libsemanage-python-2.1.10-16.el7> H HtxHFSssV ?*}}x?rNWh=  oc[O3[ 9PT5da74f9bbfb4891dc742f2bcdae4f74b88ce4260ro꒞LtQ FSssV ?*}}W >\K;uլk&no!`e>9?d # L %KQXh p x   ,h(8 9:+GHI X$Y,\H]X^bdFeKfNlPthuxvwXxhyx Clibsemanage-python2.1.1016.el7semanage python bindings for libsemanageThe libsemanage-python package contains the python bindings for developing SELinux management applications.Sd swsvmsrv02.fnal.govScientific LinuxScientific LinuxLGPLv2+Scientific LinuxDevelopment/Librarieshttp://oss.tresys.com/git/selinux.gitlinuxx86_6455큤Sd Sd Sd Sd a771867e7c1596b892db168f5995ebab98059cef0465eb9120b5f0d65f2d958547143b62afd08707fb649b66c205d807ee72afc6c292f11069262f924bbc6e29dbfb437b65f4e2326e6f9f5bfbf541eeac8e652a0895e3d4d61e0225661602e5dbfb437b65f4e2326e6f9f5bfbf541eeac8e652a0895e3d4d61e0225661602e5rootrootrootrootrootrootrootrootlibsemanage-2.1.10-16.el7.src.rpmlibsemanage-pythonlibsemanage-python(x86-64)@@@@@@@@    @ libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libsemanagelibsemanage.so.1()(64bit)libsemanage.so.1(LIBSEMANAGE_1.0)(64bit)python(abi)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PartialHardlinkSets)rpmlib(PayloadFilesHavePrefix)rtld(GNU_HASH)rpmlib(PayloadIsXz)2.1.10-16.el72.73.0.4-14.6.0-14.0.4-14.0-15.2-14.11.1RURkR^RNRB@R@-@R:@R-@R)QdQ@QzQu&@QfQQ@P@PP@PQP@P@PP O@O0@Oĺ@OtNO;@OO@N@N@N@N@NNNw.Nw.Np@N\NLN1O@Md@MM)MQ0@Mt@MLuLF@KKsKKKf@K{@Ka|@KTM@K(K@KJJ@J@J$JJJ#J#Jyt@JjJW-@JS8J,@I@II2Io%@Ik0Ik0I7@I7@I1.HN@HN@HN@HǶH*H@H@HW@H=I@GOGOGOG@G[@G G@GGGW@GSGNG5@G0W@G'@FFFFIFIF&@FvFɂ@FFF` @F9F/BF/BE@E@EEɿ@EEEx@El$E4D@D@D@DC@DDD@D@D{DDX@D@D@Dhm@Dhm@Dhm@D_2D?D*vD*vDDCCi@CtC@C@CCC@CC @Cǖ@Cǖ@Cǖ@Cǖ@C@C[C[C @C @C,C @C @CCf@CqCC}@C+CBCYCYC{@Cx|@CtCtCqCp@Cp@CoACiCf@CbC`@C_oC^@C\CX@CWCTCTCTCP@COCLCJWCFc@CBnCA@C:C3@C1K@C/C(C@C Daniel Mach - 2.1.10-16Daniel Mach - 2.1.10-15Dan Walsh - 2.1.10-14Dan Walsh - 2.1.10-13Dan Walsh - 2.1.10-12Dan Walsh - 2.1.10-11Dan Walsh - 2.1.10-10Dan Walsh - 2.1.10-9Dan Walsh - 2.1.10-8Dan Walsh - 2.1.10-7Dan Walsh - 2.1.10-6Dan Walsh - 2.1.10-5Dan Walsh - 2.1.10-4Dan Walsh - 2.1.10-3Dan Walsh - 2.1.10-2Dan Walsh - 2.1.10-1Dan Walsh 2.1.9-4Dan Walsh 2.1.9-3Dan Walsh - 2.1.9-2Dan Walsh - 2.1.9-1David Malcolm - 2.1.8-6David Malcolm - 2.1.8-5Fedora Release Engineering - 2.1.8-4Dan Walsh - 2.1.8-3Dan Walsh - 2.1.8-2Dan Walsh - 2.1.8-1Dan Walsh - 2.1.7-2Dan Walsh - 2.1.7-1Dan Walsh - 2.1.6-3Fedora Release Engineering - 2.1.6-2Dan Walsh - 2.1.6-2Dan Walsh - 2.1.6-1Dan Walsh - 2.1.5-4Dan Walsh - 2.1.5-3Dan Walsh - 2.1.5-2Dan Walsh - 2.1.5-1Dan Walsh - 2.1.4-2Dan Walsh - 2.1.4-2Dan Walsh - 2.1.4-1Dan Walsh - 2.1.3-2Dan Walsh - 2.1.3-1Dan Walsh - 2.1.2-1Dan Walsh - 2.1.0-1Dan Walsh - 2.0.46-6Dan Walsh - 2.0.46-5Dan Walsh - 2.0.46-4Fedora Release Engineering - 2.0.46-3David Malcolm - 2.0.46-2Dan Walsh - 2.0.46-1Thomas Spura - 2.0.45-6David Malcolm - 2.0.45-5David Malcolm - 2.0.45-4Dan Walsh - 2.0.45-3Dan Walsh - 2.0.45-2Dan Walsh - 2.0.45-1Dan Walsh - 2.0.44-2Dan Walsh - 2.0.44-1Dan Walsh - 2.0.43-4Dan Walsh - 2.0.43-3Dan Walsh - 2.0.43-2Dan Walsh - 2.0.43-1Dan Walsh - 2.0.42-1Dan Walsh - 2.0.41-1Dan Walsh - 2.0.39-1Dan Walsh - 2.0.38-2Dan Walsh - 2.0.38-1Dan Walsh - 2.0.37-1Dan Walsh - 2.0.36-2Dan Walsh - 2.0.36-1Dan Walsh - 2.0.35-2Dan Walsh - 2.0.35-1Fedora Release Engineering - 2.0.33-3Dan Walsh - 2.0.33-2Dan Walsh - 2.0.33-1Dan Walsh - 2.0.32-1Dan Walsh - 2.0.31-5Dan Walsh - 2.0.31-4Fedora Release Engineering - 2.0.31-3Dan Walsh - 2.0.31-2Dan Walsh - 2.0.31-1Dan Walsh - 2.0.30-3Ignacio Vazquez-Abrams - 2.0.30-2Dan Walsh - 2.0.30-1Ignacio Vazquez-Abrams - 2.0.29-2Dan Walsh - 2.0.28-1Dan Walsh - 2.0.28-2Dan Walsh - 2.0.28-1Dan Walsh - 2.0.27-3Dan Walsh - 2.0.27-2Dan Walsh - 2.0.27-1Dan Walsh - 2.0.26-1Dan Walsh - 2.0.25-3Tom "spot" Callaway - 2.0.25-2Dan Walsh - 2.0.25-1Dan Walsh - 2.0.24-1Dan Walsh - 2.0.23-1Dan Walsh - 2.0.22-1Dan Walsh - 2.0.20-1Dan Walsh - 2.0.19-1Dan Walsh - 2.0.18-1Dan Walsh - 2.0.16-1Dan Walsh - 2.0.15-2Dan Walsh - 2.0.15-1Dan Walsh - 2.0.14-5Dan Walsh - 2.0.14-3Dan Walsh - 2.0.14-2Dan Walsh - 2.0.14-1Dan Walsh - 2.0.12-1Dan Walsh - 2.0.11-1Dan Walsh - 2.0.10-2Dan Walsh - 2.0.10-1Dan Walsh - 2.0.9-1Dan Walsh - 2.0.6-2Dan Walsh - 2.0.6-1Dan Walsh - 2.0.5-1Dan Walsh - 2.0.4-1Dan Walsh - 2.0.3-5Dan Walsh - 2.0.3-4Dan Walsh - 2.0.3-3Dan Walsh - 2.0.3-2Dan Walsh - 2.0.3-1Dan Walsh - 2.0.2-1Dan Walsh - 2.0.1-2Dan Walsh - 2.0.1-1Dan Walsh - 2.0.0-1Dan Walsh - 1.10.1-1Dan Walsh - 1.9.2-1Dan Walsh - 1.9.1-3Jeremy Katz - 1.9.1-2Dan Walsh - 1.9.1-1Dan Walsh - 1.8-1Dan Walsh - 1.6.17-1Dan Walsh - 1.6.16-3Dan Walsh - 1.6.16-2Dan Walsh - 1.6.16-1Dan Walsh - 1.6.15-1Dan Walsh - 1.6.13-3Dan Walsh - 1.6.13-2Dan Walsh - 1.6.13-1Dan Walsh - 1.6.12-2Dan Walsh - 1.6.12-1Dan Walsh - 1.6.11-1Dan Walsh - 1.6.9-1Dan Walsh - 1.6.8-2Dan Walsh - 1.6.8-1Dan Walsh - 1.6.7-3Dan Walsh - 1.6.7-2Dan Walsh - 1.6.7-1Dan Walsh - 1.6.6-1Dan Walsh - 1.6.3-1Dan Walsh - 1.6.2-2Dan Walsh - 1.6.2-1Dan Walsh - 1.6-1Dan Walsh - 1.5.28-1Dan Walsh - 1.5.26-1Dan Walsh - 1.5.23-1Jesse Keating - 1.5.21-2.1Dan Walsh - 1.5.21-2Dan Walsh - 1.5.21-1Jesse Keating - 1.5.20-1.1Dan Walsh 1.5.20-1Dan Walsh 1.5.19-1Dan Walsh 1.5.18-1Dan Walsh 1.5.16-1Dan Walsh 1.5.15-1Dan Walsh 1.5.14-2Dan Walsh 1.5.14-1Dan Walsh 1.5.9-1Dan Walsh 1.5.8-1Dan Walsh 1.5.6-1Dan Walsh 1.5.4-2Dan Walsh 1.5.4-1Dan Walsh 1.5.3-3Dan Walsh 1.5.3-2Dan Walsh 1.5.3-1Dan Walsh 1.5.1-2Dan Walsh 1.5.1-1Jesse Keating Dan Walsh 1.4-1Dan Walsh 1.3.64-1Dan Walsh 1.3.63-1Dan Walsh 1.3.61-1Dan Walsh 1.3.59-1Dan Walsh 1.3.56-2Dan Walsh 1.3.56-1Dan Walsh 1.3.53-3Dan Walsh 1.3.53-2Dan Walsh 1.3.53-1Dan Walsh 1.3.52-1Dan Walsh 1.3.51-1Dan Walsh 1.3.48-1Dan Walsh 1.3.43-1Dan Walsh 1.3.41-1Dan Walsh 1.3.39-1Dan Walsh 1.3.38-1Dan Walsh 1.3.36-1Dan Walsh 1.3.35-1Dan Walsh 1.3.34-1Dan Walsh 1.3.32-1Dan Walsh 1.3.30-1Dan Walsh 1.3.28-1Dan Walsh 1.3.24-1Dan Walsh 1.3.20-1Dan Walsh 1.3.20-1Dan Walsh 1.3.18-1Dan Walsh 1.3.14-1Dan Walsh 1.3.11-1Dan Walsh 1.3.10-1Dan Walsh 1.3.9-1Dan Walsh 1.3.8-1Dan Walsh 1.3.7-1Dan Walsh 1.3.5-1Dan Walsh 1.3.4-1Dan Walsh 1.3.3-1Dan Walsh 1.3.2-1Dan Walsh 1.3.1-1Dan Walsh 1.1.6-1Dan Walsh 1.1.3-1- Mass rebuild 2014-01-24- Mass rebuild 2013-12-27- Cleanup handling of missing mls_range to fix problems with useradd -Z - Fix auditing of login record changes, roles were not working correctly. Resolves: #1018840- Fix errors found by coverity Resolves: #952237- Do not fail on missing SELinux User Record when adding login record- Add msg to audit records- Do not write error message to screen when looking for previous record for auditing. - Add mls_range from user record if the MLS range is not specified by the seuser add record. - Error out if seuser or mls range is not specified when adding user records- Create symlink from policy.kern to active kernel.- Unlink policy.kern when done to save space.- Move handling of role audit records into the library - Patch stops semanage from removing user record while in use- Remove dependance on selinux-policy, /etc/selinux should be owned by libsemanage, and selinux-policy can require it.- Allways build python3 version-- Fix test suite to build- Revert some changes which are causing the wrong policy version file to be created- Update to upstream * Add sefcontext_compile to compile regex everytime policy is rebuilt * Cleanup/fix enable/disable/remove module. * redo genhomedircon minuid * fixes from coverity * semanage_store: do not leak memory in semanage_exec_prog * genhomedircon: remove useless conditional in get_home_dirs * genhomedircon: double free in get_home_dirs * fcontext_record: do not leak on error in semanage_fcontext_key_create * genhomedircon: do not leak on failure in write_gen_home_dir_context * semanage_store: do not leak fd * genhomedircon: do not leak shells list * semanage_store: do not leak on strdup failure * semanage_store: rewrite for readability- Add selinux-policy as a requires to get /etc/selinux owned- Update to latest patches from eparis/Upstream - libsemanage: fixes from coverity - libsemange: redo genhomedircon minuid- Fix handling of missing semanage permissive -d foo, not failing correctly - Previous to this fix the first module beginning with foo would get deleted.- Update to upstream * libsemanage: do not set soname needlessly * libsemanage: remove PYTHONLIBDIR and ruby equivalent * do boolean name substitution * Fix segfault for building standard policies.- rebuild for https://fedoraproject.org/wiki/Features/Python_3.3- remove rhel logic from with_python3 conditional- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- Attempt to allocate memory for selinux_binary_policy_path and free memory - allocated by asprintf.- Fix asprintf within an asprintf call- Update to upstream * remove build warning when build swig c files * additional makefile support for rubywrap * ignore 80 column limit for readability * semanage_store: fix snprintf length argument by using asprintf * Use default semanage.conf as a fallback * use after free in python bindings- Apply patch from Sven Vermeulen to fix problem with python3 bindings.- Update to upstream * Alternate path for semanage.conf * do not link against libpython, this is considered bad in Debian * Allow to build for several ruby version * fallback-user-level- Check in correct patch.- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild- Add patch form Xin Ouyang to make library use private semanage.conf-Update to upstream * add ignoredirs config for genhomedircon * Fallback_user_level can be NULL if you are not using MLS- Rebuild with latest libsepol- Rebuild with latest libsepol- Add support for ignoredirs param in /etc/selinux/semanage.conf- Upgrade to upstream * regenerate .pc on VERSION change * maintain mode even if umask is tighter * semanage.conf man page * create man5dir if not exist- Fix handling of umask, so files get created with the correct label.- Add Guido Trentalancia semanage.conf man page-Update to upstream * Create a new preserve_tunables flag * tree: default make target to all not * fix semanage_store_access_check calling arguments- Add support for preserving tunables-Update to upstream * python wrapper makefile changes-Update to upstream 2.1.2 2011-08-17 * print error debug info for buggy fc * introduce semanage_set_root and friends * throw exceptions in python rather than return * python3 support. * patch for MCS/MLS in user files 2.1.1 2011-08-01 * Remove generated files, expand .gitignore * Use -Werror and change a few prototypes to support it- Update to upstream * Release, minor version bump- More fixes for disabled modules- Change libsemanage mechanism for handling disabled modules. Now it will only create a flag for a module indicating the module is disabled. MODULE.pp.disabled, it will no longer rename the module. This way we can ship active modules in rpm.- Add semanage_set_selinux_path, to allow semodule to work on alternate selinux pools- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- big reworking of the support-multiple-python-builds patch to deal with PEP 3149: the latest Python 3.2 onwards uses include paths and library names that don't fit prior naming patterns, and so we must query python3-config for this information. To complicate things further, python 2's python-config doesn't understand all of the options needed ("--extension-suffix"). I've thus added new Makefile variables as needed, to be supplied by the specfile by invoking the appropriate config tool (or by hardcoding the old value for "--extension-suffix" i.e. ".so") - rework python3 manifest for PEP 3149, and rebuild for newer python3- Update to upstream * Fix compliation under GCC 4.6 by Justin Mattock- rebuild with python3.2 http://lists.fedoraproject.org/pipermail/devel/2010-August/141368.html- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild- add python3 subpackage- Fix -devel package to point at the correct shared library- Move shared library to /usr/lib- Update to upstream * Add enable/disable patch support from Dan Walsh. * Add usepasswd flag to semanage.conf to disable genhomedircon using passwd from Dan Walsh. * regenerate swig wrappers- Allow disable of usepasswd- Update to upstream * Replace usage of fmemopen() with sepol_policy_file_set_mem() since glibc < 2.9 does not support binary mode ('b') for fmemopen'd streams.- Cleanup spec file- Splect libsemanage.a into a static subpackage to keep fedora packaging guidelines happy- Rebuild all c programs with -fPIC- Update to upstream * Move libsemanage.so to /usr/lib * Add NAME lines to man pages from Manoj Srivastava- Update to upstream * Move load_policy from /usr/sbin to /sbin from Dan Walsh.- Update to upstream * Add pkgconfig file from Eamon Walsh. * Add semanage_set_check_contexts() function to disable calling setfiles- Update to upstream * make swigify- Dont relabel /root with genhomedircon- Update to upstream * Change semodule upgrade behavior to install even if the module is not present from Dan Walsh. * Make genhomedircon trim excess '/' from homedirs from Dan Walsh.- Update to upstream * Fix persistent dontaudit support to rebuild policy if the dontaudit state is changed from Chad Sellers. - Move load_policy to /sbin- Add enable/disable modules- Update to upstream * Changed bzip-blocksize=0 handling to support existing compressed modules in the store.- Make sure /root is not used in genhomedircon- Revert hard linking of files between tmp/active/previous. - Enable configuration of bzip behavior from Stephen Smalley. - bzip-blocksize=0 to disable compression and decompression support. - bzip-blocksize=1..9 to set the blocksize for compression. - bzip-small=true to reduce memory usage for decompression.- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- Put check for /root back into genhomedircon- Update to upstream- Update to upstream * Ruby bindings from David Quigley.- Return error on invalid file- Fix typo- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild- Fix link to only link on sandbox- Update to upstream * Policy module compression (bzip) support from Dan Walsh. * Hard link files between tmp/active/previous from Dan Walsh.- Fix up patch to get it upstreamed- Rebuild for Python 2.6- Add semanage_mls_enabled() interface from Stephen Smalley.- Rebuild for Python 2.6- Update to upstream * Add USER to lines to homedir_template context file from Chris PeBenito.- Add compression support- Update to upstream * allow fcontext and seuser changes without rebuilding the policy from Dan Walsh- Additional fixes for Don't rebuild on fcontext or seuser modifications- Don't rebuild on fcontext or seuser modifications- Update to upstream * Modify genhomedircon to skip groupname entries. Ultimately we need to expand them to the list of users to support per-role homedir labeling when using the groupname syntax.- Update to upstream * Fix bug in genhomedircon fcontext matches logic from Dan Walsh. Strip any trailing slash before appending /*$.- Another fix for genhomedircon- fix license tag- Update to upstream * Do not call genhomedircon if the policy was not rebuilt from Stephen Smalley. Fixes semanage boolean -D seg fault (bug 441379).- Update to upstream * make swigify- Update to upstream * Use vfork rather than fork for libsemanage helpers to reduce memory overhead as suggested by Todd Miller.- Update to upstream * Free policydb before fork from Joshua Brindle. * Drop the base module immediately after expanding to permit memory re-use from Stephen Smalley.- Update to upstream * Use sepol_set_expand_consume_base to reduce peak memory usage when using semodule- Update to upstream * Fix genhomedircon to not override a file context with a homedir context from Todd Miller.- Update to upstream * Fix spurious out of memory error reports. * Merged second version of fix for genhomedircon handling from Caleb Case.- Update to upstream * Merged fix for genhomedircon handling of missing HOME_DIR or HOME_ROOT templates from Caleb Case.- Stop differentiating on user for homedir labeling- Update to upstream * Fix genhomedircon handling of shells and missing user context template from Dan Walsh. * Copy the store path in semanage_select_store from Dan Walsh. - Add expand-check=0 to semanage.conf- Fix handling of /etc/shells so genhomedircon will work- Allow semanage_genhomedircon to work with out a USER int homedir.template- Fix semanage_select_store to allocate memory, fixes crash on invalid store- Upgrade to latest from NSA * Call rmdir() rather than remove() on directory removal so that errno isn't polluted from Stephen Smalley. * Allow handle_unknown in base to be overridden by semanage.conf from Stephen Smalley.- Upgrade to latest from NSA * ustr cleanups from James Antill. * Ensure that /root gets labeled even if using the default context from Dan Walsh.- Upgrade to latest from NSA * Fix ordering of file_contexts.homedirs from Todd Miller and Dan Walsh.- Fix sort order on generated homedir context- Upgrade to latest from NSA * Fix error checking on getpw*_r functions from Todd Miller. * Make genhomedircon skip invalid homedir contexts from Todd Miller. * Set default user and prefix from seusers from Dan Walsh. * Add swigify Makefile target from Dan Walsh.- Upgrade to latest from NSA * Pass CFLAGS to CC even on link command, per Dennis Gilmore. * Clear errno on non-fatal errors to avoid reporting them upon a later error that does not set errno. * Improve reporting of system errors, e.g. full filesystem or read-only filesystem from Stephen Smalley. - Fix segfault in genhomedircon when using bad user names- Fix genhomedircon code to only generate valid context - Fixes autorelabel problem- Upgrade to latest from NSA * Change to use getpw* function calls to the _r versions from Todd Miller.- Upgrade to latest from NSA- Upgrade to latest from NSA * Allow dontaudits to be turned off via semanage interface when updating policy- Add ability to load a policy without dontaudit rules -- Rebuild to fix segfault on x86 platforms, swigify on each build- Rebuild for rawhide- Apply patch to fix dependencies in spec file from Robert Scheck- Upgrade to latest from NSA * Fix to libsemanage man patches so whatis will work better from Dan Walsh- Upgrade to latest from NSA - Merged optimizations from Stephen Smalley. - do not set all booleans upon commit, only those whose values have changed - only install the sandbox upon commit if something was rebuilt- Add SELinux to Man page Names so man -k will work- Merged dbase_file_flush patch from Dan Walsh. - This removes any mention of specific tools (e.g. semanage) - from the comment header of the auto-generated files, - since there are multiple front-end tools.- Upgrade to latest from NSA * Merged Makefile test target patch from Caleb Case. * Merged get_commit_number function rename patch from Caleb Case. * Merged strnlen -> strlen patch from Todd Miller.- Upgrade to latest from NSA * Merged python binding fix from Dan Walsh. * Updated version for stable branch.- Upgrade to latest from NSA * Merged patch to optionally reduce disk usage by removing the backup module store and linked policy from Karl MacMillan * Merged patch to correctly propagate return values in libsemanage- Apply Karl MacMillan patch to get proper error codes.- rebuild against python 2.5- Upgrade to latest from NSA * Merged patch to compile wit -fPIC instead of -fpic from Manoj Srivastava to prevent hitting the global offest table limit. Patch changed to include libselinux and libsemanage in addition to libsepol.- Upgrade to latest from NSA * Updated version for release.- Upgrade to latest from NSA * Merged patch to skip reload if no active store exists and the store path doesn't match the active store path from Dan Walsh. * Merged patch to not destroy sepol handle on error path of connect from James Athey. * Merged patch to add genhomedircon path to semanage.conf from James Athey.- Fix semanage to not load if is not the correct policy type and it is installing- Fix requires lines- Upgrade to latest from NSA * Make most copy errors fatal, but allow exceptions for file_contexts.local, seusers, and netfilter_contexts if the source file does not exist in the store.- Upgrade to latest from NSA * Merged separate local file contexts patch from Chris PeBenito. * Merged patch to make most copy errors non-fatal from Dan Walsh.- Change other updates to be non-fatal- Change netfilter stuff to be non-fatal so update can proceed.- Upgrade to latest from NSA * Merged netfilter contexts support from Chris PeBenito.- Rebuild for new gcc- Upgrade to latest from NSA * Merged support for read operations on read-only fs from Caleb Case (Tresys Technology).- Upgrade to latest from NSA * Lindent. * Merged setfiles location check patch from Dan Walsh.- Upgrade to latest from NSA * Merged several fixes from Serge Hallyn: dbase_file_cache: deref of uninit data on error path. dbase_policydb_cache: clear fp to avoid double fclose semanage_fc_sort: destroy temp on error paths- Handle setfiles being in /sbin or /usr/sbin- Upgrade to latest from NSA * Updated default location for setfiles to /sbin to match policycoreutils. This can also be adjusted via semanage.conf using the syntax: [setfiles] path = /path/to/setfiles args = -q -c $@ $< [end]- Spec file cleanup from n0dalus+redhat@gmail.com- Add /usr/include/semanage to spec file- Upgrade to latest from NSA * Merged fix warnings patch from Karl MacMillan.- Upgrade to latest from NSA * Merged updated file context sorting patch from Christopher Ashworth, with bug fix for escaped character flag. * Merged file context sorting code from Christopher Ashworth (Tresys Technology), based on fc_sort.c code in refpolicy. * Merged python binding t_output_helper removal patch from Dan Walsh. * Regenerated swig files.- Fix to work with new version of swig - Upgrade to latest from NSA * Merged corrected fix for descriptor leak from Dan Walsh.- Fix leaky descriptor- Upgrade to latest from NSA * Merged Makefile PYLIBVER definition patch from Dan Walsh. * Merged man page reorganization from Ivan Gyurdiev.- Make work on RHEL4 - Upgrade to latest from NSA * Merged abort early on merge errors patch from Ivan Gyurdiev. * Cleaned up error handling in semanage_split_fc based on a patch by Serge Hallyn (IBM) and suggestions by Ivan Gyurdiev. * Merged MLS handling fixes from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged bug fix for fcontext validate handler from Ivan Gyurdiev. * Merged base_merge_components changes from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged paths array patch from Ivan Gyurdiev. * Merged bug fix patch from Ivan Gyurdiev. * Merged improve bindings patch from Ivan Gyurdiev. * Merged use PyList patch from Ivan Gyurdiev. * Merged memory leak fix patch from Ivan Gyurdiev. * Merged nodecon support patch from Ivan Gyurdiev. * Merged cleanups patch from Ivan Gyurdiev. * Merged split swig patch from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged optionals in base patch from Joshua Brindle. * Merged treat seusers/users_extra as optional sections patch from Ivan Gyurdiev. * Merged parse_optional fixes from Ivan Gyurdiev.- bump again for double-long bug on ppc(64)- Fix handling of seusers and users_map file- Upgrade to latest from NSA * Merged seuser/user_extra support patch from Joshua Brindle. * Merged remote system dbase patch from Ivan Gyurdiev.- rebuilt for new gcc4.1 snapshot and glibc changes- Upgrade to latest from NSA * Merged clone record on set_con patch from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged fname parameter patch from Ivan Gyurdiev. * Merged more size_t -> unsigned int fixes from Ivan Gyurdiev. * Merged seusers.system patch from Ivan Gyurdiev. * Merged improve port/fcontext API patch from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged seuser -> seuser_local rename patch from Ivan Gyurdiev. * Merged set_create_store, access_check, and is_connected interfaces from Joshua Brindle.- Upgrade to latest from NSA * Regenerate python wrappers.- Upgrade to latest from NSA * Merged pywrap Makefile diff from Dan Walsh. * Merged cache management patch from Ivan Gyurdiev. * Merged bugfix for dbase_llist_clear from Ivan Gyurdiev. * Merged remove apply_local function patch from Ivan Gyurdiev. * Merged only do read locking in direct case patch from Ivan Gyurdiev. * Merged cache error path memory leak fix from Ivan Gyurdiev. * Merged auto-generated file header patch from Ivan Gyurdiev. * Merged pywrap test update from Ivan Gyurdiev. * Merged hidden defs update from Ivan Gyurdiev.- Break out python out of regular Makefile- Upgrade to latest from NSA * Merged disallow port overlap patch from Ivan Gyurdiev. * Merged join prereq and implementation patches from Ivan Gyurdiev. * Merged join user extra data part 2 patch from Ivan Gyurdiev. * Merged bugfix patch from Ivan Gyurdiev. * Merged remove add_local/set_local patch from Ivan Gyurdiev. * Merged user extra data part 1 patch from Ivan Gyurdiev. * Merged size_t -> unsigned int patch from Ivan Gyurdiev. * Merged calloc check in semanage_store patch from Ivan Gyurdiev, bug noticed by Steve Grubb. * Merged cleanups after add/set removal patch from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged const in APIs patch from Ivan Gyurdiev. * Merged validation of local file contexts patch from Ivan Gyurdiev. * Merged compare2 function patch from Ivan Gyurdiev. * Merged hidden def/proto update patch from Ivan Gyurdiev.- Upgrade to latest from NSA * Re-applied string and file optimization patch from Russell Coker, with bug fix. * Reverted string and file optimization patch from Russell Coker. * Clarified error messages from parse_module_headers and parse_base_headers for base/module mismatches.- Upgrade to latest from NSA * Clarified error messages from parse_module_headers and parse_base_headers for base/module mismatches. * Merged string and file optimization patch from Russell Coker. * Merged swig header reordering patch from Ivan Gyurdiev. * Merged toggle modify on add patch from Ivan Gyurdiev. * Merged ports parser bugfix patch from Ivan Gyurdiev. * Merged fcontext swig patch from Ivan Gyurdiev. * Merged remove add/modify/delete for active booleans patch from Ivan Gyurdiev. * Merged man pages for dbase functions patch from Ivan Gyurdiev. * Merged pywrap tests patch from Ivan Gyurdiev.- Patch to fix add- Upgrade to latest from NSA * Merged patch series from Ivan Gyurdiev. This includes patches to: - separate file rw code from linked list - annotate objects - fold together internal headers - support ordering of records in compare function - add active dbase backend, active booleans - return commit numbers for ro database calls - use modified flags to skip rebuild whenever possible - enable port interfaces - update swig interfaces and typemaps - add an API for file_contexts.local and file_contexts - flip the traversal order in iterate/list - reorganize sandbox_expand - add seusers MLS validation - improve dbase spec/documentation - clone record on set/add/modify- Add Ivans patch to turn on ports- Remove patch since upstream does the right thing- Upgrade to latest from NSA * Merged further header cleanups from Ivan Gyurdiev. * Merged toggle modified flag in policydb_modify, fix memory leak in clear_obsolete, polymorphism vs headers fix, and include guards for internal headers patches from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged toggle modified flag in policydb_modify, fix memory leak in clear_obsolete, polymorphism vs headers fix, and include guards for internal headers patches from Ivan Gyurdiev.- Upgrade to latest from NSA * Added file-mode= setting to semanage.conf, default to 0644. Changed semanage_copy_file and callers to use this mode when installing policy files to runtime locations.- rebuilt- Fix mode of output seusers file- Upgrade to latest from NSA * Changed semanage_handle_create() to set do_reload based on is_selinux_enabled(). This prevents improper attempts to load policy on a non-SELinux system.- Upgrade to latest from NSA * Dropped handle from user_del_role interface. * Removed defrole interfaces.- Upgrade to latest from NSA * Merged Makefile python definitions patch from Dan Walsh. * Removed is_selinux_mls_enabled() conditionals in seusers and users file parsers.- Add additional swig objects * Merged wrap char*** for user_get_roles patch from Joshua Brindle. * Merged remove defrole from sepol patch from Ivan Gyurdiev. * Merged swig wrappers for modifying users and seusers from Joshua Brindle.- Add additional swig objects- Upgrade to latest from NSA * Fixed free->key_free bug. * Merged clear obsolete patch from Ivan Gyurdiev. * Merged modified swigify patch from Dan Walsh (original patch from Joshua Brindle). * Merged move genhomedircon call patch from Chad Sellers.- Add genhomedircon patch from Joshua Brindle- Add swigify patch from Joshua Brindle- Upgrade to latest from NSA * Merged move seuser validation patch from Ivan Gyurdiev. * Merged hidden declaration fixes from Ivan Gyurdiev, with minor corrections.- Upgrade to latest from NSA * Merged cleanup patch from Ivan Gyurdiev. This renames semanage_module_conn to semanage_direct_handle, and moves sepol handle create/destroy into semanage handle create/destroy to allow use even when disconnected (for the record interfaces).- Upgrade to latest from NSA * Clear modules modified flag upon disconnect and commit. * Added tracking of module modifications and use it to determine whether expand-time checks should be applied on commit. * Reverted semanage_set_reload_bools() interface.- Upgrade to latest from NSA * Disabled calls to port dbase for merge and commit and stubbed out calls to sepol_port interfaces since they are not exported. * Merged rename instead of copy patch from Joshua Brindle (Tresys). * Added hidden_def/hidden_proto for exported symbols used within libsemanage to eliminate relocations. Wrapped type definitions in exported headers as needed to avoid conflicts. Added src/context_internal.h and src/iface_internal.h. * Added semanage_is_managed() interface to allow detection of whether the policy is managed via libsemanage. This enables proper handling in setsebool for non-managed systems. * Merged semanage_set_reload_bools() interface from Ivan Gyurdiev, to enable runtime control over preserving active boolean values versus reloading their saved settings upon commit.- Upgrade to latest from NSA * Merged seuser parser resync, dbase tracking and cleanup, strtol bug, copyright, and assert space patches from Ivan Gyurdiev. * Added src/*_internal.h in preparation for other changes. * Added hidden/hidden_proto/hidden_def to src/debug.[hc] and src/seusers.[hc].- Upgrade to latest from NSA * Merged interface parse/print, context_to_string interface change, move assert_noeof, and order preserving patches from Ivan Gyurdiev. * Added src/dso.h in preparation for other changes. * Merged install seusers, handle/error messages, MLS parsing, and seusers validation patches from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged record interface, dbase flush, common database code, and record bugfix patches from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged dbase policydb list and count change from Ivan Gyurdiev. * Merged enable dbase and set relay patches from Ivan Gyurdiev.- Update from NSA * Merged query APIs and dbase_file_set patches from Ivan Gyurdiev.- Update from NSA * Merged sepol handle passing, seusers support, and policydb cache patches from Ivan Gyurdiev.- Update from NSA * Merged resync to sepol changes and booleans fixes/improvements patches from Ivan Gyurdiev. * Merged support for genhomedircon/homedir template, store selection, explicit policy reload, and semanage.conf relocation from Joshua Brindle.- Update from NSA * Merged resync to sepol changes and transaction fix patches from Ivan Gyurdiev. * Merged reorganize users patch from Ivan Gyurdiev. * Merged remove unused relay functions patch from Ivan Gyurdiev.- Update from NSA * Fixed policy file leaks in semanage_load_module and semanage_write_module. * Merged further database work from Ivan Gyurdiev. * Fixed bug in semanage_direct_disconnect.- Update from NSA * Merged interface renaming patch from Ivan Gyurdiev. * Merged policy component patch from Ivan Gyurdiev. * Renamed 'check=' configuration value to 'expand-check=' for clarity. * Changed semanage_commit_sandbox to check for and report errors on rename(2) calls performed during rollback. * Added optional check= configuration value to semanage.conf and updated call to sepol_expand_module to pass its value to control assertion and hierarchy checking on module expansion. * Merged fixes for make DESTDIR= builds from Joshua Brindle.- Update from NSA * Merged default database from Ivan Gyurdiev. * Merged removal of connect requirement in policydb backend from Ivan Gyurdiev. * Merged commit locking fix and lock rename from Joshua Brindle. * Merged transaction rollback in lock patch from Joshua Brindle. * Changed default args for load_policy to be null, as it no longer takes a pathname argument and we want to preserve booleans. * Merged move local dbase initialization patch from Ivan Gyurdiev. * Merged acquire/release read lock in databases patch from Ivan Gyurdiev. * Merged rename direct -> policydb as appropriate patch from Ivan Gyurdiev. * Added calls to sepol_policy_file_set_handle interface prior to invoking sepol operations on policy files. * Updated call to sepol_policydb_from_image to pass the handle.- Update from NSA * Changed default args for load_policy to be null, as it no longer takes a pathname argument and we want to preserve booleans. * Merged move local dbase initialization patch from Ivan Gyurdiev. * Merged acquire/release read lock in databases patch from Ivan Gyurdiev. * Merged rename direct -> policydb as appropriate patch from Ivan Gyurdiev. * Added calls to sepol_policy_file_set_handle interface prior to invoking sepol operations on policy files. * Updated call to sepol_policydb_from_image to pass the handle.- Update from NSA * Merged user and port APIs - policy database patch from Ivan Gyurdiev. * Converted calls to sepol link_packages and expand_module interfaces from using buffers to using sepol handles for error reporting, and changed direct_connect/disconnect to create/destroy sepol handles.- Update from NSA * Merged bugfix patch from Ivan Gyurdiev. * Merged seuser database patch from Ivan Gyurdiev. Merged direct user/port databases to the handle from Ivan Gyurdiev. * Removed obsolete include/semanage/commit_api.h (leftover). Merged seuser record patch from Ivan Gyurdiev. * Merged boolean and interface databases from Ivan Gyurdiev.- Update from NSA * Updated to use get interfaces for hidden sepol_module_package type. * Changed semanage_expand_sandbox and semanage_install_active to generate/install the latest policy version supported by libsepol by default (unless overridden by semanage.conf), since libselinux will now downgrade automatically for load_policy. * Merged new callback-based error reporting system and ongoing database work from Ivan Gyurdiev.- Update from NSA * Fixed semanage_install_active() to use the same logic for selecting a policy version as semanage_expand_sandbox(). Dropped dead code from semanage_install_sandbox().- Update from NSA * Updated for changes to libsepol, and to only use types and interfaces provided by the shared libsepol.- Update from NSA * Merged further database work from Ivan Gyurdiev.- Update from NSA * Merged iterate, redistribute, and dbase split patches from Ivan Gyurdiev.- Update from NSA * Merged patch series from Ivan Gyurdiev. (pointer typedef elimination, file renames, dbase work, backend separation) * Split interfaces from semanage.[hc] into handle.[hc], modules.[hc]. * Separated handle create from connect interface. * Added a constructor for initialization. * Moved up src/include/*.h to src. * Created a symbol map file; dropped dso.h and hidden markings.- Update from NSA * Split interfaces from semanage.[hc] into handle.[hc], modules.[hc]. * Separated handle create from connect interface. * Added a constructor for initialization. * Moved up src/include/*.h to src. * Created a symbol map file; dropped dso.h and hidden markings.- Update from NSA * Merged dbase redesign patch from Ivan Gyurdiev.- Update from NSA * Merged boolean record, stub record handler, and status codes patches from Ivan Gyurdiev.- Update from NSA * Merged stub iterator functionality from Ivan Gyurdiev. * Merged interface record patch from Ivan Gyurdiev.- Update from NSA * Merged stub functionality for managing user and port records, and record table code from Ivan Gyurdiev. * Updated version for release.- Update from NSA * Merged semod.conf template patch from Dan Walsh (Red Hat), but restored location to /usr/share/semod/semod.conf. * Fixed several bugs found by valgrind. * Fixed bug in prior patch for the semod_build_module_list leak. * Merged errno fix from Joshua Brindle (Tresys). * Merged fix for semod_build_modules_list leak on error path from Serge Hallyn (IBM). Bug found by Coverity.- Update from NSA * Merged errno fix from Joshua Brindle (Tresys). * Merged fix for semod_build_modules_list leak on error path from Serge Hallyn (IBM). Bug found by Coverity. * Merged several fixes from Serge Hallyn (IBM). Bugs found by Coverity. * Fixed several other bugs and warnings. * Merged patch to move module read/write code from libsemanage to libsepol from Jason Tang (Tresys). * Merged relay records patch from Ivan Gyurdiev. * Merged key extract patch from Ivan Gyurdiev. - Initial version - Created by Stephen Smalley 2.1.10-16.el72.1.10-16.el7_semanage.sosemanage.pysemanage.pycsemanage.pyo/usr/lib64/python2.7/site-packages/-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -m64 -mtune=genericcpioxz2x86_64-redhat-linux-gnuELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=0xc7fb3eb2dd25cb324b9cb6b7ad9cac84fb60ec67, strippedPython script, ASCII text executablepython 2.7 byte-compiled RRRRRRRR RRRR?p7zXZ !#,9] b2u y-iSqIhOAI2tgCx rDٍ͠ R~@gXZoz:bq$ F΀x#ޱT>Ѵw/ު=њ p5hE8 Aeܛd|]"[5R̰-ϋQT$&9\4maov޾UFv+N掋%<\MF\G}8z-B@UrS4*op3ŕ댪 zrY~v}/ R5};~CFﲲ*@[ )ކiA*&Yp<9ӆ#,&^QөjD4&/N WoFϠ`KOpj˗&Z-< !E* IX pgU<<[D]E*@IfC!8cE}z[9%;^EXɓ%;1:QJt=1 +{(y$YqK.;ww>$NOb|R'4ʇ^+{cs|=c`silr#e"ڥrk%(iѥZyňR7qqcG3%4ۈH$uLPvfCǗ9'Yj!f*)L#ⶫb7pW].bvug#‎"B_U9u9u׽#Hݶ.nZ&P_6ráY [n ž!ǻ .(:}sg/5i)oL` G=7}S`h|BAŁH-=|n0nJd;³2a,QhbSr_DtոJVǧiӅ < ͟#(w}[nrzz>|*rbe,wm} s鶙Iv(ro aCg1 kR˨K`>1.,2kmT31T(esk湩:|%~yHIjGRbC:iX78"v4D(3K#3|)sSКw ^ Ʈl oN;: GWrLPSBU/2DPJA``.~\"V0k?Fq%اm ʋz4#Vza&R.yUW#iBprw @y % hpWQ{2!m9|+aKŕ5Z@< m.Yyh/FQ.% _8-1 }'(' ž};_jB89KǃfOhiPBY7:Ѐ1ȻdP7Ph Ӕst.]oT+Yyşk0LyMU7 řq-UO0ňPD7^\mޠvds ?5 0[6ISW-LYU>pMleYeg=@3Տ/rō k (]ܔ K̎;;@\ J˴„7)bMxJ|[A _txyتg ZcIEaar;d˜$+БE5boܦкA8&Z!뒭ߕBi`EVhqEJmUT¤yvgѾ{xgɞZ]0 EJZZ^w؛Q߇NI˭ٴy_!f"4`ډ E3Þ{ 7||._H.W಴ij2UŻP{āxB^흂rwtC$e"Hh݆>Zqᕹ}LݲPƄZ65/ԕH?srj7B}`NfN5BI%Ϯ(~fL4S=;ۜitW XZ1?pOOql uP.LƆg1^sYNI~geUdh4%=y`Krb"fjc|<-nƌvU&¯<5"hS"Ru4+@H&J \4t~#xΤt1ZB9gL>S.(`Gԕ7oE-_>X#_=*g&Y00X||hrַ'E `iYO֑^uA 8%/dblE,h}\+ޓX$&'}wو1*Fɤ8 0=tc>GF 2k3J|@n=l=b ,#W ƾ{db8=8 x{GIŃ\~H9G넓*bMۙMt/Yг}*N9/wrPNúE*a  .G`n]h Up^ ~[Ȃ_I>.?Lt>j0QcSՃ>f|q]V ̆1{)͟Op1.ÈߙσnKϊ⛢DJHwuHE,=!?蕕G=ɆO;5] =>A}[%dBa36J'rfZۛ$,;ɜh4b^I\$ĵܟo8KqzV‚#xF&ySGu:jהۡ []/}}&~ â ;.1 NYz>㉦0zZ 8X 룓_]k]]sBm 0R-Xj ?Bz"QSkF*E@AfUtfMSX͗\o/#tى?90N 闹~*p;ؓ@*^͹& R Ikصo%jjZbN.l9+- )?S̔2߈,a}MZyAUcX !ykɄUu p'z./mp:ay?4+ER}C[3A) +] RFѕeT^Ua&5{Vu^_ny y/-q dszrQ2a5UL~^ #?D{`ͅAA$B3՛O ] ,;'ʢW H2hI^8)1t1,?lrTĔ5OSWe NU`G{v'/0]r M8]mzNzd%I⧾'y"]kBV eiص8Aygy(nIĘr AZ! úF-PnB_VOƷvP0ǠMb3NՁ)޶Z1vׂ>}6in#5 l"`\ln4:fvY`Hs#r 2EC@%vXx|R2?ZK,p<_fߠM"T*tc; h)!ԿfVQԯvʌ(\/ t[H7wI5/򿇢7E.T .?tn`Va&ʹ}jǕcdozlVdTRv#J7Q0Ð nc6ŒU=݊la!H&ޘh2yT A6ΗV3ۚY3?S'1׼26_*/e"Ϝ ]iv10gGHOxVƥxa:dj]BMr "3Icxh"ޭZ+ _1Md:g {a~ֱ 6NzCTnI {7a-@`\c$ɾZlWk*-E1 w!z~ pERŲp73nχ[ )ͽPymƲ)L!*(#`h7V A;)]zȆ~k==7g`B0W(\{o ʽ 2%) 0V֘ BGл!=xY2+  U4VudMQv#tO!c{Tn箠\"Y aqHP C bcNi(\`ĵsd1dt+V`]]dI0c՚wI2 !vҝT֬'NxRs^cD}p Aͽm1ۿta2?#aq#A8?oo2+HbYlҳa`|zݟ*J|H¦/Hg +ZaQ^JyNŁhwWNkB%y@/t~H-ఴy_4Z|,v8R*UXwo؜NBRsGCXX }zA[+$ nVw >Sk)ARarL~'_yj3*:fO&G;kBAIOQ/&f8m$Nw?s^ ':rx)P()z7REkVw\ c?߮58[[ 2iq{Pe!9riRWZؿ]xQMon$>1N YģiCʝ)K\LJ^F=!X cj;oVj4_ ,MB *#b#;^Xm$8$űO ?WVD43yxz%AfVi0 X6``D8FƖ7 ]jFbuUrU*-?"WRyj[3JJG:~fJa̵kqG65zZY ֔ˡ2V .X/Sd+C vr3H~2 IFd}jgQ<񃽸ʏJLh3W snhM/KsM"||Ran % OH* Vz r;$iG㛯s4=] euNEtU2r J̕9͕0R}i3:.! d)cex( V;a{{H8Kaت:tD& LR'جPOu@V%.^~7.$jCt 2s{NH _ֿ9Tkf׸mB .iOV8481, lqxP($}| K7́_~-g FM8q૨8I0xYŻz0:d.gaJY'\ly57/xkPuЧi=t/UEQ唴(vZ<_&"]#Rӌ4M /U7hbiIM]2OMW˖';L6 ?ĕ;&"sA]ٗQ~y.D!) $`ݴQg=+ky'(RN&fK$.Q@z9滄%^Ն| (CuQQ->y}E*nygEnC;&d?3q}gG]b.1׍F1xTVQeziv&.PreV$'sԎPq"Xe à77Z^&ثXPXQD>pL|Y itzI)x MIw B> })%5 8b|'(.8{ûpE1 ̱8{xһ2.W})zmmMsbgN$y +4K&|| "| t q_H^9J tQfDm[Ѵ~^=)H?+>R|%oOB3un}ڑDil_,F:}Y4/q\]: Qh,alƓNw^*CGezNMvXc ,U%Z2. Tv$ CtOك:\8?s6Bg_~QĿGe F;|['-cIkm_Yߩz[#qȿrs9ڛHkI4`"DX#-Yd]c+Js̺Ȧnh:䪽-d- F&w\H1W GAńGfO{ZU]"B ^y~@ x<Oℏ^ %o"I~cxn3^ƽkjG`  ߟh]CV ;JjjJ jMa2g<<΋G|7M^(vFȨv _OVqAM3X^LSiڒW. `E}2#ef-.TzB"kcֻ1ak0NXx37XLCz?;;<t( 3,p#Ї5#%\lr_ӭ34Y&GVz z\7Fz([g3ƣQc^"cQ4`ѢS? ^ bXbMhkw9Uosv`'. r\#t<k6v,C51~:uh.,xZl+ \؈5Vz) ,$J>Rqf2E\bY6w;F襂ko~Qt)fww6^vy,̧ ?B9*'2̇|2n):cvJ`CJjX~.^5)kSu-XF' eۧ9%s^ξX߹+)PV cE' :gСի'`wqwkxosFv5FRŕ[37CU‡Sjvg#PB[ZFXP~adVhŢaU`%~쀏Lua nI$L$oI|zT0va0+9e`~zm{ +/:~Trn_IheQLHIhe&8Q=껬]a0/Wu$Fyt̳O1VV4)4&4r, 7_je=VZ~,A1mɆQfO!eШla:,P]N/X㿛2齠!Q|[BMm)MSpה;pLz?x)wI!str};7L~;uȞFz<$tqv^UPjsvON:&qSđZNƼB?$&P߼:c'Wb܅]kFc(H[F(TΞL3A٢•S$}ڿ E"4vU8PII/h$OQKx)֥Nx@">U:TYl請u՘ఱ`R. ͢_ tdJٓehRn' FMkEDw*e'W[^V6Uުp1qH7XdigB,s}XHh͊d,I=8CxBPl`>Y'9WWZSxZQ_xb-  'iDwl5ͽ;B EU_U }!0#NL D۲^%;zheN/ 54 /#RF;V2jZolՆerL~鄋hElIqJ{b.0  `Y`ӻcҫA؈y@&)@'TXE$>MU?5#v79rM VHLe5ճvCYoo;r\47ª;4p{Vr_lz)z&/RQo;tC6:nGLIG8m9^. *.K[h4WHJg!L³Tb6G- .ޚ? ߥc! ko"B#ILH,70qhwƓ[(H J[`A~dÒO')U܂_>1+A~7T/a>7Ra[IfG&+'N(~CϿR|MSi eQl:#lOD#&H]ߎv%R?kRmΑ ҫV:wqxEƠćRL%ãa" %u(tDO봭 ^ )*Tʽ\E;W5'HD?B?L{B U12Ѯ;Bum<_>^Rrrܚ:j _(B1Eqİ0tO[2T5ow RRPsUhSa_-_ X2uV-$ߝ>qk]?ܡ[Py4seʺwplTn u f4]&ɞXKJ =ōQZ$]$F{tԠi3d*훁8us[o~ۨa>F28*fIt E m̗*BT*Q3(E?H$Qz![uVI002Xk_[˖#E>+/P:}a'+`/@7Iy{_ٶA/\'/'} ]AQ6I)\n*=Ð > rOvx{ҚNhumO.f_Wոe4pZ#5 _ PESV `9SӶ-W9hK2ia "Q%Y&nLaG, l6>1MK /h/Ț tWѹ5hCB28!?,KeEd|7R.vf-cS;\Nд{`/U*.oNCBCIҵ`~\6I%TPYLd.֊5 L#d9c@e \'^IT,t\Hdު+,ڍp>O|ГL(Ţh5ގ7l7P:e@82t|j) ׄC+e cb^1ZJGǾ#h\,Z5Vv:z!k3(=tsCzclQ=b3t*ou$v֏oz6y*Aㅠ퍼q{mR!VȂ뾈IP Տ"Am/|K|)-_PWQ1&Zg.;iW^1ts%FCPuDzG^X<)fx<SQS^Ӆ>bf,5w-f4DX+LF>~;[g¸l婼t& 9qrA۷ EUDB4{zh :,VBH..Hh nѭr_Cͫ3.|_@hVu--o2qu@W/V{1PW c`Am}^S9c?֨SDsVtK.q?aʃY5!gB#e<$Wp=!mi*#B{%/J\)/+R`H |4Q"Q cF:] Yo5iТy5\^\|x(\ #f|qo:(=/"a=;] [U-|kSFb"+1r6iҙP"9n vxvCˡ]OZ:^ձoR1 s/fq/d?tFq(9XzT꺞J*_x% -i$_dx>gjUi;g_tx" )xC;jQQ+2.Nb(ǥ>D 뜠xv";T}ec>JTQV~=DZy3O.6'83%wSrF8ZԘc+q[gD}p`!δY- pʕvא}rPs(^IgyUmIi 4 }p"^|Nˉ[mFVvۃF9886K&|"a-J[Ob!5]5j k#b@LN"% D_s )R%ˊOscssgv"* g<2mi =҄`#xEElib=xe O$d9#@asQ 2Ҭ0s3f۰2 "3U$ LD]$\XUБa|< qO5/_ 0e[Ld:P1'&^4ll^2"|Dn ]H/L|+1@=R?Б~`$~4y7m~Y ɧK&=IK=;"n@8^YV;{a [2V>T8!w@}X`7i3ӽj .gLNn8Tϗ 85O2+]ZswUǫlIލ]{;n?+3@M.Ҵ&' w `VX1qNjyW w߫Ə XN|SW/l/ﲫ\UK45Hm_ӉSR`8 +8k3u ITS%*uY6UJ"H5,{$ of9]v6svngۦ$h٘rc&z?BZI`)$zN¯`HX?K P LwBkO/VQaܔ]]`˾[$^5$5#W@뀽>I_`X4ך'Hz>٠<.A -/8Fk s&9Qq VAxԱMlN80vs /NBRc֤)|- ~5I>չmdU2k2OnjiI+T 6.9ECiB1Zbw"ŚقɩFw܏n\Qdlvm 4,a$@p)OP1a: {$P[n%S$w-03 \CdKrn,=絔tbΦ ,1$8H:df/b~\^KUVA8d G@O)@)Xqp"{Z)aDo2,yQKr=^ئ k;i@7*5_Kh&7bgP-,TR6ye퉩˹8eL921';/o'|AfP'G݇7mQX&` 3F2A>mHE&`*"x;.D?<t҂n.iO)~?KsNw{}zFξ0Y!-p\J=Hb$ N(T=<-Ūf@ Z`4'ubƩM>R0#52،_SU&(=;_JkIH"e T+zvЪ?@U@-]d8ar^|rq|hc$;w}l]+H"Kzdv/O#xTo|^4!bY;V1|jʕ~d\6̱=ԁQۿc bJxd"?"`zxE0zͲ@|HD5'4ldeAIdwo`9β4}ՖXڭJ4R:.(v:?ٱ93(3 nRWxW~ٟp "0 WfWiI#|,ûFUrPX4  /'`#l!Dsģ"i(rE 743i:Ժɰy abۿ!_'%3{YydKDPMO@EZ} 5D"Q#\6F̊=<˨+3 Z!'Ƕ5ƞ-O@07voJW'1t͡Bo)(оΗC[ ?z] XԃL"#"S#0`\6@n^7g JM=7^tG:R P%h  mh >qL6sMyHrogv'K^Axbl:_Dw*ႊoOijCa oJPWl 2;z)E@\u;!/lVdB%,#|脣k$׮$Ϧ"j((m<^ c|d7IVRr6eJUXw13U a,r6!"qt¦{uW\7Pc^1Q'0;*Y+\K}p&4!t}Nq4Mr8RY9,uV9;/jׁW0dGYOz-{|U M<}MM /)pr5 XUhk TIi+|/Q$m-hoEBL2JV菊XHѧWg/2r},-Gb> #bd )Ƨۡ$cyye W|XS,8~.`.MZeS 1+Nm Q 7/8j (P9г`VL %ʹ=:.lh&P8e4r#weA"K*.[y݃ޑoi/˂H"\;Xn~[ AGJ3xaRljJ+KG4wfo l§i縦ToԿ˷+ Ԓ)*Y.p"V_W7 PUNL'QL]y|?LVJht}#:¯ezs 7Ye:1>?֣W!Qi=+<:5i`{{wa}$cmX),BA$`2!`UaHNߑ~*z$xNÞ ;2}~7W'z@ጿχm(Ǔ?{U'ُ~hU} JMN_% Ғraˌ$jR7&D=ԿFScgvhѫÔt*۾BIS3IMBwsk;ilyׁ8PFLm8 #78G`Ic.*:QڍLY`HOV]$2;'uln@3gK݄"T5wZj6V;!5WW!gMaKv3@t)xW$.75NN%W4n˅Ӥe }7;N$ދMZ{)/Q3~(*ܟu )œ1OcҁRB5jپyJmmnۜ 'Q`OgF8qG E?f :=#"G=t7%gbXtLsO؋JY΀cV^S@/t^r s.]~27r&Ԕg. Lvsy7؞lrZҹLmV_˂dd5hn(iX(Jğ}9,A+bQ̣dJ3A2K(cg66 Ѧd[GDǷ)>C~FkmF{L(L);AƎ˳iP,\-[88; )b`;o>sBH&L5Z/oI+?XHHiٵ_[i98Ju~vJM&%K޶ߒTy-@o-qQ` D-6*Rp#>Z\2P*x`X<۾P'yC:\3w[FBW4< H< hN1 .ըѹ?Ϻ1rhl0q6n'D?؏qX C/gª; Lx@[gZf3 ЊP2C|>SF݈ 7"*0U`ͦe%r> YrQ=;+Y>KE F5=ŔSAUz[! .RpdP2-k&ݖe،' cs- Φ~[z=6ʢ>N+{ILq*;!$ h qZ#nԚָ]2LOg@uaa]Ju]" #\+q3~97[_Pʹ„+:Zar&&^齡,oIV]\/x+l?gWgKh)wUSMgo߸ԯp`[Y@UN5<jiJnŮaꪩSiAL}pJtܱaBPec ,Ipf|v 62IU9ae,g48xD W:]C,4Af 7,*t[h1*uCΉ}}p܆oףl?jsX# ㉕ˆrUJlxKDB8~N6X%\(K  )K㢘Dh#H{}ӦNvb24ޒvܽby3?NFiTҼZ7o8l$}7ǰI 1'N*w!ȷV"򉔁6Ο3\e3C*āǕPT L7 U1LFxHr?٭u(IMif.J>9UNjz 0yյCeiD9$Wf?f[斚pMB'LBxoKƂN /t82A'铂9iF7bx&l@Vz N"mפa>nqfHv,3HgVWr* U(/$Y ٺSKre`>USӔm[d~l06 Y wJO 1;{s=H Pӑn|5C@Xh_;6|FDvƜ}>o֕82Ռ-$]͢iX2ZPZW+( _Xi ]|zL=۲;D }C.N$# h(*F2;πQLU){V +$l4'4ߺ^/IIDD]JZ"J^2OVUr 8#ÑvGG'j2wf 6פhG~+. e(湘Y\=hxCĀV}e=;[ FG]/%UݗWdu{%QnD?D_߾wވ/W9-;U~IbV sfpO=.:=豠K%>l<}삽xI{gI[ŏAp&bR[cDK| +OǏv!ۏpTK[dE!Icm6ճ_n>ܮa!Gǘv콳h:hm\կu9/r[wp)P!gc@0)K7GO@%v# <( F8( ̲kiY#t[XpDUm z4]\D˴]w-wDr9a_k`q%o͎p=E21̵+XE{ eAT@ IPl :g#oةFɹVPGLOkQD ,"`q<1?N~NQˌjf)Z\ΖL^_+ӌxNu]fK cw4J?! b 7p`ނ!YuDD |W^c-JDjY$,KS9;IQ 'jn&0MUJItGy"=mYD|&_^F p_Y9 !ۺS ־?ΊW ^Ι:UoJN 3IP),B' [Yɋ^C!ی=/jG` [^XK2J>DTY:DW8I/i5 3K8X}Lm%%)(~Lcw'O>U3 k'3G%o:)jf exY&'3FPhО(JC؊c*x=Z#G{4 bc&^auaā-)UFW ƤD&1M,TIq|u8K2E³ŷ'fʮg[H+ydx(VҶp\:ƷfM!Cb/ω6LY3R  u@ <<ԳA$%L$:s.ר3l:Bo>3wmy}fCFCbX!#ҷjK7DC-KSɵlYBb?Bf5ImH #Ƴ.޻xsT/<>}B F8S@h,| EiWPҷP|gmӴca[.%v6!Sl{gEu.p_jyj8-Ơ&ύlZN >>8m*ڞ=Xjg=)}Z;S-2@qI)c>|{K"DW i ?0PhHh@X\t0:.HY fDO_H7%oX*MÃ{| o!!AYq$6mۜsJz4 g z)BЄVMߖbvX_o1X6o>ңA ?dwEycHc,i [@ e*O]gC/Va\qL?P釋=YeaJ-/p*)C9:=Ґ#P""x?,U-;[wv;:Hgbt*>ORu;UݽoL߄QµwM߉B4]{M<,PI7&=;7R$ZeTѥpW6ۜWvO5g#D1m;F"ȉ+cg (|'#>~ Ap-p2!v=\} ݺzs) CaT0,R(iJPy:~ hXfz&|Y\qeL%bA}Ȃ];k?O&Jsev_]d]8IhLA7qI!럜 GMG>} dED~fp=􏽚ӁS<1*SNXy{ʮݦWtk|dep3@2c%YYdywMUp0QH/ڎĚ~/VJ.a\,)T6{Ui .jHƴu!{dl73]85~zw=?kPD<[܈>h\SJJd0 0Ysb& %t%I cfZ<8U*aD,Ex+Ժ7%<-%6<f"4E-digG' 27$vjv4hv4^t}oghsr}LS tIuy0/.WW%xXΣ~[:F3=O`-pkpxF̹T<^rXPlm>g_k8aqhꎏP3}銝 h >sǏl&zc̍@>Mz|*pWvzE^c`ؒUcr>GcIᕜtqCӻy1jJt/F6JU=e -[~mR1&TyoH^Vk\4S}[QW7FjJ?drr wN7O6(ER n\|$q1`sma4J8SJ fF̕s@#\/iĞ!b4AXTavN8 ZL- 'זW7~5v(~j4TT*t0đۨ~%?6fꜶpJ[#CbH`+ %pqw  m;Oܼr[!0ӊ# Vaq҇g_?F|>;&} o4Gy n6K(R1S"6z*;T 0ZfӴZPo Z(& zψL"bQ/j`I QnEa /.t7V\uK2v?Б@ă*1%&e*\߿*r2f0{b]ec0"W(rpia0NEs: 6b0չRwB;$4kP$PcE#6߸E["ȱyBC (j+? %-GXL2tXR%?=/HwCwF,Pts;{PEmZENcɡq|JIr;~%BdKA>%W.ܫnw} S%Hja)Usd"D]$Dp FJߵ.hb?%U!w3xYLU( (GS$\U,\1 fٝr.bTRs8&Nz<h\O̬ia=HJU'⮛K SA?$!=LQA4 4%k"lQ)}AR'/d~-Q7d"L>v$T1bgэ? DdiCn>ᙠBaIcĹ )>k-{:ո9J^,"p>jusqc?!I '&ӻQi ,_aT9oO9:8ZB7rA),1;bLyӃ`Vr7Xnex}(1QPFx@[kpRbU(TnڐvW(aT=2DS5OC׿lu WnFmhagX5ځTD?ٓjrF5 [ߊS2Y!,qY82#n^xvU) M ·F7!rSOBМ[o!P+e]S %*>5#~zʑ\ @ϼW&J4 0]SydᶩC#ZFF +YHH=/1ɂʹЍAz]<ԭK.cIÝov)r_n]C-.4JW@J?}Ϡ,3("HoH\kxY [Kx'{@z_j7$$X5|2kTе4=:7*s6 3#㙊qooǽٛ=mrl >[I4YI9X{Xd?*WnfI?r(OqG{f?`?^sh9.=<]&u:)RZbN}ܩ1Jmr'sGo ~D  \YNU v4W&C{r!XxaD;Ep&]GZ#)(qY8ۜ xӀc.-1vVOCdbRkIUytкњ='A#UEKnv9?Z 8v A%)P jlA=uOl|(i/}@⿅^J3v _2ق3zOU\DFeWh/ :ct3KY _В)&/4G&u8$CQ+|p!pOBMLZAAT؆Q@/aC5ͫ*k3C@tEwYᑹ%Aw= Q9tp>V`>sRb#[p*V*sw|xC1E_6hXC@Nf(t 7`o3Sm1q E(MxEmJ_Ln/.sLwWPer7c[S_NqJua$JzZyQQF:= ,xWz~ fj 4soxv侸I!AfOel16vXr FU3}}Dx= t6S#N*JZԱ ЫҔ`h8:䕙XdG<*A 5xl]V|ݕmZs-XZ51pZ"@*G2mi]]'PiqCJ:r"&8q~46;-xy` P7sc͛„:KJ{N ٫j%-J$ I&gIF@ U lD2޾ap ^`iLNi)-mĩ&J0qhc{kW]idQyCPgI3=S-k0o-&E)=t~iň *iȏ\.VVr| #1ĺ epj3 (hsΥ&?(DLl4ßO$Ȍ :oUyӓS{ow&o_ aUq;7SшΕtGrnz@IDk~#1"NkI9OfNO5IPtoXd=R9=F{IR/4tRL /ӴIYUJ(T~zIV)w7X<0W* Enq;@//V[XP3-⎜i@- + `>ӑXM )~c,B;FE;<35"uPZE]Qc0KĒKjHv" 1ŭ!4_(20&G֠ppM۞žqu/`7APp[sz-`]RR45 tdJze;WzD=8^]fԽ2{=ߩqY*)$Б} |ZiJNZ]0܎H~􉗶C PoCJmzʤ) Q&Ct}:ˎ-\ɑ͖r J !,8T~;AaӀ.EO(9H`u)"^*)RgNyɉ(W~/֎uœgKxXBtʹGKG ͣ '0#p*|Kťؾ& }C՘9|*Vئ#澆3zI7ZX*b?*DkgPFRikG警,"R@TD8V>Pcj#$=<)mM3en)Q4YZk : X ǝmSw%G!d~'2E41[ӣF9{Hw^;}_|=C~g g-HuFRw'eUi_W̕Mj#JѤcHf:Kz4Z+u\I@ՙ!VK@,kuZ`-7n>wkH>>;_~dJX X G41;~y)@ʂzǧAjw*[qa 4k_@7@ÜH:ܱ2oZhh^O 9Y=ؾXF%$j a?Iq-pVnJQגH3doLs[_"]&+yqzWvWd][tIqke@-ל݄7P̸AtioAu~g5 SryY mCho,N |94rAhJUVX ac#mS%eЁt ES'Y{|eVk9~)#cC ;G44oPpV2`M쇦hSyz  W*٩`'a]1J-&'`缱V5K8%%gf%<$C!i(13EL[˰C3}BZ_D cY"< E@=KM zU#$$L^gm:q qpuX0 @ӮMB$@m&LxF؇[2R?!ѷ 8,Qo%,]ߏ'v#r ~S =nOD# L)J Qu{}3ɦL=-Zyc:H8+/Ձ䁩6Հv м#֠`PA$?ՅpkEKw~LO^Ѱ#*ÿ: y+Pv[̔[%'a=Z0Ix\;*̳(&Q0z}os& wj m{v*۰YO_Y ՂHhK7xfR©0YqmEŠKU o0T;@Q)O/6*׷󋧺LmvNpHf㙬6 lMtsNq/*}ȈN{'dǔ b+@ʡ\JmSw 05ߏƲ!X{*, rL]:7mQ0ͪMꩄhų*'kUʎWL %w-hZĿkуחn$sn;|=燢#_?R豟\R9z fCwI wFWx]Hg/oX`vGe,uAPs}&-e3|J!DLlP)XfC%bØf;n#;q)R4: 0Ku~F=ISz p>t{MHVXPΐ$b6>g~aUGvX {z>g`Iȴ^{W^AzO#,?*)}DJVrZɲCk=S04B %K{}OR7/w o6ul(_ÿ7քߦ @_67P[Dz(Pmt^3 ƃ2 9Oqj>xjzVt8ED<4Nu(ڥ*O\NSݤtzSg5捫:NP&[߮j:u ¿@_Mj3Ic3.;xՒ. L.]?&8b?}&ys^b +j][Q/ƍ 7ܸm Fu(py®)S!p׷4z.WG,)Q'j{PܲGYiUrqμ#Jv}MN# -}<fN`{wV7Q wn|NzM u\s`5ݬ"8qV\rΤWleu'ā^b]Us;8QfQt32odΎ+n (vwy"N1 ]ODpiՓ$>q=z,}KeԇĬ̥5dGgsyeƣ'%8xBS4`ha҅BHZ A'F#[Wa#ufM7|R!BUŏ<ݠjlBQ=4NU^!`l`o3 O6޴hdjC ]lkp:圁tC,K;0x"w|1m'YmLgInTk֩X؇wH #'U/%v :=<-%WJ}Np60^*7;O@G9q,1'd u (,RsܿdoϿ$!ɎHࢧ:hI[&)(l]EKw"e/額+o9Eߪ8 }"=` `PUädM𝺓Qsg~8ٴnЅyc@ Du>]{ q)hX}:b$N f !zm D 6J?aÜ;90F:=k?@p+  `0bu^LJ\)A 02-p!-d}(UPx&6$xGYRf|}{*%{ݼӗg-+4=.fѴߝ\V/fT|:Gʺڮ|T9+HCa"YH |c=o_ui+^W3A[pER~JK,9D\N{@ʸRｬgb>\z7Яݥ:؏ l@}I^PH6[25FItSY);:pjE( d#_$Y)wKhX2j٣|1q)68<&*x5D)aj񪰨Lez}HK%.3$\b3w Mwp QsIRWӼc%hmw|XT]e`1,ksN)P ݝdւBf .ɟ򷹒 fuz `ʻhz0٭B+A@i KyL^"q @k%R[ @3z@ 89JcSXuxT'7cݾ; FB `w:R9U=8t5U(~̿Bcl]/bvW^ΗpYL P2czt"퐅OW?S̊qp>V Ԕc30>@LMK5" eedx6xI &Oꨰ(h5JȲ1>CNyR_ϓh`]ri![{|A8x28P g^O?zzõ%[lJvr@f 9GJ&7ӫ^4tp~r9Efd3liF2N@o|ruw;^c8+t3{pvk/w[YyU%rm|\vjvm޷v$E?[#(X Mc٫PITjIU^h ;o5qRYۛ!"iwi|fɩzPc+8 n^mLol%&#\vwL+,,rY8i?=pqWS71Vq",Rgm]bp3~TV4<1/Zx`3ƿww7G,T(8X]%n`8 jq6SzwlyNF w*!bʺezE?* ;qĢvXx 5ncqglULKLL(߈xVI[r_R@RɈ9\8Uzk#ݞn$J(ƯMߠ gf/x3 ݙOld/nxNJ NE FO䓯D76 r:#/"[ )d{HdPOdz/iF,qrOrwee~?D[da6X<[ $?CRX(XJ36X<+T;s?\Hs.ZU5qؤҕRZ8YT+^aK_REߠéJ00[LKĠ~[i=$*0"D?Q0S'Quvڅ '"1Bq݈y`Y 1*ֈ^"|1{M/ENb%.˨RAeǺ #d8RZ^XܫIN%֒g/AޠZvGo$~F( ?v1wZy=w-(Kh,C*osG;&MނO"WEq'y}ZbLDKGZrh' /MfB6;YaRnaByw/ɪgz/kMFY]+fq}nm:|W -5v:լLV\ğNk[Luo;׊9\nÒcK G^.!|; .J7 [bCZNFY.&gqA BΥƼJ zw}UJeAj['&âK+0*"@HN wtQxbNq5K!@,Z y4`T;":L#(QO̟ _U-NQo5 9J@.NRg`kͧx^tgCFXC T% 1Aۉ97'OTS ;"[bƷ*̅:JhүDŽ WMOg^ ec؃ac uګA:hFv7{M3"+JX@wke98]*b'ҚЀ]ʗm"7udgJÔ AdsY7,j;,Yv\`WUBΠ+7cv,jM/6}6<\^jc-$C>h?1tCr'6 ճֽ#ZD.ݑ9WWl-$nOΩ1+925~6/3S{Sj'P~xءE:NKC,3,P"]`B5/Qm9 A\C~l9afrҮ%LvPT&sc3:pM-s[PP}gQ!pc!n;zWE9qZŸ+*=.j`gZ}a>1a0:* T@ZXkVb&~xGR /4tO)qM ΀4SV Wve r8'hGM_?Kd"˿e%jnx7#żrlkVa<?-{s2v&ݨw<Pz?'"ִOr7k: x<^-*[ Cw]STKTM%Zn¬ : C%mzə^CrL`L$'v HW!"aσނ-UZiq_xxShtedm!\BSM%M_SY S~_j݄pТb'Nasmk|WI eJ/JyqY=2eysanJ-B(# ETm$a8&[uP?~rIfѓZA>տr:slD1[xbE9`񷾛'@TTEND_P޸ P]Svі M碥8IG(XNObqя $O(rP[4C8aFDUDwC:z۟k=~T$:-QTuq26r%EMZoV2uYXUec`Ck.2_s\&m) 2̿Tk*7 g]결J[/T+?=1suRffl޾Jrrܷ*/ANZT:QRc߂Q,_F27Y*qj OOHqOL}rllEIɅ B*aWi->zq4+ !1$ jaxsn_t&0O|5kG-Q)V@8첌AOȃ.?tIZkVlG 3Eؔ)w\@:"i~ lOuVjNJ x>I =R,@.=H>I Uyϧ"IP6MؚIۚTXfr;ƧXD}Bّ O$g3*dSN$&܍ßo,jLÎKݟ0 T?@\U,G9lNw-,$3,+(<|]0wX=p? sUjXԏsdl'CyZA3{i;"&T8ǹJ@V9hH&[ڈ{&ϭ#-\ MZYYi,Ջe GtPPr[3j/ c\L)PQ/L7 Uߧ*@=Vc.db,n !D^d0^b 2ml1R/{7=[Ծe(U{Y޸VKLPuD No*,8| z"P$P<7Z/LtkAotVMy*LqNJ4 ם@efB?CX:Csv6\%V5, VOjIQW.wu0Z`ǁ$Om_2 CVڹ樗\Er!x٪0$).x_ jV,/BX#F;*Yd5xQ/|o;[%G ߖw+9Q폷qr/̢" N +D/dQn٧ Pa"Ei_8kK۵1}5{HΙm2ٮ \ G,A2-Pψ&U_NSH."–ﻷIb]zݢ`{&Ju~8u|@3aӭ«v2ą\L]d6 TW5 uƓT*X;DV~I4r%DOہ~O[B[(ͨSrjS 2hX;}s"$24\{#u&ːX[~4rπD%^NՃϼT4m7=qAM4"Rm1$DJ ܚ :fGkW!%w|5`h/!`pɆ$3r`s[iɅ`nąNp1H^َt#z Ie% fb^4Dz :OUނiAǜ彖gQHOp(dũqf;v8uml+pV%p) FT"vXĢ:jK!w+Cw^ѕ2 Sڛʙ\ N`zdZ=fHDuQۼ2K //,h=6ޮ 4(` p퇙<${zd)gJ7p۵opZʃ) \05t_;0#5 ^3WpnoO~oVٔrI=5[Jifqf)R$\--3BUJ¶$*S3c%?$`* !|kt(,5qwJj̅;{cV Pm:&w\qL|L~лpNC1Z݆Я^[Ќ97D@;x[odq5)t[A"6&zCq/-=JfJ3JFo|ּ>&\%Щkc|_v.#էn*?I]R 9|(e| 3ʚe&[!hO'_M?5媏V; ߡnڝUZ? zmcK}״:MbcñtBY{u&8a8sBJC;xl3 FK rro/u<.3U2ܑZHΣP?'3bE{*EU%AgG0tehB>YOj})d&Ec;'UNxkAыCPkW1 0ix@lLͧHWDJM1 xz[ś 4;t"RJQ"qJ<F x kd ?-#ʕNJ}|ϟVuΛ:]4qYz@{GZ{:r%Dq~I?q4*\PemWlz2bĿR$ %OMlU0v_F\nbW$Ma*`sMh7"4ܐ&$)# 0ևnU>p0XK  =mwĄ@ m)nFƿk9.e1n:Di~DQ}d܀F @A["gB>ࢷ->v},o>`WG*qJ9 ǸEv1۔aֲҴeg?r@Q@޻ JO&ilGIhHO˼:C-MהH ضUk.sƔ#ETUħdOjZ nT,׌xe+"1~ #ʵdWcdN ?ǃc߆iR ;"*(63%%XȖ=Tj4:H`fJNq}cƯ a52YZd)059C\c;"",]g j|]}zd0pBWkܼ (WC^<5\rb` juɗ voP\J4^O.w~ 2EVqpBYW 'f) zdWv g~'JV/K~*0t9J2l8 _Hqr7͛%R"LRZBG+nvh2wgޏ\Sl1,5!ω5)ry?ueOd2D<[rZZYp,ݫw:p*ȉfw`,Ì)ăJr SlKbٔ*:Jpʛ"6$1E,xUSCIWt؊+JT 2dT)in5}VX,|JaDXq j~p`{:!k< G"z%M}[g䐼Ii rB®(uKJi_vF"7%82IؽM2FBZD~+bdA V8. `2(^[]w&5-ٵCEu/8 y5;&D?25+v<"T7 wK7@ؤ bHX9aب{~q4+C=+&hQQziB4D Kf@BxQ^pɾ3ޝZ_G|W1d2Heo9Y $Jo}*pg.DK|!)F7`m.0ء` 7Y")%!bP\LI;19c!ƷsjAaKӛ~jѾC+3un%4?XY1{PYq§D^6n&:3Y3>m,g뽘IAmZkbp,shlJI5izepF- 3Ck>DžOwFOOslB0> ڳ댩YlXIZ\-KE=&\%yJA g_3`bpQ7[E*i96kc'̻#2E_p-8zŽP Es@p;䲡?4F#77p5a4A#9.FRFG&'qPμ`[~| C ݖTR~ D> wvfF"^zv%i={'dFPրE\.<,tf/ f̜xnW?忉QnC<, w &7B5io%uXq~*,Vkḣ8̿)<<脵cq"x$;'7㸦Y2eFȼ1p3)+ZI?gk czPe]ΗzϨy?ys+I𹉘xqҭ\M:JLfT}еx?6>ω÷y{=ެP}{bt eky7})_7D1@Sݎ9 B_`4k¸e4Zpr[FN7yKӰ¢5>u' =$ d1{GT4!~V1(!_̩ |Mo/;"-cNT鎥^~%A$U?iwC Ow2W;zLۯeu("7G'}} Aga0UP{Uj'7ҏh9mۂC.+'mg;S]xC6KЋƵ Go-QGKRŹP&F!pQq]*AA[!n`Ӧxz{Wرd7Krk}"}Hr Ё#5`v6*Ue36E @}XX d4)t}_왇:B(ǭ7k is-PS-b' _۞\Mz%”4<նa~0՜" ށ0%'Cڮ :kt*_CoGy^pOFp wE,8T!Ӱ5%G5 +4g$v83Z?[i:YάXB Fwl}u @LOòCM_QH5TŏUDu; {MuHs~I:49*IaO'8Mz1^՞z1CY;!'7UFYmdWy䲺ZOh%"|w3ȫQ*f<+j|Gab|{jƒN긇-fz9Sbk@+ѠǗ$ B( DX)%O|TT.7!0-9nubɡMZZh(lyr=>'WqV s2OxR?'[%aLx5<8m;Ϲ821`/YTeIoFbHz*68ȭ[3)EE?V֎֠ԣȷDw)n+}4Q N[D*ߤ2_|;T{֊vx[G[?S\e RZIg\a8=N$_)4V#''䕦DBfɂ<޷8?tB*aFѿ){buw%,rr),OuNpamT ?E`Zz\KW+c )aʜq{ٗ