ipa-hcc-selinux-0.17-4.fc41 >t 6 6_(,0@D 03!Flض zE>b$bjftk b$bj-zu#"T *&t`yrVtɄr6Iͻ奔ލ_CmLRȥޟ^sIx, d9m5Ktx"J%gjRK;96&˽1E ;#A[[7>A , Ֆ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 jNf>`E<?<}d  @pt " $ 0 H N Tl    ( 8 9 T: =5>5@6F6G6@H6XI6pX6xY6|\6]6^6b7d9Ie9Nf9Sl9Vt9pu9v9z99;;;;;<8<<Cipa-hcc-selinux0.174.fc41SELinux policy for ipa-hcc-serverCustom SELinux policy module for ipa-hcc-serverffbuildvm-a64-31.iad2.fedoraproject.orgFedora ProjectFedora ProjectGPL-3.0-or-laterFedora ProjectUnspecifiedhttps://github.com/podengo-project/ipa-hcclinuxnoarch if /usr/sbin/selinuxenabled; then if [ -e /etc/selinux/config ]; then . /etc/selinux/config fi _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if [ "${SELINUXTYPE}" = "${_policytype}" ]; then [ -f /var/lib/rpm-state/file_contexts.pre ] || cp -f /etc/selinux/${SELINUXTYPE}/contexts/files/file_contexts /var/lib/rpm-state/file_contexts.pre fi fi if [ -e /etc/selinux/config ]; then . /etc/selinux/config fi _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if [ "${SELINUXTYPE}" = "${_policytype}" ]; then /usr/bin/rm -rf /var/lib/selinux/${_policytype}/active/modules/400/extra_varrun || : /usr/sbin/semodule -n -s ${_policytype} -X 200 -i /usr/share/selinux/packages/targeted/ipa-hcc.pp.bz2 || : /usr/sbin/selinuxenabled && /usr/sbin/load_policy || : /usr/libexec/selinux/varrun-convert.sh ${_policytype} || : fiif [ $1 -eq 0 ]; then if [ -e /etc/selinux/config ]; then . /etc/selinux/config fi _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if [ $1 -eq 0 ]; then if [ "${SELINUXTYPE}" = "${_policytype}" ]; then /usr/bin/rm -rf /var/lib/selinux/${_policytype}/active/modules/400/extra_varrun || : /usr/sbin/semodule -n -X 200 -s ${_policytype} -r ipa-hcc &> /dev/null || : /usr/sbin/selinuxenabled && /usr/sbin/load_policy || : /usr/libexec/selinux/varrun-convert.sh ${_policytype} || : fi fi fi'_K)bA큤A큤f[fff[ff[94fc60c37a254bedf2a580831e8e8f11a9a3558f533c3fbbdfa7a415f4031fda1ccd7df80136f26c5df5a81921dfbcb597d4ad4ae8792a8421cdb0b8e9d3272e8ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b9032345afc83ba4826c2bcc76e5b4b49c1d80de825c2816d5223d1a61f74ba18033rootrootrootrootrootrootrootrootrootrootrootrootipa-hcc-0.17-4.fc41.src.rpmipa-hcc-selinux      /bin/sh/bin/sh/bin/sh/bin/shrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsZstd)selinux-policy-targetedselinux-policy-targeted3.0.4-14.6.0-14.0-15.4.18-136.16-136.16-14.19.92fffff9@f @ee~@eod@d@ddd?d$(@d@c@ccۥcccFedora Release Engineering - 0.17-4Python Maint - 0.17-3Christian Heimes 0.17-2Christian Heimes 0.17-1Christian Heimes 0.16-1Christian Heimes 0.15-1Christian Heimes 0.14-1Christian Heimes 0.13-1Christian Heimes 0.12-1Christian Heimes 0.11-1Christian Heimes 0.10-1Christian Heimes 0.9-1Christian Heimes 0.8-1Christian Heimes 0.7-1Christian Heimes 0.6-1Christian Heimes 0.5-1Christian Heimes 0.4-1Christian Heimes 0.3-1Christian Heimes 0.2-1Christian Heimes 0.1-1- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild- Rebuilt for Python 3.13- ipa-hcc-client depends on ipa-client again- Don't install /etc/ipa/hcc.conf by default - Refactor: Client scripts now use hccplatform - refactor: Move all server code to ipahcc.server - Feat: Server features detect Console from rhsm.conf - feat: SELinux policy for ipa-hcc-server - Fix EPEL 8 build- HMS-3840 feat: Detect configuration from rhsm.conf - ipahcc-stage-console now configures proxy - HMS-3821 feat: auto enrollment can set DNS resolver - More Fedora packaging fixes - Implement testing with Stage Console APIs - Implement console proxy settings- add CONTRIBUTING.md guidelines - Fedora packaging fixes- Prepare ipa-hcc for Fedora packaging - infra: Add helper for stage console testing - Fix: pylint warning R1737 - Fix: Typo in ipa-hcc-auto-enrollment sysconfig - Fix various infra issues - fix HMS-2066: Add timeout to confirmation prompt - test: Test on RHEL 9.3 / 8.9- feat: Enhance reporting and logging - feat: Check remote status with HCC - refactor: Use context="hcc" in IPA API - infra: Log JSON error information - infra: Refresh cache and config file - fix: Use LDAP for public JWKs - refactor: Run ipa-client-automount - fix: Replace legacy with modern Insights API - fix: Limit hostname to 63 characters - fix: Use UEP CA to access prod cert-api - fix: Don't create global DNSResolver - feat: Add ipahcc-client-prepare - fix: Fake headers can use org_id/cn from RHSM cert - refactor: Change to --idmsvc-api-url - HMS-2348 feat: Add ephemeral fake header to auto-enrollment - test: Run CI on Fedora 39, drop 37 - fix: Better error reporting for missing RHSM cert - fix: Fix typo fdqn -> fqdn - Fix: Keycloak SSO provider requires openid scope - doc: Add test instructions and hcc.conf info - HMS-2814 feat: IPA client installer and automount - test: idm-ci now requires local cloud auth - feat: Add sso.rh.c IdP provider definitions - HMS-2694 fix: Update JWST issuer and docs - HMS-2595 feat: Extend ipa-hcc to retrieve+store JWKs - test: Fix and improve coverage - fix: Update spec file URL - fix: Update git repo URL - HMS-2594: IPA plugin for HCC JWKs - test: Do not install KRA - HMS-2532 fix: attach to api commit - HMS-2491 test: Enable backend tests again - HMS-2491 test: Allow backend test to fail - HMS-2491 refactor: Separate GET signing keys - HMS-2491 test: Update test infra for DRT - HMS-2491 feat: Remove old domain registration - HMS-2491 feat: Update for domain token workflow - refactor: Remove env patching - HMS-2446 feat: New domain reg token - fix: Use gssproxy client keytab - HMS-2446 refactor: Move IPA API to WSGI framework - tests: Add test for deserialize() - tests: Check that serializing compact form gives a ValueError - feat: Add additional check json deserialization and update docs - feat: Rename deserialize_json to deserialize - feat: Do not allow compact serialization for MultiJWST - test: Enable mypy checker for tests - feat: Add domain token to mockapi - test: Run CI with Fedora 37 and 38 - HMS-2070 feat: Remove D-Bus service- fix: use new Quay org for CI images - HMS-1789 tests: use @podengo/ipa-hcc COPR - fix: Support latest tox on Fedora 38 - fix: Allow non-compact JWT serialization - fix: use OpenAPI from public GitHub repo - test: Build SRPM and RPMs on GHA - test: update packages in containers - fix: Don't hard-code inventory url - doc: Add documentation for developers - HMS-2195: fix: Use idmsvc as API slug - feat: update locations - fix: Fix typo in automember rule - HMS-2147 fix: use HostConfIpa schema in HostConfResponse - refactor: Use setuptools to install Python code - fix: store public JWK in separate file - HMS-1857 feat: signed assertion for host registration - HMS-1857 feat: Add multi-sig and host token - HMS-1289 fix: Remove inventory_id from HostConfResponse - HMS-1857 feat: Add JWK abstraction and helpers - feat: Update JSON schema from latest OpenAPI - HMS-2038 test: Smoke tests with idm-domains-backend - HMS-2068: Drop support for RHEL without PKINIT- HMS-2052 build: Use OpenAPI schema from idm-domains-api - HMS-2038 test: catch metadata misconfiguration early - fix: Move rpkg output out of .tox directory - HMS-2041 fix: Represent org id as string, not int - HMS-2038 test: Improve testing with backend compose - HMS-1991 fix: Tighten OpenAPI schema - HMS-2008 feat: Adopt JSON API error objects - Add definitions for missing JSON schemas - HMS-1991 feat: Generate schema JSON files from OpenAPI - HMS-1991: Refactor JSON schema - Add project and build definitions to pyproject.toml - HMS-1898: Fix and validate error response - HMS-1975: Remove check-host API endpoint - Improve CI and test with Python 3.9 (RHEL 9) - register: prompt for confirmation - HMS-1926: Friendly D-Bus error message - ipa-hcc CLI: print human-readable messages - Document how to configure for ephemeral - logging: pretty print API response - Reconcile JSON schema with idm-domains-backend OpenAPI - Add verbose logging to ipa-hcc - Prepare release 0.11 - Ephemeral env support with fake headers - Improve Makefile and tox runner - yamllint: don't apply truthy test to map keys - Rename field 'cacerts' to 'ca_certs' - Reconcile domain response schema - Reconcile register/update domain schema - Document how to install build and test deps - HMS-1898 Reconcile error result schema - Ruff: silence F811 redefined-while-unused- [HMS-1788] Add simple GH CI workflow - [HMS-1779] Move secrets and settings to CI/CD variables - [HMS-1645] Replace bandit/flake8 with ruff linter - Add infrastructure for mypy type checks - [HMS-1645] Drop IPA 4.6 compatibility workarounds - [HMS-1645] Drop Python 2 compatibility - Run integration tests in FIPS mode - [HMS-1645] Drop support for RHEL 7- Last version with RHEL 7 / Python 2.7 support - [HMS-1607] Use inventory_id in API routes - [HMS-1607] Move common WSGI code into module - Include os-release id and version in HTTP header - [HMS-1479] Implement status check - Drop bundle file, add more ipaserver tests - Detect and block auto-enrollment with FQDN localhost - [HMS-1472] Switch from admintool to D-Bus CLI - Add tests for dbus service, fix hccapi - Move cert parsing into common function - Validate insights registration state- Fold common and registration-service into ipa-hcc-server - Default to stage - Add title and description to JSON schema - Use D-Bus service and simplify config - Download PKINIT chain from registration service - Add mock tests for mockapi service, refactor code - [HMS-1485] Add --location to auto-enrollment script - Verify with pylint and fix violations - Use server role to indicate presence of ipa-hcc plugin - [HMS-1485] Add IPA location information to domain - Add D-Bus service for checking host in HBI - [HMS-1475] Add tests for registration WSGI server - [HMS-1475] Refactor and test auto enrollment client - Test with RHEL 7.9 server - Remove dependency on requests - Rename smid -> rhsm_id, drop redundant rhsm_id from body - Move API handler in separate module, add JSON schema- Fix config_mod(hcc_update_server_server) API call - Improve idm-ci - Refactor project structure - Add timeout option - Remove unused cert info and detect_environment - Split ipa_hcc_cli into CLI interface and logic - Add systemd timer service - Add global hccDomainId, use domain_id in PUT request - Add HCC update role and register/update subcommands - Add ipa-hcc to register/update domain with HCC - Update rhsm_id in server's host entry - - Add server role for HCC enrollment service - Fix deployment and rhc connect in stage environment - Test on RHEL 9.2, 8.8 - Add mockapi with test API endpoints- Add metadata to deploy with local builds - build and deploy RPMs from current checkout - Add QEW test and metadata file - Add idm-ci playbook and metadata - Add tox CI with custom image - Fix stage env support - Add 1minutetip and virt-builder scripts - More validation of PKINIT options - Write custom krb5.conf, handle missing domain better, more arg checks - Drop 'not krbprincipalkey' check for testing - Mention SHA-1 PKINIT issue on old RHEL 7 and 8.6 servers- Fallback to kinit with PKINIT + ipa-getkeytab on systems without PKINIT support ipa-client-install - Add support for IPA 4.6 on RHEL 7 with Python 2.7 and mod_nss - Handle platform-python on RHEL 8 - Sleep longer - Relax dependency on SELinux - Move keytab installation into auto enrollment - Basic tests for WSGI - Move /etc/ipa/hcc dir to registration-service RPM - Move scripts into ipaclient.hcc package- Detect stage/prod from rhsm.conf - Move refresh_token to /etc/ipa/hcc/refresh_token - Move more configuration into hccplatform - Remove keytab file on error - Add service with force=True option - Update permissions before adding privileges - Use ipa-ldap-updater instead of slow ipa-server-upgrade - Split server plugin and registration service updates- Rename package to ipa-hcc - Replace term 'consoleDot' with 'Hybrid Cloud Console'- Update CA chain to official RH certs with new SHA-256 Candlepin cert - Wait until host appears in ConsoleDot inventory - Always disconnect to get a fresh Kerberos ticket and connection - Add ipa-consoledot-consoledot.service - Remove old test data- Handle outdated keytab, autoconfig org id - Remove pkinit_anchors line on uninstall - Workaround for missing IdM features - Fix spec file dependencies - Automate ipa-getkeytab with update plugin - Move some files around, automate service and keytab - Update spec, add KRB5 snippet with anchors - Use more persistent connections - Add caching and logging to WSGI app - Add link from search facet to consoleDot inventory - Lookup host in consoleDot inventory - Regenerate certs with C=US instead of CN=US - Return shell script with certs - Add cross-signed certs - Add script to generate cross-signed Candlepin CA - Update README with more instructions - Require known CA issuer - Add WSGI service, roles, and cert mapping - Add test scripts - Add notes about cache and certmap-match - Add test data and instructions - Fix error reporting when global org id is missing - Use lower number for updates/schema so we can use 89 for test data - explain unique index - Add write permission - Add enrolled hosts to a hostgroup/bin/sh/bin/sh/bin/shbuildvm-a64-31.iad2.fedoraproject.org 17213293840.17-4.fc41ipa-hcc-selinuxCONTRIBUTORS.txtREADME.mdipa-hcc-selinuxCOPYINGipa-hcc.pp.bz2/usr/share/doc//usr/share/doc/ipa-hcc-selinux//usr/share/licenses//usr/share/licenses/ipa-hcc-selinux//usr/share/selinux/packages/targeted/-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Wno-complain-wrong-lang -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -mbranch-protection=standard -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -mno-omit-leaf-frame-pointercpiozstd19noarch-redhat-linux-gnudirectoryASCII textxZ7Eo_` if [ -e /etc/selinux/config ]; then . /etc/selinux/config fi _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if /usr/sbin/selinuxenabled && [ "${SELINUXTYPE}" = "${_policytype}" ]; then if [ -f /var/lib/rpm-state/file_contexts.pre ]; then /usr/sbin/fixfiles -C /var/lib/rpm-state/file_contexts.pre restore &> /dev/null rm -f /var/lib/rpm-state/file_contexts.pre fi fi /usr/sbin/restorecon -R /var/cache/ipa-hcc || : # with selinux/bin/shhttps://bugz.fedoraproject.org/ipa-hccutf-8d1ed39fdc15b3d3e0bcce61314a2e48720be786f421ddb2808f0f7871f54d85fd5e1e6d7b3871ff736ccdba7657171b4da4f0695747ca925021d49ad72e26bea?(/h-7bMZaX$9W&E~t[GTS;dfND}mLQs,\\ao,n>ѣ4+0o=%W/!.|=Vo&%7 #F-3!ֿtI3}]LV3. (Bh.Gz$7ӕF7ջqF2JmJtF7(=-_n\{:4V֪RVRllS=zٌo~w~ogK?NCPQ\kse+_W_^^Tr×үZNkѶoo,$\) `PՓp,?$vB pBH?"}~7 8=**AMTKWGH8+6ݷBϬZ.*EZ8hQ mLrDb/A!4tv)N[m=(FņF "\&AFW#(1 +Q(Hń`Q e)#0呯S= E"j"8I*& L8=V%* RUUmEՐjT 85B~Kg{zB4wF׍i俕"NvkFQyyֻݢKye^NҼfO܋u#`<.])'נ+$=Ah|8d4 4i,(TP$$&\%J+nfUT:`{2٤)C+'ǢѸd@K-ɸe.&2 ŃGj`cALIJ!Ft\p%0ZR+QÄNDCHpWA̦@b6*ڕɺh:LRhJEFǺ'b"(iC|G %(է+=[wLOZZo+t; fw=A dt,soX&TOGRMh6: ȃl4 E%zhc I\u0n^/%(CF>U0i0ZMd5%70̐hbN+J̦iOᘑ"uT?ḑ.?b٩qFՄ&Ϣ|L %DEEDD83*5|P F4.[_0颿&6kO-Sn=ZSƷƿRh]lMε]<泓QW+-Q IS^JNu8-+E5gӥ{AQctθqtiϕF8CYog'$l;Ӌm 39pId}:*u8+v6qertUȀ2mx0\W1R*Q~6i6~ѻM87X&~Q(-Go Q+˭NI1{H -i:]?iᩃXDo7yבnޟ}4t+UcD S0 H\4&k(K># \$K;C}bsfxH#l'%G"@p|L+R=/(v6Rp{6h4͆ NHOO|a6!b )OL$' !ieܻw4IVXWLa虆"@~.bVSTWx-J42+3ciPww ʍ vq<"+t;hy!j^OҌdB&M-n_ݲ]n?5oS(NhJ@S;qT\86d6- lePjFTe>{nsQrW0{,c;U3`@=Gu`9ύlK-,g ^ngB/y ?22!Mtʜ[T--'faQkvQFw .U[MF' H~mخ`f on@G d< d&ˬ#er.7)t,ƙux .-qa?<`@Fd ȵȖ%Q5 9d!Qķ6rij(򯿫FػKfJ GO,, %hv>ByR,&Cd4Y , Ȗ}T ݑ5aP@H|/vHZ"[f% hJ kq^VLeY蘢Йc%#E~aYI0WNh=T;Ewdۤ̓zqNEѾH;ɻ9ȝmH^. P3EerLJ gp6E\R>%@[ p['_'H@%=qȈֺ}zgQ=@Qy.@$f]#KLNjX@9?Y{ WPJ"/os;!4SE5\=JZRS+㻃8zOK^cS\`d!Je+ISEu-7 ̤u(I^RVčoDOtlM)p27K"E]V|gR&hқ`bWa)u؉fyz=4 wNc҇l~8=H Kf|朚:)zZ;J騜5 ҄Z3m[4FͧK& x6!gA< Y|Go4YU*rV {OQ5p gϲ#%竞P>ahA!Uϕ18Nvm_9Ihw;'Ԓy$rW% қSn)5j_Ty72@kqjc@p!)Sg:΄p>ǡNRqK8=px+Q^Kto:Ej5T{@əԷN!OSn$"3B,$_DxZՓDD~AYdz҉)lZ!_/R~< g v f w5bh`s, ψЫ0g ܌X]כ[8<;$2kDoHM̚XH̦0 -+..o bW,7-GH qT9:qzfi#8V#"?)W6#twEo9#̓|< >Cuq87V=nhJg帓)o"-Nn؛,QN\&ZGȲi#!y p~j?K@mVt~/{)Ґ)yӫ҂ea/c«Sx .OHn4&8|0}-=QۻLR:_Fqt&mJ+}yits!hoxELUJR/L=ۃ$Hlz8ydF%~rz\s $ G{xJ 2Cd\;KWXH0 icEG.,3`҄=deO"q݋E2cQdž  +ނ?hɩ2jr\V)+0U1^%abHaOohQȾ D <%l1sߗĹBxH .F* e, b uपPq[xrԻ0w3ʓ1yXinZ `X=Z|uuXkgyXX h3ƹm8u&ҙs{XAHL>Y\,Y;tA]i[N8FcIcȽO?Ρ̋bE}9DetNȀU]^}`#״ RRo$ZB1R=agjœT}-|&'jn a:0(ͤRס6c (`VT>H>lW~Q(P M**G!c:DORw5M5ifpFfrEPosD5ې[ 4[[ȼ.HhfvYӾ!H@ti46|0|8:qq=1V2}8t*g+_ =5ʟȋXu!|#R#8'(VSf%bqc] Pn)N1zH "QH- ` a%[Nk>,){QwnGWfN)erʐ]GE]UY:.&N#L&HTHdd I'JSiE [ wjj>BWЊf-e`) $g4^ҦMxj; |TR} !P;bgm]Ԑ}zRʷVg)(L8zR܅(p74&V|k7;sa7LF* z+V/,‹ߥB# ]'&FޖSDgtd#j5Աzd\hgXRBUm{י.qa-&bnJG>ǙIRi̾7H 4%)_p"Hb[MND]t#I灈FX~hx"kLD'ʎ^ioB#,K b$ekhQRr'w>.G/3 囑/ģbŻ*144[zz PIx H̭sv(N`{ ~RAKPb?J]8,PS x*]7Sj8n$Ss"h&}|1~q\,s1@iC(zҬUZkh/ɗy6!1Lfń lʼ(L?7 ܮ`i|E ,uA訯Cc= ^ۛ .܏ȶr#n~_fQ1{i>,n]А6OW]Po$S-_'\K%4`/b O;7A!`3= thʎ_6J pj~cmtgdzc'dR2D3M.ӄĂCPK5O'?P OS"7At`+" *aiWR$"F͖we8BrT†< "'Z. ^?5:N!7zХ;J DwLvAd0p0:Mh.TbzSalLZPtJdcUkX-\#@7 .:R2'V,ܑ⟮"sx(m UX^Nbt|LbhK^&`b`@4Pr`˞CYĻG1.E1Fƹ`):*q ;=GKiАAi. pXI2DAonm EkCJy<ðY|/XwKТY21# 8XȦ0%]c2Kȅʛp%h{%OC~Th Ζ^N0ޓφ͊"))H+6KK?Կ! n!WzQ؅?xڼF ĭblMPs)M"s+0lBJ-Q9)k:Ւ;pXd\VG4}kkjCu<I8:} #@Bu~KE_6fD{ JPĸxЄ  hN1yc;W#2 voy)8<_3MCav \ *a|8|̂ (觴a <7׉AHQ=Z2gXCv֪W^Qf2ꉚA.O;9(xR23ZG-9Jw0;^1i^s̫=ஒq]}2I=oVg\L5lL@Oځ4 ⨐y-] _Y7`&{QNJՈPa*W$39;7 L̗)Nbk38r92 ;+9V>xJK0AWo&WkxZ-'5@h<Mήۆ.?Lw5j(Uw  }ݚbA@?$bz"S!gW= 5`{g,y6KNd4( a@iJ Of'$ v(ʄX R6yF#? : y4E")0Wcy`/D7 vKZှ^=WhfZ{m9G`ėh'KWyxpY.2gjýS{#2tcX=>)8MZIj6/J]=4n:L,nsft'V\(ܤZdUnIT;Gsj31"rj;J|'M0o\8~MpPNYPT!sr'_j8B= H~]s("վ# URO$R@MpC1~0O8_C)fsKxqa@ 'M""LTkBQSOd#*!R$ }$K:(yh:1Bm:/jG2N!J[hxz͙U;l^}.&qiNjIVX)Ft?1mhēPɦ].&qCBު,'/==ԷX#CPm|qH9z`>vl>!Tt?ZI"qM†Z?(S$u@_}TV@hhhVXELt7͖%Qmñk68\p^wupeaY 0 /|Ƿ;s) a1~kIu399LGeWͷ0cfؙ.MzID_6Y$j\ "aae`<:v xG\N?!`Pm klϥH`@GͽA% ^(Ygmc `U =<#@ƒo$=Ǫ#q3;,u3MyhHi{g 2>5BU,& _O#FªvdaT߭()_5Gگ'G^#)a:>Z]d,;Cˈ}uepb3A ě==2#-33B'b-Qr=SJ5\m}@T 1*ˏ ^BȄqd>Z b`ͣF Mt*aJ~RA]R1P{ۓ@UTx[G)Arz C+? s:+ gtL0_B,V?q" PEG]cNeW?~r4Ħ^LQ[в>@I{rW=x,eiOJKqGkBQf`-x)"ǹJ? k\jYXñRG"ɐD:Ņ.ͣJ&"Gh*! ;% +Yfk݈.pjsg}\t><൓^j1ּμ)?30/4Y̼}dd6  `u8 %QqlW)ϩ} )m6=S(9R0- H6s_5cspDn_!QOmyW^\D,>{_RTWL)*BT}غhz|y(iI} }gmsB: *]͠O =H])B [KmI3fetV0E EkN9 ic;pqyECQtf_ p[IbR]TɃ0U愈Y*֙R lD)Un t~"2M/El -CݠGIC8WmHY;zQj 8\h!H\ fGWp ?nn5i!Yr\ a 6]t`z~I}rTϽ䝈_:e aKrB*a|WщZC>Ymfm%-YBIcqLCƘxu[3tb42r9/n/ڰ+2naVJf\/$V6`ftG4eD<Jgb"}`27I~oS~lh=sehōbcj?<\. )vncH9̍*8إ8GjP9_/:@@(ULtq")zJ܏ Zg 41\RE^-etϰ Bj⤺S'+lȉ<,` ٔF O PfI 3aQ*՗nTMv1KIr0 d8# rqF-jREt'hTWm.f|D8ѫid[ȱ>4BeNu.JWv8y1#)cB0t@ҧ rwWzG볽<هĨR&2 %a)~`1*F tlȍÎ c9&Oi4lhک!\G;Pp杨Z+Hsͱ9lMO:I&e`K.@5>~0 _Er?*u[!i-(^q7-ۼO"̥I0#>>S<6~C^DY#\ds@Ě\r?P$15s#Vѧ1B8j|uH&03-ލ>@&F0cIq/0n'"I+qZT;~o_v4Ux9\剴KbHx%'܁`.H_CpG ϴ85pT ᐲfN"Q({Fυ8uëlߟ3I~7b"t([cd<T>p_ż F  ( /P<_p;q<'٩F3:Gu =enp(K#5P8u6 /?0fR館6asOe0Ͼ٨йS3]ǖ6kc.̺BbZs&).&$q#wؔWF䭯d\tfQ"rЅlzX ű kP"Y8"VE0uTF/i #y^VPa?::qaCN*~͟$Zu=K;:DF۲`*a@6U rT &vMZ9iwxo:nzqqOTs ۽.]V oW[K~'8bַzhW2;-pQJ,lN$w,SLcLZ/d sP$ 4":@)_uuҡO?YNA[4b&IRH{1 StIRPg'6}iH,Q9yaaiЋ9Z!uu˹ 1Li O!,Z6+ICb;Frf[A v\paRr7o_$O`\ o|X0<% oo 0LeM q¢?TB|8̖hŔ|l#J %+/4jEl}ij| -8ž'pD2?QXDjp "~v3v;1\&b]'P;(`$99rm}bvX6 ؖt9^9B' &`ܸIrhoi .=\Lrǡ.|hIoS u ScdS+$[uz|`5:rS TPlU?\},ΪM(#Y"zRQ=yqh=ċY0oBpHU"sy)H}HG@Oz/ԯ!IF(@":T]o@tT@[r;<RpR( jOx@zA=ݔ'!Œf]6 hAgaG-LT}]>UhaoSRPm DP"|bK HDdՂRʑkI7u Nfk`ۉ|pKӛ d;͘œ-Jx@FaȺmF_Mfu$DVi;b B0GPpaqGώ09ћa}tNISŦLڹg^Ew6:x1}TDX\Wcؘ&1q#.ڢ. [!e. i>#;Z 0)q [v` 0xp@B"&”4H!(H 0w0z)[<3EQ.wRtҀxޜR_!|8۷j :H `&Naq p iĪh1/V)v7H|)%hT NEHrS6Djx1ezR Md[AicԆKUUDi"F ngri,Lreadrphilosophy/why--lgpl.html629623/t.pp.bz2BZh91AY&SY9|=n@r0 X;@ОbD!@(*   4TH`iQ ҞiL4~010F14 3TT(2Lb2hdL@4ѡD2OP  hЌ@B*#ȚS4Ʀ@bhM dF@1 2h  = ڀ &i  !<$~fiz&# P44iӲ|Sgfg883;l<, #0s7هyw;$h!+H@h M$\؝X ߆F`vI%=6OaI!J`Zvr.hy^{Yu<ߎ^|+ðs~'`{o+`|3C^`_WgwI|'|F}?TW}f6}_t~O)|ofgtI}FWc6msGXbw?yLWeg5fso9 Ai6QN5~]qWZ[!ap+Hv $7ҀxDH񵄣K/ +G{k+b //Fv¯e 9'{8gzЊn~/9zX4.LD؄wB-D 7”^Xk@! 2} <2@Q)|r*t›HHĴٷ7i#}@H܊dg+~cաb9c@cP8]^_cnAH@BYf|׾ ;Axg5dsA`ˆ@?~3,o,#CE *XK2՚M$l*В tS *IlNX*Q *"ʱVВԕ-*! )pTBK\ '01BJT W$ei1$!ǝw#F== fOY-tueE-%5E?iOoحZjZNMOOFgGBz=n]V ;ai_765GAm3 W4}ܸ+03Y Er嶋:S.3SpZsy%m6MiM4ӻ1i{cDа(;Ma4Nf4t3MBK@upnGـl|mۗz~{(%JMf BP%f`&'2-uG@F<% -JIY ZOޡ\e,^#|~4}e5wd%脗b03\-. '݊77BI=' %`jBrbcf ^9|mN)8//;\brϥu{Ia.@q ZQ  !%Vjߚ ܻ8\//D׉ .BMv[cG.$<7r=脓t^06;GwǠ޼zL99qs`2<75 axW ; SE6>m}DSt gfxN:tӧH٤A72ʢʀwh= U*Ҳ"(R M|s>w}G=o[=߅USUt-4  Uʮe2f)PQTLTvtmE%ž2QS2eUOiUWWVBaBFBE !$$3g DB(+Z{mǺ71KZ6,fc]'զN $P1Mw_;F'U&bSey Y\W@rOyc49foc7ifb M1I&b c歒ӵi4)Ǐmbf&clHFy; @ @ e*b@1 rqbɻlD:$ZN".˶bux&0>f7Yj6NHhg9U#13v9 +Qu5%\}koҋ ", *D3@JF233D@g݇[;8¨d@ЉBG r;XH oC7:`9fOZq\w0];YYXp/@1`+w01O9 L?E.qQ`ÁaveYk)DPڻ`y^ 03duBKsx]}#BIffͮBl| l 5i6żxI$3 xMkZDkߵ~/RB LrC#OR_<ҨAIys3Mg)A>=瀲Zo霷ZkLHq-M/Ӧ<%gsS۞M? t}U@o9WXܻ6,tÛ4ǵ LB{7A6"em)y2_6Nf22 dnuK/7x=hj#Z{Mq*37UeB}WG'wk5u}fF%k"gy|/ogyDsOqUj`^ӌjQg9!Yɉ|+g.mSn8Vf𨹬.6U7D(՛j^q)NQJNxb@}#_ .@rP%N]%։zO@:qӱjZw8+9Rh@x_B_{M ')9 (BKBJ3/1p& :y5 tD4qcz(7Tb& 3~ hI=1$Q=BZqn̆59.#."h+ƊMdIT%r@'>IƐr" p իRpl]/Cz2s%>аa*B葺m%(̉&Dg `n vk X~ywnⰘqV1=ڥZQHѶ_ّ|d}Q򟷶<{"N~d--kti&8K[yBw8\=ۻdKxN+Wlr^z1w73]T9%siD7cMr#sR9T\5ʫ F6X *Pj3`ScƸpX ǘj5Xǃ ˶#ZE`0,BVv<~#|U[TNo wUL7%'lYɋ̉چo[3g]>ySwT󹻄vS꩘[98d{G ɼ#}t̪QH ʡ5 ̻Fn@62rA0.e ev/ #Qc׶S eu<ƈO8v⼒9SnMBCoYa*b5޵jdl j%1.6 I${% qsxjt0@0'(M1=y~owo\wz{Sgk9ɵ.s<}O6p!ٙQs@d=̩o߂X]c]7|TEI]c}QkfPdUXj5X]G i0deSi$.e5 ,e0GS^(()߁aE1Kvm|)ӡDMcGvt38Arq33HLL:V`WLtヌ8Μq!88;X;M4O tf461 '9)2'{ζ.jw} ,uxFjr(5fIkg_+"d= @TdPTI696C4s`AC!Ld DGLddc[U}=d>LĤMKAI`e1LrX 2:&+mv|fTʟ +r-m`W},mLK9KYLהi;޼ľxn]+z-yab.7q1统*-[IrԔPebY7NkL#ŃkRoA"n*  ڴ X# \ mxٚ eK;p:\ˮ v͍DI5mK6%l̞h@@0 {t6f))E0:f,ކGdaŜАc؄,խ5n]B uPHkbH "IbQ RZ˛R 457o̪  HBmoRgX%JE)B^i ͶT-@AA2mΏ)J8K 0 ,1[U.5 @`%@E&J\^Juaǹep$ 56-;2}@ipjs*`3.@I%Z hI-i10!/3͡ ᱰ,$րsrq3% 8R@aP&IUEYH̥-pMPZ pWO$