libsystemd0-32bit-234-lp152.31.37.1 4>$  ApaC/=„+=S1~bz0% #kp"E~MD!N\lFM <2T.+H-&~˞zO=2"TCuyu69 _ |Q{|S+mg@bAY^ 3Q9ȅ)֍ģ2qC's+hBX9I:| %Dk:qVG$T(ib4p>?d & DDHTXkt      Z px4(( (( A8 H9:.8>EGPHXI`XdY\]^b'cdve{f~luvw0x8y@G\`fClibsystemd0-32bit234lp152.31.37.1Component library for systemdThis library provides several of the systemd C APIs: * sd-bus implements an alternative D-Bus client library that is relatively easy to use, very efficient and supports both classic D-Bus as well as kdbus as transport backend. * sd-daemon(3): for system services (daemons) to report their status to systemd and to make easy use of socket-based activation logic * sd-event is a generic event loop abstraction that is built around Linux epoll, but adds features such as event prioritization or efficient timer handling. * sd-id128(3): generation and processing of 128-bit IDs * sd-journal(3): API to submit and query journal log entries * sd-login(3): APIs to introspect and monitor seat, login session and user status information on the local system.aBcloud103 TopenSUSE Leap 15.2openSUSELGPL-2.1-or-laterhttp://bugs.opensuse.orgSystem/Librarieshttp://www.freedesktop.org/wiki/Software/systemdlinuxx86_64/sbin/ldconfig TaBaBee6bc61ce80a891e3b18b6f2ab0114095e1170c36ffbb211483241e1f27255b3libsystemd.so.0.19.0rootrootrootrootsystemd-234-lp152.31.37.1.src.rpmlibsystemd.so.0libsystemd.so.0(LIBSYSTEMD_209)libsystemd.so.0(LIBSYSTEMD_211)libsystemd.so.0(LIBSYSTEMD_213)libsystemd.so.0(LIBSYSTEMD_214)libsystemd.so.0(LIBSYSTEMD_216)libsystemd.so.0(LIBSYSTEMD_217)libsystemd.so.0(LIBSYSTEMD_219)libsystemd.so.0(LIBSYSTEMD_220)libsystemd.so.0(LIBSYSTEMD_221)libsystemd.so.0(LIBSYSTEMD_222)libsystemd.so.0(LIBSYSTEMD_226)libsystemd.so.0(LIBSYSTEMD_227)libsystemd.so.0(LIBSYSTEMD_229)libsystemd.so.0(LIBSYSTEMD_230)libsystemd.so.0(LIBSYSTEMD_231)libsystemd.so.0(LIBSYSTEMD_232)libsystemd.so.0(LIBSYSTEMD_233)libsystemd.so.0(LIBSYSTEMD_234)libsystemd0-32bitlibsystemd0-32bit(x86-32)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    /bin/shld-linux.so.2ld-linux.so.2(GLIBC_2.3)libc.so.6libc.so.6(GLIBC_2.0)libc.so.6(GLIBC_2.1)libc.so.6(GLIBC_2.1.1)libc.so.6(GLIBC_2.1.3)libc.so.6(GLIBC_2.10)libc.so.6(GLIBC_2.14)libc.so.6(GLIBC_2.16)libc.so.6(GLIBC_2.17)libc.so.6(GLIBC_2.2)libc.so.6(GLIBC_2.3)libc.so.6(GLIBC_2.3.2)libc.so.6(GLIBC_2.3.3)libc.so.6(GLIBC_2.3.4)libc.so.6(GLIBC_2.4)libc.so.6(GLIBC_2.7)libc.so.6(GLIBC_2.8)libc.so.6(GLIBC_2.9)libcap.so.2libgcrypt.so.20libgcrypt.so.20(GCRYPT_1.6)liblz4.so.1liblzma.so.5liblzma.so.5(XZ_5.0)libmount.so.1libpthread.so.0libpthread.so.0(GLIBC_2.0)libpthread.so.0(GLIBC_2.1)libpthread.so.0(GLIBC_2.2)librt.so.1librt.so.1(GLIBC_2.2)librt.so.1(GLIBC_2.3.4)libselinux.so.1rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.1abababawan@aA@a;Ha2@a@`t```̊`̊```O@`+`+`lM@`H`Gc@`8`-@`-@``U`2@__"_@____}_w@_a@__[@_'@_'@^^@@^^?@^@^@^r @^g@^`^`^`^`^K^J@^J@^9\^8 @^8 @]}@]@]@]X]@]@]]]m]c]@]\\g\@\@\}\B@\@\k\eX@\eX@\\\Z@\=@\73\5@\5@[[@[ٙ@[[@[[-[~[>@[0@[0@Z@Z@ZnZz@ZZZ@Z3@Z3@ZԐ@ZZZZ2@Z2@ZZ`@Zw@Z%ZZ@Z@Z@Z@Z@ZZ}@Z}@Z}@ZyZyZyZxG@ZxG@ZtRZtRZtRZtRZk@Zk@Zhu@Z]@ZX@ZWQZV@ZDZ7Z3@Z3@Z'Z@Z@Z@Z@Z@Z@Z@YY@YYp@Yp@YY@YA@YA@YA@Yo@Yo@Yo@Yo@Yo@Yo@Yo@YYW@Ym@Y{'@Y{'@YyYx@Yx@Yx@YqY_wY^&@Y^&@Y\YK@YK@YC@Y7Y%uY;@Y;@YR@YtYtYtYtYtYtYtXXXsXg@X@XXZX@XYX@Xe@XpXXX@X@X@X@X@XtXoXn5@Xn5@XWXQ4@XIK@XF@X=mX43@X.@X)@X$a@X$a@X$a@X$a@XXX X X X XX`@XXXXXXXXXXX@X@X@X@X@X@Ww@Ww@WW@W@W@WSW@W@W@W W Wv@WWWίW@W:W@WE@WPW@Ws@We7W)@WKWVyVVVVVaVՄ@V=@V@VS@VwVwVhV`.V\:@VLh@VEVD@VA@V'~@V@V@V@VV@V@VV @V7@V@V@U|@U|@U|@UUoŬUUUȒ@U@U@U@UU@U@Uy@U@U@U@U>U@U@U@UUUUU@Uyx@Uyx@UmUY@UY@UTE@T@T~T~TTTTTC@TTTTp@TTT@T@T@T@TxcTw@Tto@To)@TmTmTl@Tl@Tk4Tk4Td@Td@Td@Td@Ta@T`T`T`T\@TWn@TWn@TR(@TJ?@THTG@TFJTD@T>aT>aT=@T=@T=@T=@T=@T=@Franck Bui Franck Bui Martin Wilck Franck Bui Franck Bui Franck Bui Martin Wilck Franck Bui Franck Bui Franck Bui Franck Bui Andreas Herrmann Franck Bui Franck Bui Franck Bui Franck Bui Franck Bui Franck Bui Franck Bui Franck Bui Franck Bui Franck Bui Franck Bui Franck Bui Franck Bui Antonio Larrosa Franck Bui Franck Bui Franck Bui Franck Bui Andreas Herrmann Franck Bui Franck Bui Franck Bui Franck Bui Franck Bui Franck Bui Franck Bui Franck Bui Franck Bui Franck Bui Franck Bui Franck Bui Franck Bui Franck Bui Franck Bui Franck Bui Andreas Herrmann Franck Bui Franck Bui Franck Bui Franck Bui Franck Bui Franck Bui Franck Bui Franck Bui Franck Bui Franck Bui Franck Bui Franck Bui Franck Bui Franck Bui Franck Bui Franck Bui Franck Bui Franck Bui Martin Vidner Franck Bui Franck Bui Franck Bui Franck Bui Franck Bui Franck Bui Franck Bui Franck Bui Franck Bui Michal Suchanek Franck Bui Franck Bui Franck Bui Franck Bui Franck Bui Franck Bui Franck Bui Franck Bui Franck Bui Franck Bui Lee, Chun-Yi Franck Bui Franck Bui fbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comjlee@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comThomas.Blume@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comrbrown@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comkukuk@suse.defbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comjengelh@inai.defbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comkukuk@suse.defbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.commeissner@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comtbechtold@suse.comdimstar@opensuse.orgfbui@suse.commeissner@suse.comjengelh@inai.dejengelh@inai.dedevelop7@develop7.infoasarai@suse.comarvidjaar@gmail.comThomas.Blume@suse.comschwab@suse.dewerner@suse.dejengelh@inai.defbui@suse.comfbui@suse.comfbui@suse.comfbui@suse.comwerner@suse.dewerner@suse.delnussel@suse.deafaerber@suse.deolaf@aepfle.defbui@suse.comjengelh@inai.decrrodriguez@opensuse.orgtchvatal@suse.comthomas.blume@suse.comjengelh@inai.desor.alexei@meowr.ruwerner@suse.deschwab@suse.dedmueller@suse.comfbui@suse.comjengelh@inai.dewerner@suse.defbui@suse.comfbui@suse.comfbui@suse.comwerner@suse.dejengelh@inai.dewerner@suse.dejengelh@inai.dewerner@suse.dewerner@suse.defbui@suse.comwerner@suse.defbui@suse.comfbui@suse.comwerner@suse.dejengelh@inai.dejengelh@inai.desndirsch@suse.commeissner@suse.comwerner@suse.dejengelh@inai.decrrodriguez@opensuse.orgjengelh@inai.dehrvoje.senjan@gmail.comwerner@suse.dejengelh@inai.decrrodriguez@opensuse.orgcrrodriguez@opensuse.orgsbrabec@suse.comcrrodriguez@opensuse.orgcrrodriguez@opensuse.orgcrrodriguez@opensuse.orgcrrodriguez@opensuse.orgcrrodriguez@opensuse.orghrvoje.senjan@gmail.commpluskal@suse.comjengelh@inai.dewerner@suse.dewerner@suse.depwieczorkiewicz@suse.comwerner@suse.dejengelh@inai.dewerner@suse.dejengelh@inai.dejengelh@inai.demeissner@suse.comcrrodriguez@opensuse.orgjengelh@inai.dejengelh@inai.dejengelh@inai.demeissner@suse.comwerner@suse.dejengelh@inai.dearvidjaar@gmail.comwerner@suse.dethomas.blume@suse.comthomas.blume@suse.comwerner@suse.dewerner@suse.dethomas.blume@suse.comwerner@suse.dewerner@suse.dermilasan@suse.comrmilasan@suse.comrmilasan@suse.comwerner@suse.dewerner@suse.dewerner@suse.degber@opensuse.orgLed werner@suse.dewerner@suse.dermilasan@suse.comwerner@suse.dermilasan@suse.comthomas.blume@suse.comgber@opensuse.orgwerner@suse.dewerner@suse.dewerner@suse.dewerner@suse.dewerner@suse.dewerner@suse.dewerner@suse.dewerner@suse.dewerner@suse.dewerner@suse.dewerner@suse.dewerner@suse.dewerner@suse.dewerner@suse.dewerner@suse.dewerner@suse.dewerner@suse.dewerner@suse.dewerner@suse.dewerner@suse.de- Add 0001-core-prevent-bus_init_api-from-being-called-recursiv.patch- Import commit 43e57122ef9856db4ec4a8a2758bc8f73d2d1835 1a6747aa01 umount: show correct error message e4b8a01ca5 core/umount: fix unitialized fields in MountPoint in dm_list_get()- Fix IO scheduler udev rules * 60-io-scheduler.rules: don't use BFQ for real multiqueue devices (jsc#SLE-21032, bsc#1192161) * 60-io-scheduler.rules: use "none" for multipath components (bsc#1192161)- Import commit d126915ede24b052216ca940155ea5531970aa95 f2cf0ac034 busctl: use usec granularity for the timestamp printed by the busctl monitor command (jsc#SLE-21862 jsc#SLE-18102 jsc#SLE-18103)- Import commit 5acd9826521306d7b312826135afe491bd889a29 df05d5b906 shutdown: Reduce log level of unmounts (bsc#1191252) 31f2b51c18 umount: Don't bother remounting api and ro filesystems read-only 4914963481 umount: Provide the same mount flags too when remounting read-only 04463997a7 umount: Decide whether to remount read-only earlier 143aed644f umount: Add more asserts and remove some unused arguments 09c7ad555d umount: Fix memory leak 1899743f50 shutdown: explicitly set a log target in shutdown.c a66287c2fe test: add tests for mount_option_mangle() 036077c2a0 mount-util: add mount_option_mangle() e90a30bc86 dissect: automatically mark partitions read-only that have a read-only file system b09a5f1835 build-sys: require libmount >= 2.30 (#6795) 2679668b86 systemd-shutdown: use log_set_prohibit_ipc(true) 32625253bc rationalize interface for opening/closing logging 46774b1d21 pid1: when we can't log to journal, remember our fallback log target cd994c1e81 log: remove LOG_TARGET_SAFE pseudo log target 8d4ec9ec2e log: add brief comment for log_set_open_when_needed() and log_set_always_reopen_console() a914dd2003 pid1: make use of new "prohibit_ipc" logging flag in PID 1 (bsc#1189803) 496668c670 log: add new "prohibit_ipc" flag to logging system 9df8261e38 log: make log_set_upgrade_syslog_to_journal() take effect immediately 15b3fcf953 mount-util: fix fd_is_mount_point() when both the parent and directory are network fs (bsc#1190984) 1898f668dd core: rework how we connect to the bus (bsc#1190325) 22a4287477 dbus: split up bus_done() into seperate functions 42ce096d80 machine-id-setup: generate machine-id from DMI product ID on Amazon EC2 39ea02b718 virt: detect Amazon EC2 Nitro instance (bsc#1190440) ef0253c6e5 virt: if we detect Xen by DMI, trust that over CPUID- Import commit dc982a577e6d3eea8832083f470e48f6fbf227cc ddc6c90310 basic/unit-name: adjust comments 390bc4e04f basic/unit-name: do not use strdupa() on a path (bsc#1188063 CVE-2021-33910) b83b235cac unit-name: generate a clear error code when converting an overly long fs path to a unit name 4fd60931a5 unit-name: tighten checks for building valid unit names 513c103faf manager: reexecute on SIGRTMIN+25, user instances only ff761f71a9 logind: terminate cleanly on SIGTERM/SIGINT (bsc#1188018) b236f23d9d units: make fsck/grows/makefs/makeswap units conflict against shutdown.target - Dropped 1001-unit-name-tighten-checks-for-building-valid-unit-nam.patch Dropped 1002-unit-name-generate-a-clear-error-code-when-convertin.patch Dropped 1003-basic-unit-name-do-not-use-strdupa-on-a-path.patch Dropped 1004-basic-unit-name-adjust-comments.patch These patches have been merged in branch SUSE/v234.- Update 60-io-scheduler.rules (jsc#SLE-21032, bsc#1134353) * rules weren't applied to dm devices (multipath), fix it (bsc#1188713) * ignore obsolete "elevator" kernel parameter (bsc#1184994, bsc#1190234) ("elevator" did falsely overide settings even for blk-mq, fixed).- Make sure the versions of both udev and systemd packages are always the same (bsc#1189480)- Avoid the error message when udev is updated due to udev being already active when the sockets are started again (bsc#1188291)- Allow the systemd sysusers config files to be overriden during system installation (bsc#1171962). - While at it, add a comment to explain why we don't use %sysusers_create in %pre and why it should be safe in %post.- Added patches to fix CVE-2021-33910 (bsc#1188063) Added 1001-unit-name-tighten-checks-for-building-valid-unit-nam.patch Added 1002-unit-name-generate-a-clear-error-code-when-convertin.patch Added 1003-basic-unit-name-do-not-use-strdupa-on-a-path.patch Added 1004-basic-unit-name-adjust-comments.patch These patches will be moved to the git repo once the bug will become public.- Added fix for bsc#1184994 to skip udev rules if 'elevator=' is used- Create /run/lock/subsys again (bsc#1187292) The creation of this directory was mistakenly dropped when 'filesystem' package took the initialization of the generic paths over. Paths under /run/lock are still managed by systemd for lack of better place.- Import commit f6f87c1cb4119c41f6fb93702e03cec794829b7c d7ed4af259 mount-util: shorten the loop a bit (#7545) cdf9cbb509 mount-util: do not use the official MAX_HANDLE_SZ (#7523) bbcc63a032 mount-util: tape over name_to_handle_at() flakiness (#7517) (bsc#1184761) d44adc63ab test: fix test-mount-util when handling duplicate mounts on the same location 7c74260899 mount-util: fix bad indenting c4ef3248e2 mount-util: EOVERFLOW might have other causes than buffer size issues 3f3eb23ccb mount-util: fix error propagation in fd_fdinfo_mnt_id() 9f170ee221 mount-util: drop exponential buffer growing in name_to_handle_at_loop() 5c709e7b31 udev: port udev_has_devtmpfs() to use path_get_mnt_id() ac57cefcb9 mount-util: add new path_get_mnt_id() call that queries the mnt ID of a path e49d88b898 mount-util: add name_to_handle_at_loop() wrapper around name_to_handle_at() 060b1db043 core: fix output (logging) for mount units (#7603) (bsc#1187400)- Import commit 93910b81b809729afa7ff9529b45b1e67f229232 c289e1e5ae sysusers: use the usual comment style f11535886f test/TEST-21-SYSUSERS: add tests for new functionality 2f2bfa731c sysusers: allow admin/runtime overrides to command-line config dbd190cd3b basic/strv: add function to insert items at position 3c7b4c67fa sysusers: allow the shell to be specified f316974ebe man: reformat table in sysusers.d(5) 24113b7f00 sysusers: take configuration as positional arguments 8232e059d8 sysusers: emit a bit more info at debug level when locking fails 461356cfe9 sysusers: allow force reusing existing user/group IDs (#8037) dd9349e71a sysusers: ensure GID in uid:gid syntax exists 5e0ab33e59 sysusers: make ADD_GROUP always create a group 0dd4a69687 test: add TEST-21-SYSUSERS test 4dea8a2774 sysuser: use OrderedHashmap de09744500 sysusers: allow uid:gid in sysusers.conf files 9271c17657 meson: "conf.get(condition)" fails if condition was not defined These commits implement the option '--replace' for systemd-sysusers so %sysusers_create_package can be introduced in SLE and packages can rely on this rpm macro without wondering whether the macro is available on the different target the package is submitted to.- udev requires systemd in its %post (bsc#1185958) udevadm, called in udev's %post, requires libsystemd-shared-xxx.so.- Expect 644 permissions for /usr/lib/udev/compat-symlink-generation (bsc#1185807)- Import commit ca070cf0125f3b83fb3d7300ef4f524af47c49a3 3daea193a1 cgroup: Parse infinity properly for memory protections (bsc#1167471) a3f4d2980e cgroup: Make empty assignments reset to default (bsc#1167471) 72bbd3928c cgroup: Support 0-value for memory protection directives (bsc#1167471) 9c192a00a4 core/cgroup: accepts MemorySwapMax=0 (#8366) (bsc#1154935) d64f691eb7 bus-unit-util: add proper MemorySwapMax= serialization 98af04a71c core: accept MemorySwapMax= properties that are scaled, too d4528bcaa3 execute: make sure to call into PAM after initializing resource limits (bsc#1184967) 7fb1ab4f38 rlimit-util: introduce setrlimit_closest_all() c0d1ae3086 system-conf: drop reference to ShutdownWatchdogUsec= 9f66f43082 core: rename ShutdownWatchdogSec to RebootWatchdogSec (bsc#1185331) 82a5f215a3 Return -EAGAIN instead of -EALREADY from unit_reload (bsc#1185046) - Drop 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch Drop 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch Drop 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch Drop 0013-cgroup-Support-0-value-for-memory-protection-directi.patch Drop 0014-cgroup-Make-empty-assignments-reset-to-default.patch Drop 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch These patches have been merged in SUSE/v234 branch.- Import commit bb23f007799c0ad2b14a6da7f74ee242e10b00b9 611376f830 rules: don't ignore Xen virtual interfaces anymore (bsc#1178561) 65f4fa852e write_net_rules: set execute bits (bsc#1178561) f60153e565 udev: rework network device renaming df31eb968a Revert "Revert "udev: network device renaming - immediately give up if the target name isn't available""- Import commit a9d8f7b4aa917ad28bc8c2622e77cb10c78b6b64 1130a2a712 shutdown: bump kmsg log level to LOG_WARNING only 188fb8b6ed shutdown: rework bump_sysctl_printk_log_level() to use sysctl_writef() 8f718ea1ea sysctl: add sysctl_writef() helper cfaa3afb20 shutdown: use "int" for log level type 112b8553dc killall: bump log message about unkilled processes to LOG_WARNING 5a9628e4d9 core/killall: Log the process names not killed after 10s 26a073c9cf shutdown: Bump sysctl kernel.printk log level in order to see info msg a72f23faaa core/killall: Propagate errors and return the number of process left 13092aa300 shutdown: always pass errno to logging functions 62f0cbad46 umount: beef up logging when umount/remount child processes fail c04232cd6c umount: Try unmounting even if remounting read-only failed 9cf5376ff5 core: Implement sync_with_progress() (bsc#1178219) 160ef4200a core: Implement timeout based umount/remount limit (bsc#1178219) 4a38837448 core: remove "misuse" of getpgid() in systemd-shutdown 6427ab4adf core: systemd-shutdown: avoid confusingly redundant messages c069ee55de core: systemd-shutdown: add missing check for umount_changed d28bde105a umount: always use MNT_FORCE in umount_all() (#7213) 2c592670f0 signal-util: use a slightly less likely to conflict variable name instead of 't' b7e22d4712 meson: rename -Ddebug to -Ddebug-extra 063f26c13b meson: drop misplaced -Wl,--undefined argument A bunch of commits which should improve the logs emitted by systemd-shutdown during the shutdown process when some badly written applications cannot be stopped properly and prevents some mount points to be unmounted properly. See bsc#1178219 for an example of such case.- fix-machines-btrfs-subvol.sh is only shipped when machined is built- Don't use shell redirections when calling a rpm macro (bsc#1183094) It's broken since the redirection is expanded where the parameters of the macro are, which can be anywhere in the body of macro.- systemd requires aaa_base >= 13.2 This dependency is required because 'systemctl {is-enabled,enable,disable} [initscript]" ends up calling systemd-sysv-install which in its turn calls "chkconfig - -no-systemctl". aaa_base package has a weird versioning but the '--no-systemctl' option has been introduced starting from SLE12-SP2-GA, which shipped version "13.2+git20140911.61c1681". Spotted in bsc#1180083.- Import commit 05690b706a7c93e595280789f7b066afc1e3dcc4 963377e674 PATCH] Always free deserialized_subscribed on reload (bsc#1180020) c77d75305a core: Fix edge case when processing /proc/self/mountinfo (#7811) (bsc#1180596) 07a5ede612 cgroup: actually reset the cgroup invalidation mask after we made our changes (bsc#1178775) - Drop 0001-cgroup-actually-reset-the-cgroup-invalidation-mask-a.patch This patch have been imported in SUSE/v234 branch- Drop most of the tmpfiles that deal with generic paths (bsc#1078466 bsc#1181831) They are problematic because some of them conflict with SUSE defaults. Therefore it seems better to let the revelant packages owning these paths to provide their own definitions instead.- Create and own /usr/lib/systemd/system-environment-generators just like /usr/lib/systemd/user-environment-generators.- Add 0001-cgroup-actually-reset-the-cgroup-invalidation-mask-a.patch (bsc#1178775) It's been added in quarantine for now on.- Import commit c720c4d784b85feab124eae39919bec59e061ff5 bd6bedd353 udev: create /dev/disk/by-label symlink for LUKS2 (#8998) (bsc#1180885)- Import commit 080062ed5f90b8a4085a89f2ad30ee320fab27c9 80e37dcacc busctl: add a timestamp to the output of the busctl monitor command (bsc#1180225) 2ee6877bb3 core: make sure to restore the control command id, too d1b9949337 scope: on unified, make sure to unwatch all PIDs once they've been moved to the cgroup scope af5945c2f4 fileio: tweak write_string_stream_ts() to write out trailing \n in one go even if buffering is off a28c165efa fileio: write_string_stream_ts: check for file errors immediately dc122eb771 fileio: write_string_stream_ts: return errors from fputs and fputc 14c89b1424 fileio: make write_string_stream() accept flags parameter 2959e7dfe6 journal: do not trigger assertion when journal_file_close() get NULL (bsc#1179824) 08db1ac361 cgroup: drastically simplify caching of cgroups members mask (bsc#1175458) bb59042ab4 cgroup: extend comment on what unit_release_cgroup() is for ead2955f65 cgroup: document what the various masks variables are used for 805fe8ecdf cgroup: extend cg_mask_supported() comment a bit 305806da38 cgroup: tweak log message, so that it doesn't claim we always enable controllers when we actually disable them d02ce63463 cgroup-util: disable buffering for cg_enable_everywhere() when writing to cgroup attributes b4e9893f5d cgroup-util: fix enabling of controllers (#8816) e7dd277c1b cgroup: propagate errors when we cannot open cgroup.subtree_control 7c8f19714f cgroup-util: optimization — open subtree_control file only once for all controllers 7999763781 cgroup: add explanatory comment 2829342e7a cgroup: units that aren't loaded properly should not result in cgroup controllers being pulled in 48a0d85047 cgroup: make unit_get_needs_bpf_firewall() static too 888dc39134 cgroup: make some functions static 6c0efa2f01 cgroup: suffix settings with "=" in log messages where appropriate e69d9927c6 cgroup: use structured initialization 5174fb9622 core: fix message about detected memory hierarchy 3b6443e1ee core: use safe_fclose() where we can 906dcf1f6b udev: Fix sound.target dependency (bsc#1179363) 2c9866d55a rules: enable hardware-related targets also for user instances 127e546608 sd-event: fix delays assert brain-o (#17790) b98b6d230c core: serialize u->pids until the processes have been moved to the scope cgroup (bsc#1174436) 2f50b9ecf1 time-util: treat /etc/localtime missing as UTC (bsc#1141597)- Import commit cff0063e30f8cd06995810a4725bfb042191c472 33f68e8062 build-sys: optionnally disable support of journal over the network (bsc#1177458) 34d79e6216 ask-password: prevent buffer overrow when reading from keyring (bsc#1177510) 36e567dc68 ask-password: add extra paranoid overflow check 5dd29e9219 More polite passphrase prompt f922299b3c mount: don't propagate errors from mount_setup_unit() further up - Rework the enablement of 'journal_remote' support to rely on the new build option --disable-remote. This allows to drop the workaround that consisted in cleaning journal-upload files and {sysusers.d,tmpfiles.d}/systemd-remote.conf manually when 'journal_remote' support was disabled.- Remove mq-deadline selection from 60-io-scheduler.rules (bsc#1177490)- Move journal-{remote,upload}.conf.5.gz man pages into systemd-journal_remote sub package- Make sure {sysusers.d,tmpfiles.d}/systemd-remote.conf are not shipped with --without=journal_remote (bsc#1177458) These files were incorrectly packaged in the main package when systemd-journal_remote was disabled (autools build only affected).- Make use of %{_unitdir} and %{_sysusersdir}- Import commit ff3ecd97a4ef0f973d5e97f959ce042f12fab969 2794bdf836 seccomp: shm{get,at,dt} now have their own numbers everywhere (bsc#1173422) 99eff504a1 test-seccomp: log function names 2355b45978 test-seccomp: add log messages when skipping tests 0246b221d1 add false option for tests (#7778) 2fba565329 basic/virt: Detect PowerVM hypervisor (bsc#1176800) 3c43c83144 fs-util: suppress world-writable warnings if we read /dev/null - Drop 0001-test-seccomp-add-log-messages-when-skipping-tests.patch Drop 0002-test-seccomp-log-function-names.patch Drop 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch These patches have been imported in SUSE/v234 branch- Import commit e72f953aa84be08beb97cb4a7630e51e01639377 da944a39f8 udevadm: rename option '--log-priority' into '--log-level' 64b89364ee udev: rename kernel option 'log_priority' into 'log_level' 46d1536437 fstab-generator: add 'nofail' when NFS 'bg' option is used (bsc#1176513)- Fix bsc#1167471 bsc#1154935 Add 0010-core-accept-MemorySwapMax-properties-that-are-scaled.patch Add 0011-bus-unit-util-add-proper-MemorySwapMax-serialization.patch Add 0012-core-cgroup-accepts-MemorySwapMax-0-8366.patch Add 0013-cgroup-Support-0-value-for-memory-protection-directi.patch Add 0014-cgroup-Make-empty-assignments-reset-to-default.patch Add 0015-cgroup-Parse-infinity-properly-for-memory-protection.patch- Import commit 859d8235c2c2f0a2d160a0e9778f7e54d304a596 (bsc#1104902 bsc#1165502) It contains a patchset that backports user-runtime-dir@.service, which is improves latency and reliability when users log in/out repeatedly and quickly during a relative short period of time.- Import commit 8bd880f8097b9bfc7e73262c18fbbac03b12e60f 0509116a5d pid1: improve message when setting up namespace fails 40510f1a7a execute: let's close glibc syslog channels too e22977f3b2 execute: normalize logging in execute.c ed52035555 execute: fix typo in error message (#6881) 7f2feba719 execute: drop explicit log_open()/log_close() now that it is unnecessary dbc8525a68 execute: make use of the new logging mode in execute.c 89d456e4c7 log: add a mode where we open the log fds for every single log message 32cdae2fe6 log: let's make use of the fact that our functions return the negative error code for log_oom() too 30a5b8d428 execute: downgrade a log message ERR → WARNING, since we proceed ignoring its result f52bed2823 execute: rework logging in setup_keyring() to include unit info 91cbb68dec execute: improve and augment execution log messages These are simple commits that improve logging when PID1 fails at setting a namespace up when spawning a command specified by 'Exec*='. This should help us track a hard to reproduce bug which prevent apache from reloading (bsc#1172824, bsc#1142733)- Import commit 7525132a61f00e16566c9eb6ee7e139fcb7050cc 85561b1819 vconsole-setup: downgrade log message when setting font fails on dummy console (bsc#1172195 bsc#1173539) 0138e54629 cryptsetup: fix infinite timeout (#6486) (bsc#1158336) b2aa39af7d bpf: mount bpffs by default on boot (bsc#1146991) 5adfe116ed man: explain precedence for options which take a list (#7010) 392e0bb83f man: unify titling, fix description of precedence in sysusers.d(5) c45abe3a2f udev-event: fix timeout log messages- Fix bsc#1173422 Add 0001-test-seccomp-add-log-messages-when-skipping-tests.patch Add 0002-test-seccomp-log-function-names.patch Add 0003-seccomp-shm-get-at-dt-now-have-their-own-numbers-eve.patch- migrate-sysconfig-i18n.sh: fix marker handling (bsc#1173229) The marker is used to make sure the script is run only once. Instead of storing it in /usr, use /var which is more appropriate for such file. Also make it owned by systemd package.- Fix inconsistent file modes for some ghost files (bsc#1173227) Ghost files are assumed by rpm to have mode 000 by default which is not consistent with file permissions set at runtime. Also /var/lib/systemd/random-seed was tracked wrongly as a directory. Also don't track (ghost) /etc/systemd/system/runlevel*.target aliases since we're not supposed to track units or aliases user might define/override.- Import commit dca9b964628d1527a25d633f7728fe979f422358 8c875b2d97 units: starting suspend.target should not fail when suspend is successful (#6678) (bsc#1172072) b7d5310937 core/mount: do not add Before=local-fs.target or remote-fs.target if nofail mount option is set 2a0e7062ff mount: let mount_add_extras() take care of remote-fs.target deps (bsc#1169488) 29c6b6b725 mount: set up local-fs.target/remote-fs.target deps in mount_add_default_dependencies() too 20a35f0bf0 udev: rename the persistent link for ATA devices (bsc#1164538) 7dea560956 shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315) 5a660c1d53 tmpfiles: remove unnecessary assert (bsc#1171145) 2f86bc54bd test-engine: manager_free() was called too early cc5170fcef pid1: by default make user units inherit their umask from the user manager (bsc#1162698)- Split off networkd and resolved into separate subpackage "network" Although resolved is still not built by default.- Import commit ac52edce0f820ffefa5110b6fc4b03e35bf68d61 96a7639970 udev/net-id: Fix check for address to keep interface names stable (#8458) (bsc#1168076) ce5953a877 login: use free_and_replace() and TAKE_PTR() e5190b4b51 logind: remove manager_start_slice() cdeb8d1a48 logind: use free_and_replace in one spot 109aac4b67 logind: drop unnecessary braces 9194610e7e systemd-mount: don't check for non-normalized WHAT for network FS (bsc#1165011) 12b63cb73a systemd-mount: allow to specify an arbitrary string for arg_mount_what when vfs is used (bsc#1165011)- Import commit 7c246f16a6358516a586629091375ee5d45739ec 2205963ee2 manager: fix job mode when signalled to shutdown etc (bsc#1161262) e9b76da147 manager: remove fallback for user/exit.target fa4a1155e7 man: dbus method Manager.Exit() does not start exit.target dc0ec526f2 units: do not install rescue.target for alt-↑ e3ba383bf8 Add %j/%J unit specifiers- Replace 60-ssd-scheduler.rules with 60-io-scheduler.rules from TW This adds support for I/O scheduler selection with blk-mq (bsc#1165579, bsc#1164717).- Add 60-ssd-scheduler.rules This rules file which select the default IO scheduler for SSDs is being moved out from the git repo since this is not related to systemd or udev at all and is maintained by the kernel team.- Import commit 7e52d0c21a0c895d4f0ae2319f1eb4f2246147ba eedd149d6c core: coldplug possible nop_job (bsc#1139459) 09405f8eee Revert "udev: use 'deadline' IO scheduler for SSD disks" 57cab4a328 Fix typo in function name f846231c1a polkit: when authorizing via PK let's re-resolve callback/userdata instead of caching it (bsc#1162108 CVE-2020-1712) f799fd5371 sd-bus: introduce API for re-enqueuing incoming messages 8a0214f61d polkit: on async pk requests, re-validate action/details- Drop 0001-core-coldplug-possible-nop_job.patch It's been imported in SUSE/v234 branch.- Drop 0001-polkit-on-async-pk-requests-re-validate-action-detai.patch Drop 0002-sd-bus-introduce-API-for-re-enqueuing-incoming-messa.patch Drop 0003-polkit-when-authorizing-via-PK-let-s-re-resolve-call.patch They have been imported in SUSE/v234 branch.- Remove TasksMax limit for both user and system slices (jsc#SLE-10123)- Import commit 4695ebe0b91ec6a23ba9ea238e61a7348474fbc5 Backport support of dash-truncated dropins. The new mechanism is used (since v239) to configure TasksMax limit for user slices and therefore is used to replace UserTasksMax= option in logind.conf as it's more flexible. The old option is still supported thanks to a generator that creates a dash-truncated dropin at boot. It also warns about the use of the old option. This will hopefully allow us to remove the support of UserTasksMax option in the next major version of SLE. ec0bddf1f4 logind: keep backward compatibility with UserTasksMax= in logind.conf 7804fb95bd logind: move two functions to logind_core utility lib fb99d7bc4c login: fix typo in log message 15a8ffa5cc Use a dash-truncated drop-in for user-%j.slice configuration c5bf60565e man: document the new dash truncation drop-in directories 38fb5d11cb test: add test for prefix unit loading 7669c783e8 dropin: when looking for dropins for a unit, also look within "-" prefix unit dirs de1d19b8fb systemctl: fix indentation in output of "systemcl status" if there are multiple drop-in dirs 5da4984f6f unit-name: add new unit_name_build_from_type() helper 278643dc78 tests: skip tests when cg_pid_get_path fails (#7033) a77203d893 shared/dropin: improve error message- Import commit d2826c2ca2eab2b9f6fc08ff2010faafd4c1b9f9 Backport IP filtering feature (jsc#SLE-7743) e6b00a63dc main: when bumping RLIMIT_MEMLOCK, save the previous value to pass to children (bsc#1160595) b7b5a3ba5d main: introduce a define HIGH_RLIMIT_MEMLOCK similar to HIGH_RLIMIT_NOFILE 61d77e2bda def: add a "high" limit for RLIMIT_NOFILE 51a8b7fe9b core: bump mlock ulimit to 64Mb 4a53ff678c Move warning about unsupported BPF firewall right before the firewall would be created f26201d72c core: refactor bpf firewall support into a pseudo-controller 3c6af31da6 core: rename cgroup_queue → cgroup_realize_queue 12ac94d9d4 cgroup: improve cg_mask_to_string a bit, and add tests for it 6e049a2f46 unit: initialize bpf cgroup realization state properly cfbb2dfb1b cgroup: always invalidate "cpu" and "cpuacct" together 55a0d5a690 main: bump RLIMIT_MEMLOCK for the root user substantially 3c0ec7c460 bpf-firewall: always use log_unit_xyz() insteadof log_xyz() f8e7b8530a core: fix the check if CONFIG_CGROUP_BPF is on a3950086e4 tree-wide: avoid assignment of r just to use in a comparison 92ad831159 Fix three uses of bogus errno value in logs (and returned value in one case) 8f9b4436fa bpf: reset "extra" IP accounting counters when turning off IP accounting for a unit 4edd970f68 bpf: rework how we keep track and attach cgroup bpf programs b6152deaa1 bpf-program: make bpf_program_load_kernel() idempotent 49fa5c4f73 bpf: use BPF_F_ALLOW_MULTI flag if it is available 089bac557e bpf-program: optionally take fd of program to detach aed6959d28 bpf: beef up bpf detection, check if BPF_F_ALLOW_MULTI is supported c548f48cb2 bpf: add new bpf.h header copy from 4.15 kernel 54cc371347 bpf-firewall: fix warning text c08bb273ac ip-address-access: let's exit the loop after invalidating our entry a (#7803) 3dc5591f72 bpf-firewall: actually invoke BPF_PROG_ATTACH to check whether cgroup/bpf is available c5f34b169e cgroup: drop unused parameter from function b519973b49 core: only warn about BPF/cgroup missing once per runtime (#7319) cbeb2f95ac run: also show IP traffic accounting data on "systemd-run --wait" 3ff2299ccb core: improve dbus-cgroup error message 2f0c48782e bpf-firewall: properly handle kernels where BPF cgroup is disabled but TRIE maps are enabled (#7298) 867a8bf0d7 fix compile error on musl 8d3314daf3 bpf: set BPF_F_ALLOW_OVERRIDE when attaching a cgroup program if Delegate=yes is set c6a029bcc0 cgroup: refuse to return accounting data if accounting isn't turned on 33ef892f4b core: when coming back from reload/reexec, reapply all cgroup properties 4bb809e720 core: serialize/deserialize IP accounting across daemon reload/reexec ec63d2a10c core: when creating the socket fds for a socket unit, join socket's cgroup first 5efe9d8b24 socket-label: let's use IN_SET, so that we have to call socket_address_family() only once 35bf6b235f core: warn loudly if IP firewalling is configured but not in effect e62a2ae266 Add test for eBPF firewall code d936dbdb8c ip-address-access: minimize IP address lists df69bcd8d5 core: support IP firewalling to be configured for transient units c03104bf21 cgroup: dump the newly added IP settings in the cgroup context 693934ae53 man: document the new ip accounting and filting directives 7a7b7f97d8 systemctl: report accounted network traffic in "systemctl status" 3079fcd21c manager: hook up IP accounting defaults 44e2578544 cgroup, unit, fragment parser: make use of new firewall functions 61cff5ed0c Add firewall eBPF compiler 3fabe4de90 cgroup: add fields to accommodate eBPF related details 031f1b27f4 Add IP address address ACL representation and parser 7f9545d053 Add abstraction model for BPF programs d44583412a build-sys: add new kernel bpf.h drop-in 80842fbc20 in-addr-util: add new helper call in_addr_prefix_from_string_auto() f5909b1007 in-addr-util: prefix return parameters with ret_ 4de91e22b7 in-addr-util: be more systematic with naming our functions 877cc03ac4 tests: when running a manager object in a test, migrate to private cgroup subroot first (#6576)- Fix bsc#1162108 CVE-2020-1712 Add 0001-polkit-on-async-pk-requests-re-validate-action-detai.patch Add 0002-sd-bus-introduce-API-for-re-enqueuing-incoming-messa.patch Add 0003-polkit-when-authorizing-via-PK-let-s-re-resolve-call.patch- Use suse.pool.ntp.org server pool on SLE distros (jsc#SLE-7683)- Import commit 938b0a2f966d2606cbb20f4bcce7509995aaa7dc 1d7de5e8c2 libblkid: open device in nonblock mode. (bsc#1084671) 87d18b8209 udev/cdrom_id: Do not open CD-rom in exclusive mode. (bsc#1154256) 277ab600b0 bus_open leak sd_event_source when udevadm trigger。 (bsc#1161436 CVE-2019-20386) 6558c318fc fileio: introduce read_full_virtual_file() for reading virtual files in sysfs, procfs (bsc#1133495 bsc#1159814) 0c6fb31abb fileio: initialize errno to zero before we do fread() 0baf4768d3 fileio: try to read one byte too much in read_full_stream() 3226d763f7 logind: consider "greeter" sessions suitable as "display" sessions of a user (bsc#1158485) 5aa70da60d logind: never elect a session that is stopping as display- Import commit be5eeb6c7d0bbb8147ff894227140d3d21639aeb 24fc1e1ff6 journal: include kmsg lines from the systemd process which exec()d us (#8078) b213992a3d udevd: don't use monitor after manager_exit() 28998ada7d udevd: capitalize log messages in on_sigchld() 6065eee5f8 udevd: merge conditions to decrease indentation d727a42d46 Revert "udevd: fix crash when workers time out after exit is signal caught" 0e6ff3b3d1 core: fragments of masked units ought not be considered for NeedDaemonReload (#7060) (bsc#1156482) 3523d5a0c8 udevd: fix crash when workers time out after exit is signal caught 787b2f859f udevd: wait for workers to finish when exiting (bsc#1106383)- Import commit 71778a1423b0f599ede9faa96d20add61d24db36 98c082a6ca shell-completion: systemctl: do not list template units in {re,}start 816d6111fc shell-completion: systemctl: pass current word to all list_unit* e8b40b6b10 bash-completion: systemctl: pass current partial unit to list-unit* (bsc#1155207) 7cdab60839 bash-completion: systemctl: use systemctl --no-pager 8844419dc8 bash-completion: also suggest template unit files 6f0e7ca3d1 bash-completion: systemctl: add missing options and verbs 4f4d2d4c1b bash-completion: use the first argument instead of the global variable (#6457) A bunch of commits which improves bash completion support. It only touches the shell completion and hence is pretty safe.- Import commit cff9adac2f06cc0876dc905d5642d271b69e755d 3f5a84b97c networkd: VXLan Make group and remote variable separate (bsc#1156213) 9c4571d6b2 networkd: vxlan require Remote= to be a non multicast address (#8117) (bsc#1156213) 7f1b579fc6 fs-util: let's avoid unnecessary strerror() 49e51f69b5 fs-util: introduce inotify_add_watch_and_warn() helper 454c094294 ask-password: improve log message when inotify limit is reached (bsc#1155574) 012115b8dd shared/install: failing with -ELOOP can be due to the use of an alias in install_error() (bsc#1151377) caa9e284af man: alias names can't be used with enable command (bsc#1151377)- No need to daemon-reexec at package installation time. During package installation PID1 is obviously not being run.- Add 0001-mount-swap-cryptsetup-introduce-an-option-to-prevent.patch (jsc#SLE-7689)- Add 0001-core-coldplug-possible-nop_job.patch This likely fixes bsc#1139459 but it's not been confirmed yet. That's the reason why it's been put in the quarantine area so we can mark this patch as a fix once it will be verified before merging it in our git repo. See https://github.com/systemd/systemd/pull/13124 for a reproducer and the fix. In any cases it fixes a real bug that could be easily reproduced and the fix verified.- Import commit 1b9a7a16f19285e04646b879a7ee932d677a13a6 (jsc#SLE-7687) 2833eac013 man: add a note about _netdev usage 61b562b76f units: replace remote-cryptsetup-pre.target with remote-fs-pre.target 3731059465 units: add [Install] section to remote-cryptsetup.target 06a3b90ac0 cryptsetup: ignore _netdev, since it is used in generator (#7282) 52ff0e4815 cryptsetup-generator: use remote-cryptsetup.target when _netdev is present (jsc#SLE-7687) 1fd79aece7 cryptsetup-generator: add a helper utility to create symlinks 850cfa58c9 units: add remote-cryptsetup.target and remote-cryptsetup-pre.target a17ff04b54 man: add an explicit description of _netdev to systemd.mount(5) 2cf21cc2af man: order fields alphabetically in crypttab(5) 166efe2295 man: make crypttab(5) a bit easier to read 2228e044f9 units: order cryptsetup-pre.target before cryptsetup.target 853d13eb3c Fix reporting of enabled-runtime units- Import commit 76231a9c1f76ab1e2b4b4a60a3333685f0c05793 801458cee2 sd-bus: deal with cookie overruns (bsc#1150595) 39d50c7395 rules: Add by-id symlinks for persistent memory (bsc#1140631)- Allow YaST to select Iranian (Persian, Farsi) keyboard layout (bsc#1092920)- Buildrequire polkit so /usr/share/polkit-1/rules.d subdir can be only owned by polkit (boo#1145023) Otherwise we need to own the directory (or rpmlink checking would complain that the dir has no owners) and make sure that the perms are in sync with the ones defined by polkit.- Import commit 097c4e66dc457e3406fbf914bcf1966da93dcbb9 76e278fe1f conf-parse: remove 4K line length limit (bsc#1137053) 8538cad002 udevd: change the default value of udev.children-max (again) (bsc#1107617) 2bb79d8bb5 meson: stop creating enablement symlinks in /etc during installation (sequel)- Fix build for Leap 15+- Make sure we don't ship any static enablement symlinks in /etc Those symlinks must only be created by the presets. There are no changes in practice since systemd/udev doesn't ship such symlinks in /etc but let's make sure no future changes will introduce new ones by mistake. It's been done in Factory since a while now.- Import commit 835729c9d137d8c79e575d61b0d1a1c67cc54e59 62bdc40549 units: turn on RestrictSUIDSGID= in most of our long-running daemons 276401ea84 seccomp: rework how the S[UG]ID filter is installed 4b616cb995 test-seccomp: fix compilation on arm64 5a07cdd48a core: fix build failure if seccomp is disabled 0512aa6ea8 core: imply NNP and SUID/SGID restriction for DynamicUser=yes service (bsc#1133506 bsc#1133509 CVE-2019-3843 CVE-2019-3844) d377ee5360 man: document the new RestrictSUIDSGID= setting afcbed619f man: note that `systemctl show` does not overridden value 89982813ca core: expose SUID/SGID restriction as new unit setting RestrictSUIDSGID= 0da1ea2aed test: add test case for restrict_suid_sgid() 898c724e6c seccomp: introduce seccomp_restrict_suid_sgid() for blocking chmod() for suid/sgid files 4b56b9e8d7 meson: stop creating enablement symlinks in /etc during installation d1ee97533e networkd: do not install the socket when networkd is not enabled 972d0a0bdf udevd: notify when max number value of children is reached only once per batch of events (bsc#1132400) 7dd4d8ff02 sd-bus: bump message queue size again (bsc#1132721)- systemd-coredump: generate a stack trace of all core dumps (jsc#SLE-5933) Stack traces are logged into the journal.- Drop "BuildRequires: -post-build-checks" from the specfile (bsc#1130230) The syntax of this directive is obsolete and should be replaced by "#!BuildIgnore: post-build-checks". However there's no reasons to disable these SUSE extra checks especially since the package still builds fine with them turned ON. So simply drop the line from the spec file.- Import commit ecb92848f361fa2b2baebb61a37d861213756ad0 fdafcf8151 pam-systemd: use secure_getenv() rather than getenv() (bsc#1132348 CVE-2019-3842) a9793105c6 bus: fix memleak on invalid message a90e01ef50 logind: fix killing of scopes (bsc#1125604) a9c0babb8b namespace: make MountFlags=shared work again (bsc#1124122) 7a776a1518 man: document the new PrivateMounts= setting ae2abcb517 rules: load drivers only on "add" events (bsc#1126056) a50d2c6c33 Allocate temporary strings to hold dbus paths on the heap (bsc#1125352 CVE-2019-6454) a8d74361ff Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (bsc#1125352 CVE-2019-6454) 78a06c1a87 sysctl: Don't pass null directive argument to '%s' (bsc#1121563)- Drop sg.conf, it's been taking over by suse-module-tools See bsc#1036463 for details.- Do not automagically online memory on s390x (bsc#1127557) On s390 memory that is not online is typically 'reserve' memory that should be only activated by the system administrator. There is no way to detect reserve memory from information provided by the kernel so the state of the art is to not activate memory automagically if the platform is s390.- Drop 0001-systemd-PID1-crash-with-specially-crafted-D-Bus-mess.patch Its upstream counterparts have been imported in SUSE/v234- Add 0001-systemd-PID1-crash-with-specially-crafted-D-Bus-mess.patch (bsc#1125352 CVE-2019-6454)- Import commit 98de7a2368c96c3914bca239b35d5b1de6bffcc2 434d2010d0 sd-bus: if we receive an invalid dbus message, ignore and proceeed 0cbdb75339 automount: don't pass non-blocking pipe to kernel.- Import commit 7902374f4046d3515973c2292fe764967cfc2309 b808bd8f67 units: make sure initrd-cleanup.service terminates before switching to rootfs (bsc#1123333) 58a5ac4cca logind: fix bad error propagation fb118b996e login: log session state "closing" (as well as New/Removed) e0065eec98 logind: fix borked r check 4a978123cd login: don't remove all devices from PID1 when only one was removed c7af85fa55 login: we only allow opening character devices d21d3f32d1 login: correct comment in session_device_free() a5c15fde73 login: remember that fds received from PID1 need to be removed eventually 12ed3e765a login: fix FDNAME in call to sd_pid_notify_with_fds() d16ea1c77a logind: fd 0 is a valid fd 06546129b3 logind: rework sd_eviocrevoke() 5b40830fcb logind: check file is device node before using .st_rdev 5d69862a26 logind: use the new FDSTOREREMOVE=1 sd_notify() message (bsc#1124153) 6b10a71597 core: add a new sd_notify() message for removing fds from the FD store again 767e6baa0e logind: make sure we don't trip up on half-initialized session devices (bsc#1123727) 95828c00c4 fd-util: accept that kcmp might fail with EPERM/EACCES c1448fc331 core: Fix use after free case in load_from_path() (bsc#1121563)- Import commit 72e2d92e01b6e4686e6ac0b9cea391eb2ad4bc02 fc4e41ca9e core: include Found state in device dumps 8f795776b1 device: fix serialization and deserialization of DeviceFound 2af4971594 fix path in btrfs rule (#6844) f8ac04cffb assemble multidevice btrfs volumes without external tools (#6607) (bsc#1117025) c96249b50c Update systemd-system.conf.xml (bsc#1122000) 37245007a7 units: inform user that the default target is started after exiting from rescue or emergency mode- Import commit 9874ecb0457fd43cdde01085a878acdf2fa5af36 96313ee86a pull: initialize libgcrypt before calling any functions provided by libgcrypt 08870024dc hwdb: remove stray 'i' in hwdb match string for the HP Spectre (#9571) f09d3f3648 cryptsetup: Add dependency on loopback setup to generated units 3dfe6375a9 journal-gateway: use localStorage["cursor"] only when it has valid value 44af6bc697 journal-gateway: explicitly declare local variables a780ac41ce analyze: actually select longest activated-time of services f57d448ff8 sd-bus: fix implicit downcast of bitfield reported by LGTM 02e8443486 install: fix error handling in is_symlink_with_known_name() 5d4d445912 resolve: fix return value type of dns_answer_has_dname_for_cname() 4bfb5d31d5 resolve: dns_scope_network_good() does not returns negative errno c7028bd00a core: free lines after reading them (bsc#1123892) 63b4e1c44b pam_systemd: reword message about not creating a session (boo#1111498) 7811bf8e80 pam_systemd: suppress LOG_DEBUG log messages if debugging is off (boo#1111498)- Import commit b3fe3bed57dbf0a8c280caa4b45323e689f683e2 e3666c6e3e journal-remote: set a limit on the number of fields in a message (CVE-2018-16865 bsc#1120323) a6d9216e7a journal-remote: verify entry length from header 6d319eb61e journald: set a limit on the number of fields (1k) (CVE-2018-16865 bsc#1120323) f9c666991a coredump: fix message when we fail to save a journald coredump 2ad2d953c7 journald: do not store the iovec entry for process commandline on stack (bsc#1120323 CVE-2018-16864) 10f19f0bbf journald: remove unnecessary {} eec4fdb05c coredump: remove duplicate MESSAGE= prefix from message- Import commit 8f7529bfb001e99ebaab8f50d611ab750b96917d (CVE-2018-6954 bsc#1080919) 61043b6fd3 Add macro for checking if some flags are set c15f0a33a2 test: Run qemu/nspawn tests with "set -e" 2c818c539a test: Factorize common integration test functions (#6540) aa07d4eef4 test: Write state and log files into $BUILD_DIR 0207cea661 tmpfiles: fold five lines into two 9b622de3ad tmpfiles: "e" takes globs 2f1f321b26 tmpfiles: don't adjust qgroups on existing subvolumes (bsc#1093753) 32bc657d2b tmpfiles: use fd_get_path() even less excessively c0a4ee798f test: make TEST-22 easier to debug, by outputting to /dev/console 4e6c4d3147 test: don't use "nobody:nogroup" for tests 1c22e03b53 tmpfiles: return correct error variable after fd_reopen() 3147f8b81b tmpfiles: reindent one comment less weirdly 52c5e3dcce tmpfiles: use correct error variable 34395ac640 tmpfiles: clarify that we ignore file attribute setting errors 2e68b99078 tmpfiles: add log message where we previously failed silently 4b4025ebf4 tmpfiles: use fd_get_path() less excessively f004d24b2a tmpfiles: add more tests a516490b24 test: don't send image building output to /dev/null (#8886) d827068b53 tmpfiles: don't follow unsafe transitions in path_set_*() f38c092871 fs-util: add new CHASE_NOFOLLOW flag to chase_symlinks() 0fd2349ec9 tmpfiles: make create_fifo() safe 0c40e5f0fd fs-util: introduce mkfifoat_atomic() helper cfaa792ef9 fileio: make tempfn_random_child() accept empty string as path 842dcb66f7 tmpfiles: introduce create_fifo() 37aac5922d tmpfiles: introduce empty_directory() a3ee4deb69 tmpfiles: introduce create_directory() and create_subvolume() and make them safe c46af42ca2 basic/stat-util: introduce is_dir_fd() 15c9a82bce btrfs-util: unfuck tmpfiles' subvol creation 56728ebf2c btrfs-util: introduce btrfs_subvol_make_fd() 6c125e3be7 basic/label: introduce mkdirat_label()/mkdirat_errno_wrapper() helpers 18fe67c959 selinux: introduce mac_selinux_create_file_prepare_at() 1b711db4b6 path-util: introduce new safe_getcwd() wrapper d770b8db30 smack: introduce mac_smack_fix_at() 0ffb1013bc smack: make mac_smack_fix() deal somewhat sensible with non-absolute paths 55e7a0cd2a Fix compilation w/o smack (#8593) 84e8ac537b label: rework label_fix() implementations (#8583) 3686673f0a tmpfiles: introduce create_directory_or_subvolume() 1a2573fadf tmpfiles: make create_device() safe 5c9a660957 tmpfiles: introduce create_device() c177df34c8 tmpfiles: make copy_files() safe 06a5290c63 tmpfiles: introduce copy_files() routine 6d641c23a8 tmpfiles: make write_one_file() safe 1782e90f3d tmpfiles: make truncate_file() safe 5101dfbff7 tmpfiles: introduce truncate_file() which deals with 'F' exclusively 1886d7636f tmpfiles: introduce create_file() which deals with 'f'/'F' exclusively c7f0d990b5 tmpfiles: make the stat struct parameter in fd_set_*() optional 04ce630755 tmpfiles: stat file in item_do() rather than in its callers 04883c43b7 tmpfiles: set only default acls to folders #9545 (#9599) e6720dda59 tree-wide: some O_NDELAY → O_NONBLOCK fixes 8f2444bccd tmpfiles: fix up and complain paths referring to /var/run (instead of /run) automatically 92cafeb3ab tmpfiles: 'e' is supposed to accept shell-style globs 0ad95b0f9a tmpfiles: 'e' is supposed to operate on directory only a1ba1e298b fs-util: introduce fchmod_opath() 6774858c3e tmpfiles: remove spurious curly braces in create_item() ff7b2a2149 tmpfiles: create parent directories if they are missing for more line types 4d225f603f fd-util: introduce fd_reopen() helper for reopening an fd bcec6544d6 test: add tests for systemd-tmpfiles 281d06a8fa tmpfiles: don't resolve pathnames when traversing recursively through directory trees 69a3a957d4 tmpfiles: fstat() works with fd opened with O_PATH since Linux 3.6 5e2146a435 tmpfiles: make hardlink_vulnerable() argument constant f871a58fe7 tmpfiles: make "f" lines behaviour match what the documentation says 3583d83776 tmpfiles: shortcut path_set_perms() if there's nothing to do 465416b058 tmpfiles: fix check for figuring out whether to call chmod() baf3ea541c tmpfiles: avoid using wrong type for strlen() result a8d6590e17 basic/fs-util: remove logically dead code 3768f894ed fs-util: add new CHASE_STEP flag to chase_symlinks() cd09a3129d macro: introduce new TAKE_FD() macro 0feee55455 macro: introduce TAKE_PTR() macro 58987f02cb fs-util: add shortcut for chase_symlinks() when it is called like open(O_PATH) 662fe953fb fs-util: chase_symlinks(): support empty root accfcc9d5c fs-util: refuse taking a relative path to chase if "root" is specified and CHASE_PREFIX_ROOT is set 6caab72812 fs-util: extra chase_symlink() safety check on "path" parameter 996c2c2fa6 fs-util: extra safety checks on chase_symlinks() root parameter 1252ee00da fs-util: remove comment about non-existing function b42e2bb5f9 nspawn: make sure we don't leak the fd in chase_symlinks_and_update 41fff37ee3 fs-util: add new chase_symlinks() flag CHASE_OPEN 67f388cc93 user-util: add UID_NOBODY defines that resolve to (uid_t) 65534 4b036c36a1 fs-util: use _cleanup_close_ attribute 0390eb2077 fs-util: chase_symlinks(): prevent double free 4c495215e3 fs-util: add new CHASE_SAFE flag to chase_symlinks() 9242f48c29 fs-util: chase_symlinks(): remove unnecessary slash at the head 17ae72b9b0 Move mkdir_label() to mkdir-label.c 581192d868 Move selinux-related stuff from btrfs-util.c to label.c 008a35deb6 Add mkdir_errno_wrapper() and use instead of mkdir() in various places fa77d89b43 mkdir: introduce follow_symlink flag to mkdir_safe{,_label}() b8c314823d mkdir: chmod_and_chown() returns errors as "return -errno", not in errno itself e9231b19eb tmpfiles: check if not too many symbolic links. (#7423) 48a7365e7f tmpfiles: with "e" don't attempt to set permissions when file doesn't exist (#6682) ad2c7f6a04 basic/macros: add STRLEN() to get length of string literal as constant expression- Import commit c7f08cbe22b95d97a0eea4832991c8390cc86866 c152c950d4 vconsole-setup: fonts copy will fail if the current terminal is in graphical mode (bsc#1114933) 827dc868bd 6647 - use path_startswith("/dev") in cryptsetup (#6732) (bsc#1119971) 5d1e170e05 logind: stop managing VT switches if no sessions are registered on that VT (bsc#1101591) 07fc858f25 terminal-util: introduce vt_release() helper eee33c6e5d terminal-util: introduce vt_restore() helper a133c368a4 terminal: unify code for resetting kbd utf8 mode a bit (#6692) 2a487a79ea terminal reset should honour default_utf8 kernel setting (#6606) a33d12fd73 logind: make session_restore_vt() static ef799fb7ec udev/net-id: check all snprintf return values 46343b3248 core: don't include libmount.h in a header file (#8580) 2763be9d36 udev: downgrade message when we fail to set inotify watch up (bsc#1005023) f66ba2d179 namespace: always use a root directory when setting up namespace (bsc#1045723) 98d173e12e core: ReadWritePaths= and friends assume '+' prefix when BindPaths= or freinds are set 5d581cee2f namespace: properly handle bind mounts from the host 7b0b2e418b namespace: create /dev, /proc, /sys when needed 84736215a4 coredump: only install coredump.conf when ENABLED_COREDUMP=true- Fix the test for figuring out if /etc/machine-id is writable in %post (bsc#1117063) "test -w" always returns true for root user even if the writable mode bits are not set. Fix this by testing the file mode bit value instead.- udev: ignore the exit code of systemd-detect-virt for memory hot-add (bsc#1076696) In 80-hotplug-cpu-mem.rules on SLE12-SP3, there have a memory hot-add rule uses systemd-detect-virt to detect non-zvm environment. The systemd-detect-virt returns exit failure code when it detected _none_ state. The exit failure code causes that the hot-add memory block can not be set to online. See: https://www.spinics.net/lists/systemd-devel/msg00341.html- Import commit ceefdbf8afbc95dc2728999ce0cd7493411357e4 43b790123 dhcp6: make sure we have enough space for the DHCP6 option header (bsc#1113632 CVE-2018-15688) 96eba195c dhcp6: split assert_return() to be more debuggable when hit 38c94b4bf core: skip unit deserialization and move to the next one when unit_deserialize() fails ef058a4f9 core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (bsc#1113665 CVE-2018-15686) 5581cd610 core: properly handle deserialization of unknown unit types (#6476) e2933aa92 core: don't create Requires for workdir if "missing ok" (bsc#1113083) 794443b1c logind: use manager_get_user_by_pid() where appropriate 986d63b00 logind: rework manager_get_{user|session}_by_pid() a bit 83d0f831e login: fix user@.service case, so we don't allow nested sessions (#8051) (bsc#1112024) f2a73744c core: be more defensive if we can't determine per-connection socket peer (#7329) fc9172ff8 core: introduce systemd.early_core_pattern= kernel cmdline option cd2ed8f59 core: add missing 'continue' statement c6c6cc19c core/mount: fstype may be NULL 1da4c5dd4 journald: don't ship systemd-journald-audit.socket (bsc#1109252) 7bb6768b3 core: make "tmpfs" dependencies on swapfs a "default" dep, not an "implicit" (bsc#1110445) 5aa2ccd69 mount: make sure we unmount tmpfs mounts before we deactivate swaps (#7076) 57cc22fef detect-virt: do not try to read all of /proc/cpuinfo (bsc#1109197) 3c4503ec6 emergency: make sure console password agents don't interfere with the emergency shell 7a1eb19d7 man: document that 'nofail' also has an effect on ordering e0326fc41 journald: take leading spaces into account in syslog_parse_identifier a09b1acab journal: do not remove multiple spaces after identifier in syslog message e7a85abe6 syslog: fix segfault in syslog_parse_priority() 6d66aca0f journal: fix syslog_parse_identifier() be15909f3 install: drop left-over debug message (#6913)- Ship systemd-sysv-install helper via the main package This script was part of systemd-sysvinit sub-package but it was wrong since systemd-sysv-install is a script used to redirect enable/disable operations to chkconfig when the unit targets are sysv init scripts. Therefore it's never been a SySV init tool.- Import commit 5da416950ebe9c4d834ffb8382b0dcaee1941aa8 9d0d3c2bb tmpfiles: don't adjust qgroups on existing subvolumes (bsc#1093753) 828198433 socket-util: attempt SO_RCVBUFFORCE/SO_SNDBUFFORCE only if SO_RCVBUF/SO_SNDBUF fails (bsc#991901) 043f75c0d user@.service: don't kill user manager at runlevel switch (bsc#1091677) 21eae45f7 units: make sure user@.service runs with dbus still up 27f607ce7 fix race between daemon-reload and other commands (v234) (bsc#1105031) 83126307c nspawn: always use mode 555 for /sys (bsc#1107640) 8a77eed0a cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990) 7ebb0643c cryptsetup: add support for sector-size= option (#9936) (fate#325697)- Enable or disable machines.target according to the presets (bsc#1107941) Enable or disable machines.target according to the distro's presets.- Import commit f26a4b03baf10f479951bdffa0f70eff6b5451c1 5af898dfe core/service: rework the hold-off time over message a4aa80162 systemctl: load unit if needed in "systemctl is-active" (bsc#1102908) 72f8ae153 core: don't freeze OnCalendar= timer units when the clock goes back a lot (bsc#1090944) ed49f225e man: SystemMaxUse= clarification in journald.conf(5) (bnc#1101040) c47c1fd5e core: in --user mode, report READY=1 as soon as basic.target is reached (#7102) ee9d1567c sd-bus: extend D-Bus authentication timeout considerably (#6813)- Add 0002-udev-optionally-disable-the-generation-of-the-partla.patch (bsc#1089761) This patch adds "udev.no-partlabel-links" kernel command-line option that can be used to disable the generation of the by-partlabel symlinks regardless of the name used. This might be useful to prevent the generation of such symlinks on big setups where it could have a bad impact on the performance of the boot process. This will allow user to workaround bsc#1089761 whatever the partlabel used for disks (previous patch was only dealing with "primary" and "logical" names). DISCLAIMER: this new option must be used to workaround the previous bug *only* as it will be dropped as soon as the udev perf issue will be addressed.- Import commit 2bf8d0f79760dd75bc221f9e91d294e4957e6c95 181ae456a udev: use MAC address match only for ibmveth/ibmvnic/mlx4 (bsc#1095096) 5a1aa8454 compat-rules: generate more compat by-id symlinks for NVMe devices (bsc#1095096)- Import commit 455f9b8841be896cb9a46a76f441a68a54187b29 be5d72795 systemctl: mask always reports the same unit names when different unknown units are passed (bsc#1095973) d484e8167 systemctl: check existence of all units, not just the first one b33745be7 scsi_id: Fixup prefix for pre-SPC inquiry reply (bsc#1039099) f141e98a0 device: make sure to always retroactively start device dependencies (take #2) (bsc#1088052) cc7cfdc06 locale-util: on overlayfs FTW_MOUNT causes nftw(3) to not list *any* files c10206dad Fix pattern to detect distribution 7b8f97e93 basic/macros: rename noreturn into _noreturn_ (#8456) f4836f05a install: "user" and "global" scopes are equivalent for user presets (boo#1093851) 8f3fb5638 install: search preset files in /run (#7715) e871d6192 install: consider globally enabled units as "enabled" for the user (bsc#1093851) a25169127 install: consider non-Alias=/non-DefaultInstance= symlinks as "indirect" enablement c4635e551 install: only consider names in Alias= as "enabling" 1b78301a5 install: move and rename to lowercase two functions e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158) 6c565351b man: updated systemd-analyze blame description for service-units with Type=simple (#8834) (bsc#1091265) 380e80633 fileio.c: fix incorrect mtime 0ae375c66 fileio: support writing atomic files with timestamp- Drop runtime dependency on dracut (bsc#1098569) Otherwise systemd pulls in tools to generate the initrd even in container/chroot installations that don't have a kernel anyways. For environments where initrd matters, dracut should be pulled via a pattern.- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2 e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)- Disable user services by default (bsc#1090785)- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)- Make sure /etc/machine-id has correct permissions (boo#1092269) This should be only needed for those who keep a Beta/RC installations.- Move 80-container-v[ez].network in systemd-container sub-package - Move 80-container-host0.network from udev to systemd- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2 92bf37b0a device: skip deserialization of device units when udevd is not running 0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052) 88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769) Previously this symlink was created in /etc/sysctl.d during %post which made the symlink not owned and more importantly it was created only if /etc/sysctl.conf is already installed which is not always the case during the installation process it seems. So ship the symlink unconditionally and put it in /usr/lib/sysctl.d instead since it's a distro default behavior that might be overriden by sysadmin later.- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7 a374ad328 Drop busname unit type (bsc#1089376) 85a01da56 shared/dissect-image: adapt to LUKS2 format a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us 386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571) 5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422) 54833e3ab tmpfiles: fix directory removal with force symlink (#8619) 04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker- Drop dangling symlinks when systemd-container is not installed (bsc#1089376) - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount symlink is now part of systemd-container. - Dangling org.freedesktop.*.busname symlinks have been dropped completely and the support of busname has been removed from the git repo since it was dead code (kdbus was rejected).- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485) Add the offline event environmental condition to restrict the rule that is can only be triggered when the change event is received with the "offline" environmental data. The 27664c581 "ACPI / scan: Send change uevent with offine environmental data" kernel patch changed the corresponding code in kernel. This change prevents the udev rules for acpi container be triggered by "udevadm trigger" from user space.- Split systemd-coredump sub-package off (bsc#1083849)- Rename the tarball to reflect the exact version used (bsc#1087323) So it's clear that it contains some additional patches on top of the upstream version. Use the commit hash in the name so the exact version can easily be identified. Provide _service file which can be used to retrieve the tarball from the git repo (with "osc service disabledrun").- Import commit b83c42d5d91a5ace2b4aa7420e83c98292e6f9e3 a59988ee5 sysusers: make sure to reset errno before calling fget*ent() 98ddbf6b3 sysusers: also add support for NIS entries in /etc/shadow 586c08f63 sysusers: do not append entries after the NIS ones (bsc#1085062 bsc#1045092) 3993df26a compat-rules: fix error detected by the rule syntax checker- Don't ship machines.target in systemd-container but in systemd main package machines.target is supposed to be a standard target for starting/stopping all containers. systemd-nspawn is the main user of it but other container managers could also make use of it.- Create systemd-container-mini package So we don't have to manually track and remove all files that should be shipped by systemd-container in the case of a bootstrap build.- Run migrate-sysconfig-i18n.sh also during package installation (bsc#1086164) This is needed when we upgrade from SLE11.- Split systemd-container sub-package off (fate#325469) This split off has been in Factory/TW since a couple of weeks now without any reported problems and I think it makes also sense to have it in SLE.- Import commit 6efb938f152b60c905b8496980697400b13e02a7 06d5d0701 rules: maintain 80-hotplug-cpu-mem.rules in the package 01db63eeb rule-syntax-check: allow commas inside quoted strings 8247f6155 rule-syntax-check: add support for escaped double quotes a6354c05b rule-syntax-check: values can contain escaped double quotes 5c8d9a358 rule-syntax-check: PROGRAM is not supposed to get value assigned 88174ae85 compat-rules: fix syntax errors spotted by test/rule-syntax-check.py f4f94ab2e meson: install rules/80-hotplug-cpu-mem.rules 2901aa9b9 meson: install rules/60-ssd-scheduler.rules db1d8eacd compat-rules: make path_id_compat build with meson- Fix hotplug memory in 80-hotplug-cpu-mem.rules Drop broken script udev-remount-tmpfs. When new memory was hotplugged, the rule was supposed to call the external script (udev-remount-tmpfs) to remount all tmpfs. However the script was broken since its introduction (commit rev=715, 14/07/2014) and had no effects... this makes me wonder if we shouldn't get rid of this... The logic is now embedded in the rule file.- Add basic user space support for suspend to idle (fate#323814) Add 99-wakeup-from-idle.rules Currently this only covers the power button and usb/AT keyboards as wakeup devices. It is planned to make that configurable in the future.- Add dmi conditions to 80-acpi-container-hotplug.rules (bsc#1078358, bsc#1081170, bsc#1075743) Patch sent by Lee, Chun-Yi to @systemd-maintainers. http://mailman.suse.de/mailman/private/systemd-maintainers/2018-February/032177.html Commit message: Add dmi/id conditions to 80-acpi-container-hotplug.rules to restrict the rule that it can only be triggered on Huawei Kunlun 9008, 9016 and 9032 machines. (bsc#1078358, bsc#1081170, bsc#1075743)- Re-enable systemd-firstboot It's used by the installer and also by JeOS.- Import commit 0987985db5a5797db8dc708e67166d329fa74858 1293c0056 core: use id unit when retrieving unit file state (#8038) (bsc#1075801) 596b2b241 Revert "vconsole-setup: add SUSE specific settings for font/keyboard in sysconfig" 0b595da04 Revert "locale-setup: handle locale at boot time well" 2a181fc6f insserv-generator: make it build with meson 7b0401da4 build-sys: don't build networkctl if networkd is disabled b1e0a348d fileio: include sys/mman.h f1fa784cb meson: update header file to detect memfd_create() 8838ba7ec meson: define _GNU_SOURCE to detect copy_file_range() (#7734)- Disable systemd-firstboot I don't think there's any use case for it currently.- Drop unused code dealing with tmp.mount Commit "Don't ship /usr/lib/systemd/system/tmp.mnt at all (bsc#1071224)" forgot to delete this chunk of code which is no more needed.- Make systemd-timesyncd use the openSUSE NTP servers by default Previously systemd-timesyncd used the Google Public NTP servers time{1..4}.google.com- Drop 0001-Revert-locale-setup-handle-locale-at-boot-time-well.patch 0002-Revert-vconsole-setup-add-SUSE-specific-settings-for.patch These 2 patches have been merged in branch "SUSE/v234"- Don't ship /usr/lib/systemd/system/tmp.mnt at all (bsc#1071224) But we still ship a copy in /usr/share/systemd. Users who want to use tmpfs on /tmp are supposed to add a symlink in /etc/ pointing to the copy shipped in /usr/share. To support the update path we automatically create the symlink if tmp.mount in use is located in /usr/lib.- Enable systemd-networkd on Leap distros only (bsc#1071311)- Don't build seccomp support in the mini package- Don't build-require selinux for the mini package- Drop libgcrypt.m4 The mini package builds fine without it so it doesn't seem necessary anymore.- Import commit d5a5df298ccf490eb1da5cd671922dcda5ec17e1 531a00c84 Restore "restore /var/run and /var/lock bind mount if they aren't symlink""- Import commit fd4e9389d87901c420a5a05dd016a002bc9e85b2 7fb9ea39a Revert "restore /var/run and /var/lock bind mount if they aren't symlink" 23ce1207a meson.build: make docdir configurable (#8068)- Import commit 08eebc34ac22b2175321f3a8814ed0aca3bc88bb 07c6ee3eb compat-rules: get rid of scsi_id when generating compat symlinks for NVMe devices (bsc#1051465)- Drop 0001-compat-rules-get-rid-of-scsi_id-when-generating-comp.patch It's been merged in branch "compats/udev-compat-symlinks" which was merged in branch "SLE15" in its turn.- Import commit b4e4c090b2238e80f4d82b11739bc428d3f0e00f 37da1facb core: disable session keyring per system sevice entirely for now (bnc#1045886) 8a1ae0449 strv: fix buffer size calculation in strv_join_quoted() 2b8971b8a tmpfiles: refuse to chown()/chmod() files which are hardlinked, unless protected_hardlinks sysctl is on (bsc#1077925 CVE-2017-18078) 8c2bcac25 tmpfiles: change ownership of symlinks too- Drop 0001-core-disable-session-keyring-per-system-sevice-entir.patch It's been merged in branch "SUSE/v234".- Import commit b8dab767c4df0fba4766f1e2b9977a2cd329b20e 3d60486f7 core/timer: Prevent timer looping when unit cannot start (bsc#1068588) 54c0add7c logind: store a timestamp when the ACPI power button is pressed (bsc#981830 bsc#888612 bsc#1072933) 460bd0cd6 Revert "handle SYSTEMCTL_OPTIONS environment variable" (fate#323393)- Drop 0001-Revert-handle-SYSTEMCTL_OPTIONS-environment-variable.patch The patch has been merged in SUSE/v234 since its counterpart in YaST has been accepted in Factory and SLE15.- Drop 0001-logind-store-a-timestamp-when-the-ACPI-power-button-.patch The patch has been verified on Beta5 and hence has been merged in "SLE15" branch.- Import commit c2ed2c6dc3aed4b3c22cfcd4b8fd28da01f6471e aa3eba828 delta: don't ignore PREFIX when the given argument is PREFIX/SUFFIX b1ea0173a delta: extend skip logic to work on full directory paths (prefix+suffix) (bsc#1070428) 77c5065f9 delta: check if a prefix needs to be skipped only once db32866d1 Fix parsing of features in detect_vm_xen_dom0 (#7890) (bsc#1048510) 11d40461a sd-bus: use -- when passing arguments to ssh (#6706)- Edit scripts-systemd-fix-machines-btrfs-subvol.sh We shouldn't be creating a /var/lib/machines subvolume if /var is already a seperate partition or subvolume. /var/lib/machines will already be excluded from snapper & similar tooling in this case.- Import commit 290129a57006338211f8c139a52402cb1ccebbf7 1148d99f6 tmpfiles: consider /etc uninitialized also when /etc/machine-id is present but empty (#7849) (bsc#1075179) 3a95f69bf tmpfiles: downgrade warning about duplicate line- Import commit e1f3d0784798d2a31e7492a26ce660fda2b0ddb8 8c7f0c449 service: Don't stop unneeded units needed by restarted service (bsc#1066156) 869be64ce sysctl: use raw file descriptor in sysctl_write (#7753) 0c2400810 sysctl: disable buffer while writing to /proc (bsc#1071558) 9eb1f30b8 Use read_line() and LONG_LINE_MAX to read values configuration files. (bsc#1071558) 4dbea654f def: add new constant LONG_LINE_MAX 48f14cd71 fileio: add new helper call read_line() as bounded getline() replacement- Add 0001-Revert-handle-SYSTEMCTL_OPTIONS-environment-variable.patch Patch has been quarantined. The only user of SYSTEMCTL_OPTIONS was yast2-installation and its usage has been removed in SLE15 (the changes are still pending for Factory).- Import commit d4267fb7c1c6718015309275d303e652155705f8 861e1a222 build-sys: udevadm should have LOG_REALM=LOG_REALM_UDEV 8ed5cf3fb meson: libudev_core and udevadm should have LOG_REALM=LOG_REALM_UDEV (#7666) a9f93f1d0 virt: use XENFEAT_dom0 to detect the hardware domain (#6442, #6662) (#7581) (bsc#1048510) fe56abdf9 seccomp: arm64/x32 do not have _sysctl (bsc#1069239) c9194fe37 seccomp: arm64 does not have mmap2 (bsc#1069239) 31d9b3c32 fs-util: small tweak in chase_symlinks() 9dd0bc7a3 meson: do not include man/meson.build if xsltproc not found 7e29e2b07 analyze: replace --no-man with --man=no in the man page (bsc#1068251)- Add missing /etc/systemd/network directory backported from Factory- Add (back) 0001-logind-store-a-timestamp-when-the-ACPI-power-button-.patch (bsc#1072933) Patch added in the quarantine area. Once tested it could be moved to the SLE15 branch.- Stop importing i18n settings from /etc/sysconfig (fate#319454) Add the 2 following patches in the quarantine area: 0001-Revert-locale-setup-handle-locale-at-boot-time-well.patch 0002-Revert-vconsole-setup-add-SUSE-specific-settings-for.patch- Import commit 00dc7ae09282e074a16b37a7329296371cb9efda 63481b24b firstboot: do not write vconsole.conf when arg_keymap is empty (bsc#1070124)- Add 0001-compat-rules-get-rid-of-scsi_id-when-generating-comp.patch (bsc#1051465) This patch is not yet merged in the 'compats/udev-compat-symlinks' branch: we asked to upstream if it would be possible to introduce a new specifier that wouldn't strip trailing whitespaces , see https://github.com/systemd/systemd/issues/7462 Also this allows to give the patch more testing before merging it in the git repo.- Drop a useless rm(1) from the specfile- Add 80-acpi-container-hotplug.rules (bsc#1040800) A "temporary" rule file that is maintained by the kernel team until a proper solution is found in the kernel. It doesn't belong to udev normally but for convenience purpose we welcome this homeless rule.- Remove requires for pwdutils, we don't need the shadow tools anymore [bsc#1069150]- Drop 0001-systemd-firstboot-add-vconsole-keymap-support.patch It's not needed since it's been merged in the git repo (see commit 86804326f).- Import commit 79ede6be5b01b6031637e3ac95248a9bf392ce7c 22dcb1d04 tmpfiles: when /etc is not fully initialized, some specifiers are expected to be unresolvable (#6860) (bsc#1055664) 216beb768 tmpfiles: Allow create symlink on directories (#6039) baf85eb79 udev: net_setup_link: don't error out when we couldn't apply link config (#7328) 86804326f systemd-firstboot: add vconsole keymap support (#7035) (bsc#1046436) - Remove stderr redirection to /dev/null when calling %tmpfiles_create since it's not needed anymore due to commit 22dcb1d04. Indeed the messages are no more emitted at LOG_WARN but LOG_NOTICE.- Fork Factory and create a dedicated project for SLE15. It will contain all SLE15 dedicated bits: - forward port all SLE dedicated patches - merge compats/persistent-nic-names (bsc#1061883) - update with compats/udev-compat-symlinks - update with SUSE/v234 - disble networkd, resolved, journal-remote - Import commit 0053b83a1d913954f0d2eb22bb2a0df2ef252e19 9b64225e9 (origin/SUSE/v234, SUSE/v234) resolved: fix loop on packets with pseudo dns types (bsc#1065276 CVE-2017-15908) 261a4ef38 (origin/compats/udev-compat-symlinks, compats/udev-compat-symlinks) compat-rules: generate compat by-id symlinks with 'nvme' prefix missing (bsc#1063249) 9707249bc udev: add option to generate old 'buggy' SCSI serials 52cf64d2b journald: turn ForwardToSyslog= on by default (bsc#1065301) e2f3cf5f2 logind: disable RemoveIPC by default 7a2a3b134 (origin/compats/persistent-nic-names, compats/persistent-nic-names) udev: add a persistent rule for ibmvnic devices 74b2d3b88 udev: disable predictable network interface names by default ef9f437a0 udev: Revert the use of -DNET_IFNAME=1 to use persistent name by default e61a078ed udev: move persistent net rule generator to SCRIPTS 9c95cc9ac udev: rework KVM persistent rules generatior (again) 760a6f70d udev: fix persistent netrule generator for KVM 9d173534c udev: better checks in write_net_rules() in persistent net rule generator 5540a0b7c udev: fix duplicated rules with layer3 interfaces in persistent net rule generator d87359c59 udev: re-enable dev_id conditionally in persistent net rule generator 5a0c34683 udev: disable usage of dev_id in persistent net rule generator 73fa44a85 udev: re-add persistent net rule generator a7d25354d Revert "udev: network device renaming - immediately give up if the target name isn't available"- Import commit e44237e76f6e133e62ff6c681d3fd06ebf12f66d a4e02c099 udev-rules: all values can contain escaped double quotes now (#6890) d2b767a76 tmpfiles: remove old ICE and X11 sockets at boot (#6979)- Add 0001-systemd-firstboot-add-vconsole-keymap-support.patch (bsc#1046436) Temporary patch until it's been merged by upstream, see https://github.com/systemd/systemd/pull/7035- Damn forgot to drop 0001-Revert-core-device-Use-JobRunningTimeoutSec-for-devi.patch in the spec file- Import commit 6dea894131d78b20b9e0482f75afa6ee4dec8627 1cdd944b0 unit: when JobTimeoutSec= is turned off, implicitly turn off JobRunningTimeoutSec= too (bsc#1004995) This make 0001-Revert-core-device-Use-JobRunningTimeoutSec-for-devi.patch not needed anymore.- Import commit 93688f8e53b4e482a55a7d4aba2d927ddedebdde c53522be3 compat-rules: allow to specify the generation number through the kernel cmdline- Import commit c1e8af7d1e8b09c2878a5b17f513bfc41ae46dc6 982754275 build-sys: make sure 61-persitent-storage-compat.rules is installed with meson 9ac2e8b9b udev: proc_cmdline_get_key() FTW! (#6925)- Import commit 9e0985dc330b1cf04bc44049962343bdf4ba851a 4fd7cd041 pam_logind: skip leading /dev/ from PAM_TTY field before passing it on dd6312828 logind: make sure we don't process the same method call twice (#6583)- Update scripts-systemd-upgrade-from-pre-210.sh script - drop dependency on awk - fallback to runlevel #3 if something goes wrong Note: I'm not sure how this is supposed to work as /etc/inittab is likely to be missing in my understanding. Indeed this file is part of the aaa_base package which might be upgraded before systemd is installed...- Drop macros.systemd.upstream as it's not used- Import commit 58ea3c819cca1639ef8c922505c573ba5e262b3d 334945091 shutdown: fix incorrect fscanf() result check (#6806) 027202892 shutdown: don't remount,ro network filesystems. (#6588) (bsc#1035386) bc77b53a5 shutdown: don't be fooled when detaching DM devices with BTRFS (boo#1055641) d9d293847 util: make get_block_device() available 421ce7382 tmpfiles: silently ignore any path that passes through autofs (#6506) (bsc#1045472) ca8f90e62 device: make sure to remove all device units sharing the same sysfs path (#6679)- Make use of "%tmpfiles_create" in %post of the logger subpackage- Add scripts-udev-convert-lib-udev-path.sh (bsc#1050152) This script takes care of converting /lib/udev into a symlink pointing to /usr/lib/udev when upgrading a distro using an old version of udev.- Make use of "%make_build" rpm macro- Renumber scripts to start at index 100- Introduce scripts-systemd-upgrade-from-pre-210.sh It collects all existing hacks done in %post to fix old/deprecated settings in systemd older than 210. This includes hacks needed to fix system that are migrating from SysV. There shouldn't be any functional changes.- Move scripts for packaging workaround/fixes in /usr/lib/systemd/scripts It also renames fix-machines-subvol-for-rollbacks.sh into scripts-systemd-fix-machines-btrfs-subvol.sh Note that the "scripts-systemd-" prefix is used for those scripts so we can gather them. Why not using a directory instead ? because osc doesn't allow that.- Add 0001-Revert-core-device-Use-JobRunningTimeoutSec-for-devi.patch (bsc#1048605) It's a temporary but urgent fix for a regression discovered in bug 1048605. The fix is still under discussion with upstream but we need to make progress here and limit the number of affected users. Consequently this fix reintroduces bsc#1004995 (the bug report has been re-opened) but this one is far less critical and a workaround was provided. The final solution will fix both bugs.- Import commit 2bed4bf99cf7f24eafda490f778ed5e109f8d7f1 7a4935268 compat-rules: drop the boggus 'import everything' rule (bsc#1046268)- %regenerate_initrd_post is suppsed to be used in %post (not %pre) section- Import commit 6887cc21f23e33ac37801a01d76176e5c16fd8ea 9dcc6c04e pid1: forward port console specificities handling for s390 arch to v234- Import commit 986e98fd5a75470ba17e21fea12d7d4e966c1ecc 4706ebc62 call chase_symlinks without the /sysroot prefix (#6411) (boo#1051172)- Remove the unneeded hack forcing systemd-crypsetup binary to be linked against the just built libudev I don't remember why it was added but it looks unnecessary: most of all systemd components are linked againt libsystemd-shared.so which includes all the just built symbols. Also I don't see why it was done only for systemd-cryptsetup since all other binaries should have had suffered from the same issue.- Import commit c5705e01800bdadd6a4fa7dc50d47b13eb697211 8ea065d44 compat-rules: don't rely on ID_SERIAL when generating 'by-id' symlinks for NVMe devices (bsc#1048679)- Import commit 06bed720274d9436405a7c27c8238d7d1aefca2b 66fffdf12 build-sys: don't hook var-lib-machined.mount to remote-fs.target when machined is disabled 96c232066 Revert "core: don't load dropin data multiple times for the same unit (#5139)"- Drop support of compression from the mini package Hence remove the relevant build-requires from the mini package.- Upgrade to v234 (commit 78af11131da1b2760778206806c0ebe8616a5284) - package /etc/systemd/system/dbus-org.freedesktop.network1.service - /usr/lib/systemd/resolv.conf is not installed if resolved is disabled- Edit pkgconfig(liblz4) dependency: liblz4 now uses 1.x *again*- Added 0001-core-disable-session-keyring-per-system-sevice-entir.patch (bnc#1045886) Temporary patch to disable the session keyring stuff as it's currently broken and may introduce some security holes.- Import commit 21827ea0875ff197e16e72003b2bfaa1c6e8daad 1ad06735f core: fail when syntactically invalid values for User=/Group= fields are detected (bsc#1047023) d563972e2 timesyncd: don't use compiled-in list if FallbackNTP has been configured explicitly f4e0c16f5 gpt-auto-generator: fix the handling of the value returned by fstab_has_fstype() in add_swap() (#6280) e1345aac5 fix add_esp() in the gpt-auto-generator.c (#6251) c591ece9a automount: don't lstat(2) upon umount request (#6086) (bsc#1040968) 643ab2eea gpt-auto-generator: disable gpt auto logic for swaps if at least one is defined in fstab f07d2022f fstab-util: introduce fstab_has_fstype() helper bf735bb35 fstab-util: don't eat up errors in fstab_is_mount_point() a4b40fbed resolved: simplify alloc size calculation (bsc#1045290 CVE-2017-9445) 8b960bec0 only check signature job error if signature job exists (#6118) (boo#1043758) 1418bfb5b job: Ensure JobRunningTimeoutSec= survives serialization (#6128) (bsc#1004995) 19b6d5f08 udev: turn off -Wformat-nonliteral for one safe case 717ace439 udev: net_id add support for platform bus (ACPI, mostly arm64) devices (#5933) a3bf2e6b5 core/mount: pass "-c" flag to /bin/umount (#6093)- Add minimal support for boot.d/* scripts in systemd-sysv-convert (boo#1046750) While at it, the handling of the symlink priorities is also removed since it doesn't appear to be used at all.- Don't try to restart networkd/resolved if they're disabled (boo#1045521) "systemctl try-restart/preset" wants the unit files exist.- Stop shipping /usr/lib/sysusers.d/basic.conf (bsc#1006978) Ok looks like the previous change was the right thing to do and we continue to follow this path by relying on the new user/group scheme Therefore the basic system user/group are now managed and created by system-sysusers and udev also relies on this for the groups it uses in its rule files. Ideally we should have listed all of the groups in the deps (with "Requires: group(disk)" but the list of the groups is rather long and the risk for those groups to be re-organized is probably low, so currently we simply use "Requires: system-group-hardware" as a shortcut.- Make sure "lock" group is created On SUSE distros, /run/lock must be owned by "lock" group (see boo#733523). This group was previously created by another package but since a recent changes it doesn't seem to be true anymore or at least this package isn't pulled in anymore when building the rescue system. For now make systemd creates the group by adding "Requires: group(lock)". I'm currently not sure why we don't use sysusers.d stuff for that purpose and if the "lock" group on /run/lock is still mandatory. This should be revisited later.- Make sure dracut (if installed) will embed the new compat rule The new compat rule must be embedded in the initramfs so make sure that the installed dracut supports it.- Upgrade to v233 (commit 330b55d5e28d17f361062dba66426e46fb7d7857) - package new systemd-umount binary - package new environment generator stuff - drop /dev/root symlink support - /etc/pam.d/systemd-user is not patched anymore but we ship a dedicated file for SUSE now. - manage compat symlink generation in a dedicated branch (bsc#1040153)- Fix systemd-sysv-convert when a package starts shipping service units (bsc#982303) The database might be missing when upgrading a package which was shipping no sysv init scripts nor unit files (at the time --save was called) but the new version start shipping unit files.- Fix indentation in systemd-sysv-convert While at it, strip trailing whitespaces. No functional changes.- Disable group shadow support (bsc#1029516) The new configure option will be imported during the next tarball update.- Ship /var/log/README Unfortunately it's not possible to also ship /etc/init.d/README because of rpm "sanity" checks that prevent executable in /etc/init.d- Drop systemd-{journalctl,loginctl} legacy symlinks.- Drop %preun section Currently the only use of this section is to remove the symlinks enabling systemd services on package removal. Those symlinks were initially installed by the systemd package installation but could have been overriden by the sysadmin later. If so the symlinks shouldn't be uninstalled. Also in a near futur disabling services will install a symlink to /dev/null.- Import commit 9e33c2ae69fbb705e8ad143536e419a231e93020 04ef0eab8 importd: support SUSE style checksums supplementary (#5800) fb601ad9a importd: support SUSE style checksums (#5206) (fate#322054) b76b27c76 hwdb: fix warning "atkbd serio0: Unknown key pressed" (#5772) (boo#1010220) cb0d991f6 loginctl: fix typo causing ignoring multiple session IDs (#5732)- Make use of %systemd_postun()- Restart a couple of systemd services on package update Those services (most notably journald) should support restarting these days. However logind still doesn't but that should be fixed pretty soon, well I hope :)- Don't buildrequire pam-config, it's not used at this step. Also drop the use of it in %postun as it can't realistically happen...- Don't call /sbin/ldconfig in %post of the main package systemd main package doesn't ship any shared libs so there's no point in calling ldconfig in %post/%postun- Silent %tmpfiles_create in %post (bsc#1034938) Due to bsc#1024740, we stopped generating /etc/machine-id during systemd package installation making the specifier '%m' unavailable in the tmpfiles.d configuration files at this time. Make it simple for now and silent %tmpfiles_create, after all that's how the macro was implemented originally.- Import commit f0325620d23a247682c629d28883a364e4a7a8c4 327814841 core: when a unit's SourcePath points to API VFS pretend we are never out-of-date (#5487) f4b9fb58e units: move Before deps for quota services to remote-fs.target (#5627) (bsc#1028263) 44b9d27f8 udev: net_id - support predictable ifnames on vio buses (#5675) (bnc#1029183) 64f4761c9 units: apply plymouth warning fix to in rescue mode as well (#5615) 77607b887 units: do not throw a warning in emergency mode if plymouth is not installed (#5528) (bsc#1025398) 336d6016c core: downgrade "Time has been changed" to debug (#4906) (bsc#1028610)- Consider chroot updates in fix-machines-subvol-for-rollbacks.sh (bsc#1030290)- Initialize /etc/machine-id during the first boot (bsc#1024740) Previously that was done at package installation but it didn't fit well for appliance builds.- Import commit 68fc0a749a83d16d4cde8471d5030bc6254ffd96 76d4d05fb udev: fix variable assignment 473df8cc4 udev-rules: perform whitespace replacement for symlink subst values (bsc#1025886) d6c3ff647 udev-event: add replace_whitespace param to udev_event_apply_format 30ad15f7c libudev-util: change util_replace_whitespace to return number of chars in dest- Import commit 103259b3226251d06f79ca627f7b0ba0bd49f4bc 0ee7890dd automount: if an automount unit is masked, don't react to activation anymore (#5445) 99865a181 core: make sure to destroy all name watching bus slots when we are kicked off the bus (#5294) (bsc#1006687) f34234c54 build-sys: add check for gperf lookup function signature (#5055) 44e39538f sd-event: "when exiting no signal event are pending" is a wrong assertion (#5271) (boo#995936 bsc#1022014) 471b26807 sd-event: when an event source fails, don't assume the type of it is still set- Don't ship systemd-resolved for now (bsc#1024897) If resolved is enabled , systemd-tmpfiles creates a wrong symlink in /etc/resolv.conf which confuses the network manager actually used.- More indentation cleanup (no functional changes)- Remove obsolete insserv requirements for udev again [bsc#999841]- Import commit cd97d5d5fef79ab9d957bf6504d085c0faca6bfc e587b6ce0 disable RestrictAddressFamilies on all architectures but x86_64 one (bsc#1023460) c8ae05632 journald: don't flush to /var/log/journal before we get asked to (bsc#1004094) 7261eaf3e sd-event: fix sd_event_source_get_priority() (#4712)- Move fix for permission set on /var/lib/systemd/linger/* (no functional changes) Move that part after the fix on timer timestamp files otherwise the comment doesn't make sense.- Import commit 028fd9b60580976dffb09b3576a2b652ee35137c cc2ca55ff build-sys: do not install ctrl-alt-del.target symlink twice ececae77a device: Avoid calling unit_free(NULL) in device setup logic (#4748)- Ship systemd-resolved but it's disabled by default (bsc#1018387) The NSS plugin will also be disabled, users need to enable it manually.- Don't ship ldconfig.service anymore This service was introduced to support stateless systems that support offline /usr updates properly. AFAIK we don't support any such system for now, so disable it. If it's wrong it's easy enough to restore it back. Related to bsc#1019470.- Be more consistent with indentation (*no* functional changes) Indentation should use 8 spaces now (no tabs).- Import commit 2559bc0c076b58f0a649056e79ca90fe5f1d556c 9c4a759ab systemctl: 'show' don't exit with a failure status if the requested property does not exist [SUSE] (bsc#1021062) f9194193b systemctl: remove duplicate entries showed by list-dependencies (#5049) (bsc#1012266) 2a6653335 rule: don't automatically online standby memory on s390x (bsc#997682)- Fix permission set on /var/lib/systemd/linger/* Those files are created by logind which run with umask(0022), so they are not world writable and shouldn't be affected by bsc#1020601. But it's cleaner to not let files forever with their setuid bit set for no good reason.- Fix permissions set on permanent timer timestamp files (bsc#1020601) (CVE-2016-10156) This change makes sure to fix the permissions of the timestamp files which could have been created by an affected version of systemd. Local unprivileged users could have run arbitrary code as root if systemd previously created world writable suid root files such as permanent timer stamp files.- Import commit 3edb876e3b80437a95502aa5d31d454606ea94bd 27b544224 core: make sure to not call device_is_bound_by_mounts() when dev is null (#5033) (bsc#1018399)- Use the %{resolved} build conditional for the nss-resolve subpackage- /usr/bin/systemd-resolve was missing from the filelist- Silent warnings emitted when udev socket units are restarted during package upgrade (bsc#1018214)- Upgrade to v232, commit de62e96da6a62ac61a7dea45cc558f5fa4342032 - a4dff165d nspawn: resolv.conf might not be created initially (#4799) - b543fe907 nspawn: fix condition for mounting resolv.conf (#4622) - 1aed89e55 core: make mount units from /proc/self/mountinfo possibly bind to a device (#4515) (boo#909418 bsc#912715 bsc#945340) - bfb54ecdc coredumpctl: let gdb handle the SIGINT signal (#4901) (bsc#1012591)- Really include legacy kbd maps in kbd-model-map (bsc#1015515) Instead of fix-machines-subvol-for-rollbacks.sh...- Enable lz4 (which becomes the default) It's much faster than xz and thus should be more appropriate to compress journals and coredumps. The LZ4 logic is now officially supported and no longer considered experimental. The new frame api was released in v125.- Good by compatlibs support There's no longer need for enabling/disabling the support for the compatlibs as it's been dropped from the source code.- Drop /usr/lib/systemd/libsystemd-shared-%{version}.so from the 32bit package This shared library is not for public use, and is neither API nor ABI stable, but is likely to change with every new released update. Only systemd binaries are supposed to link against it. This also prevents from the 32bit package to conflit with the 64bit one if this lib was installed by both packages.- Upgrade to v232, commit c5c3445825981e2a5c3ed71214127d5b1b9de802: - Dropped backported commits which has been merged - Forward-port Suse specific patches - Added --disable-lto option to ./configure - Added systemd-mount - Removed in %file /usr/lib/systemd/user/*.socket: since 798c486fbcdce3346cd86 units/systemd-bus-proxyd.socket has been removed. - Removed in %file %{_sysconfdir}/systemd/bootchart.conf since commit 232c84b2d22f2d96982b3c bootchart is not part of systemd anymore. - Backward compat libs have been disabled since it's been dropped from the source code. - Added /usr/bin/systemd-socket-activate in %file - Added --without-kill-user-processes ./configure option - Bump libseccomp build require (>= 2.3.1) as described in README - Specifiy version of libmount as required in the README- libudev-devel 32bit is needed for building 32bit wine now.- specfile: conflict systemd-bash-completion and systemd-mini-bash-completion Otherwise the build system detects that systemd-bash-completion and its mini variant are conflicting at files level even though those packages can't be installed on the same system.- specfile: clean up nss-* plugins descriptions and drop nss-myhostname-config script for now. Currently /etc/nsswitch.conf is supposed to be edited by the sysadmin to enable the modules. However for some reasons only nss-myhostname is removed from the conf file when the corresponding package is uninstalled. This is inconsistent so let's remove it. Actually I'm wondering if we shouldn't make those NSS plugins part of the main package and get rid of all those sub-packages...- specfile: remove old comments and unneeded sed command- specfile: no need to create systemd-update-utmp-runlevel.service symlinks anymore The symlinks in /usr/lib/systemd/system/.target.wants/systemd-update-utmp-runlevel.service are created in Makefile.am since commit d5d8429a12c4b1. 'reboot' and 'poweroff' targets initially had the symlinks but there's not point since the latter conflicts shutdown.target whereas the 2 targets pull it in. See: https://github.com/systemd/systemd/pull/4429- specfile: remove the following warnings: [ 256s] warning: File listed twice: /usr/lib/systemd/system/dbus.target.wants [ 256s] warning: File listed twice: /usr/lib/systemd/system/default.target.wants- Own a couple of directories even if they don't belong to systemd otherwise the build system will complain. Some directories (owned by others packages) are simply used by systemd to ship some scripts or config files to customize others * optional* components. Since thos components are not build required by systemd those directories are not owned by any packages and the BS complains...- Import commit 15ea716 journal-remote: change owner of /var/log/journal/remote and create /var/lib/systemd/journal-upload (bsc#1006372)- %sysusers_create and %tmpfiles_create must be called in %post Calling %pre is broken since the respective conf files are not yet installed.- %{_libexecdir}/{tmpfiles.d,sysusers.d}/systemd-remote.conf are part of systemd-journal-remote package (only).- systemd-journal-{gatewayd,remote,upload} units are only part of "systemd-journal-remote" package. So exclude them from the main package.- Import commit a1c145e6ad6588555dca64402f9103fb1e02b1a0 7f34037 man: explain that *KeyIgnoreInhibited only apply to a subset of locks df5798b Revert "logind: really handle *KeyIgnoreInhibited options in logind.conf" (bsc#1001790 bsc#1005404) f79fee7 Revert "kbd-model-map: add more mappings offered by Yast" 3760c10 manager: tighten incoming notification message checks d6efd71 core: only warn on short reads on signal fd 6eebd91 manager: be stricter with incomining notifications, warn properly about too large ones fdf2dc3 manager: don't ever busy loop when we get a notification message we can't process- Rename kbd-model-map-extra into kbd-model-map.legacy- Remove tcpd-devel build requirement. tcpwrap support has been removed since v212, see commit 7f8aa67131cfc03ddcbd31c0420754864fc122f0- remove all dummy "aliases" to /etc/init.d (as it was already done by factory more than 1 year ago). Even if a sysvinit script is still requiring one of those dummy symlinks this should not be an issue since this is requirement is translated into a weak dependency.- specfile: - do not own /usr/share/zsh directory - do not own /etc/dbus-1 and /etc/dbus-1/system.d dirs - do not own /usr/share/dbus-1 dir- specfile: %{_prefix}/lib/systemd/system-preset was mentioned twice in %files section.- Specfile cleanup: - use curly braces with rpm macros- Specfile cleanup: - %ghost files doesn't need (anymore) to be created in %builroot - do not own /etc/X11/xorg.conf.d and /etc/X11/xinit- Specfile cleanup: no need to protect the manpages with %bootstrap condition in nss-myhostname package since the package itself is already protected.- fix nss-resolve sub package: - add a %files section - add a package description - libnss_resolve.so.2 is now part of this subpackage - add %post and %postun sections- Specfile cleanup: - reorganize some files in %files by types - some config files were missing the "noreplace" attribute- Use %config(noreplace) for %{_sysconfdir}/pam.d/systemd-user- Rework systemd-gatewayd package: - some gateway's files were still in the main package - it now includes all progs dealing with remote journals - it can be turned off (SP2 does that currently) - it's been renamed systemd-journal-remote to reflect that- Specfile cleanup: - only specify once %{_prefix}/lib/systemd/system-shutdown in %file - no need to list the content of %{_prefix}/lib/systemd/user-generators in %file - machined is not built when %bootstrap = 1- Specfile cleanup: - There's no point in listing all generators in %file explicitly. The default is to include all of them and if for some reason one must be excluded then it should be done explicitly.- Specfile cleanup: - remove explicit call to make for building man pages. This is not needed and was maybe useful when generated doc was pre-built and shipped in the tarball.- Specfile cleanup: - break overly long and unreadable line using mkdir - gather directory creations- Stop providing udevd.8 systemd-udevd has replaced udevd for some time already and usage of udevd should be avoided. Therefore don't encourage this and stop documenting it.- Import from factory: - Thu Feb 4 11:05:37 UTC 2016 - lnussel@suse.de - curl also causes building of journal-upload. That one has rather unusal certificate usage, set it's ca root to /etc/pki/systemd instead of the built-in default /etc/ssl as journal-remote and journal-upload think they can put stuff in /etc/ssl/certs then but that directory is managed by p11-kit and doesn't serve the purpose those programs think.- Package rootsymlink-generator helper. It was forgotten when switching to the git repo but re-added back. That said this thing should be removed as it's broken as soon as there's no direct link between the root fs and its backend device node (i.e. BTRFS).- Add kbd-model-map-extra file which contains the additional legacy keymaps needed by yast. This was previously directly patched in the systemd source code.- Imported e251b8d7fb5c801fdfa3a023257ba0e4d514f3b0 - Re-add back /dev/root symlink generation (although this must be deprecated and finally removed).- Migrating to the Suse Systemd git repo: Third step: - Re-enable networkd (disabled by default in SLE12)- Migrating to the Suse Systemd git repo: Second step: - Import the specfile - Import the tarball generated from the git repo - Import lastest changes for the different scripts- Migrating to the Suse Systemd git repo: First step: drop all patches and drop the tar ball. The dropped patches are: fix-support-for-boot-prefixed-initscript-bnc-746506.patch set-and-use-default-logconsole.patch ensure-ask-password-wall-starts-after-getty-tty1.patch 0001-rules-block-add-support-for-pmem-devices-3683.patch Fix-run-lock-directories-permissions-to-follow-openSUSE-po.patch 1007-physical-hotplug-cpu-and-memory.patch 1066-udev-add-compatibility-links-for-truncated-by-id-links.patch watch_resolv.conf_for_become_changed.patch 0019-make-completion-smart-to-be-able-to-redirect.patch systemd-add-user-keep.patch 0001-core-re-sync-bus-name-list-after-deserializing-durin.patch systemd-228-nspawn-make-journal-linking-non-fatal-in-try-and-auto.diff avoid-random-hangs-on-timeouts-due-lost-cwd.patch 1037-udev-exclude-cd-dvd-from-block-device.patch 0001-add-network-device-after-NFS-mount-units.patch journald-advice-about-use-of-memory.patch 1011-64-btrfs.rules-skip-btrfs-check-if-devices-are-not-r.patch 1006-udev-always-rename-network.patch handle-numlock-value-in-etc-sysconfig-keyboard.patch use-rndaddentropy-ioctl-to-load-random-seed.patch 0001-pid1-don-t-return-any-error-in-manager_dispatch_noti.patch 0001-add-hdflush-for-reboot-or-hddown-for-poweroff.patch 0001-pam_systemd_do_override_XDG_RUNTIME_DIR_of_the_original_user.patch 0001-bnc888612-logind-polkit-acpi.patch avoid-divide-by-zero-sigtrap.patch 1035-99-systemd.rules-Ignore-devices-with-SYSTEMD_READY-0.patch suse-sysv-bootd-support.diff ensure-shortname-is-set-as-hostname-bnc-820213.patch parse-crypttab-for-noauto-option.patch tty-ask-password-agent-on-console.patch 0001-pid1-process-zero-length-notification-messages-again.patch handle-root_uses_lang-value-in-etc-sysconfig-language.patch 0001-core-exclude-.slice-units-from-systemctl-isolate.patch vhangup-on-all-consoles.patch 0001-systemctl-pid1-do-not-warn-about-missing-install-inf.patch apply-ACL-for-nvidia-device-nodes.patch make-emergency.service-conflict-with-syslog.socket.patch 0001-journal-warn-when-we-fail-to-append-a-tag-to-a-journ.patch 1096-new-udev-root-symlink-generator.patch 1099-Add-default-rules-for-valve-steam-controller-to-work.patch 0001-journal-set-STATE_ARCHIVED-as-part-of-offlining-2740.patch systemd-install-compat_pkgconfig-always.patch 1012-Skip-persistent-device-link-creation-on-multipath-de.patch 0001-avoid-abort-due-timeout-at-user-service.patch insserv-generator.patch apply-ACL-for-nvidia-uvm-device-node.patch restore-var-run-and-var-lock-bind-mount-if-they-aren-t-sym.patch systemd-pam_config.patch systemd-dbus-system-bus-address.patch let-linker-find-libudev-for-libdevmapper.patch 1098-systemd-networkd-alias-network-service.patch 0001-let-systemctl-completion-ignore-at-names.patch boot-local-start.patch 1095-set-ssd-disk-to-use-deadline-scheduler.patch tomcat6-var-lock-subsys-legacy.patch let-vconsole-setup-get-properties-only-once-to-copy-them.patch plymouth-quit-and-wait-for-emergency-service.patch respect-nfs-bg-option.patch 0001-If-the-notification-message-length-is-0-ignore-the-m.patch 1062-rules-set-default-permissions-for-GenWQE-devices.patch rescue-emergency-target-conflicts.patch Correct_assert_on_unexpected_error_code.patch 1097-udevd-increase-maximum-number-of-children.patch 0001-core-fix-bus-name-synchronization-after-daemon-reloa.patch 1005-create-default-links-for-primary-cd_dvd-drive.patch allow-multiple-sulogin-to-be-started.patch systemd-230-cgroup2-use-new-fstype-for-unified-hierarchy.patch 0010-do-not-install-sulogin-unit-with-poweroff.patch 1003-udev-netlink-null-rules.patch 1002-rules-create-by-id-scsi-links-for-ATA-devices.patch 0001-nss-mymachines-do-not-allow-overlong-machine-names.patch shut-up-rpmlint-on-var-log-journal.patch systemd-tmp-safe-defaults.patch portmap-wants-rpcbind-socket.patch hostname-NULL.patch 0001-pid1-more-informative-error-message-for-ignored-noti.patch 0001-journal-fix-HMAC-calculation-when-appending-a-data-o.patch handle-disable_caplock-and-compose_table-and-kbd_rate.patch kbd-model-map.patch systemctl-set-default-target.patch 0014-journald-with-journaling-FS.patch 0001-On_s390_con3270_disable_ANSI_colour_esc.patch- Import a better fix from upstream for bsc#1001765 - Added: 0001-pid1-more-informative-error-message-for-ignored-noti.patch 0001-pid1-process-zero-length-notification-messages-again.patch - Updated (no code changes, only patch metadata) 0001-If-the-notification-message-length-is-0-ignore-the-m.patch 0001-pid1-don-t-return-any-error-in-manager_dispatch_noti.patch- Re add back "udev: don't require nsserv and fillup" Did this in the wrong project... it was a complicated day today ;)- Added 2 patches to fix bsc#1001765 0001-If-the-notification-message-length-is-0-ignore-the-m.patch 0001-pid1-don-t-return-any-error-in-manager_dispatch_noti.patch- Revert "udev: don't require nsserv and fillup" It's been judged too late for being part of SLE12 final release. Nevertheless it's part of Factory and will be reintroduced after the final release is out (ie through an update).- systemd-sysv-convert: make sure that /var/lib/systemd/sysv-convert/database is always initialized (bsc#982211) If "--save" command was used and the sysv init script wasn't enabled at all the database file wasn't created at all. This makes the subsequent call to "--apply" fail even though this should not considered as an error.- Added patches to fix journal with FSS protection enabled (bsc#1000435) 0001-journal-fix-HMAC-calculation-when-appending-a-data-o.patch 0001-journal-set-STATE_ARCHIVED-as-part-of-offlining-2740.patch 0001-journal-warn-when-we-fail-to-append-a-tag-to-a-journ.patch- udev: don't require nsserv and fillup (bsc#999841) udev has no LSB init scripts nor fillup templates anymore.- Build require python and python-lxml in order to generate systemd.directives man page (bsc#986952)- Add rules: block: add support for pmem devices (#3683) (bsc#988119) 0001-rules-block-add-support-for-pmem-devices-3683.patch- Fix is-enabled check in systemd-sysv-install (bsc#997268)- Only BuildRequire gnu-efi when building the 'real' systemd package.- Add a script to fix /var/lib/machines to make it suitable for rollbacks (bsc#992573)- reverted the systemctl split-off on request of Franck Bui.- Add sysusers to the new split "systemctl" subpackage- Split systemctl and tmpfiles into a separate package- Fix 1099-Add-default-rules-for-valve-steam-controller-to-work.patch to enable missing functionality of Steam Controller- Backport unified_cgroup_hierarchy fix for Linux >= 4.4. boo#989276 + systemd-230-cgroup2-use-new-fstype-for-unified-hierarchy.patch- drop 1060-udev-use-device-mapper-target-name-for-btrfs-device-ready.patch it breaks btrfs on multiple device-mapper devices (boo#984516). The problem it tried to fix is already fixed in rule shipped with btrfsprogs (see boo#912170).- fix warning about missing install info during preset (boo#970293) 0001-systemctl-pid1-do-not-warn-about-missing-install-inf.patch- Avoid bootstrap cycle with sg3_utils- Fix patch patch handle-numlock-value-in-etc-sysconfig-keyboard.patch that is do not close a file descriptor twice (boo#973907)- Add two patches which address logind/networkd disappearing from dbus (and busctl) even while the units and processes continue running. 0001-core-fix-bus-name-synchronization-after-daemon-reloa.patch 0001-core-re-sync-bus-name-list-after-deserializing-durin.patch- drop all compiler/linker option customizations: - -pipe option is used by default since day 0 - get rid of cflags() function which is not needed - --hash-size has no impact specially in runtime IOW, use the default options for the compiler and the linker, there's no point in making systemd different from other package in this regards.- use %make_build instead of 'make %{?_smp_mflags}'- be more strict on own lib version requirements- systemd should require udev with the exact same version- Modify patch handle-numlock-value-in-etc-sysconfig-keyboard.patch to allow that open, seek, and read of /dev/mem may fail e.g. on XEN based virtual guests (bsc#961120)- Add upstream patch 0001-core-exclude-.slice-units-from-systemctl-isolate.patch this fixes forced logouts on isolate target aka changing runlevel (boo#966535)- require curl and bzip2 to build importd - curl also causes building of journal-upload. That one has rather unusal certificate usage, set it's ca root to /etc/pki/systemd instead of the built-in default /etc/ssl as journal-remote and journal-upload think they kan put stuff in /etc/ssl/certs then but that directory is managed by p11-kit and doesn't serve the purpose those programs think. - /var/lib/systemd/random-seed is a file - own /var/lib/machines - add systemd-228-nspawn-make-journal-linking-non-fatal-in-try-and-auto.diff- systemd-sysv-install: Fix chkconfig argument for disable op- Create groups adm,input,tape in fixed order (boo#944660)- Make sure we don't use tmpfs on /tmp by default (bsc#940522)- Avoid enabling readahead services; they have been removed. - In %install, only process kbd-model-map.xkb-generated if it exists. Resolves a build failure in 13.2/42.1.- spec: update minimum kernel version to 3.11 - Update minimum util-linux version to 2.27.1- Add patch to enable working steam controller: * 1099-Add-default-rules-for-valve-steam-controller-to-work.patch- fix CVE-2015-7510: Stack overflow in nss-mymachines (boo#956712) Add 0001-nss-mymachines-do-not-allow-overlong-machine-names.patch- Update to new upstream release 228 * The various memory-related resource limit settings (such as LimitAS=) now understand the usual K, M, G, ... suffixes to the base of 1024 (IEC). Similar, the time-related settings understand the usual min, h, day, ... suffixes now. * CPUAffinity= now takes CPU index ranges in addition to just individual indexes. * A number of properties previously only settable in unit files are now also available as properties to set when creating transient units programmatically via the bus. - Remove 0001-Make-sure-the-mount-units-pulled-by-RequiresMountsFo.patch (merged upstream)- Update to 227. - Rebase systemd-pam_config.patch, handle-root_uses_lang-value-in-etc-sysconfig-language.patch, 0001-add-hdflush-for-reboot-or-hddown-for-poweroff.patch, 0001-On_s390_con3270_disable_ANSI_colour_esc.patch, 0014-journald-with-journaling-FS.patch, 0019-make-completion-smart-to-be-able-to-redirect.patch, avoid-divide-by-zero-sigtrap.patch, systemd-add-user-keep.patch, set-and-use-default-logconsole.patch, tty-ask-password-agent-on-console.patch, 0001-bnc888612-logind-polkit-acpi.patch, watch_resolv.conf_for_become_changed.patch, 1097-udevd-increase-maximum-number-of-children.patch. - Remove 0002-units-enable-waiting-for-unit-termination-in-certain.patch, 1001-re-enable-by_path-links-for-ata-devices.patch, rules-add-lid-switch-of-ARM-based-Chromebook-as-a-power-sw.patch: fixed upstream.- Modify patch handle-root_uses_lang-value-in-etc-sysconfig-language.patch to handle locale at boot time well (boo#927250) - Be able to use build service environments several times- 1096-new-udev-root-symlink-generator.patch: fix substitution in ExecStart value- enable seccomp for aarch64 (fate#318444)- Fix again UEFI for mini package- Drop one more undesirable Obsoletes/Provides. This should have been a Conflicts. (There was already a Conflicts, and since Conflicts go both ways, we won't need a second one.)- No UEFI for systemd-mini- Add 2 upstream patches to fix boo#949574 and bsc#932284 0001-Make-sure-the-mount-units-pulled-by-RequiresMountsFo.patch 0002-units-enable-waiting-for-unit-termination-in-certain.patch- Disable systemd-boot on aarch64 since it fails to build. Error while compiling src/boot/efi/util.o is: usr/include/efi/aarch64/efibind.h:2:20: fatal error: stdint.h: No such file or directory- Fix UEFI detection logic: basically we let configure.ac figure out if UEFI is supported by the current build environment. No need to clutter the spec file with a new conditionnal %has_efi. - Provide systemd-bootx64.efi (aka gummiboot)- Modify patch tty-ask-password-agent-on-console.patch to reflect the changes done for pull request 1432- Undo Obsoletes/Provides (from Aug 11), creates too big a cycle. - Provide systemd-sysv-install program/link [bnc#948353]- Fix patch tty-ask-password-agent-on-console.patch not to crash away but enable it to ask on all devices of /dev/console- Avoid "file not found /etc/udev/rules.d/70-persistent-net.rules" waring occurring in %post- Add patch let-vconsole-setup-get-properties-only-once-to-copy-them.patch to avoid broken virtual console mapping due stressed ioctl API for the virtual consoles (boo#904214)- Fix last change that is use the new name for udev packages in %pretrans.- restore usage of LUA in %pretrans.- Try to generate the systemd users and groups always in same order to avoid republish other packages (boo#944660)- cleanup specfile by removing commands that were dealing with systemd pre-generated files: we're now using systemd tarball generated directly from the git repo which doesn't contain any of these files. - there's no point in using LUA in %pretrans- Drop 0009-make-xsltproc-use-correct-ROFF-links.patch This patch was initialy added to workaround bsc#842844. But it appears that man(1) was fixed (included since 13.2 at least) to handle manual pages that consist only of a .so directive such as '.so '.- Change use-rndaddentropy-ioctl-to-load-random-seed.patch to make it work on big endian- Use Obsolete/Provides strategy from windows:mingw:mingw64/mingw64-cross-gcc to do the bootstrap cycle and kick out -mini afterwards.- Update to new upstream release 224 * systemd-networkd gained a number of new configuration options for DHCP, tunnels and bridges * systemd-efi-boot-generator functionality was merged into systemd-gpt-auto-generator.- /usr/share/systemd/kbd-model-map: added entries for xkeyboard-config converted keymaps; mappings, which already exist in original systemd mapping table are being ignored though, i.e. not overwritten; needs kbd in buildrequires (FATE#318426)- hostname-NULL.patch: Work around a crash on XEN hosts in OBS. /etc/hostname is not present and systemd then does strchr(hostname,soemthing) with hostname NULL.- Add Correct_assert_on_unexpected_error_code.patch to work around a problem of an assert on ENODEV for closing fd on an input event device (boo#939571)- Remove udev-generate-rules.sh, apparently not used by anything in the systemd nor udev-persistent-ifnames package.- Systemd v222, bugfix release. - Drop upstream patches 0006-pam_systemd-Properly-check-kdbus-availability.patch 0023-core-fix-reversed-dependency-check-in-unit_check_unn.patch 0031-install-fix-bad-memory-access.patch 1032-ata_id-unbotch-format-specifier.patch - Drop SUSE patch 1013-no-runtime-PM-for-IBM-consoles.patch udev does no longer enable USB HID power management at all. - The udev accelerometer helper was removed, obsoleted by iio-sensor-proxy package. - networkd gained a new configuration option IPv6PrivacyExtensions. - udev does not longer support the WAIT_FOR_SYSFS= key in udev rules. There are no known issues with current sysfs, and udev does not need or should be used to work around such bugs.- Avoid restarting logind [bnc#934901] - Do not suppress errors in any case, even if they are ignored- Fix devel package requires (both mini and real required real libsystemd0)- Rework patch tty-ask-password-agent-on-console.patch to fit the requisition of https://bugs.freedesktop.org/show_bug.cgi?id=82004- Rework "-mini" package logic to not conflict with itself and then add libsystemd0 to mini.- remove SysVStartPriority= from after-local.service, unsupported since v218. Note that this option was only parsed and that's it. the logic to give "start priority" was never implemented.- change the default fallback ntp servers to the opensuse pool.ntp.org vendor zone. - We still need to run systemd-sysctl.service after local-fs.target otherwise it works only when /boot is in the root filesystem but not when it is a separate partition.- Obsolete pm-utils and suspend (boo#925873). - Remove pm-utils support (remove Forward-suspend-hibernate-calls-to-pm-utils.patch).- remove patch sysctl-handle-boot-sysctl.conf-kernel_release.patch from the filelist.- libpcre, glib2 and libusb are not used by systemd, remove from buildrequires.- 1032-ata_id-unbotch-format-specifier.patch: fix udev ata_id output. - 0023-core-fix-reversed-dependency-check-in-unit_check_unn.patch fix StopWhenUnneeded=true in combination with a Requisite= dependency. - 0031-install-fix-bad-memory-access.patch: Fix Bad memory access - 0006-pam_systemd-Properly-check-kdbus-availability.patch: if kdbus is enabled (i.e boot with kdbus=1) DBUS_SESSION_BUS_ADDRESS must not be exported. - spec: add a min_kernel_version macro to ensure the package conflicts with kernel versions in which systemd cannot run.- sysctl-handle-boot-sysctl.conf-kernel_release.patch dropped, replaced by a tmpfiles.d snippet "current-kernel-sysctl.conf" (feature implemented in v220 just for our usecase)- fix build when resolved is enabled - remove fsck -l test in spec file, systemd requires util-linux 2.26 or later where this feature is already available.- Fix bootstrap build by guarding filelists (man pages don't get built in bootstrap mode) - Drop commented sections from baselibs.conf, allows format_spec_file to have a successful run- Install 50-coredump.conf as coredumpctl is now installed by default and does not use journal anymore as default storage- Update to new upstream release 221 * From 220: * libgudev was moved into a package of its own * Runlevels 2, 3 and 4 are no longer distinct, they all map to multi-user.target. * The EFI System Partition mounted to /boot will be unmounted 2 minutes after boot. * systemd does not support direct live-upgrades (via `systemctl daemon-reexec`) from versions older than v44 anymore. * systemd-nspawn may now be called as part of a shell pipeline. * systemd-shutdownd has been removed. This service was previously responsible for implementing scheduled shutdowns as exposed in /usr/bin/shutdown's time parameter. This functionality has now been moved into systemd-logind and is accessible via a bus interface. * udev will no longer call blkid and create symlinks for all block devices, but merely those from a whitelist (cf. 60-persistent-storage.rules). * /usr/lib/os-release gained a new optional field VARIANT= * Details at http://lists.freedesktop.org/archives/systemd-devel/2015-May/032147.html * From 221: * New sd-bus and sd-event APIs in libsystemd * If there is both a systemd unit and a SysV init script for the same service name, and `systemctl enable` or other operation is run, both will now be enabled (or execute the related operation on both), not just the unit. - Split libsystemd0 to support systemd-less nspawn containers - Redo manpage file lists without %exclude, tends to hide unpackaged files. - hwdb belongs to udev - Resolve memory leak and add missing _cleanup_free_ to 0001-On_s390_con3270_disable_ANSI_colour_esc.patch - Remove systemd-powerd-initctl-support.patch (no longer builds because shutdownd is gone) - Remove quilt-patches/0001-core-rework-device-state-logic.patch, 0001-Let-some-boolean-survive-a-daemon-reload.patch (merged upstream), 0001-Let-some-boolean-survive-a-daemon-reload.patch (obsolete)- Remove libudev0 from baselibs.conf- Drop 1055-let-9719859c07aa13539ed2cd4b31972cd30f678543-apply.patch as now upstream code - Add 0001-Let-some-boolean-survive-a-daemon-reload.patch to fix bsc#933365 and boo#934077- Add 1098-systemd-networkd-alias-network-service.patch to alias network.service the same way NetworkManager and wicked does. This is needed by yast2 and other parts of the system. boo#933092- Modify patch 1021-udev-re-add-persistent-net-rules.patch to use the new return values of proc_cmdline() in enable_name_policy() this should fix boo#931165- Drop 1021-udev-re-add-persistent-net-rules.patch, 1036-rules-disable-usage-of-dev_id-in-persistent-rules.patch, 1040-re-enable-dev_id-conditionally-in-persistent-rules.patch, 1046-fix-duplicated-rules-with-layer3-interfaces.patch, 1050-only-rename-SRIOV-VF-devices-when-name-starts-with-eth.patch, 1051-check-if-NAME-has-a-value.patch, 1053-better-checks-in-write_net_rules.patch, 1088-drop-renaming-of-virtual-interfaces-in-guest.patch. 1021 originally broke parsing of net.ifnames=0 [bnc#931165], and given that neither the kernel command line needs to be touched nor the source be patched to reach the unpredictable naming setup for SLE, all these parts are moved to a separate package.- Add upstream patch 0001-core-don-t-change-removed-devices-to-state-tentative.patch to fix the fix of the last backport (bsc#921898)- Reenable networkd which was silently disabled on Feb 18- Add 0001-core-rework-device-state-logic.patch to fix spurious automated umount after mount.- mark more subpackages as !bootstrap for systemd-mini usage.- spec : remove --with-firmware-path, firmware loader was removed in v217 - spec: remove --disable-multi-seat-x, gone.(fixed in xorg) - spec: Do not enable systemd-readahead-collect.service and systemd-readahead-replay.service as these do not exist anymore. - spec: drop timedate-add-support-for-openSUSE-version-of-etc-sysconfig.patch Yast was fixed to write all timezone changes exactly how timedated expects things to be done. - spec: remove handle-etc-HOSTNAME.patch, since late 2014 the netcfg package handles the migration from /etc/HOSTNAME to /etc/hostname and owns both files. -spec: remove boot.udev and systemd-journald.init as they currently serve no purpose. - suse-sysv-bootd-support.diff: Remove HAVE_SYSVINIT conditions, we are in sysvcompat-only codepath, also remove the code targetting other distributions, never compiled as the TARGET_$DISTRO macros are never defined. - systemd-powerd-initctl-support.patch guard with HAVE_SYSV_COMPAT - set-and-use-default-logconsole.patch: fix HAVE_SYSV_COMPAT guards - insserv-generator.patch: Only build when sysvcompat is enabled - vhangup-on-all-consoles.patch add a comment indicating this is a workaround for a kernel bug. - spec: Add option to allow disabling sysvinit compat at build time. - spec: Add option to enable resolved at build time. - spec: Remove all %ifs for !factory products, current systemd releases can neither be built nor installed in older products without upgrading several components of the base system. (removed: 1008-add-msft-compability-rules.patch was only for =< 13.1) - spec: remove all dummy "aliases" to /etc/init.d, that made sense only when those init scripts still existed. (dummy localfs.service source: gone) - systemd-sleep-grub: moved to the grub2 package where it belongs as a suspend/resume hook (SR#286533) (drops prepare-suspend-to-disk.patch) - remove LFS_CFLAGS from CFLAGS, never needed in systemd as it force feds config.h everywhere in the preprocessor cmdline.- Update to new upstream release 219 * systemd units can now be "unsupported" (like, for example, .device in a containers), similar to the "skipped" state in SUSE's prior sysvinit scripts. * tmpfiles gained the 'v' type for creating btrfs subvolumes. * tmpfiles gained the 'a' type for setting ACLs. * systemd-nspawn gained new switches: --ephemeral, --template * The /var/lib/containers location is deprecated and replaced by /var/lib/machines. * machinectl gained the copy-from and copy-to commands. * machinectl now knows a "bind" command (for use with nspawn) * new "systemd-importd" daemon to download container images and run them as nspawn containers. * networkd collects LLDP network announcements, if available, and so shown in networkctl. * The fallback terminal type was changed from "vt102" to "vt220", allowing PgUp/PgDn keys to work. * Pressing Ctrl-Alt-Del 7x in 2 seconds forces a umount+reboot now, useful should the regular shutdown hang. * Removing storage will cause systemd to unmount the associated mountpoints so that they don't linger around.- Add suse-sysv-bootd-support.diff (reinstate old Revert-service-drop-support-for-SysV-scripts-for-the-early.patch)- Update to systemd v218-1050-g38ab096 - Remove patches use-usr-sbin-sulogin-for-emergency-service.patch (upstream fixed it) - Reinstate and improve (remove huge indents from) tty-ask-password-agent-on-console.patch, 0014-journald-with-journaling-FS.patch, rootsymlink_generator.- disable systemd-resolved for now as it interacts not well with our methods and security has concerns regarding spoofing. bsc#917781- Add patch kbd-model-map.patch to add missed keyboard layouts which are offered by YaST2 (bsc#910643 and boo#897803)- Update to new upstream release 218 * New utilities: systemd-timesyncd (SNTP client), systemd-resolved, systemd-networkd, networkctl, systemd-sysusers * machinectl gained a "poweroff" command for clean container shutdown * The udev hwdb now contains DPI information for mice. * Userspace firmware loading support has been removed and the minimum supported kernel version is thus bumped to 3.7. - Remove patches: G=gone locally, is upstream; D=dropped: no longer needed; N=no longer applies to source nor is it deemed needed; K=killed: no longer applicable and too complex to resolve: - --- G 0002-rfkill-rework-how-we-generate-file-names-from-rfkill.patch G avoid-assertion-if-invalid-address-familily-is-passed-to-g.patch K service-flags-sysv-service-with-detected-pid-as-RemainAfte.patch K remain_after_exit-initscript-heuristic-and-add-new-LSB-hea.patch K handle-SYSTEMCTL_OPTIONS-environment-variable.patch K 0018-Make-LSB-Skripts-know-about-Required-and-Should.patch K log-target-null-instead-kmsg.patch K tty-ask-password-agent-on-console.patch K 513-nspawn-veth.patch K 1087-infinit-timeout-for-kmod-loaded-modules.patch D module-load-handle-SUSE-etc-sysconfig-kernel-module-list.patch D avoid-leaking-socket-descriptors.patch D 0001-make-fortify-happy-with-ppoll.patch N fix-owner-of-var-log-btmp.patch N disable-nss-myhostname-warning-bnc-783841.patch N Revert-service-drop-support-for-SysV-scripts-for-the-early.patch N 0001-make-209-working-on-older-dist.patch N 0001-Don-t-snprintf-a-potentially-NULL-pointer.patch N tmpfiles-do-not-clean-for-mandb-index-files.patch G 0001-sd-bus-don-t-look-for-a-64bit-value-when-we-only-hav.patch G avoid-assertion-if-invalid-address-familily-is-passed-to-g.patc G optionally-warn-if-nss-myhostname-is-called.patch G 0001-units-systemd-sysctl.service.in-run-after-load-modul.patch G 0004-getty-generator-properly-escape-instance-names.patch G rules-add-lid-switch-of-ARM-based-Chromebook-as-a-power-sw.patch G 0008-Reset-signal-mask-on-re-exec-to-init.patch G 0001-login-fix-pos-array-allocation.patch G 0002-login-set-pos-slot-to-fallback-on-pos-eviction.patch G 0003-login-Allow-calling-org.freedesktop.login1.Seat.Swit.patch G 0004-fix-typo-in-iDRAC-network-interface-name-irdac-idrac.patch G 0005-Replace-var-run-with-run-in-remaining-places.patch G 0006-Revert-back-to-var-run-at-a-couple-of-problems.patch G 0007-README-document-that-var-run-must-be-a-symlink-run.patch G 0008-Use-var-run-dbus-system_bus_socket-for-the-D-Bus-soc.patch G 0009-mount-don-t-send-out-PropertiesChanged-message-if-ac.patch G 0010-mount-don-t-fire-PropertiesChanged-signals-for-mount.patch G 0011-logs-show-fix-corrupt-output-with-empty-messages.patch G 0012-journalctl-refuse-extra-arguments-with-verify-and-si.patch G 0014-nspawn-fix-detection-of-missing-proc-self-loginuid.patch G 0001-Fix-systemd-stdio-bridge-symlink.patch G 0002-execute-free-directory-path-if-we-fail-to-remove-it-.patch G 0003-Do-not-print-invalid-UTF-8-in-error-messages.patch G 0004-man-document-missing-options-of-systemd-run.patch G 0005-systemd-run-add-some-extra-safety-checks.patch G 0006-journal-assume-that-next-entry-is-after-previous-ent.patch G 0007-journal-forget-file-after-encountering-an-error.patch G 0008-core-correctly-unregister-PIDs-from-PID-hashtables.patch G 0009-logind-fix-reference-to-systemd-user-sessions.servic.patch G 0010-man-update-link-to-LSB.patch G 0011-man-systemd-bootchart-fix-spacing-in-command.patch G 0012-man-add-missing-comma.patch G 0013-units-Do-not-unescape-instance-name-in-systemd-backl.patch G 0001-core-busname-add-lookup-string-for-BUSNAME_FAILURE_S.patch G 0002-manager-flush-memory-stream-before-using-the-buffer.patch G 0003-busname-don-t-drop-service-from-the-result-string.patch G 0004-fix-off-by-one-error-in-array-index-assertion.patch G 0005-logind-fix-policykit-checks.patch G 0006-rules-mark-loop-device-as-SYSTEMD_READY-0-if-no-file.patch G 0008-man-multiple-sleep-modes-are-to-be-separated-by-whit.patch G 0001-gpt-auto-generator-don-t-return-OOM-on-parentless-de.patch G 0002-bus-fix-memory-leak-when-kdbus-is-not-enabled.patch G 0006-Do-not-return-1-EINVAL-on-allocation-error.patch G 0007-networkd-fix-typo.patch G 0008-sd-bus-don-t-access-invalid-memory-if-a-signal-match.patch G 0009-sd-bus-don-t-choke-if-somebody-sends-us-a-message-wi.patch G 0012-journald-remove-stray-reset-of-error-return-value.patch G 0013-core-libsystemd-systemd-timedate-udev-spelling-fixes.patch G 0001-cgroup-it-s-not-OK-to-invoke-alloca-in-loops.patch G 0002-machined-fix-Kill-bus-call-on-machine-objects-when-w.patch G 0003-sd-bus-don-t-use-assert_return-to-check-for-disconne.patch G 0004-core-don-t-try-to-relabel-mounts-before-we-loaded-th.patch G 0005-sd-daemon-fix-incorrect-variable-access.patch G 0006-sd-event-initialization-perturbation-value-right-bef.patch G 0007-sd-event-don-t-accidentally-turn-of-watchdog-timer-e.patch G 0008-systemctl-kill-mode-is-long-long-gone-don-t-mention-.patch G 0009-ask-password-when-the-user-types-a-overly-long-passw.patch G 0001-journal-fix-export-of-messages-containing-newlines.patch G 0002-systemctl-update-NAME-to-PATTERN-in-help.patch G 0003-tty-ask-password-agent-return-negative-errno.patch G 0004-systemd-python-use-.hex-instead-of-.get_hex.patch G 0005-systemd-python-fix-failing-assert.patch G 0007-dbus-suppress-duplicate-and-misleading-messages.patch G 0001-reduce-the-amount-of-messages-logged-to-dev-kmsg-whe.patch G 0001-bash-completion-fix-__get_startable_units.patch G 0002-sysctl-replaces-some-slashes-with-dots.patch G 0003-delta-do-not-use-unicode-chars-in-C-locale.patch G 0004-implement-a-union-to-pad-out-file_handle.patch G shut-up-annoying-assertion-monotonic-clock-message.patch G 0001-sd-rtnl-message-append-fix-uninitialized-memory.patch G 0001-tmpfiles-fix-permissions-on-new-journal-files.patch G 0001-errno-make-sure-to-handle-the-3-errnos-that-are-alia.patch G 0003-analyze-fix-plot-with-bad-y-size.patch G 0004-job-add-waiting-jobs-to-run-queue-in-unit_coldplug.patch G 0005-job-always-add-waiting-jobs-to-run-queue-during-cold.patch G 0001-backlight-Avoid-restoring-brightness-to-an-unreadabl.patch G 0002-backlight-do-nothing-if-max_brightness-is-0.patch G 0003-backlight-unify-error-messages.patch G 0004-backlight-warn-if-kernel-exposes-backlight-device-wi.patch G 0005-backlight-handle-saved-brightness-exceeding-max-brig.patch G 0001-replace-more-dup-by-F_DUPFD_CLOEXEC.patch G 0002-pam_systemd-use-F_DUPFD_CLOEXEC-when-dupping-session.patch G 0001-core-close-socket-fds-asynchronously.patch G 0002-logind-bring-polkit-policy-for-hibernate-in-line-wit.patch G 0003-core-make-sure-to-serialize-jobs-for-all-units.patch G 0001-logind-ignore-lid-switch-if-more-than-1-display-is-c.patch G 0002-logind-fix-printf-format.patch G 0003-logind-ignore-lid-switch-events-for-30s-after-each-s.patch G 0004-logind-Do-not-fail-display-count-if-a-device-has-no-.patch G 0005-logind-move-lid-switch-handling-from-logind-main-to-.patch G 0006-man-clarify-that-the-ExecReload-command-should-be-sy.patch G 0007-man-readahead-fix-cmdline-switch-inconsistency-betwe.patch G 0008-man-update-journald-rate-limit-defaults.patch G 0009-nspawn-properly-format-container_uuid-in-UUID-format.patch G 0010-logind-allow-suspending-if-there-are-no-displays.patch G 0001-hwdb-Update-database-of-Bluetooth-company-identifier.patch G 0002-hwdb-Update-database-of-Bluetooth-company-identifier.patch G 0003-hwdb-Update-database-of-Bluetooth-company-identifier.patch G 0004-hwdb-Update-database-of-Bluetooth-company-identifier.patch G 0005-hwdb-Update-database-of-Bluetooth-company-identifier.patch G 0001-conf-parser-silently-ignore-sections-starting-with-X.patch G 0002-man-note-that-entire-sections-can-now-be-ignored.patch G 0004-machined-make-sure-GetMachineAddresses-is-available-.patch G 0005-core-Filter-by-state-behind-the-D-Bus-API-not-in-the.patch G 0006-login-add-mir-to-the-list-of-session-types.patch G 0007-logind-fix-Display-property-of-user-objects.patch G 0001-hwdb-update.patch G 0002-hwdb-update.patch G 0003-hwdb-PCI-include-primary-model-string-in-subsystem-m.patch G 0004-hwdb-update.patch G 0005-hwdb-update.patch G 0001-journal-cleanup-up-error-handling-in-update_catalog.patch G 0002-journal-properly-detect-language-specified-in-line.patch G 0003-man-mention-XDG_CONFIG_HOME-in-systemd.unit.patch G 0001-keymap-Add-Lenovo-Enhanced-USB-Keyboard.patch G 0002-keymap-Asus-EeePC-touchpad-toggle-key.patch G 0001-nspawn-allow-to-bind-mount-journal-on-top-of-a-non-e.patch G 0002-nspawn-restore-journal-directory-is-empty-check.patch G 0003-core-never-consider-failure-when-reading-drop-ins-fa.patch G 0004-socket-properly-handle-if-our-service-vanished-durin.patch G 0001-Do-not-unescape-unit-names-in-Install-section.patch G 0002-analyze-run-use-bus_open_transport_systemd-instead-o.patch G 0001-virt-rework-container-detection-logic.patch G 0002-fsck-include-device-name-in-the-message-about-missin.patch G 0003-units-use-KillMode-mixed-for-systemd-nspawn-.service.patch G 0004-util-ignore_file-should-not-allow-files-ending-with.patch G 0006-tty-ask-password-agent-Do-tell-what-directory-we-fai.patch G 0007-keyboard-add-Plantronics-.Audio-mute-button.patch G 0001-build-sys-use-glibc-s-xattr-support-instead-of-requi.patch G 0001-hwdb-fix-case-sensitive-match.patch G 0001-sd-event-restore-correct-timeout-behaviour.patch G 0002-bus-make-use-of-sd_bus_try_close-in-exit-on-idle-ser.patch G 0001-umount-modernizations.patch G 0002-namespace-when-setting-up-an-inaccessible-mount-poin.patch G 0003-core-allow-transient-mount-units.patch G 0004-systemd-detect-virt-only-discover-Xen-domU.patch G 0005-backlight-Do-not-clamp-brightness-for-LEDs.patch G 0006-log-honour-the-kernel-s-quiet-cmdline-argument.patch G 0001-core-fix-invalid-free-in-killall.patch G 0003-install-fix-invalid-free-in-unit_file_mask.patch G 0001-systemd-detect-virt-detect-s390-virtualization.patch G 0001-core-sysvcompat-network-should-be-equivalent-to-netw.patch G 0002-units-add-missing-caps-so-that-GetAddresses-can-work.patch G 0003-units-order-systemd-tmpfiles-clean.service-after-tim.patch G 0005-po-add-Greek-translation.patch G 0006-hwdb-Update-database-of-Bluetooth-company-identifier.patch G 0007-po-add-German-translation.patch G 0009-core-clean-up-signal-reset-logic-when-reexec.patch G 0010-util-treat-fuse.sshfs-as-a-network-filesystem.patch G 0011-build-sys-add-pthread-flag-for-libsystemd-shared.patch G 0012-core-transaction-avoid-misleading-error-message-when.patch G 0001-vconsole-also-copy-character-maps-not-just-fonts-fro.patch G 0002-core-make-sure-Environment-fields-passed-in-for-tran.patch G 0003-core-You-can-not-put-the-cached-result-of-use_smack-.patch G 0004-cryptsetup-don-t-add-unit-dependency-on-dev-null-dev.patch G 0005-man-fix-path-in-crypttab-5.patch G 0001-units-order-network-online.target-after-network.targ.patch G 0001-core-use-correct-format-string-for-UIDs.patch G 0002-core-transaction-fix-cycle-break-attempts-outside-tr.patch G 0003-fsck-consider-a-fsck-implementation-linked-to-bin-tr.patch G 0001-main-uid_to_name-might-fail-due-to-OOM-protect-again.patch G 0002-journald-make-MaxFileSec-really-default-to-1month.patch G 0003-units-remove-RefuseManualStart-from-units-which-are-.patch G 0004-util-refuse-considering-UID-0xFFFF-and-0xFFFFFFFF-va.patch G 0005-nspawn-block-open_by_handle_at-and-others-via-seccom.patch G 0006-tmpfiles-don-t-do-automatic-cleanup-in-XDG_RUNTIME_D.patch G 0007-units-skip-mounting-tmp-if-it-is-a-symlink.patch G 0001-parse_uid-return-ENXIO-for-1-uids.patch G 0002-util-when-unescaping-strings-don-t-allow-smuggling-i.patch G 0003-localed-consider-an-unset-model-as-a-wildcard.patch G 0004-sd-bus-when-an-event-loop-terminates-explicitly-clos.patch G 0005-bus-close-a-bus-that-failed-to-connect.patch G 0006-hwdb-update.patch G 0007-hwdb-Update-database-of-Bluetooth-company-identifier.patch G 0001-architecture-Add-tilegx.patch G 0002-architecture-Add-cris.patch G 0003-arch-add-crisv32-to-uname-check.patch G 0004-architecture-remove-cris-from-uname-list.patch G 0003-namespace-make-sure-tmp-var-tmp-and-dev-are-writable.patch G 0002-namespace-fix-uninitialized-memory-access.patch G 0001-machine-don-t-return-uninitialized-variable.patch G 0002-vconsole-setup-run-setfont-before-loadkeys.patch G 0001-util-consider-0x7F-a-control-chracter-which-it-is-DE.patch G 0002-util-don-t-consider-tabs-special-in-string_has_cc-an.patch G 0003-architecture-add-string-table-entries-for-mips-le-ar.patch G 0004-core-Added-support-for-ERRNO-NOTIFY_SOCKET-message-p.patch G 0005-service-don-t-accept-negative-ERRNO-notification-mes.patch G 0006-systemctl-show-StatusErrno-value-in-systemctl-status.patch G 0007-service-flush-status-text-and-errno-values-each-time.patch G 0001-journal-compress-return-early-in-uncompress_startswi.patch G 0002-journal-compress-improve-xz-compression-performance.patch G 0001-logind-allow-switching-to-unused-VTs-via-SwitchTo.patch G 0002-hostnamed-add-a-new-chassis-type-for-watches.patch G 0001-units-make-ExecStopPost-action-part-of-ExecStart.patch G 0001-event-pull-in-sd-event.h-from-event-util.h.patch G 0002-util-fix-has-cc-check-and-add-test.patch G 0003-sd-event-always-call-epoll_ctl-on-mask-updates-if-ed.patch G 0004-fileio-quote-more-shell-characters-in-envfiles.patch G 0001-Clear-up-confusion-wrt.-ENTRY_SIZE_MAX-and-DATA_SIZE.patch G 0002-units-serial-getty-.service-use-the-default-RestartS.patch G 0001-po-add-Ukrainian-translation.patch G 0002-man-document-yearly-and-annually-in-systemd.time-7.patch G 0003-core-nicer-message-when-inotify-watches-are-exhauste.patch G 0001-detect-virt-Fix-Xen-domU-discovery.patch G 0002-Be-more-verbose-when-bind-or-listen-fails.patch G 0003-Add-quotes-to-warning-message.patch G 0004-systemd-return-the-first-error-from-manager_startup.patch G 0001-bash-completion-p-option-for-journalctl.patch G 0002-journalctl-man-allow-only-between-terms.patch G 0003-systemd-use-pager-for-test-and-help.patch G 0001-bus-proxyd-fix-incorrect-comparison.patch G 0002-shell-completion-prevent-mangling-unit-names.patch G 0003-Always-check-asprintf-return-code.patch G 0004-bash-completion-use-list-unit-files-to-get-all-units.patch G 0005-core-only-set-the-kernel-s-timezone-when-the-RTC-run.patch G 0006-parse_boolean-require-exact-matches.patch G 0007-drop_duplicates-copy-full-BindMount-struct.patch G 0008-shell-completion-prevent-mangling-unit-names-bash.patch G 0009-journald-always-add-syslog-facility-for-messages-com.patch G 0001-sysv-order-initscripts-which-provide-network-before-.patch G 0002-keymap-Add-microphone-mute-keymap-for-Dell-Latitude.patch G 0003-keymap-Annotate-all-micmute-workarounds.patch G 0007-hwdb-update.patch G 0001-nspawn-fix-truncation-of-machine-names-in-interface-.patch G 0002-switch-root-umount-the-old-root-correctly.patch G 0003-bootchart-it-s-not-OK-to-return-1-from-a-main-progra.patch G 0004-login-set_controller-should-fail-if-prepare_vt-fails.patch G 0005-sd-resolve-fix-allocation-if-query-ids-never-reuse-t.patch G 0006-login-share-VT-signal-handler-between-sessions.patch G 0007-journald-also-increase-the-SendBuffer-of-dev-log-to-.patch G 0008-mount-setup-fix-counting-of-early-mounts-without-SMA.patch G 0009-journald-Fix-off-by-one-error-in-Missed-X-kernel-mes.patch G 0010-machine_kill-Don-t-kill-the-unit-when-killing-the-le.patch G 0011-units-fix-BindsTo-logic-when-applied-relative-to-ser.patch G 0012-util-try-to-be-a-bit-more-NFS-compatible-when-checki.patch G 0001-hwdb-keymaps-for-Samsung-900X3E-900X3F.patch G 0002-Add-hwdb-entry-for-Samsung-Series-7-Ultra.patch G 0003-keymap-Fix-HP-Pavillon-DV7.patch G 0004-hwdb-update-format-description-and-document-reloadin.patch G 0008-hwdb-update.patch G 0001-systemctl-Correct-error-message-printed-when-bus_pro.patch G 0002-units-order-systemd-fsck-.service-after-local-fs-pre.patch G 0003-keymap-Adjust-for-more-Samsung-900X4-series.patch G 0001-login-fix-memory-leak-on-DropController.patch G 0002-util-fix-minimal-race-where-we-might-miss-SIGTERMs-w.patch G 0003-sd-journal-properly-convert-object-size-on-big-endia.patch G 0004-sd-journal-verify-that-object-start-with-the-field-n.patch G 0001-nspawn-fix-network-interface.patch G 0001-completion-filter-templates-from-restartable-units.patch G 0002-systemd-fix-error-message.patch G 0003-Quote-unit-names-in-suggested-systemctl-commandlines.patch G 0004-config-parser-fix-mem-leak.patch G 0005-login-fix-mem-leak.patch G 0001-login-simplify-controller-handling.patch G 0001-initrd-parse-etc.service-ignore-return-code-of-daemo.patch G 0008-hwdb-Update-database-of-Bluetooth-company-identifier.patch G 0009-hwdb-update.patch G 0001-systemctl-allow-to-change-the-default-target-without.patch G 0001-activate-fix-fd-leak-in-do_accept.patch G 0002-analyze-avoid-a-null-dereference.patch G 0003-analyze-fix-mem-leak.patch G 0004-backlight-Avoid-error-when-state-restore-is-disabled.patch G 0005-bus-avoid-using-m-kdbus-after-freeing-it.patch G 0006-bus-unref-buscreds-on-failure.patch G 0007-core-fix-a-potential-mem-leak.patch G 0008-core-smack-setup-Actually-allow-for-succesfully-load.patch G 0009-journal-do-not-leak-mmaps-on-OOM.patch G 0010-manager-use-correct-cleanup-function.patch G 0001-core-fix-resource-leak-in-manager_environment_add.patch G 0002-util-remove-a-unnecessary-check.patch G 0003-udev-event-explicitly-don-t-read-from-invalid-fd.patch G 0004-shared-conf-parser.patch G 0005-logind-fix-typo.patch G 0006-systemctl-fix-resource-leak-CID-1237747.patch G 0007-libudev-monitor-warn-if-we-fail-to-request-SO_PASSCR.patch G 0008-shared-conf-parser-don-t-leak-memory-on-error-in-DEF.patch G 0009-bus-fix-bus_print_property-to-use-int-for-booleans.patch G 0001-journal-Do-not-count-on-the-compiler-initializing-fo.patch G 0002-include-fcntl.h-rather-than-sys-fcntl.h.patch G 0003-mount-order-options-before-other-arguments-to-mount.patch G 0004-shared-wtmp-utmp-don-t-clear-store_wtmp-in-utmp_put_.patch G 0005-shared-label.h-add-missing-stdio.h-include.patch G 0006-shared-sparse-endian.h-add-missing-byteswap.h-includ.patch G 0001-login-pause-devices-before-acknowledging-VT-switches.patch G 0001-nspawn-don-t-try-to-create-veth-link-with-too-long-i.patch G 0001-socket-introduce-SELinuxContextFromNet-option.patch G 0002-util-avoid-non-portable-__WORDSIZE.patch G 0001-Fix-warning-about-unused-variable-with-SELINUX.patch G 0002-bus-remove-unused-check.patch G 0001-systemd-tmpfiles-Fix-IGNORE_DIRECTORY_PATH-age-handl.patch G 0001-logind-add-support-for-Triton2-Power-Button.patch G 0002-logind-add-support-for-TPS65217-Power-Button.patch G 0001-shutdownd-clean-up-initialization-of-struct.patch G 0003-bootchart-parse-userinput-with-safe_atoi.patch G 0004-bootchart-check-return-of-strftime.patch G 0005-bootchart-Do-not-try-to-access-data-for-non-existing.patch G 0001-journalctl-do-not-output-reboot-markers-when-running.patch G 0002-udev-hwdb-New-Entry-for-Dell-XPS12-9Q33-keyboard.patch G 0001-core-swap-only-make-configured-units-part-of-swap.ta.patch G 0009-hwdb-Update-database-of-Bluetooth-company-identifier.patch G 0001-virt-detect-that-we-are-running-inside-the-docker-co.patch G 0002-bootchart-use-n-a-if-PRETTY_NAME-is-not-found.patch G 0003-fileio-label-return-error-when-writing-fails.patch G 0001-sd-event-don-t-require-a-signal-event-source-to-be-e.patch G 0004-sd-event-check-the-value-of-received-signal.patch G 0005-sd-id128-do-stricter-checking-of-random-boot-id.patch G 0001-keymap-Fix-touchpad-toggle-on-Toshiba-Satellite-P75-.patch G 0001-units-introduce-network-pre.target-as-place-to-hook-.patch G 0002-keymap-Fix-touchpad-toggle-key-on-Asus-laptops.patch G 0003-sd-bus-check-return-value-of-vasprintf.patch G 0004-core-map-the-rescue-argument-to-rescue.target.patch G 0005-util-avoid-double-close-of-fd.patch G 0001-systemctl-when-mangle-unit-names-for-the-isolate-suf.patch G 0001-tmpfiles-compare-return-against-correct-errno.patch G 0001-shell-completion-fix-completion-of-inactive-units.patch G 0002-shell-completion-propose-templates-for-disable-re-en.patch G 0003-man-we-don-t-have-Wanted-dependency.patch G 0004-selinux-fix-potential-double-free-crash-in-child-pro.patch G 0001-systemd-continue-switch-root-even-if-umount-fails.patch G 0002-systemd-try-harder-to-bind-to-notify-socket.patch G 0001-strv-add-an-additional-overflow-check-when-enlarging.patch G 0002-hwdb-Add-mapping-for-special-keys-on-compaq-ku-0133-.patch G 0003-journald-add-CAP_MAC_OVERRIDE-in-journald-for-SMACK-.patch G 0004-journal-do-server_vacuum-for-sigusr1.patch G 0005-cryptsetup-fix-an-OOM-check.patch G 0002-shutdown-pass-own-argv-to-run-initramfs-shutdown.patch G 0001-manager-Linux-on-hppa-has-fewer-rtsigs-hence-avoid-u.patch G 0002-time-also-support-infinity-syntax-in-parse_nsec.patch G 0003-time-earlier-exit-from-format_timestamp_relative-on-.patch G 0004-sd-bus-if-we-don-t-manage-to-properly-allocate-the-e.patch G 0005-journalctl-correct-help-text-for-until.patch G 0006-calendarspec-fix-typo-in-annually.patch G 0007-systemctl-do-not-ignore-errors-in-symlink-removal.patch G 0008-util-introduce-sethostname_idempotent.patch G 0009-util-fix-copy-paste-error-and-actually-set-the-new-h.patch G 0010-shutdown-do-final-unmounting-only-if-not-running-ins.patch G 0011-selinux-make-sure-we-do-not-try-to-print-missing-fie.patch G 0012-manager-do-not-print-anything-while-passwords-are-be.patch G 0001-sd-bus-properly-handle-removals-of-non-existing-matc.patch G 0002-keymap-Ignore-brightness-keys-on-Dell-Inspiron-1520-.patch G 0001-core-don-t-allow-enabling-if-unit-is-masked.patch G 0002-snapshot-return-error-when-snapshot-exists.patch G 0003-shared-install-avoid-prematurely-rejecting-missing-u.patch G 0004-Raise-level-of-Found-dependency.-lines.patch G 0005-units-order-sd-journal-flush-after-sd-remount-fs.patch G 0006-journald-fix-minor-memory-leak.patch G 0007-journald-also-check-journal-file-size-to-deduce-if-i.patch G 0008-journald-fix-memory-leak-on-error-path.patch G 0009-units-make-systemd-journald.service-Type-notify.patch G 0010-hwdb-Update-database-of-Bluetooth-company-identifier.patch G 0001-login-rerun-vconsole-setup-when-switching-from-vgaco.patch G 0002-shutdown-fix-arguments-to-run-initramfs-shutdown.patch G 0003-utf8-when-looking-at-the-next-unichar-honour-the-siz.patch G 0001-keymap-Add-support-for-IBM-ThinkPad-X41-Tablet.patch G 0002-keymap-Fix-special-keys-on-ThinkPad-X60-X61-Tablet.patch G 0001-systemctl-let-list-units-unit-files-honour-type.patch G 0002-systemctl-obey-state-in-list-unit-files.patch G 0002-core-watchdog-bus-properties-cannot-be-both-writable.patch G 0003-sd-bus-refuse-properties-that-claim-to-be-both-writa.patch G 0001-units-make-sure-rfkill-service-is-bount-to-the-actua.patch G 0001-selinux-access-fix-broken-ternary-operator.patch G 0002-systemctl-show-BindsTo-BoundBy-in-list-dependencies.patch G 0003-cryptsetup-default-to-no-hash-when-keyfile-is-specif.patch G 0004-core-fix-transaction-destructiveness-check-once-more.patch G 0001-units-tmpfiles-setup-dev-allow-unsafe-file-creation-.patch G 0002-man-tmpfiles.d-recommend-using-b-and-c.patch G 1009-cdrom_id-use-the-old-MMC-fallback.patch G 1010-udev-increase-result-size-for-programs.patch G 1014-udev-update-net_id-comments.patch G 1015-udev-persistent-naming-we-cannot-use-virtio-numbers-.patch G 1016-udev-warn-when-name_to_handle_at-is-not-implemented.patch G 1017-udev-serialize-synchronize-block-device-event-handli.patch G 1018-udev-do-not-skip-the-execution-of-RUN-when-renaming-.patch G 1019-udev-avoid-use-of-uninitialized-err.patch G 1020-udev-keyboard-also-hook-into-change-events.patch G 1022-udev-remove-seqnum-API-and-all-assumptions-about-seq.patch G 1023-udev-builtin-keyboard-do-tell-on-which-device-EVIOCS.patch G 1024-udev-always-close-lock-file-descriptor.patch G 1025-udev-exclude-device-mapper-from-block-device-ownersh.patch G 1026-udevd-inotify-modernizations.patch G 1027-udev-synthesize-change-events-for-partitions-when-to.patch G 1028-udev-link-config-fix-mem-leak.patch G 1029-udev-try-first-re-reading-the-partition-table.patch G 1030-udev-guard-REREADP-logic-with-open-O_ECXL.patch G 1031-udev-make-sure-we-always-get-change-for-the-disk.patch G 1032-udev-guard-REREADPT-by-exclusive-lock-instead-of-O_E.patch G 1033-udev-really-exclude-device-mapper-from-block-device.patch G 1034-udev-check-the-return-value-from-udev_enumerate_scan.patch G 1038-udev-fix-invalid-free-in-enable_name_policy.patch G 1039-udevadm-settle-fixed-return-code-for-empty-queue.patch G 1041-libudev-fix-udev_queue_get_queue_is_empty-logic.patch G 1042-libudev-queue-provide-file-descriptor-to-watch-busy-.patch G 1043-libudev-queue-watch-entire-directory-to-allow-the-re.patch G 1044-rules-update-qemu-hid-rules.patch G 1045-rules-don-t-enable-usb-pm-for-Avocent-devices.patch G 1047-udev-net_setup_link-builtin-should-print-the-reason-.patch G 1048-udev-net_setup_link-add-a-bit-more-logging.patch G 1049-udev-link_config-ignore-errors-due-to-missing-MAC-ad.patch G 1052-rules-uaccess-add-ID_SOFTWARE_RADIO.patch G 1054-udev-exclude-MD-from-block-device-ownership-event-lo.patch G 1056-udevd-add-event-timeout-commandline-option.patch G 1057-udev-unify-event-timeout-handling.patch G 1058-udev-unify-event-timeout-handling.patch G 1059-udev-fixup-commit-dd5eddd28a74a49607a8fffcaf960040db.patch G 1061-rules-allow-systemd-to-manage-loop-device-partitions.patch G 1063-udev-path_id-suppress-ID_PATH-for-devices-with-an-un.patch G 1064-udev-hwdb-do-not-look-at-usb_device-parents.patch G 1065-udev-bump-event-timeout-to-60-seconds.patch G 1067-udev-always-resolve-correctly-database-names-on-chan.patch G 1068-udev-net_setup_link-export-the-.link-filename-applie.patch G 1069-rules-net-setup-link-preserve-ID_NET_LINK_FILE-and-I.patch G 1070-rules-net-setup-link-remove-stray-linebreak.patch G 1071-udev-import-the-full-db-on-MOVE-events-for-devices-w.patch G 1072-udev-netif_rename-don-t-log-to-kmsg.patch G 1073-udev-drop-print_kmsg.patch G 1074-udev-fix-copy-paste-error-in-log-message.patch G 1075-udev-timeout-increase-timeout.patch G 1076-udev-timeout-warn-after-a-third-of-the-timeout-befor.patch G 1077-udev-timeout-warn-after-a-third-of-the-timeout-befor.patch G 1078-udev-remove-userspace-firmware-loading-support.patch G 1079-udev-remove-userspace-firmware-loading-support.patch G 1080-udevd-parse_argv-warn-if-argumens-are-invalid.patch G 1081-udevd-check-return-of-various-functions.patch G 1082-udevadm-hwdb-check-return-value-of-fseeko.patch G 1083-udev-node-warn-if-chmod-chown-fails.patch G 1084-udev-ctrl-log-if-setting-SO_PASSCRED-fails.patch G 1085-udev-fix-typos.patch G 1086-udevd-don-t-fail-if-run-udev-exists.patch G 1089-fix-cgroup-device-controller.patch G 1090-udev-path_id-set-supported_parent-for-well-known-SCS.patch G 1091-udev-path_id-update-comments.patch G 1092-libudev-do-not-accept-invalid-log-levels.patch G 1093-udev-Fix-parsing-of-udev.event-timeout-kernel-parame.patch G 1094-udev-avoid-magic-constants-in-kernel-cmdline-parsers.patch G 1098-udev-link_setup-respect-kernel-name-assign-policy.patch- update set-and-use-default-logconsole.patch - fix comparison of console log facility that caused journald to skip output to console (boo#912030)- Use Robert's latest patch 1098-udev-link_setup-respect-kernel-name-assign-policy.patch which drops NAMEPOLICY_KERNEL as this breaks all on current systems out there- remove 0022-systemd-tmpfiles-ownerkeep.patch since this is now implemented into the systemd-tmpfiles binary - add user based ignore statements in tmpfiles removal directives (bnc#903009) add systemd-add-user-keep.patch- use --boot option in systemd-tmpfiles-setup-dev.service (bnc#908476) add upstream patches: 0001-units-tmpfiles-setup-dev-allow-unsafe-file-creation-.patch 0002-man-tmpfiles.d-recommend-using-b-and-c.patch (adapted)- Update patch 1098-udev-link_setup-respect-kernel-name-assign-policy.patch to Robert's version- Add upstream patches 0001-selinux-access-fix-broken-ternary-operator.patch 0002-systemctl-show-BindsTo-BoundBy-in-list-dependencies.patch 0003-cryptsetup-default-to-no-hash-when-keyfile-is-specif.patch 0004-core-fix-transaction-destructiveness-check-once-more.patch - Avoid old net devices naming scheme on openSUSE 13.2 and less maybe caused by patch 1098-udev-link_setup-respect-kernel-name-assign-policy.patch- fix systemd-nspawn network-veth support (bnc#906709) add 513-nspawn-veth.patch- Add upstream patch 1098-udev-link_setup-respect-kernel-name-assign-policy.patch which may solve bsc#907318- Add upstream patches 0001-units-make-sure-rfkill-service-is-bount-to-the-actua.patch 0002-rfkill-rework-how-we-generate-file-names-from-rfkill.patch- Change the maximum number of children from CPU_COUNT * 256 to CPU_COUNT * 64. Update 1097-udevd-increase-maximum-number-of-children.patch- Increase number of children/workers to CPU_COUNT * 256 to avoid 'maximum number of children reached' (bnc#907393). Add 1097-udevd-increase-maximum-number-of-children.patch- Fix error return in rootsymlink_generator.c Update 1096-new-udev-root-symlink-generator.patch- Remove upstream patch 0001-systemd-logind.service-set-Type-notify.patch as systemd-logind.service is already from DBus type, compare with upstream commit eab459bc0639b81b32735f36d3e929e4bfa2cb4b- Add upstream patches 0001-systemd-logind.service-set-Type-notify.patch 0002-core-watchdog-bus-properties-cannot-be-both-writable.patch 0003-sd-bus-refuse-properties-that-claim-to-be-both-writa.patch- Re-add directory /usr/lib/systemd/system/basic.target.wants- remove pm-utils-hooks-compat.sh again, pm-utils built-in hooks partially duplicate hooks run by systemd which may potentially lead to problems, instead temporarily re-enable Forward-suspend-hibernate-calls-to-pm-utils.patch until boo#904828 can be addressed properly- fix bashisms in write_net_rules script - update patches: * 1053-better-checks-in-write_net_rules.patch- Add upstream patches 0001-systemctl-let-list-units-unit-files-honour-type.patch 0002-systemctl-obey-state-in-list-unit-files.patch which allows to use --type in the systemctl command list-units and list-unit-files.- Add upstream patches 0001-keymap-Add-support-for-IBM-ThinkPad-X41-Tablet.patch 0002-keymap-Fix-special-keys-on-ThinkPad-X60-X61-Tablet.patch- New root symlink rule generator Add 1096-new-udev-root-symlink-generator.patch - Remove write_dev_root_rule and systemd-udev-root-symlink- Change patch 0001-add-hdflush-for-reboot-or-hddown-for-poweroff.patch to skip hdflush as well as hddown but only use halt as fallback for poweroff as well as synch in systemctl before any reboot command (compare with commit 4a3ad39957399c4a30fc472a804e72907ecaa4f9)- Create rule to set I/O scheduler to deadline if device attribute 'rotational' equals 0, usually SSDs (bnc#904517). Add 1095-set-ssd-disk-to-use-deadline-scheduler.patch- fix systemd-fstab-generator crypttab parsing (bnc#903963)- Add pm-utils-hooks-compat.sh in order to run pm-utils sleep hooks from systemd (boo#904828)- Add upstream patches 0001-login-rerun-vconsole-setup-when-switching-from-vgaco.patch 0002-shutdown-fix-arguments-to-run-initramfs-shutdown.patch 0003-utf8-when-looking-at-the-next-unichar-honour-the-siz.patch- Add upstream patches 0001-core-don-t-allow-enabling-if-unit-is-masked.patch 0002-snapshot-return-error-when-snapshot-exists.patch 0003-shared-install-avoid-prematurely-rejecting-missing-u.patch 0004-Raise-level-of-Found-dependency.-lines.patch 0005-units-order-sd-journal-flush-after-sd-remount-fs.patch 0006-journald-fix-minor-memory-leak.patch 0007-journald-also-check-journal-file-size-to-deduce-if-i.patch 0008-journald-fix-memory-leak-on-error-path.patch 0009-units-make-systemd-journald.service-Type-notify.patch 0010-hwdb-Update-database-of-Bluetooth-company-identifier.patch- Add upstream patches 1092-libudev-do-not-accept-invalid-log-levels.patch 1093-udev-Fix-parsing-of-udev.event-timeout-kernel-parame.patch 1094-udev-avoid-magic-constants-in-kernel-cmdline-parsers.patch- Add patch watch_resolv.conf_for_become_changed.patch to add an inotify watch on /etc/resolv.conf which enables the reload of a changed resolver configuration on the fly (bsc#902901) - Do not apply patch 0022-systemd-tmpfiles-ownerkeep.patch in case if the script /usr/bin/systemd-tmpfiles-keep is missed- Add upstream patches 0001-sd-bus-properly-handle-removals-of-non-existing-matc.patch 0002-keymap-Ignore-brightness-keys-on-Dell-Inspiron-1520-.patch- Add upstream patches 1090-udev-path_id-set-supported_parent-for-well-known-SCS.patch 1091-udev-path_id-update-comments.patch which will be applied if patch 1090-udev-path_id-set-supported_parent-for-well-known-SCS.patch is applied a this may fix the trouble with iSCSI (bnc#898233)- Add upstream patches 0001-manager-Linux-on-hppa-has-fewer-rtsigs-hence-avoid-u.patch 0002-time-also-support-infinity-syntax-in-parse_nsec.patch 0003-time-earlier-exit-from-format_timestamp_relative-on-.patch 0004-sd-bus-if-we-don-t-manage-to-properly-allocate-the-e.patch 0005-journalctl-correct-help-text-for-until.patch 0006-calendarspec-fix-typo-in-annually.patch 0007-systemctl-do-not-ignore-errors-in-symlink-removal.patch 0008-util-introduce-sethostname_idempotent.patch 0009-util-fix-copy-paste-error-and-actually-set-the-new-h.patch 0010-shutdown-do-final-unmounting-only-if-not-running-ins.patch 0011-selinux-make-sure-we-do-not-try-to-print-missing-fie.patch - Replace patch keep-crypt-password-prompt.patch as this with upstream patch 0012-manager-do-not-print-anything-while-passwords-are-be.patch- Add upstream patch 0002-shutdown-pass-own-argv-to-run-initramfs-shutdown.patch - Add patch journald-advice-about-use-of-memory.patch to use mmap() flags as well as madvise(2) for journal files.- Add upstream patches 0001-strv-add-an-additional-overflow-check-when-enlarging.patch 0002-hwdb-Add-mapping-for-special-keys-on-compaq-ku-0133-.patch 0003-journald-add-CAP_MAC_OVERRIDE-in-journald-for-SMACK-.patch 0004-journal-do-server_vacuum-for-sigusr1.patch 0005-cryptsetup-fix-an-OOM-check.patch- Add upstream patch 1089-fix-cgroup-device-controller.patch to avoid trouble on existing /dev/console with nspawn (bsc#902240)- Modify patch avoid-leaking-socket-descriptors.patch to close file descriptors for incomming connections in pam module in case of short memory.- Add upstream patches 0001-systemd-continue-switch-root-even-if-umount-fails.patch 0002-systemd-try-harder-to-bind-to-notify-socket.patch - Add patch avoid-leaking-socket-descriptors.patch to close file descriptors if an incomming connection can not be handled due e.g. short memory. Could be related to bsc #901481- Add upstream patches 0001-shell-completion-fix-completion-of-inactive-units.patch 0002-shell-completion-propose-templates-for-disable-re-en.patch 0003-man-we-don-t-have-Wanted-dependency.patch 0004-selinux-fix-potential-double-free-crash-in-child-pro.patch- Adapt patch rules-add-lid-switch-of-ARM-based-Chromebook-as-a-power-sw.patch to make it work even with patch #438 and #439- Add upstream patches 0001-systemctl-when-mangle-unit-names-for-the-isolate-suf.patch 0001-tmpfiles-compare-return-against-correct-errno.patch- Add upstream patches 0001-keymap-Fix-touchpad-toggle-on-Toshiba-Satellite-P75-.patch 0001-units-introduce-network-pre.target-as-place-to-hook-.patch 0002-keymap-Fix-touchpad-toggle-key-on-Asus-laptops.patch 0003-sd-bus-check-return-value-of-vasprintf.patch 0004-core-map-the-rescue-argument-to-rescue.target.patch 0005-util-avoid-double-close-of-fd.patch- Add upstream patches 0001-virt-detect-that-we-are-running-inside-the-docker-co.patch 0002-bootchart-use-n-a-if-PRETTY_NAME-is-not-found.patch 0003-fileio-label-return-error-when-writing-fails.patch 0001-sd-event-don-t-require-a-signal-event-source-to-be-e.patch 0004-sd-event-check-the-value-of-received-signal.patch 0005-sd-id128-do-stricter-checking-of-random-boot-id.patch- Add upstream patches 0001-core-swap-only-make-configured-units-part-of-swap.ta.patch 0009-hwdb-Update-database-of-Bluetooth-company-identifier.patch- Add upstream patches 0001-journalctl-do-not-output-reboot-markers-when-running.patch 0002-udev-hwdb-New-Entry-for-Dell-XPS12-9Q33-keyboard.patch- Add upstream patches 0001-logind-add-support-for-Triton2-Power-Button.patch 0002-logind-add-support-for-TPS65217-Power-Button.patch - Add upstream patches 0001-shutdownd-clean-up-initialization-of-struct.patch 0003-bootchart-parse-userinput-with-safe_atoi.patch 0004-bootchart-check-return-of-strftime.patch 0005-bootchart-Do-not-try-to-access-data-for-non-existing.patch/bin/sh234-lp152.31.37.1234-lp152.31.37.1libsystemd.so.0libsystemd.so.0.19.0/usr/lib/-fomit-frame-pointer -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:17199/openSUSE_Leap_15.2_Update/690adf6631dccc91b3e5deab723070bc-systemd.openSUSE_Leap_15.2_Updatecpioxz5x86_64-suse-linuxELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=062a4ff6d7cc62d68b648d18bd327e953b97dab9, strippedGPPPPPPPPPPPPPPPP P P P P P P P P P PPPPPPPPPPPRR!R"RRRRRRRRRRRR RR RRRR R R RRR#RRR RRRRRRutf-8cb6046cf182320dd00d935140aaf03151b2030594b0a6808215ed664ae959dd7? 7zXZ !t/[] cr$x#E&~vå4w5zC7hXT)yى.](B16o3A1t'LwM$uHe$Y= |rZ;`krGD:]~MBZvjߵ)v)&@U*/`7##Sz`&M 85`~df5$:Dc.B &EBn156Fi56:O,ȗ^z= ܭ' )eX~C {9[X>DF "ү3ߺJ nPa@B|ܲwP\:Y4a-%Cf'%70]:TQ.ߢ]nOB؏B=i( Q]%*@ gy䟭o3(< n #z$쨖(8oRtO\y-y?w(Qup;ɇeT Ԗ'7r`F"C(X6~yիL*͌AA5S KG Mʋnh\T/Pe٭J&mp *WQN*,X`)G E mp+.:)bcSc |'ם.07+`MW4FԖ Zh8 "5/l]g(i Vuyl-v6KXNwv8Mݿ*mDAo؅;4T7%af^=4YS#XӺ1CljBEyݣRPVoo#|lqcŴaTa%8qF"j(t]sl6| 3e~djLVZ>ԯn!B3M o/zpӌ* 7PÅO(mò݃TKS&J5[nGx(Y`U )֝YQF7icyhIЄύprz*^e'ή5ĂKHL1Խ>u6AYrd[JI}԰B?(yE}6f7zV F;_ϕ?Zπk Pk{ýJ;/Uge^a,9ܑ㇝sU HGLrt# h^tAA~ Z|<X1V h*0n5$al|yCYdGDhj74ye2bH @m,$!J'+@@Ԃ߃&k.1 c!(N#V\P(fӾ~`r+xG?@.ؾ/~KXЯNzm'ZuHQL> =f֚0pU.BbYMbi7ٽ`'KH 2Bj3qn!U;0z 9NuW9fa60K8g I^zWbCuG;QLYm?ld ]!sk F[yɄd߯WC,L !6m3P`&lQ5^iۦ49,q[m3wOBA7)wT@dzX@TW <3"ۚA'HIXa=&ʜ 4gnѩjV*z)<*=)6;hOOvBL(6^:n_ElG,g|<s^߼Ȫ;$M5S[*S!7hԠAu8{bz j50*<_lA2efWy;mIjB# IaQ7;9'.7ơHY'FN/E +V1" X-6aIPМb~`BR벗 _;}8\YWYFo6p6b0ᎈy}^0Ԣy1Lg՟k'(JLsPuX\ f'9 GOr9ՓX|.$57CS " y>漗 Rt`LUo3WmG-ȳ,e[0bżYd_cP vSh#sa.ʮ }+m3jɯKF^.ƥ1 B#G#Ii'}d' P\Z"@z]gm ;ʷsat #\YkR0=c[С?$ XrEļ"GucjXWiҒ!Lz8e}YCs: S<jHFW][aQ:qY[ FVd߻NH߆WNRwG?}; G2"Ƞ xi4fr}5^ O5l9˜%:T!-hD]dB,_D7-ZH4gÍjBfT Xdz?l\=jDD7U~XA{Il,6Ti.wv k.h:p JSI>3i3pԥ=J/K4{hB!{ʨ\r3M'5оOV.ʭy&BZk`[0qD%bEsǤqOhP^Ƒ_&_xʄ0?AM=mYXuzL[-^ .`k=c&1*؁JuJcjv7=$ob R s&vҰ\r|!PLʔȅ_CXsl*v _Yc='hJutv  (ƨg.iBȠܹ($Hvqznz(iCF~xClKo]%} bd.3bF3e~(ev}ˆ3պ9= VCRfykS0մi$ߦR.}ZqFV)]S?VMOԘTi`vvtx8~/ڸ5I0N> bV2Ry^"<8%JƔ4zt~[BDEwfా,lW"2mTԏھW D#,ŧ2ejokS@xWʯ~QB@``G]?07jyrho@LPF3N9l %ӏ\H I:VJnv[fG n;)=ڽzS2$Opi[A3/ɯO0/yMy|MqI? c.sjWaȿY;˼ m,Uw^tɢ~TدmΙUdKG"l7CMeS@;>y~ҩLԅ& l$k٣# ;)ٶu=Uj옸n}Ma74:]3T-dvM>|Bv>5$Q?גCau?U4\ G1?S^xkm#bm}]qVҔ4,%Pq^cN1wjuM[D& x|)&X @[ؗDPlA 1k`cP?N}>!A|\k]n4r>m~Bt9wc!E S]E5ξOI5lbZ?k bZo xdѶBbu~֣ịOXt Hn(_Fx%28iV5Ze$2ܴ s@riމ #_$~Ҡ馴r,4f=x^!V)5vkh?n 6-~\(;C2|=2S "t7m3s|L@q Kp^C02d8e JD'vsO~ I2X'|0❱NfrbX_:w`]M7WkV6~cސفm<&e]"$vI^ $n̤3@usJ@-HkvJC)o%# #<U+jR[ Axҳ:cZcHSS!VSFO#7oqt+5[kONMO^ #xM]`d3 mpd C ¤ ;XZ*8Z!lW Gе*OW\k qRc7PZKmf_dE NAN;#ZA]4^I(J' ռkpGX[JZane.pohb}d[ȍC. _9@wP{ M(w63ohRrz{Qa̟k5b :9CxclD8dL&֟ f^>I' ~oU2?ixYXLz"ٙ0. Y(8(¹E^^DWBtV!8+if[{KUJxW'k=pH!Y2"{xIg)guZ9T_2m0 ) ä׋sզ8Xrq rn)1c A0lCsZ<"}ɲMt,T9&u%G2TyHב%LmtLc{e.>O!~f =!uYIѯ31,Ŋr%K=K.JSq>}BLY؉% հ$:yw~fxű,^Qӹ,]I_ia/0S^ؕlӊϡ0k?+&2=6kjDEPXQ={C= (PMWF8hoN,$Ȯ|`8Ytgak<%J4g9 ./.b?tq?WKTATǔ] 1/M/D_<vzy;3^Dxł+PH12<;*bMoUʶ=S# =#oZTs&f]nL57?z<7q|3Q olSI+%wef$\!v%F҉KTDUhhY=d!-= (k24&= ŏRdKy"Z,B@s$y<ֆl&ؓʽ`zw,D.DžbŅؑY}'w4 dNL&cS#P#DE!ɟk"S\l'`"qjXiLȌBh[ƻ^lGǙEݨ{˝LbX~.VN]k19aXO׸^7} ij] whKWO@&<k-͓v;*@gr""PO |uo\nr↭L<>RƩ,B@sy4OAٽQDp9_m$g=!q3u)T[7 L ͷیРtPnmffN)wE$2@PMaګ_ ~4Eِf|dwHʌ|$"hEm}rQQ)!p 8L*u)VXv5Oi42uՙg{HpП/bb#&Yg% ˈ'3-xN58q2{6K`/UV!U^)X\[3}|~y~}1;jb,=3&ԥ&VѴtmnA "3mjEvL;X۾ޙC iۥ Ű_!MB[pkNN??H%YB!Kz sJL-nNrɟ \#tUYG U1BvhAoUi~l:jau$I(q:Dq }="K'F}DJ0y>)SI뗞J0z{rgBw')+=:NO70$tI ĕ3 j{e~Nqp/GmЋ6&ew4LLZ j}q ۮsQD^?f]U#&Omԉ1ܯmr }؀'ܽO9md t}7;,P`*n|zv %v44[G#HȿKYGmKTB:r=p؍jVECs2]}.h^0eL?l$t<nfTTyY]gAe#BDquz`?]oI+kCE9c1Vٔr4}i<2_;#SbV.ٽmL #i )ޣZ@ CAn:X=??Dg| fp_X[Zfјha;1??l.XbrY*YOE'4 &J%,?'MS.FzDk#Q6MVQCWiƷ5e\'\v,kfM0L\z892ew.5[``#NQbTə32Rլ";zsEOpM0qy=tAAB18CP.t4H~8$ˡ-FNoҢ (WɔӨͫҏ풙;.So™鄴8֤͐Sz#w>F9c d%+ >y@.! #pvLr56fٕ4"!,fU 0= fXF',MW$>Kna.΅;-O:"ۜQ*W0kEE@"µ |Bfgϼ^f,My{, .\vaZ㊓\܍_tT7ckGBFc6p&N[ unV@m7KlVY{<؂o,n$[9,bGxDݐ"Bv8W!ivIIAh' "j]/2J{!uk_] CLBs9[\6ۉHVnj]FTk6%R:Rqff**|:_)ݺc I`^x_)=e{nuY .3P|SC0)qQf9ұ=']J*EvboangϵOa0߮s)o8mLhp{{_͒pR:IOH19iW4u:R׊rW?` H? 4BWE;`S7S'+80\_G [}ґh\>. `\DPdCCͮbM>o;\IHWf&WwxԾ9!m6bv!?GUvkgڧ1SAKQVpSri\)\Cb^V峢nJ%F )P- z2YK4uG6[V6c& R= np;ã y=}%"@PW-~X'Lb_5:l e"j$b ֌m ΠȟrM]ʍ򵠦ӿx6Hbv3qh?Xũٔ?q}罖=l)U=2_`3?og%N%#c[!Ē OAepTɄմ$,AINJ_[X&+W;G~UKK7=!\^;|ދ ǐ3lUeCH}Ks F ĺzGH"h\{c[oF(Kη6S2w0@pLIZcE+KmLhvy85:Wd(0O%C0tx왚S[2ޢgJڣ v,+Ӧq\dE)SU 0@.^͈-"/rQ?=T~Z=* ] dث_>\jJ^T,Cw dW">U'{V $L@Y,!22>˛Wvxw' ~ 'VϫyNp('}EbІ!ҭK<$d~ß5ѱU@HrU~;8Ҋ\E\*ir.?fzxzN7!2x[&umj(JXypn -+\88} @B 3뷂ZÉB֪lU.lު55퐹^$S:1c08$8 ID$o꘷up! ~  1>DoE+1PJJJ>S𤄿4T lx>@V"G|܀afC1@, {v] @0G^|N2,3BiU$tC[6^_tixAR;f59|hn`jmUEr m@ox}q $ǹH8H^87X7 @T<7o]i8#\{Fj3^o`X%oHdždA^ݰv,>A! -/W%vݢ-R.#Q_o%Mn{nuU͟t7d"Xжg}ǭ< 162-Ї1FӨd#r@ 5fዼ+ӊICd%ǡ<0s0 W2*Dps8Pmkgu'eQ"xnr'Bҋ4*Q9vͬA : H{,bfmVtwܒDpm[[^ >+,"-n<4쓙1ZOhރw) nH0rǁ-?zcjyRA b4 4UJqҨk:Kؗ;MRu>lv#iJgN<[bKZ<9mvnm P?)K@ &( KV & p#`)X8%Bz7.(1mb)AŪ bֺMW8g2 5HJ3vJ;ɞ;9py姫4ӺI8 ~'&lh tF-/[hW1@ΈKH22u~R8s;> A، z VU.J:Rt9\D{^=ēvxUn>b7bΑ`[.gr60t e' +1b6]Ntه+>(2A:]7UdT`.Gc$Rq {s6i| ; jgC40ڴ(E<lK@[rGkkefuv(yu$oRy{`YI.M_4s[khʈ6?/nwEO#}xCϺp娿FXR c6:@y˯`ANf`,f sH 0Khl׽PP%{.Ğ' ň`hCܭ G;nxWc& A;Rs_Y5ɥ{nÞG730zJZ/XCjd1[O7[hCִPZ]zw$=<UGၵ{!zp;Bԗ h{k-ls0Å-v?[dn8/&GXLHy>͛vGRye asT rt8sSa y*}BF WߴeU֖;'N2iU|rt)m bdؒ'}EP)kα 3G&rO%a`jڢ9]o= F @;Ii{s:Dyɻ'cK5ޠh[~,P/5B{T^x6_X p{6Do DWT!lSSY]d_"tAnV%mlKyG}'vOX& 0)j'Y-% 3$!g,|Ъ q6jKdu3q(zTN8ϙmS@lt ^قԭ[Z8vLF~xYnU^ң dAbz0&tw$1*;(닰JY:u: iL,g(jc2"#xg4&2Fzt<̿,"& XJ7R]ڙP8&]` % 9l!DW<mMPu7eQG賡A*.4b8^p#R:.z"~ RhLk }Ӻdꓑ7DwXh(nZϷ(6?7)`4.|SNѮx(r-%Cލ1ݘt}85йr.,8%D8%EE] tJJGw u䤄i[Ռg~FڴtV *q ~bej|lya>+x̏9)}]HU`1X1k5r0_W޺bϕ=i(5Ȑyy  ) Ej$cH݈'|6n`881@4ufI v*ǰrߌ-"TJT w5R8~>ՈQ<b5a:mFcϿa/V!rym[0 |XTf3?8Xu4KOק>4m1u(䩔碛xŨ7,WᄦO* 7 =KPo RJv@lEֱ!0'~GպǪ{ a|}Iڮ!sdJC=Rr*^+N"Z47;۷"b~&⦠K@y xX_ATQbErMcaL0'zE`EUIOtP]*òZ2gоm93v{3Q': SePTZ ʮ+ 08]zf\a}691i6㸕E~a6 Bٝ).F  0pjo.fr+.Fq]`%x{5jU4~bw]o 1hK6-ҵYtmL-=q\=z7gSIW_8\ˉuZ9q3<HŻVσ.0S|M UJX5&#  M4D丿$~}~g`&VW(laR' ii{6iD3`+prl& 7P=tm1> Am,|>!TA~zAS=XXg!^m$xMrB\*D"6/jM.pZ.yrކ i 'zߑDGMgKれ/^hH S-UH4PGD*Nvac鉔GDW55|\)7V`/FG%hs'Tga =66v9M?xnJ]g4 "|Վ,P=RwE)x E ~04j`6y*g~qM1j *7#1wq<[{?GL[NE;-u-f @u[@Gq 8n[ }\K*N{~>ՖMuRrZkn3s. Q'#LʀlU]]#8|~d8COMfGďZm"͵8Jd0*Gf2 m|5#\y.迀.t^=Az,>T0| y/p1hωn eD諙kwy C3~?jK9^AI.˒wKT&qӵ>-UݽY$*#an(7O< #,O\:::A]_5knIg9f3TQmq64;Htvk'Em-\]C©NTTX %O nUC[f֝OrIb,pj2NFvL;s\ƚǼmăF@I'_xS٫ PX ʩ e[<\R ^a(ŊOqGϪ־)zE*4*ٶ1yeV5>לHVI9%ܰW-SFyiկLWZ6.>,&T1V!7"=dc d&Yj࡭n !enV<̈D9Z(怬NeJ~(P5t%sȁ\-'MH0ak>EOn_u/i- 4eԐmY9gV@LM̋TpzWS:{3fTnϾ.Pk4_DLVQFv流_Cȋtj7UC*[qE gj l\YU[7DmB Iay4v2Gfbq'A%e(@n€gSn%NƫBz@& w_xmmBhZ&wzrNk #mOpq;qEV qo`Uyb)xԮTmI?vzs|&҃ՀPa'u?q΄"48Dg \79`>CXy,yMU2[@}X| Yf `p7UEi:XAD~3Qliy%q4L1?KFB|YTde6XY~5SO`=mqbu0) 8UE)LxnD2]7RV5v֢LK_rX]TS}^*Ν= [hH5wΫ|)Woogđ|+fٝ=-,x%~|Ox.3CΪᘀ^d(CRÅ-uAιuM j$QL/7 am2|QH&+E }G@&#=_yCN8 Ұ ܀|RQ3JQq[Dj7̾ s׳v'D˳p>Żs1~ 5sΔ*VY0GU/LJr?#O β4borwPg]{앆0OBicp ɳMڹ̒hk ]^_`]5'Q4Q~41pPn]FW\H'+AmM01f" l:Fq)QV9dM3ؐt2)3Y3\8wW\ _ØBxuS%P| t D yC~>.6oCqRȴ(ZmH ڸۀ1դ0;{1#052WcP)ޯ1Qn WqY1,Æz/.>MuN? TrfRe}+N2Bc~t zf sԷLBI`r<EtaTGN"t7kOLđ”u(7܁qXz!]ĭp7Y" Y(t$ǞhqyM ,ci;Oy~e'gDAj&X4&( i*93FUb{@I=~G,TP㣭T[}2EHCxk 2EޮUT/g,Ի4YLz,>YZz r3}܂(A,uE N;2 >v0K07Q(Vg3< ť/kt_IBU&S`*ZMB3N ҽQe }լ~t߃Rax} Ջ"a3N2Ƣ*&+zi5WuxhRyܿp/]+B @Q ,Zssz׿8*]㯖U Lz IG-6kt}L*DhZ/G9?35< q1F)\aIa hlJoDou&us1\XXF|,1/L ݸ4""'0ߟw}ub;<2Qiz5t*L+n٦> )@LA,7j2b] fו7o~]ei6 ̥mw>~ U +/fcKUS+q%l?zLz*kBl;ͱM;סʊ|<`0tM{F=p 27p ^t!<[g@1hO ;vv@?VBZ2+NQ|tcPh /u<|n@iDcpHڋW˻nI=xbۛ% T!7˳F ^@6˴-}har˧CJ''73j3a.#+V#Ӊ7.M,?Q`9ԃ{zzE}V,; O&;ߚ7 nK`95dKc?y>QrC>!Wo,5P8:`X HF8;(ֆ@ՠk[|^2* oe{2U9K@8^;8"#lRSvxlL>3 ݃{QC = %;o*p-T4qF^7,$ۉt J5pa{] u;|=`njڸV.M#dʋ(8]^] f'~_$" ..K,S1kxs`LD-Q%x(:C mqm#3'4il鑻8p%~Can_wE޼[|À1┴iPy%-.{3tr pCrgY#^(bɎ/ ~Wj&&t#A1>&~N@>!< ?-=srR̅ede6GW!fX'5limRs˞NB]T rO!E]mKsqc9xDzU_Ɉm|e+b拏[*gKkϙ86}U G9Lr412EQ$eޫN_psoWl>ԠCF CC1uJ0JQ)'631 5Ks}))1Gp(T*$F)WKy=-6{2iʠէ>(UpOr,/:NUOݑJE7W|Kt)K4H~u'Q=5˿hFMduLLvؿ|߶I9x|U #_> MﵙmH[#j9{:Mzgxb:7k&c%Տ} _Nٴ3dg$qxWPî9? (ؚU9 Y#jx{xy4,1Ϛ>bCsOF2#H\"㇎WIhh5 5-pxس}R3S=nRO12^|ڜeECgj`0p#)ȹYE=jbKG R̵“K'f\FXZj  9գA .뙟 #W5hoOD]r"(RHbUZ>b+y` aJ.6hW.lNx6~2$X%aLJo4qX>.p佐Ic70]JnQ1%I}Ka6֚V%1]/ '8{%R&G `C 9艊h߆~%7KE}{Cj9 c$c&%/eB潊j/SV< a)_IEbfv t-RmɻԺh_OtF1A}O9Dd+l)޴ a U+qѠ7q܏Jʱ9PQZܤTr:StZ=х.Zlnj= 9 ( [݀8 =!{%uc${' `3d2}fLa#Ż݈$TCģh_NxTH|Ý&I:f5Ҵ o^x1[!kf%֜kR%*]&T)(޴J4 h [ jUȳ楜G"s]H+H:vtrSw%dtuF%Rf?:s~)BTFpnu +O *Ӯ{_]Y; 0%}FbL($L!8,+lć.Hl*Scԡ_X z 8 w\<wu;_,KK+ʔ39 ôW;_"ޤvcM$6ѐЋqQtPf0,`/EڍyG&ڡgSXfA#UǗ Y[Sǜ#&Ⱦ8B5 rxI0i埬SA.+eu+ 8;>lPUFq}%Z"m  X7Y=ǔ|[Yh<XQYa=_HՑ?#B\dViČQ!9J;Vw\L7+E彨 r)~Q"8AЮN  Ҥ)ۭ):amu͠4KO2׎'|,zrj"YJ`'Zؾ7(LatVA$I)$MN0Ӗ?It(fSDRIbvOPkJ7ׯ^>GH&۳K2DRcT.C`#xf HR1EGR`̍C'-aLrC1' 7q``zMEO8UPϟ-~-B9pf2m;*'H`Ňe,*6:MӠHΦ2F=dE<S˼75r{"[ z>ҲZO$@XECj?d}#B=zggF.0|#MY lXibiljKeݻk! 螳/7h5d6e2f&&UVCpX·JOH:%Ί.. A{`oȋ=3J4x< XE#Lrc ;ю-zvm)H4A?c)mzŒ!%Y)3%]'?lIaT p ϩPUY9"J>ePF4&:i*c\@r.f|n+P`d % k `sԱw4Nzl5M{7i3{5t+E f9/Қ'G2DVՙ.[>b=wl#udtZŭ֋;D`zf~Z&R9>pS)Ep4OԅvE!6|% ]\ǥ<~+3,upI%IcǍb,w}(5s^e0o_:Sht0~ďkk)4J3 )uLpU8κXc-{!~кSRWtX$iӋ5cjmAHCEd Z@U|-eXAJ7| }JI<p+++K#41~.׾iwJoa ]S<**anI'X|8|^P)Ň՝f'SC,Oqa,1R5`~[d͡9gYgJz_?B]v Ny w`=']3v~:|7X=j6<3C6N#"'D)bUo@nOu/ H[ M؋$>[i[ |~V.X\aABhԌ ;#V}~#U a)OePs/8`?7v0,cշiOӶ0v,GvԘeD ,{u$KXo/ptt)GGɨ&s@SsP7),MFA`-A)>OG5! ̒e_U F-a[2KX":R#@(۝na_ UCl_27Q)]8Rw5Qo8| c_HQ4dGϮDbߖCvb\*:w~/Ykl,ڒX;b<Wv}EYJ{tÞo._kHf ,Q6f|CKmNqO?/|J*Mw[7lXHT6eֹY*#"ߌL2}M'~LZDvgf1rMZҹ0;SNqH< \{U䇯b/D!X b@l"wk\+Q<{ YE^)Aw&bk߯* 'p+*.J$ȚB~]yFHx3@yn )U6T[!=؝@EO:7P Drz,j;(Q3mӉɩIf첺7Dg6y|IqJY^9"Xf'n\QRͪUQk5 f/P$]EF=%p=2i4vf]d[)Dv.$;YH;O8(jƾ. 4<*WM1%-V!a %+^ؓ8p3HRsЃ!KGDIK?ۓC8m3{$뙽P# QCD^K|^EYK92T1o : 8+XGpºdϊ>^:)>|Ƀlzw7TLx)K" @nxF%-8erXמH%ޓH|ɜqGnG$w7ǜz6{lA4c"WYnxrwt3*Ѧ?Ps~h_D Je3cgd*֨qPJ ads9Y^+0ɳ&I\"3/w}j.-u PT $e!T7q;>9?f`Zf2 )zb0sE`.e"YC#DF1 QdW|c57"mNPT55II& vW=ͱGf#r::#^4)) &H/ROB+$Lb}+pZu8L+uP0,+ }!8|5= 8OK·G]UXR*NMbmο-qq k!vv7V G!;Oa= (ƭBFAmunp ,#5 :iK6#8֜֏/86eMUhu}N@tZ'C;} 1|@Oh 4NYW`a;O:[*cY&MZ!zjU\W<+7Cl,Ki͗͞N#mo0i3ykckv=wJ p8-)@/}>muWr#l$>!ng$Uh3Ffy~ (PVu0Hj']0aT `(}>x.0-6DU_(JwpHUydTV8Qw1ĉC9p"I|vvZȀ@N!҃6wVmE R 63V)Djs P#=-dU.╨oblcI +T*vThdzy? Q!b7;yz {t:N:B@14&0맥0^oz_{\ْ ivuߓ- t7#B ˁWE5=b>9*fd\]CQV:AlE Z<*4n9HG:~'b`ᗌ⣫@x" 6YB8` J~|Sb7>~0^ +tY%J a]iJ<%RqRFumjnA唜P&%+Zhq5vƇ8kQ!$إ'/m;#?^9SNn4Su\7 z+nH@@ًuDdpxԐ]^aҾڍ5LYߙf]Ud;##@2VD B&V͑nzfaf[UK&TxD!V +׾Ü [m#Y9EV őzۘ]KQM:Wu!UIׅACk+3JLEl|7Fac9] 9m !tuGE1d%E驫ێ\@%*TL {tws,j/f<~CEu8 `J8Ψ|KeARPҸ:8< 8(b+N]Zr[U v4(Ϳb$Q{JV}[G@ߖw xHR>,M$8P7N\4]Vո("[W@fl- ^=*{(;KwBN٪Dz}ClA"NIH2+RN N%B)!) 3J/!0 (5Z๿E2)L5C8Z5-E.÷Oh)0S9x)#Kݭ^-TLqLX '\]ld@M}P/B,gT:cNFka*>VhQ5P;n^`DTqeN8ť1g( N$_؃%B=,aV3zs kh:D,imNJ%xbp#x(5 dr>{KT~r-jH_ hb&Z|ue^h|$[KNS{WBnyDz}b ԡy^| V}XYs^/ӽ#,-,*7x[x"Ԫǩzt準3+)z/{ .Żz!|'LnQ& i+ sJ]:ÿ8g:⪪GmW'b8AS_]NuGG+DsC7-/Y6ً e)ˡ2ͰxFZ<1_6k hk-ի OX)p] I%IwnœJ3d&p@æyst| FqiYi@N}ٺ58Ls5 JkCvˀWɥT} ״:e&e5]Xnp;_Y(y駤/y/TV1t<90bvBҀuC Z@}ݸ椐% !T?A;($wHtt:N?U #\0H;xlۢXE,ۑ@rCl`^>+OA&A@jƛkrB\Q[ gCFQ@n{oi˹zb U~wbDȋ<*a@԰@繋xT)bn#k6tj4/>5L#[ &oސE*6*A뇖"*nlEփH8ئ<cvm|v3u$5 2O53*Ks+l$RY^8`)Lp:/z~L;z?mxK-H,R*O{Px6̕gǪ|([@FVn=$_qs"HjqJu,5ռL|fQ֏ϫy}?r8VCAB@@~ˡ&Ugv}YydM `P+ 1OɢMys; f‚AHŠ|>hs^э/&v'?H *8PaBfLgmS3#.]z%bzI0k5+P*3=عz^eD5RXr0?zauKQ A&IR2Sd0 QT7boN\<&?Z-Ȉ (1 2NҺXÈgQR0*l=|@\({p0SҖS E9_=Mqgl}$S4 pv 64|ۈ_44 _&$BCYvt bAyLvvS3w"󍇤 bf*vެψ"ءVȵEEU'y"A+xM='/>Ѷ6r1:NR9؟pd RVYyz lq Ǜ()C(r9sWNH;}e,YET-Fߍv0?Zz7tGGKpBƥ{QZC5F`.ŪbK! #9I1q|BOo|këS/-qrc|Ҩ^bs(9EG?ŴFXaZGGiOGh:i}ϲ[Ab*c%[Fw.]L:luCnJiVϕHΕ󷀪8t S}XjMq l咆\x Uʼn1=}WH!SDr P3MKҕzZ|BD҇jfQ΃m+'M>gZz^@#90R'V!lی ;K0>OxU8(tbF$>~FsMC`Xfi-[&B2ՙ+j;WXj")cؼd3.D< JhE QX6͟0n 0TGGW>mdu8mqCyJV&+!n˧ 7*պ8̫Hs?lcX낼8+ K{KUJE 26 Vl&74ݵsWj)u716VO٘y>u_FvI`6yᬢP`GG{Kޅ1u^ux~UWL2g]Ja[xS{y֌Nͳz!t6e$ ue Qؖp\Y?*Gڽy}AdrGa\\y rR>YY+pưpvub a%um1 W9lݧDZqp/C*>*W>]5=O%ZPXNV}+< huj4{`J:mDF[ &IԢ`,lW($/al@G+c|k)^1ه#BiGڎMYЄy)'c4M˥8MP VL4q*MD֊\ Ce@ E{UЪO0x4jMq;?5XӁ}߶ @gz$$Y}AgmWH18l3$q5|Zߒysg{}W)WL)ZG?nųW7OZleKM;5ǃ4X 5BlxOL*%mAXVuL{+&G[p,DO(5.VVP:'Ex ѹ(futA:-틫b0f 1DZ7gHg[ ͱ;.[Qa{}Y+:/ (j;|m c5^;mʵ&u)%y#%32fDӖ*U_n髯.G?gIq\}& Ü2.p!Q>U0_@<쉱o0Uf' d/HO;oY$E&ݸwvacudBlyn%cPǁ9e_j-aV~vp +J)u0=S;CRT$BW|:9"n焥05xCȯ;Tgz%yNhٰx&5w|W+`?;HI0?T:+eX4FB]1XI ,V9{$vcalz/!o<+}isj8s|H$MřO3IjeyHxd2,\e1g:<ҽ5؋lA+8vќ rJ UUEy If'CJKn"ޘwX;).b t~}_l 8W{C^Ŝ[]O(̬ri֑W]gYMtJ-FTC]zU%?1$SO EB w 6*3}r-o8"Z_kK0 _XTER(GlR0`rc9rC!`Qh/߲1A (N5;HC,n`;ъw)&lWj$(s_xD3MfQ9"A~ r'Ct |{WMu>˛ST h]nɶy_}}1tl+dbյ@0o.x35iaV]Cc"r+<9,x^տ-D` E6'-z ;ZdqbU zt]Yri ?< xiMpݢJ4|-3xaU2`װ _2-8pMC E T QPn.=O8:|0~!3o!ޜpK]Q6WӕT4?)xttp ͡@jxWvt;'f˺P6J 6ͭE)ŠR7$R_a0tkn?}SC,Be\G*:ى1BX]L(ڥ$y{{2Z>/4/U:A'3g.r΀65" ֋T~zAK.4Hؒu%he8Vp28*S 8})q8a$B48ӾjS9; hښ>Qռ<IjOd&?4Y:2pK6;eMtztk5wm3 U)ZF <-ʬ%(rqv:El!b.4Թysy;ym#ĭW麗m1'Dz;.C5T䏲|UAIx^&2 - g"#s ٨iÙa<W3+!oAPɇAk,qD-фؽֈx6Tˣ-R}klnݾђT[ ztw}X,HV$36oÚiIG"_FY` _hMOuH <[]Vj[8ւu:p /J@tX)g%7T .mͽ`Q wK-hazn/+zR[ùse,OۢY^& *ӓAV|uU73rTҌȔZ3#bBvȿdJ1N 5=}ZmyqwaOM >:4YqZ Ub]"#*a`9h=G]pٿlla˂iq+G3Ҟpw>=v:־d^=AB)?7ͽq2$V"+SEl .duGĚ >8ۉzv]oPXY%)@3ӊNQhɆb}iz9lˮ~)<ʾ.Ϸ< dsN \Y!Q˃fqU:4Y+e( "}Ɇ/4uA&͂pNSz2R_ uS獸#Mr*==acuj{w4rZBk`\e% +SaM,2\Zɘ[ީڀe$9يzw4*}Q?Y;?ۼ@ͳQK V20ҀMp-׻DGvIY/%',KH;IE& DˡD 6MPs&XSz&bMH3ىkW8n9kN!qB08$|;Tpk\bQVMFQ,0q]aLPґ]2rewfWε36uA?3Zbt.*oOIHAEK~=wމy=\v 90?ɧHNtzUH?SeFϝ~9@\/}"KCvG%Wh^MktpoRW >p̄A̼0c/3Vb0jDɱܯNy3<_gleli% ,9\}2:8,R CC)P&;ZG{#g VKTzeGO [Ջ@:LqɵKKYքDIKIc7 ˏk*#pFm3`U'ٿ Op`{ 2:LZwיnKԽX^k_L㗿i5t{PZ¢ je| Q&pD$Lw HSAw]aN{'ݕTs{[3:%F{t:Ff쇭Ox2VCv"ڞEP%aXQ75bQ| +~yٿXcjs!J,5YXܴ3Y -J9;|z_jHm֢N82 J,)cp/`\[bQO1$oiMJ] *tco*4 J֐sBqZqCI?Wc\_!+#Bv;HPgX J@H;h{qcy h+6KX9v:v o%M!H,Thȅc1q~+)*npxH _|o77' y 0~sXA\A 2^ּ20>pwYyGWxھ۬8h(Y`)wᶪ}P ǎݙy6G&PL ъrI WM2`MyQ0dr7 IǀSR!@_5eXﳘ[Ǹt鮶0@W249u Ζi0,ac_.H\7(ɢ~E_e}3bF`ĺݤ3u3ϚtФK~K^R%A(91 C4/g]-k鷻;>`˕)j f"AjtZ9[97pӏ~Z7`yHVIx}PwPt1$ gZ:! e' +=eiv I8*ބ|-P}6?ւsU@9% UIfҘϗҚkh{G- SK 7QIq{R3DبpęYʱ!:Ue07V]d o[՛^1!'x7.j^W4yMfSUws,Oߟx X~4 a^dY XPbw=bUY ȭdοMiW.jh̍ͧXe,EPA/O4KA 8_UuTc"R[-' nт]?eZ qNͫNᯈn8%i|eUhJUBS$ŠlIS#,}4}"3LO&GD7Ģ.=`i=6{ۨ_u5!>}_ +8"`7z! rTݠ*~NF?6aIU6`C,&s|*4'| U+Tas7ĵU+Ɉ^z$F {vqC[BZh* ^?a0E5:a-.Tk$}.6I@C5eV׫{AҰhۅa5&KJ#&˞ x޼]hqOz~{2y mfOKnP,+(k \%7\y7<2$) {~G>'SUV\NQ'<7@r!= cqi&Is `)>}Y(ϩ*F+U.8^{Y{XKMf '{`c`cVŸ 6vR}&qbrbER/?-L߮1 ڧDBx< Azp<-n$&~4T&E_/tW?13Jt-f:@J } 늶=n˓'R̗AJX#6fgCzH4zyhh-捭*_0pҏ!r v^ӤxhVZĬ&|v f*I譥Zrȶ8('5^. A̷:y <@In~~5jbw WmHP9)X*+ۈ u|VeոJq@r^}:7u?OiZŞ_U6>G.[y(%Dr8Y&TjESMJ޾&Z(G:.]O/ƃrL9CtiM2:jb- pt\q!nR cLkQ_hBKl[ MS$"ܪgL!(Ϟx5'dHXzHT fÖ=l x }eDC[+0gݡ9?mv{Ǟ_L:ruySf0/ET3*F*8Ŗ_w|js5+S` GbQ $|R#&)q} )veb" ωS3v KJEK8 U/@[),7]c 1샃V #hC+,YMk dq, =a#s!| =7?Ee꣋;]sߋFXex*oOdN̓HYYC96'oOA4}!)Rd^g؅tm((J9ճ1i}|H͊;$]@YDLt-E:y|lbcg!b#Uv c柄BPd^WFI-=$ķmr9P #[Ծ\ 3ZMJ"h`?&\J|/ۆX@v|L̋d cG(*B/KM؞D2"Z2,kXw /z ̶Έ~!TB68oqj.U4Ւi:D ݡ#! yhF~BBj7&ܬn!/(U~M 뻌퓑Sp+g-ׂ}ҚtWr잶W;ESuG ~ZW~tix:['wزx C+OUCEj!V⹋rNr*ʋ˘pu9_WA-+s?{=I{='Ye"úa0- B cKh6}?u&QHR3jb-P\qu&$wW,+cPC&D:-ن^Z?/ٱ8}gTv9v5\2.jLg1e) KF+,lGt 3eά?O"_ aTlziJ-Ť(mˠ\ Uǘ7S5Ɗ. ~Rh?A tHB_ g9" y|cyz7{P-~j_w F+fTڟ.> !`սފCsSr!Y!#=|֊y>'v M~EXY%l"{x;+?Φ5VnA/ARVc=teֺ^.Iֺej뭠oOSe:}]GMo~[BF?E l>{FJ;4o*yj嘀bbg r#} R xtct ׯWd!ƁEˎ-u= _O$nQh rj&I(d+pB!`ei-' 8+.В xaUn5a֕:?uz aYc?CxА\ o#}AWkO@ruF +BN,mQ / )m:TS ]yXfWAAQo=ÉL([5׾zh$Gcڏ>9IoYVlXdV'|>kq(8fYW#2m߷#D#^N~5.2h!.ׄr'axUhTnL-'fYț].n|]|,}u}8*aQWZ[isB#zwXv[eT?Q{xv1וo*|P<} d'prD}L^M볬D UM ~ H]$H%B6#X/pcBKֹE(­pm#o-h>оk-F٫W0~jQ i%QK9xm *AzV^W~\0"\e )L˫9~##UF֏5 4V'ˀ)tkn 1A|*tF JNm4\D$p'vWqW B<~Qyq=@r%>tw pű % feD4T;S}&DwOUtsXgE%[D &bs2o#G#۠ W+Kߤw1Lώ *gB&ݙr.ƶ?8X 3f1JaGtTq8%;KBj*q]j1fV9Zl ^j3gi)l!zḧ'ik2#ԙ5i2$M $U4H| }H,K[8I8dHo8?FBrA96{ 5Fhfuxyy鹖+?AraW öDZ+%='Lc="LpAX$U+9/wA/ y^egy1 %k4k0- M-T۪rpT?4ƤE V>}{đӳs~(Hen " `&~j{O+ٵ6Z6ϐ׭AX &EeI~x*gMD~f@CUfa0GS[1yaTBV{bPCƏc!-qW߹f,+tBth8ŖRɼ"1iurg_rnR_6r%l/5`1_& Y 6UGz̡k-zkRsAćv+#$R GE8,p ʬa[R9oxMAyin(gweٰ,}R8E>EN1367F,-+I8wCUe[0Δ"3X‰|VQ-/H+PwNC/ pt($笍bJ9rz `z) Q?xjEIYf@c>O<*jtJ70*ZnR uZrVD\3Ҷ O٩< p!n<+Eʻe}bZǚ޻pmiK"s%jHߚz,m:(t@8/ g ZG(#rZ^SUtB9:1KuуWX@p էG1åP|Ɨ'$nHNe(76-BrX8$[ч|"~Qy9-oGrZ^vnç('׷Nnj}S(ⵑx0~87 E뤌O  P0;8O?ZeU75j[70ĭc+gEzp5n!P r:JdZ;`P Ϟ6M  vۧ-V64Q7O9JEH|msqgPEv`Uf1/h>Jf7F Kޕ!J4ݶMtUxquȭ)cZ\jsXwTRIJ՚XLB^D3 H,Wv5Ù䬨zP9yWگe{{DCɂςGNjIS`(LPa`ɯ`䮩$2}[SO1v\D=X$',%͉ @M=Zܕ`7_Όߥ'A ׆oǩ$>`.s>u@1۴@GU>Gujx#(/]8TB@k0Qsr~3(I,*夔 ~nmh@flިW7v<ߞl!`.%c:r9CnނFdtm-,T2ӠKFe0^/(kv naWś`۟qW|d<3]J4ŕ>H2&p~R}0 ÖlUԒwe!/Wmy hRa._ǭarVػS7̟/_ $Br@20+,1G1Q#u4:G  R]Ia?cK즼`-cCUk p/ԕѹBQ 6< nNwF&Xhnj tQ`N/<2,=,m<̜Vf|%ZC6"~>MQv(d,ė4w(55nLkNj]0,u;\PRrD>U^{^c./8f>R_!V[V$DzeA~&=8%{,?a?ớ"n*@tYjo jm{#עS9'se:KS{S{BSOWc_1p9/٣NՎင!I}4N*x :y`!l_!cGUcuHruVEU`J*񛱓Ǹ DT5C+' 3+OjZV9FW;\lO˞tC` rl4cZY+ZK7SgddI1u7.,? ({:=yS2Ĕ d!ٰ;/5`dV iKEۊA%Ш# 8!9r%I5zɣS#S0 =_Xc"eq 4ҬeތTU^oLiy{>\djF`NJF\$-9sW+Omõ.c/(}#2 "3{d趒 %7*a/f= #`ҞMY ~?Ts8 &dDžRs{FwlpǧHZ'^=ޚnϪfy(_1"B05 v@o粶 n"gP,AYƾQw=O}mx呺$ΪP@φb]fc[[3 s=v~F _3WYIN88(ByH41fp苒^pشgo[f$G!OAOx]S%)J}co|9* ;i*Wҟ8l6ef_p@ S[e̤ of\<!fYHЏvI+SDxyşWFz^VF4M&6/$\sU ZxJ9':1(\c ̛|;A;ņ)DlxC*NKL!2J4!TYg=>oUh&jKvU"Jڧ23;Zvs`|%>94`7~%׳!WuW[qA&%|ѥbx8|? 2 ɄÇrK|NWC {Du͝)f6]}%F0|ý~,oM8 Nʺ~3m-0\p$5]#i؀Q0|RWGJb;R؛ :[n1Ʀ #3QPT0Юu0# WMV7eQjTAwg3$N%X@$KC:دPLv4 whi=a뇅:"']4+K1?JP1nٛnR櫨Px{(ڬq@ ,/p剉q,mN?ocov^E9^G{0Wh*.߭?gݡQ%7n8Omň잓L{y|pAlۄ͆%^M=J=}I܃Lsk4S^ZAEqL[8+4}o0Duz|#*uI&9+n)FS%rj*UL[[s`pBk;K#p Ro)!rȒWI}+tT_J')+jet*3jՃxJQ*/،68 uH.D= m16iJ*O/MK?K@Ĩ >{kUʧ1~cldE.#7)XA19 /zlBhy#53yBUF ϰbtT9+XܴzAb]QDhK8/ TԘ78Sk_tVȰT=FA\ =ژ*k9cJK+UmO2j*;79Rlk$i0(0'Wvu*eꛦՊ\q(#^ǰd vxRڔF 5l=swmΝTwDi-XD0*=mO6Oj]ggQVْ.v)wk)rֻ$GlvtNx#(01;.FҢ yȎc ;3Fh+c?@lCG[L))RƝ7fMbS簇ئ/`qXQ߆z i}}3tCjV40A GuZv18RS5LLPR0C( X=/$Q=^d[7DޅoMm9Xn8lɥ=u=*}ٍ9C ۘ*^n+ѡƒQ-1f$G!8fQKIUwh4YAv Kq@ H$p9rJaӡ7;'EM\o]jE!88k3NM)UuvFqZ];ACV7ht<IFq,rTT/U8߲pwy5HUB̅Lt Ŕct%;}ˤ.8gLןoKݍ^MK8NX)鲅o̪ ?<ؤOF*GΨc&VRP$mJs[W_Q?@D8HEYD_)m[M=fɝ',+0cERBj|ސ_(OMny)BD$։ZoXSxak\ofMw{PtF%tcyzWyί.e5 A%ۋ)`Fj+,}d8Fl8>f~NB9kSy7Lc7kӗ.uUdbK&w3dyO oqS(d_X^:ƄLB[2@K2A]3\LAn QZTkȔCZbi 3#}+ < f7La| DAT=DhjWgp?Rt[łӥGʛSW!!xhr5P9yGp pH{uտZwR4oMdj VxardX/h8u$G>khI0xH^M.iۢ9xT%_pJk-=tX,i=~WExrSXww R͆G(C c|.GMcbeIIIPYg]/PU$K >2X 4VVk H}yb?`i^DSֈrF <|R +/Bhl. ~=)7f!/أ!Oo#SR^cOg.Acwuv(~9bbdh͍"gj}3YPS X%NzqhmY=G3ՙi*nd1TNtR3M(ץ0\ؕ*)8)i*Qoi-f@nrR##0S١3dGMA9MR#b( ]V_!ָ:O*ve͋zsjBh%m"d&w.%/79;f]Sf:';㐊u}57͢lXfRƀ}y~N3$5e*\<$nbǜ?7tӼ< <[^ HDW*dH.G/}1{ Px2I~Iف U鳺l@bڜٕAmgFի- Ffڵ!=󺮖!>& j|ớ[dZ-xc@4~ =Nm7`#VΝ5A:6܃Wh^,8KRhwnj C,ǀ##'.P2"n`+!N[ʥt%%M %`so} Y'Y!%ZU?[;= ui[@ }uRGo``#3 ;o0t\†G1LL2BLF wMIY傭n.N},BD}GiTX~1 #(QZT]?SsPBO8 #A Pɚ:*jW t^\CřbLYSUEC9%߇$.k.DžX"E|j(hyxZ0xLm[QM+ hKУldTU1x 30k#X#T qś'MI2Uyziٞ_6 KH {h!(dl%qKb.?xgӭ$4z¶LZ}[3 Ʒy4*:t!#= R`YdUzsF8e]Ѕ_PJș :R \wN͏s)8MMCxiP5~@L-bU*]P>ܦZKt}=7O{jg]\PZ@Ea: ˥7,"f`2<9w.k7-v ##G=֝9$O{H,b֎u,LpFYeҌч:>!py_H[Ci\LClYU>hw9aA,E fȶ0Fv1o5gY)+h]ӑs'b$]If\q_`HK,k(eu=vH]s|2 7ebmW=S{OQ,(6*>QrBg0*~UE+@jL/ 1z4X"~zE&r˟t]*F9LBVzhDX7{Pd*e|T\ ƽ.%P=XmiV"S<5tT5`f}+U=pǣK׶K`. CpUݚ-h7oR'8:> xPҨmA$Z 5U (V g݆e5ֶ\]xY.7|*o&'x n1\#}IqnWjseؿa^(}du8rxv8h{q=oN!RXPv1v~0xw%ք,@WN>_,Sow<ijV $[5X^уTyJs;il?F9 ovZ]$SG^]݄k}cM|(`huș-0t /K7#PW}|h1v2wJջ=_^ż)j4a1:GAL1ptSc8 0Sh8jp*l%qTH`HT9Jt =̳7YSjmpj!Jq]OKֹWAY{|؟;AC8Db}xnjN{x]H9!Iխ g=x币fm-£vA+,봩Dh[쀥XnFa $:my[u'k`ŜhaHn{<˦I:5+ \^j-lي2 ~)obȣZ84 |:6GpKh51^6hK+)LE$ς=̖Es>eEC1XܱPazŻ%N,_21 @LQa>3$}17韼Z#2?0ź)@nTʯdJH s4+R.: Nh->[g8('.4.[$PǓ[m"Zph^aeigPEyFvH~a!mtARU'"yLԞ׎*㟺q} ]xMt͏Ėr@>3 e->;4ɗKF7>pqcrhaeI׶Ɣ`'G`VoyCpUJY۰ K<} ߥcoV8Jc"*iѐrj]ೇ,>?t$(L~ YԫͪF3wQ;f/[9QheVhOOmu1QsBi ˄L r.ȱˢ|:ƗXc4UǠJ:ulp4CW<@T;̔/=&_d 2=ݐG 2m~IL{XDX)" &qa{OL %Dg# ?UM*oPRatÊ3~t.1YNo蔩-{z`"`ڪ؀9E/sV(%<;v I g9PنxON7wV1IV?8{h.Af>̷P! _'@ܔ\( jߩ^[v7L5e|>!M[Qy*Pj3]duSGё95(vJXirJ`*DdV,鍎&^wˑ gm~r3 ˉzfcmj][q1$O'!r^_#Vx{j uo&t%t9-<,̺L`{}$YBEwar1U9RyE_l%ھaiXm3|aw))Ov7[,*<+xcAg>fTX ϑ=7JGn^6IK8vJtGZ!EcbȈl.XC:X=+ գB06||jo"GՓXzS ')H{n_gYWdTi H('it6’LS&\DfJNF6aG T{݅6'ZVk5S?:bddbS)Xlm_SM:X쒦 K6)]ձ݅1cJ{zϸv@] 9tca=b. mU_빿;$H÷2X8)[Nc 8^uM ْChS"#)9 {8^ֱJ|v.=31Sr$'ާ\NO$s}/Mk%zVXT;6jS]](]7ܵm̀NO ]Mrt퓰Eڡ<5"|{wugzۃ1HHAsoPiJNbX_xD|~ 꺓]*bh՛9z&._!ΖF,40P.(y ֏TUz)y"d\Cr%'l/#1gF,~ye4˹<@Lx>ZmeRfgcİ:zb9e: 5;" H'g!()I!G׉ q%ISu-9NlW+ULTI9Ā6-6ȄUq1֤X㈁#`XG6K?_Hn0[DtWy!G'G EeBwC R} # ܏w&hSM**_s Wi탍Z\RX eq(HGjZ% }6.v>V|9OF2r>ZZW?Gi|ߊe-py͓Z 廬&=L銨<~j;*& $dF-gŮtf9 j/V(u F}&)\u p?eY0*'aeFV-J {Yfv\iÎ فcyUmsmplw{\@sJcUK"+>C@{{ a8uDfIkTNՊ%4bH2)MYe{ x$l[Z@yՒEh2_$ֳ*E%!^Ee8䔝ovϗ\9 7 ̥ kH]-k}`&GYA+i=sN|_LX^AJIiE 1(dr>4@U62kQii$vNٖ<lOeRIzG޴ZA~ԉT_XCxsdJyIi0V邫(e/# MBO4ZO~ɷͽ >]_Rm4o~hxz'R]?ڪ+n6f ޟգ.ѕ}tIǏU ϳi΅v%8섺7p*7y]Q&$f Cֳ.kcCf= ^9gށB̢o\s5m~Dwx N) ^d(jxVէ҉+V3NHDn7'Q{|jgQy`̑ 0,W)Sr0m`ט`ߗ!8| ƣCWȫv}~B}~F2GwQrr {gDQݣC {y"Pyi5+N?hWc+yk Wef5d`aC.ʵ.8~k!fbm6*&&Cߡ yp*H&@W QlHI^3өk\ ^ %9(NQP%\x )ZV/_(w}s*,Au3jhn-`N1*Nd/VnPG$ =|&"8bjH^NNH$EfW ٽ`nL޶$E<6/D?N:3`svخ+crgkӁC >3t4Bl*HBm"H.1PJx 5db SXc9R S<14aYN^Eĺ]UF=c\I}SCv_tLS;k}1wd hiFGQ6sfD]O{)F擄~ /?硡J.-A({X0Xo69d+qoC#$shU[~rfIg)LJu֔؇Kn/ 3r71P;DQз}qP?u}+CdE |Bi6`pb ?V-> q\qL;k} Nx&*yIWN0I89*F4%%tJjRj%.P8i8W<Ҫh0'Xn6^(e;;uQ5[jc>")&C@LY=UU !t0^b;ubFPrrv`WB[(> Hfk+%sf]))Y(͈ 6! 4֪~6[$%DtG!ha_Tʅ.dfY)ۿjjuc2y"JlY"XA3$׹Lc8R{ȶZj}|gEj2d!n|xr9R7< _&sLyG 2\,l`3+˳ko$1[9c-g uheT`ʂm" ]= *(( F\޷Pzuvry* q #^6~7 S:GbLBKtĩ r32I)mEw֒?P:ڜm>9{a_]p,_Y _xB>3)o\A8J A:KۚdI9X%%ur%]긹Q,0s{zV["c)d0N4WRo)ngb{@I|Ƨk{$N%Z9/6yP9>/)gP-yM ^]ok*#QqH}l|Uq8B }8GG,Ш݊&neg3J[l zRWS^8>3]QG9aJ=4oJyܐlHK1\q6C9V=u tdHů۝~^1'w 9 oA7sa\vo8v՜3?B|Ss?ô3Ǿd)3\ R+q?Rc(HVă$?<AbӬKˠ 41`|x\iz"e9BYXogDeث˲XuoSQ$37}ZoFJ {V&>|Ō6tb {l>zZEfw!x|]G3G)Ɉ'srOt(t ;$jy˫_dZaI^j6, &7J#{<0;o*T$ۖAzn/=(\tp{^!bJV 6W#~:Nj D'&<9w,I}OւZ/Fc s68~ְ4U'@~U&Zh*h_=N!%PQE 5k'YBVp2TqQM44Dm [|ŽoCVOp_ >v&fuhX>TUat D K,17N!n"&`81';nz2Pp=LYE&ɨ&2&o ]ɒ- @8,h^EKh%w m7dvv0ޙ|j"ցF@GD=kyұTpioE{j551su+/<㨻VIP dtȐ^fPsXلFs>~xZ7+ݖ:jx@(ZE5!d1=Qv˘JK炓/ZĢ9Ch8 }Ck,+1iy_e_>%]\e3oY@+k&"`AJG ^B21=7bͮ8 oɩKR<ᾃnH 0P ܙxa(MFwZK\M0 ӛe~t<rfʁ^Pd4#wV@ Z6,$vdx OUehWtr(wuH'TjAL&efKiq}4X\ZAoLT<-Pc'B[/ Cm( !ق̭08r >lP/ `ҧڄ09}$ﾉ| bffȟɪ+K'uMV( & nfK,W'޼  ui}A;*SĤ+/o h/28 #ZUua@PERQmߘ[zY")PvӋ*{#M-Kkouup@yEOe/jO)@'.lpXusn%]J;bطq/,U>;б|Ԭ#Me䋙a 1Ԃ: x{|Q}(v0n@yLoi!e~ *ucuNN%=Qg3"/*5祛NaޮT$zU&#o$m Cs6RJ?ݽ,+ilLSgHIsowpOUy-L`Gr̔y%,XsPwQyJ6$ҷx Zφ]X_GC $l?u9qB؛ "W=]4RE(YNɺ`B2:5P/v^ R'ܧX>,,S/} g_d+0b_ huy$K' {ay)(a1<m(ɟjE/7GWI.r+4Rn}O1KoOʆWRI^On-`َ{s@*+WĬ6S4USUZՂ_~jk2摑u^=* j?pV6 [ ug*_{ݓ<=_;ϜO(@ئ!*f 8 0yiW~5`Ɔx \1e|gcwLK~ uEgq^+;CW2SLO 9\v6ܛՋ|grƻD R3|vNIDOu 'K8Q"-6 Q o1(-|!0Y~j<>N< a)r~;#YC2es(3fP,m̎jj {ѝ`B]3!(U}!<׹14Aorv0x]= YYxWl6ۖ,"K&;svўFZ>+B%g N{B&[Ӭ5.c)g2F{wfdz)7 0*S.FyHH~<pfZL6/l5Kǣ6{+A+酏J q I{*(,]*"plE`A Jg,gNa?R 9#k 2UeJz384C"yR_Ѹ~%7&FVs_l4w6c4I=NRf"l {<OYVI;pJ}@2dt.r<+Bɇ6f),=2=O Tc=~ |+4Bn*[>j2Pts@SNqh/qcie%0勴P]KN<ŋ>#QdHo@ld8! Q~-;*ʗ fW[UdR6Х WB8 a- )}!ƺdWL"=8|:*d׷  F]-3>X EQԗgMq_3@}mmulJ2f Zӆ:t,rD?*D~\`la+|{CǿF 9{# T^h'ư,iR119|*I~9ts;0eN1p{ӄAI?X: jFkX-BàHx؇4f/Zy^Zy?:UnUX\߉̐"E+iږ~=bzpm닝yWӒԲ'eAmo:ͬ7,V31p?_S<7ہ;zk\n1D%%23H<{VSzT7`Q:Y^̩8-; g*KiY6voV]+C[X0wrWmfg3hm\uJplg.n07W]Иn?j q*vbs^P)c^ RX>Ԙf?dn뢠rZ@`w;I~W2< ![=jF.03#jOCd'@ έD%?} P/Z(tϓN* ,eid$UJ8PFIwCyyX .d2b5Y:ّo8p;i!G3/ȃH yO=K, Z{?I8ř Oa/w&:#!$jxvZĭ79Կ u.PƄj|[>n6SP vOsh(왝FSy~X EnG7L,AQZ"cԭ U>`Q[?rA̘(ehCȖK?,~ 1b<`FpcU4ng<nGN*L sT­G'l0i| }S;si..ξe;4ZZ<*|lμ߼yQBE>$:s89b:N79_"kf+CVa=NU+)C0)}ӯ:̍}zl"S֗jmT7OUP!\D 7_oi h3׹CX[D0IpZ%+xc,AlSGNh& 'u!󳇃}g\l0id*v0N;B;2~|7t@k'c`8D[J%E/1k6skqϮ!BcC v6+(MѼ ۟`\(U cOe WHp~*ك ?^ThqB?CCzɊXx x"}C=n+no.Bd>'C}8/nh[o7Z[Հڨ2"\@B yAmh|{Yr Ni%Pnn>h,/zD;bA-Gu\HU6 7򉹰zvJUt?0 H AzplsTj{B &tu,+RȂSZӴ%H½VzL־pxeJ9o90Z,݂ՒDzϱ8;/>ulAVfJɰ`fs}Ē!I< mCB֛1]p#*P5{{ef"V60,/Tk_*\_:J `Qe!/@=vXn&b5¿T(;i0S[}B25UЏ^z̻^Oo7WB,|fsy6h轙DCk$v@‘A8+X5!Z_6s нܹ̒ D afKbE1[!1&Q51{ЉXD,(s_HX7!⪑֡? eWo lȇ멨c!\)o a-@-4yG$6f 0#ēm \4"{wJs*烰U$>jCeb3Ձ8LRjtFAF`I#vQwL}oBQ< W; ntCE710ZUb79+ -3e Ynx7([KtFq3JIQ)K+u^g70Vm}aS[> yMH hZ:ڦb#oPdGY {h3'pS(.{dѥp_Vx1Z8"7+O(KhcR2y#N|7E?zP 3eǍCVj&VX-ݷ8X[Z~HpA TAdB_HOT.IU |>!ǫƣ YHTQ~v+SA9 'V_5i}>axs@ekՂ_jecLI :}t,|mSF,ŎdZz_1A4,p^1KRЕ\:s̘/m{^A#` (`'-쓗@r")ݦڨ0TOW67>^ֽ0P,uqhMRK^[ NuHLJI!ۄ|]^1ݨw=A+~$mEׅ+is>EFg}1A7H7mG&f2z,AOk|FK:l']?$+Ysu jweޜo@Mb/85AA7? mE]JyvrbW"f ­1MYS5Hx,F4X TGpnM+fɸ VC04΀KZ;iceOܽ.,},F : E<\4čOMYͰZ) T2g;r7ƵdDŽQj! z0D-@׎ Ivck 5sN%xVf؄fOur:(`/ [7e= (ԍ o/pVOMn#VS b銅im9=_sO8s~&m@7&s E=@+;+#?&L`ByF#, uac*N^Vf})-poW*OL:wGσTv\_]* ]CG,Z-(X;FyYڊ> eX+us]V:R\=^b='D+}#v՜Fo} dЖC{bֱ9KJ.>)$Wh:88睊NjOYmp~&_]dYq [b3_w"pcЇ2f0B2cA"%K!א̆܈T:iVB6<-uoRKe"GLr`U'il r^rP4v嗮5cz5KBGk1O_|"$άbٍ`dCMX"a c18QI+wD} Z?C.|/exCMw y2Xoc \hah\OEr]\0tp1Y l|Ј" }oBJz Iٚm.?[qw4 M+ o?\+g*KϊvQغk'&P3*Hw'&-j6HM#9Ũ ]D ӋZ 5VmJBX(do8"(qk[TYNjUGv2;}'+ / '3|ho-@1YC'NYG &pQ b@l!PQis$v=a y{25|ObkDx>QN| SͯA+XP}^K5 ʺJ(uQ47ADu>NZ+6n*p)^8bV _.ɕ3סqs/0QDxiؾj 3t5DvOSsz2ƣ}ҋۘyYh?3ɿ̙SiAVBI5fJ+"upb4f-n~Z6.Y}(0gi(9z9 FP^Z9U]kE.Se"D@r@i,to6#78=-+֐U:yT2'ꡭTSX4^ͧsEzOn ~[!@z\ eT~} Op1w[h\`41?W‘ NT4o[ b9 Ϯ"E >뗇 zb2[X*hk;8YT]?Y?q];/(mM@3%+8Tyȱe/>˾Eɾbc0K%2(ve)1{si6XC,rz),r ޾[ג׈WәHpyBZ68yDL(\eQz_"uB.o+ױƂC:ޅ#3Ff!r[H~E_v/p:wMc+ $$޿Oe?/pZ =Z=6Ssɧ1s>.R8fq5+tM0.5@r6t=¿& .ŘvxSyA?Rn*Iц*DDFolMaF< 8'Ypgof 0m^o\&6Wx7F f!{C*cuZ%`)vsA4#V~t,}Kb޺-xx^:fQ͜\yv/}QX_8REК;[7E}oeW_Wi=/>Y^$~.^֥T'jr+4qQ~ iȖmy^(v ʗX?Yϻ͠X&ńb3٠_z&T5qf|AN@`_2Il5O//p*eJpնMРTK3Bn2 @SRگ֊_\SuF=,6Z1|dcb7$'}܍qU--ݪEspglSYN\~4є^[7HP-*f4};}sj``yA:WTcSS 4]VC@YJceDc1a-|8>3܂H,%W=/Q/8:O7DibVS.b%+{ zVRq9ж t!Qml ,Hל/\$*}D qFΛ؀S1 E'm7 տF1qõH}Ňz)D%AN;dMJ &]+dPJ0]) "UC$I?=z>obp\B+mVi. ֞YעEztgn(DI ~y?2j9U(yh.}OԻG' DzF~%SEE}&Ì<3M E^ieEM&ZUs"5qO @&ЗE1!,6³`gixikMP'X~$KQh ^Nܜ0^Gב*_ty!J{U|k*ֈ[! '+(B Fz,ȳ.B>-v:թi!ȟL錅}X޺$;~~U_ɢ@ Z[K4ܶ|3:񰲡yfa`K/Y,1)!YlBHuӏ\5.n%f72 \>LnS΀6H \ ͇oOKt ^ڑk'zXHb_w›.AnibeDOb`@OHK=I`:&jcrX0 ZI%u:/%[0,wCBO;TY8~6x P.YEX'OZ<^7C1$y69"S%-5h[^53n]\zO lŵa9J+9 Nc3}ͅg%p5f8bS)oxBRz\FY6 |3}:Y(LBGWxE(yj;P K,8>:U~l;dvG\nѶ5v#! Ӡ;-u>je~I=(P";L`Gp =XlϋյHFGr!=Hݠ?]Fuk#yY Zru9C6E_Xȓ8/(VdJi`= [  ҳQʎX8Jbj&y | C,=I8{F ƭ fl s'b5)]J/AWZb\w1KiR:gF=vT`z8Ѵ]#C].4>=8ְ%c㪫Yи@Dc_ii?BhrUK=:W fsU'ۡIqh>4zijœo3k/ K GLҺ Nf )zᮙS1]ݎu@+9v~#,$/ӕ~UV4Vn)6{|ac{,<.kH$gtZrͽGR3[¸>?r_l~FOSklb DtO/up iK\u/uuf3KP_6zD`*xCb=ܛ;V;v;.\#,'CGP@QP/hفo(@0V=5 Cϖܤ,6JyKIv^6?$UY_\N[MxD?A\K1. Dmtw %W íOVD/~٧<ctSqVI,Yj_ .18w˒!!l|do50Yo[C~cr=i! H !9Vra|"g$z.'>NDף)6m[ Zl°`'ր|݅lpz k2܅n{Rs}@*P#MWrIx6cX%m0>t?pqYtBs'GHDзó~U$^Cn$d ձ  ,eI@ÀR2N܇xϩw(=^b?¾y\P3v\ hXr8.3p/;=82 S;T[OʺJu N]Sxܻh6yqQD8nnr}؁ T:BP5m/ҟsx=#W*yQGg=ye GA0[ T8ߨa9%S:3Ty?\-muXD8=8A9@mPp B! }%I(iXS%8_#HpEɷ*PH /U rp S)^tAC}*zR ?Wtgjтmʐe.3~e5Z׾B:g#3˔{ﶁx Tkel;#oA YJ># e}Pޣ!B60Ʈ3T ?Z(!.uhň#[W-4=^)$mW0[9;L8+"( ʫ-{ )2mRŊ,H/Q(4̉->CJLǏg^4ij0䧊Qr]3ï^u*h+c,v/(W j };Ks Y9BPch18ECQ@j3ЮXD}+Li1ֹBHyUUS흜ͭvYaⳭзO wؓ@ZS<(0& 6a-GFt"{97m Úp|@iBJFOzk+oPD>KάF`~޿ҧ ~Mj2Ӄinju( PI=61~l/&okŮ-͸h?tLj ]8?0}e~xDz~N)>oZNY%?ֹHqj~LՌGԥY,a;!Vϧ@B]C=^M`, ӤpqUj+Ȗ k U%dήyYbuZ`Swm/+G7 M| "X#$.[DhE$~sbQSHl6{DjANOLď fؗJgכKddd >l4{]NEUBebtk6匵xK\n 7ω+T!ߛw$R`4 xӌCg-UI'-Y+[J۫(J8RMW۞iE<+ `?tvܛx3^{"'`¤~n!6J]I N8`q' "pD()3p nn\ȾR`P=聛A<:Ғ;^Ej}) "&~n7q9R8-9,`? IR3Z:|SFU[Q*?>,W*p9zuz',P n'\N5_g,ԗ s&&Je|Ka/1j 7(i9B@n1p<ߝLc"nT̷Gp+}Nnc)~q;bH_[eJU @lVM2s cj;[9hH}MjL6go3|SERLE5=eժ+m&g,S6#rSVԫ?VZ:jY+}sCSDE 4[s$/-*M˪ykB\_mK̈˭x H-'^V' tm:q.aq\/TTg@];FO|D湤ݶLbīq|Dpͬ }O0/^SF>W+O2z[' dDMJS;i*ٹ%+3]ݻMf ®:4-f׶ESYY,i^AΟO;?]_e%P-Tt׼9bW C mp=P 9 +{14 r_I-qEEmjNx6]'&[ >'^* ڑ3ߞa3%L0ZسJ/ C3w=S.Ez[e_xO| Ԥ>D|QY0ssGDz&3ߑ?zqL!mMձxrw J{ u&Ao:U nr)6|5%F>1SwQžTK$W0U=ﰭat +N U:'j)kڱ8pOΕ9!'p7G\Pu.B{&Z%^w`.xIf<ϻ*<ҡ|f;DB X8YcY3/|$2HF:.WFeX*Z]\!kM ynr91dk~cO1ɾvO&RvC4Ɯ\Gd6Y5'-p ^_S oUnzd.v_w| Y_@zx֚q^a+5}Dֵ>*Pqjw/%[jFri$ Zܷn B]WZJj#e]z 1Mx!D.j@"`*E\}RP,k z)+]3.I`?ɁV[)\Qb=:c M:0۰qfY[?Vpm NZbsc7S$H Į2, Nq "T\y.nr ^0ϫ4}&[j$:+ki@vyq[fQs߄ҘPLX%We6Ĝ>;O / )62!>k[hPW[O Y@k?T`'ey evx #CnbtX~cg杗T=VB3"%~DUEC9HME 1Sچc]ls, t{vMlx2(|;7yO˰~x ٕ{#C5ȧI$7 >/':iִSz-5^Ӎ %BK*oN) 7.3\ʝ9#eN:%-xZDDLrA}Do w4$S`φ7Η 211ƿ ct)7A.j\D;T+f5s\E`׸`7NdǚSٳB?CP2s İ)F0D$E,߬@bY.`7zؓ^6 Fjp"'Uc__ 3xM6Zc.Ȱ5@p&xAemo'Jhĵ+lAg}׾nK%[r0:Y_>,3qp!mD+ipdﾢݓReӼ CwnWv4~e`|A4ڗӜXD\; >>3VFwH:4X9d`ݑ@T0%=![4$B#Nz/>ÎNL@D<.kڔ5LlVkońI|Nq^ūw ⮨ ;?&6PPқ <{ ?w/Y{oEd?$?WuEO:""HY *2O "5 q b}=gV7 PHSQlfm11LaXԄ1<0TyD_YID|MY٠-pD齣&ʟÂBY7bL x!#mJd +gɠx3j Z#m/#2On躢˽ {yFY-%Ye~ͽ֣ECc? GgЛJ1AP&9僐X(aҨdau-87H_MmX'/q?UOLpt y=}yUSuwFԿ'da>\giP ZXHN $AƹWb%E0 `۟j+pL0(FD>(]}Dts[(v9E`m'><LجcW`*8]˫^UctVEsZWktp5oM]ۡ~$;n"<F5ׅJ-%9Mkm ÉٿǴ[N ˫E񻴑 Pdp'1dc!)˂t_SʸkfjvKS beM쨿pz4C{U F(:haS7qV cor =$:eH&U^M`C^]@LMKK;͎-Q3?ŒwɄ4VVgў5NdrUǏ/?l%=\4g"RsP<<%onMu]Cfsq828|Ѕvی/ߥK#1at:#wOG3c#diDܷF+7EwZ8[4 C_,Lnl>OD<{Nt(YsV%NE\q6cH}}ٗӬaL4e(n",1J9\IhoP/x|@"LX,X:ϝFUdgN@;@8Ji\y-֬;^k@>ղ7]a;?SE:7X?ܕ7dxMTtl8F%7vz4ޱT÷D "jsC3Rnd k47BB({51QxT0UYn'wFc *2\PBy)#a+e2ߦ9'Q7Q6;;"v6j"!c]% < vD1LNaCLqpS (P4Yu[,pdyrx6e܏ db?Hk 2'=0 oLDzaO4 YmaenYf/p)8y&F 蠠qw&2xkrP HpHu4&Ćb߀La Ry*j27Ga+\CaaYJ]bYܓLs8z$z zWF}RqØ!SI,QèʼFfz'r ԇ<_71dJLoOaeޝ7qe?qW =9ă-G//T̠rT*Ƙ6DJП[+ PϨ^D|RnqB<UCq\ |F 06%OHZ94ŝ) n3ݏ-|jI|:n(R(sm)KJ D ېi/؇3^CV* PwSW ;?~^~ -I{)p \r{.ا罅NLv0x, HCfeUcڹM0 ؛le?L=pjxdTQd|.;;9n}%sr'Ā;荵C@1ֽq-Zm~`2Y ڢz@ ϼ)9 $ c1z'`_2ݴέZ|GQ/o >6lRݙLg9;}EOƋ >Ga(?-@ jMdIG'Hg|aX{mx>2!t!5 !f-[H&FkǝR6ˠ!Ȁbq I.vԄE!w6#3̯NVFwV^TWSrMÉ=6w5uD c{WL{ԖYCo'9Y ɴ'kHq8<9;l|@;fHwb%#YOr c\'a'I\$E_,Bh >fI 2OG£ъ3siw !0, Tɨ;4@+Ŵ93/u# U\x| %"؛ 炅8^U]js 2^م}fsH9OT+\%zXWU;'q¸)PPAPæaZ:^DonHqdB/e(VK2r"ٱS|yoPv{(a^q\J!'%DKQD])`uN_2J@?u烚bDcFs<1S6X ~#NЯJ_גy 8,Ph &)1.y-i*1lm_hkۑ׃aaaRg%! ꉋ~٣k h}Jo#`"O:䄦JI:6CÎ[ 8󠗱M aPYrz& z$6&?-UrZj ^-9wwfu{ ֫ B~-#88. qֲâ$/sBu[û݋v}t8 |AӴ-@ +`Q*n_*V;DW0vܦeML+soRHɚG_ebc׌vsvr-`4H hZ1SĆ&MtG5sLƕTmQ<K3nFA0c JF􆺸w+;+(NF4-frYbo2W֛ >Ǒaa.DW[vĤ91̋LiW>YUŒ1kqsػW6DܰGH2K''2yQXimM0,^Hz:rsހjHVqмI(c@ 褻؇ēlIJuTBQ+K[G!gUWi~}l_ogvJA4FL#qqdsv4_`y AiClԊjp;Nŵ݁.NRzP\4 ]O "~L|޺-6ap8՟]bĒ|i?u{RG m\G^/!8eYZQχE?8 HΆr޴N8c=bX'5i%>aaR.yS{LL%&> :?v>‡d&K]t`s"Yև!*͓V7P \, TÜ}h3ˮ ?~`3OQp!]MʲDZdym@E\0b̠-f4uDݹQ)*ND\adu, {t{K[RDh΀wʆ4<|@X 6JCZiB(6OgJr/P%PigRJ_{W"g2RIrռȢO$sB/9ݴ5Iu;iMjdX[}MxM%dR!JR5X*|pr H1U2ujx:04HCp$q%5B +`:R7jz٣ʆE#ChJ/Twnkmg0wEr<'ċ"- BӜ7s(sfҪ`@FLϦD &,6'šed?yd0eLs@Mη/*0:0 uI1/stTN`ETaNu}5tiXb Ҍ@r?,-,:h9P%|=s͜7΋/bpdE1z\-*y}Zq;HQOXjs©cT޽e&e /rH.WԓGIE@LiZ#F㚿b>+m8-?Kd%g!\*Վ+csC_3j`XnR,@Nb5R] %Vp@(v6_zT.CcxŠ0 x2dY~hr?LƖpؔo%u,q :vy^ezbRsGvTS)Pg7l8EƗY=NXU~gW0)^l]}k,S^gUnL\y+ٚGa7}Jf!0n$S~$K%;X\^8l7VAeVHAG?jmxahʌ,jYT57CPjVi}lwTM ӍiGM]8WH#YEUt)ƟX3lcop'`NXPBUrJ͖GYU1վQ!& [+}^j_C y!_ΊaYY0+mT=Ń1^z^@e#ժFFj!8&_71Z) 0k'G1w3A ܔ:LkG,uph08ilRSlU[7`r~ۦ:}G`t˺2}!A! Ӏ-oŷIA}}Z0GsQClVS'WKށ%dX]%wl'ˣ⮴$;F[Ke%qi̛%n̕%Ƀ˛˰By+0i:s쳎-Ѳ"WNwWqʠ޿8^ Xڂ`|3(?C[},Pğ~6Np?RK3299@iN*>P"+PMx*\%f# +Lj/xLF fGvF/L;4'w'?t!}k0ÍAum4hn< ?6 G[?+MƽFx >T%T9"e|T1 -_ Y+[㥧s-Ab\9&޸@m`\;& xz3ߧ-/%7n}v1끙43AG2I<ɤ\EWmVX`A[4@tFԝTߨ3lx@-~Ww=PP(oPVO܉J?a(;8A=9~b% `'*>Y1N? FC2NuĴFnpFeR`t?a,._ 'E:qFJF !dY'su=і,-Pt60U6= $_Wĝ ȩh> w Z]]ox`E\v9eF6+̆(%)eN38[[o! I{©Yt=u x<<adWIh嚨OWE8͒* oM-8Jm=" !p^wouM5J4s)MKgwv];B.D ĕAJa@K=8|2+aU׀UA}ZH+M F_/tЃjlM-t)斦RZMٙH3RsIЎ0csD>d4'چX Ra1njdNp^@j ' lb"dF"eV qyݻM"H ,ImpBhL#/qai*Q3#/RjYtDMދ~hv sG7c(ZA!C|$٬v\ǣ)G;W zO5 Iue~AXI-dZH "ۈnq~ _5k!c/=X$~W,W҄h·͌mq 6[vEl;jSHl^t$j ja׸jW@﯌7E_]bÕ(ݍUglFZvIYT=4ZWb;t&^ÿv":a#k|DBVd}ל!uUcƬYGb8ɖ4JɆ7{cYjB>Hyο& FiH>UԨ|}p3M mPOf 7H%&@QQBIx.D4@Ȳ;P;\E0.ˏa,Ȟދ✈-:O_]?N-ՎE0zWTQ(oXwZo,Ӆx~:\*Un٪2[+ ~L -O \aYGO 0>#D|`}C"ZV/uPUTCٕDAU%DIXDNsێ\v?T$d+6F'&W Ǐ_uvJ{dCӓTGuL=auR2wQ{Q4Nu8r2hѝps2pr;ʴdw%PRHXn`G%O^jDrGu,13,L~;}58}T*]cBJZzdqSM/uA4R *=(̏"Uw6 |:aVI[&E0TpmxKFl~ժ;{Go.`^4QF51oz$itf'^CM81B33>V*6 ܞ3B<+ ?;Ӯ+|sv'=F~zgb$1R F>pDE/:?J5t"ۧ :u}0Ube3_v(֫ZqAOٲkiՎߒF7<&D읋-e7?2$T-ۆUhH\lhb,ip/SN߮+ ,'1ni'Rn:~s&(nXۯOo!_va)uRb%fmaxr?THKAMh4 CE95?PI܃9w+gߙC}-VC6rkkGʚ1'qwdNt ǦU''ДXEmgQx\ "ޱ'}_-  U@n]07hSߟ9&P@x.a虏x MSy/7"!ķKXW9O^=퐉/5.N:SSk$-lq3Oњf-ϥεdIQ?q} ~pS%7:7|+j>?(?YGzW\VBM/ߡrM,^st4FS[!\I}&1gэe(U:_rJ> Wt0i>Igv;/50)tHh}fձ }OtYDS HơJm ׬v܌%Os}.N@q5̈́iGٱ, n<*?M* .eH+։&Kn$N\ϑ*!#&u )qe_UnMOM|< !8,AO*6z럕z5OzF?m83yGDa-]&5 _>%~& dGW&7Bte h 3t3;kH )E&wN:XeI33@ɐ(#i2I]k]|kg˔u$7v1<>!]䨍j'Sn$kv׎(z>I%vͫ֊@cQ0עqmabs?+~;Xj_##vSس|{;-iReYC{䃱%tc4d0A?'^ʻf}`D0)b:5w|4D Y~ՙ+=|#uיxoֵzi-Ԏb厤r0{6HіT(o1.O6dy.њx_5 ʮ!lߢo +CsH{qdت4]]j`T/G ֨-2 }0xتdq‚[5Q,+ya%p.,Kxn&;6% m>{Ҕ6OxPwpGНS9אbyJPO +-ILQrM X'SZ,l Iҙeas~`B8LCvh{Ls0.UԜvGo;v +u󞂄S1ʚ F ` ISknI#⿙Z-,E ,m0۩=Y aEmErxzVÙ< Fs$PYJ ]0' j|_l$׊.~jZF?;3APrFֳ`e5>#i$],5k.^oJ2#¾IOcdc"{9Ѡh#SփZ056:Ƃ&#GÐ!Cm9y x ݸ%ĶeIxe'>~? MD^! I_1lU}#B8hμĉi7A"l6Bؖ?U0HWBVZ=.0&|b&*\=2\^@x|Zڻ8n2N IPߌ<&5R%^xH )YF1 wetuk)gO}̨ϷxPxLVG JN@m>13mŦc %vZ-pDtJU Z_?&a[m_6Nmvn 2H7iză?_9Qg]AjGm]m"ӖM)G~~*wz3iNj _nL"u)Nu&X3dY'›8qo"EXd[%UxBBZev2~>e2v)6`Mf5AՃ|0k9Cg40XmWxحvR~)!1SarE9JX/#Bz _f{xo&}T? z$~^wVvx6(EP%75kXngQ,"(:7<`+OiKXOwiiv8΂EX%BR6oJnwE|LB{|r mfI\V٠W(&-XJ&hf_2=OM^qiEq6f {oaNS$-'v{r=DB} vKtZ*ޕw?uf^ A56=rF̋/lu3c `OD͘)8gbDd\pX_-Y`Ԗ:וѩq~U"2Nm.Loc¨yslD[|4eҲds>^8TpT—ubd8檀ὶj*9k`v{2<eЌ?^QKp˥rdbjznl~gќX50x,B+Pe֦Y>qzqUu[8?tOTQJ ׷1$@KŸ;R!*UQ9Sʪi=/ sr ~+qJzn!`ܢT18!Ah[M,Q$Ã} r|=j[-3?*hדܛ\~}h+jwԂ|Sނ;ʁ Wy?thiDMATv0?[-|#֯Z͚zǝGZPq_o:# /GM3gFG0KOCu4,GB 0٧ƕmZc8HBo+ ˼EvΪ~~ФL=Q,ZL2Yf  ph3 P2ų'1:aҿW,X%Q|4NJUn. DwMe#^?L:c. (N^HSD"peh YTfBU1p1\*7C8+~eQ#D ې(3w0}T$egv!94kF4EN<"z8@SOT c9:bBEKg:XwX_|WxdV!u:*v 1kEsF hv_tǣ!sv F^"BR.eB jH.h(GC2[H\B:J)jsfݽ$i*Z Ni=%heGX}79YpT"0Qð:(z#x=Am_$GNk)mdR88?gY4=S3p4-9vQdlS,n~4jS/6b0}1+}sm@\6xDff.KGi 9X"(t+UE~^퇋/zw'AamM1 <[35bۃr~y(O=4ReG>"yPZOp@Ki6gTW%ivL&Ѻes|E1?4[§-A#3=sX!ZDCJv%#ϝhqR8Bb2q (ďl4D4U ippdFr[t顣5@+r5ɪ}+AQA)ԓ_3e?:Ӄ2\'f. /co $՟؞9IJ@CQj8cB&EJx4PiwV!ma"ulj1Әqcl1x R 4*xx֤&ցָ 42&-gө3޷wp޴.e,6^FvH~>+BUlxbg*Ȍggps諕BQ`-Fpl A]+29;$j ,zs,}f!5Ol-%nEebwz )va#|Ki#zGrrۑqңT|W|+3l|S}"Õ5Hυ)ޏKK־C,pw [ĵ{"څ劺ˆtũou7:)L->3iȘn,0loSU7W5 bXwm9 $.'0doxpދ*jAJԛ; \9H73$0~j({ОAմñ ?& r%٤ueX!f_SCĹ._3{}@\X` #+;B$LY7:wÿrFI;8)ķK6*ucg#E.WY8\ZeD.tSb5 ЅSw8;sTMb:LϜ[i1p, >FFE|0H.F@h lB1mA?Tk8ڌs(K]t{@b^^-$.K} l{vMI @? 1uIyDmi(!B+0L5/\5!HURv}$dUN>6ykGVߣJ qD[- t'sĬPqޛD_jf Pc7*t,B$YbqVF2(m?!B\WP (Oj?)exOXyxSrt_'.uiy%/fu)D ~}&㎑e.,$b^q+U=W3hy,hl2{WuڤOy/ ]!KKA+ȇy̭`Wdٖلe*K ,5)jWi^'r i_#U$ McQl2AF.Bm@9PX]kaz1WF 9WvXo!5f;z'0/ު- \FXJGp'm.MHz;ljuRV)2I x7\Pjs}Ӯ}l%o쌁@5䯗& d}'g/v(4J.ϨR?>vFmش~K -SkI1B̶|wqn,zzv<dh UlLpu7= JxqpeQzdv'2fXaa80(qw y!Tݗ䢟LR3YwG+W1agh>|C.s^s3pxNȚ2R]e>2I48+w/^Ax#l7~ Z..)su+-̦e."g6,'+- )ٳSZ9JM2CXqǴLQBք.,`Yu]:P]~ڎKzS9w+]"`hw%w'Hd^UmGQ*ETZ O=sJ]9/'Jƅ1lKs}1\<.Z@~`Q0-R玪ȡ LҺ LvVxPe5޴~]wӃ g6}w^e{&oؗZQeu(-kYwx/(YiI ̤d˖NXty%6aaf qEF_ruh-^ ɢpMdjE;ŠPP`)N> q)$ )i՚ƽjT 8'7'ֆ`ӑh3⿩)?ܠOI7`4ar!LcdFiA٥wq`d)2ym{jqLif,OA;6WF*WN}JW'$"T np׻T `R1dQl?('ɬhTƚ]i;Y4x v2@1-7~m3S(?z'r[7B_G=hW7쟣 } 4I6Ӧe{ByYB[ǬNJpts 6T\sU`}9der(4㊶@kʙN{-M\H `H?ͨ&X4 YmOd4rEbYg89N>%NkWYU׏)Gi1 Z,<&-_qM H)L⁥a7&fԥ,+ [ >w(V?c0$AℎA+1 VHNۈDg!=u:taoo(g+jn{Gcl6d(R_ S2d5}Yd|v#b@R'T/!2 j(2_l]"SR7 !M=cң`$;4, F {?:^ݠH1EKl|06[ {睒~Re@rF]*,3'=Ow ɕ AF̏@]w! #¶wy׬s~c11ʍ8B* xk8G4mfnXyVQz/[쒶Dݲ?뜑]lQͰTêޓ>c$AΡXFlǜh`Sʹy3q$MHo ͞cAؚgv2h2Bh+v ߰'aL>tIi r?.;]~`~kz%~2X~W4;X 'jӺbxfH=4~U"ǽ"XkIe\0"C n:lk)hs --^4fsV{M環811[7R'HNsmў/fm]` .L]4fu_Bg׸CL2qqM)0zq10;iǁ_>84Q(((%آ<.xa\EU:q@x7|=.Rjn@:hA%&ke|du}_4Ӽwa 90}h^xd3cE ߉9jeH͓VR79O+ʵ0;C7*y'<@ Z̮3V"ޥ&%%w3G,</tXfShxn) 0&D3džoݒeP/LCd{Z_R}G_!5K"WM0U{K^sW(sמ p:"YaJ/BsL8[Lga( lyEDpӳYfu4Fp.zp< jZO؁Q'Q8'ΑģWiTrVYIswY:R M$lC-.68{mh^A/ew/ENQ 2RώN \ y^ŻJglu9գ]ñ]Uλ'CS5Vn{c8 3e3}H]` 7 :%mb0ܼ* az$g[:4m8q`)L_Jmgt! =[7d)wbiİu҉uF 9N24峄 ZY N\1oʺB-++|c}e-^l418xwR=^5b86ߝasܤߞE M,L[!/XG?dԯo.a/NUg>RLEv+1ѸJjOV  2ް. ٧lP vA\ʳn֬zWp>ǭP|h=Ƚ|2tLۊ|*/cwWs)GgvSnafS@`)MF+(% @\gD1.XiD*n4BSfv%gYx@M=äDT)0u! *j-Yc;Uā|udNhaxT /\7(K0;C$g4eClL\ xHNo.,R hv/ݟ^t?d/3EB 3R6E_UY|!!k #f~H)\;2_V (E5 BS׈N5-}8IXPI/¤B~-ı_S]N 0chJB9xoc;I/w ڕTdiPY9'KE]`uV"%J:r #t ?h`y &zC,<,ڜ1{{>喼ޗ&-sUo5\+ȨO\rETbhm0#"`IxaT2` A͇ Be2ðٙyuM&e\fT~$o񵇚@APMV ɴ+2_Of2Zq;r. Ck$kv!]~ėePO1/mÊyؕr=Ʀ)1?t DnLm ""WYEqy ,пy^&?'~}qeq*p-#6QpPsX=Pu@=)vYt2M³X6R9wfuuękp7ghJɉD{3,:5aõ]nJ7| Iw0(cYRF 8uد/Ёmx GN_ }^ <>g&K1Q8P|[12*\L(>GTBֶٱIҮ =X~u1.+zxÑLĺ, xk١V݃D@|_9ZΏh{*sk %8QZatgsXn\ȊtNy@4(+cD)i;i웾)ЃÏ.f7@ ;WYqUl!cBRCTy&HT 31C޻L[ Y6˞rk0ߑuMk>NN}7K;J! ѩi<|w֒0̔t0=0㈢ֆaYyaڈ(+ ZqHD?MmK]KsO x#Map9=^'Iچƽ(1{"Wg3UR0M nK( :6o|٥9LT]JWfqmNr/GrC MԉՇߧo"S>\Jz}xR] V@jŸ%u:gHI\L qn]#7%+NdHopk;Ы`0!̝pTlr_+@TTjo9ՕIO G7Y4+jrg[N3?Or]ȴCuJA<qsbcXGSP $a8y&l i>[lL8pn CUc皫4΀X u] ~VV=[쏌G,?[݆>'Ε\ y-^~smSѱ߄L?2Q݆jU8ֈP2}}U(LvQ iz!0 Cv+EKIЕۺ^%ͷP7:!T|5:QGUij/ A+jyT>y[[B1̹1KCxDe@xyK40`!A54lwy KZ>ԛ?!3j$e'ٳVJxk- ACF\3:V~p}{Msԩ_Gd4Ƃf(БV b#]lF1`=EmMcvYbCekMBۂ& q pcw ?OtH_r!  M&pI~b~M,>.Nk+ N !,x)Gh<{gm y hlg\3j]e2qP u1`Fc".7) )SR1Xa)5>F[xcpp7@hR{#קöog=wt*"Yo"I/V8;3١)oH] >1*X!|#/ ׬mһMB- #qE2Er+^FCI{EU6LG!NU7[Ry'fdNM֦D[]d'N6=R8֣~d+Wn2[pr"Tdm|ي0o3'<_v"o'VaXݔրnIPsM,;WL`V*EV;eL/ cJѫ@zhcȯepxe#N{154MeGO+UkLoќ/^Ġ?4~rrejӭ(?ӱRQgwƏk>%h r2sxը0A$TKPJ}ӲsN攣T'kM8{9ä4ZDZ;}E[,\)`V6SmǒXv>j%ɱ/Y^Fit?yVi10Z$겠BG~5l2/& XiHC)ɥ+$z90mf%fQcK-IU0iEh%#=&EN_WRn x!Fo4-}-y \Ӣ3uM6ݓ2˷?URp{6䤈u'ݍnf/^_CDew" 582F):0 $iLs0H2@n͚Sfb `7;q5 Dg_h<+'JE <øcwУm֢ 4O0J!RC+Dk~Kb͗/Ƀq5-Vqc5t*hJE@q5sCUύ@Gy7ڋs,-؇\2>BR%{.yv -fҋU ɱcׯ/dão10b,q[ 4~ E6{y94+=fZ:{_5ǩCog򐜬Ny>qyZf=elvuyjfY-qP :&L}dri#)EKSc?o^ULvSr@fťZ~}e:-ϛz6Z1D:IeyQw9}N&3f djBo"%f*1%gv'ݐLr~xg۾JVt-D܄<٤;WOcxd)Z?SiձE'B  A<ċb+|tk-Xra}#,%*f߇"9qҤ=]>Γ ggW.ntkA?\/8FL 9uYc;E 7#Vߦhsݫp[ⅶeL!?C&)/5F #- +*IvFʣBebՃ#COk78 f{/ 勳nإ̕󛷚43{Cq(~v0nMJn׸]R;R54 i*m'ja?(梫@iLXVMFӑW |WMBAVYVocRs鼺4o 4[{hggӨE wBlzm } 6:DL=;Evo|"=+;. @"5Ʉ3ew!X3&S1WjV&q':ӳ iБ "~2d{ WQ,?HmDMϧ=}bQn $ ȴ>~FD BHpS) T= n#쯉6G]aff"X# C]"4 [>և92^?m෵pK"GMm//Ehlh&&6fjt=30gj ۚ!S| ɟݷ;n*oGs}|s_xYR[3J_}-lb9~`@(NvLթ_8[\dkBբ1Y\<th}'v*2Wb rXx^t4y UFLf_7{˴x1kA }J;?*46p놸 dBjv=Ќ4r̍NZ^Mߏ*' `]!҉rfK/ZĝI !Γ0(1,1z'V/Ֆ5^Ƕ49Vѯ D)JBUv )gJ@5^*T=63u&{6!oU.t,f>qΛ:=$sPf M$0| fc"h Y N4Q@lJ<,% I~X?œ@>3ar7)O\C:ff8̙(+V<蔒U\8S,Wl/40K piMASUH՟J\M'd3nlL$j+X5b|_`OR:9aZNj,[TnM%7YP_ћI56\Ug"eGzzђeWPA8ԡ hL#6+1=|0&!=>~2c@ɰXW U41Og7X= :LD_GϣL^ebbݪLJ7C5mT4p^by kp?k!?㷌.pg*ndTH|IbA͎RRIYDXҴcTjxyҹϙr~ nsf Y*1ε$KWYa{(u1׉\P-k m?ʟ/~| uc(# 6V`R$Drm8ep1~Ƕ]HMΧ%4fSNu{ը#O(L4Jձd9{Sܠ -.DEχBF$&dV7uޖ<9/`4){N}+-j8`ezbr޿ GBe L'z;-/!ĺ1neiDS*J'~^'Qၪ_+! ōr<ۢknʥ& eSJI0xE ضSfdaNtd:Φx\?xi.-XU \{p\AG?NU2Yk+g-IEc)z÷Iu ; Z@jaH)?8 pLo;$2Ǹh2{ Wt96_]w@4Nluؤ=`5Z^CO}u rz0_fK4oC O;pP+ʽNH}L?0E݆4BgG0k? &oS\NV(Tm)۪YF)Ȓw.ONoI3=3]n 'X@S^<;pW7rN,eF ݾ*!I} "F8;ʳJC&'x%xJk.&xM 917QHJhZ|FbJ8j[J0Tcq4hG"xUgnj3rL: @V;7Pw G,6yzyshV6NĚLxeAlxd&Ycg;l (ְyd=eA5X/I*zI-vDx4;9Rߖ(\wTUKH_?2X+j JKS1Oz> =dŕ$\IU\`a!%̆_F+EE[YGLt}ˠh_qq 2&'2oM[kmhepʟk{ ztizMJB`őWa4w= &Zf:lDߦ"%vH&4pcZ7] >ݨ$ {/ʏPhۨ61 U5R&Wnjw&E&9-˕ItWB˃ո+ٲ$=DN|2BkBMeV/7dH2厕Po7:-`jQ4 IWWTPJַkֆM&)xt%oniz..珏2zVg7ZwΠ`o8wД N0oOC+uHZ(ECcͼK|!;Na&+_,%껁W:M"CnQ"EmJ-|_!bƙ>dg^|.Y"؋xpu? .5iw9O_!{|c< P78"9445l?&̬}LO;'3&!Jy L*cV Cɶ3c ,[R~&lhhĭRFf5*g~9 S u2}#^t ;s-Ƚޮe#設5.?hq_dBSc;8e-jLc5EjI2NkP>ý xjJtMV>1/T_*<,qMaҡ?OY@+s;H?vȎ BgQ!D'TlQjRŬ"pGwQk6vNOfђz"\v5y@NPí-hJBj=Jćb6~QP^@Uuݞ*뫽2MI[]kmx$u8@rȎ`FCSqR ő"\ y1(Z|1!˯qaUN[]/ܘϔ;^Ƕx7ͺJ~^yE-gsyvN2$:̲UweP<cv--s z}t%ms#8a(.x%C:dp-gcǃ.YӝI:}}t}ZӷI[>]~n_cF&nz<@.a[*Bn_+6YnR ՌVnIo]5 A{qjْMOEcņ=s`Mr5FQڛk?K x_Je$ N{2=ePΆy~M[Bgh,<>c4<@PzCԟP.W=VI Y>왤iDF䅣iU> 1 p ^o׊f&]Zk&Rc-AΠ${0 uuW|/ xI[KD:y@+zS'7轰]iZlM權?2oa/*M< t0v]˄:|yMgZ|V dV  7Aܒ1kߕ]UdKyB6WjZ *QWY03B&O#vcynɲW/$qwh~lk+ƴhM/9G:_1i˲Lh_BBH_Rf\>X>uV Wp3Ѽԁި UoJ Qz})}zJM SApqt\GKۄ3# {me/ ӎr$h qIcpN(1{AS'n^\*Kд/,nmcP Sk֓u6.!w%p|id"q,^D7Ljf11좜[_.B :e0M>u9:_C}ʏ#@@uđ>D`ĝr{dwDyJga9K`GTxI3Vhe=".H.ņ"̏T<.eG W2Ƞ5g].^|TO^r\Po,#>xg \'}Q?ϺJ'"@O~ۚc|qJZ!Z瀕Q56߀тi&ẇ)SJg5wfe|9ȢVHo"qo_6;0"@TbsKZJ*{G^;[zߪ6XST4T 05{f_$ˠ&H^7Ihc['1vqR(&?Rbd ??n$PYsobVr2@Aymh=.&ocΜ/ [[j*`ᰴۚO:Hraͫ"LEl,ߙ9g@&w웵_,oE0wU捎aMőxX73ؔkHq똱.~zMDh|tQ|?3*Di.?H,if?l\ Yw15sH?xpy̳ }_{Z!_T#$$kƬ?µ:] iIqm"ѻhv A!R:{ۨD9ƪ]㍠,Z=j )olosZ-׳%Gi)zoX{%)|0OIdE/[;_y?G\'giz=+0$#6+nZUB3z@ 9syWh2J:% ZǨP-PP᣾ (,{0@A~#AK}EfP)‚p[g)o_-2X#@`}r͚<ޟO-] Is N=BY/訝ӹmhATp"y^(Žڂfp. io3t6ܡ,c?^.\傝] BE\S6Oak{**Jph_UG({2`H`uF*#O1Aq ӣlk}F"ҒR[˳]+296&פQ)BVƳ ,0*aܪEz.~vAÊ-V1#% Y}f2-|GE$#Tՠ-ۊʫEDjh%bpʨ_idc!SJTo歱Nme)-DzFU(6|VHq_X`N-abı]@zr"1&,ǁ!ߢx<++EO#+Z-4#?}ըan^݀Ev4L>*B¶s㻨PMzS1_ψa{YсNzߠg#W=ގS03~pp085Ez!G[`6W_Tsuؼ=S5ԿxTPh'Na)EQ8*P-;Iw$}J!T\ I Ltr--I]%!1 x J&@3y"f~ AWl<܅?:e52R4Nꪃߓ˹2J̝dv"Г:& O 4D ]z4H} 7i#9=QLBhQ!>`Y{?̙*kǴB">˖fs9w|X;1z'cj<_Vb?w;S㒣s :K+(1jshKyP@с HɈqS;L% ]û/snbH%I HM9 G|?e wiķ_`99^=]7XߕJśg0t\s #&k#Ĉאj/Ҕ,B|(DWLԞ?hx^)+4*%b+7@M{ ury im"~@(JF>V kG5o( RUke=<%.qUf+cNz'0GÀ$I+U5|ܠtк2*TҟA[5|0FH䪟E. l iLp2+MB~)Hgs#dʮ`9dT؅-GµǶu Qes {tWy]Vh(6ؖ;}D؂3#lҥ绊ң-]>`On))/Ƶ/Ҭ0 g;åR :Bͭy"cYe^yЮ΅nP֣ U-^FB۱Pf+d~w~K 2vz8p l[QUQi˽ o K'1cK =ْ4~DgЉ~H!JV:FgC4mL/sqrRBҪ26'P{R>b< TB9"0_6i0 ;)V#z^Ҝ̑܄E uxyqR: oC'U{*=ھԭOCFq)`U8@[˄I{׮M%V Hr*A&Ci a?OQ)kM5Ή[Hxb82m˜bScx@qN9 ydo]dN(rigWvv$_`ҿ~ǔcK'$anpén[*Ɣ-(Ȅy*I,ʘ#o.hl V†9`HѢᮻ3].HzL΃.@\LE5*M=hl-T^+wN&E>gh o9k nO4>a?)%fEvW[洆 =0 .T9B@A&:^sB/ȒYe(u؜!5b̘./7d~M٩a3voGC?=}b^z[r#,bПn_OuOZoK]NS"bbep W z/X u_կPNxmFvZd68˷޳"gmx!2cʽirP.)u/3_òeBՠ***HkjG!3fdۅfQjr$ĆY߭/?iƁ`t{ @4PΘlĺ)i^[N)\-F۷]2ixE[Ar?޺TESo)\*eLGfc߈'gzu::y^qCDo?jjs\ 9-RҤ{2Sv> -BX,_~~YQOxy pVXÌ߈D@ LH@"hy2<ЈØ|w!r ދؐyzB)`(w D tM`5"2\#${洙s/ϝ.x9,%7u *_PGNJ{joL5.C3&Z߀@)}:zҵ/<!-L= Je"[}KditFҪs|u΅gcљg!-ܳS :D{bDzo~J`MI9$\AW{&}{FQ̦OS'0&(( Q;6uHl X$zN xŸݛOEnEZ8[N.PwP1k> ߢIy@f&"N3U(Kñ]Vԁ)|ugdh!'0 );0R vKKS98l< 9՗KyIw݈!3-Qk7"ɻ:ln:/^t)*u T4y]FCM'm+z^:  o!b&K<8 l $sf/,אn/x ,gjKΑ(0fL"ߏT?iMa?Q;#7 e4^&qdG-_ շ `}_pp< ;+NݛX-xP:ǒ2?^}e(|9K2cR~5w9Nsݧ}ۻ8܁>@,yT! .<v%<& \}$Sl\Y`m4g`X"_[%)lr)+QWG[} ^{4Z9#!kQ/Uc)z,fۏ.^/JZ>]ȹ3gF}|&Uam3}teAN` cGTf kމO.>{ S~yv2[~eYX N1 5gVZmB>V2SgwX g\$Бw֐+"Ged΍ N1]X9ۀb1f7xۦ`&Q9pjWGX2n5*&vsܳ/Op|,tlsj8 *K^3<]ߠh;bopK]i.tl7ދhG9x,m/iliF6g @m-m] GM.6`GWL4UOmЀ#*1LT9 a|Aj`fbs 1/&7Fm^`v}V3Kvz^}%9:9pslAlMtQaU-o~}KZ~T5I;=/7VLV(IdĂy zbI ܥi3׺Vg{EoQ_n>xJ6%//sI).0f+撝$rcܵsEOP~wcQV"ҩP>{t+kr?՘Гn J|]ovƣ6)8NjlS91eoʮhQ ӇiA0WHew iM(_85.lR1֘AlS4a;`PgzO`O=ǎ_y%5~)X#ٲ?orNIv/39}kHn!Vq4m srq[=d`В~a\ܜ̌IYݾ蚚`fXR{QBuFj*+ɅBPcfF~Ndv8ÅWTn Ė$8./yٌ{m/US?ڸ_XPtv8M5A֠X$ ǒJQL:gYhYm]`h$="'rMrM_çG C?S iwr+JnQ_d~aobh+y9MD$n"nX"x5YJǿ]9 JNPCOQ@{m0MMfK98J3|I1suġ[!/_hGVrE%a'Ω8ze A`\Iox0)#Rfh&]He meaPd'ffBtEƮ=@MqyYt3%0i9\j\e1~րg'N*崟?Ա]/sa C' ]AGllAtoƉkd?س*j ,3)sЇs+$m `5":tkqh8n8bІ[½*u Xf=ucKr{48"<\"lpѧb"՚%Aj]Ż8nMp?Ѐ~),͒|B\sO.zد{vED~3Szs .uS [@.%\_m ^}E4$M|J[dr\ t W"!L^fʸA L Ns[xzzel/} dl}R^.\ zB8ׄU.i=1) c\Y MҺ)LV$-2X%ǽRJ6CBbq:UFTrH_ܱWTbyYksD0jG#jS)Tyx)_X+sBWv5z1x/|k/|m<8c[7]G,R,@U1BVM6¬8`vw0m?%g!3N=E)^y~wrxW$xy$ b`xNDEz$5GӧS9 WCW}}qᗝ.sDY n?0@^h/m@-$2fV:h:p0Yc:TXZKxD2& ?AԉUT%ARuI;0ϯ}i: lmqӧ Cœ[O%@N͚L'`Dqvm1$t]'~|?A(^BQg-c(.L0Օ6W4T/ӺYlf5gz 4l,eTF6u'48aA X\D_ZTV: 3rGa|H$ G,~4xkW lh i8-qol27tp`f+Ķe3T-T E{KYY&>D!*, roб!?վ R<~8t+}Rb+Qgol_6z#k [X_*:Z6AmLtkÏQOuۃ}%?-Zϒ Ĩ +nOw1a.2"2^CAUR#\GTDGM-POWolV3XEގX4hđl2ԯn7+>F`T*$QcDCKޫ{0WgjٓrV)^ |Vtl kecpN%4ޝ:fAo:g``CDxy BSsoVigtR͋= &T,`I9[E!!vs39ԭC;xU1t=f`njqbk_:92z } À(+)ſZ?f5KYw]K ϥ](}P!JvuQG^</_0G9Qu$KETczG@1 |!.I:tՕ&j +ZP\wy@Gg˳ma9줌S-@q v/HhviA1ł5l4+kӓ ;Ʌ*$\=Պ" D8f+v3λ 1 _lC,)1U>#2ZϹ;˜=NV#ސ1K^WE%V"l1xm,NE0Dz}ɱ,g+@\.wSNylsn;WX1er,د+g0kũK3 &,Q_r^͵{0TEtsvFm>'G۰Z/ɼmՐb5RH0q"I[4L?8y F =εZ#f  䉯jwUԩߩu$BnTM"1hT\InzlDi^U CTڰ]DPS>Ml*Fp.gn]\84kA/yT~}H!<4_ʵ>PHnjelN U~Ra0U|I ˸+?L}2{NG\ ,P .#unkMQϱGMF/\D SmJ/6@N؉]⣝vJBF~]mZ('گ׉6;k@|Q6x*!c𞲴)qn!>P`Lr;!{/XWLt,2JG2TDHxgΜh:Ka>UrĄ:8<[ށ@SM&xQu5}L]TwyFO邫nc?|;d38?{,H@Pu%h((UEP&Y*²PJ{&6H:o1˒xP `n 9<w-D4~($7uʇpgo5Cԕ7gLQ֯Bd5ȊFȠ2: ,}nx0'<ɵx#C4o[{UۣcZav$[r/fBiO=U)eΑ1Z-a5Ol>(Q*JE?ݢ"cvIih3T ^jj +N̢a![mW9'eQ3>A3 )q]3U+mn|s1ץq3ZIxof-pŭT3~ۤY6(c?UwZ8.,m167 ?;;8}C**3}8x) R Q<|1+dq:*'XBg &]Iv6S~0鞨 THrL`(*GByXYi3?(ViT*\x1$_YԂ'5PՔ,Zs⫌oaf9<ʺF܋hguɥ\Dl+ҋ8xQGk+=njbTH6?7U7r<>w[ڢ}4+W@&iO[wq5L`0Y+oYqvp6CV2$̔է0AlҏS+Њ`dO:ZWuBDi*.WQW=C=h.{=;9-[/t6B0:IXM:[Z`ɘiи^iaLs6T$4L*En 9dEm1ʿqqYZUūO}bYߣvm][+á3D檶aN8(Z!ޝ8JSvZ&該:.SfWj%;u~QOfqcR}Q H0K^I#G3CUI/pJ1>,\AcQ~6Vj#JO9S d!d:]BēNPX۟Eשߧk8{b8o<0s(ƙZ%icxHxr5¤hc;r %c~%\P#}[.& L9B`J7Хe;(qL,9!|3G0:",޹玬}G]Te37 = 51NŎ>bp3D iDlgۈu$^G/Sg-T$L1{.{[@2͵^Ax̡eg$Ӏyͫz'Hxqf\c$ICCG#T814+۟% 1|XU)x6 @> bx{ѭȪg|L=5ϫ5f@c_ӜveBa=y1\XܰQ#:FhG,Lz4&zWrtBm"m|fBRY?pu[szq7¶nLi(̓|lpTvU 4O]XH T)<\C;Tf``)ѻguA|毕'IṉF"nPz=n2:%NQX2UMˎ0/ݩrMd-7 f ;(S7ųEF9jNۂnlb /hU3*,\B -EKGF[Ot欬EO0ĉ>k6^јʿqV\7&h+,Oe5vCa)$) m ^NU,m_nzEVXF\|2m)wk.+yd0XO9/-wQ:Qs%i]|fϖDPڌ>< Y h(j?Cnf^dϨh q\yRM׸:#8f %עG \b;~=D57L`#mA1 {,"(ʓӋMҴ~ sxa>X gv(k[l9+9?&KwjSU^ gk7Y" ΟlU-(Mos~L0iOTFfjYO`\T#0.Ze=W:m*߳;Dke*m e*rjX?(u'n{!A&sŬzJ}K.r6*8U. L@Cx4 b2zOT8iVOpHrWYOMJsP]GY;Nh$(كR?i,6#O<ʞYkbT/$H14+׀VwLqĒfCBkf? Gi"7fq|vEe?(*m{y.XVu^`M÷o @Lx{̺G M>σ! &[CmoDdU'U)8 [o`5TRyD"ϳcW̆jH 05uH, b'Њu 21Vrg-r!U8[G;>7d.¥R-5МfA@=䪎z1h[HUAuWja]KwS,0)'wu"zlvP'9 JBJ|װpL H*b~(̛S٧coS{bmyQT˃wЪ4q14y!80`@f2V(s)BtQ>> I]A6%9lOGI?Tw2dWbWm 8B(lق8(S,WiljE=*T7;mwӱ*o\y&<|%vS(&[ĠsRIf*c>ۋw%;Rx,7%妥-7гU%>W/W bh*%7iя{*%N9б< i, 8HKk&pզׇwQ~MK RXI "& ~W`ꀢb\F:zCW06V3l&@> wpyZĘ rP b >qK~i_D[U"؄%-eµ FY/L(Xym|nq ="m(F`vx >eGVu8ՃMGI 2NmPkv.9Z}8fA1G_V]`ԫzݵ_#X}GǮL嵷h}( b/ F2\5x,]OU0]K{73lFM'ܸqсrf#-%39X RZOqj(ad륩[GC>ϛeӓy[8U;} 2SI&ɸO;@cLmGQ0p |9;o"08]8h#eөa6x.qA&3JoY v}%!Ҥk M|Ӵv-[U(41n( BW"l OUiqa8S3;^~`-"\j)_B_M`|,7P=a\xk}QGFPVUNդG>*2> ~"X#cpǠydĚģm`]ei/Z 'l?(}kƴ9w=>9~?uz3(nҺI(d(vꆣ ](+.d}:1B&geMtʹ%:myA+AU3_ ̤ ^IE|~_%E)6b\o9c ~$/(㔒BK ӋF(2Xy^[:ױ5EVkmcx!B6O(P ->ߐO(R!Nזc yzA c@fQ,D\MسIxG 7[e* $WAp6㥋$Dt8+.#hH\钷bϾ#Daw r4]|!( 9)[b.euR J4_-7FPQ7;Qy 4yjMU Y0~.}(rbS`0 A !Ie )-rSz)_YE}thzopWU,BHMN "6]yɒ[ cRn a՟z`ͷ3 N$zKS]50Aڳ `pr=.5ٟ F}\4մ 4'ɬwŶiyRI7*# &B۪D%ipw3x,F'Cn# Xcz՛ͻxd-M\f7ư ?barWӖZoanzooNt_/FyOmA2{||UTE .$yzx :0{9ҏQ+[̉8-EH46$ڙ4Oĸ-zEY---1reގ7RQ: 89Iqn@wFJ{ sJča1=Vbw"Nv)w4D&|@^Mz[m "@L?uW<)Vo#yLSq3=:nO.4 i[HN D-8ڟIxb:P=oZȴr?zL^lZ@ U `6e ~ 1 .M;0.3po]yju?¸@Fس6Sq9= R샮=3+IpMV!BhbHlUcMlsy@amu?6l^ͳ⵾y-RZr1gdRȔij|#N1ٝWnZ ӟE_ujN`wOe9!-Si}Y*|arlLF|L? !PU>OvX%ɏg?2-*A#UOO3˝o'clFuC>{zw47 3~rYcR۶2̾^9[jUZQ1&M$YuldEfGXs4<{z2b kC$ߦL6=yXSl'O7AZ-K:i-\Ť6R:숎5Sd!0*IE.XO77m2ϓWvۜ=Tx x AUEbS r_)՞b',MČ 陳[FϜP'ˡu%+TuCD_Tt&'.&Mh,7HS,$?mtؖ%2wQr$ ̉a{i }"Q.ezyr<HҒ\/ J$}Mqc :}FWJ y<Vksp05SHЊ0? ~O\ۅWU!l2ӿqTdIoyxjiz VrsѬ$)F#$ 6wFO;Sm[7wg=s.`7m29X ( }3^P3#qV3٤bOnzn)GV)LWM-487gM@/NSѠ5XKxu2YDWaD@q7ISO0`O.ob8U0F9SF 9ڤ',L+i$% Azɡ3/8d d>;55~a!2?5oWA߫O_M]yh6MO[Why?0eAt)❋$5 Wt TaB/r yrH)Z_t׷Dֽw2/y^Â7lZѬՅj=:3[$:`BYB{kX 71>it.b#xW5ޗ?n`d*i5cjwWTp޼ 쳭nn¨Ūh1& `mVlnbjُ$_ꍹwͺ bZeaUN|o!#D9iiP޻m] 6'w| xL v2r$A f&$/sۃI``;\o6/ R rZ(>hq[5\@{KF56@:9Iv@ E9/@ŸHQ1KtlcT:QNdBn, ЛB`ޟ"^ Ļ)ϛ>aøGzAN7 ڈҫ@9; V)um9S2o6<3 "eOSKy90bFjrVcIBHV>?J' ë)-4[A $)p;1Z3)%5a%g +r8qo`d ]'ٙb[د[]nIng 7c~foW,@ lad̼և=w1{Cgb4 ٶdT R2dƬot}J4c:;MwYI_ ߫rƗ:՛zYCEۡn/5/j UO+. Ȕqy>)dłTyosPHo5)8X}=.#!q|Sy9 IhN*!jWI|<?Jkg`Ɠ]t&y7{)o3KT-]~-FHVUa_dcS P&W8[|P@ҍ$xm58 [{hYum a_WDPoAppWkP'Z,l/HTYxA[bnKrv~԰6al) (4WN:2m=ki2"$,~ܾjo:CQ;Ah=;"Jv*I/dC[vA2&" lKxBХm[JBykm"CGiϑЅ6œѤu%(0<+Oa>w->oDǾ=;!#%";cƳ=&a̦XBLh qb">6>g\R-bMX"vE~pQnܩ(u|wH#ऌ6|%_oۋ0ffb}jzY}E^$Q@C?^U<%4F,<& yoQnA 8ΌpG7}Q./L2^߼8HR v&BW'V;o=,?\ 䘈I38<>31Vm@ӵsfn%UZ# *rt'v$l #Ǭ;k#R~?v㨶$IHZCPBtn˷"2@sjs ~;߃2p %˃hzd$uûERN)zxQm7 u}܇w}Ȭyr\ߢmDtɮ6SO :VQ1v׉L"Qr1  ԤT]6p0Ile*jѯY -ʁ̱m1{Qۈv؀L GcWKS壦!{1b`ۭNv}G ^%|(;b&,y= xZ`ؓIt6w[QZY]ْx*?x`SyeGuZrʼy /G Πx -P[ l,6B%eB0H穄0(` Ku:;kU3Y|loghcQy'UyģPhjC7OQHt=1h)PPn\ H_bUwAZFDwl d6H]hycHTY#qɿy.pykSK%MAH+\_+%uevV9r0i{𝄣>Z"dL9|.X3) !M7 o[8t$U8[:ZHwd,*clx0'\thiyaGNۖN]%/`̓z8wSXc"AGxGjxa VU/MY)%mg-y!=С;~̩)KXRw_~B9q?Qխd]CfI^x2&݆8-0,~ޣضvGR=x%ag_́uB!P">^l^o0≿'H +xMbfKkCYRuv3p-$AM\1a;=t*]DݔviA]E&_%^ |9 3~;~D ,%,PWyN`}Fq_UhxGJהj;GGF"c1͆ ~:[GKP*Ox8(=uu])ݦ@R #t.FJHPIf/(4:חʸF[;޶{e`i R-}9lj%\Yߌ'm/.\x#[тut@a]_&٫J\:;)1 #o;Q.ȕ:< M4#9Y^[4 ƷuhWO,KUU> E0nX=zu'yT &Ha O#:Gl@|G^.&f`bEHyo> %,~^*U;MR˼V,R4a*,kun [Wjr5v^ՉB:m1e!®qȹ+.c֟cA{zJX'@zSHjJq%'njZ ^[I͒ _iuU%H.*:I`S<[KڇIֳi1L-&B ,:p3FgBȮ&Լd0$" s`Pd^Нb7gݽNTh&u%S:U?B6CQGe<[.#@d* SeDE>W+˱ȯ; l0sVX%{CܞEDj޿}~<vȖzMCœ6KsY3~xNK%VF|bz"Lx'v fd,a+Q۪@kG%Bq պcOQXx'BVոI-@P%%V ?M%e~jo^2Ko͇¤?﹈#[#eGH>W\Ro6&&K:p"B׍3r[_c[;8[ϢFK5CQ,$K0 5jԃJғAM7#bbu iy(?Kw1 `f%H;KrNƸD؁4gM\w$?=tKkG+ZtFR9HfEDM lߴJD* rp PEPjWe{OԴI.NyP 3Ѕ?aQ w)nΤ@2ѦsSKf@7MZy7ELwpahT]SmVh9e>Fl?nD^aE" W_-;n;t=d[kG) Ww: `+zJIJ'D.9}& 0~(˝_MiϓeόSO^tGޛ%њ.=S S P  .Z~,V2ZPc[YG \} Kl᫡iNO\bt2 ȇތ;C_!ҥ.}?v>njˠzI$-zܿQmQqhͅԍb\ϰQ r#2pjqmD)j :vC ZTB~t+ {r.1@yJ@[c-lv\!C kvQ\T/.h5 '"9MCk[g]]QkVJ9Nwd@fW&\t'^G f >/`D%pBxU k^a_\ _K_ |ސ@N@(c ]0M }Ϝ%ͦaD9] cfy- Caݎ(1.ktdJH#d=\`<9$VX10N[=2(mf0 EB%vI{e|u{7馳 .M b )9hzkn?{K ATX{\n/5b26fEwQkf:JEM*[QVWPxb C෫pɥkGu]2JI픂G|q܀Zƺ2LC&Mţq$l9oiV\5#a禝 ^Ș5?ƍ`i ʟȷ܅'Qnz3v41gɺA"B=NJ 5r6Ѻ&ٷKNu89Gp#H?DKp(ǤGCOoF˜Ƕ a| 6 䭔ga1=R { ؃LX_S/Y5as6_n]j ʎ*ӡL:I\eXq.[M9ώŬeYøz :VnƻQ eSt+?uVqp Yawp(;B#Zʚ@p!hWp~_<.6p6g@3C<,u1ʶQx>, a#Hhw &/RgTq&lXwc|Kg(4CP.䨇X֠lϹ5Zȉ 4kZdC3#`:Jmu/z77x|!e#t |[>x3ʮܰȸҨõmwMZ*`z#]ehz(-{[zۦ>2\( ! ֢6,;{/(zV✴xgAA8$M5w*(m*9ߢA=nZ(;y =3迗dP.|jeY2ڸ}se)zEoS P\8/6ly:ѝb^/ HUUi!L+O#k6\7Ɋ<ࡊ[Lz9*S 7rKIں G:\dO J96a龂aHlRn,bΔrJWHL?S+0b:|hRhJU C aBW x]vʢq4wv0,.nժG{\{+ƣy%vzEXs+m;[pKbXJ>|5!'m-|B-y=w.c6)V_:&lX! j2+,ws0mwaLX_=- {NjWbK>L.9U+bE0H[!CMSћXl3Or IA6d!YvKvX,RtEEYЋP8GS&ǾߕW3TCSofAu谨$&ZܳrI9Bf^xi:ju &PƗZ=g++ӿ6z&E@I(Dge)?)B\kuIGcf6ĉ8tEt) p WD2V`Έu1xmh!y_,66.6n40 h P2*@TL[,a5 T FS4bœt#ew{R]Dbɤ?c=7=83.Bns6Ze.K}e)wךsFWk`Ƥ-C:4J .-JBuLx|K}>; ?c`,.ޡNFO >D.X+5d'3^֎Gm"49cb?_ %^SrNeA!R…Ta,FDb#!*-pUר҆1eU}*gQ`t;W&5o?O~@ƪn7r(E);`)9:IZ?1)44;bެ,3Z늘7VqVrcmG]_Ngbn V5 vND}armM$Ĉ5B$i<*2DY`T%]˩ݶRPX}ChyޛHml"ChGJHs=J0W>%:L!psS}¹̗DjRguQ ܁DWOv{Uxe۹[`zy^ɳ</"NgyAӸp#%3jſ(!m,S:x |CN'ANdytʼn8J%1F.nOkƺd *$CYA/a;`H],/(t 9IIݗHn$!O/RŹ{n6r}K n~ټyKUn1QgODNQ "B,(fJeI H )EF"⬗V?AUw)f1}-j#2QY#Pu& ̌x8/Y=5?ˈmTk<\aJ>KqB&:pA|)#?#i;ߧˌj27U:ؔa[P- IAa筎7 Hm=$s~L!s$Yr$ Ftf!bK8:gc2أ,lY|_!0D%!ZzInK'u'q _HzU <)(,SesWPo" ϸ8^T}݉MDd ލOȢޡwE8lZ9s DO7ˮh:*cZ@D?4{3doNM.Ȏ)0Q/T%_4t\-3‘Ӈcnp)7CJDYN-x?Cu<tw`L'ס~AAgnw=b;MZiRxV2xc(U~AdЇhR߻:\ ~E ;5keV(eigs#`4KXi2FpeEPÿ~ڪS>^c&ՇˌFs=&l8[?=vz VG[/2E`si R~`%KuLS/w?\_U*k쿏tr*+|B@GESXW\Z* ^}gVE;D> *%VX7užeBo84!@Π-*f#HޞP%#N ~"S<"=LҎ?NŊSW7yۏ;uޙ滅DZûڮYn [| .=G6";~G T "ݙn6Y䛘`{3Yfq@"z%Ϭ)&K$$*yzV@NQ.>ge$dw}>Ӛ+iw);JQ`Tvb,}V6M=mR='Cb{뉒OR"0&g܍zt1BHo-j>5q@Jgh8O&={Sb)Rg݁Aמ/Z}?%j6s=Fڎ@#<#ut5]{9۱l_zeUdNNX9KcY'߆xڻqmlf5W-Ľ7AD[{khC6wxKˑ).Ml:3 R~?qeѾ"$W*41ވrH ;x1Xny&SpC7qxRζfqOO}j`V)@Iw>re`ꯡ51I 䇊f윬qG3x+ C/$7Ermć@`߉l֎yADMNrtn4c;(E.FA/P'nnA.wGMO h90쭗j(-~3` 䟘WU`r p{8J@BPe4Cz.X:98LamQG_J"&.I9ܚ싪Fq!Wtq(J[>uҘ=q1MRRoM7-pF#ZЭ2.HKoue ?YQ?DqP=F;y g5AeTo3Y:('xf˓lhpL;~n&Cg{WnP^x]en)M_3h|1*~!?@J߇[GpH%*L.w`=AT_yr7SH@dPGl=EC5@xmN0;6zn<==Hث?c6 !| Οe+_~ś m)1&3ฏe{R!Iy>;wBO&(+oo 8\: &s)ëWx,=+ wa#E=<tȿo^߇oF˟i-$Z`TK:ީng=p PmbnM'{گF/ywŀvzƳnL.a#;EZJj{s)r "w#mD1TI `znE/=Ad#3w{6{ӗWΥ1xZQHlw`r-3($PjSW0efDBx>$'|tg"Jo) J쏄4 hB|2s6AA2_wE/7$oyiɂ*z0~/c!UkVL㡉_=1[P.aS{$0QHQazesaf=3=.N?~ sQi'7`m.5iTy=v9\J+":em`s'1[|WS{.Ð1jͼz|L=[a?ձ0F6r-_E,\ܧF#6TLiި+f6%oǼ 3,\q9teFm6BAsovߟeߔU1U]qHais'rY7tuõoᘆ cCmtǦtrlL \ [T̸wtTe1!X?7;˂-y{4xmq:E 6u;^ATvB![7ớ jW]TMC ?mt(dsȕˌ5o|x,_Q&:fXϘGb!{P/u (ޗ9 V^jTk6:fHu_ixՎAEhˁilY=X.xgjW)76݀xk , h!(,T+U0l=;Ӂ`.(4kps?`\;C<&<FkZ{*Z(wa2% 2ߩ;p⧖b)9_`rW|Ш2ڛ3>RB!h,,C؅E7lgYTN3H/0|Znf.HBdח擂\7j/MӋTw͍oҘČf}4񾳇c5ДɽD ͚w镓8iXI5#>5ֵ" `iPBt3:-BY|6j@E{*a:Ԩ/7"p$-E_{adv|q:U[[4xۀLdhfe;y06)n7 ?gI;Y)V5LoLLV=P% jMcHYFtY[>K 'ЯzH/(K9kzGƭ h?zW:hϜ@-xcAjN-[Ⓡ_^!ՋK% 'B=ȾaEy E>q|enb qh!mKFğN8yx7"=>ѻzRAdi?e 7q~>Ҋ5j#@%^ ƫUP)-B/ߣ?c\~}8ar?/ ?aյڙwbQzyb؉>=0f f!ڸτҋ{d/WO8Ivn0F:( N0_Jpl;΃ 3Èb']vؔϝ/cf~%wcH]4$㘖y()num"?xYL69ua}%si2;W/_AQmݥo),*u473qX}st1?4p5 fzHHE~wWzAUU&qUg ΁42XPѺn'?mF`{JPPi7t"21>> 9P˛ḂLפòqu!ɮ O. ~'.nπ>Ó+˧t};8n|Keng ;.uxj/zl|v"!yrr-2x)"R)gޜrT@/@sO>@²~7څ~kL>P+Z8N"eρG)d 5@ 37p'",Cı+z]7O@& LF )h|Xj4m_> i/OlB㎝sZ$aĥ=l+DS4ah#ҨnmX.cF*0-ļ~6 Ynv n7z!R؂A/awH㘔l#; (4WE\؉uAт~hʕܔ7PS"V/L9Cwt ոBw>A+3hXToMxJ(JGX2w:6+SnwNJ\ZN~!9鄨P6 ^K{v =[7-]*r'tzpZݕP~`qwkA 2tVt` #c쮸Eӟ|`(p᷎ Fj閡&c!DFDƙZd+`%u&xx7hk`x8.2xlKv=fu|ԫe'N T ޔXp23\>J>~l@cXju8xUwt {2X͚d>=0kR`_O:} +f6h0OI -<q&{@6P{XrLZw2ʛFcg3bjllHvHߥE{V>B{Y8YE/xJJtT 戒q>*UpXciwb5ii%2 V3$RrK (@T<', 7}G͜I渁,+bXKN|]1 Lk8D52Oq 4BL#av;@i(e`aȊ5 o5Fu]vU$-/ TzǬDC5Tys UQCz{<ɪ9+(BwiC.A!ۉzѸ%Yzyﱤ 7)qbm/E~]g(Z6ګ!'T8,oxZN_`!qC7r+:3\ؖo~G-}TN(U3iuJ, '=Yk}E.Є:!{ݿնexvOM[֓LYت,RJ8\ J,n%m(UXxڟ\O= SQK 8ZN}01=:IQd5t30p;/Jy;}592ydo;8=lɊƃ5V:b~C(I!DOS>)<1{Wb8d+ T (GAu*[2@2LOz>2zQj*#5a]OlXhyf pJz{ F]H HtZ.6U'p*ŗkeN; nNm{ێz0_i @p!d9Ϳ< =b9j:W̞SE[3L*o Coh,D**Im~MY@QGߥҝWX Gd"Nڍ2W,o'$߇M6e{]L oX'.٫R|Gh:cq@ Mub/ߝ"w.nn]q`&Ө5KB4ۇ'i pr{7OW>^=?:~JYpHͭAo`hg;w*̿K5hzd7#pҹfpY=؟H`$)n:@F7hRH̔]TZ ZSZz+4 )A34b/V0=o2_u}*KDGf#O5yw㱆6Ug:cц|NX7Id9\?V!ZX>kdr bT߯n"3x7҆RNa{U MB!qZR#1ٱ.C̎vY x;%}#YSYCܣ*v+kE ~@&s6mAj KD+4!usK>c Fᠭ.BU>c98¼;1*%JoR9g<(Qb8v M~}.~]R_X~D;CQ ĩ$yHaG%E7>ՀFw=\v3+9m ԥVLQMfw(G?sz%)wv@4o]<+U=9H&"jVOc%R Nh?G0@_:l5BB#b82IH[I`-J%I |(R ZgFko6_o vHPj' 'Nt|~;ZwAZXuikY۞d[X$y##3d1 yw((W1G9AqRl(MqIn,! p(qJ*R}ew3CUwploV7x{}&zZ< ,MCAxv7N (<3"**S(P`өAQ#_ ú|GoɧC`ae\qO(pڵr2"mE FՍЦHx->CKaN |gT&6-Y=FɃge\Vo{]J2{p)Tޙh]$W}+,"z.O nܑit\%U㙛 ~2!,1w-;9W̰ovo A` JHU$N vs)3s]esN! A"C0}v3~P1Gi5 (h;ĠxЧs&UM{^DO͚wo MM\8aQ8P˲,#]WiR u#'jhI:].o9/p'*>9U d8ةst8 KbvL}.M?J+dBQȳvv[S2Z r RqrMu־UtdξEr{*~VoIMuѼZhf!D?DJ >k:Gc&8gOKs"ҡ"k.佲tub.Wìi@ ONBs |Vh,5e-5 S]eBs;ӿS|OϯJB$\BeW3T؅No3{y1wDKOW~ޭU,qMtUQ|KN)/lrc05DklGU dl V}е9O0dh1wj*:.  T=B.,HQmMBj,|t`NNstQȏ۽vwTtB!7[&KY9T)F@Ohd ,.cIUt15ATV`z[*ߛonł L/gȗĶ~)hi $zd;8I@>L&^o{)\QN;Ĩʓׇ]1q|Nm?vŊL\Qz[SW"ڨ<j3KmSwCքv2QP[;B:r.3T'@LYK .jx-;.[F|M:IK{D>%&z6wt,fGpN ]s-Tq^񒚙}ڧüR2贅B JonK߾hX\SM# b+D(ο`qm"FRxصiT[56r0dttP,t!2uE9:FXb5_JX(M;Αx\Bn]eU jTfg *mPʱ?"*U &|6 ܖF  7SnϨ ]` j!4ZY̊A4 u ܐsҰI3U M<]ahY?#jc z3l((~y xu[x.kw~5s5g{)kK~69,a-#&e ]h+fغV[Ȯ[C P%:X·uW4@c{TX8-_JmxX(Lw["& 4uD=h j1,ۏ%z+]­J-i}gƸ\ DX(7A=KG[#ު'6ٳ>d-le-Run_%ѦMyL&w+L3w𪯟7Y4$[ߧPVSq3mז;RRX=nX7hMQ y}j=+̘.K/'KWpw^ݔ85In6pJd>ۨPD7Jڛs <j}9130 B8U)4[HM &q( _]usG^ASCa:82F=闹4h-LXW@{4Գl}M& eeA+?-镭݇Vǘp8\+w⚈Q/3R MiISd4u-?%j2RO(=:7AZʊb?\hС8M#]PfO'?BM=rF ɥ,ũ) ѽ *Ue1n/;߶zI er6DK6Qb*jfC^?UWu ڌĹ)*>9rYiݠM\'$qrXg;KK Y+b(~0JxlڀB$dS`KuGAy>_^]xL.) kr{FUOY$?AD45sèvR`Sc8|4gVf<EgP1:7.*CyR`zq:CyGޮBJ ,Wp_Y-#KWW=FhxX:bjHLfA,VeIKD^ @ry͂|QR^N.ΏH]GsDv#5O+-Y&saUHML+~7ZP*tO5լ/J?nN[nfgkLbe;OG>˱huzNc$ H^LZ7b폏^+ 0yb6uu9NTh'6ǵ>Hȇ/ަ8c{H1tj"&Q0Xh]2244͈u>sSt`mْ8"q,}0'IzÚoҢbF0i|V]^k8羜Q߂G0)FUiYx3As{Cv0>ib/ Edp6Zz{y\oZi)pՄH/LƠF=K#;.plϔeY~ھSgc=W[1B6K*J/Z:_ Pe;g- 1 dlq/6ͩDxܧt>ȈjmT Xt&³|D %FXU:i}qMŘ q?o-PdM nm|z&`CP3fbnN0t=P̙eYޑe."я7\>"o[GV^i1 *8]I|NWXO)B11bRʠsYMQ%xIl2R[?~p!AM@GQ9OƢSW)Bya>Ĩʁ_Ͷ\5! 3;tͲhdN͑o+i 8GulA0oM2׫xhU̮NPhQ,pD?_C1xҍn_a6 $L]/Vai2@d^W>{d)8y@ۊ+/vy UI=W|e{; NH}9#B_TBOzJLD>I>7W-m11yz{#.b(y}#B<1;̪1;y"tWWK(Gje>D^h _E;#m$7v3T@Ә@$"FcXvG㴳(z*)R90f [D$?AmE+:Ԧ'[Cb1JO>YV9zKK?leNHnu0bDfU=?QzkX:\>%~-1iĦIШea17r#B#牜c7}oiWx\yIQq{A^ gx.&C;n0*BX)8W;qoM9Iuj׎ ]XCΙ(#Cߌ.}ǓO7@֝oalK|iLeW]4OAʝ =KD;<< 91xVEmNV=GS- |Q?]H9_WOqbx4c+7g?}P~Dnn_ė1;e|nb1>5ϥ-䃺Z#gჶI 4L!`&aFkL^$7# (T is[. b5}͠1VoH~uFH&^Rlj {ͯJ͜aK {ŵbRN[.M}G }.Ef"Gz%jUV:Ceu0jT}Xa9PI `>BÖђ0(\+%[+Q=i'߶䔘PnvD3 b,%3e\qIH&١ܾ*26и`Mli &rLsC컒0ľ0p [9 $2Q `ؖdFΎt s@?uy,Ʊ^ڒzM5QNҥ)GHya8\t\ J-c>L+o=u jHd zI7>p6yb7Ć?%>X nenB8=+#9^tFm~GLtU& # J*o2?24@!,Jm9rƲo L">þj#@=DzGatP?j} fR^Eh1t< ]~^=}PaYUӻPft~ q&[ۯ+ZҐmzs r]Ef0X3f|35Hsp"wfL~GS({(5iד(|[fzQr'm"0pe.lb w([ANі[Qւm Y7#ȂEXpV+ԃrFh ^'xg -sk|8dk%1L)uz WixQoQp* qzSHF'CN/}ֹjXtQUQȕ\wq N!S, ʾȎ*)SY#dck LmD[KC)!Wve26z])[xL&yX8AAb6ZЁ)%;q; n7~/a#lHS&Z[MKgsy6DFʰrp|m󳐾jm*Oy;Kt]-IꓰFhpP^^M}H9QcQ3y( }kv3 =͖٩ I:Ȣ:" W]znP[`$(]:cC8 YI]IU@H8RZ'V; [25!:t _u s;w)ChkХ~fa$*e! j*< \>2r_LF? W[)mU QPdmvyXzp.0"Woʦ;ٮZ3Y3̭orol=Òz+dvJy=[H{΋a Q~Ld{3L šP.U35wstƆ˪.MoԿV<+ 55tBZ42q'` .efK5ЏL[Ş>F_ |iVT>a;9C1 |l| 3s#$14Y>gsa}xbL# v".8LѳHn "g yT SwFztN^P|@3QvSC0 /YOB+ )}(ǐkw)˫EѨ_-(L@tegq@dV*{!:ΚckI;`*? pC0qeu9ÑW.r d\;s~l&ױ\nIJr W#>6/"ϙ,͎ '  TU֫goV_6]X@/Uô꽾+\*R&+^Ec\`g8-Ytx,{T5ϤwpJ?5F|7h}wYLޢ˫ n&{ݨ0W;ugqSe8h'CO6M&UoyQZVN.Ga^2tznOP[rPs^LqbꓥDȬTT9<0hFn&c<8­o4GB߹ʿ@meG=lyEl$79/J{;\iS0 4"a"sꬒ(tVbj%WIyJH;Caw{"92Qhya/S4r>w!:wSZumӵW@.*:kLo9cooH G:ͧd(Pjў[VeU(JzC!-X^ա*9T_'< D]-v%LI/w\x+aʸ"Jԥ{H( _[sbBnJb&|9L4I 55U}_"!|Ď {hKU9dy]{7{ ~gM3d"x4'֒ S9BJ4*ֆIHF: ygBWZ4 Of؉A;NLޞvrQU&tޝ4uF)!|l/6Fq)ҩE @!`YˌY5<%1Ƭ)G1qz-&ywedR#J{m}=S`g jeL%Ar7F<%gG!E=L gXɽH 5&įUyTŽOR_%*rwf?%slfQWYP ._:z / ܔǘsdݦv!wt\B^H,]m3T{ ;mxژQd S߂ћ=Ba3R9{ 4ACˤw$|6ħ[$RZA;f=iND{@ZӗŁa' ՀXD9M])1`8(dD1,ygiMyBс0/R:N@v HR/vE4<#xP#,,$&+rgba'ڂHq F} L2͞:UB췷,ev5-B|~a*hÉ OZ"?kZZÐv!WY:&!X,g$AG+LC`˦=qs1|5i{d9҂gؼTQ )o35Hd\=kȀsHo5w9h5\q{"#ˉe0onY6gղ?JEfl6)Fgt>PCTmxZ% wp  ~%O`1V@d%%U,T'^|j\C9 |{:'S/F#.Fn@ i$v\o d=JwbKŲsPm.>رQ\lO}PY9Ys),¦09(:,6a$7$P%ط/E Dw>m |y$DmBcV҉P^J@wb(ĝڱ2jVdeGصJ &W҅DG&@QIK}c`d~LbFk!0>=$"bFLC[^$%W%dH3C*!P!MH){n}-1SQ~h;e`+V &uE!L6d &bٸ\!DEjо~kUrj7oK8:k#_! wŘ V{b϶{w&!lG($* W31keo[ٯW6J|"vwnW).4 ! x{ \Ϥ>]?wU ij6;"zgiLUO&@#̈́բ7C?VK(@Uڰq{z~?؆\Bm~b6ݢli?:\O{0[š?3A~I=7aQ ѪW$CycvP3k "c,zo) js@b=+~GQEMďn7pў3Au':n6L [@beu̼KJCiqyժA9 _Q`m'7r*cGJYr ;#6k]1Kh1L!oo^l/RߨM侠v;wH Q|N:]\=~u*3Uq IEu_,k*'ϡ*u0߾gY:Fյ7NW<)}ۋ |l( @n,{irRÓ4B[m1@)k!N=t8- pcH$p=9(t^'b,:_9sByxED f9ɤ[ A ~_@$~o?BJEdT)xMLqJ> E+HoL =\!7|RiG>!DjyI?\X(XzBa =˓U+ *!t66)EČpRB{sȸKܓཔwX4_CHc$wiCZX b fM/+ n6`]+ (sԠ҈ ڍ9H/rAT4WSUr \(ǜ832p}D"Bni'L^ҡYC)5Y!rUeS)K9/2u7 sp{kpaMWea>zy>dh8Lvg2&6=˧<\Kd{<|Lf'3Ijy:@:8y If%QOKGX&fvНߛۇ_>.%u&^q!*LG[o̘#.;Y/`ONѕpt^Y=sD3ZQsf+[RJ8$,]de~Ҝ<)^Ȟ_-Bm:Qc[)]-EPu!Zī׍6R\Q4 U/GJEP=UP}yx,>dWdY6AlX̓l*VRdw)PP w+\ OEA prcb޻R)afg= -Ҹֈձ:ՂwIŠ9uV?Ȫ_J{Wߔ@EOX/Ll]0_XcK Lo 1q:Ig%8Ӥ lKe\!^OADxNz,C]#l9{p#pQhʢ8ۃ(Eh It!Fbc?Tcsj}q֭nu'2v{I"5a28l*N;&:|]ǖ/9 eOP1+W%y|J#L,4qw: ۮPg ,*ՊxNWQ' %%<-SR+»gCcj=Q4k^P #!.X 7VHsu9bc!AzR0Eb~#]n8쇮$Vy[?nr2cysו>^D?wT{wAX6IJ/R9/Xc"-]X'  aRЛϡ*SIQ6;Up#HGHh?+rƬ:N2'8m}b}=f/ ۽R@<ܥ;ϒS|ȹȇ^Itu>OIӱ{4ɯ<.@H%3XyFYOJ'!-k↲]R@;KU~f7slh]xk|ꊓBOv;}vm-64_?I`I]֎Ntu"Tֲq>{ٍa >OP ktVujذރ<zzƘF~> @X*YbUB왙^'/Jx<܇$[ ڥ+pUJf(k-0[뿫sW0?n'Rv{[H0]QyI+pQmyEu\z +b)`},՚a@{@TWy%D$nqpeeXK;yMLѤA'51=c4|,TW:7U]GYrro{gٵޝtIrLa3SQ`)u?VegGZj!}SsMhz6.ʏ ю_+o1_%;TnPw+ gh]cmY@#Ma_An=SCn!HH%9C~#CY  #O1⤉u3>X|A`G*c#dv#4P"iy=$l?D mk%/HDiջY= y:_PmM͂Qڑ:\\7l e6XYڒet"w1u/d1>%EhbWhE1Ct-f_g藋E}ly(k3K%:@V} ┕3P\ zmN g`CPef"zh*^:(==(@k=v{alhpҤ;yxem(i}YYy@@o%S' Ə!^bWkX( vi]Wk_ˈVeLݼsÁz'(YFvc, @.|f8CàHN ٚurzZ)g-1^8?bAţ4joO4ot \|*rZ*J&JF(=uUV=o+ UAp0rqT/$"g65`sJ#$i #p?:R"O^bஞӒz3=Vtdsԇ8ɞڴI0HnoWfɳ}'QJ(, e*q@ޏ.E$AHmY |*h9*6. N~v%QpVʭ9ۋ^ۧAWRPr=m4o6E:o-1qZ? ̓^l M͸CUZ 4[$#ǛAoK>GPx-kWh;n)j!TJPw;vp#̊%85u϶/tSNv_x\2Tc ER3^E͋7f"pg>>#gޔD7tv5#-{e;nRY o+Pcd@ XCS# O b([arWbHhh_~kֶ!_- r8bb`Osmsuc].6İ!9;f.ِztSH$ev]ɢ ZHBodgY_, ~_hۨ=1{v}UwXT@N۬,,\[]Sc;n@.D#at˭T(PY!\ze-cv4?ʍxt481mIiʐ[/ ӥrV2N3ڋez1OAɂՒmRfMrԫsFa;nMoDEfW6Mz[3;^pU<$Dtx+>QbTŨD&ZwQ@hz)K_ղKsOC ǐQ/xZ2FUNV7a&9K^m5tyDG&#k:sÚHst];:%Rmz{ $VXmBmS=t0(ؚ}nZ(\԰IX- F>U^#v&JiQӐ)*4Te7xAB\z5I#iqͯ60KX #/%y5Qô D/.Œ#! 5 no:S}_QF0KaEƥUFl}r 5D@ls(=Ta0u2 (;3g6ȌRq;yEIncǽ@.\*Qrqr9~޵@DA/BkQpdQqOȄ=j֑cVLa* fjPxE9 .7P*96NI8r{+t€S!*a&" JKj&ADU>fɮvT>bolv4Kc\۸@k 9+XA.!BFV3Ӡiɴl*S~ol 8X r[:B"cA |pf:S&,*dzr ue<`7!uOٝy,-1k;N $S\^׸_$*~bU`vD-ѪY@2N.tяs]X -k31%ғݚvழ@B:ǺŌzfFɭ6^JB-Y's(G&m"U!ݘuI/D >1OdJ}(}:幘H5aBq1,Rrond6N>9 t -?f@znO MG*wgJ4IA-9ܯ' KڐIȝ3T)#0}ZNoXG<%0 ]ZYEzVMY4f7A v&֖3DpidحrP״Д~4(FG}XU/ x+yX4BWH H~ߡL[%6ۼq4'P{h7[.Am#ПQ2'jp3sL>,sZ-~<3N:{ݷ6Ma?|J=3B/\yף% BC1GNJC8b, ~A"wz=Uݍ >ٳ$*iEl|V xm,_g1FO"5' :8mHdG*4 zSy‰[$ iZZ}@qrX"L-d|;0sciJz@~iL͏-A+ aP)Q@ſ$TUQZiY1N~HC(&Yy2ћU0tɏa#`$ wSRG/!ELXz \Aunm|kK:YX{Hvjvamk;IPB<L3O#o9H?#ts\V-?g=&zT2H6 ,vb!u DG6ʦ,a)߾'xL$gd9"@ߎ74)v1mYNM1U9 Gq-) _Ұ,S'o+T ΈkXsCpg`Q}Ly q\>uEϠc֣%ZMڰyL+]k]1=k٪B^K_V|?VH(5:1̿#^PG3. #-#J@yfe4 iU0/c2Q]N^d&#a#ab\$%wHdzfDzq|YVRåGcѨhtމGbDEk{׋ '!_Lt C}f ɶ šQOUTtuc àP lq4<{Vf]Rӑ$$Ϫz/1{/(.x)ޯo,,*[5(:Df$; ޻V>\9SmqY sh1Qx_,uc^(2 "p/ͦ8Yo9 YBn=ʊ 5hXcal%Xi&?vMЭBCYsNo 6F!FcVB&,<6dto`ȁOU&Skq+O\ص,O.̓.!8 A5ȘJ\P_@3X+VJAJ'66ڟ:) ~q&±`?'&FiwE.j3`B9-m)L *| c% _fz{re4.5LOD${ cAC;M/@ARI :@ox䡃z9cCdbxE?b;/*ڍ"/z!T||C,%ʥѤɬ W$x܆֯tH\Ai&5xrI03=.nM W@H)\[jNCV_TQ 6Km7?f'2%r 1Љug^dt8!g^<7—^ՖZ{|*J]cT e.`b4%a/A ]x O`֏ѹFm7Oz.!ICIΣgRa",*6J>Uj/~isN^PJ³*KͫQ ߾L'pg d8wFik"SE+d 8XaD@\S=ǞK4}mUrO3_pSJ ,SS*Am.*+(c}Y]* 7Z>[RۮCHe_,_`x(C"Q :<bu;ZqixBg~bAal14z# D?jHU1a53^O i!I~Mqt5t*m0!y%FG"HE߉%PêT;MNj/R.Sz3hs,vî0zg *8&e,/*Űޚ+,y-_ 2v* iԥ -@l,vfPfg?a{_I,B<ү}F:-~c_<1B˹wFj_3рPL׭TzDET5(U+ǁKtf wDžؐK(N'r{x|r[]=3:fkRAwr>W虅+%Sгެ5Ztġ>GOl ߗaUY~ GV0FMEˣLT}=/`9܊9[*dG F %M,dNr};2۸ή;Dy|- >gWO>ڔ l'zs#?έ!*tgx筌"A7@T|CZtn\+L?!_P:oѲuӜ42'i(^M24J]1//-5XF@q9`\A&튑meDڤ>c+冨> {'Vl]uֆ-'$D{4vf:XӾyO$A>y!9! K0E>GJ%rb0|2'lϋdt4\xcc=Vm:إΛ*-`4"E_rYw2y}ї"2-N'>pQBZ`NWۅp̰Ďt'RH`spU&wf 5( JY…)mY0z"s[7bnN ^W[hsUN33aCedB3c=SiK6mʵ]0hoL̚OڅWPYŋqs&; dgˌsy-4$⸡nQNaqktՆ')] [5h4vLCxGr8$4p@H4Bď|V\/R|쌚PBps5& h/u8`Y{5 MռMձ\G-Mz_p)g> Xhzr`w1TAdV]e#V<.X3c^ #03 {2yza* 󓌌Mȕ5FiOEnuckŞ.Z{!D1o1x=9YQuR!\Y,)%JbΪ[ dD v܃LGU^./1 (@Ϗ[Vl/h,B%Tf>) dR?e&s 2 sG[u3': ۢH+X:@s>^@ O@t+-giti*M qvDly \N߭IQ0zB@i`f ZvG&bT˜TOq 2Ⱦc@{Ր5}} FHq{UgL&Fy~$aNMXy: y)nuKO)腹#.θ k˃4DbiMv3^=.n~_..hmʜ]bՒurNqx<[XȶtM5 -ԇLXw,t slddKxaTʛVl2 1C h4+1^R;ˡy=Z4JvxB0@0CI>?Osț7X7qrvhӮГ,rĸ *D!D+{K-_K%>,TvE $?Yj1//0-O0+Uf;Q]غ@QI cC4FKH/H}(gD'AR/8{+|8WCT+ľ2Oݨ nG7 ɿMHt~BtU{AT84&C7,$lޭM`GLrHna6G 'P RE"iPc-8 H@i] Qh~S7/ُq~F 孠 Q`|HHcbSpMuUb]ݐuTQgY+-Ƨsb\)@˛&P 2d +BFfV4QxÂsDN&S^!?>)3 XNSu5F( ~FZZx"D׈BuOڧ- şyז]Xjj̿!eHɿ:9ؘio8ڻv_Y3ruȔAi㢊A g>.~wҺʑ4%gbn\#G,8Tm ?lظ:vx^˷e&ȡ5+mź]TBF&\(PvoʈmBuғM2"f-Lϥpx` 3]31 d8h[Ij'58UvuANY!2[ #0$9;oSokuXhZ:CT!+z<~']:e]3RQh=ʎuGX4l?9+,ح7%jPӢl 4f9jgYCj-,_4`p~}Ї5{% ])2wMDE՗KNΙF xI؇mJ#"ս%(^| n!/8 KeG @nO:@-GՋz f[}R6DQ1'(f i򎝘wRE9[cơ 'X,@|B *;j~eYqDU$2и[mUAfӠ*AZqKʍQtZԄ>ߠpbpQݽȌYf8  9$щ(YL9 gk#pNie6p6jy? c'cll#zgɑǜ(^ZL<.vmrKC 'r/NGP%/6R"|p躦.lQOȀL8Ӻqv5 ; Sz%#yJBekB60R E>J'??0X;рdp5>yo{"QK_Suys }V%Ev}e 8ӠAσ*eR?*(ud@pHFAԘKc,I[+\w#m˕"sb2yRMφ+bJGo+qJDŽCi{42!lf Wڋ|Qg{1bč` Q`-hXvF 6D͒Sj)&*ۜI4 "F"Yu<R_{49"͐g"l$Hfӻ<8n}*i-MPK={#oKq.[Aa?ms*B~A/|:B 4.;vyGTԝ 6]L*0+ \q4rż6p|OYԼ Q)IXSՋe3<>ZR+w4fUQ7Xxy D5u+4qv011cP"T 8[顷S{禬IeHho!5wp\?+W-Lc ;5M;cb1\"%8Xoql&#~U;o*c%n{KRķ`) 0vA#1%(bI{5zv!7g H~w^8M*Dqܒ-|W&}܆R`~h6LP)rQjA]AKGC~<~?>1X*x+XmD8YE04[XkM 5񉶡* o ˢMCݱY@$m3Q8}򗋃&HV)*:ܻQ=G Z W 'rXr-p\X>iudƏmA >Ba!:TςrLkNiXL_E*a,v,&\HN;[z9PT5J5, O$MRMƒXş` "sh_2tܘA@[WӄTpٵBϪ}1lo =p`T*=%5su;D4ضZ홸k--:%;ߏw,얮Qt1iH/?߃잳h"2sg|x$521I)'W㝢 3ZO<:ƭxpUVQ{nsk.<[*4f 3AF/+4,7 #ec1Gк)FȘoEvDG+Å]J\׸|ԊZ I}FKy'fV# X0!W3 `(TXz=Ëk ^E[ 0)!}[Q-_'mINSLRFܐzG? md<uSAz @'qj_\l$]$pu0f-rlmC+F8%vQo_XEO3AI&iE?%0  GJnT•M#3Ku_C&WvD\/T/bhM3{U7m`K/?! xz[v- sl8xhi`_gA c3-So$sN2^1C)yy.N˓+_`m4o#ݚgp09,=;3Oz.j_<2 ;zlue>Ks4MvO#!?# =$K+Y*1ZџJH饏A?=yeDr[9j%<%tPE ,'aJ4vnzjnl{& 1gx: #9\TaumFHF맶5)mAɤNsC?u$9vp2f}v*YxODP2!pZz˴67t<:Vn1[9:tLä`Xjs={Z zQTRaQ( >uzOrP|$j( {"8w֡֗NMؙ` Y' NaSy’>dI3IbgU*me8d.7u5TևOo!S 4ǒMxB5-b#ֱ9N?9&[vz/|}Uݹ&;OG88}|NpҊhWH_TzSG 9tC*{C~NBe?2uxhH yTp`˪^`aү$Dn+ݜ jh̟|L$1 )RXM-|ײmBρR#6O9ߧM 5;`+߻@6DLks4]eSYy4TsU!C O$f57:yp8Vړ~8x{ɳqLtѿVi8\UO}FӉ L7jW\DIfL@=6 qY?F>?LG{֐ 0`m<&m9NtXOQK$k^ϲQ9HO_;{^g+@#FXl›4nчIM%8A%]Ll9,+Nݺ Uuq|\ElnXk+ЦCQI~PjAz :lGaF :VYm5zH(cq#ghNI72S|CϞ$Dy& Q:2"}$IҪ/Q5ѠHZ$^ B_vs3dF"1hü.-pλ͛iDPdܨY=^@_C51{&Bc'}Xjlt@6:ui":_L__ ia,il҄ c*(SRdDr΂l{Z|y==/Ӳ8nl>p,6S3SXc~9vwYLQ&Q]., )b38׻FxLToG9 ߥ>W3.lƊ;4zdOfG#5_ 0eiU^4y!RY.Tօ:(#CeѪ0)]('^+{Z dν%2=VXtbUAO:#ȣ:`mv11_'h탒BbJ+E+o34ls9*C:._:hhr$cR n0g{H>8 Cz htf!>c\ ;.c?yۓ$b܌Pʫ R9"r{Es*&`lN=iQQY|1# r?[!s&'*CO:F=@\eh5cϕkKqy\Tk 8$<7W0uA''̻РikMwYhCOsqN#Lf #wuڍm{͞MͮZ;gHT;ܡuc!qt(my7ES95,Yq9=cԥ@$sb_;>kb/D ̭q"貘YIs|0@T:u; -Ǖ-H9ѧ 2k)9 6߼ř+O䖄,)ߦX[ŌpҸGb4$W!0,kr`B @xmg蟖EhƙLUR꙰(y{$C=\&(U4nFI4  N?f&O.$lMw Kuܴ|A'Θ6lUtz# lM|Cz.V{D,Zpt1Ĺ7GTzz2C[DzY$݅ e-j$A]q n6xd)Zyd)!L%!SeD8ڞ xOၝh՝ UG&?)&D{y]>FA61x ikE 2 ֳ3\5˫mNj o8ȁkU=sU}RS`8Tl,tnIb>}m; TفV\*CeM'S?EA XWS !<yHI>Aڀu>Eglq9皊<*]}]ՈD84cQP|mއjT ,|JRٮ–uIԳr'CCZQIkޤk#ļҺ!DYR >J]5UfydNrA5tcn B;c›Y ^F-/w셭irEgWÒ{ɥaxlW$U'@oEB&׫Q6ܱn2;N|*ŤPjo .U=>{m`[5.jvQt*{(Fh5vb$Xa_i23}{w`*ܹ"0ŔkO'!Tq5<дr~Xέ۷ +* | ~ /(NiN_rW,;w4=gT RQ'_WփS^WqQX8r~o temyJ|7>B~D7dOBDƄbTlpn1x!8 sAv/m3;ԱJY0v: E.e OgVDhS|8D(o2{Y;h;~'Ky$#5IqʏؘO:1voA$BVZSFs kPTc-\n۪7l}]wxEˉJ'xXktVş"AwO ћH{2P``21x76}ը #`xN!(E&^޾8F2[󬐝_Pd>ᑭ V逳jl."ܐ2!=7Q1/9E*#-θ8tP</nR^PvuS~d@jssq> kQ_ciخb}D )"N|;(P1H&:-6 cŌ5@z<]nW;AK: ۃғ!{z􈏢ѣi]~δZ?^@CVw^C1Br18O.*X0Zٶx ,q/x ,Ke<%03`tq8Cgc툜^A/AiQI/hcSC[C' 4 UU1a gjx]ʪDo,"wδ!k'S108BP7ݬ7Ű =!F!ڤ9>ˈw#YtfoC.Ju :25޵1h]R ^Ԧm"4+oyX26Sd~EZ)b B{[ Md&A]5o$UaXuZRpo1?mTIn?%Ebl=szb"i-%{ \HuF"B>U^6qL;.)nZy#+͜ hn`ߋ}MB[I[\7ٻO'ES6' R$ %g 3$q9' OI*;+\].Ό|&6ӃOk >j?j!E:i[A>lgSVLq.cWpROU3Z儬`启C'A#jNO,׫pRC3m6)K:_%8F&();Gj~ ~F֒v (nųh'2*[53;}KJdw06`Q1;`vTK$M0^6_քbHy2."tx3~YM/r;|&> ̄pzԤTzBg`ke)7wW, 0b (R-q&n -q9yD^.n/ØkEzJ_(8gC"G?-$0t#R(ӢvQ8=Ԛ"vR\Swj3➻ &HuN`̦ YB[?Tm O"hbX#eBLxu`v"-k<ؗ%,Ǚ*~΄MlhE,4a\ZrJHYK>(Of*-l3Q+Za4RvbGA+aj7L?g_K axleR0M߾Np34Gh33} M'@6.ihzsܝVvIrz7bm0KLD[,0hZLEzi &Ճ?8#K{ur]q+$8_ \T(%4V*tN_^נ˹ f^+QW]AuyH9!w) ^:\(ҳUW͍Ot;!꣈\of|mG ٶ? /(bVos?.u\a$@HPb#Ec (:zahR˚FT+3 PRCH fT Rlk(rh{8X F @m)lR V_ZBFخHerSK] -%.ƹ_JȵͲ̠7/ "ڳ`)NKqˈVHMkMt/䤞-w*ރgxGhmNDBc7ppW0,5M2fz)qSJ]N@<(N\FTOҕWO.3xRosXha{ҷ-y ,lx}{s/֎LYSS)ʾz-:aH )^)lutONˣئjj*?OhR*KS; ۅzq>%xj#f+j eږg6' 쪄4_oFkW487Yi񳀼d^ٝ))q˽?4.f*G;@1 m+'կ}*+ӛ#Z ɗձ?"?z1jKՉ<YK}~b/SzYr,)闙Su%E;pIމ |x; }AEzfU"W`wɀ-I`/rS@aj oDPVM?QɯRW;N$u;/gKk"Wu>Jw ^%#mI V賔Zp薓I}N$nY߃M@ @j5R.AʵR3o!~y,e⅌eWyP[׾IxB @X # dوꃕe6;ae9qgi3+f-T8ϰ  1t FqYMXS(j_.)(AB[1^@_iD"Ds&Rn);9Ű4. hIhs3,ط61PM k,,(c?ʾ&k0ރh2k o $Tތ擮{( L>++[f6ф=w"uWq 3X6]@yG\Hը Ү Afν9ULD j=^ /9XMbU{)kq{G?CpҥUX@xD\Ge-jHQ19X"<׃Ujm$ЄN Dڄw.bzO߄D M$3g"صCd3`Ȁ %iz,ĀABJtn.+.v[2*/cH$>_cs c'\k2dz$ڟMRzs9uے`{ H#4D,^ Yq>` VwMBghpt>Nm=X!,T%R_?c3ͪұϘUҰ%PLcí(\KÿGfeYC6*Oih?0J;R)OʏcIr+)0r$t4<2wV:ms>p˳s&nÐ`N'$K礗xK0`T{0@$`X8iL8.#|fS ,0⢒?E:l+%bgg&X\-C/dʠZӧ^K|bٵiFg 2r$ifKb+xo98UiD+?ós0Lppu LcM&{kM6%Jwuز"FC?|\hw;N@!$s@5/d 7Lii->i:QEG;決,2.?]1]ZޭY qlz-k):lnu,~[K#(c8sUHS91 kNLpMFb O-M]'/¸H.pglj:nC>넢z=:d Q`[`7f b^2~CsXϟ#\{6>fBGt͡רWJT--24NF6/L߷+aBaFhod5;*X N63CM.ɴzrJox\{kh4FP<]9&MDT}&)F''=g(w\/j2Cqgb$LHaWt U_yy69qCYz=\lZf_+2y8&PbO{h,B  +U~Gw֤kՇ6wMo-!Вϊpxyz b6lZwxk^AtӤW$zk$D%-յ{49 "eCJ ZГS&#ǘ4?:k*(і]X,+٦dqG0En^Dx'tY0y+3]J;}ր 56@R]]7ruH0T)i%$lM/؇6DiG=0ˮK\N Mn:Uk^Se>G~LQPiBo gԏ 'NK1Ii}a[&@'>vt)!/-|- ;'/(Y<3 X5S%˭y;Nsʥֻ!xr5f|NV~6uހVoÁˍ Pιde5K"jd[k!&bmI\gfr  Dz,C4oh<,Av~0\AI>#k:hcLu)/(FKNLjqw~ O DBVHW%˸)~ Z?w:e-#-mJm̕qKфc_j;V+ٿ@T`x P%EhP˛QʒPŅ 7tЧiL߃ 1{P*HxCm#' H@Xkf D` T[[/v +*O'aa`@=3R콗g*'.1:^W &s3]oTpķ`{1xRN1?h+y{eGmͽ -!6"\Vww^@#gz8>UY`[JȪW)I@m$iDK9mh'>p}7=(_ *V[c^>?pE 2 WJٴxTPOÂq"B3!R^hX1+X^ҖOٮ!^Z#< MIS#^,fX;f0[yЗ 8mZƀ֑al3`7NT #)\{bdE4NWAqԝ կ1"vLjH(C| bSg+#&2L׽kxsv|  V.=){ cBJ4b=e:%H 8uPcͫȤgT_дG`Yݥo"1?[ AJDC#/h6:=YJ"4fiiBu< [o6^Jsr&[Ut_*PS *ЛB.^ȭx?jdURyׄj3Z]:ZkEPs5z%XFW3A'zVXюuҬ;:6||aM_{K6QPuC͍)(ɏ &Ouzo%0 5nup)D0q Z8wKhP V.?ojMlN}Y" C(ÚL8W ia,`2 ֓[.7q[U@,,lO^L^b*O 9¬ ZH@[XuyE_o6~-%SPpFh"TXQQf!dR7Ө,~<>AŷzSW <1p "v7=~n?}.xE0m5ܥCqy~m#`2aWpPmiG]ωԋ#R|4ʓs'!ᚧOF%H|eS3C/,\"hc[J. 9/H6NN\ m㤲-ZtKᘴn7d#}NJ>}TGV( &K| π!$K`k(vqC&Zv-`SHIoUCx)|iu KX? VʳP*\#S~8Ư|D6W V`MǞAU}O<'8@̛Li\ץ|LUhQ1A}#[ }al L@9iK'ڴk&01-jbt!NU(o֭cqzf,#~Ȋ}ӲշWw7L %Ǫ!lD_+0]LF h z!Pe)ZL>Y֬4P =ЁD&,[^hqF >mPySՐj<O`%R 4Wзjv K ])gџ_PBМ<޹e=DRa_r]p_sٓ$8[6#fv%o\a--hƒ#\ճ: \ 80ZXϘigO lv!{O6ͣ@R%:RRn(l;gsK-j+f+O1tqXlaB#-ߥJӲipc nb}w6btM;=~m*+,9нVXDx)#1L,T;cNͯUऒE(`JwW< :|Ir rrT`O Qv^ZG6qRÐ SŢ,mQaX3^+Q:𮯾K),뇧.0=ƣg4sa׍1ZyeFlM`JW@ъg#CbEɋ>\7 TF.R 5zN6?a>0%MӢ_XqY-=zN qpd wU K.*V7|g\1,WShaHb斌bzUk(~b$Y^.W@ ҀTB F&`0 D>AfHp+/9..=ߟ·xEI󈨱l>A$#NnB3ALg J>p.In'FѺIneIɎ$E LܼI)~xL*@rq"&w|}Kg%Tłkq.ob%;#OvE0 Q9o&@bgII2\)0 )Ta5܁  P ~:bY`ϫt;gcZE"l¶|!Iьxe2Y9 fIQ:B`<-ClG #*v\?q!q#Hl1yV~LCų̮d:u12#`Gn[j)Hf]T6y"Oq,O$pm0037v=2>4 #$64@}@dP\'4$g)xȥMfуH2kP*|WZBVW~zIi f8PGiPگh<4?!DO{¢j)Jme^Q"Utr:Hp&lp|1q2ެ>$Lt>z{zxY WL0| ̞x{L$sX+FLnʄ/}ed6[H_p XjA(5*\qXs{̶hCyxlz;L/Re+#XSoUKast:PY}_~#-UrƑfFϐ9). Duie}gxSC`쒗)>+nBi,dvqE(P_Fme}/&s6W W=GP>{m[\3j&π0vPjkx_ ScAܡ՛H#fv@ﰟH !iɠRx0hB&m&t;~lE-Tڐ$£SEJ =TLSpqFXڢD J#){ۘWNqY1:PgYӾ%h]~%W;-K`=yNY [5ʍuO20˸wԲ" M\0N@.TL:soGn dPvH魄]v>IU%(9#+b]C@<.3XnFQ~3ŝ]5W^s+f96pvW[|{MRJKWqiIoiuFul&UmHs*:"#d/d>(ϻ PBV^&6կ ȫkJBӊR++Nw^6JŏJ"=#>yxUž Tҹ{)UHcT~VNG#/#| 8*L"WN,g ~&T0o-qK%zb|Eڥ{! ӛy/AvSAqBs`>lg^oaP=;@S EoWL)ZrsIN7"\j̶sy3p#,NC}(y:⌊& ~=*8~j$n(8a #ThYϨ[ |֥5Ӟe1t$kRƂd-@jI`69$ƞ脇8'T$EdL 9.F_"˃gM6ӌGeBp($QW5Ҧ T_ eecϤD.2M54Xu>ۊ"Qb\qRR0uWDSM- >.jQ(wnctHcؤrO7_̌r?/"\M=!¼ tMB(y0 n;Cیoa 㾥n猗 ެF+!XĮY:bO꽀ϓz&Z@iF$5 "ek*!ֲޓJh})\ dMH/sKۥħ,ܥcg6)ڹkځ Ţh"Dh^t1B4 \m%`6-hr.QsX^zY1 =q;UO*tx;,ożSW<Ph/h=+ *q=F2Rh[ӒKJJom,9 S@.$v@”Ym>XijK- :`|5j,j6yc@Cy',D+KXOL~èXzzlu!c@c[ػ N/eYx1ċ|(Ch0HDhc2 TN^c+߫P=흅R ]mRJ~o0d &f!5u,K.h1]OCg-7GD@M>!6>櫭6-G#܋[D2 k0UKI] gVg5*J&Ԡ apn^x 4R-͆RīI+g}ivLW/vΓ+v1jHt D ,;$iB'n-m1&S<wNƦU)bM0N₀Dtx:V+f$Cd"-Gfę(rKjYrʿ`x!+ޗs`2+֝ϸfJPSG ˷!н#GԄ:SgrA&36+G;As\>k`\Ϗh}Ep0ě܁t1ӷ '^> hW׎P Д'jFw~:_&_x~}jbgr6^vGI#ls#YWrX*AmݽK 8x>\  -_WVIYI36@PfT "yt&b. Tv{EPޅ$~҈YcJ?1yǿyndq.(94R LD |r#" ᪑OɎ%U@{ԇi_u% cY{$hSçd=O$b§t:3Q}JqCC0b+V"",Y]qss0̢-i%սg.杵ieI#N&\Ews,aq2jO_~Q#%SG4!, 38yoQ0f{36 Ț,QfO &G \ bwS+{nTBZE |{ PFJRq b \0͞波jH$6> mHGRB? P "A+Il'.XdTivpTȜOo-n-@ؿ]\IT?2AvU/k3-5WjG ]u3goHɡ< yK<5X3rl3;/I2=F=ˣ 4Mwdc \ 0@-a_P̉j!-5x)ԟkG $b2Z'T5\;6oN s 5MK~rmO<>#pV>Os.>8l{ME)]?:[|8;҉$Kz򒘞KQ"Wx[gRQ$EAn=!0j֘Zyc@eN0wا졸9>J3ICZ'W<>]N4dgiy\ݬ%ֽ&ėQ8`WI/ƧSEq^ &̫˻dwzGє9AoNˇ拜 h}F@0z{I)k7_ wj& e/iX#`."kՁ- ?J CT M/ς[DXDMi(@/} 2*b 8D$OZx E_'A)fp09:+&4Re1)se}3Ӷ. r妥Ify|@ZV&kJUħю[9ȯvwC )}L^?㼻 {Z-I (\V9$U%X@ {KIax5I"VQ bZ1/X$ҧf8S5[^qaT5:$)'>5L* syܤHYaCPo(Qӥ|eeInFFtj;k30-0M2ܵ>Ț2_w\붃ڦTdXAکT?0rDt^y>cm N!M7pex'ɣ  KHu2{Knnb9NGET4)&/c̸ƉhF"cJJM7aʱ GZgY/Mbw ߈(MY Va}^Wƌv3^5SuފC+?NlvaTX3;4L$0285omw_3`^(aRT楗{MQAItTIu;gG3I;IpEJV^4ƒr7}x+l:w`#1]~.3ql/k9mTT:،}4̆x,i|+8]^sb\pMhnNhDHUmVBrIX-t+ CK]tf6#]&/˙Z*@ҷ6=5xLy sʉ5JaƟ9EӚP4?b#r>jRet K{w,L} ٲP9!D0sE#V *OwvS['hGE/P[9KjZBdFe= [L,lFuTa^nU$H֢2S쮻dpX$Gw!gtuF:'38Ȭic9%T6&~@&OE +H|t#nmI;M梾FiW(񷅇x3"k l}1T "w~L҅~*EZUp6*L+hvxS1-\5\1 Drrub?DJJ5:bפQQI][`O2I x'$譑0NQ;4C9c'"wiwGڦsk/oO5QP}7GO[Ԥ+3}-ǿMj}B{Sоϯ,Tri[8(mv=2&}hc34$ + [bpaS[0O=Hbd2O:<N_l'&*X|AKj4# ͤYfBYM4o4Nd<FQ('<@7H3fevk~ÐPǒԈJ:ZlreNs٦MkaLLIEI6~c ZÙsQ@&*t< ^)#lyVKXښe⚱E-\Myґ &&_byN"PI!}H썼qTG(;2f_q'`c@QAӍIa3+gYw)6! (t?j>gk&{%*5{BZ۱d0CBdlX݃Q, 5v~z^,U.4qȒ-ؠʓNb"+CbC@{ CayW!-.AovB w5CЦ:I;69$gf]Pڴ릒S ᄕtFi[hOKk+ȥ­(5GʾUTe@fԻbD).6f|wk@s! Hߜ]<f2Azitǘ!+M8 }fBPɮ`m,a^$J;ȼg~*A!G.=^ܣjX9VQE27Os^&ۋ}ߗ躜Q&=mHd9\R$cɉ#hE-J;ӥ wo="#!T7 a8[{erl兔$νu&9GB* ڢvsy[&&Wz}m +>^vX鐍:t2K fl(3*knNCWNY; ]qQNf!a2 G5{s&ۗ" _ Hl85v&}eB'z>LQ1+Z3F SeP%19X3;=ܔ̅̇%LT>畸S)]>~3$VB->TU!߿ S;=G21BJin7zd.T$z_eb'WSA*SqZ< F"=gaGc\#TLoW>rZ.΄n?'Y1Huhm C 9݄I*kĠh!.`d\{ q޼~KiՉs-nsB{bOXY]?$K*GVtp Y,/3E7&h?-Ƕ:gxӪ1!B=cWhk1B|YK+ŵ|Ƙܞ0'v')68#W ӽӫ_-*y (+C3Ҫ7)NK&Yf051X(88V]皃߂VzPOQL,><'_뀏 .HAî?但<+ ܆u:oh}K@s,,R=n(kDq+U<_<}pg&gn rzMԬtꜸVBcfKK&f$[M]NguqC2$m(8 @",}cpX#ZnE/Ѿ\ Σs()pB oO6;xVz(LBqzdƸpXBڜɎEV9 *6yo:*mv[bE8kY]đfk8TگZZk$1YCCb[r1]VaEc=Uc@[ q@M BuOBfG +}7|>)|^ni%[58`@@N%zU .kԖQX zPg8+X).؟< ċ Cx!Q٥6pdL0W9p{gxpǣG2m֏*~~;#!#nl~./{FV4)]#,f84# &Arx7HI?ϊݩ}lF2}ɴOìs# s(/;AH\+g$ii}cD؝Y,?[Y`7 yM&glP &))B. ˣ؈҇LhW1{K4f4Ef:Ka(Ӛ{BNU=r`#3PŲY;fp;^?1hrp'ڨaߦ6"΢y)\jqvL9yRV|kfٯ}= N G j[sC:"sGcmNtVLjƽM㦙‰ A,!l x[xtQ\uDP<=ʉ~(ّL2󭏕9@_@b;6b94t.4310~ Ke|b'H+\̴2~ %Ͼyn$#R7o.1bA<4$HOu'1)GE\39ozws\^V sHu8u,7FKqo=)~u:*{5c[WqO2;NkψRX82٬WO/6X)\z󻽸i\㎟ @2ֹigA< ;hW [FQrn{%9oDRZxR INf nۚ쌳%q or)Z,MwU!<˯ s¹$`-|`JXxcl ^Տ)d-ߢu>TkFW̝q:b~Vծ?h=+Ҙr2=J8Ԝf[iYB_E;P*8nt#pQ_O0^TZ H*ƙfJ7i{ڹ/%< 4 !!< 4Kbc,+aq~9f;yY)7FǓ};dY$ൎ#j`2u.MUV?Af_Su-7QDx(zw\9yrGe 5T{Kw@mKrSEe=3raMToNs!cóh?x >C4P.5 L&૝R^'cV?ZqRV@TLJFpqS;zFd 5. $)$iAp'4G@YhltCG8, '9^`a],'AMOfҭM]X^Q[RQB#[.h,Mu1:%S&9jRPzT7H*`o[%ϔ1Ulgۅh\d>OyaȕYY5LW< n㌖UrDbZ7q:_Z *a @@'A;G:%+ku>~1qDp[_%S^xYxf7}S´7`Qs"u49Í^ϐ-#sDi!PyyVds̆6Ѕ)9Q_+J,h"#/:jQ֥h*g,Lk5 AB UcUhc cgQsI\phg&=rZl5v6`ͥK67htwvQ5[~(ob@+\:w B6mAO,PjpzekXĕ_241C#EOƈ~2rI 7L=5wCJƗG3# UC.ZL(^TD62BWq\"GhJSuöhKq&)(Hvr@5 QB%19K]C?5`XŸDW六zl}5DG} Od+bʖ-tr[[=]eNiGL[JD~l ˢcaZBs7ZʢO#*t\7I5w ;vf㨟:4g<"AMY5z q-&bZ~XMFeF#z}!Bp{}i[Nkg-cm eT>#*?(X[d'!Lx)YۆCڢSJ=N&MS=С[*|yrId1ӟ2ߟN-Q "+sJTx?IsDt~r#)*%# g"ąr+eo='\ueue6:.M:ZX6i2 ]cKhМprJܒ/TCP-aW'D;򣫅zyaFh?U{o $/cnz 0vDzNHmY1ZB϶rh%%bd tq9ШVW1A,5vs|L= Ò QHU#r`VXpAtU+sKG{ cC$^e8;w(BoXٟu{Jz*n}Rq[k뤯7-=O|,qʓ!}{ϿV!x`xj@ !æz UqݵoStq?KutP,T>': {W.' 9!qGU2e!N#S1/:dGACeۣ_@)LWGN @eC.* i*̃sPPQNBJ'G [~bրw69!Y5=] [smUpU%b8t<%3ծ! CyH,0^Ĩk!^Ut?~ҿb_ۑI6ZF/ly=%" bNY=c/MszQ=XFV(06+ǜZ8g'ٽeI2s)m2B (?2y먟F$PwBΨ;5lUa[.ǻr#6$Z/M ؛sߐ ʳ 8 D5 rlđtTEH=C}ݤ3 KsmCl$%f;Du .Y]x?*\p=W.7n Fj fLڤ$NTpﹼDJ0茲­|m.#> Dc-%CXţ,5: RrKFx }iY ؘՈӸ ba;CJ.,SQɳX^7LCQ JP(#3nؑAGRb|Ni˅ܟ›!ȮyX7]V@KI=#|ü+:T)l;T ;+=e S,H-۹IfOYd Fvp6=fr[!8>t٪ÃǶB3>z*>]*yG]gn ;΁1198Ego *߁e(EF)`gԆh΃CS5l.>o[)%8'4tQ>1|Ы2lM*3'UM"YptTB/6EqݚUqPL:[]s3㝹bʷ$ƹ GU 1"4 v1Q;ݎd|ǣ" Kv4>%TvHP>bhRY֥6&XU]z+C(nl~uu6%D"TQx~tmZ)t +l .6wsuD2NY,r>Φ@;z+Hd[ә|4e7&SKrWE Q>?N4#CN򌘲*ɔTvMA"eeVvQ( HZk Hd}fޙoUŅ딂vF偮"Pb(:n&(lHvt濖2ʲj.|i|Dp'ac=g-81cxe» &>?#["Xy[Jv5gs׍@{j}3^PH=V]R֛ý0pvJ6ҷu3%&b٩dIMRG&~!2K?!P6t7:!y)>FP-bC P| 2 咓2NS5O |+Eh لMP;[ Zj?> l¤W;6b@THVQܩJ3H@#}% q_] Q?od-s ˶;kۙpt4nu *R{Eq2݄ڀAq}R} 4)LDA S%ů@MFFiĕ|-2c㬹UBc,e_QRma6>n܋ >U,oQ:FțҘ&7C0'~H֚M.i]l"QO9!Q}GNjl+M~W1{eTؠd'\9GΞ|SgBhěߐܛ7 г, c U 6Ǜj~g'K:Duo-Yhxk&V"kΉA3RmK7(%"_=| v*J8hC4$d &Uo]4]_p|<l^9I:? 2qQI+;?nؾCEu^ i@s狟aJa5G '-H>~b/u\L.!Lyq afiYE #.pa7|) ɭkٴńahXr$Z+n] أ,Mf2w]dsњfkwxx_U/Ғ!8˷!U"-Ȫ~w@mvȨ?>GR*&.8N;j35^0"(` #'aDC2V40`dǴ͎/16E Qѧ7LъmkE˥/g|{~O2g4TgKJWmSq0aKQn/b$Mof3ŦzSFr-lꋔdp3fIb&J;!x%$UEQ vܹ1u#a-a`Yā*%vwH-(Ԩ8Ub8Ҟ0zީ6 5VET2ST%fͰ3g/Vg͟ lDL5}n ^`+Wv^[hW vlq} y6 G3-#KlY*w Y B{+=TO-0`yo܎ rxF=%jj̼[^OlX/9Y5V4)+TŭdgNENh]'qǁo ܼ\/n|yLE:C,*x+=,fؑ}waU' >Լk|ʝ=Ĩ R92TDA ;q2! 85zgUVA{)[j>]OD'Ou_Fap7v8+eC3s)X1be/scJok$й}a 0bIv5/[p$6R-̉T}PμeUNp1Oz̧Ӆ2{ܴRdx]|W<U%6ha $k3PH!jgjK\;N4Bڒap+!Ho1 >6GI P\ob_Ult|읰S ؐ}/5 (?Mf.q6%~gp MI1NrI"x4'bxCM~±lABGoky7s}}NG/Pi[ &6yT#r0knI?dq(c2: wVPdT-&r+fSLwOfY6(:DuA*ěx_/1/AyzCQ U|(-&KǺ#A4'It&J oY+4Mi__zTqxm ENw+p۸~ݕoBjϺr 6ȸ&?#)'$eL96)mZ_qT.f>hmkj,Gԁa’[FO /Jf*TI|'6SrѸ=)ZoӤ\FГ( m] 0g |}6fsW1W.Cw vsg<]}I+9f]ȍdYjU;G1x, 'q= dNu$?mO;P[);Ԑ8 P՟v>F>&is;Z@ҥ!w?3T(!ɮw4dQ\U>-^7}r˻ h -l҃,DD< hu)k*4s4/bMyMțE.GY pڴ ;ÛqQ/y=r '+x0v~ud=5_i>r'Hʏ-<~VA4 坂P8p\ [{ #U{d-c5 sqp>Q[xev'^JO<.XX7 F-'*wsfQgYz Eס IxӜ}LS$9)[Xm/wUMpR(P$'&33gEWԹAe"̑+w'"pjX(E-ɹ6Ŭej~0_3mi@;)֛J0GB9OoX^%~Onϗ,g 9b+=%ߗ) ,Y_y1\u|K`K{ /ȠFs-cOgGftx5W8I ufuH(G(GH7JK)rAK݌)7aEUߤphz,= /k ~<$Ȝ\lqĪIjvrbD~?g-v^J s/^AbiWtGj;daLխZq%;aw-r-3pwЍ: H "&2n8ZRڇ{##& .ݲY9{bs9 BUu6{⪧"ň'mX ,\aoD("ydg,k@c'ȓ'TqӞ݆yz\fc~AgNcDi(tYc1aX / '7,l|#" Wٜ2'>\9B*W;yliz1ر(r\rnGʙ{=e>FIUG.@ϯA)~+b' JItB|0153R]cwR og Mw SuIR" vM7kþ=jOUb59 `Pxr1 = e?s B!B3eyEa&ai{(}qq z)c$WC7ԨöW$ݦtgvc)ED gc&]`ΛK伸jj1 ,%ӾT~H^z^ˬ $M˄ըɄkN!:!r/]ʻ02u0 60̔ v>(z³Q QB KU9*pgTd[\Ƣ@!s^Τ}k'>V8Az$uוu)]tg &OE;#QβD}+OvG/>1_ҝʩ }ĕoWFo IDZXZbQgJBںΒqL] ǒэY'oqOj1a$L=*.${zSiXD̥%;C9Yai+λkp˳1iIƒa ^;^Y,KQ"m T4$F-Il-j}-=`ʈ0;cJV/ŏL5wH [R)+P(ZQS3(_)`Rk)b$APҌț ڒ .Ӭ.\!5:_0%H9 6Xk ʊ!Z b1 )_ctp43SFl>'omCz\žPg~`݀@aQ|צ> kJ K<'f  XY,gzhܕÛ8g@\#I|Wz񘴗L*t^>"IjThe]ezYEAЀgWؐTڮ}vUz>YulxϚBDYeKߣb !-T,>$Ig*'8X[NѸ\J< k䮾M`e,c RQhC/ hF^ JYj^$U:ɻ5(Nm3AB< S?MNh)&H~QcsM_|r T/#  h;y6c{rv\b+܀/C-@v 7[3G_e^dtџsSKnu2֬=3F)]8qeجz?A]wnVMsygZ #3@=Hʀ䜖Z5I6oIJV AYU$=1(MbZ}xYxv4FMfsQS[n /v@@yC KXNѢ5iV@&@dZۚPLX6r(!7.Z'EbmfP2\Ũ[wZU+sPPw\C4״v7yuv/0dwu: C~,4ۢ>,Z}nc as䜲%=걉^5갷ޗ#!*qW VD tIO$l}Q3%}h- &b/{tWf}K !vͶo,N8HLS?2?EރypSԡ.T/~$?,; gB u 5pOyx% s%97g[oRxč4([Qi7N=FMIl H3 LA=5T&TLruzs @e.~-~;|AtbhR\?T':3tؔf @] dz sy4)i08D弲}ސZ, cj܏ϔCX6ʦ2dǎ}GAȯn|g +8Z{޼:K!w'\Aى`t·Ө !Ty]MuYXȐSZ1˼2c:7Hv"yJVhv!wI3"]l/q-JZ48xG9_6%b_iI: @jr1/u"Uălf eew_A\%We J[j4%/hqt'/]QRΣFˋcoY%hG|QAf[Ș֠Y?EȓZc•&@s޴~Ql1O P:INllUzYE&:D"H8X)taJGvc|w+>`k 5E2fB;/^\OxT}MWą0Q,U][Qi9>b 9]̨JW/}H S&SiTv]SNmX}\T{َoِ+>oȨ7l9,aŃ4ޖɐٚojJeB"\ફ(3h@3A# #\?,֌p#?BV`g@<QMJp~9;VN=[SqraUkip.+>/fJiMktr }ҙ`)QuS,t^i{5+73݇߮hJtb IK@xb3nHN%ßςtH8,/!>.9/?hczܓye9ҭSt.6񍡠-U=/.)̑hu5cYdˑ'l;8^oS?#ds@h$ vԤEs4c<OACѿlr%3nK'@^H($p),(?w3~$cs-o Ǣ`^w'$WW g6y\i1o8g-OִiP_BFD<xRd#FLf4̲fGۅ)ݚ@36X{/o ;l d~L݃iúۥΝ (\&`Cc $~A= 8Yo7r=mɭ.x67oBUȔ KWe=_E: x`n` K`#kV0YEv$(OW%F9y9~ |=) ~DL/n}b;1`wɬlm? KIl,C߄twf 1kUX.ۏ{&!1ʆUx?"bwTC,ٌ%ؓOtx| ͂6/gUv$Fdd.jLfX|02NCJ76-A;l?}u^|lePbN/Im>yih~TB؀f!id:f@1 a޶B?e,5&H9\VpE iOK=DWFRӚ3)>w՟zwzϘv`itgNg-)hMwD^@}fzM_x^qtb9YS- Tf?)nه偆,j/A~xG;يF qj/-RO"+!BXZV`'U+G^ } `8p9w]tqK7o bAH}C;8Xfn>H\ 2 kiVl@uR(XU94l1E,;֜^8hHzd5y>}̑Q c2Pjn~ΊTٓduawH<+ _s?9! _>MHb&]O#:稿Z4nCi0M H^F*:iʹUXz+:2WҾ:t_{*Wͅ.g.*mw.)A?6:vk=񥖛WF)vK*x۶ڸ[ m2S*֕ Bay¯QDxvb+CKILog@*"7 c:dfʬeP3?Ey~Cr1<3< (4gpV"g[) =ɣ& r?Y"YXn=ЉDZr&5 ep ?wNtvj0o1C̚8 D, eVDpcQ<@#ԙqc4 z4N̑b2uͩS#;53_JWAGOfӰ? k,fN$%Q;=J7JO9榻]^qt@TT0["҅jv&xPJi/NJ+L_]Fh#a\;sI̵<4e85P4x.0yw`M_;ariHr_|3[cOAAgkWJ|^ a SA&o74Ѥnjp))<3 <.-$ +%6Vz2+!d0JV]FJN4O|SVjW^>c̢/$xߊc?3q[W`/Hչqa J&ڽ+!UT P6W~eڕ>C[tnR|Fd@JJsIo^B*8JPEV.-(;9h;}ilw̐j7nm釸KA;GD,}@z\F2nKަMHIιF }D_B`$Q C`CPu<8TggbSpGf&܄},I=s7_>0g/99G4e~>=jA`F"FCo埇c䭢GujkݸZ7HVp c34=)K@fOuwȥC: %bnsg&n;Nѻ n1VZ:():e$J$S̵_ oiE1D9V9} ^^ _ &+yiãصp? m[K_G?Ma ՟J#Ȕ H䞠{y$j\Z 0vۀCIIZ׽^,6:BCje`^J-z @%rb=9"è-V8ٱU|;O$'X(BU<@[ ormz[w)[ T#@XϢИ RK) iyس!I5DV/ ǸS A` hde*+%l,hO~JNPOʡC#5P,O Q4y#N\H\[O kC6i]HBYvO<[ѻo`صg]6 -^oX<^3^PLg|G%Ax C<ǜHQdf`fl_&uK3bY/Bހ bо/ u݌cC Θ\- $ըBCk|˿f5": /!v&u)iӣ2Kjv頁o9̺͋mƈw;C,]T8@!H[4] ^|B8(#Q9՝L&uzZ?1ڥ;uAKQ!(ȶi$kӵ_~[)h/\=@PC&@N|~; 0̼+8#_Gǯ(DݨpسR5 dySqAʤjW:V@+SIX[b):E'a6M-)ʇ+Pe YZ