BM-ĆWi4q`E k;G?D&Ր(E٢"s?Wi |j~#a~bM8G}> ϭE-b 0:өrZn^&h}~D|ʅl.Pg瑓)z>fg$.U脶lBtpT:g@y\Yh?{"$GYi9@PyW`o4JjSZ:pʘ6=jEY&eh5.9ʴʌrde2԰+򪓤2F(:Ja ?z[gG_k"y7 ml #X|r-4ҿ9ӵEzZ_w\dNyjp4:0ARF6n%.tk)FHlE :2 }Dwb#|愵.h7Q` ӮV=]7ƒ.ky4~8>+Q:#AtRDk1)|WQ|η&'=@NhKQ'$W;:3ٻos;buZ=1$=h6\H z(d48S;Ek̯Z8""Qȟgy͘?Y<@*Q^.^w\O0'GSc2"- ag6r7{&p8CqwFB6R*݃ a8Duf4/@"n"iȀ)@o@'.)iyT|939FMaUø~pabNh5wÌ)]?!\35î07d0ݵd.#tu)>y mΚ$v/dl̼Pd \Z!:Ʌp1 !]ku@&|Jc#+ ]KHeYMB٨@^8yX.gZsvW(jWR5zyYl ӄWS^4o Eh87287r0hϵ ;dU{'ΕPU#p$,UFOV)skIO+e˝zkAeu79o@q ~ "6dT=WH+:Pcm|RuH9-F.vʕc i\o~GwS;m.J /`"h%*T (v`{? \^ l:v4rnpFA {@.6DbV6`&7h~5rT.%X( [3Rr\ʽ8ONR0&bv,7'9B%[VNӁ$Bx9F\b8eyttk&sqb-)6w3T?5Vx>8D[aQУ_pNX +.$!2e +#IE (PpD8 fLn`au(VIfַ<QRֹw TXl̛^p j⧿冞ϑldή1I.s(OMO=󼀿[5wWǞ5<ꅎP;;zdYz]\1@DA)w=ʬL;Tf$[DTFx0n/G#S9/1|jI#}"kOh>-B?^bKgblhN$lFeڧ7t Mi0eT|xYnK޼;*+ӧzgΝnKUs_1a9ߗƛ^ec|uO0zl` f/v%Ag 9d 6m/^#}Sƞ"~s,#ev[:y8,QjuM/p|K60[u5P#_vb \ZZ@ۇ|Ky`>pucH-|2R*+CDDbi}9=ޟiB\*(zS#g6eN]j3#{"\`8y.rH;rt$?ۯPvf !a{X}N-$Ǩ vWs{ñ 9z"Ab$Zmjs $کuo_=Hu_@\Zx8 W(U ~CEmlpb٢n-nzVtgag 2H|td>mjZYz;j1J#g s1DN#nBm{`KB`ļYK;lCuF;*0GB>W!ڙ{Y n0ClN˼ej I&NIw.sC3P}Wi" !"G{7{_'q\}H)xIVrflp-{7ID_64>pS8UQ?bETE?p-ץI-ٔ:uVU?Ѿh[(p`l5qQi:Xʼn"7#ݽŬ=Iv> xvNA6όԍ-(bfeu8kfHHV?dvռƻ'{ ZHV`< v1/E\@; "h{21apX ֌%'U!b _{ě3R[RNbvn;։v;DlFvq?8cLj"żbЌ,qҔЈ(],ҴFfʷiZG?ɕСs!'Ud@( ̕"0M˚M;feEHUPh%=2'l `U`f\K3n&sRIOփ|֍:# #NXnJV}26[3qVW:E"0s`t7\(kn;L'KVM7@jI!v,PTQܥRcI `F1a!?WSaXT)sjNw㾖*M4.6vf;gLF D&h]k, b҅rt,f"7ٷF䇿n<jPޑ|vQʶyTzu/!k5u̾ Cr<hO9sۑ=16ãEU/o`Z(v:Z:i<' AJNSn6U+GҌ<?(kې _ծ7%u}3d]|(*=ГA&lFK5:oab#i{P,tW-;d3 yoL">b'emn/ b1f;cb L1#XT'Gݠc|MfA[,ۖp:hzY`9'G9]s tGhXnpo0J'"(Y%>iT/&Rў5? !U4 ]g HΙ lh m7ȅAFI\E cSYaT1k#Re<|-9g<U'o 42і/w0~T&qUzBS0!MD(sCh`deZLEsm^LGw} ߁#RcuG*R6 ^p h}r9Q]e@#! l [>VPD sl\[n@@Ʒ0VdiU;qV ON 76~, MK>Jb8o{O}LrX*Ѿju͚>UؤJ}%3Hhm=F=lz%+~j34p&#hSw%wwV3+=9F0A#f5k};hI+c| ֏zz!(jpC5Bx-A,Vo7f@S9ԇWR† BO5QIq4mCħ|(rbH%o*}5'_.Wq ]=ɺOrI13~zv~// /0:7?h>lʖ9"1y|B MX]dQKG:>J sm)*gxoz+cQ~(o~"ÌQ]YZ [W-$GuA뛶#9]{>:d]pS BOh=ȪEMb8,{M`ˋj>vlr6||SHE3ف9e擅F$,7c)?!a6u]VOMt[{Zj7R=档Īμ6A^-<&A5 jCF6a#@NJ> Nwr;N< aHzAw{cŰD{<@Fc}ʹ4}`e?^1WnycA5P|WTċo4L2SLoK׮/kyA0H ۴_bF05E\|s9DV̂ޔ\ʹI|G81;ۙ?,K0Շ'5˱UQw\.K7qB5eC<`E}zܤVIw,Gcx> fi'6 *"tWXBKc=ޥŚR5A+$DB]DWv⡛8ntq]ye=?jĢF1@rLtHVتrJH]>-r襫"Cٽ[G ow$8-RꦱBĮ^уOɎg37f! mT>o_Nӱ]Ormq2*3ZYB=pG +nP@xeW6D[E'<,-Onl~smB.%WDPV IY;9EuRSKY>Uhv  Xѿu.7PB*xw3(Ez q֔VlA@ظ5EL̴*C692mFwh^9Bv>/Dla¿rퟘe-Ě2m6 #ɉlu价Piσc ]ay"NmX5S 뙨daI;AX<ܽLN ^)Y'C.!E2RK<!cn MhB+?Y*Wv[P# !Ne }}vըB+E*E2t8ɏ2/'ԯ4uZ|FUessG;{U5;P^O?6Va8/NpPR>3Cg=zAKaY\\QW_6XLpI.ȶ/#2`?h=!b<Q1Cb2)kH@=ÙlG)_-nzǶ1a`QQĠ zLR'ՄuDӮF5E+Z(l#I xq~}Nt61R(v("JxM!LC(y6y]}I{_}+kcEqKPƙYYs4-1'Á92m?Nai|` DEm3D<i^,2} a.9H!(Xk&Hs@P%z8n#4FW0yW)M%s,φW&=!$LAE 2ۂe-8 %aQrTCZē&NtLur?dHe;vrWT6KJ#_)dAs *%QuS UeUW#+ע$ 2!Z#%@g %$MH[e$n4Ivӟq2t\.Iؘbzv0vy 6JW*42n 񐤫;"OND5ziX%= ^atxh~X)?Hp )<%vTI@<5u ]J d)E:fiFG{c6k^<]`eh:-.`w,WVIq2pM,7=XUEclͳ2E_wCmcVc_FS,!lGpg$H/ED}dۇ[H+~MC Ehh @[q]̳lZL ~:Q^A\BFd`7j %:BU v=Q,כ~<3*fdu'%Î>N|2aP(hsh1$?׋4@QS<~}'2YvejР;xz`aש}/-OgmoP2x쐒3ߊ^G!@UᆜW;q׿`k,1 {G.aAb*Uck1i%:mʚԂG #~N]yxN4 8J܋}X cٲ 7V-tACHk_T7g <#cedCLVܡlNtJ:Fv ~MW<|N,Xr!!IOoM!!OgjhSde_`%PGd{NX:F+܋'ǘsQDXn]s"Ls~@` fOzh5`yf 6WAI`S ź:m* {t1U 1$Vl `X4qnp $'{dcJ_x)7r^+!sͥ%jcwX$Nˣ9Ҕ[,(zZwoTa7^1_g 0Jk-T5Zf<9t ):Ex9r\Ku/Y@u!ٲ Gb8R;le)iQOy?;kTE5>UdxRp#uȀ3]@cƸD%l7^e~Q< ;:=LTmpZwg4t]I/K zhPUQxd<.u䒴Q >ȳRo;Pz'$+MdBm$,MSMğ9=hP!4L] g)>MEӼT E.nf |wx#ߒz{W\Ȋ*c{XUuGU⽆/sEm^yQS.2&|v2c#x` MIPcJ@« 0*l0pO}P:3 s{_L2~q{UP`apY]lnk"k茋0iz U-0GgE1aJ)uHN~^y*^.1njE#c0"\dd{円*Lr#N֌G4 N)8%~jAA-bKTTЯ#Sdg~g4cD- ^7&! lD j|!0"K(W .ؘOv,&ҥ[|S怌nv<*lK9ªXv١NN ZuB#0jK &\"[4Gu9ݲ #(Ev~cCiYWfTuT* SCn~dhfCETvԏ&Q8#?-5G|&#v)3ȒHt"'*pf1{ һC?0? ~!vR2m ~]Z9{ q#5x% Kji%-Oz}}14/ZᎆcdWV-bwEA,m3G jB1cqkDJ43oU_KP%eXpʠ]aN\s pYb Dx ԑaH_W0opNfxKSR iD#N #L701T .q~S+J䂟 K4ħ@njlSA%ƘBp3mFj73b0(4.ʛ׃jpoG)Q{Ѻw)g yۭNĚ]NF\H57lo_5V̹ټfmASrP䤵R^}w ?~9pɺaH" )ץZ'c8 T lCϔT F?֣ڥrוl. ]80I+kqk^V_6Zy xOBmF5YՑJ ĩe Kéۘd۾Cg x c;I;*cIW w|ťB*h{ `x |24ݑsך){A2dr dF3dOpqR&D\'YAA'8^tI`U߷t5ye-F>wTJ-L6%VqB"3>D~Ս3e釯 kHMPPV0-+}Ny $~4m-k&|o*2?'1{ء(ՕRY?<198tڿ; BpZh$ˀ3:5I zGC$FE սURDr5~RLf$(<)_ڶW"@ya7hZɾeKB_GWrL A;IuL)Q]Hvf+&Du2<ŬV@|\*FtDtiYfdU -:2|uW;{_KK؋]ћc3r ػ#*1JM9ig/ѧ7[ Uc'2!KŲٺი"oLZHW_J yodE?>;Csv΢9V?obT}3?MI]]zؘ(gO>fP%Q'hJk&j<v@*=&WWU8BxOz->c2?̭9[mjL-{"(P []ӑ`tjR[ē}߼߂ԁKKchndO$ж+_>nO7sLȉ.[S;Z{sc&&Z4.|5*ZGV>rWb9E9HNĐY݇E0R9]6>tgG453prkS}ejd.P}O_O !./Dh- =Xki0 g5P܂*_َc(*K2xlqqCXaK} 7DCӹC|i7l/s8>~@IĠ(ϲ~l0P/2L? "Ė[+b0VyFHeͻbW3XA 5+/_K1,aӈFX{8TYC kJ2=-[l4;BbFNyw¯2^у>} ]p :nev&ܟIJ`U8_> uд>}2d_fX|KEVLj틜>hFֽ0N8Gӧ˜#>vEߺhT?:a]7:H`MFӚB>8=Ks9TXapyj gW0V&@ˈCP31;h |°u 3=:>/jԁ7<9T.f@ T;Bv˵8u΍Bzȵ c;#um@ H8sg%G3࡬Z\:ɩHS !O(Zz4a^[YaZ}[JΚ0$(곊פȸZ=-Nhe|D\۔̌ܮe0H Xں;\<GnT@ZEWeyi%Ze, -IA=:ui7M;Ȧ Sq 07 dS\gC%,ۢ$:~GBσL4?mG~f$I 4d tM=&2VS6ghf,ŌȒ@UԻ~CT8I 5iaaE5#|8 b=twZ c`ؾ"F^{ӑ8+o Vֹ_~vr XS1{d܎:R…j#R$WmFEETe `-STna0i'1?JџVrW-w.NCLeit嵞A 7#q<:/وt??aE`R%/}vDGLx@OϮ NЉ>ȶDAMғ2U%=xkDwۼ+'R';19 A8bm`فM(Ocuk6Ip?Б̠E>/Ufpӹp[ÆqSpMN zF,Vi."Ӟ}q n3CD) cpT  dvJŝhͬ} 5`eOTӳ}wUCzw2_(6!vj*8Ga!Ï#yV^)O;^" Z15.q[20ӑc`z5u*LR!Q˞Yjځ†waYb~ $ds:~ƱG4?W金Eu9[uzbX=eS^v)7¬e7wZp`<̾ǃw? 3AL]^ɥF ٧Ж""nU&-CaN(Ed6wCA7[̻?-q5f!:s,.Gu~ B/I62LL) tgVD, noG8;roIerw"b9 N EoVԆ.nq ~1lG߷PV~l2 HW2iݩc_EKT+`D eŇYf~'K1sEzQs=T}BPoMAV[B72d+;p?+]wPLH_KCPߠ|q,S235mpv.MGU%ɣ٦@YrVFezEx-bC2jHRRw\S&hG:'nb`$u5$*܄na$cOϓLwŜhT+e,ϳnj?ڱ91-QbsWc?q;m5a픍wy?":@G Ƌeh?} S+}.H^32OpR_1D@2yp̾Xc'$G+}+>}B=NFu<~}9pB..pkJR"ť VheZ==HҰg]-Ok<4j3,5mHtdm~*9}|$kϬe{`LN¿"[qŐDoFuI9gg0̨+j4kDor9ɫuqPI]7n,!S75Y%z l]OeԧAJŴInx=1!+Vjg+  F~ie$d#gFRS,=]ϒ :D z@t?|Y_}qd0HN@[ teBq|(& P`^^"Uj&\V`WVIJLJTQivHs8˓)hS+~#.X`6g2 gߖ$F8" Xm=u* |S7(:By#ك8D{L:yfSš`LsQbqp+.^9^K]&u*tmE2 ox*QȨChc. W?qiAv;Uq}J H\Hka6jaY4D y+b'sSiDžc f{ך`:ZC3(=Ɂܨ4/R Ђ1_h^L"WȄ JaDEe*:|FI2;jVrv.ߡqTyF?\֯,1Ѕ]6OrVa8]En^ RCxd׽xH条M;j~TC6+T\VZUph*YtAHwA[SXhEse"@_XJoK>ђP7־ 9u#?iۃ${PG\ϊ+.3#p&^LβW/=a ,'hM,f#%=SkP CF_룿3F,;b U-79>a"B }Ya˔šW=[<P ^F!کqgx`-o!%È#b0 _L䄛:d7xNvzS'O<*a3nshgRceHeH ד_ԭj.U8kG|F%rXܫ3>7D&aWE,%oK'WLX)p' ͣ#}"*qC#OS_h!))=ۻ7ѳDzFbr> S$F d`U`c\l JٵtJ5`D}>fCxf{Jk.YwB n8*ȋP54X&;r cWvw VJj}( `k+FʨP~r $JȄqy@\JIڸVTt.-$-x5 8KO2.WL"ҸG3?ϣ f5]M|A}N-+[KUbjèf&ŦFBA]zsjV`!F܆6KFؕx?Fb&0)QCcMhOYcĦASU^tv3|rJ^%U"3 y|vVg&D%!,K%bn5%9E-t xF\ d V?$ 6N?lp b͌z,Pp{#@q>gslʳzQnnkߺFR|fBbX{٪ ?*T d;]g4˅2DвfjMpxk1/ϫ|EHxQ.,}'O6=r7(8JUXFFYTiz6Pax?KUuSi!r d_Q&fu!>!rFHCDY$A YT;J{5Eցc.< Cg/̼kƒC͝a[l@xR |L'l%&L65?~$F=9MИ?#X-$Ǭ~gF^\<8:-F # xG nyEm}peY`co(h0J\DvɲIl`Ȇf~Wn!_~ ٠ښgI ={o8j}\61 ?cf6n"U$AjOsH(G+Pl@_ۧ"Fjb_2iB1,Kv[{,ڂz}߸pW_Pz"KnXc-f44zߝaVCN[ܲ"9iUlZ_:H[o &HGT#;) ڝ>=fLiiDXù\*=slڥ!﷖!D|8{)P` SGE"۶FBAaֱ]#tiNW%g(*焍v[j¦Nz4H> !`GI֯8rgJMMm'_tV6qA-?ɏh0!X3\&wm?&_$e"6arS^$`uʜ͚Fm{0td+y6T[TmHXUzp7V5rlqJaݸh~F  l'w"dX>,6y-DaꞲ~z-nѪ20C*k>q>joHh+5bjj-W!,o>Ea7ۀf37vBBH/;gjr5YmQ, H=nQ2QbO>( rsGBm_acIj=xȫ L&]lx` tٶ8R|ygpUuj?eav  SMGxFXe9c}h́ø)>i4@Pe O-.prW@6'\xM|XWwH_^Cӄ)͸=&n%\y_rXc00ډ쾮aYW۫NR'9:)'X#`k餈B%i]\tɋ9ijcs:88D؍a$DZ$t+QEI]8a5SYľjmZ˻ˀq>#'13Z?au"Q)59 ZN8}+)]\IVZ۰*>@V Dn< G/6]L? wUq%ȒNG7"NDH1?l*ٗ>$;-# D+@q GSU#]9)ERWj7x|DZ~33j7Uv4YtM-G2\\I׫[@8*x4{UaKx]jADl|¤FQ|ʗKԹIQՕƴsz7e_GO~fqvDZU3@af:X;{Q%E6,N!)ϕLI0X\C*P(vOXQRPh:vub{ !؋2! faHZ&OD7YUk~wT9:5bZ$I@FwzQKg ܄\}6"B\O|~)*H׷7xJxgc͇dQFQ_ on>g+?u+25< >#$x С,]:$>E-(tfJ ioGl G;5 7C-@,63DEkX|tK pxO9T_ujgPp2sYo[`I Ԯ&",M]*6vݶ28 5zq8eM6 m1Y9;@ⴙ6qQo#{Ly6* eKZRL8'-y"Uw6z%!kaWNhV%-U=]i݃ƚia@7V>}P[`H{Nh.@V+72j,ʻӲ]oYյ'PZaXbDUY-R&,orm&ϡeGLd0H*x>^u@F~(ffV"4t[ @IC Lr}o/Y/Ȓ3\KELjnFfuofhS oZ3Qi ?m`2Gz)z$D#*r?EJȺ 3 9CivH`Q]d'HҰ5j=4K_qWuj}@&z]ɃB<(o9WEh2 m>hd}&MxoȝsyeCV, JzRh" K>n6tGCx.-cEcCDmަ4|AȵkÔi^n%*׌Fbe=MĉXF])8H0-5C>pܐqz?x4H raO%]WibGlzx Οk~T`oWx+#3wmt`lL9 .yR ㊵-^ ď cQs&>ΪP!v̦i{XD2ۊ`f6Hr ]O'6ӄi ?ш%_tc؆%.},8RQdGTs[/;1-l@"6@C~?02T)O'N 8!p#bج6&[Unzήj~h#2zx"Zp4z7|y))Пk,ߢjS dTxX)a YfM:t ZCL r.r::թK.žIMFaށF\BW6bkdOmx*ʀ&0v,E r B3<yrd'Ci~OMcQ "8uCW ~-Su<}w?WH[_1`*DG ?`upC;Rhj9W D݋Zsr mݖp R ܡR6g?P/!ht=m ,8o3#0Ea>и̒I񤷜rkeg/Nq‘>lQĢj3yv< BCU:9hZ0.c৞ <^_0'bN ?+ {_ʲS3~tj?Qo#nߙ۴R{-k$߇Sn2) ;I!I3HVӶ YZ