libsemanage-2.0.43-5.1.el6>t  DH`pU F7s>-'Px*L݂ac~ߠR hZYГƾ&B4$7Vwwy?H% 'h^\lP&w ft/훑|C5E-+(p'd'@SKcV(m7O|MJZ6|ΰ1|1k̙KS Sڴ:Nخ{S Q lWSf4!Viƛfm>)fןyd[Ѐo-GOhQ-.Wr=/de5232dfe4f0e9e0df90565e0f2a78a089cc19cdU F㵹b8Z@#=2ӼQّy'$z<\29GR+%E0ҿq!ԍ,9ْCTU; >]阄s/ Vdj6~r/A_'" OrNN *5/Xc7-NA}X+lf@K9Y{,(PG%M5t{'_/+XRm% '\~1>E(h4RZH5Lmd}kI*_ ɻyN$ݟa8M1b4} }Ef]IZ= lf9.1~8a}܉)¯ьZc6}&5isxrJ<2dp+u@򩔸$ȸp@O@Н{'1vLv u׍`m2[um1ưx#,bEd&!HnJ>+PYH}$ |.Sݴ;-SE6P>:?d  H  >DLT X \ d  (0(.849 :$>@GHIXY\H]P^obdeflt u(v0wxyClibsemanage2.0.435.1.el6SELinux binary policy manipulation librarySecurity-enhanced Linux is a feature of the Linux® kernel and a number of utilities with enhanced security functionality designed to add mandatory access controls to Linux. The Security-enhanced Linux kernel contains new architectural components originally developed to improve the security of the Flask operating system. These architectural components provide general support for the enforcement of many kinds of mandatory access control policies, including those based on the concepts of Type Enforcement®, Role-based Access Control, and Multi-level Security. libsemanage provides an API for the manipulation of SELinux binary policies. It is used by checkpolicy (the policy compiler) and similar tools, as well as by programs like load_policy that need to perform specific transformations on binary policies such as customizing policy boolean settings.U c6b8.bsys.dev.centos.orgCentOSLGPLv2+CentOS BuildSystem System Environment/Librarieshttp://www.selinuxproject.orglinuxx86_64UUe4e07b7e755705011aa9cf840affcaf952f2f9b0a2600ab0065a8095430a6ff110cdd40c331ee45143c7bc4499ccf7a1d475b4782f075e0dab2528fdb7b6502arootrootrootrootlibsemanage-2.0.43-5.1.el6.src.rpmconfig(libsemanage)libsemanage.so.1()(64bit)libsemanage.so.1(LIBSEMANAGE_1.0)(64bit)libsemanagelibsemanage(x86-64)@@@@@@@@@@@@   @ /sbin/ldconfig/sbin/ldconfigbzip2-libsconfig(libsemanage)libbz2.so.1()(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.8)(64bit)libselinux.so.1()(64bit)libsepol.so.1()(64bit)libustr-1.0.so.1()(64bit)libustr-1.0.so.1(USTR_1.0)(64bit)libustr-1.0.so.1(USTR_1.0.1)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rtld(GNU_HASH)rpmlib(PayloadIsXz)2.0.43-5.1.el63.0.4-14.6.0-14.0-15.2-14.8.0UP{NKa|@KTM@K(K@KJJ@J@J$JJJ#J#Jyt@JjJW-@JS8J,@I@II2Io%@Ik0Ik0I7@I7@I1.HN@HN@HN@HǶH*H@H@HW@H=I@GOGOGOG@G[@G G@GGGW@GSGNG5@G0W@G'@FFFFIFIF&@FvFɂ@FFF` @F9F/BF/BE@E@EEɿ@EEEx@El$E4D@D@D@DC@DDD@D@D{DDX@D@D@Dhm@Dhm@Dhm@D_2D?D*vD*vDDCCi@CtC@C@CCC@CC @Cǖ@Cǖ@Cǖ@Cǖ@C@C[C[C @C @C,C @C @CCf@CqCC}@C+CBCYCYC{@Cx|@CtCtCqCp@Cp@CoACiCf@CbC`@C_oC^@C\CX@CWCTCTCTCP@COCLCJWCFc@CBnCA@C:C3@C1K@C/C(C@C Petr Lautrbach 2.0.43-5.1Miroslav Grepl - 2.0.43-4.2Dan Walsh - 2.0.43-4.1Dan Walsh - 2.0.43-4Dan Walsh - 2.0.43-3Dan Walsh - 2.0.43-2Dan Walsh - 2.0.43-1Dan Walsh - 2.0.42-1Dan Walsh - 2.0.41-1Dan Walsh - 2.0.39-1Dan Walsh - 2.0.38-2Dan Walsh - 2.0.38-1Dan Walsh - 2.0.37-1Dan Walsh - 2.0.36-2Dan Walsh - 2.0.36-1Dan Walsh - 2.0.35-2Dan Walsh - 2.0.35-1Fedora Release Engineering - 2.0.33-3Dan Walsh - 2.0.33-2Dan Walsh - 2.0.33-1Dan Walsh - 2.0.32-1Dan Walsh - 2.0.31-5Dan Walsh - 2.0.31-4Fedora Release Engineering - 2.0.31-3Dan Walsh - 2.0.31-2Dan Walsh - 2.0.31-1Dan Walsh - 2.0.30-3Ignacio Vazquez-Abrams - 2.0.30-2Dan Walsh - 2.0.30-1Ignacio Vazquez-Abrams - 2.0.29-2Dan Walsh - 2.0.28-1Dan Walsh - 2.0.28-2Dan Walsh - 2.0.28-1Dan Walsh - 2.0.27-3Dan Walsh - 2.0.27-2Dan Walsh - 2.0.27-1Dan Walsh - 2.0.26-1Dan Walsh - 2.0.25-3Tom "spot" Callaway - 2.0.25-2Dan Walsh - 2.0.25-1Dan Walsh - 2.0.24-1Dan Walsh - 2.0.23-1Dan Walsh - 2.0.22-1Dan Walsh - 2.0.20-1Dan Walsh - 2.0.19-1Dan Walsh - 2.0.18-1Dan Walsh - 2.0.16-1Dan Walsh - 2.0.15-2Dan Walsh - 2.0.15-1Dan Walsh - 2.0.14-5Dan Walsh - 2.0.14-3Dan Walsh - 2.0.14-2Dan Walsh - 2.0.14-1Dan Walsh - 2.0.12-1Dan Walsh - 2.0.11-1Dan Walsh - 2.0.10-2Dan Walsh - 2.0.10-1Dan Walsh - 2.0.9-1Dan Walsh - 2.0.6-2Dan Walsh - 2.0.6-1Dan Walsh - 2.0.5-1Dan Walsh - 2.0.4-1Dan Walsh - 2.0.3-5Dan Walsh - 2.0.3-4Dan Walsh - 2.0.3-3Dan Walsh - 2.0.3-2Dan Walsh - 2.0.3-1Dan Walsh - 2.0.2-1Dan Walsh - 2.0.1-2Dan Walsh - 2.0.1-1Dan Walsh - 2.0.0-1Dan Walsh - 1.10.1-1Dan Walsh - 1.9.2-1Dan Walsh - 1.9.1-3Jeremy Katz - 1.9.1-2Dan Walsh - 1.9.1-1Dan Walsh - 1.8-1Dan Walsh - 1.6.17-1Dan Walsh - 1.6.16-3Dan Walsh - 1.6.16-2Dan Walsh - 1.6.16-1Dan Walsh - 1.6.15-1Dan Walsh - 1.6.13-3Dan Walsh - 1.6.13-2Dan Walsh - 1.6.13-1Dan Walsh - 1.6.12-2Dan Walsh - 1.6.12-1Dan Walsh - 1.6.11-1Dan Walsh - 1.6.9-1Dan Walsh - 1.6.8-2Dan Walsh - 1.6.8-1Dan Walsh - 1.6.7-3Dan Walsh - 1.6.7-2Dan Walsh - 1.6.7-1Dan Walsh - 1.6.6-1Dan Walsh - 1.6.3-1Dan Walsh - 1.6.2-2Dan Walsh - 1.6.2-1Dan Walsh - 1.6-1Dan Walsh - 1.5.28-1Dan Walsh - 1.5.26-1Dan Walsh - 1.5.23-1Jesse Keating - 1.5.21-2.1Dan Walsh - 1.5.21-2Dan Walsh - 1.5.21-1Jesse Keating - 1.5.20-1.1Dan Walsh 1.5.20-1Dan Walsh 1.5.19-1Dan Walsh 1.5.18-1Dan Walsh 1.5.16-1Dan Walsh 1.5.15-1Dan Walsh 1.5.14-2Dan Walsh 1.5.14-1Dan Walsh 1.5.9-1Dan Walsh 1.5.8-1Dan Walsh 1.5.6-1Dan Walsh 1.5.4-2Dan Walsh 1.5.4-1Dan Walsh 1.5.3-3Dan Walsh 1.5.3-2Dan Walsh 1.5.3-1Dan Walsh 1.5.1-2Dan Walsh 1.5.1-1Jesse Keating Dan Walsh 1.4-1Dan Walsh 1.3.64-1Dan Walsh 1.3.63-1Dan Walsh 1.3.61-1Dan Walsh 1.3.59-1Dan Walsh 1.3.56-2Dan Walsh 1.3.56-1Dan Walsh 1.3.53-3Dan Walsh 1.3.53-2Dan Walsh 1.3.53-1Dan Walsh 1.3.52-1Dan Walsh 1.3.51-1Dan Walsh 1.3.48-1Dan Walsh 1.3.43-1Dan Walsh 1.3.41-1Dan Walsh 1.3.39-1Dan Walsh 1.3.38-1Dan Walsh 1.3.36-1Dan Walsh 1.3.35-1Dan Walsh 1.3.34-1Dan Walsh 1.3.32-1Dan Walsh 1.3.30-1Dan Walsh 1.3.28-1Dan Walsh 1.3.24-1Dan Walsh 1.3.20-1Dan Walsh 1.3.20-1Dan Walsh 1.3.18-1Dan Walsh 1.3.14-1Dan Walsh 1.3.11-1Dan Walsh 1.3.10-1Dan Walsh 1.3.9-1Dan Walsh 1.3.8-1Dan Walsh 1.3.7-1Dan Walsh 1.3.5-1Dan Walsh 1.3.4-1Dan Walsh 1.3.3-1Dan Walsh 1.3.2-1Dan Walsh 1.3.1-1Dan Walsh 1.1.6-1Dan Walsh 1.1.3-1- Detect already enabled/disabled modules in semanage_direct_{enable,disable} functions Resolves: rhbz#872700 - Fix sources to pass all tests Rsolves: rhbz#591451- * Add usepasswd flag to semanage.conf to disable genhomedircon using passwd Resolves:#798332- Fix handling of umask, so files get created with the correct label. Resolves: #747345- Cleanup spec file Resolves: #555835- Splect libsemanage.a into a static subpackage to keep fedora packaging guidelines happy- Rebuild all c programs with -fPIC- Update to upstream * Move libsemanage.so to /usr/lib * Add NAME lines to man pages from Manoj Srivastava- Update to upstream * Move load_policy from /usr/sbin to /sbin from Dan Walsh.- Update to upstream * Add pkgconfig file from Eamon Walsh. * Add semanage_set_check_contexts() function to disable calling setfiles- Update to upstream * make swigify- Dont relabel /root with genhomedircon- Update to upstream * Change semodule upgrade behavior to install even if the module is not present from Dan Walsh. * Make genhomedircon trim excess '/' from homedirs from Dan Walsh.- Update to upstream * Fix persistent dontaudit support to rebuild policy if the dontaudit state is changed from Chad Sellers. - Move load_policy to /sbin- Add enable/disable modules- Update to upstream * Changed bzip-blocksize=0 handling to support existing compressed modules in the store.- Make sure /root is not used in genhomedircon* Revert hard linking of files between tmp/active/previous. * Enable configuration of bzip behavior from Stephen Smalley. bzip-blocksize=0 to disable compression and decompression support. bzip-blocksize=1..9 to set the blocksize for compression. bzip-small=true to reduce memory usage for decompression.- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- Put check for /root back into genhomedircon- Update to upstream- Update to upstream * Ruby bindings from David Quigley.- Return error on invalid file- Fix typo- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild- Fix link to only link on sandbox- Update to upstream * Policy module compression (bzip) support from Dan Walsh. * Hard link files between tmp/active/previous from Dan Walsh.- Fix up patch to get it upstreamed- Rebuild for Python 2.6* Add semanage_mls_enabled() interface from Stephen Smalley.- Rebuild for Python 2.6- Update to upstream * Add USER to lines to homedir_template context file from Chris PeBenito.- Add compression support- Update to upstream * allow fcontext and seuser changes without rebuilding the policy from Dan Walsh- Additional fixes for Don't rebuild on fcontext or seuser modifications- Don't rebuild on fcontext or seuser modifications- Update to upstream * Modify genhomedircon to skip groupname entries. Ultimately we need to expand them to the list of users to support per-role homedir labeling when using the groupname syntax.- Update to upstream * Fix bug in genhomedircon fcontext matches logic from Dan Walsh. Strip any trailing slash before appending /*$.- Another fix for genhomedircon- fix license tag- Update to upstream * Do not call genhomedircon if the policy was not rebuilt from Stephen Smalley. Fixes semanage boolean -D seg fault (bug 441379).- Update to upstream * make swigify- Update to upstream * Use vfork rather than fork for libsemanage helpers to reduce memory overhead as suggested by Todd Miller.- Update to upstream * Free policydb before fork from Joshua Brindle. * Drop the base module immediately after expanding to permit memory re-use from Stephen Smalley.- Update to upstream * Use sepol_set_expand_consume_base to reduce peak memory usage when using semodule- Update to upstream * Fix genhomedircon to not override a file context with a homedir context from Todd Miller.- Update to upstream * Fix spurious out of memory error reports. * Merged second version of fix for genhomedircon handling from Caleb Case.- Update to upstream * Merged fix for genhomedircon handling of missing HOME_DIR or HOME_ROOT templates from Caleb Case.- Stop differentiating on user for homedir labeling- Update to upstream * Fix genhomedircon handling of shells and missing user context template from Dan Walsh. * Copy the store path in semanage_select_store from Dan Walsh. - Add expand-check=0 to semanage.conf- Fix handling of /etc/shells so genhomedircon will work- Allow semanage_genhomedircon to work with out a USER int homedir.template- Fix semanage_select_store to allocate memory, fixes crash on invalid store- Upgrade to latest from NSA * Call rmdir() rather than remove() on directory removal so that errno isn't polluted from Stephen Smalley. * Allow handle_unknown in base to be overridden by semanage.conf from Stephen Smalley.- Upgrade to latest from NSA * ustr cleanups from James Antill. * Ensure that /root gets labeled even if using the default context from Dan Walsh.- Upgrade to latest from NSA * Fix ordering of file_contexts.homedirs from Todd Miller and Dan Walsh.- Fix sort order on generated homedir context- Upgrade to latest from NSA * Fix error checking on getpw*_r functions from Todd Miller. * Make genhomedircon skip invalid homedir contexts from Todd Miller. * Set default user and prefix from seusers from Dan Walsh. * Add swigify Makefile target from Dan Walsh.- Upgrade to latest from NSA * Pass CFLAGS to CC even on link command, per Dennis Gilmore. * Clear errno on non-fatal errors to avoid reporting them upon a later error that does not set errno. * Improve reporting of system errors, e.g. full filesystem or read-only filesystem from Stephen Smalley. - Fix segfault in genhomedircon when using bad user names- Fix genhomedircon code to only generate valid context - Fixes autorelabel problem- Upgrade to latest from NSA * Change to use getpw* function calls to the _r versions from Todd Miller.- Upgrade to latest from NSA- Upgrade to latest from NSA * Allow dontaudits to be turned off via semanage interface when updating policy- Add ability to load a policy without dontaudit rules -- Rebuild to fix segfault on x86 platforms, swigify on each build- Rebuild for rawhide- Apply patch to fix dependencies in spec file from Robert Scheck- Upgrade to latest from NSA * Fix to libsemanage man patches so whatis will work better from Dan Walsh- Upgrade to latest from NSA * Merged optimizations from Stephen Smalley. - do not set all booleans upon commit, only those whose values have changed - only install the sandbox upon commit if something was rebuilt- Add SELinux to Man page Names so man -k will work* Merged dbase_file_flush patch from Dan Walsh. This removes any mention of specific tools (e.g. semanage) from the comment header of the auto-generated files, since there are multiple front-end tools.- Upgrade to latest from NSA * Merged Makefile test target patch from Caleb Case. * Merged get_commit_number function rename patch from Caleb Case. * Merged strnlen -> strlen patch from Todd Miller.- Upgrade to latest from NSA * Merged python binding fix from Dan Walsh. * Updated version for stable branch.- Upgrade to latest from NSA * Merged patch to optionally reduce disk usage by removing the backup module store and linked policy from Karl MacMillan * Merged patch to correctly propagate return values in libsemanage- Apply Karl MacMillan patch to get proper error codes.- rebuild against python 2.5- Upgrade to latest from NSA * Merged patch to compile wit -fPIC instead of -fpic from Manoj Srivastava to prevent hitting the global offest table limit. Patch changed to include libselinux and libsemanage in addition to libsepol.- Upgrade to latest from NSA * Updated version for release.- Upgrade to latest from NSA * Merged patch to skip reload if no active store exists and the store path doesn't match the active store path from Dan Walsh. * Merged patch to not destroy sepol handle on error path of connect from James Athey. * Merged patch to add genhomedircon path to semanage.conf from James Athey.- Fix semanage to not load if is not the correct policy type and it is installing- Fix requires lines- Upgrade to latest from NSA * Make most copy errors fatal, but allow exceptions for file_contexts.local, seusers, and netfilter_contexts if the source file does not exist in the store.- Upgrade to latest from NSA * Merged separate local file contexts patch from Chris PeBenito. * Merged patch to make most copy errors non-fatal from Dan Walsh.- Change other updates to be non-fatal- Change netfilter stuff to be non-fatal so update can proceed.- Upgrade to latest from NSA * Merged netfilter contexts support from Chris PeBenito.- Rebuild for new gcc- Upgrade to latest from NSA * Merged support for read operations on read-only fs from Caleb Case (Tresys Technology).- Upgrade to latest from NSA * Lindent. * Merged setfiles location check patch from Dan Walsh.- Upgrade to latest from NSA * Merged several fixes from Serge Hallyn: dbase_file_cache: deref of uninit data on error path. dbase_policydb_cache: clear fp to avoid double fclose semanage_fc_sort: destroy temp on error paths- Handle setfiles being in /sbin or /usr/sbin- Upgrade to latest from NSA * Updated default location for setfiles to /sbin to match policycoreutils. This can also be adjusted via semanage.conf using the syntax: [setfiles] path = /path/to/setfiles args = -q -c $@ $< [end]- Spec file cleanup from n0dalus+redhat@gmail.com- Add /usr/include/semanage to spec file- Upgrade to latest from NSA * Merged fix warnings patch from Karl MacMillan.- Upgrade to latest from NSA * Merged updated file context sorting patch from Christopher Ashworth, with bug fix for escaped character flag. * Merged file context sorting code from Christopher Ashworth (Tresys Technology), based on fc_sort.c code in refpolicy. * Merged python binding t_output_helper removal patch from Dan Walsh. * Regenerated swig files.- Fix to work with new version of swig - Upgrade to latest from NSA * Merged corrected fix for descriptor leak from Dan Walsh.- Fix leaky descriptor- Upgrade to latest from NSA * Merged Makefile PYLIBVER definition patch from Dan Walsh. * Merged man page reorganization from Ivan Gyurdiev.- Make work on RHEL4 - Upgrade to latest from NSA * Merged abort early on merge errors patch from Ivan Gyurdiev. * Cleaned up error handling in semanage_split_fc based on a patch by Serge Hallyn (IBM) and suggestions by Ivan Gyurdiev. * Merged MLS handling fixes from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged bug fix for fcontext validate handler from Ivan Gyurdiev. * Merged base_merge_components changes from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged paths array patch from Ivan Gyurdiev. * Merged bug fix patch from Ivan Gyurdiev. * Merged improve bindings patch from Ivan Gyurdiev. * Merged use PyList patch from Ivan Gyurdiev. * Merged memory leak fix patch from Ivan Gyurdiev. * Merged nodecon support patch from Ivan Gyurdiev. * Merged cleanups patch from Ivan Gyurdiev. * Merged split swig patch from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged optionals in base patch from Joshua Brindle. * Merged treat seusers/users_extra as optional sections patch from Ivan Gyurdiev. * Merged parse_optional fixes from Ivan Gyurdiev.- bump again for double-long bug on ppc(64)- Fix handling of seusers and users_map file- Upgrade to latest from NSA * Merged seuser/user_extra support patch from Joshua Brindle. * Merged remote system dbase patch from Ivan Gyurdiev.- rebuilt for new gcc4.1 snapshot and glibc changes- Upgrade to latest from NSA * Merged clone record on set_con patch from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged fname parameter patch from Ivan Gyurdiev. * Merged more size_t -> unsigned int fixes from Ivan Gyurdiev. * Merged seusers.system patch from Ivan Gyurdiev. * Merged improve port/fcontext API patch from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged seuser -> seuser_local rename patch from Ivan Gyurdiev. * Merged set_create_store, access_check, and is_connected interfaces from Joshua Brindle.- Upgrade to latest from NSA * Regenerate python wrappers.- Upgrade to latest from NSA * Merged pywrap Makefile diff from Dan Walsh. * Merged cache management patch from Ivan Gyurdiev. * Merged bugfix for dbase_llist_clear from Ivan Gyurdiev. * Merged remove apply_local function patch from Ivan Gyurdiev. * Merged only do read locking in direct case patch from Ivan Gyurdiev. * Merged cache error path memory leak fix from Ivan Gyurdiev. * Merged auto-generated file header patch from Ivan Gyurdiev. * Merged pywrap test update from Ivan Gyurdiev. * Merged hidden defs update from Ivan Gyurdiev.- Break out python out of regular Makefile- Upgrade to latest from NSA * Merged disallow port overlap patch from Ivan Gyurdiev. * Merged join prereq and implementation patches from Ivan Gyurdiev. * Merged join user extra data part 2 patch from Ivan Gyurdiev. * Merged bugfix patch from Ivan Gyurdiev. * Merged remove add_local/set_local patch from Ivan Gyurdiev. * Merged user extra data part 1 patch from Ivan Gyurdiev. * Merged size_t -> unsigned int patch from Ivan Gyurdiev. * Merged calloc check in semanage_store patch from Ivan Gyurdiev, bug noticed by Steve Grubb. * Merged cleanups after add/set removal patch from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged const in APIs patch from Ivan Gyurdiev. * Merged validation of local file contexts patch from Ivan Gyurdiev. * Merged compare2 function patch from Ivan Gyurdiev. * Merged hidden def/proto update patch from Ivan Gyurdiev.- Upgrade to latest from NSA * Re-applied string and file optimization patch from Russell Coker, with bug fix. * Reverted string and file optimization patch from Russell Coker. * Clarified error messages from parse_module_headers and parse_base_headers for base/module mismatches.- Upgrade to latest from NSA * Clarified error messages from parse_module_headers and parse_base_headers for base/module mismatches. * Merged string and file optimization patch from Russell Coker. * Merged swig header reordering patch from Ivan Gyurdiev. * Merged toggle modify on add patch from Ivan Gyurdiev. * Merged ports parser bugfix patch from Ivan Gyurdiev. * Merged fcontext swig patch from Ivan Gyurdiev. * Merged remove add/modify/delete for active booleans patch from Ivan Gyurdiev. * Merged man pages for dbase functions patch from Ivan Gyurdiev. * Merged pywrap tests patch from Ivan Gyurdiev.- Patch to fix add- Upgrade to latest from NSA * Merged patch series from Ivan Gyurdiev. This includes patches to: - separate file rw code from linked list - annotate objects - fold together internal headers - support ordering of records in compare function - add active dbase backend, active booleans - return commit numbers for ro database calls - use modified flags to skip rebuild whenever possible - enable port interfaces - update swig interfaces and typemaps - add an API for file_contexts.local and file_contexts - flip the traversal order in iterate/list - reorganize sandbox_expand - add seusers MLS validation - improve dbase spec/documentation - clone record on set/add/modify- Add Ivans patch to turn on ports- Remove patch since upstream does the right thing- Upgrade to latest from NSA * Merged further header cleanups from Ivan Gyurdiev. * Merged toggle modified flag in policydb_modify, fix memory leak in clear_obsolete, polymorphism vs headers fix, and include guards for internal headers patches from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged toggle modified flag in policydb_modify, fix memory leak in clear_obsolete, polymorphism vs headers fix, and include guards for internal headers patches from Ivan Gyurdiev.- Upgrade to latest from NSA * Added file-mode= setting to semanage.conf, default to 0644. Changed semanage_copy_file and callers to use this mode when installing policy files to runtime locations.- rebuilt- Fix mode of output seusers file- Upgrade to latest from NSA * Changed semanage_handle_create() to set do_reload based on is_selinux_enabled(). This prevents improper attempts to load policy on a non-SELinux system.- Upgrade to latest from NSA * Dropped handle from user_del_role interface. * Removed defrole interfaces.- Upgrade to latest from NSA * Merged Makefile python definitions patch from Dan Walsh. * Removed is_selinux_mls_enabled() conditionals in seusers and users file parsers.- Add additional swig objects * Merged wrap char*** for user_get_roles patch from Joshua Brindle. * Merged remove defrole from sepol patch from Ivan Gyurdiev. * Merged swig wrappers for modifying users and seusers from Joshua Brindle.- Add additional swig objects- Upgrade to latest from NSA * Fixed free->key_free bug. * Merged clear obsolete patch from Ivan Gyurdiev. * Merged modified swigify patch from Dan Walsh (original patch from Joshua Brindle). * Merged move genhomedircon call patch from Chad Sellers.- Add genhomedircon patch from Joshua Brindle- Add swigify patch from Joshua Brindle- Upgrade to latest from NSA * Merged move seuser validation patch from Ivan Gyurdiev. * Merged hidden declaration fixes from Ivan Gyurdiev, with minor corrections.- Upgrade to latest from NSA * Merged cleanup patch from Ivan Gyurdiev. This renames semanage_module_conn to semanage_direct_handle, and moves sepol handle create/destroy into semanage handle create/destroy to allow use even when disconnected (for the record interfaces).- Upgrade to latest from NSA * Clear modules modified flag upon disconnect and commit. * Added tracking of module modifications and use it to determine whether expand-time checks should be applied on commit. * Reverted semanage_set_reload_bools() interface.- Upgrade to latest from NSA * Disabled calls to port dbase for merge and commit and stubbed out calls to sepol_port interfaces since they are not exported. * Merged rename instead of copy patch from Joshua Brindle (Tresys). * Added hidden_def/hidden_proto for exported symbols used within libsemanage to eliminate relocations. Wrapped type definitions in exported headers as needed to avoid conflicts. Added src/context_internal.h and src/iface_internal.h. * Added semanage_is_managed() interface to allow detection of whether the policy is managed via libsemanage. This enables proper handling in setsebool for non-managed systems. * Merged semanage_set_reload_bools() interface from Ivan Gyurdiev, to enable runtime control over preserving active boolean values versus reloading their saved settings upon commit.- Upgrade to latest from NSA * Merged seuser parser resync, dbase tracking and cleanup, strtol bug, copyright, and assert space patches from Ivan Gyurdiev. * Added src/*_internal.h in preparation for other changes. * Added hidden/hidden_proto/hidden_def to src/debug.[hc] and src/seusers.[hc].- Upgrade to latest from NSA * Merged interface parse/print, context_to_string interface change, move assert_noeof, and order preserving patches from Ivan Gyurdiev. * Added src/dso.h in preparation for other changes. * Merged install seusers, handle/error messages, MLS parsing, and seusers validation patches from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged record interface, dbase flush, common database code, and record bugfix patches from Ivan Gyurdiev.- Upgrade to latest from NSA * Merged dbase policydb list and count change from Ivan Gyurdiev. * Merged enable dbase and set relay patches from Ivan Gyurdiev.- Update from NSA * Merged query APIs and dbase_file_set patches from Ivan Gyurdiev.- Update from NSA * Merged sepol handle passing, seusers support, and policydb cache patches from Ivan Gyurdiev.- Update from NSA * Merged resync to sepol changes and booleans fixes/improvements patches from Ivan Gyurdiev. * Merged support for genhomedircon/homedir template, store selection, explicit policy reload, and semanage.conf relocation from Joshua Brindle.- Update from NSA * Merged resync to sepol changes and transaction fix patches from Ivan Gyurdiev. * Merged reorganize users patch from Ivan Gyurdiev. * Merged remove unused relay functions patch from Ivan Gyurdiev.- Update from NSA * Fixed policy file leaks in semanage_load_module and semanage_write_module. * Merged further database work from Ivan Gyurdiev. * Fixed bug in semanage_direct_disconnect.- Update from NSA * Merged interface renaming patch from Ivan Gyurdiev. * Merged policy component patch from Ivan Gyurdiev. * Renamed 'check=' configuration value to 'expand-check=' for clarity. * Changed semanage_commit_sandbox to check for and report errors on rename(2) calls performed during rollback. * Added optional check= configuration value to semanage.conf and updated call to sepol_expand_module to pass its value to control assertion and hierarchy checking on module expansion. * Merged fixes for make DESTDIR= builds from Joshua Brindle.- Update from NSA * Merged default database from Ivan Gyurdiev. * Merged removal of connect requirement in policydb backend from Ivan Gyurdiev. * Merged commit locking fix and lock rename from Joshua Brindle. * Merged transaction rollback in lock patch from Joshua Brindle. * Changed default args for load_policy to be null, as it no longer takes a pathname argument and we want to preserve booleans. * Merged move local dbase initialization patch from Ivan Gyurdiev. * Merged acquire/release read lock in databases patch from Ivan Gyurdiev. * Merged rename direct -> policydb as appropriate patch from Ivan Gyurdiev. * Added calls to sepol_policy_file_set_handle interface prior to invoking sepol operations on policy files. * Updated call to sepol_policydb_from_image to pass the handle.- Update from NSA * Changed default args for load_policy to be null, as it no longer takes a pathname argument and we want to preserve booleans. * Merged move local dbase initialization patch from Ivan Gyurdiev. * Merged acquire/release read lock in databases patch from Ivan Gyurdiev. * Merged rename direct -> policydb as appropriate patch from Ivan Gyurdiev. * Added calls to sepol_policy_file_set_handle interface prior to invoking sepol operations on policy files. * Updated call to sepol_policydb_from_image to pass the handle.- Update from NSA * Merged user and port APIs - policy database patch from Ivan Gyurdiev. * Converted calls to sepol link_packages and expand_module interfaces from using buffers to using sepol handles for error reporting, and changed direct_connect/disconnect to create/destroy sepol handles.- Update from NSA * Merged bugfix patch from Ivan Gyurdiev. * Merged seuser database patch from Ivan Gyurdiev. Merged direct user/port databases to the handle from Ivan Gyurdiev. * Removed obsolete include/semanage/commit_api.h (leftover). Merged seuser record patch from Ivan Gyurdiev. * Merged boolean and interface databases from Ivan Gyurdiev.- Update from NSA * Updated to use get interfaces for hidden sepol_module_package type. * Changed semanage_expand_sandbox and semanage_install_active to generate/install the latest policy version supported by libsepol by default (unless overridden by semanage.conf), since libselinux will now downgrade automatically for load_policy. * Merged new callback-based error reporting system and ongoing database work from Ivan Gyurdiev.- Update from NSA * Fixed semanage_install_active() to use the same logic for selecting a policy version as semanage_expand_sandbox(). Dropped dead code from semanage_install_sandbox().- Update from NSA * Updated for changes to libsepol, and to only use types and interfaces provided by the shared libsepol.- Update from NSA * Merged further database work from Ivan Gyurdiev.- Update from NSA * Merged iterate, redistribute, and dbase split patches from Ivan Gyurdiev.- Update from NSA * Merged patch series from Ivan Gyurdiev. (pointer typedef elimination, file renames, dbase work, backend separation) * Split interfaces from semanage.[hc] into handle.[hc], modules.[hc]. * Separated handle create from connect interface. * Added a constructor for initialization. * Moved up src/include/*.h to src. * Created a symbol map file; dropped dso.h and hidden markings.- Update from NSA * Split interfaces from semanage.[hc] into handle.[hc], modules.[hc]. * Separated handle create from connect interface. * Added a constructor for initialization. * Moved up src/include/*.h to src. * Created a symbol map file; dropped dso.h and hidden markings.- Update from NSA * Merged dbase redesign patch from Ivan Gyurdiev.- Update from NSA * Merged boolean record, stub record handler, and status codes patches from Ivan Gyurdiev.- Update from NSA * Merged stub iterator functionality from Ivan Gyurdiev. * Merged interface record patch from Ivan Gyurdiev.- Update from NSA * Merged stub functionality for managing user and port records, and record table code from Ivan Gyurdiev. * Updated version for release.- Update from NSA * Merged semod.conf template patch from Dan Walsh (Red Hat), but restored location to /usr/share/semod/semod.conf. * Fixed several bugs found by valgrind. * Fixed bug in prior patch for the semod_build_module_list leak. * Merged errno fix from Joshua Brindle (Tresys). * Merged fix for semod_build_modules_list leak on error path from Serge Hallyn (IBM). Bug found by Coverity.- Update from NSA * Merged errno fix from Joshua Brindle (Tresys). * Merged fix for semod_build_modules_list leak on error path from Serge Hallyn (IBM). Bug found by Coverity. * Merged several fixes from Serge Hallyn (IBM). Bugs found by Coverity. * Fixed several other bugs and warnings. * Merged patch to move module read/write code from libsemanage to libsepol from Jason Tang (Tresys). * Merged relay records patch from Ivan Gyurdiev. * Merged key extract patch from Ivan Gyurdiev. - Initial version - Created by Stephen Smalley /sbin/ldconfig/sbin/ldconfig2.0.43-5.1.el62.0.43-5.1.el62.0.43-5.1.el6semanage.conflibsemanage.so.1/etc/selinux//lib64/-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -m64 -mtune=genericcpioxz2x86_64-redhat-linux-gnuASCII textELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, strippeddirectoryPPRRRRRR R R R R RRR?`7zXZ !PH6i] b2u Q{J󛻀ϳZ+!sܤwT]_C\.5qyw:ǡ{Y[QM`# %CG'?{>5c4}ѵW DTa\ P,"ȯ&lnPVafPZS&0I!_D;ƻ6&< .FQEUngB2n̕?nIǍ37?n +uߋ~{+\90ZeUSH"cjQE)@)* P㓝^I_2b/%*3f4S=k1:yEk#9 $v;x-+@llY);zP4"#tς|F㱻 X'(_yS#.˜!1⥑d+u]O@?0Dx'DOp@zedjⰯsRdfN `zPX.hǫdJ'i3> fVz0KCw{Xެ zPƍ "шshaIGcLxQ`tpABr/TI*6|-#_I)Vzj]%1uFP$)7ݧ< ,|*&&ԁ420{YMkj*>8xYbSj[pMT{12rı: L>ZGhue0?U+zxZy%ԆKSzaMڿd\If cQKYv ݳڇ.UyT%8qeShUS `{]HldSvY? $@ R]kNNJS!Zԋ>59#R8iɡ43 >K_y%f e9`,O.K~ƌ0H02KqtlA6bM=%jV97 B=S4#rz #= R<܂sƈ4< $=#t k{fU=@O +2/FLˈ42g2vEP2x>_M'q)r P/!a:rU]ħhB0ttQaqTSJL.!WJ^:ô1"/]L6G!\ގDI]w"И:(Ker0Y{9WLTjjg]VljMcJ16I*NMvXT:; ě)JrlYR8vR-R]ng7<~_[fڜ!Ջa!en[;"gۓ3sB'̉C*Ky5n *3Q4JYҰ ̰uO`M#І߲|o"AwEP ܡ |.@LsDAܩWHGeSXhv=vD0}cMfb%W\Q0Q#Qc =7:+,\Q9`YNqZQV"G-^$z~*HLAPAwܾ5ғkGyHȺu* f0{p7h9]#hA~RUIk5q@:;ԠM.ɓ<4p4[#O<_ OjNv0M}qdVC:Sl#/-7sEHI?tu񔐾`J[)A^("TQAii Ɲ{Rg|J<8$V ;9#1 #.MG']lv81`&Ml] ~ x%NAyHjHU m1\IJ qgvv3kʡ4.q0dE V3c!,^~zAqՃ By?k)ɔwo f>XGWF;D3Jщw;Ƙ ZlV?Em*Aw~@% 7ˁ灎)f5% n״o]O#X#9Fubsӆm%d| AdF!{l,D<)ƣkf[-Bd .vxU jĔ\b+>s=B8X+I|#N^뛒dIb̘AX[.െZaWκI: O[hl݆c0WJN<@~߱v/%]zab ꇾm%~ crq~? YlGofAx@ю!pDjM`VmO\ڞA5gR|iU>#2Xy͕}`]b$]B1ܳd[)ՑE=6jβhZ^A}*e"*+.o# lšas\.QmL4äDzy/r9fu?Jқn@\DoaZ:j*\5ND h 2w} KzOn4sv^;-8Z-S~1hRQj.6S*TY8B~ m3Թ<_KsVޘC<7֐tTS=vÇ &j󌼝?|^V?8V0\h ZB0{״VB}"߹z6c)IwwW`Tg!(Ol8`իfPXm_7-|+mx bjRQ2;]h$=>Id{6f[5+ϩ\MؙZts,4d!nA`bh&w6Y'_Щׁ>8.Q"yXz~|k&YR52e&ץ:*KHE/X.7zudqO[ӯkSҀ]n!(dW.kd@6ft9Ę52tIN Պ|NoVpvb""Yo \/΃vQ)^ByaVlBkz2vEW&bX/,^2Gocm &v3aLUD ؘlPRiaf_LZT$ཪv1xd-Rs]S d @g çQ8nx}.zT5㖎j1nBƨʪ$Q-piKrNWPc,%+gM z'= ̊~}il Ѓ10x>2[s _)/=1㬓"mfkɲtwg2ewaST:=^I1ߝmm!N 3L?`eBqN|\<4F\† EԖn1 V hDfD/UP AG:Z*oF,!wk[77x7Pf6%:{1wt)m2z%"Za9ut~q V{ido3`OV\1m^03)&?UϠ~90iK'^y,2́=v$,ЅE y6 R,^(}0nw %#"7¡'/5Vl$#<, (()f;o#_+'Uyⅱ$4eIb>Dత::)+d ɁL,JN[FB+UZ -yTX e]δ)K -IRU>{x:_ T:^'2tOqzps`nJ6Ȓpg Q2,j/}0h'dF|rQkaEWPPl$coUfڂ3ԄٕtA\B3MBۺKa/mmTlQqc[.;2oAYv`ŌLz4 S%Dw C3x[EvgCD[; xzNʘ5f4q(^d7Njm8Y$ ƙ6!XoOZG e7z,Vvo?d5V],0XjԢ};xzȔ9G5a~y<et1r`])~Q>aZ@b#1Q':?p"|!OX$5\:)1]6Y+Ȉzf3H9lc;F6Z(.#ˁˏ Ix1,?]x kZO7j ׷5}>+>{)oYĐH ]' ukD6Y9w`d6>ww~v0ԝ"c_,i,-cnOWU ໚.Vx}_TWloo Id&&*@kH C5=?4]. F3֊VE).0%IT/{JYgӐiMTU|Ex:#}H: ˺_^+ؐF)"H6A98;AklzEӉ9bunbb@YvJ:H4`qGs[\K;#aCD,R5l[\RC#bXv 8 d!0-c^E\q|tel[\h<16z)S]B+@Gƃ4v⌈?Y&H?ͷ [k P*$Ynl, -\|T5 ] SzXksGtvM02=r<7UץeM6,hVM"Oeʶ%\k͵g'/bet#IMq;ܴ aβC˭US|VBQF\.yʬHft"WS8+h_g>TLY*XOܤP1+q9OƘo3Dhk߁]W<u4#F ب%E9M?m%CbP|c_c CSKѣ{8Х+szņq:jNn2ɏ^#R=tԢ QG.|y+Dme[) 4׌fN/c&\i7]4% P !h;d)N"wwnTrA9T404?mQb杶o\|>M2?Ed{]_;*}?w Fn69EvԆH;jYPR#|l0\,e mg?0vuO=8E b4Pa@zcuH?>R>F/!wm~5D&* sm] s;COԤ.ER hOq8 1a^3>hwSRGߠIt1Cb|`,)f6=,vOȽq)ZXce?[Ԃ6 I_*U$h}źӱ'An<3>LE1&FϬF)omL<̯Z-MwX3LnwhV?PFG~(44{sor#֌zWk+"fE-zj``'YE/.V2Bw:0[j*e Suߍ= s?|yO ݎ&JGSȟ)OsF_9g/T߲bixzyrL9E!L <_AuZ(L[(NQ8&1ʟ< :W6J .t?<[^aw$-x!TÓHsp^ؖUN'/1rrczrƮGRD_3SQ%e^a- Jbx -Hw1M4NWZSDNyŬ` ǽP.w=C#q{à^*.#Mzo6[͠yl<}'gZ `ۃ.!qܘ4㷢̂[w~ܑ)hsX Q0B7<ֵN BW?q֟[Zrp=9W|m)lW[çJ3}Vrol&Fx3>@. .Gʊ&I=fqHyD*jR3Aߝҗ9 =\&*go5#"?.+bQ NN;b':?׿ژy~9^fFrݕl0ȡ#O[c d/m/U_j@c~NQy̋׵K baXɺ#4I8qO+=8q/V&tr;=Yry:R6WP `ǯWnT: YOȯ&f ?"y{lh ^==k'pF VNj)I=(x+BO#;N`~6t *;ju"vs4Kr3Q7yuz!@h5=W5@RgPؿD N᭎f$ eQխR TpMu=d2Zpu3̫{$y{kM(y]Dž.ZUeGR|TP2P(|I_&&6dj#[:N͒pk|h9xR.@Akr譇@rO@&uk}ØJF:XcIVș70AiRt!m.`W+OC׼ɴ儃RGE!p-e+nA_VًX'n":fd]DKF[M6} E3;Dw8ǚ 7̳gh3KW]-Hr@V$ _ '}ۺF‹Imi$8]nW71?R\FV94"W5ʋ9Kq~BެS}T TچNG읁}7픚GwpL'L~IURhr$ЊSbW@.Cf1MxmnI ;D_3t6?t=ZnƵvЎk"yLFBAb[;?Sxc6hCYR-$:,?Eq6V&Ώ[bT!X,]jCЩGJKvey_4'3ԙ>+ʭϙS8/Zó4C4#lT0:Bv:Fae!(6fl4y+GvWfF\JB6&K3@@|,fbu7+o;hL.P/IO=RVr"[%2V>L W^4J/ 5U.S8a: ؎_#-Wn 0'"_syp/?TC)dfTIG][V&Cnϖ'] HBFZOREDl%?rL$dowvMqM_5,ms+WuKX9*G^b=Os{240'ߑ? !|Qz N}ȝb=A9`f7#ހlQyK7DT,ja?q|i.zh#MJjfcHdÁhCLҶW !w] gξC /'{vY縫NFDS+tސVo>8 yʗ2Xز yfHt֙ }G Rv5] T̚y.,y!E Y5QƪB##M)SnXow+ ):Kv\IE[yB Ǝ[~WTJjx9 !dk(mz !ޢ\5Wi%5У@"בzKn,,~1mVr12 j}׻!0Xbc1FpRė3\0oUaZpWw-.F &9:z( uVA! IR1qaTV^П8% 7~@Hz?-a$*`[A5 ig"p|p{5;2Hmd9_5\JyY'Nr 7+j)⯌X.3aj+E㉝}SQ s_0<]o?</#"ɵ1Md%L\dһ,HF.;XH/ r:HW:^0 iWmRHθz̘h `={ՔME(ޱo_WUw'MFPUٍCMR?Р={˖Fqb7iŞog QXߛ8,'x7'|:#[QUfLTamAC?1J2!nߠ-֩6ÕUI0A .I^ؿ^Hx; X{\<C|4I#ՀHw8] /5P&+_'Zz|u+`ca).ԭnƤfQʦn\l#?cv qAeض\z۫k bxh2f &<5cUL$ƏC99ŭz{@ʗhoڲ h-OuD| HUFJI]ihhEvR!8~9.pe, XvH@h 56H NQ~yH,Mn=y]k*)}kɐ!-MSba_,ƴٜ(ajFZ' W @@wn;zT,n }-go|tNc|([F pRQ2ymޅRNDJ ozcRgH.0  1$".t JYl;ivh/DN֬T8chSY;E'v Zm==d&BPoќe3i9p^%:IXVB&]ܜ/F%a!g9)#?h[ < 9[65l\}z^xZ@K&f55k[+j`a'3D˜%pszWX%!*[DkgbcW:"u뙬*։OnƓI+|TH-(cMjT[Pmkrׯ_5 @/~}dLRDm~s|V~Y!IF6~").6"[Ξw;ouZeO%#5(Y jp׹H}o~IWmnCsIQu۟tݶ1@Z?i:j+v&*dž|Wѣo^++@BKΩ`!apʬ;JLq7%q,A*w`}U;: o]āS{c̅y/A58qh{ҮwdcV 9r3]I&58ۙݯ%*Pjx"ְɐ->PTlHb'(ў9S>@ǣ8!0tezn.XXc' ^Kƥmx=BY \͠M_X ge:2 l0ɇDlZ1Tڛo]$KϐGExza^S ϖ5zDsML/FB&zpȵI:J1Au*\oC,z#Q)|Jrr-IДlb[HG*;LUdl 5!KoD 6Jyx%8*XIekWļe5[qGæ߶Ʀb(wv9ŊgRG@s?/$tY$[aM''}W9DmX a#Z &odh߽jz1\H"6nPw"jюL+C1RT ~aͼ{Èx6צN EżUd΀{cZ5F{IlFt# ֎*p9݂ HJRP&᧊_ 6pQaށ$a'J*tQRǂ5tfD6✢-_흮zأǂ4wj;کIT H0QѹK v.>mF!R1h|a8-EMxR|@ҍ fT խ!a\@cZ)֐jT Q"zWX.m'x}o RRB'HGUb';BE|$w( rL қ%l:kNnřY(|8ʏq2!sJ [4e4 zy6~ s<+(Q:NRI\L̰vmvxYAAX>*BX/2~~= ۠N^be(h6Ww YU qT.@q;#.ߚ|aH݃|5Ef%}᷊Yzcdbr0dT5)Lt3q!`Xj]>nkiȩ'NQl!sVs@#նWI"mρ$%XUh1I2/w9k)R}`Gԏ'8\)gĎl "{&&x|d7A4NБ{J4?N,!$ei8[: WT=*QN"ڞNSުƇ~%MVYZ/K%ғ:-_>/y#]AX63>u&I}t^~RBߍ0+ocLij!6dCP G:H6,QcnR'g; jGk"sw@^-6<D1 $ZX &?X I4 IPqѥډ&IfψƧsZg< t`;)*TO0J:6G8qZP:<2&.xe E%ЦFoC6+=6 (V<ɒUCl%kB#tDM1K\^56c< m7C#uv2L;EŚUBcC*͞Kw_"C,܏IjԿ1`qgޕ^]Agabu7ă_{ >6UqZ#euL'fn,,nԅ?_`Ӫ_O&]@tfE`0.&o(y9qCw8vZJ]᱐(uE>S oiڊ2eQ=a7v}h}_9[W*!7G0~]=g1% mmJ5H'% fI7+!([-`'[Si5 1=p-sIƱ;MF[STEF Y"S,ZXj& sﯸUniI_ ynQOE;#H|]v"^_n0'KQCxu,rMz;q[LUi|D=O6`痌!m/=zn !֘iBT.NXCvl|nw|ߐ&AdLϾIz<Ý1`8dsp7Ja) TWV+.܊qTWwj_ܽMSp7nxYb΀t)!rT}X `R|M=R'(=v;sg3T{w2ELf/rN"6j-8d&X{.RP<sy9[\(N,w*Xq 9ڈg۾]1Yg{=ZBⳕNpS#PҜ6SZJdڍ7ƀT M"qh/BqH2,nf* 汲%xYn *tGgGcXD6%sFOP*2cx)qSJVM*y pk#CsHVY1sv)}BjGUʄ#!A#nJG}(vA:֖m'm0oIl>b&b(;{] )\Ƃ ޫ(K?Mk)?~EƜBpn' LM8FkGfJVE=`"qv.p5>} &5EXhsS\u75~2%K98hn)HTpH__=_see?R-h^N/<š#1(^'U 6j_̤Jgڝ|;OYYN_߰"Y,kh-皻ީvChQJD\WD܎G9?k|]haٌdK`h$H>}Kyi`m$ihy P39mȟyQ!RU "ek<>O[8[k/eFDž\coǤH-v;}HJ1},_2}!VRKbXtFj>0p٨O:MI<<]63{/ᷲ4ۯ3}zI>: sÚp䇋#b2RR8DVs`ԛ_/jix]&eklSzȝ&=?uARXqM2<0&%D\#=9}{]ƈϽʮdp,LRKS"0`seFAQ!VU&  laa)B1ډxίGiy[<;_0ʴL- 0!1Us9k`PpӔ'AከWmv^$@>~D|0oف Q؁Uqf>ORu_rndzH5 p cؙDa9OOU8H9@ HSXuLm{BV%{~``M*W^fL<:fIʳWK [,-19+IAq4[?yĴUdO(Q`;9P{=c| [s٣w]FXW*C/Jj"M{} ^Ll'gnx%SV0&&.w@XE9ɦ5nqp3Y.0MݯdHG'NrpvcL.uL6J))P@\H I/bzhNŲ)UC_Alyr`N2|:?S?- QmrS AV@ %E7%Z]zNwRa!D]/zLng|)K$oSlRNC!ũ SɰZG  g$|4^mW>EJYO# }{URh'1-j;S,Ra'/+mv©F0 l (!:Ҳ6[Es/1`+^IĜ}.j"0,.!| kSdOZY&?;G+ǘFev滭91V]İg%SnlQ8’~zD&"2lۮi]L)\RR`1({)`3߈wK.Ť=;OϢ3b.ɠ&)8PąӾ{_d lB)I(d/:MFt)?##zȳ ȇ\c,*ŹI}I׿%>B)'Q^2qh&%5]3u.륬6T:-YGUy _$ic2 i;BMIBDnB2 1dd%O2[n5 !2Fw9 67+4pe%IYMtt ԮL/v3 Qn3h'_r}Z"sChr __VFek^ k?=]^KT*9E^ʼ,O<~U,PLBBߔÚ"߶ņ*=Tfƈց:HV$۔R".sgșob"ԫb^H)g3ڞϼ;Ly۵Ҩ3Ӂ8wNrP2{ïJ9{hN_l "0:UPt^Auyr :I8\";>7h, o3ҹ'^HWco,_#+ZK%.bqC߭!Kd4Cرpi\1/Qś[<w(?hX KuFyP{[-mNt<( ]2c0_m#B`{BEqd^[X I鰫:%Jlfe TlwK養ϰYȵ4Rռ'' +-: T`]"Q{\j{r_1 AN߶fxZĨUrvfW1 麒F< 6ۇz$1PmnLuϨƿdJQ[A@ yc"gjIOmFnpoqoir93if6I`(ډs D4ͥn]wy)tŒDϵ ¶?Zm{;זobqvH\BxC6^Zl/LnX7ڨ%5ivx:.:.vL>^q@6޲frt ^e4<_uBT픇2.tX#b$:]Xwvu˄7E99lP&L8р/< Qp%4_-{9׹+%Zݶ$";yꂳOji`u{sD[[16UDA[ +=.-*i\Lā~'YWIZ Z{4m-@ ZumY8A8oWǍݺ"l kp`/&hH:ցJRo$eV־K*- '(ZHnxjf0Ը%=z: 䃕[M\hz4YD)/Fɽc>ZӚDΟ P[ S='39JP*2~v-BL3f| T67ޖ|Bji6 C',iuNUtYQ9xY\-~1G[a~bh| #wIXЮ"}` :#eEפOoelY|lms1AK]w eo twM iݶd_UQ E7fk6}Lm+!I'jwY!,O_ adz@ȏI?v9cX!{@N%-uާE_ OVh.z_t܋(^JL R{lce;@67Th4TQ9Կs/QP ."48t7U%RzZ#\J:x(O R[W% %˥n_8!ej"Ϋ7 v7!gB͋S$XpLdѬ- )ub['[_ 4T5Nr-Ub6Ů6-OnÜ>.kѿy)8Y:/3G;U!-`fbp r4"gdxp%oAҠwqcB[n{S1QӸ+h8TȣӇNv߃k;=\4Gl%35V`eʏ!'l,+ؤcQDmr,&ugzۄdNK%}vX14?yA}n|D;!! 3{3 J,xS8Q,QT (u8ed>g%!_Ns6p9ծBs#g;BC EL}PnfckuZ AQ}ٗ B)VrSE~Mʹ"8b{8 ֜o ])ϧT)%M6w- RJ]ROl~-$_?KX<xF/X5fR ڙt,m'oPp,ƛݕC:\ PHp*Hx4h7exAxN]㑸>R$JeﳻOLҧ#u7 0 F?_ 诺3h>=Dôs@1'gl;\c6~$"v׷RN'UXgrKSVyW"R"UM^gne"r:QA-J!kmJ6X,蔦;)^m FS6\Y2PQ޳FƎ Z#*E UK#!]j*(=IRaʤ_n {Qfb}IDx%.Tjsf-fS`uAP8sD&Ex#Z"ryv)W{kgkW|üUM4]*!X=zJA۵e6`*2%CMSAg)r}IMՄLtͲ'0Ax4E3Sl XuANo"Zd$K{]+012 ƚT~Hz;a3ȱ"3&89/ܒCKh2{m{[ó٧$D;]vg@6Zr!nXBșSwrc76VÑfT2#ŶhyDVbCfFR> HVFI={k(teSOO5@$`q:Tj?.[:T4eW5f1 aG^ ~zIŬ܈YBΏn5v!^7@t$+O71͙_ I[0$SVf[dbQd(D*{\ݸ:Ź1:va B35N2ٹ 4_Z\̃#ER<־;uWgk/h yi6 DؗuaNuw!\VUwC5YumRnGb+D6@o, MuU=þ-8 }\y?J+gA?D+⾥lVqKZai6rq'rǻ#J L65=a(t1 #>4CN˭E3LNj[gӃ _=>= ejt/nRh2:^ӴT EUe۪:j .ϴ#M҃sɔ#^mO+ԗv_`o`Q1/]o1hqiEoh*+iĀmvv߮}B>.&_ $ƃ^ 30 D:u;i=IShHVoA-_ YrC0l2 &~. =]? F}o.hpu(F"NI&4# "d;(Z@8>45rk/~G->E>8;/[?AԵ|Q-qXCD/}(1j""$jp{1駢;5g%\1-23`x[I8]=KUlBeD&<0ùD}ntTfh /?0Ӏ6.jz*֓e]^L `H6K&9UfLUw[bd[8_*_6!=暝Z8ANt;X%vm(>ݾмU!$ #uMvX.˓nYIɡ |BojA- J,x6 .08lz9k3xpY:HC(]VƏXoMʞwuN?lf h*χny64)֨ƽ.П{ܓҎ54e5ݨ;mv}hsGkKJn.qp❓C2rݠb+!bC3`r壯TgA4*3E.k=^R+]Tb> RN28Q5 6`7Df<\Z:$H`,:ܚD;✪㬀ς2{lenDL&K0Gq/xX rB gDh~|Y,{SS^!kP"u\Znm~uË5wKw_yq̛vt+]퇧F}wlÆA VAwNĬݺ \='Do.K؀iw7OcZ] >TiA^9Y^+rxV|~]7!I~{dG4m!Ddk'̴= RՔ7ѵ&/T0^+\yUcZ,~ӎNhx*c!܂dX)nI(u [ a샔!-Bω pyq7D_7 }Lpa0ɋ,tEZ҃p8aVQ׿86<:̪߂[5+QT Mª3_;VMUwN)۞Y[æԢu̿aZQW;D$nQyZ- pvOĕ/Un!鱡T-u]9VL3׵():S17~qߘ64nS\@ApmkbϞg`02 F˰sE\4R9Rjp!}-N"6 2ptbq{?g:\Q=Bf,ÿX/EcȉǍkj ⣢E[ŏv{ llONO@|zE+:cܰI=Sp.m?%ֿ)"|񸲐7YEYs6mD߁g|ȣL6Oo,LxX!}[gTEZdZM2nxd =&Ͻ}A7FrpRnџαO.cT}CUzp0Fմfx5Bx0, 1$#>Z؅gKBYZB`hq 1?ŋ}<2:g/=64ğ͍|ӤGa-L0䩇a1]L P+a-+ǞLc(Z)a}">n4C8cb}H<}u&)'ObR^2U4H77:SJ ^H f({)\r.-M!E !ץǐیV߻)D5Q6FpULhβO/o05afYjVr'z~vi vBcz B[ `F紱ڂ/Q^i e1čZiܲѴCz|0yO'2g*Әs4% Է{KtIW!B}oBv"KfI zahW`(^.8r=x=TUڧH#&Wо=k WR35;r|5jli&Kg}z_4nnBח=n]gBmY-9慲?nZ;Z95RŰ\`+BhfS`Z" LcWFo*.:̶noX*Iħ!7x;Hpgs2tI <W-j=.*}}K)?gg!܁۹^%2Y#i 4gZYCk`rw%c]'"iP s` -pFV6hLөp!f2NxΌuh[7_L0sP,"q~{ 1@0m9/bm!x;8Sي }+Զɢi-UU vzdMc C֓Ŧ'׾ej bq)i95abS,[&ݜ2jc͹+ǥDυb򛭤 t [BhGQp-h| ]c<95Cs *T4FQɯlb@mkU[&WmKya:%Y:[@%^yv Lj8<yBbGL\ex0Є;-05n]ZF[t;?Vɦ+\.w%xbsȜZE걱m끖y3,Fk G.bxa)D:ƃ}ظ6׫I=Y5b ܯ`d]ė{A)!^1aaFl?-UEL BDX)Ϗz|"CiyLD.%Cf"2Pn,[*F GadHcpS?w38X N[1Fz>RT%E8`yͰ?Gܬmֳۧm"?Qs<oF i񄈘.m˥-̈́U\y5MоjSMz\r Cb![[&{ }nlV׀oc~u0b8Qoq`x{P)d*6?~=OvWJ#~qV&\[0֤2^j*N*zASRm0._2lbx_9OsM#!sGB ܩ$YhN!B<˪AAq9{h)1u 50\0\=5h-Tyr2@"L]tFP>3p^-~8_A Q_tE!L B!,lFӬPq'gH 'سEX9%'Vwpw}VB_xGn'! %^e 88^P uH1ϱId`Y Id94bqޘmS\+eoLmN7&"T9TV$|-Ljun-N]J1dWC2zZIfFeX| ŧ{/w;mA:8ܹEVF*: +HG _-1Cr)B(jkJ}4$XEJkDSojF{h"ӷE_\ 'tR+Ҫg# Ӣ;'w/Ȳ?V'LN_kyd5mm;HR /T?$z^FpF -xK-w_EoEl8=7#@%O3f N31U u n'3`MˀP#lyV(u0t[ʣ ę}%Qv] *JhnsQFr.I^ ځS,F>.uGMK<0*p,-z~N*gxiD赳+1o-C_׏sKz* U00`6qd߽7s%^)[kyڵb=[󡳧aZa ŬlȚPUYےelg#?CThJO.H=(S=#3J\3q/5Җ#Ŗz ɧ1nP\9&dD=5R| ʙ]񶗞cgb&!o_f_8]eDܘ1}lq btl}`Uu+?+΃=d{pIt2:ky͝1v*ܭ{{$eK}LaPEar _JP{^ ”718; >gMޒgرN2tu|Q wzOa"a7쉥שMs/U͐:-j[#4ȶ" 8%4aОޣ%7)t'_ch+n r@jc+vo}x|2ns[և( C=ޜCqHhlr W%J?! e릵R/X\YaU#VRNJ<@[~̎Qcgv{8 ;!g_m0T/:1{W6lz~Ҡr54X71Uàr53·Zc0„'#;q|x` 6a'P }K(;u#LɑIk_^ )=ZjiNhH 8fUXM&͓|[Xg }}|8#=y4Ͽ܌kW4Gʤ*MDQ,t`ݩey{xԔ#e=WhS™0b=:%2UD <?N07-K/ׅ ǢiE nUwڸA ?@uIiA)#h&;^mfjt" lOQC FHhdr) bھZ I\YTn/k"JAң\/aNI /,Ec% @YTcpT]QH-1K\8L}̄bڧt Q^o}gM,(mWI a F>16 o>s6%2tIfʗߤHW&Wf| i8l8 bzeѶ<B>йmuiG;YI!I&%|=2_7XoOZO@],NUD'߬{|b'C`xQh.*z=ZDfjt#lNTmZ|gGX`f݊~j9*0[\ZH˩}mV"ؔǒ!d\['`G2DnbFThoAy0,y>mK-%AeA1grwɴot bd004 (FRcd!\yrw4D =9G8^?՛z (F~BW$7v= [쑱OD`Ƈ7\?nh׶KDA@x B0Hj;w@XQH&WY=`K_{2uOr;NxxBb7` f/(meJ(%N]OWY|)N~$ $!CfQnti©-ʯ8{}}lAU R9L}:I6MՌc< G*:ׇkUv: (ljj]QwRĐk'S);d9+!cTsEܩM{ty@ktf  3Dfd(&,ä:)jvS|)$Nѯi;x=DP|:rNDWsӞf$M/x`iѱws"'8")V&Eݩe.cde=i= $ d a~e#JZUBz2\Qy=W KTAW+66Dx,IhXQ,mz1`k;ȃt_؍Dz}UsӥԹ hc <9Zu&R"Q)x96WkN6ly-/LĺSu<4\7|!P0su yL+*&j[]*VƓ0i z-m!T|ܨQgn3NJN+!\7"v #iM)FDm k;8VgE!7[J7֩(}Oi6r+#Lͽ˄>4x|. bnKI[LɉhH_5|uk'=9y>g\27B"1"h^R=q3֗rz'h, CS#X6܄$?Ohگl=GPapFs_vҖ+'vW'zU0$+IT?&ew:ۚn+|lo#}syQ72T)Dk=ٶ_=Ov# rT!^ Z}ym=*%dVwറȋyŔX KqGe?= 匼6)>S5wYKjGWh('Nd"xf4H>xeWVs_䛬*L r3C#M˯*x"1b"OnpŚydswiK=%*H֗{*/Bh$:x XR8p,쳓o8'g lx4~2gD怣̑8{kZ{ *ۆyG Ӹ{Xk԰}c"v aU9L[Cf#0IC[i+ovUY Qڪ( A|X[-Ir0h#2]<@AgSn'zaQ"V@⤆U>kZKš&߀@(n[H j@;6oKx9T㧅$b%͌WFU,l3}5yaN@e 8w8yXt<ɮo%|S5$|% Z ck41 _24i{+UM4YƉR-Ym`0̷\c/2GFX3)+yR89ƯEIfupz@[̺-([&DXN'E1HTfnON;ȵ[zLbiK< ;Ao#3eCc1&P +{_i˙@knFa);@QՂr/4&0-d,8C4al4v"oRQm<bݥ_0ʥ4ðx>VGN]~xy-Ee`V]`!]v"(; NG]K1>Ĥ >ٿ_dJ~n\b-b`'yB&^%ݕ.?$rw6mnF4[p*U1/?tƩ!o#_|s` }.LKP/2[vezu0$w44^k2;Doq=Z&X.V8t 5YyH4;F`Ce$Nt&6T8@C>c{U7fMW7J) .-PlS+)["C3Jnp:V Aoz? ,DwMga:F/B.YzYS 8lÌࡅ7RBCdPwgŇB}J?|Y:mgt]mdv#^&{ff5O|\GǍG?8'oCGmfɆqHEM<K!w T 2\D"Օ6ҜLlDy=^&9+'.a"M-ϑ*=#Iς]5Nz>SaMG$s( q}C<:JQ~6?ӂH::haؒvp$qH̾#ښJ4c4$e5H}2> W_8ḼNvYzQ(JXz)Ml &xF"y]~[}]y)]O3չe(.0 ez˔, I's3m恏Ndž|AL&.*:?mxO*h.ʝcl9n%{LaS_UB_uj GM#v'5m×4wOpĝ-mV7㎥ZPu9#YiӾ[!Xu \N3+JaEHlsK D"2m©T Kf]PSJA"1spі_JIђ^6 ,ӬJvʓDMt=+# =G4 B&ʃt% 6FyG Dͳn=TU ༻qV sߋ2m%Z¾))p>tTJӑ=]F_=Ľ}F_[ȸOb8yu5E }#3UՉQD_WVTy{6rzv2SgpQx 䭻n؆;,HWJtI2 xI?p 0oX2cèܕ6&J,K rKao>]y2%!Fu kJ *f ĺXZw#>x*^yNh.H>P\ȩ`;+Tzf5d{0yOh Co4+.Kj/O8jև4nPlٻ#V(Gn}"o|gVo/v'&.GgGk^P ]B:%|+r<2&B>QkM΍ G\Lk\,fsIDWϟZ*;iiYb<]" w"kBY(eeFnU4`ij- ڒH`CzE2D[tlH}/t!m$*]ȱm,?[c#p7-9ɵ-vt<~-ZfSd2o34rv&det[4 6Klzˁ2b @O[Ng..~)D7A (˵gw;4wtI`\lJJY0ku,9zJIA,?خm6zUhw.TlC(|Y8gR9w#E9Hc 7cth9ssH7Z-ˌꝣe")=sRpiA>b\T !_ZDQXoB)=&}&3 XVU@֦b48r@=ݢIrJ~u#tu%FT3]>68G zkz*n/J_hySBݲ'SÒIPzprn󞏀NCAf𐹽Iep,eQЗGx!KF"C ݮaC`,[c^#el$63Ϲf/#l1=F!^<Ƕ0d>NN" IFrIdRbcܚt2VPmE :4"r \vKǍ#a2Q9c}wCɷWѪPt|+1~><)J}tl*CQJv۸ƶ^1KaOՆ7AՋi2(EG!&|Ļ1Kn?vT 8;H3;_^CT t7h0FjNRRY&e(Ww Q*]gѓ&.ܴK.{ʱc}TYZW]JxK'`'*J(I뉾U1'aTCiȗZ?MJem%0(A.7P b]$ mUoعc~nAn^Qu{8.[$IPhPʱ^P%Ԟ -9@^g}?3I kp*+H;fK{lRrDŽq@<_/`ZjJYHLx]'*!/yo|ja$ǔsUTGǺ~ kYQ܍ΗA`"6*ޮ*Px(C'$ԯ"ִd^lGG 7aռTK0OMz{xe8zFv4%mվgOʘ,ȅEI g VE6_6Yg\z e= ,m~<(v`2&RgQ$V啾IV=AǪI4ݜ;ljVb#p|.p;nޠ2@7IAicq [MLޢ6vp}yA~ 9jp%^ >Z4(dZ,5$u>ᛒ&vR˵{oT_´$Bo,d([i=>4\A{,T.F bw% )[R(ug^wFѥH+'+'#(| xoʕ0rägPBSuH]"ZQ?h $Vx2;.OGC"B@a:`I%?v)4 qI}TUu_1#n="OnpjNM&;e(}Y ;=dH>E"J)] f:[n"+MAӲ2T4$ծ@J kl=#P** E?[`6:͚~q7A).">t٬dy@ȇDp'˜.CU5b|jQo6K/ v6y.IڱǤ[봮 YܒDM ayeĐ$w”R^K!o%DxNDI_\XY+61v'/5&٘ĭbV. &]@f.ӞTQcOX|<+Rm9ؤ2a' G}3pyS7= ۦ1- b*۰CͣKO1vm] "̦^vVOШ0]GdG{)>FӶOjZW E-қ"j JkB~we HKӷs:v %1s1VvXFoҊf(}-Vz$>tS'('Fa&YNߓ;L V8f绥_gˉ4B oTBd' c!ҹZ sm)ޯBO4p/Bd2wH%8tJlJYǿi*Ꝝ[9+ko{(xw>jRiɕ]Gq:Y,q%mC#hx=F@[w*7ѥJ#XLn)@I%+aCp,oy6txFVZ|Nza\ v`uʐL2;믺!5] &26\; v&EICBL\lH|}8bU#EH9\:jvpN _8e  nV5b*c y",e`~Pɿ\Cˋ.IXpT W ͖ef9 ?:7͔djjI}5 @xTMS9 )Dۃ똝'45JjZE}7)SXUmlL&|f'cR1Fs/ S  N!Tpg倞} >LPJ)`n3K'*K"wg` ܀<et#<3G"4)a8YWnI텄fV{VR?ܩj8C7%ϦVQ_>ubn#.9gjowS1er#|q.`DA"|s6 PZ a(bS}$!&Ԗ 5U3\& xޓSr][v/ e!꒒7et<2t KTLݣgC>6nQ}. $^pȽkͱi|#"躑n1-9a0DlQU^[_܎߰s,?E%nݙ.1׽p[>rLDlУBE&جlUԥIW,f$4,|$QRQQ ݭ:x}FJK7F*yje]>;O9uP?&-cx1 r*?N :'$m4e*">ydHXF"y^XZ9lZhc;; oH NvH|hl7e=  L-ibt3Gjʒ?7V-(5YQl"pdp趷GvCY""SB1"ck)v+(CG+=x_gLu9oHHi!B^">/劕uuP=vLj cz KHjC8B+W|pZ =N#?Iۥ U.ޕC(JszlIѬws3RBG]#+7hnBѰ OSHJ}| Ɔ1z$&qy,;tWU72Bci SۍnX}R/h$Vj Lf&rl=نa\gPs;ՍwBg/Lm{7ρ=첢oWe/@8uLden{EC5~:Rӫ}ֲxU/  eGmһuG&w5;$VMMk, \pR~DkK$ Dhmyfo5afxt|XQ`pj{wNQOʫ>TR"qZvw~BgK5?m叠gOKalAG&єGv\w5C^iSù̧jGt<|%; *}hm AbN`OȎ{djd쎁EtӺ< Q&81 5M#Uƙo.h38z>df( HYba_*P_ a'(/87K߫[S"A^TAPnXm8rW{id-Dʟ|m/c5y sN>[~l1= QҫvpQJmAxQ ;MS\R6Pt0󘟳B_kMahQ< QMwJT}f*%CJ Ald0۹`EkԞ Cfջgj3.jgyBtQIHAz:v437_@GV|3n:QtDC k?Y>Pc"+>&2Y:ˎbfNA~ceHn^J`"mZ;d3KGʷ1WO܎wثD,wUa4+~>5<ˎB-2iNAǠ 8q|cq\7N>.뙀S.ՒV4Sz) }F8=9 P2W#N2Z%Ae>Y]\5+l,(Q^\吽Fih^re:m?>6!ۯzܼ =t_lz3wG6oXʩIgvMRvz5D;$tnsŰi̙a=1Nr-Pv5h<|$+CןmDҤ<եn Nˮcj[<Ӑ?zA5٦Ru 3'LYU^}iYoR*fL#8qqhzjFp3Y?؆%T֥e-+9ʴ3%/ҌzPG+ZQHA8#pr\u+KOtvaD,|"@h tVg?SZ2Z^a/`NVykEA8w×mApn̼%OF /A*ξZ58TMRjp\ a)/U<-4bzGwHhj3.y Tٻƫj7ܩfX\r4\-ar3v¶B  Q6yxbϓq^2l(yT7hcPzN$2 J5>!tܞ,'5૨sg< *NԅΒ6Rm66y> c#95J*g6.LDU,44B5½=;۲#kl9ŚC+E@VrW@Kbkks:Z"<.9 ͻc5,>x S'IR=0w, GWDN[{JR~;aKDѓA/O;m ûӋӥ-f]925sh\p$x-W,^_cG&ޭ=㯸D7-n!S^P_Ir+ènfN _tDiGj[R!m yↂ Tݡ Ba UwN'z[YԷB1l g)Bݥ!h%,s _cb >8CKJ $]^oc\>0ѳ!bQo5/kLu4qÓ ߹  zET8"DQWt0wAjWEp//G}˗[4ڤ*} L=; v(-(f?@D@h_O;q`n aC-hXkp{2]Cf@Oy>h5taLCۓtB2h| $M+6K'JC^rsw-{1*z!LjeI"4 E,4OWiP c>Om=8+(]Tߏ$CLl4¹> 2މGX1Vk-)Ŋfp'0AYJ<7,~ޥckNJD7ϝ>y=jFmS&E--VWcPM⵬ wEQ@D~tyfLeimJ HR \N >$YF?8~ZUUqrE{$TGX_D>+:H;%ȩ=/x@PGۙ֝8a1"Ov0YEwߤ,ԡ=(O}C[м_2\\._pЪ^01^ P;)($7IK 6LI\4dIi0A&ڑ}` d B+&UIB:(A w2~ncH(ӹXn* \Ą߿.&/L~||Bx]p*WIq_ a$MY]JT7[{r{lj'@蛬͚2AH'j5Oh¦Kmi%Cz{ZQ_z&cxy>Pw1ZI1P $'ABڌiU!bصʃ܀#T< FK2SHb _<ʸ`Rbnܸ|0W@klJ7p*сN'~ݭ~'wS 1GW tR.q[f2MA:B7D_4w]~ (NTsz'i u1Cg%ң =q֐ Xһ]._Cjg^ۄa  00(n"R}=U|dZx<iI2k͎& 3U6i\6;}H̘#) vϓ`={'-]L}q²9'P^H,5[\ zCK`ޒτ_4#=Х],  gZk\TkLP6mXnd#1pwUx׭qh!byc2XqA81ftr tc`<9(*'9 sZbd|&0§ىs2`W>`ȏhU֍Z'$줬GCS+ ;?7-ֻѾe;5c\]c͓$uߏvҾ{C=>lUc>rKv**ƕ9_7R,E\qXƜYC1IGj|&(d& 'v'm8>W >C -tKAֿ˴f͂0#r[PW5>h4+'}cuf3aZ$Ey3 MT!\!RvEJચ71v5æ@1\*GVuhP*SL7vQ_DX ]>%p_/nU*=|'4&MM;I"]a;04H^~odHmV=ĝo[j5۠Uɷ ITj15nm8ܖmvMUG"!J L#dߕnkaI"!Ї]Zkpҹ3l#U86=ȝ$m}6zʗY"@ 9K٤H-KXgP55 U+dWZb C2,9; %e'30%P63_Q^9TV#vؘ8 &9g嶧o#+Mv1-p+E.V9ib OYXX/{ Pj'mYCأek օ#`dy>tWATI].J{SBuC T?C#K\f_f"ՂOa;QSOkH%76mZjq{l{q в>c4citzOA5*|屾Fr@q:xWߵ5 8QAȤN(Dºh%l3BkyA;ox.bƜu]0(\gJ "Q2P;JC Zǩ}Y$ h. d[.藬1sqAY o(rsל1O(z2w?Z պEH6-_$TE3-VPN{V}QΫy"=ƅ0iPh[6È[47E'qp|'駓A vzM$ŝ#KyI(TYnXFt;^meo`4f Z3矦х棍Ǘ'@f3o<k]OcZ9"m?>p\c*%rTG^B=8+zT3hkc`!歝bN=C͉l\ÖЎ. V4ycC7qJ;e N tFl8՟`?;-U=~r)5a83/i?6O1AyGp.2O[AnДTOqof7e  ~YѓӇynRh҅CI4Qp_kXS2s.uYE0h:@U0kW ލdtC> o75)dմ9)]qkYT"dss&NES@~z.+3TNJ.o /R` MG%BoN3ܫvzP{>~<nbw7;xe _l٩sF4dX'\]I9Fn*y$IpP Պ@Ƹ͞e;Lzvͦ+{c'K`;}b&m=UFυW~A ئQ x,D92;rE`Ţ/m=p,\ɉe G[^~泒,Z^&5v֍EVgP.?p,Za,cޗ/!#, Yؗ PbXyO+NYR (h覩^#dlvӬWoSW&;+, i> p ̌P.wƼYsTa wVVsdP]eG;y(+!'궛+-ɢ=EH B`( -KTDotw߭%L,aYtd 8j >oQtQy39ƱlX(Xi%4GD6EԅQa=zC[PJ8)n.ȒһpAiiZ 5yڇ/YmJMh؜OLr*@5y{ $&"$׸2($3x+V0#&xk4+5 q,E+z6Q\/G GUրtP"ǟՄ>vL<5iA=ճ sgGƦ2$DdmU YrlwE,`)H6s]?!ȧxf'O'<Zw=>NYʰva|<"ޙz(Y|8hʹ>Jk 'ڕ G2E%Rڶo(ᾯ;bU?x/^VP`JUambOxޱ;̝H8`&. Y\}d[l7\\]Aívo; iKCG=T| *`4|.J q8:Iɺm<bVxj|<6_V ֬nDdhBpw#*(o>2vܨol ".s8D3ɒG͓ *Ka (iu-cl *h {d#M.i>^1מS&ܮ2 7--ӠN5mWSVy ƫRbDO6L*aúq{Y,g+hXQLG!L"%0&O\t(-p y%̥3 GU뛄:NLGu29R!^ځLOK"sIWF*7 4 ui+_] }(C_GFq_XǺޭnhbo xE$%.2:MWV۬C+~K'/6}F7oBKZv0ia!~!zr)T lp^S׼nu0VKIbbk'}%}5ʮ}nGk6nsv`ߩZB_1MZu}/|Y0c*e.;t 3i멺l ᝿즺UkYǑhJW'N(U=k[4cg+ܶ2.lػ@rXl62j@ln֨_JMA XNޓz!ۏNAbW/&%l-ϰ ǽ,d=kbf߻č:ӱ*xs÷*%;Zƨ|os  oWй7SuBQ@3[0wAB)1sjh]TjͬzUb-aX_-W u:6}8u;+)hH3RRZJgb]v+F~ڻXfãd"21 I0ٿf_ PǻM6 Zk.&kNFjH樠~݃1}wӰyɪ^v|@KZjYxX *kI;I(P?O9C5k Mj8mn@=92]e~CڵԁixoAh MFTԗ?)'e;; :כ0 3k \~ҵ=SnS/bH]C7ԩm*cFe1{%OCkr/Uyg$lR͠5U>3 _uFyH 9!M&R~#)+! VH:P]M7Þ>f'龖,_//z}Df&#kQFZ/>_ҵ&ҁo%_^)G~@ FeçtiQfAT⮮x:fտ1S(`xgB${Xt`F Gɒ:CvH:! G`8-7їett?e&Blw0CF2&Ab'fDZ^8Qj*~D Hy ZO}խS2M23g ͸JKVWGY8`zTe~%DP[&ڄ}6"^tk-pR >IFiUo8]FDv"禩>:㍣i\<|)RUeDoF%pvc%&S;ĺ 150žrc|{Z"qzʃ ڻ !j_] %J/Ӿ h`5cVQF􃦆DTES I'Y""l3N"9ñ}Ec,M߾])@d: vuyuu;{J@A(A0{8v5 L@{JDaL)^ o\{׷Gtw]A_OÐ" !/jse78˯B 0C`?1\G6C' 4#L9>K@LړEAq  "WbB"bqegn<fr,ضځ7@5OzH':MLlJ+ez;.9I;G #+Kx]NFrm“Tw!m%j&H'foS{:61TE: Σ\? ЋϋWɸUod[ vZg1eA YHc ~G>%'/2FΖo׳B$ !Mg3la>sR1 NPfQءS|(eti=RÀ5 H %n7or׽r?G7睬nLǵ2wrA)z8?څ[&6XavKlвёi@I-P J ^0RC\[S4(eƯc}nV5<+`k o ib]ۆ"xɦU|Iv,_y.V鯹6JfNcpٗ9fؖ\޸xqpGha,_.g G+?(_&uF kVsލ+vao7[:nHhQlgB2Kw c>),`Cx U!wŷ%0=*}K8>URеzN"9j k蝮DFR[xQ q/-dV۫8I"21;%wc@7HCG^C:Δͨm=quVa!a0["KK"M " 6BN)Vipɪn'JPgy<+g(:V͟lqG>"Y ,Q fv](bO8XWR.8Y|iG hdu /dxtfgҿVNSuUU[N! U&6%xuMbs$x"W~b&M U[7/M;͍x!4NҢAj MuPެ/:z[ ":dicF)y"\^+̐-oJѱbM0o_6r1Bkfj y:5.{82lo1sAAY~ظ ʣ1,ލ_,$as8}ĿuWeolX%sڦn&%c'%:d ;K4V[$VG0>yOE~T㢍]E7y#2 C00{$:ѣO<8ޯe%#]I}n SjDihpci!^`DPLTYmSԛQqk$[YI U2`Vnpo@6"DNj jh2>i1b)o-Dsl?{TS_".:iZYsk).O=y.WS+Y% L.H[p,B۬oIqЪj-Hṑ lןwju\L!@ꦼ4_f؟ RWm,l(ә bua0<(i%ͤc r_fËm|vI_eW_lT[wcwP9oQ,[nhTu^l23*¹ݴ Xg$.?m"^,@] S"mޘnYmo4 \*cfW"~M))JI4uVU_6[р@m3ݷ2m#ߤB5EFur`^0H+}ZG2Pԛ~y!_B n),R?ܾ1)ȕ"cL nV)p[hCʺ}>O1?1<\ؼݛ~-R]7#Cyx)Nz/ wmpr첬PfA"8'PcjƐ-$6~Y}'=f f]8Esn"ʬ8 Y>vKt^n_ƚqgm }*uḟ懳ɗrk/]r9ds oPHfF3V*xޖ2q(o\Jc Ns뵬󈃩BMup(0_pÛRņ2|0ҧ kOwy L8J&[kfA9Y޾E[ 1nΑ=R1>~#PaF¥.Qd7XfԸĀ\@.6ݍ4.FV|=qmV1dn7 ԉsTwX\rv'h05En fVg<|_/o I2py"yGIBڮ(RPaǗf`Ē Fb *$Ǽg6z"g~<{RvDvtźS|.[U]NV7C&0nIskц2&JKH8@.㐀<9'ȡ4fr[ٳ0]-m ~X+|w/2T6Z%K(d~ҝ. ^`g˺=)]ߔ{QEp Rgخ7o;Н!꛻%&69y@t1xGvQ=UQ>b,cyi NKoh |uя]LdF@0MM:D˝{sM"Z&6WϖJjJ(+68p5[p7_uePBFGub:A;2 $Ksz|[-Kʖ5v2^'F 8SzXB@}ん#`= Q w!dU[o-Aس`MqDiXksx^X{%Dx᥆- /Hp:LpӡxhB> *S.k(^FMhqǼ\'=%3ƪ/G33DR_Ri@"̊R#7<$(#+\Ky|P;R"wO|g3R ˣ+eD=?jF^f5?`_MUjb6Ry->Bw2I-}a٦ۣ pOJ<eL_z5 3̐%t P&gϮiSFŦm=K& YYܽF("LXL%uMU6 ]>7{P~aQqe+,!Ǧrևpz4j,ZX1ZA;*QHg*=hA`pT< 2vIQ"B{V>IC :IlTM^ 9l!Wg}r=y6hs5**?c_!yMu. yySLTeP˖}|斃ܜ9x@N> cMZql+v/p)eO'Я$ha>ԧF -mG/=-r7J.dfϿ;uq.-34pN RPc#]Od6B_Is3CHqiϯz*Yiq (̔wHR4Y y K \M$jjDyj8*ָPGsv+y`x!!|KXh^ T({" 9a a C#}R ˌLŁLbcBY)y*xC8SLDˈ%ū : Tu‡ojqh."  i+1elPUVq|m1-j7NLCiPxY@@>W+pvKID %$;\sbJ$Zc:pS#IR{HG.[Kp~DXIRofMQ3Jɸ ]I]2O{ /ݮG^AU: Ѝ9nƥ9nRRڛ;MtImUN mrX6 6ZhGQ0b1AF(PԩAZNyCXٶk;<}ϥ"lt9%,xUF?dFVM (nی@PWIkQ\1;oL]8i59ɂEu6 L!B8U_CXNc7=*xaZ72e(1$d6 QFѻ@;̈[v Jؼ@_Jؽ 7z=#Zq]&9  en3?xL N kyϽ#zˍ5-WnNER}qWr&A;iK͢Eql3>m^<ml-);gMGoEvjrIj~όJ=:*g,ޘbxez&|}9;O69J684( %W;!2Eg p-vخٹl\g$(ʡ(O!Dkbz\j:6c?TMpmʫCv`@ f&bTTEV] 7e0M!BG?;5S:u?v**.Gs@VwoQ(+Byeo, T9(Dcx,FUqܦ` = rWv«YXEM#Kqz<)Q6ћƮNƴP!OVDz%Mnr1 7:Lu0s!b%Q:p2ʼi%Z\rS1TԃJ%漤+P'.1/2c'"R!a9 #^FN?"Z[1GKcFHgVp,j~Υ,- GƟۏO)1Gfh^[]Ly"h?^Vcd ȆVFnቘS%\|Ѕ/VA(d(LJQ !$ӷy7[W`ki ًfv> - wE{p fqN$ś5P3Q {|~g<% [n7ܾ Ou4P#u0wK5@/- &Dx5l`\4I幻9k] >?@{vfExl2g]ܪ^Ą_ nMsO7 _: ?6'@&:]E2 ;P- ~p@Tu @MK `U[ {0aȖy)gOg#.{s'uj[QRC_ڞ&sJо ߶ YZ