ipa-hcc-selinux-0.18-1.fc41 >t 6 6_$(,<@ 43!Flض zE>b$bjfŜ b$bjѮ.he N1$I3;qS/X?Q Ԝ}|;fP[pcX;8?XE}d0S)TUr`24ǖȶSv9uW_84ggEGE(Zq( Gliܫ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_&mzq;>`E?e??Ud  @pt & ( 4 L R Xp    ( 8 9 \:=8>9@9 F9G9LH9dI9|X9Y9\9]9^9b:d<#e<(f<-l<0t>>>>??Cipa-hcc-selinux0.181.fc41SELinux policy for ipa-hcc-serverCustom SELinux policy module for ipa-hcc-serverfνbuildvm-ppc64le-14.iad2.fedoraproject.orgFedora ProjectFedora ProjectGPL-3.0-or-laterFedora ProjectUnspecifiedhttps://github.com/podengo-project/ipa-hcclinuxnoarch if /usr/sbin/selinuxenabled; then if [ -e /etc/selinux/config ]; then . /etc/selinux/config fi _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if [ "${SELINUXTYPE}" = "${_policytype}" ]; then [ -f /var/lib/rpm-state/file_contexts.pre ] || cp -f /etc/selinux/${SELINUXTYPE}/contexts/files/file_contexts /var/lib/rpm-state/file_contexts.pre fi fi if [ -e /etc/selinux/config ]; then . /etc/selinux/config fi _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if [ "${SELINUXTYPE}" = "${_policytype}" ]; then /usr/bin/rm -rf /var/lib/selinux/${_policytype}/active/modules/400/extra_varrun || : /usr/sbin/semodule -n -s ${_policytype} -X 200 -i /usr/share/selinux/packages/targeted/ipa-hcc.pp.bz2 || : /usr/sbin/selinuxenabled && /usr/sbin/load_policy || : /usr/libexec/selinux/varrun-convert.sh ${_policytype} || : fiif [ $1 -eq 0 ]; then if [ -e /etc/selinux/config ]; then . /etc/selinux/config fi _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if [ $1 -eq 0 ]; then if [ "${SELINUXTYPE}" = "${_policytype}" ]; then /usr/bin/rm -rf /var/lib/selinux/${_policytype}/active/modules/400/extra_varrun || : /usr/sbin/semodule -n -X 200 -s ${_policytype} -r ipa-hcc &> /dev/null || : /usr/sbin/selinuxenabled && /usr/sbin/load_policy || : /usr/libexec/selinux/varrun-convert.sh ${_policytype} || : fi fi fi'_K)bA큤A큤ff{f{ff{f94fc60c37a254bedf2a580831e8e8f11a9a3558f533c3fbbdfa7a415f4031fda1ccd7df80136f26c5df5a81921dfbcb597d4ad4ae8792a8421cdb0b8e9d3272e8ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b9032345afc83ba4826c2bcc76e5b4b49c1d80de825c2816d5223d1a61f74ba18033rootrootrootrootrootrootrootrootrootrootrootrootipa-hcc-0.18-1.fc41.src.rpmipa-hcc-selinux      /bin/sh/bin/sh/bin/sh/bin/shrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsZstd)selinux-policy-targetedselinux-policy-targeted3.0.4-14.6.0-14.0-15.4.18-136.16-136.16-14.19.92fV@fffff9@f @ee~@eod@d@ddd?d$(@d@c@ccۥcccFraser Tweedale 0.18-1Fedora Release Engineering - 0.17-4Python Maint - 0.17-3Christian Heimes 0.17-2Christian Heimes 0.17-1Christian Heimes 0.16-1Christian Heimes 0.15-1Christian Heimes 0.14-1Christian Heimes 0.13-1Christian Heimes 0.12-1Christian Heimes 0.11-1Christian Heimes 0.10-1Christian Heimes 0.9-1Christian Heimes 0.8-1Christian Heimes 0.7-1Christian Heimes 0.6-1Christian Heimes 0.5-1Christian Heimes 0.4-1Christian Heimes 0.3-1Christian Heimes 0.2-1Christian Heimes 0.1-1- test: use RHEL with golang 1.21 for backend vm - test: fix idm-domains-backend-deploy after RBAC changes - chore: supress mypy errors in generated stubs - fix(HMS-4323): print hcc reponse headers in debug - fix(HMS-4323): print request-id header on auto_enrollment error - fix(HMS-4128): build container - fix: Generic proxy case, formatting - test: explicitely disable ipa-hcc-auto-enrollment in hmsidm-rhel93 - test: print enrollment logs before tests - ci: fix artifacts upload - ci: make job metadata collect/teardown more robust - feat(HMS-4049): enable ipa-hcc-auto-enrollment.service via preset - fix: proxy mapping for stage - Use sysusers to create system users - Tests: Fix eslint and RHEL 8 enrollment problems- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild- Rebuilt for Python 3.13- ipa-hcc-client depends on ipa-client again- Don't install /etc/ipa/hcc.conf by default - Refactor: Client scripts now use hccplatform - refactor: Move all server code to ipahcc.server - Feat: Server features detect Console from rhsm.conf - feat: SELinux policy for ipa-hcc-server - Fix EPEL 8 build- HMS-3840 feat: Detect configuration from rhsm.conf - ipahcc-stage-console now configures proxy - HMS-3821 feat: auto enrollment can set DNS resolver - More Fedora packaging fixes - Implement testing with Stage Console APIs - Implement console proxy settings- add CONTRIBUTING.md guidelines - Fedora packaging fixes- Prepare ipa-hcc for Fedora packaging - infra: Add helper for stage console testing - Fix: pylint warning R1737 - Fix: Typo in ipa-hcc-auto-enrollment sysconfig - Fix various infra issues - fix HMS-2066: Add timeout to confirmation prompt - test: Test on RHEL 9.3 / 8.9- feat: Enhance reporting and logging - feat: Check remote status with HCC - refactor: Use context="hcc" in IPA API - infra: Log JSON error information - infra: Refresh cache and config file - fix: Use LDAP for public JWKs - refactor: Run ipa-client-automount - fix: Replace legacy with modern Insights API - fix: Limit hostname to 63 characters - fix: Use UEP CA to access prod cert-api - fix: Don't create global DNSResolver - feat: Add ipahcc-client-prepare - fix: Fake headers can use org_id/cn from RHSM cert - refactor: Change to --idmsvc-api-url - HMS-2348 feat: Add ephemeral fake header to auto-enrollment - test: Run CI on Fedora 39, drop 37 - fix: Better error reporting for missing RHSM cert - fix: Fix typo fdqn -> fqdn - Fix: Keycloak SSO provider requires openid scope - doc: Add test instructions and hcc.conf info - HMS-2814 feat: IPA client installer and automount - test: idm-ci now requires local cloud auth - feat: Add sso.rh.c IdP provider definitions - HMS-2694 fix: Update JWST issuer and docs - HMS-2595 feat: Extend ipa-hcc to retrieve+store JWKs - test: Fix and improve coverage - fix: Update spec file URL - fix: Update git repo URL - HMS-2594: IPA plugin for HCC JWKs - test: Do not install KRA - HMS-2532 fix: attach to api commit - HMS-2491 test: Enable backend tests again - HMS-2491 test: Allow backend test to fail - HMS-2491 refactor: Separate GET signing keys - HMS-2491 test: Update test infra for DRT - HMS-2491 feat: Remove old domain registration - HMS-2491 feat: Update for domain token workflow - refactor: Remove env patching - HMS-2446 feat: New domain reg token - fix: Use gssproxy client keytab - HMS-2446 refactor: Move IPA API to WSGI framework - tests: Add test for deserialize() - tests: Check that serializing compact form gives a ValueError - feat: Add additional check json deserialization and update docs - feat: Rename deserialize_json to deserialize - feat: Do not allow compact serialization for MultiJWST - test: Enable mypy checker for tests - feat: Add domain token to mockapi - test: Run CI with Fedora 37 and 38 - HMS-2070 feat: Remove D-Bus service- fix: use new Quay org for CI images - HMS-1789 tests: use @podengo/ipa-hcc COPR - fix: Support latest tox on Fedora 38 - fix: Allow non-compact JWT serialization - fix: use OpenAPI from public GitHub repo - test: Build SRPM and RPMs on GHA - test: update packages in containers - fix: Don't hard-code inventory url - doc: Add documentation for developers - HMS-2195: fix: Use idmsvc as API slug - feat: update locations - fix: Fix typo in automember rule - HMS-2147 fix: use HostConfIpa schema in HostConfResponse - refactor: Use setuptools to install Python code - fix: store public JWK in separate file - HMS-1857 feat: signed assertion for host registration - HMS-1857 feat: Add multi-sig and host token - HMS-1289 fix: Remove inventory_id from HostConfResponse - HMS-1857 feat: Add JWK abstraction and helpers - feat: Update JSON schema from latest OpenAPI - HMS-2038 test: Smoke tests with idm-domains-backend - HMS-2068: Drop support for RHEL without PKINIT- HMS-2052 build: Use OpenAPI schema from idm-domains-api - HMS-2038 test: catch metadata misconfiguration early - fix: Move rpkg output out of .tox directory - HMS-2041 fix: Represent org id as string, not int - HMS-2038 test: Improve testing with backend compose - HMS-1991 fix: Tighten OpenAPI schema - HMS-2008 feat: Adopt JSON API error objects - Add definitions for missing JSON schemas - HMS-1991 feat: Generate schema JSON files from OpenAPI - HMS-1991: Refactor JSON schema - Add project and build definitions to pyproject.toml - HMS-1898: Fix and validate error response - HMS-1975: Remove check-host API endpoint - Improve CI and test with Python 3.9 (RHEL 9) - register: prompt for confirmation - HMS-1926: Friendly D-Bus error message - ipa-hcc CLI: print human-readable messages - Document how to configure for ephemeral - logging: pretty print API response - Reconcile JSON schema with idm-domains-backend OpenAPI - Add verbose logging to ipa-hcc - Prepare release 0.11 - Ephemeral env support with fake headers - Improve Makefile and tox runner - yamllint: don't apply truthy test to map keys - Rename field 'cacerts' to 'ca_certs' - Reconcile domain response schema - Reconcile register/update domain schema - Document how to install build and test deps - HMS-1898 Reconcile error result schema - Ruff: silence F811 redefined-while-unused- [HMS-1788] Add simple GH CI workflow - [HMS-1779] Move secrets and settings to CI/CD variables - [HMS-1645] Replace bandit/flake8 with ruff linter - Add infrastructure for mypy type checks - [HMS-1645] Drop IPA 4.6 compatibility workarounds - [HMS-1645] Drop Python 2 compatibility - Run integration tests in FIPS mode - [HMS-1645] Drop support for RHEL 7- Last version with RHEL 7 / Python 2.7 support - [HMS-1607] Use inventory_id in API routes - [HMS-1607] Move common WSGI code into module - Include os-release id and version in HTTP header - [HMS-1479] Implement status check - Drop bundle file, add more ipaserver tests - Detect and block auto-enrollment with FQDN localhost - [HMS-1472] Switch from admintool to D-Bus CLI - Add tests for dbus service, fix hccapi - Move cert parsing into common function - Validate insights registration state- Fold common and registration-service into ipa-hcc-server - Default to stage - Add title and description to JSON schema - Use D-Bus service and simplify config - Download PKINIT chain from registration service - Add mock tests for mockapi service, refactor code - [HMS-1485] Add --location to auto-enrollment script - Verify with pylint and fix violations - Use server role to indicate presence of ipa-hcc plugin - [HMS-1485] Add IPA location information to domain - Add D-Bus service for checking host in HBI - [HMS-1475] Add tests for registration WSGI server - [HMS-1475] Refactor and test auto enrollment client - Test with RHEL 7.9 server - Remove dependency on requests - Rename smid -> rhsm_id, drop redundant rhsm_id from body - Move API handler in separate module, add JSON schema- Fix config_mod(hcc_update_server_server) API call - Improve idm-ci - Refactor project structure - Add timeout option - Remove unused cert info and detect_environment - Split ipa_hcc_cli into CLI interface and logic - Add systemd timer service - Add global hccDomainId, use domain_id in PUT request - Add HCC update role and register/update subcommands - Add ipa-hcc to register/update domain with HCC - Update rhsm_id in server's host entry - - Add server role for HCC enrollment service - Fix deployment and rhc connect in stage environment - Test on RHEL 9.2, 8.8 - Add mockapi with test API endpoints- Add metadata to deploy with local builds - build and deploy RPMs from current checkout - Add QEW test and metadata file - Add idm-ci playbook and metadata - Add tox CI with custom image - Fix stage env support - Add 1minutetip and virt-builder scripts - More validation of PKINIT options - Write custom krb5.conf, handle missing domain better, more arg checks - Drop 'not krbprincipalkey' check for testing - Mention SHA-1 PKINIT issue on old RHEL 7 and 8.6 servers- Fallback to kinit with PKINIT + ipa-getkeytab on systems without PKINIT support ipa-client-install - Add support for IPA 4.6 on RHEL 7 with Python 2.7 and mod_nss - Handle platform-python on RHEL 8 - Sleep longer - Relax dependency on SELinux - Move keytab installation into auto enrollment - Basic tests for WSGI - Move /etc/ipa/hcc dir to registration-service RPM - Move scripts into ipaclient.hcc package- Detect stage/prod from rhsm.conf - Move refresh_token to /etc/ipa/hcc/refresh_token - Move more configuration into hccplatform - Remove keytab file on error - Add service with force=True option - Update permissions before adding privileges - Use ipa-ldap-updater instead of slow ipa-server-upgrade - Split server plugin and registration service updates- Rename package to ipa-hcc - Replace term 'consoleDot' with 'Hybrid Cloud Console'- Update CA chain to official RH certs with new SHA-256 Candlepin cert - Wait until host appears in ConsoleDot inventory - Always disconnect to get a fresh Kerberos ticket and connection - Add ipa-consoledot-consoledot.service - Remove old test data- Handle outdated keytab, autoconfig org id - Remove pkinit_anchors line on uninstall - Workaround for missing IdM features - Fix spec file dependencies - Automate ipa-getkeytab with update plugin - Move some files around, automate service and keytab - Update spec, add KRB5 snippet with anchors - Use more persistent connections - Add caching and logging to WSGI app - Add link from search facet to consoleDot inventory - Lookup host in consoleDot inventory - Regenerate certs with C=US instead of CN=US - Return shell script with certs - Add cross-signed certs - Add script to generate cross-signed Candlepin CA - Update README with more instructions - Require known CA issuer - Add WSGI service, roles, and cert mapping - Add test scripts - Add notes about cache and certmap-match - Add test data and instructions - Fix error reporting when global org id is missing - Use lower number for updates/schema so we can use 89 for test data - explain unique index - Add write permission - Add enrolled hosts to a hostgroup/bin/sh/bin/sh/bin/shbuildvm-ppc64le-14.iad2.fedoraproject.org 17248249600.18-1.fc41ipa-hcc-selinuxCONTRIBUTORS.txtREADME.mdipa-hcc-selinuxCOPYINGipa-hcc.pp.bz2/usr/share/doc//usr/share/doc/ipa-hcc-selinux//usr/share/licenses//usr/share/licenses/ipa-hcc-selinux//usr/share/selinux/packages/targeted/-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Wno-complain-wrong-lang -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mcpu=power8 -mtune=power8 -fasynchronous-unwind-tables -fstack-clash-protectioncpiozstd19noarch-redhat-linux-gnudirectoryASCII textv$ 0}Wp* if [ -e /etc/selinux/config ]; then . /etc/selinux/config fi _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if /usr/sbin/selinuxenabled && [ "${SELINUXTYPE}" = "${_policytype}" ]; then if [ -f /var/lib/rpm-state/file_contexts.pre ]; then /usr/sbin/fixfiles -C /var/lib/rpm-state/file_contexts.pre restore &> /dev/null rm -f /var/lib/rpm-state/file_contexts.pre fi fi /usr/sbin/restorecon -R /var/cache/ipa-hcc || : # with selinux/bin/shhttps://bugz.fedoraproject.org/ipa-hccutf-871ea7556a7a2210b3c74f23ec235ba5e768dd72a91e477942cf6a6ea0c01742d1361dab742b9c6b74b18cfab6e7431e77fc29a003170c64f7251c695025f37d2?(/ht-7bMZaX$9W&E~t[GTS;dfND}mLQs,\\ao,n>ѣ4+0o=%W/!.|=Vo&%7 #F-3!ֿtI3}]LV3. (Bh.Gz$7ӕF7ջqF2JmJtF7(=-_n\{:4V֪RVRllS=zٌo~w~ogK?NCPQ\ks}0W6(ֿ>/_{֕m ߮YIR jfcaxD_g8׋t_~;J#^Zh~U zھkc]l}Vzk[rT^zumdEm;ind4d< NŊDLE!LPՓp,?$vB pBH?"}~7 8=**AMTKWGH8+6ݷBϬZ.*EZ8hQ mLrDb/A!4tv)N[m=(FņF "\&AFW#(1 +Q(Hń`Q e)#0呯S= E"j"8I*& L8=V%* 6WU͛|E58o-!Ӿ^>ӣe3nQJlD|X{"8 ٤¶YV&a{&Da!yt@Pq"zuYDlj )\Fh4_ K1&k\돷L1Ef_@(P-JPl=zEgEɾ'p G(_.L$h <[pf\S=6|"LNddډkhu wpT=MMBz 2\jw7bTqu( `čMʪ0@.Xu*`^k KYC-cpwBnUUɇ?TU2`\66^ C.lŭ|] ǛMZ^F7ScH㭫CՐrl|NqĒ.߲ yp_`do]^LpʄbU%|g=wѶ| R04>L88zg@.0M9uL_&BL-:Vs_cbO/:Ĕlp˄aE پAO]MT|ogk}_5=f%y:KL=wd.6B# }{7(BRl X_GOeߣ;i ۛRept_Jv˫(iF d/ȹH[l:s|~SxK ؠ*'q9!2'A$>ÛS-1q&X'(qmIûāȟ/LSd^0۳:W[ 'IcJ'<2_-rQ5rb0eS&d{ st2{&`HrЯzH" #sԻt_;҈oh8ʿ#prɿҮJau ~7M!qP Vn-]$bI$#2_pB @HĔHxuٔ0@5fE.;HZk)$e xVK?a^~&8?^nuVʹ̟!I7TvAl'wtܱE"F'H`(yG mrssJZM"I_RNz}nz*p$PAZASÀ}R *E LT)Ei-9IղM#sk3K %^^4cQ7nVkvV1ڈ 'ʐlx)ϯDb#8_;1Si͡%t%hg)q 2g)׋ -t01JH23r'4TctHԻmrA:@TEr\/R@f/G ]p %r/Y = L*aE({kLn EuX|FZV&E8m!y#Y}Goh!*r46dbk\aP.[px F_e?€LUPǁO2ᵼB 0+1 OFV#Kao%hKw')=$6rb-VF:Χ}oN pՖf'-ndOYcOIH'rmVl ÒyCMRyMp^/J!{W:I[N%N.#Zl6JerBGi=MuCox!Ɦd@:;N#ݲ?;!N<u"b c䄞)U1͚IR>.:Q۱F8K%$eũ1 bLmE/sl+L1\54@!ש-%X PޥqP,d'8cu|Qznk7hDZb$/ DV n4ssZƵw0 hsP6_]QN46գۡY3c|>O -lC0[r9rڤ'oc0=KJ [:՟ž#9y+6`-N^$cYuO~uR-I;!8AVE4>Qg4sdG~tEѶ-TX3y+hݣ7r*]F`si*i;{?,?(nsNU,4 㗸x$ d\DeoGsmsBy42X&mTPC22J~'qa\ \"#Hl21 @X@rGu\M3T~d "y$,Ԧa[ \/se{e |YP}ve v`blp ߬I4}/ôqIHO <9(9u!ns`/tV?M-dN|iBw[Fx{ŠVgd&1&VJTxI(¶YGƴ,٧[F0\ׂAF?Q}G3l`M!SƶBowBgTW|]AS ! ԙ2rGn&7Zc&"-Rv_&" p:/_ h4P5)`-ƤN4hi`7$ވ -YݦI1a7AϮ!&Vfj\íͧ ‰JCc!dW(!FdrY̓|%.Y8 <#]]T*΀sD`ccn2d |DG]4RuCXlGE~VG2P|/+R^m^DJ!Ν kvtuB?lSI~h|8^=Q }.z% WW86sŸ1_7MCU(mbx됇B, 킊 4=٦q-D1]n.[G'ADsDvQ 9Ӹ3*!!"~n3f&..G|B[UsTO`/B&?)[O @?DAH9 5/sC/l9!u w0˝O%~임Abݟmqr .{*ݴ/-!))G2 OrȆNc@Q24F+ x.:vmK KY0HaF-ՊFoX"QuBsB;weIg p=0*qzE,i@9H|5E1~X`yN+̄~5(BGry`3;ubģ5Zoݛ+50JO & 8=[&ɹ!̄+QM@A_vUb'906'=d&Rw:+jlMb1Kw`DIɋ s1:r=-[tNdіv:])|w7d/rU=*o N;.ReKw-58\Tr\xoPHtx!p:j87ñY NeD{f`c%HarXdYӿ!G<Bqik(V0d6G^z5F4ĞJ&SA*R$s1aFH/#BQS/#P Yܗ_94Dd׹Q*=] tљU ygؼր2W_1J Ѕv+?J_܋ JAZdF2Wx?(ٰP ?Yc"O ~+?H0Qh# J چ6cz ]YwF kyp-bBOs |[Ѽ&VJH[t KlgXn얔E)qE |B=+x XdbhjPC}x8(B?ΨEۣԽַRR k<~eD(ADIV+ͨ8kW~mww #-  voMx);<_/ MiR siS7Va" X2x)o7uZoo.gy8tI`qXqwċ+^ hRBqVb{ = c ay:R~Ȇ\"W,X;կI{ i)FtBpyx2?L&Bq1o$ rDoU \ MxZQE""?:XhnK\2FQ 8{t!tiFb"U[)nH!g5prLRhnH_l]kKDff=˧뚝6z9~M!,τ4HvM& V[3ƐT$F#ҎMZy>U1]#HDL{e  r'c]^nI[8 ݢB,BoF{HPkO}ޛ\NwM|x7, dU<5Po@҉xBXʋX/NOff]Mz'mn2-=F$7[Dά5]<+\BqHiL-xݶ$4,vyE:&Z]i;3PG6osnc M|PTC'&gA|9b:u# 2Y?!EzljO`j$t?[#e4/wl#-,(C` T]Hd=jCk1ʲLHxQ⌔i<_ dxUX@iL&p"?"'b0Ep|YFu F+;,""$gQwbLόSLɥ1J V P:}#wF:٤b6(31$gi{9%$&H0 ٙJЁ߫}u95_ǖB:4g&}IG@9I8H,Ho,w'IBݟ XoWR<5g!-¦Ӳ k6vzn03\$vɛW@;NKP+!pS?}`XZ18`?'/x|{aޙNЫ譅Kү+,ÓSℶTywo٩\D х˾u툤5yٌ\(Ve{}-ys/l/ar5"&L; b[cM^ kgjkD{PE,@e2aʩ*:Pr8*{Nv̟~ݨ<[bC4b ۽37"ёVYHfqpn+Jf]Y" MS@G陥z*Miw n1bgJA1 CXey0Yr|*hO-RqL5 즑ʦZfFb~wPf? dZ,"0L}>Fl{1:òN0j{0O-Qg+[ LfԘD}.Q ꜈M~8y[f(ch"s<QT|,un;9 mi%hd&i3J I]A#UW0]( v`_YX@ .s~v齅먵Gn2;S|߀#3(/x r8I]ŨؔXvjmϳO?=Zc}d}ﭞrS{(?fr]_2<2DZP(*RQ4ҨyC0_ Orbi5|qąo{$_.U,SW7W8h+ФtmH.[53 q?It%˫֭5NiY>&l3,kއvIK,6r536( f3UR)&ً¨^lҡ="IQ 8~"#RlrӞaj#3@ 8o8X))+$M:ʋзrKB/I#+B J.䅽$<\3pܨr>Auڎ>lv)eve>wT`}a|,ϟ ͶnFf`&sP`5( JgvM|<Wqo%vJ>T´NQន85'$X\79 )Q/2w/#tg`e(iy[[au!/'/Qͺ]OacXGk}F5 ATY8pv;y LZDqk~ ^~VoH!>#cs<|k# D:H&ȑ!?wBֿ w ?.ufKi%*nl*VЉ$+ M1ij:&|LaiNۙd1,JdiFP%sET-j2b^4#QbGb *$rXbxRaZ)e}<$,8`[D3 X,PYSLc5~b >Għ#"HtaM(2/)4i?{2yƙsjq-4ѰcPjxXpQ2}\;M>zư{( 菡ASs!h}1}ˏuN2N}*42`FC,}V\ S`k)VQ1= K4o(OjӁ敺gyX?CS ̥֙V>M )c[Ogf4߆ 鳐1 6BI@3=S8BeR0Kuݦ6sXUU2oG+(Kڜ}&N GV,;ߙҼ@C7٣#<T*x?Oli ?}kjMb`ݘhǗHn UA'k2'"-#C R)<O2Sa =d8 rqF-jREt'hTWm.f|D8ѫid[ȱ>4Bmu.JAS)!O9G1!Nn:a,A9I)x\N mJ&Q]d>èb&2 %a(~X81 h# ɈH*r6z7/MVh)S 8օ;8٧(mdˁŲ`11lu& s,EԦTƪa`6xbEzϬyX{B&H˷߁2_@*ng#UdΗdOz!}:ҠG vDo&JQqEM+ C7ZtԔȿlh~ZJ.zY֩?ЉKL;&*$mA岘DV~Z?Ibci P4l+;UW[IYΥe;N~/ 909htِiO`܁n53z3` mnҎae}8~L߱2ZAx l$9hQ\Ԫ$:2R:"֘@9:cD޴村Y].MM@JA}92$_v1$Zr2>",.C) }T[8>}BThCݓ5#>d(PX #i!>8#HO kТp)V9pXLkٖT!*Jڼ\{yH vj6y0Q6Z9~=ȻsZ-@ VDGB@nҿK6qW aN`++U M$\ņ,EYEGoكe/:NmTZ\(@1*`$B_IhHҳ=S gl(:;qٲtBz @1ڔ^fAG AM3`dcЩ AeV+1nm]{$Gt:'/4>F(L|$诺~$[@"%25( Q+_펺%1_:Y*EpLZj+p ; -"*!uZ4w~ +&U֋OI "`9_aN%vJ*0  p_k__(Q(@)ɪEUn ~=RKa^d~tL=}cQ_!='љvW)G 6lbmP2}{={_s^bVk ]%{X\=8°4!R6bٴpA:gIɺr.1UZUnL@WqoU&^ƨN2߿x;e18;3Ы.WmP]oD9]8Վ7nDrƬ02I` N*.,Dd?(̣KÄYw5[z> +]8x\߬_m΃k={԰5jT}]I79IC,BF.VT4ȿINK4mfFusδb&e!QV1y|:s{wx'3r6КűM&WwF KQ"TB? "fE0J{ؑj/i #y^VPa?:: ;vNݖ`~nB9}8X&6}ߖYf`4pTW3 PX& vj7SUK%;qkk住WHgpZ<݊w%v`+]6^Ϻ-AjSKrko+-Lf&c4G$`2`٦Q ^9~3( ɒj d `?b&IRH{1 SѤtIRPg'˶}iHLrrA9Zt1I`&*͔B.m /vvͶär?&OC/'#mx ߠ-aK*5pwboHBYL=Ml8c¶?_@jB&f@ b.>x&Pe[K{h_p U]]Fi;[* 8jZqF pWXݘO!GQ}K KEy\pl_#ıJbG@i I#MzQл0qz pv 4ia 0 0N->ZI1=f 7Lv2![dZl'fTD,x([0'ߥpo9aD°'D"ypmw 1ê':^4C,_#ܢfao%L: LZ~]ˡ*TՍO\ĉX!]O* 4\?k .Ĕpᑅi?ny5+ ӓ[M刏Pɘ&7!gD>u"%﷊aA޾+ahT* 0Ny_z#eqV !=mIf)dad=ƫcF&^ς"N"F;ND)Ba 59->{~u FLle9Kǹ e-FQK5J-DrFpbjOx@zA=ݔ'IJf]6 hAgaGZkI}zK&? -}V:Ò۟d{Pm|bK$ HDdՂRɘJ!ԣDX%#w4APՠ': J{ LϔeFyє|>X;*бNНFx4*NgL-X\9<8]EayUf3y!G_+D>HP'1NR7i H C c)Pd&Bh J ~0xUBrQ 9exǝUP7`U>0Oy6 o&La LP 1{͆&&ɋ"eW{ TAqhF fO݅)@Lv>1 }<1tkfPoOm+5Di"F ngri,Lreadrphilosophy/why--lgpl.html629623/t.pp.bz2BZh91AY&SY9|=n@r0 X;@ОbD!@(*   4TH`iQ ҞiL4~010F14 3TT(2Lb2hdL@4ѡD2OP  hЌ@B*#ȚS4Ʀ@bhM dF@1 2h  = ڀ &i  !<$~fiz&# P44iӲ|Sgfg883;l<, #0s7هyw;$h!+H@h M$\؝X ߆F`vI%=6OaI!J`Zvr.hy^{Yu<ߎ^|+ðs~'`{o+`|3C^`_WgwI|'|F}?TW}f6}_t~O)|ofgtI}FWc6msGXbw?yLWeg5fso9 Ai6QN5~]qWZ[!ap+Hv $7ҀxDH񵄣K/ +G{k+b //Fv¯e 9'{8gzЊn~/9zX4.LD؄wB-D 7”^Xk@! 2} <2@Q)|r*t›HHĴٷ7i#}@H܊dg+~cաb9c@cP8]^_cnAH@BYf|׾ ;Axg5dsA`ˆ@?~3,o,#CE *XK2՚M$l*В tS *IlNX*Q *"ʱVВԕ-*! )pTBK\ '01BJT W$ei1$!ǝw#F== fOY-tueE-%5E?iOoحZjZNMOOFgGBz=n]V ;ai_765GAm3 W4}ܸ+03Y Er嶋:S.3SpZsy%m6MiM4ӻ1i{cDа(;Ma4Nf4t3MBK@upnGـl|mۗz~{(%JMf BP%f`&'2-uG@F<% -JIY ZOޡ\e,^#|~4}e5wd%脗b03\-. '݊77BI=' %`jBrbcf ^9|mN)8//;\brϥu{Ia.@q ZQ  !%Vjߚ ܻ8\//D׉ .BMv[cG.$<7r=脓t^06;GwǠ޼zL99qs`2<75 axW ; SE6>m}DSt gfxN:tӧH٤A72ʢʀwh= U*Ҳ"(R M|s>w}G=o[=߅USUt-4  Uʮe2f)PQTLTvtmE%ž2QS2eUOiUWWVBaBFBE !$$3g DB(+Z{mǺ71KZ6,fc]'զN $P1Mw_;F'U&bSey Y\W@rOyc49foc7ifb M1I&b c歒ӵi4)Ǐmbf&clHFy; @ @ e*b@1 rqbɻlD:$ZN".˶bux&0>f7Yj6NHhg9U#13v9 +Qu5%\}koҋ ", *D3@JF233D@g݇[;8¨d@ЉBG r;XH oC7:`9fOZq\w0];YYXp/@1`+w01O9 L?E.qQ`ÁaveYk)DPڻ`y^ 03duBKsx]}#BIffͮBl| l 5i6żxI$3 xMkZDkߵ~/RB LrC#OR_<ҨAIys3Mg)A>=瀲Zo霷ZkLHq-M/Ӧ<%gsS۞M? t}U@o9WXܻ6,tÛ4ǵ LB{7A6"em)y2_6Nf22 dnuK/7x=hj#Z{Mq*37UeB}WG'wk5u}fF%k"gy|/ogyDsOqUj`^ӌjQg9!Yɉ|+g.mSn8Vf𨹬.6U7D(՛j^q)NQJNxb@}#_ .@rP%N]%։zO@:qӱjZw8+9Rh@x_B_{M ')9 (BKBJ3/1p& :y5 tD4qcz(7Tb& 3~ hI=1$Q=BZqn̆59.#."h+ƊMdIT%r@'>IƐr" p իRpl]/Cz2s%>аa*B葺m%(̉&Dg `n vk X~ywnⰘqV1=ڥZQHѶ_ّ|d}Q򟷶<{"N~d--kti&8K[yBw8\=ۻdKxN+Wlr^z1w73]T9%siD7cMr#sR9T\5ʫ F6X *Pj3`ScƸpX ǘj5Xǃ ˶#ZE`0,BVv<~#|U[TNo wUL7%'lYɋ̉چo[3g]>ySwT󹻄vS꩘[98d{G ɼ#}t̪QH ʡ5 ̻Fn@62rA0.e ev/ #Qc׶S eu<ƈO8v⼒9SnMBCoYa*b5޵jdl j%1.6 I${% qsxjt0@0'(M1=y~owo\wz{Sgk9ɵ.s<}O6p!ٙQs@d=̩o߂X]c]7|TEI]c}QkfPdUXj5X]G i0deSi$.e5 ,e0GS^(()߁aE1Kvm|)ӡDMcGvt38Arq33HLL:V`WLtヌ8Μq!88;X;M4O tf461 '9)2'{ζ.jw} ,uxFjr(5fIkg_+"d= @TdPTI696C4s`AC!Ld DGLddc[U}=d>LĤMKAI`e1LrX 2:&+mv|fTʟ +r-m`W},mLK9KYLהi;޼ľxn]+z-yab.7q1统*-[IrԔPebY7NkL#ŃkRoA"n*  ڴ X# \ mxٚ eK;p:\ˮ v͍DI5mK6%l̞h@@0 {t6f))E0:f,ކGdaŜАc؄,խ5n]B uPHkbH "IbQ RZ˛R 457o̪  HBmoRgX%JE)B^i ͶT-@AA2mΏ)J8K 0 ,1[U.5 @`%@E&J\^Juaǹep$ 56-;2}@ipjs*`3.@I%Z hI-i10!/3͡ ᱰ,$րsrq3% 8R@aP&IUEYH̥-pMPZ pWO$S2H>?`n;i 2JCLzm1^;a޵Iھ}9.O0S`z宛[r/Fx)ᢼ7S +;tl ~~[[7"6CY)dJ"!5;1>ύO'V>FoӘ+chvbGȣ yd"3wAyF'\g+yO [N6͚dNP%Fxϰv=DuըI1 !Y vn:EbS_ %GA-2چ B3aW nNET̆w% :76&,!oI 7Im=̫