libsemanage-python-2.5-11.el7> H HtxHFZԥ ?*}}"CJz1Vk޻IA媄DzR49b1d4e6a50f86d9680efd8a750cf656bee5397b%WqOhg FZԥ ?*}}x|/Bi4K4#4\DSqlNMcH%0|>9?d  I  !PV`t ~    .Pd(89 d:.GHIXY\]^:btd eflt0uDvXw$x8yLClibsemanage-python2.511.el7semanage python bindings for libsemanageThe libsemanage-python package contains the python bindings for developing SELinux management applications.ZϔCsl7.fnal.govScientific LinuxScientific LinuxLGPLv2+Scientific LinuxDevelopment/Librarieshttps://github.com/SELinuxProject/selinux/wikilinuxx86_64ݘgnnt큤ZϔBZϔBZϔCZϔCZϔB2c9208e7c4d2e5bf08838ade4fd4a505bedfcf6a29db1e9152004a74cf4b90ecdee855338c1037d2610c4b4a2d339e1ee8193a2a34eb2425b41c39e6703679c9b9a373268147190f17721cb371f98efc6c55c17e455f01529fe157775f0259cbb9a373268147190f17721cb371f98efc6c55c17e455f01529fe157775f0259cb12401b0460ad6d304038986dbf1017f7fb5e2b0d4bc29345f7aff4a100ad7d07rootrootrootrootrootrootrootrootrootrootlibsemanage-2.5-11.el7.src.rpmlibsemanage-pythonlibsemanage-python(x86-64)@@@@@@@@@@    @ /usr/bin/pythonlibc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libsemanagelibsemanage.so.1()(64bit)libsemanage.so.1(LIBSEMANAGE_1.0)(64bit)libsemanage.so.1(LIBSEMANAGE_1.1)(64bit)python(abi)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PartialHardlinkSets)rpmlib(PayloadFilesHavePrefix)rtld(GNU_HASH)rpmlib(PayloadIsXz)2.5-11.el72.73.0.4-14.6.0-14.0.4-14.0-15.2-14.11.3ZH@Z@YB@Y @X@XX2W/@Wq@V@VIUU@RURkR^RNRB@R@-@R:@R-@R)QdQ@QzQu&@QfQQ@P@PP@PQP@P@PP O@O0@Oĺ@OtNO;@OO@N@N@N@N@NNNw.Nw.Np@N\NLN1O@Md@MM)MQ0@Mt@MLuLF@KKsKKKf@K{@Ka|@KTM@K(K@KJJ@J@J$JJJ#J#Jyt@JjJW-@JS8J,@I@II2Io%@Ik0Ik0I7@I7@I1.HN@HN@HN@HǶH*H@H@HW@H=I@GOGOGOG@G[@G G@GGGW@GSGNG5@G0W@G'@FFFFIFIF&@FvFɂ@FFF` @F9F/BF/BE@E@EEɿ@EEEx@El$E4D@D@D@DC@DDD@D@D{DDX@D@D@Dhm@Dhm@Dhm@D_2D?D*vD*vDDCCi@CtC@C@CCC@CC @Cǖ@Cǖ@Cǖ@Cǖ@C@C[C[C @C @C,C @C @CCf@CqCC}@C+CBCYCYC{@Cx|@CtCtCqCp@Cp@CoACiCf@CbC`@C_oC^@C\CX@CWCTCTCTCP@COCLCJWCFc@CBnCA@C:C3@C1K@C/C(C@C Vit Mojzis - 2.5-11Petr Lautrbach - 2.5-10Vit Mojzis - 2.5-9Petr Lautrbach - 2.5-8Petr Lautrbach - 2.5-7.1Petr Lautrbach - 2.5-6.1Petr Lautrbach - 2.5-5.1Petr Lautrbach 2.5-4Petr Lautrbach - 2.5-3Petr Lautrbach - 2.5-2.1Petr Lautrbach 2.5-1Petr Lautrbach 2.1.10-18Petr Lautrbach 2.1.10-17Daniel Mach - 2.1.10-16Daniel Mach - 2.1.10-15Dan Walsh - 2.1.10-14Dan Walsh - 2.1.10-13Dan Walsh - 2.1.10-12Dan Walsh - 2.1.10-11Dan Walsh - 2.1.10-10Dan Walsh - 2.1.10-9Dan Walsh - 2.1.10-8Dan Walsh - 2.1.10-7Dan Walsh - 2.1.10-6Dan Walsh - 2.1.10-5Dan Walsh - 2.1.10-4Dan Walsh - 2.1.10-3Dan Walsh - 2.1.10-2Dan Walsh - 2.1.10-1Dan Walsh 2.1.9-4Dan Walsh 2.1.9-3Dan Walsh - 2.1.9-2Dan Walsh - 2.1.9-1David Malcolm - 2.1.8-6David Malcolm - 2.1.8-5Fedora Release Engineering - 2.1.8-4Dan Walsh - 2.1.8-3Dan Walsh - 2.1.8-2Dan Walsh - 2.1.8-1Dan Walsh - 2.1.7-2Dan Walsh - 2.1.7-1Dan Walsh - 2.1.6-3Fedora Release Engineering - 2.1.6-2Dan Walsh - 2.1.6-2Dan Walsh - 2.1.6-1Dan Walsh - 2.1.5-4Dan Walsh - 2.1.5-3Dan Walsh - 2.1.5-2Dan Walsh - 2.1.5-1Dan Walsh - 2.1.4-2Dan Walsh - 2.1.4-2Dan Walsh - 2.1.4-1Dan Walsh - 2.1.3-2Dan Walsh - 2.1.3-1Dan Walsh - 2.1.2-1Dan Walsh - 2.1.0-1Dan Walsh - 2.0.46-6Dan Walsh - 2.0.46-5Dan Walsh - 2.0.46-4Fedora Release Engineering - 2.0.46-3David Malcolm - 2.0.46-2Dan Walsh - 2.0.46-1Thomas Spura - 2.0.45-6David Malcolm - 2.0.45-5David Malcolm - 2.0.45-4Dan Walsh - 2.0.45-3Dan Walsh - 2.0.45-2Dan Walsh - 2.0.45-1Dan Walsh - 2.0.44-2Dan Walsh - 2.0.44-1Dan Walsh - 2.0.43-4Dan Walsh - 2.0.43-3Dan Walsh - 2.0.43-2Dan Walsh - 2.0.43-1Dan Walsh - 2.0.42-1Dan Walsh - 2.0.41-1Dan Walsh - 2.0.39-1Dan Walsh - 2.0.38-2Dan Walsh - 2.0.38-1Dan Walsh - 2.0.37-1Dan Walsh - 2.0.36-2Dan Walsh - 2.0.36-1Dan Walsh - 2.0.35-2Dan Walsh - 2.0.35-1Fedora Release Engineering - 2.0.33-3Dan Walsh - 2.0.33-2Dan Walsh - 2.0.33-1Dan Walsh - 2.0.32-1Dan Walsh - 2.0.31-5Dan Walsh - 2.0.31-4Fedora Release Engineering - 2.0.31-3Dan Walsh - 2.0.31-2Dan Walsh - 2.0.31-1Dan Walsh - 2.0.30-3Ignacio Vazquez-Abrams - 2.0.30-2Dan Walsh - 2.0.30-1Ignacio Vazquez-Abrams - 2.0.29-2Dan Walsh - 2.0.28-1Dan Walsh - 2.0.28-2Dan Walsh - 2.0.28-1Dan Walsh - 2.0.27-3Dan Walsh - 2.0.27-2Dan Walsh - 2.0.27-1Dan Walsh - 2.0.26-1Dan Walsh - 2.0.25-3Tom "spot" Callaway - 2.0.25-2Dan Walsh - 2.0.25-1Dan Walsh - 2.0.24-1Dan Walsh - 2.0.23-1Dan Walsh - 2.0.22-1Dan Walsh - 2.0.20-1Dan Walsh - 2.0.19-1Dan Walsh - 2.0.18-1Dan Walsh - 2.0.16-1Dan Walsh - 2.0.15-2Dan Walsh - 2.0.15-1Dan Walsh - 2.0.14-5Dan Walsh - 2.0.14-3Dan Walsh - 2.0.14-2Dan Walsh - 2.0.14-1Dan Walsh - 2.0.12-1Dan Walsh - 2.0.11-1Dan Walsh - 2.0.10-2Dan Walsh - 2.0.10-1Dan Walsh - 2.0.9-1Dan Walsh - 2.0.6-2Dan Walsh - 2.0.6-1Dan Walsh - 2.0.5-1Dan Walsh - 2.0.4-1Dan Walsh - 2.0.3-5Dan Walsh - 2.0.3-4Dan Walsh - 2.0.3-3Dan Walsh - 2.0.3-2Dan Walsh - 2.0.3-1Dan Walsh - 2.0.2-1Dan Walsh - 2.0.1-2Dan Walsh - 2.0.1-1Dan Walsh - 2.0.0-1Dan Walsh - 1.10.1-1Dan Walsh - 1.9.2-1Dan Walsh - 1.9.1-3Jeremy Katz - 1.9.1-2Dan Walsh - 1.9.1-1Dan Walsh - 1.8-1Dan Walsh - 1.6.17-1Dan Walsh - 1.6.16-3Dan Walsh - 1.6.16-2Dan Walsh - 1.6.16-1Dan Walsh - 1.6.15-1Dan Walsh - 1.6.13-3Dan Walsh - 1.6.13-2Dan Walsh - 1.6.13-1Dan Walsh - 1.6.12-2Dan Walsh - 1.6.12-1Dan Walsh - 1.6.11-1Dan Walsh - 1.6.9-1Dan Walsh - 1.6.8-2Dan Walsh - 1.6.8-1Dan Walsh - 1.6.7-3Dan Walsh - 1.6.7-2Dan Walsh - 1.6.7-1Dan Walsh - 1.6.6-1Dan Walsh - 1.6.3-1Dan Walsh - 1.6.2-2Dan Walsh - 1.6.2-1Dan Walsh - 1.6-1Dan Walsh - 1.5.28-1Dan Walsh - 1.5.26-1Dan Walsh - 1.5.23-1Jesse Keating - 1.5.21-2.1Dan Walsh - 1.5.21-2Dan Walsh - 1.5.21-1Jesse Keating - 1.5.20-1.1Dan Walsh 1.5.20-1Dan Walsh 1.5.19-1Dan Walsh 1.5.18-1Dan Walsh 1.5.16-1Dan Walsh 1.5.15-1Dan Walsh 1.5.14-2Dan Walsh 1.5.14-1Dan Walsh 1.5.9-1Dan Walsh 1.5.8-1Dan Walsh 1.5.6-1Dan Walsh 1.5.4-2Dan Walsh 1.5.4-1Dan Walsh 1.5.3-3Dan Walsh 1.5.3-2Dan Walsh 1.5.3-1Dan Walsh 1.5.1-2Dan Walsh 1.5.1-1Jesse Keating Dan Walsh 1.4-1Dan Walsh 1.3.64-1Dan Walsh 1.3.63-1Dan Walsh 1.3.61-1Dan Walsh 1.3.59-1Dan Walsh 1.3.56-2Dan Walsh 1.3.56-1Dan Walsh 1.3.53-3Dan Walsh 1.3.53-2Dan Walsh 1.3.53-1Dan Walsh 1.3.52-1Dan Walsh 1.3.51-1Dan Walsh 1.3.48-1Dan Walsh 1.3.43-1Dan Walsh 1.3.41-1Dan Walsh 1.3.39-1Dan Walsh 1.3.38-1Dan Walsh 1.3.36-1Dan Walsh 1.3.35-1Dan Walsh 1.3.34-1Dan Walsh 1.3.32-1Dan Walsh 1.3.30-1Dan Walsh 1.3.28-1Dan Walsh 1.3.24-1Dan Walsh 1.3.20-1Dan Walsh 1.3.20-1Dan Walsh 1.3.18-1Dan Walsh 1.3.14-1Dan Walsh 1.3.11-1Dan Walsh 1.3.10-1Dan Walsh 1.3.9-1Dan Walsh 1.3.8-1Dan Walsh 1.3.7-1Dan Walsh 1.3.5-1Dan Walsh 1.3.4-1Dan Walsh 1.3.3-1Dan Walsh 1.3.2-1Dan Walsh 1.3.1-1Dan Walsh 1.1.6-1Dan Walsh 1.1.3-1- Add dependencies on libselinux and libsemanage (#1548020)- Use umask(0077) for fopen() write operations (#1512639, #1512014)- Update semanage to allow runtime labeling of Infiniband Pkeys (#1466274) - Update semanage to allow runtime labeling of ibendports (#1466274) - Keep copy of file_contexts.homedirs in policy store (#1409813) - Add support for listing fcontext.homedirs file (#1409813)- Save linked policy, skip re-link when possible - Replace access(,F_OK) checks to make setuid programs work (#1186431)- genhomedircon - improve handling large groups (#1379685)- Remove access() check to make setuid programs work (#1186431)- Re-add get/set_version functions needed for semodule -l (#1392573)- genhomedircon: add support for Development/Debug syntax - genhomedircon: generate contexts for logins mapped to the default user - Validate and compile file contexts before installing - Swap tcp and udp protocol numbers- Sort object files for deterministic linking order - Support overriding Makefile RANLIB - Respect CC and PKG_CONFIG environment variable - Fix multiple spelling errors - genhomedircon: %{USERID} and %{USERNAME} support and code cleanups- Set the default store to /etc/selinux- Update to upstream release 2016-02-23- Add semanage.conf(5) man page Resolves: rhbz#915651- Skip policy module re-link when only setting booleans. Resolves: rhbz#1098446- Mass rebuild 2014-01-24- Mass rebuild 2013-12-27- Cleanup handling of missing mls_range to fix problems with useradd -Z - Fix auditing of login record changes, roles were not working correctly. Resolves: #1018840- Fix errors found by coverity Resolves: #952237- Do not fail on missing SELinux User Record when adding login record- Add msg to audit records- Do not write error message to screen when looking for previous record for auditing. - Add mls_range from user record if the MLS range is not specified by the seuser add record. - Error out if seuser or mls range is not specified when adding user records- Create symlink from policy.kern to active kernel.- Unlink policy.kern when done to save space.- Move handling of role audit records into the library - Patch stops semanage from removing user record while in use- Remove dependance on selinux-policy, /etc/selinux should be owned by libsemanage, and selinux-policy can require it.- Allways build python3 version-- Fix test suite to build- Revert some changes which are causing the wrong policy version file to be created- Update to upstream * Add sefcontext_compile to compile regex everytime policy is rebuilt * Cleanup/fix enable/disable/remove module. * redo genhomedircon minuid * fixes from coverity * semanage_store: do not leak memory in semanage_exec_prog * genhomedircon: remove useless conditional in get_home_dirs * genhomedircon: double free in get_home_dirs * fcontext_record: do not leak on error in semanage_fcontext_key_create * genhomedircon: do not leak on failure in write_gen_home_dir_context * semanage_store: do not leak fd * genhomedircon: do not leak shells list * semanage_store: do not leak on strdup failure * semanage_store: rewrite for readability- Add selinux-policy as a requires to get /etc/selinux owned- Update to latest patches from eparis/Upstream - libsemanage: fixes from coverity - libsemange: redo genhomedircon minuid- Fix handling of missing semanage permissive -d foo, not failing correctly - Previous to this fix the first module beginning with foo would get deleted.- Update to upstream * libsemanage: do not set soname needlessly * libsemanage: remove PYTHONLIBDIR and ruby equivalent * do boolean name substitution * Fix segfault for building standard policies.- rebuild for https://fedoraproject.org/wiki/Features/Python_3.3- remove rhel logic from with_python3 conditional- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- Attempt to allocate memory for selinux_binary_policy_path and free memory - allocated by asprintf.- Fix asprintf within an asprintf call- Update to upstream * remove build warning when build swig c files * additional makefile support for rubywrap * ignore 80 column limit for readability * semanage_store: fix snprintf length argument by using asprintf * Use default semanage.conf as a fallback * use after free in python bindings- Apply patch from Sven Vermeulen to fix problem with python3 bindings.- Update to upstream * Alternate path for semanage.conf * do not link against libpython, this is considered bad in Debian * Allow to build for several ruby version * fallback-user-level- Check in correct patch.- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild- Add patch form Xin Ouyang to make library use private semanage.conf-Update to upstream * add ignoredirs config for genhomedircon * Fallback_user_level can be NULL if you are not using MLS- Rebuild with latest libsepol- Rebuild with latest libsepol- Add support for ignoredirs param in /etc/selinux/semanage.conf- Upgrade to upstream * regenerate .pc on VERSION change * maintain mode even if umask is tighter * semanage.conf man page * create man5dir if not exist- Fix handling of umask, so files get created with the correct label.- Add Guido Trentalancia semanage.conf man page-Update to upstream * Create a new preserve_tunables flag * tree: default make target to all not * fix semanage_store_access_check calling arguments- Add support for preserving tunables-Update to upstream * python wrapper makefile changes-Update to upstream 2.1.2 2011-08-17 * print error debug info for buggy fc * introduce semanage_set_root and friends * throw exceptions in python rather than return * python3 support. * patch for MCS/MLS in user files 2.1.1 2011-08-01 * Remove generated files, expand .gitignore * Use -Werror and change a few prototypes to support it- Update to upstream * Release, minor version bump- More fixes for disabled modules- Change libsemanage mechanism for handling disabled modules. Now it will only create a flag for a module indicating the module is disabled. MODULE.pp.disabled, it will no longer rename the module. This way we can ship active modules in rpm.- Add semanage_set_selinux_path, to allow semodule to work on alternate selinux pools- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- big reworking of the support-multiple-python-builds patch to deal with PEP 3149: the latest Python 3.2 onwards uses include paths and library names that don't fit prior naming patterns, and so we must query python3-config for this information. To complicate things further, python 2's python-config doesn't understand all of the options needed ("--extension-suffix"). I've thus added new Makefile variables as needed, to be supplied by the specfile by invoking the appropriate config tool (or by hardcoding the old value for "--extension-suffix" i.e. ".so") - rework python3 manifest for PEP 3149, and rebuild for newer python3- Update to upstream * Fix compliation under GCC 4.6 by Justin Mattock- rebuild with python3.2 http://lists.fedoraproject.org/pipermail/devel/2010-August/141368.html- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild- add python3 subpackage- Fix -devel package to point at the correct shared library- Move shared library to /usr/lib- Update to upstream * Add enable/disable patch support from Dan Walsh. * Add usepasswd flag to semanage.conf to disable genhomedircon using passwd from Dan Walsh. * regenerate swig wrappers- Allow disable of usepasswd- Update to upstream * Replace usage of fmemopen() with sepol_policy_file_set_mem() since glibc < 2.9 does not support binary mode ('b') for fmemopen'd streams.- Cleanup spec file- Splect libsemanage.a into a static subpackage to keep fedora packaging guidelines happy- Rebuild all c programs with -fPIC- Update to upstream * Move libsemanage.so to /usr/lib * Add NAME lines to man pages from Manoj Srivastava- Update to upstream * Move load_policy from /usr/sbin to /sbin from Dan Walsh.- Update to upstream * Add pkgconfig file from Eamon Walsh. * Add semanage_set_check_contexts() function to disable calling setfiles- Update to upstream * make swigify- Dont relabel /root with genhomedircon- Update to upstream * Change semodule upgrade behavior to install even if the module is not present from Dan Walsh. * Make genhomedircon trim excess '/' from homedirs from Dan Walsh.- Update to upstream * Fix persistent dontaudit support to rebuild policy if the dontaudit state is changed from Chad Sellers. - Move load_policy to /sbin- Add enable/disable modules- Update to upstream * Changed bzip-blocksize=0 handling to support existing compressed modules in the store.- Make sure /root is not used in genhomedircon- Revert hard linking of files between tmp/active/previous. - Enable configuration of bzip behavior from Stephen Smalley. - bzip-blocksize=0 to disable compression and decompression support. - bzip-blocksize=1..9 to set the blocksize for compression. - bzip-small=true to reduce memory usage for decompression.- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- Put check for /root back into genhomedircon- Update to upstream- Update to upstream * Ruby bindings from David Quigley.- Return error on invalid file- Fix typo- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild- Fix link to only link on sandbox- Update to upstream * Policy module compression (bzip) support from Dan Walsh. * Hard link files between tmp/active/previous from Dan Walsh.- Fix up patch to get it upstreamed- Rebuild for Python 2.6- Add semanage_mls_enabled() interface from Stephen Smalley.- Rebuild for Python 2.6- Update to upstream * Add USER to lines to homedir_template context file from Chris PeBenito.- Add compression support- Update to upstream * allow fcontext and seuser changes without rebuilding the policy from Dan Walsh- Additional fixes for Don't rebuild on fcontext or seuser modifications- Don't rebuild on fcontext or seuser modifications- Update to upstream * Modify genhomedircon to skip groupname entries. Ultimately we need to expand them to the list of users to support per-role homedir labeling when using the groupname syntax.- Update to upstream * Fix bug in genhomedircon fcontext matches logic from Dan Walsh. Strip any trailing slash before appending /*$.- Another fix for genhomedircon- fix license tag- Update to upstream * Do not call genhomedircon if the policy was not rebuilt from Stephen Smalley. Fixes semanage boolean -D seg fault (bug 441379).- Update to upstream * make swigify- Update to upstream * Use vfork rather than fork for libsemanage helpers to reduce memory overhead as suggested by Todd Miller.- Update to upstream * Free policydb before fork from Joshua Brindle. * Drop the base module immediately after expanding to permit memory re-use from Stephen Smalley.- Update to upstream * Use sepol_set_expand_consume_base to reduce peak memory usage when using semodule- Update to upstream * Fix genhomedircon to not override a file context with a homedir context from Todd Miller.- Update to upstream * Fix spurious out of memory error reports. * Merged second version of fix for genhomedircon handling from Caleb Case.- Update to upstream * Merged fix for genhomedircon handling of missing HOME_DIR or HOME_ROOT templates from Caleb Case.- Stop differentiating on user for homedir labeling- Update to upstream * Fix genhomedircon handling of shells and missing user context template from Dan Walsh. * Copy the store path in semanage_select_store from Dan Walsh. - Add expand-check=0 to semanage.conf- Fix handling of /etc/shells so genhomedircon will work- Allow semanage_genhomedircon to work with out a USER int homedir.template- Fix semanage_select_store to allocate memory, fixes crash on invalid store- Upgrade to latest from NSA * Call rmdir() rather than remove() on directory removal so that errno isn't polluted from Stephen Smalley. * Allow handle_unknown in base to be overridden by semanage.conf from Stephen Smalley.- Upgrade to latest from NSA * ustr cleanups from James Antill. * Ensure that /root gets labeled even if using the default context from Dan Walsh.- Upgrade to latest from NSA * Fix ordering of file_contexts.homedirs from Todd Miller and Dan Walsh.- Fix sort order on generated homedir context- Upgrade to latest from NSA * Fix error checking on getpw*_r functions from Todd Miller. * Make genhomedircon skip invalid homedir contexts from Todd Miller. * Set default user and prefix from seusers from Dan Walsh. * Add swigify Makefile target from Dan Walsh.- Upgrade to latest from NSA * Pass CFLAGS to CC even on link command, per Dennis Gilmore. * Clear errno on non-fatal errors to avoid reporting them upon a later error that does not set errno. * Improve reporting of system errors, e.g. full filesystem or read-only filesystem from Stephen Smalley. - Fix segfault in genhomedircon when using bad user names- Fix genhomedircon code to only generate valid context - Fixes autorelabel problem- Upgrade to latest from NSA * Change to use getpw* function calls to the _r versions from Todd Miller.- Upgrade to latest from NSA- Upgrade to latest from NSA * Allow dontaudits to be turned off via semanage interface when updating policy- Add ability to load a policy without dontaudit rules -- Rebuild to fix segfault on x86 platforms, swigify on each build- Rebuild for rawhide- Apply patch to fix dependencies in spec file from Robert Scheck- Upgrade to latest from NSA * Fix to libsemanage man patches so whatis will work better from Dan Walsh- Upgrade to latest from NSA - Merged optimizations from Stephen Smalley. - do not set all booleans upon commit, only those whose values have changed - only install the sandbox upon commit if something was rebuilt- Add SELinux to Man page Names so man -k will work- Merged dbase_file_flush patch from Dan Walsh. - This removes any mention of specific tools (e.g. semanage) - from the comment header of the auto-generated files, - since there are multiple front-end tools.- Upgrade to latest from NSA * Merged Makefile test target patch from Caleb Case. * Merged get_commit_number function rename patch from Caleb Case. * Merged strnlen -> strlen patch from Todd Miller.- Upgrade to latest from NSA * Merged python binding fix from Dan Walsh. * Updated version for stable branch.- Upgrade to latest from NSA * Merged patch to optionally reduce disk usage by removing the backup module store and linked policy from Karl MacMillan * Merged patch to correctly propagate return values in libsemanage- Apply Karl MacMillan patch to get proper error codes.- rebuild against python 2.5- Upgrade to latest from NSA * Merged patch to compile wit -fPIC instead of -fpic from Manoj Srivastava to prevent hitting the global offest table limit. Patch changed to include libselinux and libsemanage in addition to libsepol.- Upgrade to latest from NSA * Updated version for release.- Upgrade to latest from NSA * Merged patch to skip reload if no active store exists and the store path doesn't match the active store path from Dan Walsh. * Merged patch to not destroy sepol handle on error path of connect from James Athey. * Merged patch to add genhomedircon path to semanage.conf from James Athey.- Fix semanage to not load if is not the correct policy type and it is installing- Fix requires lines- Upgrade to latest from NSA * Make most copy errors fatal, but allow exceptions for file_contexts.local, seusers, and netfilter_contexts if the source file does not exist in the store.- Upgrade to latest from NSA * Merged separate local file contexts patch from Chris PeBenito. * Merged patch to make most copy errors non-fatal from Dan Walsh.- Change other updates to be non-fatal- Change netfilter stuff to be non-fatal so update can proceed.- Upgrade to latest from NSA * Merged netfilter contexts support from Chris PeBenito.- Rebuild for new gcc- Upgrade to latest from NSA * Merged support for read operations on read-only fs from Caleb Case (Tresys Technology).- Upgrade to latest from NSA * Lindent. * Merged setfiles location check patch from Dan Walsh.- Upgrade to latest from NSA * Merged several fixes from Serge Hallyn: dbase_file_cache: deref of uninit data on error path. dbase_policydb_cache: clear fp to avoid double fclose semanage_fc_sort: destroy temp on error paths- Handle setfiles being in /sbin or /usr/sbin- Upgrade to latest from NSA * Updated default location for setfiles to /sbin to match policycoreutils. This can also be adjusted via semanage.conf using the syntax: [setfiles] path = /path/to/setfiles args = -q -c $@ $< [end]- Spec file cleanup from n0dalus+redhat@gmail.com- Add /usr/include/semanage to spec file- Upgrade to latest from NSA * Merged fix warnings patch from Karl MacMillan.- Upgrade to latest from NSA * Merged updated file context sorting patch from Christopher Ashworth, with bug fix for escaped character flag. * Merged file context sorting code from Christopher Ashworth (Tresys Technology), based on fc_sort.c code in refpolicy. * Merged python binding t_output_helper removal patch from Dan Walsh. * Regenerated swig files.- Fix to work with new version of swig - Upgrade to latest from NSA * Merged corrected fix for descriptor leak from Dan Walsh.- Fix leaky descriptor- Upgrade to latest from NSA * Merged Makefile PYLIBVER definition patch from Dan Walsh. * Merged man page reorganization from Ivan Gyurdiev.- Make work on RHEL4 - Upgrade to latest from NSA * Merged abort early on merge errors patch from Ivan Gyurdiev. * Cleaned up error handling in semanage_split_fc based on a patch by Serge Hallyn (IBM) and suggestions by Ivan Gyurdiev. * Merged MLS handling fixes from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged bug fix for fcontext validate handler from Ivan Gyurdiev. * Merged base_merge_components changes from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged paths array patch from Ivan Gyurdiev. * Merged bug fix patch from Ivan Gyurdiev. * Merged improve bindings patch from Ivan Gyurdiev. * Merged use PyList patch from Ivan Gyurdiev. * Merged memory leak fix patch from Ivan Gyurdiev. * Merged nodecon support patch from Ivan Gyurdiev. * Merged cleanups patch from Ivan Gyurdiev. * Merged split swig patch from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged optionals in base patch from Joshua Brindle. * Merged treat seusers/users_extra as optional sections patch from Ivan Gyurdiev. * Merged parse_optional fixes from Ivan Gyurdiev.- bump again for double-long bug on ppc(64)- Fix handling of seusers and users_map file- Upgrade to latest from NSA * Merged seuser/user_extra support patch from Joshua Brindle. * Merged remote system dbase patch from Ivan Gyurdiev.- rebuilt for new gcc4.1 snapshot and glibc changes- Upgrade to latest from NSA * Merged clone record on set_con patch from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged fname parameter patch from Ivan Gyurdiev. * Merged more size_t -> unsigned int fixes from Ivan Gyurdiev. * Merged seusers.system patch from Ivan Gyurdiev. * Merged improve port/fcontext API patch from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged seuser -> seuser_local rename patch from Ivan Gyurdiev. * Merged set_create_store, access_check, and is_connected interfaces from Joshua Brindle.- Upgrade to latest from NSA * Regenerate python wrappers.- Upgrade to latest from NSA * Merged pywrap Makefile diff from Dan Walsh. * Merged cache management patch from Ivan Gyurdiev. * Merged bugfix for dbase_llist_clear from Ivan Gyurdiev. * Merged remove apply_local function patch from Ivan Gyurdiev. * Merged only do read locking in direct case patch from Ivan Gyurdiev. * Merged cache error path memory leak fix from Ivan Gyurdiev. * Merged auto-generated file header patch from Ivan Gyurdiev. * Merged pywrap test update from Ivan Gyurdiev. * Merged hidden defs update from Ivan Gyurdiev.- Break out python out of regular Makefile- Upgrade to latest from NSA * Merged disallow port overlap patch from Ivan Gyurdiev. * Merged join prereq and implementation patches from Ivan Gyurdiev. * Merged join user extra data part 2 patch from Ivan Gyurdiev. * Merged bugfix patch from Ivan Gyurdiev. * Merged remove add_local/set_local patch from Ivan Gyurdiev. * Merged user extra data part 1 patch from Ivan Gyurdiev. * Merged size_t -> unsigned int patch from Ivan Gyurdiev. * Merged calloc check in semanage_store patch from Ivan Gyurdiev, bug noticed by Steve Grubb. * Merged cleanups after add/set removal patch from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged const in APIs patch from Ivan Gyurdiev. * Merged validation of local file contexts patch from Ivan Gyurdiev. * Merged compare2 function patch from Ivan Gyurdiev. * Merged hidden def/proto update patch from Ivan Gyurdiev.- Upgrade to latest from NSA * Re-applied string and file optimization patch from Russell Coker, with bug fix. * Reverted string and file optimization patch from Russell Coker. * Clarified error messages from parse_module_headers and parse_base_headers for base/module mismatches.- Upgrade to latest from NSA * Clarified error messages from parse_module_headers and parse_base_headers for base/module mismatches. * Merged string and file optimization patch from Russell Coker. * Merged swig header reordering patch from Ivan Gyurdiev. * Merged toggle modify on add patch from Ivan Gyurdiev. * Merged ports parser bugfix patch from Ivan Gyurdiev. * Merged fcontext swig patch from Ivan Gyurdiev. * Merged remove add/modify/delete for active booleans patch from Ivan Gyurdiev. * Merged man pages for dbase functions patch from Ivan Gyurdiev. * Merged pywrap tests patch from Ivan Gyurdiev.- Patch to fix add- Upgrade to latest from NSA * Merged patch series from Ivan Gyurdiev. This includes patches to: - separate file rw code from linked list - annotate objects - fold together internal headers - support ordering of records in compare function - add active dbase backend, active booleans - return commit numbers for ro database calls - use modified flags to skip rebuild whenever possible - enable port interfaces - update swig interfaces and typemaps - add an API for file_contexts.local and file_contexts - flip the traversal order in iterate/list - reorganize sandbox_expand - add seusers MLS validation - improve dbase spec/documentation - clone record on set/add/modify- Add Ivans patch to turn on ports- Remove patch since upstream does the right thing- Upgrade to latest from NSA * Merged further header cleanups from Ivan Gyurdiev. * Merged toggle modified flag in policydb_modify, fix memory leak in clear_obsolete, polymorphism vs headers fix, and include guards for internal headers patches from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged toggle modified flag in policydb_modify, fix memory leak in clear_obsolete, polymorphism vs headers fix, and include guards for internal headers patches from Ivan Gyurdiev.- Upgrade to latest from NSA * Added file-mode= setting to semanage.conf, default to 0644. Changed semanage_copy_file and callers to use this mode when installing policy files to runtime locations.- rebuilt- Fix mode of output seusers file- Upgrade to latest from NSA * Changed semanage_handle_create() to set do_reload based on is_selinux_enabled(). This prevents improper attempts to load policy on a non-SELinux system.- Upgrade to latest from NSA * Dropped handle from user_del_role interface. * Removed defrole interfaces.- Upgrade to latest from NSA * Merged Makefile python definitions patch from Dan Walsh. * Removed is_selinux_mls_enabled() conditionals in seusers and users file parsers.- Add additional swig objects * Merged wrap char*** for user_get_roles patch from Joshua Brindle. * Merged remove defrole from sepol patch from Ivan Gyurdiev. * Merged swig wrappers for modifying users and seusers from Joshua Brindle.- Add additional swig objects- Upgrade to latest from NSA * Fixed free->key_free bug. * Merged clear obsolete patch from Ivan Gyurdiev. * Merged modified swigify patch from Dan Walsh (original patch from Joshua Brindle). * Merged move genhomedircon call patch from Chad Sellers.- Add genhomedircon patch from Joshua Brindle- Add swigify patch from Joshua Brindle- Upgrade to latest from NSA * Merged move seuser validation patch from Ivan Gyurdiev. * Merged hidden declaration fixes from Ivan Gyurdiev, with minor corrections.- Upgrade to latest from NSA * Merged cleanup patch from Ivan Gyurdiev. This renames semanage_module_conn to semanage_direct_handle, and moves sepol handle create/destroy into semanage handle create/destroy to allow use even when disconnected (for the record interfaces).- Upgrade to latest from NSA * Clear modules modified flag upon disconnect and commit. * Added tracking of module modifications and use it to determine whether expand-time checks should be applied on commit. * Reverted semanage_set_reload_bools() interface.- Upgrade to latest from NSA * Disabled calls to port dbase for merge and commit and stubbed out calls to sepol_port interfaces since they are not exported. * Merged rename instead of copy patch from Joshua Brindle (Tresys). * Added hidden_def/hidden_proto for exported symbols used within libsemanage to eliminate relocations. Wrapped type definitions in exported headers as needed to avoid conflicts. Added src/context_internal.h and src/iface_internal.h. * Added semanage_is_managed() interface to allow detection of whether the policy is managed via libsemanage. This enables proper handling in setsebool for non-managed systems. * Merged semanage_set_reload_bools() interface from Ivan Gyurdiev, to enable runtime control over preserving active boolean values versus reloading their saved settings upon commit.- Upgrade to latest from NSA * Merged seuser parser resync, dbase tracking and cleanup, strtol bug, copyright, and assert space patches from Ivan Gyurdiev. * Added src/*_internal.h in preparation for other changes. * Added hidden/hidden_proto/hidden_def to src/debug.[hc] and src/seusers.[hc].- Upgrade to latest from NSA * Merged interface parse/print, context_to_string interface change, move assert_noeof, and order preserving patches from Ivan Gyurdiev. * Added src/dso.h in preparation for other changes. * Merged install seusers, handle/error messages, MLS parsing, and seusers validation patches from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged record interface, dbase flush, common database code, and record bugfix patches from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged dbase policydb list and count change from Ivan Gyurdiev. * Merged enable dbase and set relay patches from Ivan Gyurdiev.- Update from NSA * Merged query APIs and dbase_file_set patches from Ivan Gyurdiev.- Update from NSA * Merged sepol handle passing, seusers support, and policydb cache patches from Ivan Gyurdiev.- Update from NSA * Merged resync to sepol changes and booleans fixes/improvements patches from Ivan Gyurdiev. * Merged support for genhomedircon/homedir template, store selection, explicit policy reload, and semanage.conf relocation from Joshua Brindle.- Update from NSA * Merged resync to sepol changes and transaction fix patches from Ivan Gyurdiev. * Merged reorganize users patch from Ivan Gyurdiev. * Merged remove unused relay functions patch from Ivan Gyurdiev.- Update from NSA * Fixed policy file leaks in semanage_load_module and semanage_write_module. * Merged further database work from Ivan Gyurdiev. * Fixed bug in semanage_direct_disconnect.- Update from NSA * Merged interface renaming patch from Ivan Gyurdiev. * Merged policy component patch from Ivan Gyurdiev. * Renamed 'check=' configuration value to 'expand-check=' for clarity. * Changed semanage_commit_sandbox to check for and report errors on rename(2) calls performed during rollback. * Added optional check= configuration value to semanage.conf and updated call to sepol_expand_module to pass its value to control assertion and hierarchy checking on module expansion. * Merged fixes for make DESTDIR= builds from Joshua Brindle.- Update from NSA * Merged default database from Ivan Gyurdiev. * Merged removal of connect requirement in policydb backend from Ivan Gyurdiev. * Merged commit locking fix and lock rename from Joshua Brindle. * Merged transaction rollback in lock patch from Joshua Brindle. * Changed default args for load_policy to be null, as it no longer takes a pathname argument and we want to preserve booleans. * Merged move local dbase initialization patch from Ivan Gyurdiev. * Merged acquire/release read lock in databases patch from Ivan Gyurdiev. * Merged rename direct -> policydb as appropriate patch from Ivan Gyurdiev. * Added calls to sepol_policy_file_set_handle interface prior to invoking sepol operations on policy files. * Updated call to sepol_policydb_from_image to pass the handle.- Update from NSA * Changed default args for load_policy to be null, as it no longer takes a pathname argument and we want to preserve booleans. * Merged move local dbase initialization patch from Ivan Gyurdiev. * Merged acquire/release read lock in databases patch from Ivan Gyurdiev. * Merged rename direct -> policydb as appropriate patch from Ivan Gyurdiev. * Added calls to sepol_policy_file_set_handle interface prior to invoking sepol operations on policy files. * Updated call to sepol_policydb_from_image to pass the handle.- Update from NSA * Merged user and port APIs - policy database patch from Ivan Gyurdiev. * Converted calls to sepol link_packages and expand_module interfaces from using buffers to using sepol handles for error reporting, and changed direct_connect/disconnect to create/destroy sepol handles.- Update from NSA * Merged bugfix patch from Ivan Gyurdiev. * Merged seuser database patch from Ivan Gyurdiev. Merged direct user/port databases to the handle from Ivan Gyurdiev. * Removed obsolete include/semanage/commit_api.h (leftover). Merged seuser record patch from Ivan Gyurdiev. * Merged boolean and interface databases from Ivan Gyurdiev.- Update from NSA * Updated to use get interfaces for hidden sepol_module_package type. * Changed semanage_expand_sandbox and semanage_install_active to generate/install the latest policy version supported by libsepol by default (unless overridden by semanage.conf), since libselinux will now downgrade automatically for load_policy. * Merged new callback-based error reporting system and ongoing database work from Ivan Gyurdiev.- Update from NSA * Fixed semanage_install_active() to use the same logic for selecting a policy version as semanage_expand_sandbox(). Dropped dead code from semanage_install_sandbox().- Update from NSA * Updated for changes to libsepol, and to only use types and interfaces provided by the shared libsepol.- Update from NSA * Merged further database work from Ivan Gyurdiev.- Update from NSA * Merged iterate, redistribute, and dbase split patches from Ivan Gyurdiev.- Update from NSA * Merged patch series from Ivan Gyurdiev. (pointer typedef elimination, file renames, dbase work, backend separation) * Split interfaces from semanage.[hc] into handle.[hc], modules.[hc]. * Separated handle create from connect interface. * Added a constructor for initialization. * Moved up src/include/*.h to src. * Created a symbol map file; dropped dso.h and hidden markings.- Update from NSA * Split interfaces from semanage.[hc] into handle.[hc], modules.[hc]. * Separated handle create from connect interface. * Added a constructor for initialization. * Moved up src/include/*.h to src. * Created a symbol map file; dropped dso.h and hidden markings.- Update from NSA * Merged dbase redesign patch from Ivan Gyurdiev.- Update from NSA * Merged boolean record, stub record handler, and status codes patches from Ivan Gyurdiev.- Update from NSA * Merged stub iterator functionality from Ivan Gyurdiev. * Merged interface record patch from Ivan Gyurdiev.- Update from NSA * Merged stub functionality for managing user and port records, and record table code from Ivan Gyurdiev. * Updated version for release.- Update from NSA * Merged semod.conf template patch from Dan Walsh (Red Hat), but restored location to /usr/share/semod/semod.conf. * Fixed several bugs found by valgrind. * Fixed bug in prior patch for the semod_build_module_list leak. * Merged errno fix from Joshua Brindle (Tresys). * Merged fix for semod_build_modules_list leak on error path from Serge Hallyn (IBM). Bug found by Coverity.- Update from NSA * Merged errno fix from Joshua Brindle (Tresys). * Merged fix for semod_build_modules_list leak on error path from Serge Hallyn (IBM). Bug found by Coverity. * Merged several fixes from Serge Hallyn (IBM). Bugs found by Coverity. * Fixed several other bugs and warnings. * Merged patch to move module read/write code from libsemanage to libsepol from Jason Tang (Tresys). * Merged relay records patch from Ivan Gyurdiev. * Merged key extract patch from Ivan Gyurdiev. - Initial version - Created by Stephen Smalley 2.5-11.el72.5-11.el7_semanage.sosemanage.pysemanage.pycsemanage.pyosemanage_migrate_store/usr/lib64/python2.7/site-packages//usr/libexec/selinux/-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -m64 -mtune=genericcpioxz9x86_64-redhat-linux-gnuELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=3588395bb5bf533882b7ef968edd16827052420f, strippedPython script, ASCII text executablepython 2.7 byte-compiled RRRRR RRRRR R R R R?p7zXZ !X}] crv9unGš9Xzsy& Cu꣗i@4.t=Yt8Is8cK93ϙ|! pbˎʧᵝ’/mafDIW XǷlZI٭p!}{R]_Ql݈1C{L6|14830 #9?;D(*-x TW3yW銔*}^J _:4edWEǺʍ|+wehMh2$#VP#)ѻd=%'3wd3TX ?]`<|^¬Cx4ȕFW\aI-[1&,R)C&΁[PBIUpdbN< H]en:wlsI~HtQ)llex*fX((Ёc.FthR<@Ӫ]5Ψ}lt s0,+f'?Aw6=#|sikӰ! b# ~n}? G*'o(cfZ2;T(:>~vD_V7YRj==eKuT"1I0䖄H'/̐ -Ҩ!4߾im ⓔuKFDD5Uh߉vDyw49ԖERnt/ŀ_94_+DNP+TlI@/ X* VPot$8,Y&MFZ{^'TkV)i[`\1ID9e(\5#fĥ;>ӈک lyD5E+Qq-^@ҚӐN`8~uJ 0)۞Ik%1~>'ͽI@b(+D 2F9a5VIHGK|4Pz7sP:G{)!y|4!6;FG>ߙTce졘GQ7Nq=%.eG;}'tqR~.oG޵3U Ѣ0v (6Rp}(T4Lp]%^k۸x;[ dLPKZ$|ku0޴,F,JM}ʗ`U_%t jOc>'.]?MvJOP)ōX2 +RyĢMDewYobw 7mtu^!ȣBu h#*CGH0EEVFGAd[K(V>;XeARw5ԍlfh*u^sΓ$w}@pV0ţDƙ/VVEadjQNU-<د V޷ESXԁO^3u6nȤ} M]к%篐y'|xVjP7Y䁁QJPϰc갬vŅܥᗔl Y^$Ə9_& F;:Cv]%Mhb4!B,wY3L,." hDH}X0KlQm=NVcdм #, B䠽.r9c+t:%M[EBR7eA[B L))*밤l-_6!@syḯ ȼ_A%5#~QӬˢ`ug6*G}~r  5$mMS@ :6%J( !_n)yS{Ň}!{KvLmʖm1.Ӫk誟 L<ɠa3|N߄C<&qRJUq,ݥ1OSB"Kwc,C%{ j޼#_¦9/W~YG9h5 1{ME}XY e^A_~v*0HQu,0B7);cSL<GjۢH?&KxӎS7 Vy&cJJ SŃ(Ǜ-'DYy_yMWl*m/F]&fש'7cōld] [a77)PBL|c畁D7w?WA߇rujx~Q~uY`h"u]-Aefv~VV;۸{\JktwlXS hT@xxa5hDۢ]Ĭ#NFDe"‰xV*#z% k{y#k6'{ k(;$Xz5?n|mac`"W}[na%p1bX)s  w%ؘ)>2hՁC*}m%xԭ [N e!# aӉqED[Ox z{_M]vטH<:p .&BW &!5K{;nb#t-jDKa|(Vs,[:r]њ@LHzZ 1q u(he!`!Ppq"vѶ),ípD8"`v#|HiiEUbY  y/UP/)alz?ӄom !%=!fVWzk#X rcYQ&{HwcB,o{{dyX{'3ʍK.”v/ aSxtxlGn ߇ow/Y0]?Hҗ4俠}:_"8wxEsyrw'>߸ \T AJg} ֠_ pU,e zSϗbMb1s-w -FJ1 9[,UYHm޾jpNr/e013Mħ0-{I\j77SEEB:WssdAVcr`Q*X;0yM oC#'>41zm||Jv'8ǓOTw~ 6EpFu((F'd̾@ؤ[}%)(F䨤4 N##ltkG2vU=Ȳ,wx|ъ kiZ4,,HA{י`{QAbH:l*یհ;+X&<c=g/";'$TR;YP(8Œn]RbTGlҠ ~ @rLW}+p @\%@qCrg3&4-*e/Cl[meo:MfǔۉCϤfs{^*sQT]Y\!Oi>0\꾊Б90톘J `sFEˍX.UA@o]*,CفKqhmJ}JTLln7ߕ[]ro\Z)ΤU#cV2z%f{I ^0ԶF/lc[}6A0gHSq1Ƞ c Q\FsSU>? S=Eksܬ&e(\,_ͅfy\#S "^pLa$V.EV8V+u 3- s\vGWW؝!\88HC.NDЎk2$;QCF"gcC8dHцDԷDOtaKeJ+9* Feh~뉎DDzX $\$A*0,jORԺg/P̛b6 d o.%AGDy[mܵ쪿֊ւ|oUȪ%KӤlNu&.l\܍ B|^_W#mi( VĖj}|;dUu,sHPEk+Z o/;˴Lѓ/h;o]0LdDsJ:S0xnE]Hd-'Rx{Ǽg6'M" \F;Pb+o}/G. G\uZLd ţՒ- QwnwL3]BS*~~J6PaTzb4~@K\ɪk?.ʜB&vVz zj}^I*{xr ~“F%$zeZkCk)"4.pd XeKA {9PffTȔ$ ev=WHI;kC$AM `yi5y]OR^0W$XV0IQOvzt08GbBP(L+*A 42Smޓ37&ԶN{C6,Cm:WL%mI<2qLjlRٽjs&koӒ5 d$|2d^Heq,8 %OR2tPqQ>K:_b"CzTFNMvTQb:vWA 2Za^X*8B*O^`]ݭ9Qulg S¨ә~F$ C㉍Lvzı0qmLݎ=;eVIg'LޥppJ׬twmYX1kWNJ5'JiHˤYDJByR|./rnSݸsM}/.Z/V`^KG=5[gUDA_15\$l ti=߾~)uf 2mzyFv"FZ6tΈ(~y$͵yn.cl'V>ՂEY3̙Kpw}Qz;BKj oyCS>MA1p@Z1y’Έ߲ ;v7\A7!\Oי6;;iؓPcJ#2QY\3M9rk>0] #X` f|ŝS L2 m2q-\iy4x"D?&P]`'RVP:y@N^>yVEir^|7y<7 0yw=ґ ]sTe-'VrN('L[;mot6%]1J[fBŭfEZej~_Oi+F C%kPִ6Ob]1\Dgܐ>tϙlZeF s \anA5޲\E=kEg h`y&-öC_?HQvΧ㟾f=HFzD~OdhxI}i|Wk!}k T H4f= Y^`֝[B H5CbV"1rW/ s6~2t[ԛ$JF* m<|[4{f$gZ žG W6 8%=i~O9m Iwq}~5sCNʛeJ!낍bʲ.9;U]ZMṫ03Gr:;kvZ Z-*ntNfcr- ^P_ Wdjriag^.E Kģ$XFR%_k|'H:}X;|wmF* RH97~2sF;.u-9E 'h-4nQ #lNޠiM} I>¬* U]dw ދb^QVQ؀7E™gfs)\Wnx}?ے6|O(7P(lo D Q_(]/9zB>9Q)ӎJ;mn<ٓؖ/ZˁY$D5Z s'.?#37MƊ12GM1j~]zmNGe4@6ܥp L8|II(0b1{;QUo'U;]q &%:GaEK UJEkcMsW6-ρO ;D𮻡>Ɏ/,hI] HC9<_ r߰Ij/=`A? pTxuQOAFmp?H K=3w՘{YڽԔ@PG 5N.غ~n <ťZ*ʎ3j$gĩ\;Q.O="2-muLCsE}Ñc8U."nb{;7Mw:Yh|/I:a vLʮ8e1P%9aǃ'c̝mdG`7AҧLiyw%({ rsҎ#Jv*Rium_|_?L(93O>S-zR/z#dTsKtnSV No#}n[j 񀷚ųxwOu GiVdt^gXX8~lEIJ |5_{>KB*N,ZR#N8X]*8aˢɽYHn굝 |W݀#S؈I:yg9 JH-`D!6Oxhf?i#M!}̓T<}nޠ}&"J(r$W\Zĭ,ex+)ʭIoFrRI!ғp ~7wC?g< &uωI|k,hҘ$\ h DHZmˁz)m )r`҄ ~kx6K, SS&>tQ=* ö5pHVt:g_18G>t E`By^yoI.+w"cɞ_ N8dH>b74InÛޏO6ZTty"p {2GȄRc]0sړ8n_P`%ߦ0#,8Z-Ӌ+"h7Eqov>'I9\C?5~4-ZM{Y;,rC(AWa@\8+dU׺?ie@ǫnKB~zȢr\>\ޔPd>VM*Ÿ?:OLl`Zk#):]o39a!%R6SSS0uqi!3ax}4&. cL\9'Jo .E0? qU>0ZH45n, .(ǥAI?OE~C?HkN1p/zGy.HDi{C i5ѿRY־ppьI s:%dЬZ{Ps,iō2?L=Y6!4sS/WTP^Lxc*$9Q~QBgG)\BRaK ti?cۿ%h:4',>Р,az_khWE H k\ɟʋ; p{?ǁA11FAb- Hf9ʼnaل(l?~06er.n&a#]*ΔE)Q_$dh`}Sų̵^8 +mCI 󪟕^:ܶZTǁ (%n`O7 M&@k0݈r]YI}]e".1 hx5:Ë3 ͞G<v @%Y,P1z߷ \ Ni_/w!+!Vy!& cmF!= sl T\QqT%@HՈ$a"?)PorI=ʸNk6 e̔Ў>dւ5*bG^D6Bw(EG1DSD8iD3M7)4KJ\U` doMϘdd .Һ%eYP ѪP/"Δa28;wjȴ3-]sD;}OɑtZ?J7k̼9&z`GR :Ky8Ogt{N&Q0Vw?o9is P-ڑxvovi ;駀&[|FAl<:m(p6ޯP1IV/v0[g6V}3W肜;FgMHG*;!$%T\*bu7<9(U6M0^[2!N7$K:1.&G8B0qr yA:LQHD|)(m&"kisjr/w[9b^NNN~gW8j#b# 05Uߜ؎+YYZML$]r^ R?pqY=X8d^rS"\'g&LN 7VȅڋVoG#i@xS=ew׀:vi|4.U1' 4:{%ZIjD\L@Eڂ,SVc .X}"7epkeц?(4\e#X\} 2 'Ni| +[aGeJ/PYT~7!^FrI?errJ'b7K"FBܮ= Ĭ@ҠZ>KJBWuBvN׬*@]A n 7 HJD\%G0on9-ޡPAOS\aTv.[ZlFȻz*{m .xk mDKV_ۗm=eD6]Ӹi> %2jŴnU@~">o2H?(a7"iaqAEI L^g&BsX1AaPyf 1@,d2 =TXb*7Ki45tM,ۻDz@@aE)c܃A0$QΩܕ ?.Sѝt\H(/+y&!!}J耠Y9SB)#R\$!za)߽| {*xzWq(Y`Ǎ3;&x-? 5Vn-GmZ6/d‡<Qv'@[YP LK)g HL`Kb,8aNK{0Uki^ϙE|.ݤjf|zOVT~w\Q\˔EJv˙sp)=`'J!p gpX|OF!")q3 ~;IM^Oz;~* AS~jNj0 wY\pBQIŞWu*Llq{PtR:jXIbJ-P(lWsCMXCP!f5^} o "Eh7W$}Jv89'MJ갑!}4uVb7 G0ks(Hǵj|?^w 2"J0 YlԲrL9髺 3C&+,& rID1Gɿ`|~D2#V§k%:ezy' t b]iB Ŗu6c*t2 ~(!x L/P3Xz 7g[dd92Q Is@Shѷǐ29i`u9[vYKnY~r]?}'HkDY!(A*{}[!XՈ?ŤbnjFJ >1ͩij%D~Fx!Mm$,dEɢ*N[h /]ل>1h0+8 Gcłik^dF·HlR{xTJEi&(Pߦ0@ypz _ !bq`W! YlxR {XJ`e&$L4_\omh{3y؋خSARd)T [jJ@y w}QkTm@~C ]gʨ4)9k?y maթBhcZq  7,}[D({hV{Š.ST皠gj1;"$z*t23a u7:ʼn/X:x.-$lʯ Qn 5GDոtbdǺʐmjrRW2]Jzk پw%t'!R_*"ʹ:B@~+D6oKG VKOubDN0,xk_:x$,xp4|&{ }qO2M Hc㗊ơN1/ʨC$|Kq_Ov?vn2t|#S/MW?k:XM 3}W6 D@Md8)Xy>UaJvCt\ gXƵdqܽ#/r>{ 753 ש&?-L/ÃX%UOT"]#<JM,NupXt# \7SE!eT4r)H" #²{mILqעĤ\ ϺԉN<>i8d4Dl{D]zj'n#n?^wtP{o(!=k:gHﳁ !}6 ,T_3±#-x!Cǔa@z.SUF0H;~Gr#g JR_^lSvdH'[d7}M*qN!\ZOmGvB*)Yw1H N[)krlg/i).ܘB9ͻ-%D'hf р wa̡>ښXYBdv+aM蓤gܾGś¸E Vk-Irx,p~rJ1iAޟ]gs ȅ4^IIFO$=eNJ;LW$_ԐNSeꦥ]W8u:%T7SP91!oHxwoV5'?zh"2<Ⱦ<; ^Zn Nk` R!shԴxO[A<h:|%_Նfpp$m aN;GS81!k[^dC6յ (Fm:ufel%^3Š.=B]mjb9:e|y¯&d~9TȖHK3m1[!=8 6$8>ȉ2w\F8*~c()ͺ=P͇WH5aٯyKJ1iѦ 8_iS W\Ƥh %u*bucR(:Jj ;zn_l0zԸ QjDɘOWyh]w⇗__߶Gk,^։_/: ";}X{#NMfG*;4G8m{~ɦ.0-[P*V(qC@a4HdQc_4ԻߤyLf6( lAm}OKKa+|,iZ E\[0ߎ؜<#npa#Z.ی,z)}ШvoƃHz+A0y)LM6EATwe#s' =\}asq.0l:˖^3VjG]kD*n\cZ`7=w753S9پ'4$l&H=Ck?Seɏykަ~V!-ADvFl!%t[5)3ج-ϳu O6B{>Y~l7Ш̌7uWp QTc==3]ْ_2ww Z"Y !(x%Fzw`2.Bfv/ZM=n+F$ץVzC(4(ab5kY6~юVbZC\2J'Na3'g(.Jo"Fь4^E/W&D$9=eцV`aՕbgq]Ke-:;K*dWq~67⹦Es&rT88ca$G)ƁGʪmy&ĘO5 HC$iN(;BFMPb)L8D)U~Tw,|%(/^ױVU TCwSZ+LŁ AMg0jqLܕi4G\шnH8ltp}~'[z#$AZ()4b.TY+>gn>sڥoUd*N'f@`$;KC ҳ7)fL5דepjRL/i;R$^ ];hCPkS`$;Q`ezcxO>o6U,9t⩎(Q- "z tLBqҰ45ƧJ=\2@)]Jٰ(aC!GS{KsB\ &I_`#L-S-G9a6 ڕ|paBSO!:s<@>*5'2hd@9+pn7yen8aeRȊT,{N 74t L̰I  E:(r^{,dI:%ןCT6;ɵO$'/*$VMjzha{~JɎ^T&G@ O%x4);|!X6{qA!*8U%V9Z"f}ո* >~si)lSe|zYCq9wڊu)\""P==AF/7*V^\&?`W{ЉBٱb/7S7&P)/d[CDzH&_?xC(mV ӳ$~گ3 E\hVD+A%2+к&% WWg1:u0'n d|[~}PWԚ-_\*˔Ù(vce^IJpX|WEuF&{阂n[AHՈQ1o~~؅stNgqBm_)A,`\˜0.{<|Q7wBj lcWI$}m\huS|:CBmݰ2pE _@5u h'REJxQSFy=OٍGZkR"P '\\LbWwY J;Ph1ꢯZ61ڬzfޱ$An ! ,ʶ Xux"`Z}W-U/'ǻ&{IP wۅմ_>D?p uS^mMLX祸_h_y+ F2U0ҔA7lH׾8YĿ9n_n)! Go[mP6|N5pTigW:hTMS+%|Ѯtn$sXUP胡X/Ќ"Nr88R><M:%)L;U)p:Z.xMa]ACy7E>^Η;-c0jKҿ.r {gK 88Dv<߲RdL \ۭ ESb 0cojܮchT\sPD-WO֫ J_)rBՒڲ pFU)fRkwW%9TfUwjw_p?@>.="灈qz],а8`-D,Ä8%FJo&lx!D);-$cX6\zӫNU̞nt̤w9# *+DŅb@=E)΃xY8 rٚde/ @dlVGgh? c!"+-e^َ(_%wR{׌ۏE< ~taXX)n(͡ue} jDX8!B9fɎKbmHYZgw#@i»'3FcD_J~d@Ĉ1خ$dJG 5itKjq<uلT҈&;uRX#_NSd۷]$,@08X7|%ƶh/Ph<H&SkpzN~˟Ȗ w%ᵃqӾ ]<ݶnLU>k,-LyvseYČƲhz4LKlmڡ 吊2FvJg-9RvҾ{ " (^9ղ[a))&;䬖}BДKK {KŁ|V' mCvꐠgBGdl)4[AOn!'<&`(=^a09^S X>ܞ*C\`: df+4' 8.úo+u^HlkY3p%;!4tzs=(N2B_T=^w8EՓ΂%O87Ʈ 2'Sܭ0^eb$:a#˶I&ʰL(+nbe Z; dA꙳ IR|K!\ 5da I20TЄ^@UzRy:lƍUL)/2ƪqEPQȯGf"7b?Ιڳa- ,BT$yCq$NG0znR3!kC|aqa{ qb(gݡVb2ʂ63D35^x(2(b@yT.'gDLDo̹q6Mjȁr2:41_)Β9.1Kſˬ+i>ۥĨc\Z&_v㿧;w%.΅.NI,Z@4`RX ?3ӻ^y$z Nʅh%XE>MJ j!n@a-(C ـr'a+<^*XN wuM=s'}^׬"B$;`)*."{~%VYW7!ٞ@2=xToj1Q,ķ g$otY/ "ރ̇7'1_b.x}pEӉ+Ro'dpʗ|G%\5X4Q/j1Xf 6{("z/g[P{bc:+-Le2c9 R@pLYTy0jbq׈wߋaVמσk›%1(iռ~ȊLa$-:;H%9C(v;8=}v+&akbJI<ˊVۺ96s%NYBcUrd3e,3hV,x=U„'M3Ꮩ03@n^޹r;Gk nMViM!'.1[[ 0Д7?jo 5g&~ݵ>[<<՜- S9Y6rڦ)i!D6;6tJDqcֆpxwrEگlw=. LcEA`CޝA6QW$G1b*N ^q 9_3KesOxmX9mH/ vһv-BFRvr1t%0χEa+ٗưU{-W5c`deT hʧ "~Ey |#IqWƵ-܉سZI)p\" BA_.qj9QWasP$} 3`?xi-Ccʞ%| yč\!̈́tb:\ʎbEo@ :ht!23QbHbXb/!zT[~^I&C2&Ɏ֧m̉8W{fF{ܞ9NAo1kQ;C  I1j#D̙Yp?P,7+nE>If>i3G%b0S9o06UhwI;8pi]yEN^4:INOEsCy߽Sl聠_>wֆFz!"`zTʃ}X B%9E` Dce3`ل$\cnܪ<h˟ %M[ 5HCfsv~*en4ǖrNVrYe:`R@բ^N4<(aPTvj3rQZ$] 9,OʻQcMG7y$ڋ^ӲQ8;#4^ |mx9]0W8l._p湪H@2oBBTf Mm,0kmqn ƶ{ubv8d *3b\^`6k( ǘU9`a>G!B A]e('1kdv2_s؃0tz4:X#_jv78 ,"g+@CKDsĚi?tHF lu-Hc#E+Ȯd>xw78Oٍ>_eVA!O)aw%LJP;oQ4#&sǸN}\+ܡz]loHLFNNn݃Ҙރ4|fb,Y& Yƹ[ A}syv s*.}gsډ=ܢ[['A'0_"s,Gi"ȍ )6DfA͸ͷmydX6pHωWY` 7q&6džjѥy]J"c.v oS2U={gM4CY: Tg+y FWEVYi.ƖV(ۗ1 c h%aAA[ -xdFvCȲ$ ֈ^VmYgeEpR+݄p#ChS(b+ǧjvz=ZCtVƛmdZ,Է|iNKGoj=xqZXt}wBI pOOʲ ӂwQ?6n9,ny/A-_kq ƀP9*d͈V⬓M>逜ƦFKO<6 x&8.²w):mUN&)%ODYݙ|'Iݭ_Ҝ+&,˲Ǘ c'«;V#x׹(b0āF~VҲ7?k`9YLBjV%Yhz0ęeC~g9Њ_#r%nC x F,uϽ:SrH7mJ3ҿZ ߖVzIJ^tj |M k_džuֿ-PNx#兯yXb '=ꪟ4]{\2?hH#\$]iݨZkzI?n>T @n7mc.j|ap’ CBee[Zw-q1?)~ &|8)6Zic_^;0-(I0~2)+>M-Ñ){U_EXDM7^qtΦkd^SǚGbGzj*܁*f"UӶDua(T PY1+enH%Biþc2 :fā0" `JJQ'p@5Gm#*- ޔWX1Wn)l͘Pnc7Xey >4dynN-!cӳ +IX{ZJx-0QkvQǝN1f2ZX弨0d픋{UX+[`j?pW.Ը{(mc8ogpHM~&|Њmũ6.M<7N_a_3&GUz-v$`Cw-$&^;3ap;:ᥜ "b A}Ϟ5E,`A^HhFI4O`ϸ%fӝqhpZ2KOujJ+ Rv !!1- "e@>mF+ i*9hm6KApA 鯬% 䅚=dҫ*v4y$_Xn`!}Fуdc.'eox1SazV6p+P )bb3=G[(= 4wWW>0dLIBaR{6?,T.!fgA$3lJk*Poش)!)؎Sky%ZnHܭ`V<$_T]LIm5ٌ?hІ`U_?[쑒i32 S(ܳ08`$X0HBGC~v m Z[)BqL8ŕ^Z=BBe~q=,qA*U/9LOHKp]@xm+^#u['*əcҷTŶZLo)^iu#[|V7a@D-xa9i^8=Ly`_)E=vR¤ US!ox$בpVZ9> )=u[}zH~LGtuj.0*d9#Jߴ;PwGm$f&tK.%c(dz?cڸهpQi>6ĘIjgS(wgx8~gZ$5A 4MxGtF\ $aq0M[:<#@!(3;؟)15FLOnRwhC-MB™ *V>c_YyJ" eoGseװyrCE@7Y tX\F7_3P%.ԮwbUp,] pT״eByuìj [3Z{_(}>' ePVAblĀ; o)E>qyջ0^Ԛ޸%~l,c 鑡0<Z?c$86o )˽믤Wq-k2E'V'Z@p= &erup>Ozv}mye%LCUM ,θ$rIL TimԁI9bp'^/*k9} H/Zj!d?vZOu8. u'.o3rUR2./@=Sf3+Ck_qYڻ?fgPAFT"e2rpѽ `$"veFg3ۘTK\dAo,tyf텾^w R-fb*+F3:`*y4&IXZY_[_aDʅo{>Auΐ|[D cפI..Bq Ne6˝Dea\>rrG.vْ-Ȣ 0(%˓:V\y 7 lCW DǟjuCQf_zqA6BNˉTP ӣx $F)BL &Ԇ(Gj?fi,&C?qh[f_U%w-|~Ȍ=N>+S2dEb۔bWcR_ޤb1* E}.0ۥ+Ŧ21EKvHXe*]w9j{Q֣9{`4aK;ˉԆlX[>JVm x=[)S3d>61Rπ^*TfktTM%kINP=/$ X2̾R'@$*Pn9$~5dIOu樾ZwPPw ̭5 _v_w2\&uZF>8B>葍x?'.Z{kX0Q"c}5%v8uYm?R(Z}Xfߊ'ޗ C( m\'7 LkiU%Z[֕1@B>rtd6ƃ8oeM~y@r-xYiV射#f|]*psϭd-ꢆ_aw-mDF&Rv|N&HnqHXŧ&^ϻx`8^.1U?GG#q]x+ؕ2Dc gș#_:RQnSX147>%[,ƒOX. `<3j4!Oj-hA{TzAD-~*>nj(`.ۣS h 1Ԋ~Xx T>rLܐ klח@3!9Jvok $0[-(kܳM/m`J=2|8]!l : 2YjC)uwNUFonTؒq>I>[2HW IKԎlpP᫗2CF4Y|Ov(;B`yZ*/D*Y$GRQWXmcl%އ-%gNfÈAznx Ja\gѬ6ca)w,`i!6shgU|ܠKzL]1'ݘ/ſ {qd#G|Q"Um󳄭 &УKT U,,n+LJW)afÝ #憿pI[)Ne-d:ΏJiJ!%>nDFЦĤ` S̊!EnKXxZ40";;W^}UȤ?!Ǻ+5d:㪖RN6k DJ\&ji=rnQ ;V<`Ya"ϱĘsz̺칚xҋmn+W&X:KBVbmbD )c@d#D[0KXsZǁڻz /db`c%0@c($0x 7T~._"Lpi_{j1^Vv qW!Z`~Y8Ҽy`dlCkk.;r}kdLwVAW@&Nm7}bXm[4 _g`5\[8_5#ҭ^:PUiي룬V I'BiK  D̀th"*>kיTҕ QBTlU vnuTiRX$(V5S3!'@ieΣ.VF'P{m;Ҭ t˼ܨmE 3@|)I}0 K->!raOfZZWs&Qr}huΐ"/ӧҭbm=z-0C}x3.>StNTtiprs*1L7|;ql. 1NP̅ }Q_]OЏzPNN>7p+ [ Ӗ.\VC$F ZIF?"AIC 3^Gg,SFt{NCUu#t3ˆZ^/)S2R]vC/,5 5[Sh,k6b,}&V,bRT=0XjUVV Ofcu@5<@YߩYmAߋ& zJtjȈ!aR˭b^>;4_ģsˤ_f P~t~ً')y?j>^⢳$Ґ.$<$3s]%nuT4v~ a,z=h⦖KeRegi0BeUev\SǩOuL OWC/VԹY 1Ym3SHX"(vttRg3f"*O*b >&\34Z#wOɌ-lcF노GR}Uf?~)ߐ[1bmOხ;!C@{/Qd^":-* ߉ܿ bbn͏! ZV/ Y-Z{A7;{¸\X<>(kѢ6iP R [T4'[{n0TH'M"aVTut]vކeVH\&UK),]\KvnCjWUGԨX7hvslaJ'+bzd ?X]8>1Szڔ mqR+D^ӴL?!_\ͣ2* +.tFa!a! K$pӍA>/23G_t+y;]nZlP/䌚;(-|Ô2ܤgG;JX!+p`s{l?y`3m2M U፩kiه=6x-Xs՛<':,uO7KL Źm @k>^"%y3K]Io].uF.^D{y>^Gr/ YFDNj߶okէ6?K+Kp\ ݵFIu`n'^ ;۴-ߢ1y񞤝6K*ok9DrhQP{ ƈ)oO$P6$h~n;:}rĤPyEoRX 1ۑ@! fnV#|'d](MAŨ\ͷ$ RƬ4QlйΝAτw*z͘vv, eUUBHv^?T1c-#Ϥ)͞< 1C{?˰>ݟ+3es$n ^r:DŽZ7,♌Paw g0+yUOñ;r֋3{f ^g2K? gR, _9j_RC"OVțqt#Ums`~U` 2Zڒuh} ohW$B)5uM@(KJÖG;# # 5|rh HtYyoc鸝*&A`Iw2%*[>Ї M$ d<:^L!4Џ+9m,~yG`8|=s(˚! Trpg;ߏZ07db 0mHi 2b9Ɂ)]JHuu%&$ jk<']oK @V4P2f39lP) S0/ -"bX4'RoCDIײ0y?ea:|΢+fGc"V95Dz<(D p(ΨG?O֐c>nnc  =1n3Ζ٘R8ߩ P43kESPhm~E)|9IO{eփD1Ezr9}kYGDG2($rF{V!sf[v U9%T nQC AߙQ22oasGKTTH!-X 쭳a{ٶ\y1B|">FjSl:=:m6 qXŕ=JəQ߮Hzg+ l}ti7ޚ6W抗5Q/l i2Ӣ/~b*lA>¿,o2j8 >+; (NPۮ#am44r)8/7ೂ,Rm[%&h$j-ldXӔ[8:=1^][Y{]GbSX~nCEv>}^6)>:Gn@"2w 3׺;Z6mE7 9Tz߷aq%lّHqr!qP|wp\ı"}F,N}>J¡煒ksi|$rr.&cM' 2T Ti1Yb$Bwr)8m,U/FBg_ ­ts FpOna.UBfk8Junc^V}% !ʄٚsVHAU3XTڗJ[;`*TEo@39%|Qgћ< ];R%p\MB[&ӵ͑L'qu|ep"=Sb"љ]町7-w%"ɧ| JuBV j-Tfz~Ef@IcKi~qW= :.IqG8%3 (:&]u=,l\6#Nn$SM):,R3v (vVm9DZ7pa0dESݣ>4VWdR,H{pigbDF)E;5:,&,Oh:O\FTIl`.ljqjXq2f4UsQ`ze/ aW HraㆄSh,'W̭NsGt(x?`,"Xbp vʯv:*3@ zP+^URmXG:4B;S%4^z[^f Aɫ3U\> 8CeO<˾]@OL*0̪Y8V;{WƩF1]U[`ݴOPcOrLBG4ܳTr>.i_ A˘C~ӡ>­B!NgsKA8#FPes1eX}7Ӧk^ezPo~ e2wt\^KTL+lSN\|xE-!lG=V,MF(WzDPA 6ʴt)9Vf`+|R})mFnE՞Oگ5{y@1fJ3VUxRH惛}[]D3XDڬqy|# p联Q9P;@uÓ ߓ-A?şc臟Cр{^xч-50KBpS >pB NL#-־3Z +-(uXEFC8T;iw[u-a^=qq{ bp*, uh PeVj'*Z(1hAQ>:8 =nmC\"+O!!J>2I W_/hn0T6Ib xyEW*gS*kΒrbJU_R|f!6h83}]io>uÿȧQH:=¶(b3n$UVYL()ֱaVYBZ'nAJBܖ}C&^5c[/;wSb H2K?3#[H9Re\ӥrdcn8&g K 0UڽB-s=U*f,QQ7W#&sKEX;3i"O`'\zCT,IvA;Z:|6.B>5VskbM(jl8Ԑ8m^ 1ٗ+W ⥟q$BXIWmEԶ⨧]v%4FH H"~/zscOh c:vCF5<E E&VyՆAZQv᜴0HA7~r&G胓֗np5͠){l&7*V 76jp N{ gks))Pqh!ԩqr*m!CB?G1[8~>y lCy"*hWX\=9? pn뻲8ojdOO}ZdP2B><(ƷXHY06~ 4'sAœ'~Ci }\Nhs} i de^R|(kw(Jlע"m)k9 մ¡ǫpK h+xƐޚ m""Yn;DHʢfi`V%"RJ]b22Nu@ |,:YڈN/mUk{P:btTeՅ3d;P2M7hOp+zTȰrk+PcLu}k"q<)&2WqXmltޞI\|Ass*ǘYή$+hۊޟJ qtOCC~WƩ:xYSw0Ow7i͞HSΛЎ]{bgG uf7 6gC}JT|UEK<’F?v`t0YO۵;b7 [2~*S<ȠkM-CTT.(e#,ZP.T| P<@k|ja$l:Hʸf$Fӏ RfWzIaZK~цCHYx5 >q a|+A{}703`W[M8g|cJRnt{RĀn̅ (5 hRr\cg0PuŅL?qrB,n:0[4X]ࡦޚ(I]iGή].l{9TDܟ؏)I j`M-(d =-Y􋯍 UYh ߭a:{SdȞki@T ?>pW$6!^l)x'ާIQ$*Ɲ%_md_~?>KJW~JҾ'sz'hMvh UM=JVm,ByB~TH2ׅ0>gψ(`w טhx<)x2`v*7 z8-j`.M0 Q.qO2E:kK =Y9nlM4DD(Mn 583e%GftǐC&K=#E3̊!k*.( OO{*jK$8 eغ&A0aBLm] "[1U`֙À v c6Yjs5t "|0EJ8ekѺm+uwDi?n")#q"P|ixJoGRqQZ+;S[:BNd3xJr1'ӮlfH_r0S<˝_s/u06Fh|.+IZP\q.`UTK_ {78}>oiݧBW_In]Iy2fy]B* xFR\wRlhvAj=A^Jx-SW@I&ʓ实<>&QPi<¬qtupt6P "m'L||=b>|a9xd{d:~8Pw4]`퀄aոEt}G/!WoИn,[g<y)f"t<8[N~1E7^nE#X; cJ=͠=oyxU'Y+)+hY ;/% $(6.zۻ ?dpl00 'S2ITqtkvV5ঔVE?$;w?z0}Hc)AO?0W8'v.fӬqGěmP8PWe'ޚrp<"L(M6 7G\(FVҁK|Qd/eKrL]=D0+pb~q=6R7_ _ l ?5 ?$ V>=bvcL,),rn}:GhLiևrڛ;41s2DIQV\7)VL׷ǎ6d]<a{_CK%S#<%GG`٭GO+c]q83SA"hsy)˘63 ÔI%9LJ;%㧿W2._%#`Tz¬e9D,6es=}+G^d n7WRqlYQhj[Wx&nE$4`/]ޟ`FJ609~,n0plΒ)yTY{agX{ *Bx9Kp{2Xy?; ?F}p~btqLؕ^4l݉#xCIJhN6=R9Px-ڹi˧DŇc:)O׌578w(z\+IN02?$ cq̺rRTL|Y dԺz;;fƺP F ]hw/x]JS|eb܇4d6=2m`Xn{W!V6UB3-BpDwĉB1PO;qnQ8j@Y)1$Om v"po!MQPW",\)nS Yi:o[ A8R椽MoϬ'i1GsD6Hhྶh˪9<1ʳy\r>,VqL`/^iʟjy 'y-,#B(Nu3[>mC8h!*/ʶxnc/o?.$?>r{}}dFrJSsFٖ6A: dO |6G6@\sW!}/`fN.CQ;g]##-W\.nɇq/+YJ%3.]"P@IoU H7*%=|z$Rarz1сB;IwHʖUnD9jR+s)ϵ@V$@E2 tOc5 Cq;~!Q;+Edxu4yL-qqQ4Y M@g.'zFpeӌnfFd cQ!ARzL4ps8eLʶnU;,{M>QkeQX ebu/Bv~s@Wrr~D19zE@e[a>O)Tz2DT#˰% ]Xo)-Q@5bԃϮ,T$y*'찀;:(x"9#Fyg}V[Owcn!3V&dOS|&Pm;df%~Iwgp4tlSTDk6(ֶu0]N?ˆQb5CF iO>{ZZk?C-="̤ouVdNjSJKT *;0#FҘ)9ĹAgUFd~(X[L* z`ku ȤKPA6 8}Ya-$|SO1<#_$t!f(ɳpZ(+@ VtPS<¸uΨHz q.zO%K;-l X_) %)& 4,$2 Dul!?na5Q/rͰO+;q$L+A;eӗ@|>l1t%qWgU|INp^G>{ts4#C<_J\玍6?lBƔiIu9j̚?D1/j5j@|VxMrNp_;An_ieE.t,lˠ  ~LCx54y+] m%lU,'$?̎I)KL{V sbO$&?0cIA7?G]B.ȱ$wAȐLMG[Lc7z--R& ;Pk~QȮOgN!`J壟Q~~i^;f`t/i+Bz]g>NZמ>2\$R i_h0dZGsŤsV:vd6~mY^.F: ^E9qC(X^]SԮt v ݦRQ-'q5 Hk(A22NQZWE:(:Aim(Yro|"%ߜJf{m5;7Taݽ3B5jIǯvc|M6yE8)1ZSh+)]R铃hFGA">p-#@$%4.]\eY2 jpR] RK)a N֭4#M* ;KkR! 3-8w?i q4M;Kp$.Fw'wL!'{{EdjyrhBE_H3_.`# DDI7QWou̝~S8]BprС/GYԼv :( @کቔC[n6nګ(D˒tcuྡqkCK2\?_B :c][:$t9 enT>9̦%.;sp#2`cv]dwp>uG#6x\DO]Xj xlsMc>4S 􂦻A7#Tm6oL4&bpz_SPʪ~ \ :cOSzi>{“6!(Zv$@PF9-ItAhv Za=CJii^Ob*>+Nޓtɾ<>,m3c`'>Z0\M!. hO՛n\w}M:G4(ihj1$!ڍsX1{OA;<^|uT~G2<: a&t4vK\^VY&RI҂:~o4`dPBNbYa#ԭcRa1!%R&XQmMxc<[!XTGs}j5 @jqʀpF"f*p-lHvdžJ@k ׿KWᢵj@yv|)F耓Y_StW֐M+<Np4@C#p ]g!# N:b}~,~m*XlG=ɇ,=3O*,ڑC RY|P}5^d1݉+t?Ay_֋ڹV0՗Z~cF^Aލ3  `k٣4gkPdJP5& mgG!U1z"}o]K")bNn  a v<`1;J65V`#_m_@ !:j$P"][i!f6ӕ +ZW5 z❴pKH-h76}G$=8;b^`|L4>.es#l"pnw֊#^Kcp5B5QES 8 3\*p#N6\uVڌ^3}MBT,[ [McuyS9u7g?L <YƳj a{]Do(ƖоK 0l Zd]4w?Gjof}:vh'*k993nnosV3>ZIl>=wN {̲/0"+9@5AL-ݡ,BSTr:v"XE1m:Gʆ q"1?.wς[<{$UV:~kM S 0(j{Eԩ-HѢQ~X3 6LLۂ>cbFZX:j&~>.']"V::0fbyG?0q֎xTH~|tc*|rkUUM(Bŵɱ$wm ~*{B'5eP'dbL,[܎tNRnH졍(N%Mm=€ؽL c.#88Y T#b ߒ,C S*jO1OLϝ;E8_yē! wRfKgöF)^x%a@RVoy 1ߙztF v!QYBj2.H(%&9CNb k TG-&ރ_援:iYrU܉miPgtcKϪ3Tؿw* !EbRZ7}2%ou1$Wma![=Dl6uԛ 1#r( +\n?!&r~5]d*9B&Jt|}*ȥm0<|emlx&_ߝU/@?U0}Ha0ĴΣD\Q}j_A{L(3z,*}1Q&﷼a^UpuPnZX'-R^jUhiJl7ˣ/(YK=Owu>0o1bgZlvm[tՏ/>pf<"VnJn&8GĐH x0;-dKhyNs|t TG{wd{p U rjPKf?i/ s}]ICk0ި$5$;ҝP(XٗƐr"rfZTIuCqhҾ ހ)ˑ1tw u(Y`|$ajX%!aQ!7'cBk%T.uf ծܪ3姏>1_BSR*"kCԌDN1ȇi (`3.%U7Y8&^-_ZvkEr>^M mmz Pߠ8ɢ1%]hq9}}Ş78y(6<>a7*8&;/HٌƬ)"缝` lmhḰ.9ihfZ ]?sG,uNmGL(,Q)}*}*_M/MhJ}Cw,e R,SP׸t'Y8]ZO0h-P#RcgtUj~sWlq)Q*ǃ o5{T0FuIn1q'K)}6y bfRvj.V"+Y_#Ytp4p50#m:׫8" A  dp\t,lCN¦Jw>e6hT0$HE^rd }ɫ[.,#xD!rvy:.g/i%L͍)PUo[K sc84ҕh, C$+Nl^;3bܼ݃ٓShG&({4|99]q?!{WG&HUY{\uC{a2?/L2@IYy Ll4C>GK. 񨯃'8ڙJ~Y5bp#*EbUz/) !?%#jIU!,!' s~-mWbOղOL$)WZм:C+wVO 8gȿ?AFpdv1pt&QP}D͟1s"~a?QPw3Lؿd)'Ibv}9g̷5]wmMBW3N3BVb,g,_bYCW1j7Nwޠ%G8A-%S(FcF' MKI:tY-ug;Q 29?u=0{F.e‰f'n?0/DϊqG'b١{]v/O%Fj NW 0 >c_eH7bFͲ1:;|*Y']mK/T艜$x)DȶShކVLv]69: .{瘧ܷè[n? i>*, ߲[hj'U([hhΉ/:$ۨwnI7V.jbct>qWMPCyĸrvnO>ySP R?O Q^6:Mj%q`zŖLiG=MVV| 4REYnZA[[7x^xޟYV5wl)Q"-ˎۛV\&3$a%|-UejX7&b֏B FXqfo93*/2#@{ڼۍFATH{a8/j[CjZ8`暷gMbޙi>:fѺueZm)@Lqz1d/p#U0PyIyK W" /y5P%mrv>Kop=NWl6ATM +V&Ax뫄băL 䔪`$*o]LAQ W.ҧ|V#,^7dLAX{!^`:Pج:'qzd*[J+EL2gʊ6!;ONZ1T 5!m;_ 1Sn5tC7t9ƃA'V3cPGl!kɗ]>n͕^cgW7mpOȂm$!8*fE$yNT_$Ri}}'(z#wYA[=8pOC{޺ɧ*sgM/} S_l/V9]LYn8#w!0PS2@9l̶뛣F]pCn3,(YVͯc=Xj-$8W0cLV^ v(U\&AO S^C>i]Ȃx1iՙ%Vazq4ؕ|\B[JH[/tmxekm퀔~UaR/ґ;|ؑnG8L4</=> WP/ʦ:͵! =O`y>4*:юe:K?:h7e-wnɌgI2@ƥ}g"^1fĻhwzˆEv9O$q%}U;(͊X;<rb"6\x2`C,b;I?igϹG |W).vzVr z>◶2"gT zizlab~.MQV %U~PaĿ[!pB`hKEK#?+>+6& HxMq:O HkR6!=-d,w\,!G2D"Bj|v)9WՈרkge_~o8!-Px`]I:8VőD̤Mb:=t9.cėyEK`2VE=j Da'OtdzաB'?N-w-9uoTgSR 6 E'1X7NjA\<0%MK"?@δ޶^@fԾ5KzVb7jA̒Z//f a4 ͐s|-օ:Ҁf*"S ?k|GQ:-} Wԏ#r Om&Br'&Ig?ly"#+ p`k j&M]aM)DHj1St_Q,e@~<y'WCXs¡(dNLRim3@iMI:PEɣ_\6NCvZDs*-[^\t#J .s{bpb"J:)(ǽ|C@q oE x!O-؏b$ykU/li~Q ۸3 w&Pj(:Q E yHw쭿ƨW&) Q\ITᄯS}eL~ krM0MF!PAΚmqI:ZwSsӡ#kn抡,縲Lf :Y e;l5Z(#a>|\+ݕɇn-VfZeUPjρwT-ȗS+ڥzӑ`L0!yY]bo@JgM,>@zl'"m+Wpf_X-m]@q3ٳ]J?"@ T,0*n 9W3,U337bϟemvxy=2aٗd/Y %#% /t76VU@zW:} I<Al&҈{v!&本`LWzN梿V{Wc&cx]`Pt-:e{o1t@WP264yF8ɔRtԐ&AS/&SC0j;x|6c'廍{ &+ 0Vׁx>#"nU}k Dx1˗F࠰4qR[vMj`aO!otRJ ABC+9+웭ǵtj." W' $fάpE'|*7<,\VuoY +#e݂VtO ionB\$]i9 ͍n[f&M3=#ylSgiF ;аe(rT߂U?˅K/%D8^I@zz?.tAR:e I;EKvZ#(VVb&0m/xr\\S!gD@m,~ Bq<)^\shC3[@#gPlAۅSV'ظ~ O'ENI],K 7in`6Ǫ d_OrUxl[yv'ؾ(T+|Qu2«OU} Ȏ);ЗWQgfǒ{"!GRdEր<N7m,wknSUdbUIaZ[)۸ZN~'\ؐJ%ú}03tx[{30" QDIB.Q,(GT'i6qA:Xr]UuA 23 ~g#NsBJch۳:w-5̥+jOUa9K9Ekm.:9\6sS4hsxjrpNV% x%uI'- :۩o{L X V)H N>;h0pͤ uÓ17^v͙r݂&EH{(3=$s??9xK,jP2;EPk,O,'6gQGI}ebުfd$+tåAxa}{%f(ѷc C!3V(v1Ì^_ ʣ=;xZCU~cQүsɐn{ŲѺGŋ8HzqrZpj8QEr6Rۦ'ѕE܁_]vmV:< o.'})+:|-"w fĞpgN㢲;$GZj [d$bK*VH*M|`˶Wo8.T2ĪPb\JY@^5c,GQ-,Xj[/s`gM"Mɉ-@w^*HӲ[5*玾(_KFշө]wApmefWt>MU8+0]φWAÙ\Uo/hx qNgd0{jP^ڍ=LIk㯁F58g9PQ㫮KV!pp9O+$V5̷|EUiCSrRy2{S%l[ZgwoS+F.2Utֵhʀ?r_;a˞:BYIH"S=[5#^\ @p ң,^g/S5k2fM ߔG{XCpِy1:0 BO6*V;9ϹcsaL?ٷn#<'@Y3Pg\`)'!vaCD[R2IN|i(Ǚ&$_3  (eT?vW%DS8 ‡ۚx#9 Q3'jT6h  zU6e74ԍY]ZՄ[XzZS~9fn̡ɘmv3m*yP SPON'ͤCc"]kY ĂfreoWgU'K J$ ROCW8l@{Z ݤZ^\mqF|n=bEFU/UVu#sUcbk1X[.ǵ:KNSj!M'u;-T(~ O^;t"p"`[O E^?!HDO.ߎ-ORer&y.~+,xo05| :Sv2A~qXٸo`8)F,>a_E6tv)rrx2naFQbC@RrAN%δAE ΔN;xZ (DvES/ik@VCy4ۓm8]C%!ͧtR-o]`R9D7`3g«#4~>nCMX==+F%gs˭ >&1QT@pg)BkMrN'g8 '?5]Kި'f;V䷏:.?2t6GA3YH ly.Z{Fi{ZQEG02̖f'l`}hH_.YxF$JX|1h*.{8?RbT{s5)^րtL+ aSe wJݰR$L3yK "3-sm%N @ŏHcbU43ՕDݙB 7J&"Y0qՎ=quPmp0Lm4_2j;oyUwZRaPC%gGN&ѕ>/9O4'hne,O8ë}HK Յ8 N" |*!v! cuҍd*Įy=e ~@@m$-cQ{ '=DX\Jb*г:Rk^?ґfFWB$IQvbp+ *h7d!#px }((UR BM|xǙt{Z[gm*zڵ|0hq=ѯwj?T fyUPQ^&MN1fG6a Vä9o {D;/ xzы}\_k]G05փd_TϙbXB 0-{6%cpMr׏;,u3!6LNu{Őnl.I~Q[$Sgpc۳H h[-\AӔ˒T]"kZЏV#A8lA(z9m!EBd늜Xۃ6h-̪9ٟMC D0Un"(o݌E+R $SJhDfl ST f59<|֏:Ԥv~52l ':lwoYi\,ހ-"CQ<&ޥ=_kz=z" %UoQGyQo!Jnyp,۲T![Ϊkr ~kGslB~a qj5 a SaG0q2/+w;zPŏlYy<>f$ZE 6c >o m:hL;?-ժv}51囑 wqJ{Jf@ ~;r9s|M) zs{iL&Mu_T+N O TL 'Em aloWJ+e@\P5~lP?׸Ɇ!8q=.kFZ,3ּ 0no='̻SK;pyp=+l-t{1ă 3nxQKN2: 4Gg\a Û%X'ZsΆw{S!DRjЭB[>J֝~Q2pRO|Ze,1@[X=>N(;:EQ4IgK܄:z5คY~4E5e>-%$G!qf;|@\ӟ6<ݘ${>Qf]mW颠pTΣu3P|ɳJ Q^.dˏAFUaw@3:xo}t~PI5qp˙BjN~gYDc k^9Eltsg,L pctFL ez eS/4˵2də9D Fp5#iy`U_Y.qUFZ}/Nې2K[SOX6!iUV\/\_ 'Hٷ!PF=5bRMI0GvD$\tCT/R64b뚴|"Rxg)8\ɖzh[gɘY!A9٢ȅH +?+].B*tⲑޞ3ʹ'_2-c֍b3: 3:F+7^O"9*-%W p&$]63_|'C*a>8;8;>~qo +07F#Ǒ?W>^Ǒ5tA59hefq/)hG)qjPRKnQkdv3ʬ&G?K^!֡8RXj:-gz_I{9)tݺZ; 4 9?Cgxᅖ (di3쮟0gĪymÕ#YX9`jI: 0SyegT?}PHXQ]gNAeíȳ̐3ELAL~e+WyP[Q^5/\|-_1~%x7I𷎴%uοeŲ>{O}|aB[\̥芜ryORuniֺ6ŲuPeND7[]j|>O>F4dƈ5 ` vI ;@5oY-%ijeQ1ftʀ FE1´#07ʎ؄]+$ knAS5.E-r1 {ْ̅c7C-T G]>G%>*U=I3LUђR GKhX> p\{ O;lL%37c)|+ROAPԻs8٦Pv+jŽ05/S`*c)/M,/S^S <'f 60sk QoʒkwFo1u^Ä5$-MQzqT'qmdiVri\SgXWb˛drۼ3tgZ94i^B™/ٓBқhmM>T[wؕO"W'J7wgwse7ysq|D#MҼρӲB3'srBiM I 5;}CT>2g/U 7d'%.#'zg"K'+WӡGNGUm<Ⲯyvr;3џ_€l%u \S pWӗ Ƽ:fz5~ lW~jG%&QaQ0f_Uϣ?[ OǭKKۺJI41g:ߖ9sGE.kc0' ~$d*^"%R{h,Em' ۡ6 aUQ(/6U'hy ;ބr ҅_:1M6\چض"L8:n]"iEU#ca5pYsƆGIdE;( CIg{͊akO2ko1wP9p"1wD%yKhl*Od ƹN} VYKbGsԂj6tm e1)Ρ&a׃wOK[hBo ::ef^JsМᱠxbDmނnEҚ5S6J }̳۴).+TImƪnA>-?mhۢX_0qTS)=;{6C ĻIeqhhB[\+|bioAXژLBD׌j>ܒrR7x5):! F {{:;Q-H v;UFnI v@Zz?PԎaϹ2#JC7ݬLBGDXȹ Ȯ.C?eeDk6}L|  D%HF,V%q+"\&SmD!; >,8dX[xvhfM1 0%Um?@Ӏ-|!wS ϶f*Mnovw)eFD-_1Cz=w"Jƈmf4)9ZhA# E;0sndۑ9:M+ghV8nC L(D$1Ã>K궪F3 5767y ~?slH1hWٓ=5"/T~I|,--:qwI?$Q}Makj9K"~pcډd n0{NH9^7IC 2?R3(zP5 |烞­6oDUqjr2/?PvSt)_%J ^ Πs*S&hc5+sEWg`U_8brM=EET WEzx@bpLf,J>TL/M# /t[bo-ۤ#YX.n+CNlg'D38>2(7ƳsߗH>R uRPτ$mfo Gx*tFt= YZ