libsemanage-python-2.5-14.el7>t  DH`p[-$ƨ OQD} +0 oHs*D=b3+D '-XҮ`CA-CZ근JlGK2ΓFHIULaLj Зm$^|fِVLGXrY,6x{vfFI:y _'Ɠ/QC XAmrP؉-rFx4L-GunRdo"/9GLUGپ' /܄HĒo88 [4 9 ٴȝy^%Ȟ~\j4$xU{:ܒs̜' Dn4lHsU ԉ}7\Vgg2AGhmY'&1'rMSImJiL)נPmjgOTV(hr;V%!(Ӯ.WŬ-p(PJE}y1)l~+ʩۍ-)3. $xϭBB038e9753ae531a08c85f8ef095a8383bca932b2e[-$ƨ UHkMӈqDoI0ܬpq!X)^~/ d7`!zF Dgqwʍ54WOt"a`M95t&*Ӫp5)9Jk?Ue ol[[TU܋|.o_*)7X f#TBy'zf-U*'\ Ѥ-] n|lPD}e' +;|GFtFފ<"|$kBG)Q;DKHPm($77Ӟ,|fM TH%> f8Xvh:AE:pup|E1͗Zb6g 8\w@BX~U8;g H@<V}0Z8HףE[~`d€RD}KUdۊ5ts3um&AObc3E/ʨ/;a;mp{ F^hzpD} `dTxAW.>8t?dd  I )X^h|     6Xl(89 x:/kGhH|IXY\]^bPdeflt u v4wxy(`Clibsemanage-python2.514.el7semanage python bindings for libsemanageThe libsemanage-python package contains the python bindings for developing SELinux management applications.[x86-01.bsys.centos.orgCentOSLGPLv2+CentOS BuildSystem Development/Librarieshttps://github.com/SELinuxProject/selinux/wikilinuxx86_64ݠgnnt큤[[[[[437809961d04534cfc0ca5e7ad4d634af1c7a66e9e8d73e2b89b4842dcd0ae62dee855338c1037d2610c4b4a2d339e1ee8193a2a34eb2425b41c39e6703679c96b758970b33df77468034dbd3124b83dd0a6bf6d1da39ee7836db5cdc6b961db6b758970b33df77468034dbd3124b83dd0a6bf6d1da39ee7836db5cdc6b961db12401b0460ad6d304038986dbf1017f7fb5e2b0d4bc29345f7aff4a100ad7d07rootrootrootrootrootrootrootrootrootrootlibsemanage-2.5-14.el7.src.rpmlibsemanage-pythonlibsemanage-python(x86-64)@@@@@@@@@@    @ /usr/bin/pythonlibc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libsemanagelibsemanage.so.1()(64bit)libsemanage.so.1(LIBSEMANAGE_1.0)(64bit)libsemanage.so.1(LIBSEMANAGE_1.1)(64bit)python(abi)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PartialHardlinkSets)rpmlib(PayloadFilesHavePrefix)rtld(GNU_HASH)rpmlib(PayloadIsXz)2.5-14.el72.73.0.4-14.6.0-14.0.4-14.0-15.2-14.11.3[@[Xf@Z@ZH@Z@YB@Y @X@XX2W/@Wq@V@VIUU@RURkR^RNRB@R@-@R:@R-@R)QdQ@QzQu&@QfQQ@P@PP@PQP@P@PP O@O0@Oĺ@OtNO;@OO@N@N@N@N@NNNw.Nw.Np@N\NLN1O@Md@MM)MQ0@Mt@MLuLF@KKsKKKf@K{@Ka|@KTM@K(K@KJJ@J@J$JJJ#J#Jyt@JjJW-@JS8J,@I@II2Io%@Ik0Ik0I7@I7@I1.HN@HN@HN@HǶH*H@H@HW@H=I@GOGOGOG@G[@G G@GGGW@GSGNG5@G0W@G'@FFFFIFIF&@FvFɂ@FFF` @F9F/BF/BE@E@EEɿ@EEEx@El$E4D@D@D@DC@DDD@D@D{DDX@D@D@Dhm@Dhm@Dhm@D_2D?D*vD*vDDCCi@CtC@C@CCC@CC @Cǖ@Cǖ@Cǖ@Cǖ@C@C[C[C @C @C,C @C @CCf@CqCC}@C+CBCYCYC{@Cx|@CtCtCqCp@Cp@CoACiCf@CbC`@C_oC^@C\CX@CWCTCTCTCP@COCLCJWCFc@CBnCA@C:C3@C1K@C/C(C@C Vit Mojzis - 2.5-14Vit Mojzis - 2.5-13Vit Mojzis - 2.5-12Vit Mojzis - 2.5-11Petr Lautrbach - 2.5-10Vit Mojzis - 2.5-9Petr Lautrbach - 2.5-8Petr Lautrbach - 2.5-7.1Petr Lautrbach - 2.5-6.1Petr Lautrbach - 2.5-5.1Petr Lautrbach 2.5-4Petr Lautrbach - 2.5-3Petr Lautrbach - 2.5-2.1Petr Lautrbach 2.5-1Petr Lautrbach 2.1.10-18Petr Lautrbach 2.1.10-17Daniel Mach - 2.1.10-16Daniel Mach - 2.1.10-15Dan Walsh - 2.1.10-14Dan Walsh - 2.1.10-13Dan Walsh - 2.1.10-12Dan Walsh - 2.1.10-11Dan Walsh - 2.1.10-10Dan Walsh - 2.1.10-9Dan Walsh - 2.1.10-8Dan Walsh - 2.1.10-7Dan Walsh - 2.1.10-6Dan Walsh - 2.1.10-5Dan Walsh - 2.1.10-4Dan Walsh - 2.1.10-3Dan Walsh - 2.1.10-2Dan Walsh - 2.1.10-1Dan Walsh 2.1.9-4Dan Walsh 2.1.9-3Dan Walsh - 2.1.9-2Dan Walsh - 2.1.9-1David Malcolm - 2.1.8-6David Malcolm - 2.1.8-5Fedora Release Engineering - 2.1.8-4Dan Walsh - 2.1.8-3Dan Walsh - 2.1.8-2Dan Walsh - 2.1.8-1Dan Walsh - 2.1.7-2Dan Walsh - 2.1.7-1Dan Walsh - 2.1.6-3Fedora Release Engineering - 2.1.6-2Dan Walsh - 2.1.6-2Dan Walsh - 2.1.6-1Dan Walsh - 2.1.5-4Dan Walsh - 2.1.5-3Dan Walsh - 2.1.5-2Dan Walsh - 2.1.5-1Dan Walsh - 2.1.4-2Dan Walsh - 2.1.4-2Dan Walsh - 2.1.4-1Dan Walsh - 2.1.3-2Dan Walsh - 2.1.3-1Dan Walsh - 2.1.2-1Dan Walsh - 2.1.0-1Dan Walsh - 2.0.46-6Dan Walsh - 2.0.46-5Dan Walsh - 2.0.46-4Fedora Release Engineering - 2.0.46-3David Malcolm - 2.0.46-2Dan Walsh - 2.0.46-1Thomas Spura - 2.0.45-6David Malcolm - 2.0.45-5David Malcolm - 2.0.45-4Dan Walsh - 2.0.45-3Dan Walsh - 2.0.45-2Dan Walsh - 2.0.45-1Dan Walsh - 2.0.44-2Dan Walsh - 2.0.44-1Dan Walsh - 2.0.43-4Dan Walsh - 2.0.43-3Dan Walsh - 2.0.43-2Dan Walsh - 2.0.43-1Dan Walsh - 2.0.42-1Dan Walsh - 2.0.41-1Dan Walsh - 2.0.39-1Dan Walsh - 2.0.38-2Dan Walsh - 2.0.38-1Dan Walsh - 2.0.37-1Dan Walsh - 2.0.36-2Dan Walsh - 2.0.36-1Dan Walsh - 2.0.35-2Dan Walsh - 2.0.35-1Fedora Release Engineering - 2.0.33-3Dan Walsh - 2.0.33-2Dan Walsh - 2.0.33-1Dan Walsh - 2.0.32-1Dan Walsh - 2.0.31-5Dan Walsh - 2.0.31-4Fedora Release Engineering - 2.0.31-3Dan Walsh - 2.0.31-2Dan Walsh - 2.0.31-1Dan Walsh - 2.0.30-3Ignacio Vazquez-Abrams - 2.0.30-2Dan Walsh - 2.0.30-1Ignacio Vazquez-Abrams - 2.0.29-2Dan Walsh - 2.0.28-1Dan Walsh - 2.0.28-2Dan Walsh - 2.0.28-1Dan Walsh - 2.0.27-3Dan Walsh - 2.0.27-2Dan Walsh - 2.0.27-1Dan Walsh - 2.0.26-1Dan Walsh - 2.0.25-3Tom "spot" Callaway - 2.0.25-2Dan Walsh - 2.0.25-1Dan Walsh - 2.0.24-1Dan Walsh - 2.0.23-1Dan Walsh - 2.0.22-1Dan Walsh - 2.0.20-1Dan Walsh - 2.0.19-1Dan Walsh - 2.0.18-1Dan Walsh - 2.0.16-1Dan Walsh - 2.0.15-2Dan Walsh - 2.0.15-1Dan Walsh - 2.0.14-5Dan Walsh - 2.0.14-3Dan Walsh - 2.0.14-2Dan Walsh - 2.0.14-1Dan Walsh - 2.0.12-1Dan Walsh - 2.0.11-1Dan Walsh - 2.0.10-2Dan Walsh - 2.0.10-1Dan Walsh - 2.0.9-1Dan Walsh - 2.0.6-2Dan Walsh - 2.0.6-1Dan Walsh - 2.0.5-1Dan Walsh - 2.0.4-1Dan Walsh - 2.0.3-5Dan Walsh - 2.0.3-4Dan Walsh - 2.0.3-3Dan Walsh - 2.0.3-2Dan Walsh - 2.0.3-1Dan Walsh - 2.0.2-1Dan Walsh - 2.0.1-2Dan Walsh - 2.0.1-1Dan Walsh - 2.0.0-1Dan Walsh - 1.10.1-1Dan Walsh - 1.9.2-1Dan Walsh - 1.9.1-3Jeremy Katz - 1.9.1-2Dan Walsh - 1.9.1-1Dan Walsh - 1.8-1Dan Walsh - 1.6.17-1Dan Walsh - 1.6.16-3Dan Walsh - 1.6.16-2Dan Walsh - 1.6.16-1Dan Walsh - 1.6.15-1Dan Walsh - 1.6.13-3Dan Walsh - 1.6.13-2Dan Walsh - 1.6.13-1Dan Walsh - 1.6.12-2Dan Walsh - 1.6.12-1Dan Walsh - 1.6.11-1Dan Walsh - 1.6.9-1Dan Walsh - 1.6.8-2Dan Walsh - 1.6.8-1Dan Walsh - 1.6.7-3Dan Walsh - 1.6.7-2Dan Walsh - 1.6.7-1Dan Walsh - 1.6.6-1Dan Walsh - 1.6.3-1Dan Walsh - 1.6.2-2Dan Walsh - 1.6.2-1Dan Walsh - 1.6-1Dan Walsh - 1.5.28-1Dan Walsh - 1.5.26-1Dan Walsh - 1.5.23-1Jesse Keating - 1.5.21-2.1Dan Walsh - 1.5.21-2Dan Walsh - 1.5.21-1Jesse Keating - 1.5.20-1.1Dan Walsh 1.5.20-1Dan Walsh 1.5.19-1Dan Walsh 1.5.18-1Dan Walsh 1.5.16-1Dan Walsh 1.5.15-1Dan Walsh 1.5.14-2Dan Walsh 1.5.14-1Dan Walsh 1.5.9-1Dan Walsh 1.5.8-1Dan Walsh 1.5.6-1Dan Walsh 1.5.4-2Dan Walsh 1.5.4-1Dan Walsh 1.5.3-3Dan Walsh 1.5.3-2Dan Walsh 1.5.3-1Dan Walsh 1.5.1-2Dan Walsh 1.5.1-1Jesse Keating Dan Walsh 1.4-1Dan Walsh 1.3.64-1Dan Walsh 1.3.63-1Dan Walsh 1.3.61-1Dan Walsh 1.3.59-1Dan Walsh 1.3.56-2Dan Walsh 1.3.56-1Dan Walsh 1.3.53-3Dan Walsh 1.3.53-2Dan Walsh 1.3.53-1Dan Walsh 1.3.52-1Dan Walsh 1.3.51-1Dan Walsh 1.3.48-1Dan Walsh 1.3.43-1Dan Walsh 1.3.41-1Dan Walsh 1.3.39-1Dan Walsh 1.3.38-1Dan Walsh 1.3.36-1Dan Walsh 1.3.35-1Dan Walsh 1.3.34-1Dan Walsh 1.3.32-1Dan Walsh 1.3.30-1Dan Walsh 1.3.28-1Dan Walsh 1.3.24-1Dan Walsh 1.3.20-1Dan Walsh 1.3.20-1Dan Walsh 1.3.18-1Dan Walsh 1.3.14-1Dan Walsh 1.3.11-1Dan Walsh 1.3.10-1Dan Walsh 1.3.9-1Dan Walsh 1.3.8-1Dan Walsh 1.3.7-1Dan Walsh 1.3.5-1Dan Walsh 1.3.4-1Dan Walsh 1.3.3-1Dan Walsh 1.3.2-1Dan Walsh 1.3.1-1Dan Walsh 1.1.6-1Dan Walsh 1.1.3-1- Include user name in ROLE_REMOVE audit events (#1622045) - Improve "reset umask before creating directories"- Reset umask before creating directories (#1186422) - Enable listing modules by name (#1566729)- Do not change file mode of seusers and users_extra (#1512639) - Improve warning for installing disabled module (#1337199)- Add dependencies on libselinux and libsemanage (#1548020)- Use umask(0077) for fopen() write operations (#1512639, #1512014)- Update semanage to allow runtime labeling of Infiniband Pkeys (#1466274) - Update semanage to allow runtime labeling of ibendports (#1466274) - Keep copy of file_contexts.homedirs in policy store (#1409813) - Add support for listing fcontext.homedirs file (#1409813)- Save linked policy, skip re-link when possible - Replace access(,F_OK) checks to make setuid programs work (#1186431)- genhomedircon - improve handling large groups (#1379685)- Remove access() check to make setuid programs work (#1186431)- Re-add get/set_version functions needed for semodule -l (#1392573)- genhomedircon: add support for Development/Debug syntax - genhomedircon: generate contexts for logins mapped to the default user - Validate and compile file contexts before installing - Swap tcp and udp protocol numbers- Sort object files for deterministic linking order - Support overriding Makefile RANLIB - Respect CC and PKG_CONFIG environment variable - Fix multiple spelling errors - genhomedircon: %{USERID} and %{USERNAME} support and code cleanups- Set the default store to /etc/selinux- Update to upstream release 2016-02-23- Add semanage.conf(5) man page Resolves: rhbz#915651- Skip policy module re-link when only setting booleans. Resolves: rhbz#1098446- Mass rebuild 2014-01-24- Mass rebuild 2013-12-27- Cleanup handling of missing mls_range to fix problems with useradd -Z - Fix auditing of login record changes, roles were not working correctly. Resolves: #1018840- Fix errors found by coverity Resolves: #952237- Do not fail on missing SELinux User Record when adding login record- Add msg to audit records- Do not write error message to screen when looking for previous record for auditing. - Add mls_range from user record if the MLS range is not specified by the seuser add record. - Error out if seuser or mls range is not specified when adding user records- Create symlink from policy.kern to active kernel.- Unlink policy.kern when done to save space.- Move handling of role audit records into the library - Patch stops semanage from removing user record while in use- Remove dependance on selinux-policy, /etc/selinux should be owned by libsemanage, and selinux-policy can require it.- Allways build python3 version-- Fix test suite to build- Revert some changes which are causing the wrong policy version file to be created- Update to upstream * Add sefcontext_compile to compile regex everytime policy is rebuilt * Cleanup/fix enable/disable/remove module. * redo genhomedircon minuid * fixes from coverity * semanage_store: do not leak memory in semanage_exec_prog * genhomedircon: remove useless conditional in get_home_dirs * genhomedircon: double free in get_home_dirs * fcontext_record: do not leak on error in semanage_fcontext_key_create * genhomedircon: do not leak on failure in write_gen_home_dir_context * semanage_store: do not leak fd * genhomedircon: do not leak shells list * semanage_store: do not leak on strdup failure * semanage_store: rewrite for readability- Add selinux-policy as a requires to get /etc/selinux owned- Update to latest patches from eparis/Upstream - libsemanage: fixes from coverity - libsemange: redo genhomedircon minuid- Fix handling of missing semanage permissive -d foo, not failing correctly - Previous to this fix the first module beginning with foo would get deleted.- Update to upstream * libsemanage: do not set soname needlessly * libsemanage: remove PYTHONLIBDIR and ruby equivalent * do boolean name substitution * Fix segfault for building standard policies.- rebuild for https://fedoraproject.org/wiki/Features/Python_3.3- remove rhel logic from with_python3 conditional- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- Attempt to allocate memory for selinux_binary_policy_path and free memory - allocated by asprintf.- Fix asprintf within an asprintf call- Update to upstream * remove build warning when build swig c files * additional makefile support for rubywrap * ignore 80 column limit for readability * semanage_store: fix snprintf length argument by using asprintf * Use default semanage.conf as a fallback * use after free in python bindings- Apply patch from Sven Vermeulen to fix problem with python3 bindings.- Update to upstream * Alternate path for semanage.conf * do not link against libpython, this is considered bad in Debian * Allow to build for several ruby version * fallback-user-level- Check in correct patch.- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild- Add patch form Xin Ouyang to make library use private semanage.conf-Update to upstream * add ignoredirs config for genhomedircon * Fallback_user_level can be NULL if you are not using MLS- Rebuild with latest libsepol- Rebuild with latest libsepol- Add support for ignoredirs param in /etc/selinux/semanage.conf- Upgrade to upstream * regenerate .pc on VERSION change * maintain mode even if umask is tighter * semanage.conf man page * create man5dir if not exist- Fix handling of umask, so files get created with the correct label.- Add Guido Trentalancia semanage.conf man page-Update to upstream * Create a new preserve_tunables flag * tree: default make target to all not * fix semanage_store_access_check calling arguments- Add support for preserving tunables-Update to upstream * python wrapper makefile changes-Update to upstream 2.1.2 2011-08-17 * print error debug info for buggy fc * introduce semanage_set_root and friends * throw exceptions in python rather than return * python3 support. * patch for MCS/MLS in user files 2.1.1 2011-08-01 * Remove generated files, expand .gitignore * Use -Werror and change a few prototypes to support it- Update to upstream * Release, minor version bump- More fixes for disabled modules- Change libsemanage mechanism for handling disabled modules. Now it will only create a flag for a module indicating the module is disabled. MODULE.pp.disabled, it will no longer rename the module. This way we can ship active modules in rpm.- Add semanage_set_selinux_path, to allow semodule to work on alternate selinux pools- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- big reworking of the support-multiple-python-builds patch to deal with PEP 3149: the latest Python 3.2 onwards uses include paths and library names that don't fit prior naming patterns, and so we must query python3-config for this information. To complicate things further, python 2's python-config doesn't understand all of the options needed ("--extension-suffix"). I've thus added new Makefile variables as needed, to be supplied by the specfile by invoking the appropriate config tool (or by hardcoding the old value for "--extension-suffix" i.e. ".so") - rework python3 manifest for PEP 3149, and rebuild for newer python3- Update to upstream * Fix compliation under GCC 4.6 by Justin Mattock- rebuild with python3.2 http://lists.fedoraproject.org/pipermail/devel/2010-August/141368.html- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild- add python3 subpackage- Fix -devel package to point at the correct shared library- Move shared library to /usr/lib- Update to upstream * Add enable/disable patch support from Dan Walsh. * Add usepasswd flag to semanage.conf to disable genhomedircon using passwd from Dan Walsh. * regenerate swig wrappers- Allow disable of usepasswd- Update to upstream * Replace usage of fmemopen() with sepol_policy_file_set_mem() since glibc < 2.9 does not support binary mode ('b') for fmemopen'd streams.- Cleanup spec file- Splect libsemanage.a into a static subpackage to keep fedora packaging guidelines happy- Rebuild all c programs with -fPIC- Update to upstream * Move libsemanage.so to /usr/lib * Add NAME lines to man pages from Manoj Srivastava- Update to upstream * Move load_policy from /usr/sbin to /sbin from Dan Walsh.- Update to upstream * Add pkgconfig file from Eamon Walsh. * Add semanage_set_check_contexts() function to disable calling setfiles- Update to upstream * make swigify- Dont relabel /root with genhomedircon- Update to upstream * Change semodule upgrade behavior to install even if the module is not present from Dan Walsh. * Make genhomedircon trim excess '/' from homedirs from Dan Walsh.- Update to upstream * Fix persistent dontaudit support to rebuild policy if the dontaudit state is changed from Chad Sellers. - Move load_policy to /sbin- Add enable/disable modules- Update to upstream * Changed bzip-blocksize=0 handling to support existing compressed modules in the store.- Make sure /root is not used in genhomedircon- Revert hard linking of files between tmp/active/previous. - Enable configuration of bzip behavior from Stephen Smalley. - bzip-blocksize=0 to disable compression and decompression support. - bzip-blocksize=1..9 to set the blocksize for compression. - bzip-small=true to reduce memory usage for decompression.- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- Put check for /root back into genhomedircon- Update to upstream- Update to upstream * Ruby bindings from David Quigley.- Return error on invalid file- Fix typo- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild- Fix link to only link on sandbox- Update to upstream * Policy module compression (bzip) support from Dan Walsh. * Hard link files between tmp/active/previous from Dan Walsh.- Fix up patch to get it upstreamed- Rebuild for Python 2.6- Add semanage_mls_enabled() interface from Stephen Smalley.- Rebuild for Python 2.6- Update to upstream * Add USER to lines to homedir_template context file from Chris PeBenito.- Add compression support- Update to upstream * allow fcontext and seuser changes without rebuilding the policy from Dan Walsh- Additional fixes for Don't rebuild on fcontext or seuser modifications- Don't rebuild on fcontext or seuser modifications- Update to upstream * Modify genhomedircon to skip groupname entries. Ultimately we need to expand them to the list of users to support per-role homedir labeling when using the groupname syntax.- Update to upstream * Fix bug in genhomedircon fcontext matches logic from Dan Walsh. Strip any trailing slash before appending /*$.- Another fix for genhomedircon- fix license tag- Update to upstream * Do not call genhomedircon if the policy was not rebuilt from Stephen Smalley. Fixes semanage boolean -D seg fault (bug 441379).- Update to upstream * make swigify- Update to upstream * Use vfork rather than fork for libsemanage helpers to reduce memory overhead as suggested by Todd Miller.- Update to upstream * Free policydb before fork from Joshua Brindle. * Drop the base module immediately after expanding to permit memory re-use from Stephen Smalley.- Update to upstream * Use sepol_set_expand_consume_base to reduce peak memory usage when using semodule- Update to upstream * Fix genhomedircon to not override a file context with a homedir context from Todd Miller.- Update to upstream * Fix spurious out of memory error reports. * Merged second version of fix for genhomedircon handling from Caleb Case.- Update to upstream * Merged fix for genhomedircon handling of missing HOME_DIR or HOME_ROOT templates from Caleb Case.- Stop differentiating on user for homedir labeling- Update to upstream * Fix genhomedircon handling of shells and missing user context template from Dan Walsh. * Copy the store path in semanage_select_store from Dan Walsh. - Add expand-check=0 to semanage.conf- Fix handling of /etc/shells so genhomedircon will work- Allow semanage_genhomedircon to work with out a USER int homedir.template- Fix semanage_select_store to allocate memory, fixes crash on invalid store- Upgrade to latest from NSA * Call rmdir() rather than remove() on directory removal so that errno isn't polluted from Stephen Smalley. * Allow handle_unknown in base to be overridden by semanage.conf from Stephen Smalley.- Upgrade to latest from NSA * ustr cleanups from James Antill. * Ensure that /root gets labeled even if using the default context from Dan Walsh.- Upgrade to latest from NSA * Fix ordering of file_contexts.homedirs from Todd Miller and Dan Walsh.- Fix sort order on generated homedir context- Upgrade to latest from NSA * Fix error checking on getpw*_r functions from Todd Miller. * Make genhomedircon skip invalid homedir contexts from Todd Miller. * Set default user and prefix from seusers from Dan Walsh. * Add swigify Makefile target from Dan Walsh.- Upgrade to latest from NSA * Pass CFLAGS to CC even on link command, per Dennis Gilmore. * Clear errno on non-fatal errors to avoid reporting them upon a later error that does not set errno. * Improve reporting of system errors, e.g. full filesystem or read-only filesystem from Stephen Smalley. - Fix segfault in genhomedircon when using bad user names- Fix genhomedircon code to only generate valid context - Fixes autorelabel problem- Upgrade to latest from NSA * Change to use getpw* function calls to the _r versions from Todd Miller.- Upgrade to latest from NSA- Upgrade to latest from NSA * Allow dontaudits to be turned off via semanage interface when updating policy- Add ability to load a policy without dontaudit rules -- Rebuild to fix segfault on x86 platforms, swigify on each build- Rebuild for rawhide- Apply patch to fix dependencies in spec file from Robert Scheck- Upgrade to latest from NSA * Fix to libsemanage man patches so whatis will work better from Dan Walsh- Upgrade to latest from NSA - Merged optimizations from Stephen Smalley. - do not set all booleans upon commit, only those whose values have changed - only install the sandbox upon commit if something was rebuilt- Add SELinux to Man page Names so man -k will work- Merged dbase_file_flush patch from Dan Walsh. - This removes any mention of specific tools (e.g. semanage) - from the comment header of the auto-generated files, - since there are multiple front-end tools.- Upgrade to latest from NSA * Merged Makefile test target patch from Caleb Case. * Merged get_commit_number function rename patch from Caleb Case. * Merged strnlen -> strlen patch from Todd Miller.- Upgrade to latest from NSA * Merged python binding fix from Dan Walsh. * Updated version for stable branch.- Upgrade to latest from NSA * Merged patch to optionally reduce disk usage by removing the backup module store and linked policy from Karl MacMillan * Merged patch to correctly propagate return values in libsemanage- Apply Karl MacMillan patch to get proper error codes.- rebuild against python 2.5- Upgrade to latest from NSA * Merged patch to compile wit -fPIC instead of -fpic from Manoj Srivastava to prevent hitting the global offest table limit. Patch changed to include libselinux and libsemanage in addition to libsepol.- Upgrade to latest from NSA * Updated version for release.- Upgrade to latest from NSA * Merged patch to skip reload if no active store exists and the store path doesn't match the active store path from Dan Walsh. * Merged patch to not destroy sepol handle on error path of connect from James Athey. * Merged patch to add genhomedircon path to semanage.conf from James Athey.- Fix semanage to not load if is not the correct policy type and it is installing- Fix requires lines- Upgrade to latest from NSA * Make most copy errors fatal, but allow exceptions for file_contexts.local, seusers, and netfilter_contexts if the source file does not exist in the store.- Upgrade to latest from NSA * Merged separate local file contexts patch from Chris PeBenito. * Merged patch to make most copy errors non-fatal from Dan Walsh.- Change other updates to be non-fatal- Change netfilter stuff to be non-fatal so update can proceed.- Upgrade to latest from NSA * Merged netfilter contexts support from Chris PeBenito.- Rebuild for new gcc- Upgrade to latest from NSA * Merged support for read operations on read-only fs from Caleb Case (Tresys Technology).- Upgrade to latest from NSA * Lindent. * Merged setfiles location check patch from Dan Walsh.- Upgrade to latest from NSA * Merged several fixes from Serge Hallyn: dbase_file_cache: deref of uninit data on error path. dbase_policydb_cache: clear fp to avoid double fclose semanage_fc_sort: destroy temp on error paths- Handle setfiles being in /sbin or /usr/sbin- Upgrade to latest from NSA * Updated default location for setfiles to /sbin to match policycoreutils. This can also be adjusted via semanage.conf using the syntax: [setfiles] path = /path/to/setfiles args = -q -c $@ $< [end]- Spec file cleanup from n0dalus+redhat@gmail.com- Add /usr/include/semanage to spec file- Upgrade to latest from NSA * Merged fix warnings patch from Karl MacMillan.- Upgrade to latest from NSA * Merged updated file context sorting patch from Christopher Ashworth, with bug fix for escaped character flag. * Merged file context sorting code from Christopher Ashworth (Tresys Technology), based on fc_sort.c code in refpolicy. * Merged python binding t_output_helper removal patch from Dan Walsh. * Regenerated swig files.- Fix to work with new version of swig - Upgrade to latest from NSA * Merged corrected fix for descriptor leak from Dan Walsh.- Fix leaky descriptor- Upgrade to latest from NSA * Merged Makefile PYLIBVER definition patch from Dan Walsh. * Merged man page reorganization from Ivan Gyurdiev.- Make work on RHEL4 - Upgrade to latest from NSA * Merged abort early on merge errors patch from Ivan Gyurdiev. * Cleaned up error handling in semanage_split_fc based on a patch by Serge Hallyn (IBM) and suggestions by Ivan Gyurdiev. * Merged MLS handling fixes from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged bug fix for fcontext validate handler from Ivan Gyurdiev. * Merged base_merge_components changes from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged paths array patch from Ivan Gyurdiev. * Merged bug fix patch from Ivan Gyurdiev. * Merged improve bindings patch from Ivan Gyurdiev. * Merged use PyList patch from Ivan Gyurdiev. * Merged memory leak fix patch from Ivan Gyurdiev. * Merged nodecon support patch from Ivan Gyurdiev. * Merged cleanups patch from Ivan Gyurdiev. * Merged split swig patch from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged optionals in base patch from Joshua Brindle. * Merged treat seusers/users_extra as optional sections patch from Ivan Gyurdiev. * Merged parse_optional fixes from Ivan Gyurdiev.- bump again for double-long bug on ppc(64)- Fix handling of seusers and users_map file- Upgrade to latest from NSA * Merged seuser/user_extra support patch from Joshua Brindle. * Merged remote system dbase patch from Ivan Gyurdiev.- rebuilt for new gcc4.1 snapshot and glibc changes- Upgrade to latest from NSA * Merged clone record on set_con patch from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged fname parameter patch from Ivan Gyurdiev. * Merged more size_t -> unsigned int fixes from Ivan Gyurdiev. * Merged seusers.system patch from Ivan Gyurdiev. * Merged improve port/fcontext API patch from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged seuser -> seuser_local rename patch from Ivan Gyurdiev. * Merged set_create_store, access_check, and is_connected interfaces from Joshua Brindle.- Upgrade to latest from NSA * Regenerate python wrappers.- Upgrade to latest from NSA * Merged pywrap Makefile diff from Dan Walsh. * Merged cache management patch from Ivan Gyurdiev. * Merged bugfix for dbase_llist_clear from Ivan Gyurdiev. * Merged remove apply_local function patch from Ivan Gyurdiev. * Merged only do read locking in direct case patch from Ivan Gyurdiev. * Merged cache error path memory leak fix from Ivan Gyurdiev. * Merged auto-generated file header patch from Ivan Gyurdiev. * Merged pywrap test update from Ivan Gyurdiev. * Merged hidden defs update from Ivan Gyurdiev.- Break out python out of regular Makefile- Upgrade to latest from NSA * Merged disallow port overlap patch from Ivan Gyurdiev. * Merged join prereq and implementation patches from Ivan Gyurdiev. * Merged join user extra data part 2 patch from Ivan Gyurdiev. * Merged bugfix patch from Ivan Gyurdiev. * Merged remove add_local/set_local patch from Ivan Gyurdiev. * Merged user extra data part 1 patch from Ivan Gyurdiev. * Merged size_t -> unsigned int patch from Ivan Gyurdiev. * Merged calloc check in semanage_store patch from Ivan Gyurdiev, bug noticed by Steve Grubb. * Merged cleanups after add/set removal patch from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged const in APIs patch from Ivan Gyurdiev. * Merged validation of local file contexts patch from Ivan Gyurdiev. * Merged compare2 function patch from Ivan Gyurdiev. * Merged hidden def/proto update patch from Ivan Gyurdiev.- Upgrade to latest from NSA * Re-applied string and file optimization patch from Russell Coker, with bug fix. * Reverted string and file optimization patch from Russell Coker. * Clarified error messages from parse_module_headers and parse_base_headers for base/module mismatches.- Upgrade to latest from NSA * Clarified error messages from parse_module_headers and parse_base_headers for base/module mismatches. * Merged string and file optimization patch from Russell Coker. * Merged swig header reordering patch from Ivan Gyurdiev. * Merged toggle modify on add patch from Ivan Gyurdiev. * Merged ports parser bugfix patch from Ivan Gyurdiev. * Merged fcontext swig patch from Ivan Gyurdiev. * Merged remove add/modify/delete for active booleans patch from Ivan Gyurdiev. * Merged man pages for dbase functions patch from Ivan Gyurdiev. * Merged pywrap tests patch from Ivan Gyurdiev.- Patch to fix add- Upgrade to latest from NSA * Merged patch series from Ivan Gyurdiev. This includes patches to: - separate file rw code from linked list - annotate objects - fold together internal headers - support ordering of records in compare function - add active dbase backend, active booleans - return commit numbers for ro database calls - use modified flags to skip rebuild whenever possible - enable port interfaces - update swig interfaces and typemaps - add an API for file_contexts.local and file_contexts - flip the traversal order in iterate/list - reorganize sandbox_expand - add seusers MLS validation - improve dbase spec/documentation - clone record on set/add/modify- Add Ivans patch to turn on ports- Remove patch since upstream does the right thing- Upgrade to latest from NSA * Merged further header cleanups from Ivan Gyurdiev. * Merged toggle modified flag in policydb_modify, fix memory leak in clear_obsolete, polymorphism vs headers fix, and include guards for internal headers patches from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged toggle modified flag in policydb_modify, fix memory leak in clear_obsolete, polymorphism vs headers fix, and include guards for internal headers patches from Ivan Gyurdiev.- Upgrade to latest from NSA * Added file-mode= setting to semanage.conf, default to 0644. Changed semanage_copy_file and callers to use this mode when installing policy files to runtime locations.- rebuilt- Fix mode of output seusers file- Upgrade to latest from NSA * Changed semanage_handle_create() to set do_reload based on is_selinux_enabled(). This prevents improper attempts to load policy on a non-SELinux system.- Upgrade to latest from NSA * Dropped handle from user_del_role interface. * Removed defrole interfaces.- Upgrade to latest from NSA * Merged Makefile python definitions patch from Dan Walsh. * Removed is_selinux_mls_enabled() conditionals in seusers and users file parsers.- Add additional swig objects * Merged wrap char*** for user_get_roles patch from Joshua Brindle. * Merged remove defrole from sepol patch from Ivan Gyurdiev. * Merged swig wrappers for modifying users and seusers from Joshua Brindle.- Add additional swig objects- Upgrade to latest from NSA * Fixed free->key_free bug. * Merged clear obsolete patch from Ivan Gyurdiev. * Merged modified swigify patch from Dan Walsh (original patch from Joshua Brindle). * Merged move genhomedircon call patch from Chad Sellers.- Add genhomedircon patch from Joshua Brindle- Add swigify patch from Joshua Brindle- Upgrade to latest from NSA * Merged move seuser validation patch from Ivan Gyurdiev. * Merged hidden declaration fixes from Ivan Gyurdiev, with minor corrections.- Upgrade to latest from NSA * Merged cleanup patch from Ivan Gyurdiev. This renames semanage_module_conn to semanage_direct_handle, and moves sepol handle create/destroy into semanage handle create/destroy to allow use even when disconnected (for the record interfaces).- Upgrade to latest from NSA * Clear modules modified flag upon disconnect and commit. * Added tracking of module modifications and use it to determine whether expand-time checks should be applied on commit. * Reverted semanage_set_reload_bools() interface.- Upgrade to latest from NSA * Disabled calls to port dbase for merge and commit and stubbed out calls to sepol_port interfaces since they are not exported. * Merged rename instead of copy patch from Joshua Brindle (Tresys). * Added hidden_def/hidden_proto for exported symbols used within libsemanage to eliminate relocations. Wrapped type definitions in exported headers as needed to avoid conflicts. Added src/context_internal.h and src/iface_internal.h. * Added semanage_is_managed() interface to allow detection of whether the policy is managed via libsemanage. This enables proper handling in setsebool for non-managed systems. * Merged semanage_set_reload_bools() interface from Ivan Gyurdiev, to enable runtime control over preserving active boolean values versus reloading their saved settings upon commit.- Upgrade to latest from NSA * Merged seuser parser resync, dbase tracking and cleanup, strtol bug, copyright, and assert space patches from Ivan Gyurdiev. * Added src/*_internal.h in preparation for other changes. * Added hidden/hidden_proto/hidden_def to src/debug.[hc] and src/seusers.[hc].- Upgrade to latest from NSA * Merged interface parse/print, context_to_string interface change, move assert_noeof, and order preserving patches from Ivan Gyurdiev. * Added src/dso.h in preparation for other changes. * Merged install seusers, handle/error messages, MLS parsing, and seusers validation patches from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged record interface, dbase flush, common database code, and record bugfix patches from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged dbase policydb list and count change from Ivan Gyurdiev. * Merged enable dbase and set relay patches from Ivan Gyurdiev.- Update from NSA * Merged query APIs and dbase_file_set patches from Ivan Gyurdiev.- Update from NSA * Merged sepol handle passing, seusers support, and policydb cache patches from Ivan Gyurdiev.- Update from NSA * Merged resync to sepol changes and booleans fixes/improvements patches from Ivan Gyurdiev. * Merged support for genhomedircon/homedir template, store selection, explicit policy reload, and semanage.conf relocation from Joshua Brindle.- Update from NSA * Merged resync to sepol changes and transaction fix patches from Ivan Gyurdiev. * Merged reorganize users patch from Ivan Gyurdiev. * Merged remove unused relay functions patch from Ivan Gyurdiev.- Update from NSA * Fixed policy file leaks in semanage_load_module and semanage_write_module. * Merged further database work from Ivan Gyurdiev. * Fixed bug in semanage_direct_disconnect.- Update from NSA * Merged interface renaming patch from Ivan Gyurdiev. * Merged policy component patch from Ivan Gyurdiev. * Renamed 'check=' configuration value to 'expand-check=' for clarity. * Changed semanage_commit_sandbox to check for and report errors on rename(2) calls performed during rollback. * Added optional check= configuration value to semanage.conf and updated call to sepol_expand_module to pass its value to control assertion and hierarchy checking on module expansion. * Merged fixes for make DESTDIR= builds from Joshua Brindle.- Update from NSA * Merged default database from Ivan Gyurdiev. * Merged removal of connect requirement in policydb backend from Ivan Gyurdiev. * Merged commit locking fix and lock rename from Joshua Brindle. * Merged transaction rollback in lock patch from Joshua Brindle. * Changed default args for load_policy to be null, as it no longer takes a pathname argument and we want to preserve booleans. * Merged move local dbase initialization patch from Ivan Gyurdiev. * Merged acquire/release read lock in databases patch from Ivan Gyurdiev. * Merged rename direct -> policydb as appropriate patch from Ivan Gyurdiev. * Added calls to sepol_policy_file_set_handle interface prior to invoking sepol operations on policy files. * Updated call to sepol_policydb_from_image to pass the handle.- Update from NSA * Changed default args for load_policy to be null, as it no longer takes a pathname argument and we want to preserve booleans. * Merged move local dbase initialization patch from Ivan Gyurdiev. * Merged acquire/release read lock in databases patch from Ivan Gyurdiev. * Merged rename direct -> policydb as appropriate patch from Ivan Gyurdiev. * Added calls to sepol_policy_file_set_handle interface prior to invoking sepol operations on policy files. * Updated call to sepol_policydb_from_image to pass the handle.- Update from NSA * Merged user and port APIs - policy database patch from Ivan Gyurdiev. * Converted calls to sepol link_packages and expand_module interfaces from using buffers to using sepol handles for error reporting, and changed direct_connect/disconnect to create/destroy sepol handles.- Update from NSA * Merged bugfix patch from Ivan Gyurdiev. * Merged seuser database patch from Ivan Gyurdiev. Merged direct user/port databases to the handle from Ivan Gyurdiev. * Removed obsolete include/semanage/commit_api.h (leftover). Merged seuser record patch from Ivan Gyurdiev. * Merged boolean and interface databases from Ivan Gyurdiev.- Update from NSA * Updated to use get interfaces for hidden sepol_module_package type. * Changed semanage_expand_sandbox and semanage_install_active to generate/install the latest policy version supported by libsepol by default (unless overridden by semanage.conf), since libselinux will now downgrade automatically for load_policy. * Merged new callback-based error reporting system and ongoing database work from Ivan Gyurdiev.- Update from NSA * Fixed semanage_install_active() to use the same logic for selecting a policy version as semanage_expand_sandbox(). Dropped dead code from semanage_install_sandbox().- Update from NSA * Updated for changes to libsepol, and to only use types and interfaces provided by the shared libsepol.- Update from NSA * Merged further database work from Ivan Gyurdiev.- Update from NSA * Merged iterate, redistribute, and dbase split patches from Ivan Gyurdiev.- Update from NSA * Merged patch series from Ivan Gyurdiev. (pointer typedef elimination, file renames, dbase work, backend separation) * Split interfaces from semanage.[hc] into handle.[hc], modules.[hc]. * Separated handle create from connect interface. * Added a constructor for initialization. * Moved up src/include/*.h to src. * Created a symbol map file; dropped dso.h and hidden markings.- Update from NSA * Split interfaces from semanage.[hc] into handle.[hc], modules.[hc]. * Separated handle create from connect interface. * Added a constructor for initialization. * Moved up src/include/*.h to src. * Created a symbol map file; dropped dso.h and hidden markings.- Update from NSA * Merged dbase redesign patch from Ivan Gyurdiev.- Update from NSA * Merged boolean record, stub record handler, and status codes patches from Ivan Gyurdiev.- Update from NSA * Merged stub iterator functionality from Ivan Gyurdiev. * Merged interface record patch from Ivan Gyurdiev.- Update from NSA * Merged stub functionality for managing user and port records, and record table code from Ivan Gyurdiev. * Updated version for release.- Update from NSA * Merged semod.conf template patch from Dan Walsh (Red Hat), but restored location to /usr/share/semod/semod.conf. * Fixed several bugs found by valgrind. * Fixed bug in prior patch for the semod_build_module_list leak. * Merged errno fix from Joshua Brindle (Tresys). * Merged fix for semod_build_modules_list leak on error path from Serge Hallyn (IBM). Bug found by Coverity.- Update from NSA * Merged errno fix from Joshua Brindle (Tresys). * Merged fix for semod_build_modules_list leak on error path from Serge Hallyn (IBM). Bug found by Coverity. * Merged several fixes from Serge Hallyn (IBM). Bugs found by Coverity. * Fixed several other bugs and warnings. * Merged patch to move module read/write code from libsemanage to libsepol from Jason Tang (Tresys). * Merged relay records patch from Ivan Gyurdiev. * Merged key extract patch from Ivan Gyurdiev. - Initial version - Created by Stephen Smalley 2.5-14.el72.5-14.el7_semanage.sosemanage.pysemanage.pycsemanage.pyosemanage_migrate_store/usr/lib64/python2.7/site-packages//usr/libexec/selinux/-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -m64 -mtune=genericcpioxz2x86_64-redhat-linux-gnuELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=8c589fdc7a1353620eb5169249a828ed6137895a, strippedPython script, ASCII text executablepython 2.7 byte-compiled RRRRR RRRRR R R R R?7zXZ !#,f] b2u y-iSq&#SD+ЦFU 'R8IKil]}ү~ I ԟy !;+ <Ņr4;̫Q;ngF.%Ud7@ F Ș vlCHQ\Ds?c?@ϔ(ƨ鸪nfYVNjճ0 $)16ժŽ͹Rˢ3X" ƊI /-֗z3 9V-i8lww(XIqow&΀県!vCP⶜C XDJ>N!޴rvs_\{l+iTANﾕ5*B@@(l !7&{"YYGQ@"@`Vֲ h""n52Ɋc/]t:m2y!e.XGbGZ-9uh }==:KL֎\5fTʭPxTU0/ z\m5O0F6eT./bGbIU(tD@?6µ#jjo\:lPw] ܇Oo /hIӍ}>bStмO'&D }C=MpQJ.+Rk&^&i㛺p7׋,r~vDαq i;lqH͏3?oFc٪)W{e򺙊Ѐv mW0ʁL\f>ĖiK$k0bK3+L>/}&^2՘Od9۸2s8+#Ô *=T؞&ؒvhAhةgqR`cp:RIi ɮL5PS2g難N{9akhSHO=O1S$|8T/]OXS}QѧEX t:z=J|aD|tXO}LSC=)Y?+:-Ǭ)HngBE[7M1H5R5ƞ΃wC(lbtS`XF6 6g j'`߱@xN?t;hT({ӽ-D A&e6WUwsu0HKgDWTbYMztMq 宺y^*Ú:0mF|0m>Ae)yyz+|J$R)쪢{hφ E%Dwcdci g"&"VAHyp.Uo,VCkDb343t>v!n`yZbe ) d~< \m֞rT'7c3ND_N߼WdžaeNIε }01*YzAo(ʥؽ@̋i{`'uRL(-]-|3InmsbnNgVľAgt/wlTd5&1GUKGDj+d'uZ1[7qgԎu>c\ʎJ:n%.e+v 3[=] |D 6~X程,bj{La% 䚮Awȭ QrO[EkW+d_:(MtDzA[v[ZCCtM V b={l`~[PSIIN>R< :>cƁsluͶIA `7zr{;̧2ZVu7ۜ9hi'Y݃hu5~ ]K3?텷Q܌2d1voX7S񖜵zԄS ,f$%_$ʅ6us{Wo@WK܅.x:0X1LZ!#1S:4Szx&l|ˍ5\ z$GO?Sn}ӹJj6w&jЖuXƺ}^ +S1y`OH4^CL݄ف.7U&5x/1tQ֣+gjtQ{$p`]vTXhJ;1('a:u [ 6ՆUZw:N:17h.Pr2#6\FebAkQ6zb&/c?/|8c#w]іES  E.cci'B 0FG7)?SaLJM`ZǂFU}s7&zLw@JFH rFqyw޻k[VJ`zyKX_a零RF@cSҪy~ھ|_ύҿg)Dk6 u*>asʃ0)*°k7,:HZ:Kt'ުp[E}B2Sʡ=)^.uRp,:`XmbRti`䩓%n&,\0[VU+/exd˄ƿ~J]s-XU s*G:X|-Q'&/A5S6uz '*Kl \ȹUԬ%{swXYQxElm%(tb7V3h_g6zNu^@q>>)I%b6.2 %\)y &E{\Қ'[X?'@oˇflG b~UZɨD~~ט0_æۼe<-jE KLn!4}R/zw ,^ksN;trcEM-gsmG"M 1SX=ާ6Yga_@—:~C LIN=!^kTL489G#y A rr;-L</¿P8/a}o faC6Pna&r F$oUL܎!Yt+EtĮص3x'bD0"+je$+,C{-ŖrUXa64rTgZ8Qsc6N4pmgJG3X9PF*@PD]+ARb hc1IAc_%,wb:=$׏?jw'3.{I{8z ×_ Cbz&C9L^6dbVĂF;lCVz`XZ26O!P0B}* ˇ0>K~ڣg  ]K"ob2xcSU^u1DΉgb3W|]C-̞BJWxѫ%Ɔvpnu[ČOwtSFA`/\1k]:)Nsv;`3GP""ur@Cbt$̹aϽmWdz5G]- ~%F6Sw>3H4Bh.MŦpnY0VV4Rg%0ZuKD <H=kBʞꑁ$ e4_6 rnKVekD,' X!Bo1풱4 A!ge'YZzQ2;ҟ5ͬQï)EPX]A6 6ߓ *hR:CYhD=S@k;7⬂ {{wMh4\=D 4U>D-4לԹ ~vYh4D5wζxݟ#]X]^8ɒ1[fPm:"*CPsp_2E>?d ĂĶ$Y B.|"|jVctqݬ>Jˈ6 )1ul5nł8^[^Nt/j֛&ET1\th?e=i0Pѐ J 3PAņi\GHkD?.]ӻ:cqSŪgEDC9idM%7mm"L^Ew!O@DL1ұs.vvgzI& KR &ͨ~ z%v0[9G|Q<@ʡ+/Ca%TebExEل,8xP =uՍG:X~RC RaL VY[(aؕ4t4͉+MjT,xz{GJ 8]"㟴um j0I M!(ay_" QddH1+@'f9{_1I&ҵ ? ء-'JKGy䉫lKl :Ps]ˎB9ȳc cd0Jxy Mn:PSgگ5m'g)s+{S S6iΫHU9u(Re<IIwU @J}(r[{$~J7p(*iz*ۢ'p(!]4&ua5縗n "XaW9/=mỳ{C$V^w|7yJ7wѿFV:Bih>xY56T!X<ķ9~t eqWёNcԅ&TpYQ{{_Cv4ˏ<,vhYgۖ)ئWpuPR6#xoZ]u ㋜V%\X1dJ灇! dQwW9挳P@e@TdlTD]Jo*C 9EDa°CbRM^]y$ąCW—Zqe{POrrjQ<ǭ^68WOwng1-_B!2>嫦$M QI{ʏ܀] fXt.ݔԴoKʹT\:0ljDc/^')W_өrjqs#{ZaMஎs~Q:rݵ `bj ]]GAU-C{f?؞~>R\G&hGe.|ԃ[syC *(tA̗L%DnAOQF&c+E~51R$0ՙ|6(}c:w&wlZ5Fd:`?`LVf *O*'w" l$lISfr_%t/ǬebWLhYDZ%`ZmSiJk(NVlmjKȑc\[4}(d`mkԂ'PzؚPFQEѶV$ 8R=)޻1>1Q[];9Ы# Vl+!Tκ&5E9siÔI)Vb}}4Ǹܽ{0,/AP {E4e|.ٷ*ڌ]oUd kQ[A4iegv+aјJ_ $A E]~N1h>oxNh)xژg^pxk( v= 7_x{P *Ğ#zVP)@ٻDαGgO& ycv:a$ (q|0, ,$'(jJMڀpȝ3Ul]5 la81hDzܳpšcNRoP~4sֶ%۱܎c?%6g0L]Xs`PIhG{M,@m*ז.eldǴ%MUHDSg +.blERvE_B.ہɑ<\'oZk Ic(wbٟP9.sAPH=oa8 3Rg*r|FO0pALebg Jj΋Vm<ѨRZΛ4w ̈\+ѭRݙ;H7BoF2-bXy[Trm_vl M\-ǣn.V,m*NME $ X#w_}">/KnhunSe ^ܜE-.N6uZڗQ=$0k:U4 paf% ,&T<2!pl9w~Z#[GH a#4zu mO7:81ͱ{76~xsTHz*ŭf.(}D8GkĶZ;fz^ˢbar:R>N`zvG%m<8+UAp``Pދga7VUҠ:˪RIVnďq]@!켞h%!wet^jUvxJq8BN5@WIϕ6A&z2n,cN }SH;{+k Whv2q)e-2ƣYݓ zm/V2* Tt휿1^Uuvn /OAN<=h=yx{Rc;raD GU$9=Ϫs'*{E]3µA^϶L{$qAĶyw*ajE4/p,o[?zgpDfvSq efs,aP,Yv2Hqfߚ'Pk'!'BGYY=B3y#bFMQ[]uS" SyƘT\>D"|.ۄFW%\v"lEgNGTCG7ɫ[E1kqgisH vJ%t{g)X&P3{HPQ N2:~7|h, 0vSjgA匹:nGvr1oi <0k,<~مb9u+W6}fM'nu`" J:*)-9՚ ea]TX*אg)jWF׊aC{_{!0lAd#f$-*O~pʁ@DM{;*J" fD4tPF9%M0-W2֢IXqiOXA4 l"1(.F^rZX(hԸ'Vx..0"E:-(0)e]CŋuD4A<[è$9XcMdG);HVmu v`bfcK WH;'0Q5K ՠqZjRHo0Oݙ$5_9248!_)єuҧZ%ފo.} LiNTT]Ȃs8@\C=$P3 QY;0[A;ˆ)o:zay'#EOdQfkXxq63luԧ\VDdm@~e\c6'|4*vv!԰8&8J =f@kGgg X6>.u ҭz0MuN5E +1'r<G#6,6 )S/TZ6Ƞ\eljo "_޴sK,+XJ=$,BQ)65mu޶e]+Hn*%9Z`O|Ď;~~Wz?9m+1s7sΩ ٌ;TZG14*T;|Ma`ɡDpg^ %ϩn#0"a'RL-}L5> ` CٸrNԍUiȏ㵅.A'GSn[CTT btcN u/')CzŇķm:.S[|>ؐ ƙ {TGq곟žr>)^} ,狺 ] :\ipGN_soit@qnrZGWhp-hQїHYgtim R~G@)9f"/n9M'wOc9F !q5_VM! /f͗K:і.>"@@Ix h6,w}܃bA>`:"8ɧ.)%3b 1Өi4$O9N pCFo+RCR}}ƫTFVT+}b`f:UV2Ov)^}2F?-e+,n26^s;pn k;[:'m`x)оN(ax'u6'At?56 ȈY/dLSF!hԲIUprh!-CEpT?# ҖMAoVSK޶ogwl ,|$ % Ly@[ w @ܫ=p$aU߅R2<n@x:Fz I:Tx q@{j)\,0z[ANoK~lzkgLDK"Jj|JhMVK&hߤY YRTl:(AU;~=\ACR@[Q~rYS(x8Rl EҜ)t>]vXICXt/Z o`{zQ=TT Z"wxV)#v")U}ǩ6d ? Иþ_otDɎGQ=aV6of;S0ijOTz!YU ː[zKY\a@ɬoב{x|%rhжǣ# Vd=.QIQ4m\vи2~pQ-E}j~{!jaCG}4 ʏv!7&co[YmsRfvRk)kM.Ηsi΃,$-Jx}B=DDN "F(anWo>En-I:)^߱vӇܾq㻽A2|x=\Q}6u@g߂/%C(CW,x 15@lQ4_.0Jh,5O\u0`6jiBh8)W(yffZi& p*@(HXl2Nk}xw~[0U?W feX7g`E?j*V Ԗ! JmљXoC*o>G\Kc'1a)?I"=Q%W7"Q2~ZFi,{.~lșMgN~PcsmJog܎k0=CrIwH˭,+z.(KOpBJ]Տq/HhE$&Sr߅4U An+f}\B:Vg$Q/+0wӗ0 ,p:C2<*L&4 5P2_sǚ.b{/"Mn#Wqv w3ݣ v#+s)ֹ(Ι2wtܨSjnQ 1=LxLi= ~@Oɭ(jPR Lk Wi{'oN-NGOnD߼5%Ȓf4?(cH;3+6n| iCCS܈,2S!5" P}lHk30E;xLG!FiR1 _4ǭ0O_@ Ncۅ0"8 $ ǔѫ#Zl \{MsjkՎP9<▼>G*iwWk'Bnԗm->cX$MShp{B{~J3p{M̀pbVelߞk.ߝ\y4/t'l CR-"X|>;X}E!*NRƨH{˧Q+ȁVYqՅUDz_e# ;;MId5-"f4<*-騞񌆽"k,<}NvtI#K'mIӇ%VX!'yî* Sh}9"Ӂq兂`wրyϔYۈI BT`M [+`á 5sY5ye40bf1 SƆoi#q4%#l^8[ WND}kGo$g|]վgF5ͭc?Kd*CKs^5XH*B- +B[re36, JNŐSc MKĵ #ǟzsUjna}JbUI:" w|!-Q )N9*48vk)3;"9?ȨFGA|z, E"L𽂿8r.z!9 SjTMU v kaRD5@֋^GSb"+#>|6גN`'"4dݙWS7MfYD;_8L}(NaHb8Q-cQыM|8-yDjMNo #hns͕,J=_,AX. /:Src;@) ?2ĐN 2 UbMևeJg72;4>PXBb J5V YgϠEd;)4{kL3vM\%7ab8RN*35SCSwB -*$:] r)Ew-,ݓ{: !ev r't ߊrCſGleP-'DdL 4vx{Y|2, O֪Vʼ1!/ϵD3Ոj##X,GBu8/?{־DQ4!놢(Ntb0UٜvRz6<ºs/>##kp/+ ^R m'vnrړPVd唕 m{W'JCFKh\tF%:|OVFmYVە4ȫykF ɦevX>lE . ima %®)c3Q5p?Q2X^e=.W՗>vI'ւۏiױX'8#5Q> C_0RxV(c)k3m87mwjK:+6sImQ g_([}B{ ;+4Eֺt60H"2zGXnE{7oquy,}кʠ`9HwM`^'&feD#W*irf6[okLz6$D+nVQޫ}8a(={0 I>nqP 4`RJJa/ӗtWrGnv8@o'^}B2PѫGYɧO]<;&Ǚ /j#fj[:lO<=Zc8c"G_DA}QaI&s-~sn_k1oô:01[~\LA OQ?M]LTNgG:][ttlϟks^ |@SBՊ 2ɫc8x ʉ>|֣P4"@ R,訦Wzύqf$ۺ+Rڻ"lSjU^E62:>8ä9mt,ubKA;crZ1oŶn/ڣ"nL/A߅v3.]W":o7 &΍(e=}4$)"^}wLk"DZ+u4pRr@ω4^8  Pf4e\5WOB}~qlO, 1s)jg­#u?Cp] UtLzB$.bY@/My2ѳwa[(q~)f\M: s,duAڥe5N1ƑSId3XCzVɚr!h'#idMʡSK80Xw? E*( OČpi|AZD7-m-ږ) ua ΨRZcY/#E;wB«X\V4n*"< wܥN@X2ZK*O6޷263nv?ҶjVQ LF-n@c 2ȵ?e!]"Q>ZWʱ]Ѿ06D37`84y[P,41-cob首׮Zhm|:xS#g(4RIՖ)c ')>*C!82Ɲ4QPHce p{= f!Tp‰o`jo4s8%G.iRO:HC\ ;/tm(g1H|q kUwʯeʪv_Udnx9;%`׊8m.슐®R/r.S-$L$ASls)u[CDrN_>yG&wun4qp)o3YgIωx2>Q]zCQ'7R=M5E Q lL81k ǘJEXg0jGLVOJ-Y4^tbsq)I%zLxWcv'D?Ze!FV*#UqMX\c,b7~󧴕Kkת/H0a f&xl/̲Jp?%)$w8} ߱T*SgN \resa>'8V 62 _Cx9\k>tYj-꒳ɍ[)>NሶYSUaèoh[HNЊ 7z ,B ᷓjL,?t$4R-͈wrΉRghi˝3E'-!quU4_%Q`=@LD-ֽD]}{߮ 2daɤ7_I&E!=y+%Ň pQzec n02!m5yo9[wЫzؒ OnXzj w++~UA S^f0މ3}@`vF4>YVNK:-١p}bc3+!G 0HBg >F}U¨DE-jX:>XClADG5Å!JSL5#B΃WI;qnyYu)ChO}Rjnm 8)&Z~. ^za@*w#VZ|nvKJm?7A_CmPG?zUdζӂ`q_VMH:yh` s1ڤFRVVds +qM>= ŨRsHjE&kPn>2^'Mz<\v'g 0tIZЬْSdA1:ع2aC6C6j_@-kE%6_P}4hH%E{kqYt.ru@Utf!OB* ޥ[~8بLad$'ËoHRNM_!Ǹwm!djN^AGGXry F8%rk ʐ ES H#" #MIiolBB\#S7O0ϑ%m1DBo\-dt^_\᡿cB9:p47_.G(;V)R: ojf&kVQ6&^ tiP'^Po-KaC'hTb ɀfHyb=dx [)ءJ'4c/g}LAVVU exM4l)f K/QcAG@wsYQ~LkӊؘGCA&R\j/db6]ФRjTR[ocǂѶt2AM{tD$r:|Zz3)z3y{LC)?`e$^2/ThCCF9X<71AF,z=n;)\wz`{+blEtAMcI$tk7̯¯ BI|Ɲ!˩th^?׿!s&OjP )^,$`nW}wbrԒ+fh}Î[F$XXjH~SYѽhtΛv=tE:P门U3 \ C06l[jXL\fmS\G>?aX^[XD;7e@|tSn?疔Sł[(BlS##9 2A7Ad!E5umx\_] \i&fz7hY1~AJnDxeMJ\3-yS@ Bc,`DyV<̮gA;~IR:^jJe8\sϲ?XziR$#IQjo٨:b^zyl'lO#$wsQq!=Km/cf̑j MsпUBj>!4&f[N)Jӄ|Qz߽5Z`NNJcUJ(0lٿ"Eɭ^AO3u oE3sƙ.uF}A(떞=3~~AV T>0F[IS|=f)PY|#hOU*"w/=υ3Ψ "%no;Ib&.{ƌ@pH_Fa-(M֭:2!2X#g7}Z [t#cp ,-wʢ"[L[qW̱0=S:j:?IJt26G!9PC8M|ajH{j_dlCQ_O$2sQ7HUodXoYMdFk4!0٦:;?&IvR%&[F͍~:4n"qLBҞ))=m 5,0JA R#ϙӤ8]ddw0}Sx\7\~0g\XSh<KJb#^XƤyVT^ԛ ^>H !{G3QVpkG-B}C=su=k -%#E%4(!@R'/rpև=/;i"tPzۛd4rT~^TT[CTV93"1}1tE/E+։k5rWas, RǪ"^ϥO<&P-)bĤ2Pq%hm gmzIpVRj 5\pw%z}gXa}߸9Q,L&7[ r(cw? YC|5dt\K<@6lU-RZwzС_0m4:L)T臼Mfy/Pr3BN3sE@0i!nE%5 qk [Ea"K:߆T,c!0JkBZ:eI)P|t/})ʝCu ߪJ"){ @ʫdIZזҙ/PhfhgF%+1Fj%GS4v\!""FbozL_!o|L-" %tprY1W9sYncp[ "U?[[|L>S|L=%}HB̛͓ȮLICa;]OD@,R^=F %- Ů|@g7dc`m3 m& r|P]*MDrf3ȱ6\_nXYRYkjiI(T2'2-aEW++an|A6N,1Y&A_MګHaFA2c=s%ll-QZ kb3/;ӈ2TQW1e$C77ߟ1t$@ؖ=70_&l{do\mF Z de\W" [{$oVtP V?@5URgU`m}5piQe07&0m2\Mk؄h0uzzoGRNL%, [Ψ 0;sShV&@Q eF\^ے|N2v+r\Пܐi/L5Ch5m_Dꀆ4U .;̑qS<5'~'TP{,~ږ(}փJ$7"jj @RCSqt*ckpdP ȶ^[~ 4;&ٍ`Z**(;zzWu;y/p;rB!I7lEg[y15j8*T-o?VNҡjƙAet| 6<㖫ʊVmR4wy/`~hC;Y6O\«OB0kxSYvB yT g9O@(۶Y(!lW4S|w_j S+`FcBnRŊY[!w$s8 CT #n#qcWkʨO)wgaıѰ78%a:,Ո2^mzD!9_ ֒B_{>ICȢO`wXvJH8dlf{19#J0&# BKh2g= dz * PԳ*Q^B<kʭMX׶ 84C! rJuF6كIۮa<"֭J&R϶,3&%a˒.o͝t+n" }UȬ/}csy鈾BrCsΜ1*"/N&]w%ÔR_w<;!;Ӛח>KJCxIa60=w1BgP|+{{^uL> nu}\"sξ-u#w9]eH͒qP:.yG}p{%)j5& ٷLl-A<0Tݰ^CϒY!PXJۋ.4pPvI qpYv< R%d;r^㋷OSϵ)ĺ̬?y#PY3HQ1{w3zpQ] {lyѰ!{"Jl$x%OJIz{\V9 YT}zSфc]@֛ǞyrpI08:)? i Lf9lDxE7{Tp?.c{F1g>J""3LjڌusΰLi247[r1 ";bעS+ ۈ5*\qpՌ?,5f mْ.Jv4(FoMZpm\3ȗ<)#{ij6275jؽǙmC'{[o!ƈ9&eT'ܛj]_} W<&^Ed1 Tj 9 γ3NPp[|M3.w@w3b+k[`QfF1RGֻltgTv^XzvZPf@ aEalqߍQޞӮJ3HMptybxf`)%~q2{8^NG`qJ{fzB3g|{L܈X#5 !k%f<rXAb.DlK̩m7vuHlZr>N#UKE (7T] hgWsdUt<[|ngE`m D.XBbե8s #'@?|xf2^ \SB< AXCz!$*Sڔ2 f,&b))iT6XzJAeKj%8{>g+y:pnzAeV{tSc~ DT a#`nX޽w*N[cF\챒X1I.% Ϝ^\; I2 .h=Mz_)kڽDhaɎa-C9csmVKەOS'kuW\CPzO>AW8^7[fIy]+agJHϭL'td+bmBwrP^ʯ"YnpTfmFCsozs J?Y\lAp `ɓv\U@jwbJ uc#2kR2Z1Iu[ YH;jn~s±uQY&uHl>yѵG} j|WNxBiZK9~$M6y̱|Xfm3 l'Tp`ؚ[h!dS ˫Vnf\5/ +`֞\ E=nQǿf׸*Զ"ߋ ] D_k+O+qϬAD]?v) G-Tg)oW[w'6ԋÑi-ڦv8?P[3y&}|V( >>aDliN1 !m@JNH3 7oO v |'_g壜12ZcMx֠HNNBys;%؜$ c#ЦaR:n<|*pbF~R}=[?C,,>VyL|lX+*0x_ivu ]!*2!Y >\#~eueH֐.KtB׀,TgK=Th5`= [e>0;Go.}'٫!g)x!4z`!=Pb$w}q9*9gڈK*l @ɥ y! hLbJLab/&Z7QҤ"u`" ҞJwoVdm[hvv?0iΊE{vtHφ@+vܿ^01w <1/&\QWq Yo5殭Dܫ؈7uݡ(ڽ\ A⅗_Hr- Exn{#{LH#{d?Q S<_sȦї28ƥąLJjmB?M[8۴mk¨W7aٜiǕ-q;hxeW8h;Z?KlC4n~T+ l?}yV|QC𠏊愝Vk3ovT1y#9zh᎐Tgq^V!qSc7w)n+s'8B|o9!'؇rL)y„,Cu0| LN Xdg|TZ)RږAqUrrK=ד4%p-z0xYdh^CE B" ;W<nSn].u =fhaSim:vKR4DB tk'YL0 Vzބ$+^^î|ytޓ~ݣf\YEu"soV+iÀ:*t&`$߁_rAN멖ɒ{B4TG=8cTM* hð?gL f%D]Nr@B@/L)&a6R.ȻKzj7` vφaCCa!j>nJ-UM.\'BOۃִ%)aՙU-4T4Ymˆ x-;[5_SrU,[)VLrr[ns򧱽ay^h*aFkFQ"ϭKS<';O2U6Cy%L=6>)(!<4RC,Dov}!kAzxPrI%(^6B ?^_xzqf1]!P5[Ne\x}Ë˙oְ;oӀ we 6ViYq~^,{=պ.m9gԬY! ¼?.P|BϭhxE2p!nE,п4A@ ~ӣ3|C^HLu65{m%4"P(A++wsQ1DG{ш68/Q$]P2WrJә?#;w`& ʧB9ٗ׭zeO{GXZp%(xuT5u~:LG.(p;y[X{̂zDh-ͷ$R+!00^Al_-)ZgD8$iL>G9 rL02/*e&@Y? b=9ˋ (`4q@mǁ;f"t9'kpLY4a/#ՁDbG F`/vKuYR$[[. Xd{WZ꼥yZc/3t+?Wq\1q~UU_צqAMxtp\C THuw y'S)zjPDO,nx"4-N#?ju'.1xUmZu NS5q(d)iqS|-Zk)B+ۗ:Z/"E٨TsZ3y{ᰋm /F Cb)BUS4_  n Cwv2ͺe9xBu(dqK&"6\mٟZYF?1J kEgtve($+!tv0wI{/N|i;($ig+n43"w!&! \WnZ"e!sUp3 K\iƅoDl4q`fUzo94jO_W %]g~h|_ sF;QAJwcou|+@t9Cd [q,- CP~ M;I4gH)'7h1Q%oU-:/VgI_Fm3=crmQၒpz5+m+W'' ʊ THxh=9y8^WAnPq&Dʗ+?NKSyAnK"juѾgi5c&]c ,##Doөn #7pX!AXU_\~}JOm<'qB5eWl"+Z9j7%/KAYbA7)\d~/v[OjWr׎tw\S/Sk;A;)$R;wO*eE٠0GU~H-~Jo&Yrt=pBH ^)-jd*Sf&emox̰Sx Yld`<|a^^1\ }Vy Xuc)x̸\@d㐪g*j '9E":Ŀ nH5VFȔp#n!X_>QUP$>d>0O\1,0&$OїﴋwPlCٰ&&%8V xg.#&"~GU#8F?!|$Jpoe!舐ZoqRHSG' 33#^I倶U{=dLtNŨ[o~[ߗi>p|:#\MY4;?[f S$Jaܖ,yiy 1IuGb\SKY@"e ML m \vG5*p.~ $fq4*-<(!: '4xsi8OJ@o;ð ;l([Io14| "ݱ(#hc(574Az.TB@ ~lV9w{PW&J2 ߬m& FCN'=b8%eJmzPe@X%P M"t=Y6FI7Ŭ1bN!`'r7xS xcUb~<>ߍfȩWv%X27N0l"69+C0Mﭖ1~df_+>!1 T.w]xpTܘ l"uAE&(Cڮc6ãhj ^Dj7-^WRJNWu a0TjÛ,u' D26.凋 J z$ت]zlFT!MwN-w$3Җ%c-<_]*:(+>3Q X7nzBbD*&mAȂ ּE` EeJdp+[aX|ـDc+>ZͪBH4[hOq"Xoz(^:6qGC4">6uLb/ myME;w$f}ùsY!1[=׬hsَ.Y$cwco Ȥ|B0bMLmȑg;Hvx r",W~Uy?d^󞙉)0+dN?vցwdx#+uLI3BЍ˜UJ!'@Y/d$ol;~ݍAG[.=RAGQܙ'v2m*#oĬ撙5i<{n~ wBk@o?g~w&*byk{1XVUbuՑD1I@7۬8K C -X?@2s9J]O`v7C=52sotr}=^a:1ڵ8af:Hp5XD0lIqL(VyF#uM9 b*S z(s4_"o!.ڻ S$ e!Ǝn#8{IV5#Rm,V":\?*aO؏#bހwp`ĝN(VsmJ*?p<]"F iu1,|ۥ+7 SLun Q SދǺ#?Kt~MHE[74_Tm) )2#hjT*'e%ur'R붿&u?xI@. c-\2 ZvMT&XϡF?xrsR֥'8{XfO/F*'%)ɹ먏gj$W`_YR}|O%l)  "0CC?w*Mr)PU\Tw LMm%p,ʳIdFp-ΗBJt$4iYR|;Vw+q<% wƃ ;զۭ3ɸ[9 y1ȏ02lY]bNJgUo,ӘftlgP~ep *1 N(m3߫ЍtXsy|.X'w%E(UWm10%8 ?ƒ.Y"+*mF** #}|Bv]!ifNcRswb[Q4ЌW%xTۿ/xVp50H|.JxrUrd-I-9D)GϿ\)(}vxX-)J*$XzazU6'.& [=p@ $_ώ! 3e ]EVڄ4`CkMwJ+ S?=$ğ^(U>2Y#lj02Q˳S ?REɃZz_|3&˾`#04= 7ՔE^^QxbC1 ;Ckmf%ҙd)hB R#6 ֠4wNȣԷrL A9ξQ O/L߾M Z- ;íyP31nK T*\wDvɓ:_m+EJlߌLc];n1>%*R - E "U"E3CHaFiY4i&&۰]:h\ ų|sDcBmucj៿F:#oaQU#8po{qSCpiXAhBS黍`f:Ę έF0o.nh渔ɦ0` <˂J53bEW4μ%IVNL&{bWK$gp\;Y= N=ƃ7b[Ф8ȄZa0{aS܎ХEL̨C}&}$?dBw6+ah`& .Ա4ep{$(:Ѓ@l]'JnxVHVK^5 7YrMqJp?+K8S*Ijn^9 Bjn#ޡpb'GzH8i;eLJ61ίOQ^ъWD  $/MS!{)˦m組iU+dsNL QR &5AEfrB$#@8'^a7u2*fN ff[PK힄{׊:JO4Q6Lk"<԰B',|.;xNφV}(AӀl$J[&le^+ُ 4tߒЂ5@~-p`D攌>BypB(qYfEŒ*9ა`ؖmv6K~UVx1VyaH oI}q2U4Ɇt:`" ޕ̫Co-Iӫ @t߿gMPKRk8F#̛|-&3 TIW.&F ܯ ]8US ep:Rx'Xe5C@%qEo߼H/V( U(t`2a=Θ C@G?_}`5n].R8S}ۋ^~B5Sg n|i6d@=u=vŸR)V^ :*;\Ydt3a5[["m:vl2r';v\yd|E~TIkW<=F}+_m nK[WN%˿Ʈ@5ʌGY> 3dc[cq|,[\V_\FfF{L'ojif=/anNLuT$B5zVixW3vTookwMB tQY|?EL +[ᕽ uA n׭KN~G'+Bp H>~;˅y'Сq~w^%Ę[q4ϻ .MB;w?=(Y44ଅh1}yl_ mɲ 9~N>d1I~R ȗٹ_Y*< YDʓ  !tMf!h0|rԊWMUktۢ٥.Pz"a^?JzA&tؿ򜛶u3(\=>$R̷?~/pBI %A0s%~3`;%u>86s_ǸUӟ]LrהEExdfFy/r~Ѣrp}F!#x"rY }ui< fVj!x\&|`["M]Vwo'R :sQw$iGtʪ glUswcty*!2Y(6i\ARTV;eh&·Ncum.g/o¬- ?Lq-ơ,v xm. C|y4h?mZ%4bδ.ûf!rhՒ07g>EVMPfge8PˍV6)bKθ4[N?2ц9, k. Kdx{Kހ SWצ; E`D ZiɱzP)RQX8,')! c]fo4>bB`jHgiW=Z.cθw*mz{gg5*+uL3[P6T^ɸD0YA! 2'sb}AFv=o buQ=Pv;Uǃg#[fZ#=mUQqbHMf#f|&_0 0 )9ܿL( }&WjNː#t_nQݢY ":l`Ky5îPlkiag:q^D(IE?u å??țyAr16 dC;] =Jjϋ(o#0+lI &lg1#c&m95PʶìW`H$I'FDq}I܈[Zr'R&4!rĎ)+ 9[6?9l9#C|GD72hwO ~'=aWk*Kv=Il.Fy|&bNnSQuױj' I[vˣMb"h  %#HmK{ ,1xL]7.VBk ׅ+Yp'zPi 4~0H}pҶD)i 쟳/:S`ΜLwy&V!=ԒԔg/ $o79"RT:chm6RuGCrvܽr7c >4LNNHe&܆|& Oy7%ݣQSbAT:1'X^+!mzl#"W۴rzʨӮnE4{XY@H.iILľ)(vwYgi#& ?MqDt882etJWu}'C_Ϣ;{wgaC.4ee-WUH8 ӏ[#o 뼒a XՂzzgpy+5ۏFWc3`LI 0AV1߬MKdx* RyƝ;ͷ zi|U$_X\nqt^4k3ߕ(%[.Y{hG,:o<+=s 9]XNӞ8kaj鄰ci f!lr|a%< /Y">Elx+嚛@/a YФJ;６ry9i֡/-}xwf=a-{Z_n9 )6 <~K\ B޻U= o5 tSwތo~QJ6LQِ{)mQBA L].WhsO2hfl9d* ס|-\?_7֍'~BԒ.\Xf̚~Jek.s!>BڒՖCg"*m{^: Z ݝ|%g@V * c];9ylvwP&"ԞD#U,rmccr_4dc=`+mDZn*]([?4t b7>'= [[Qrn`d Eu$P J/{6:LJ*5FR1J>mIeC( hJ䒧EJԻN-Ue%.FPUk2c ;@xC;!8,t`"QQhWb"F00BA,Wc(kʋXV\6jp31[o6$c:"gA5;+>a"i(ѧQLs/Jx]wmQhgWV3ŧlm?,)EIz9 I,ZMSIڿR:D+wWx$"<r5/`OrITؐW!q Q!"{{#˚TI*.-r2Ĕ Ai#P:](/5_sakMؐ9ƲHTEEǔs̞.J?ӏyuDs}5Îq~4/yK%_O\lJtXd@Ee4fHӭ/8Ѷq;4Nr )JoHen݊#sv̊fsa9,i&,h& coPaaoCr$$I 8"#\Ch`U#Er,l؀ԥ%Cp0hhT~3xam~3HHv5=:x$̑1 x^K6__P-I6vW9xB0w\ CV4XRjv3 ʔGɔpetYivK I'63Թ;rq:m˖mYk19\LI!4tltyl;ibz|CtiZ#Ф<4l9s<^hڴ )y!Y/nu(|˔NU+(p08\Ll8d`LuL&=CH HgJ}~÷]#6v鷤^ggc\q˼|%p:/paM"d>> ͽqAS# (jI_-$we! q3 fRn.Vpܺ TYG2' '0:a4z tRɯGƭwfsZ"Ȉ`k=bZ5F1Q:nk EckG <Ř7b-`3Ӳ`7uC T$pvDyp|AA>øC4D΃)@d6;NQǤzE7ӛrnpZc' E!9s{NnYv&޼]zX-^!:by)R{ tmWGgM(#69?[D.88gAfRr0{W(:6LbGjV05Mhp} ܥe%Z ]u,ާ!?)+'TݶHbHeB>Per}/#(ҫz`<Qcyx'y92'jOO` mU-!?:hL0Lx4ŷCg R7r?,]ydK!4E.b2۷_f7ȌəyL|qz(p>ƅzX"AQ%o(Lk>sd_IbXAp6M/8AVq0f~/ 2Q,Fmn.Sϖ:1עVmBtY4lv0ߪ$UBlW4;M,֙rxw<|譋5砧_aſsɕ3|0'5wLAyԦKOY?/J.`nl^a+\jM;+9 `zC>D:6 ĥ6S(3uHド+M9)Y1-J*W8cbA?p., xJ nd8fW5Vd>A5"x'p ֒ZJ,AKfy=;윫${>*{Zi}AP!cJa}S } R(.C;PCS1W;aoGF&z1̨V_7͏}Hwm/񊑼޳LEL]0FT ?lLnE [\&eнL;I[ " *AY~'=:`kjaՀHS|}PXJh_\aRF?[47 ^\!u#E,8Гٲnb2ny9 V352w4Ó!%s'u{pދr| E69H5y>*A%d|?!n G~& !kIPޟ(^bEc3cbys_B-Vc*8IV[EwR+Gڽic }W'K>/maE|tZg-䝠4'f&m! 9h*w1'JqYAnȥ5pn݅?>= N)\3kvVAgKNay)yMr*BPz5 F`gfC}W8ifȋ bZfHCsWOZ"܋BcƆHWY L"G}8ɺr7jdΡ{Dˎ&xń$We84/(sLvs Rmuwqu,j`W=WwYrT2P 6.H7.p6R'`gh ֡2Avɕa6Q~]S p/߮ӊBQ{*d3(R[y|LQ~ ۪<%yrVea,%rO}^B~-ߍ8z~h,m{~>4^AKtјxfƃ;ΰ}9jKv|*#}/+LLm^alnѶ  d\ڼzi4ƃTQ͉`V&Da4qMq%xVUbQDWBa[ZdPN]UvPe\N$G#UF -N=p?γRa_ =vBhz:^X%6b_00x)V}-D:ZX:"gR n]\"b>1딒}Y> :kF4}=Q\i4Q|=e?mH[G:! OGpddA7Np6Rsi՜ohtp͚a4pod>|3 Ofb\xZ?C439{WIXtw?x %^ڨ~kwMOR>[JIH kTX1^( 7Y7-̩9!BHji e{oY =Nlm)@=r#b˄&e5w5PΉGӌ/ԣ 0DZ1[z.̀HCkp`Vadj ,:Hu`rd4 d8y`m:m`->'9S*}|U ]ij%A`5L:ϊuj݌T5G |&Ѻ4uqrgx'P%kŭrqn|>&WGBbpض z}Ny(ב$sŸuf0WV~#VE ق5n/pzcj\O hT`oj}@Konڡ6>Zu"yۧ^t-16)1E}Lf {k/>(b**vGniQ~Pիx 4q>t^ؗm&2h!6BĬ&qV{E\_G'0}~,-BRB<&K5Ը.s$J TO<7&+ 5nbGI Odl4?{ hԁw@"M,PpOd3|6ḰHD>7隁g%TΠc4'^{]eX>.%Va+j4ͩ QE,4aXA? WVѡ&_92\gtn'o$yNg{87D; KNGܽniz4u)P3WO>5a(B餏 eRh/뙇X8sGd '7^{ސ^8VCЃr8B ?vCe~D[*?FS$lzp)y5X˸A[mp ]Vly+gT([L-Kb] $ $7ƂokЎ Tm5-7ru+;"PHJ_Jt_Ȫ<;=yHvnCP@ePi tGT1HD$664=TGlQaevvy+Fے b a pDac o Eld73Vk?u#QuߋD> *2 lZY0%\ak=09YMEQhCs2^B$rP{KgZf/Hh!]a: UiBk ^IÑ͢-@ =lV[_ȊY.qk`czCv!U5 ,`@3L {ϗ,,baUKtY}ݏZClJ[Rc D\y#>Q[@" hvj53N^;,i6Q ~H%r??jOykz ({/`R(i_ DŽ=Y@g'ӗݳa'S¹cjl6iRnjĈXDn;{`6fd|bGNQu'!kkQ.UA$/SA/*ZAiv31 q *&01"4JR<''m ]`A!{/5)|qtU}X^}nKK+rtU3AI%w[J!&xҏ^Y{$nA\EN+GR[:KɌ hPJʁ)-5{Y Ξb@B%2jTW?{ECpۦO9lKH?҆J ?I5ޓujG|р{D:ՁAL=\>S"mpsmlrd;)؞ >>rѾi\Pu45n">K>;Ч8zCbZNCoZNiOiٵM67~2ȩ/PN9`ZW(-G .,YA `Y{2_È٪ Ezl]TUsя&z%p \` 'uᭂFثk{)wM:×?1KZXӎұ,xKB rLP#Fghmt욈by;C `\t,+fJsw@^36f{y#s0T i@wӚ&|D%Q(;tcY/ !CabyvjY,s8j2l ճ]LˢY9~fS!sdn6Gxd ZgzƏKĄ"x*bL}1)c],=C9ijfƘB#`IňXlԪ[<*5-. f  NDNE@NuOP4@DL<O2% `9a@R]I3g!@ZOK!Z;"Vfb.swTY9 #^aȬj#I~]:&W.1~Y&ʲ:|:QOmNa~Jw:3:LyJ;Z~%X]U+zn |YCf)q`ՠE|S*LSgC_QH!_#jG$H裄{f]o>.&_7>/9 )$Ŭ:@*FgkZrS} 2b J JiTrNM1c=N({Mq S0/_lK>Z ˇ.sPqD! 14nOd6\rJ߿EA컜ÖB@AOc|9 W2|mhv:; \5{좡;a_tZA<I}wk#,k_2Y@sWrif#PwmC'YYœX1-ue1L4zO{ߑVp3u$ϟ9ȶ*&~.`nXXPsѰH͘hw0 n6JMj> vXeN@IɦH\GEHےGPcB#>Յ_868'mPƆ̊g:,z )vB$?0)P˃VT]1X&$faW/`Nml2#ݜvSS_nw;P"\ذ* Ob) Hv%9*yՍUl1UWk9૘e0bb)k 04#e 1V6L6.k L83-5KjNבdXl; AY pwK-F %W\䣖8cfsUz#83@dk{]L-X?MD CminIFs)4 19BA/x&#NLG>!6=pÂz^0T\|lxD dDJe`RFmx\cz]=jN7ћYτ[6Ar@!DA?7^q};R7}) ATW!0*EpUО"0U ;6cvn@22f#+تd3'!-FoL{1Ym-nCYITs}f i5٪(M6֜v2ř׸jޝh2(,[GF])Nmp6\{c*|>J;g @Cc@"Z?*ut(QA?fnP%m[J|rZa뽁Be6(%vsðA&d5g)JDBmЙqVȫ7M;;Q|ss\EV~W:ʂӫ IpW{`|4 0N.K֚W5jD=1hoFeJߨ#` %$s*^2km] LysUݲ]Ke-& ap2;e D9}w7X~3l%[IwoTzqΣ\hH,ҽ0Z&wnlFhDsFj7=NBnrjs7u`>Vcov1 ZTिD[n^4%1*C؅p 3} "3-K%+:AY|'(}݌w|N!*dMm1L# B.aQWo.{i8 EKdѭƯZ$zh@bZFr*d#"fq Nj3%*|`9lnIEIIA cZxÒَtf-E%ɀ7Q+9 5;-yv!V\.mlIۛywwpH* k d«,˝_a;<8Fd}R(`K1Bh,/fۆF:rD ч$>}Uv)Px?#d˘{aJ XWͨpJcUH[Jf >0K9Gٿ0CmBƒЀ|jwNw+3E g-~=v.+  n9 ̳2H-, EsTF>rB,6hl z^%mIM'E]i7$+G<S;s_zPxh $c;9#3گQzx]I&f$ْQ>~p/g{U'x<@p!/j%Lj}fb*ǁ\&z`$;I6 xAo'MYL͹$\'WF"zYz_^!1LQB+kE8i/n&x5™f"-TN&h<K1֡*"OJ7hK> Pg_.'𩽨i҉Ƿ*KJڃC!iCYuӱO J`g@zG#puMP99ڎZYT-N7mb騢e/zy5+ gg ]foj.Ro=U)3n=|{^.V-v^Bā'P߬DBdC鐔gPX!@%9>P|Tƌ.^x8~f>*-Z iIX6}ZVmPl,)<Bw`=]n8zp^KJL(ękE]uѼn1b Ő+EDCTKQկIBo Lg 2\'KZ]-hAU;_EYȽ.eU!L8W=y3 h*s./ʷmDHf ѢVPV\Lp#GS =G69EK'y?zEDf<2Iu8' B A PzK)w"zĵÏ93iJ̝XY VUf96-ZHl53 sj_hԚ|ȊFS*,!gFОPzNNjV$-V!m`4MXEc\JnE"*xm{S"c_,x.)8wI[kKvߎImfIs]fbTi1dm޴MКԆ7A[jH5-p9ϓC/U?/VxFG-Fkf.[vbVdv]}YPZb4FA7ojKH,|!ң=ŸJFkoBǗ9O9a67.{Eu;'1k17FEC *4l#>sPYUkA Z5z_o4nP \ kh-[F/6Σ>Q ЧQ4V%XJan3htdm@OWnHS~g>؂RF/_RP;E1#t=y,t@a̜ݺۆw7>*,5j{McB#ʁ!K8]hAK(ӄz^9J#9)JLu kG"QYLD+9G@COo?;Ī'lt;cC97}f5A"3NGIՒNٱM`_O-t9 1Ti9ob!Eg<^S~K23 p&˨MT#( 凼^X?Cʅc=xuR#5Ri̵YM|Ld'8(Uf1jE+=y>lq_Ąr )8?FǯM&6%e!FMJ^hyqumhm R,C#2e:]}9"?#D/4)n#e)՟olv#D!F[*MscDua-v),@5_y+6[u!@7 (Eͮ<;,*4̿Uò|ݸ,~\Lhf:_D}MMATFu~QC[@'!{X-`’k3ǰ~`4~$eqrh$ J5eT\vlL'Ud>@`mkaG~+7Hw4T`7erEjA?xӤp"5"NV :86 <=>D}4"A+_Fca!U#t9ܸ.iًfRqr| D-S{uiH/cM#couGoYpDn_6V}} ђJ#Bt꠳x x߱^[evYݓڣCrx'WSr. KblJӈ}}F/ 25ҥcӔ ]J=Zw^* i;A}L si_[M.sz /8>x:y, B,%]Ta` .5vBKN IfS7/e@ YÏ oEuXCRUٌrd&^5>퇛r@Q@ÙSB5t&F7UsSZ iRG0ӛN*3].G%c#nE4ݞx;{˫n y2uY\3o. AoPIVnbPoYoHoc5 RC^JB(/?Yzɇ .$DsBYal,8dLqckF>/Ƃ')c8b{*2%(͘ۂ3dHUvEܛYMlkG?d)Ճ> ؂b.=OcGǕ>Gn&˝,3_%5fQK32fD%Uږg!Kj#Tyf+SSLy]$7=N=rC^?ZE5Mm7t34y^oe&inDr?׈ `9c\I1ߧ@AH>TZ_N] 4#Eœ!u|L=7bDa먙"}ǜ"1宫' m8nVr!LJdk܅lBA<LLW ~Skwf TuodyDSN^Ɛq,q{2Ro Eg0?+jVi*^-U~X248+\ּ$^nf"0'0ә<$bO>kfiZ1*!9I2;Ӛe/%/< AKQQ>QW7푊AvydHFvbݳ]fm-j%4|\B[s5~|U2B#N-U =Jbiӝ4R=P\w8-V>)%13!I K+ Ǥ q??ɾ%b`f?y9AOef [ eH,U (_nIYI$7tZ^uFdq C r#ۚf8yA-qE 7IБ`GnWceh3݋̊UxVp$tI ;EV.8,sJ䙧ydEU1Q9nj.~`F8#N>[JCh1ٮ([`7nJI[[1e-Ǩ'"5bj`q >+]Cĸ\ʗ`jaou7Ai{g:V<"zC'*$Vir/ɽDMsv5SUlHإ.ݢ 6d%|(_0?r.-1'qbq;V+ۜbXgzXяU߫UdجDES.+9# $ӌH :bei@OB\ZPiGC IՀmѦ^Ot+L6Z;[ycF:Bzz&s~Zi9&.r<(`ՎSA\S n*:1Y͖i42 ݌;y3$.9pʻˋ3uשWױ4[N^c@dy'2 5a9tRV'pGk['"gO*QM=z_!=eGR{ms׮BXa/#y Mb*؎zzh*3Z> clūixE@`},k6iֹwj ϲKAD2] f5%Mk!;vGW1$NYS1+|r\QLd(w !XBr.lrlEYNPutO759Sws. `MK) LQqQ9Əs3aLhxNlI6yb7>fBs{֒Tw4 ғT @N@չJ Gb)H8,~:0I-y夿6 ^z;bV>-)t9(zlVo342rw-/L$ A>Й8O t~G$=l_Q3Ne[h+ۖR\ǵX>uS^JS z6ɮo.ZȕX~4D䌦\8"գ;}̓=59|  ʱ5|ܴgjjFoQDžYN4~iQ&P ߃!Tb1azwQ]2]!-XGda2=ı6f82g,3lI•W_3T1[LJ V%!= hxPz3;£vƪ& [3e6+-ZDIIGqTԽ>>&vEO]9؊=j"md*6V29D;tx\B*b73aԙxXxx@*A#-RƐ"v EZ19ĸ?UJ=QcΌo^JhY+ܵTr]Յx 4Sj*#yB3s˝˂\fr[=؉b8" GQ *.$e|y1)9y_P k3e*vM+LD$VdQ 6!M6j@J5 YZ