libselinux-static-2.5-14.1.el7>t  DH`p[*$ƨT5)oQX5U%bU&Jۃjmf= )ڠwTaR5 V!DAN¹Tj(OTHx^+Y_}~GR^,r+t"ӄ"13]fƆq[5;d xz0ڟZ>5`-n @jy9#i7)>[E ~͟A+#7FpH8UͯOLˢ6;2%@ Pt>(| 2m97*(UyƴYtLjY: 3s,N~3ӍOgj1:NMbH?JG\o+$]hOՎqGKzښ}gy΁qYsOugBƧ0`3!v9N ͟1No>[x^=I1y=A$(KT͕z.Pkx;[]= fsbf`7kX;'}1a4e97c2a36d573230ed65aaa19384a56beeb812P[*$ƨE<+ PgΧ߫.*B>ы{bq-Ok̎r~ GZH >}I`(z fWPOF.*IQy^\uS8 ,z=C8Ԛzr`C19bb)Z|np5u5=G3ԝʼn_ },7omj/]O=Ag_Pղww'&4e*4EU&bz8onW&pXgj^\Tx ǒbx}MQybݧPeJ+ -VQU\9\S{)TFyUa M=iI Gnwa*dg@5D`t4^g!PEk;.W7Zw~CnO2RE='ۘnig7(p'4,\ em\pO}?IJ]99>t[n*>7;?;d ! H 'V\dh j l p  ((8 9  :] G:H:I:X:Y:\:]:^:b:d;e;f;l;t;u;v;w;x;;Clibselinux-static2.514.1.el7Static libraries used to build SELinuxThe libselinux-static package contains the static libraries needed for developing SELinux applications.[jx86-01.bsys.centos.org)CentOSPublic DomainCentOS BuildSystem Development/Librarieshttps://github.com/SELinuxProject/selinux/wikilinuxx86_64)܁[if1c1684373b97f41cfdca360c63dbdc78b0b060d6801ef0a8b655c05d4307217rootrootlibselinux-2.5-14.1.el7.src.rpmlibselinux-staticlibselinux-static(x86-64)    libselinux-devel(x86-64)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)2.5-14.1.el73.0.4-14.6.0-14.0-15.2-14.11.3[Xf@Z@YXӸX@X+XXn5@W/@W@Wq@W W VIR@R@R@RR&RʚRkR%R@RMUM@M@M@M@MlMQ0@MGM5ML@L-@L@L*@LLq@LN@LF@L$@KKKrK@KKqK}+KTM@KA@K@JJJJG@JG@JG@JjJS8JS8JB@J@JMIܑI@IԨIbI̿I@IV@III@I@I2I@IcGIcGIcGIG@IG@IBR@I1.I!\I!\I-HHHe@He@He@He@H@HHH@Ht@HsVHgy@H^>H^>H-w@H!H @H@G@GG#GF@G@GGƢ@GƢ@G­G@GGD@G@G@G@G,@G,@G@GG@GZ@GZ@GeGeG|@G|@GO@GO@G<4G<4G0W@G'@FF@FIFFFFF&@FF@FvFFS@FF@FF]F@FtFFzh@Fw@Fm9@F` @F; @F-@F,F@F@FF*FF @F @FoE@EE@E4@EE?Eɿ@EEEEElEx@E&E=E=E@Ex@EvEnEYEK/@E>@E4EE EgEgEDfDDDDq@D@DB@DB@DB@DB@D{DDX@D4D4D4DD@D@D~D~D|3DvDu@Dr@Dr@DlaDk@DiD`@D_2D_2DX@DWID?D;@D'Dj@C@CCC-Cǖ@Cǖ@C[CCC8@C@CC @CCqC @CCCC@CBC@C@C|pC|pC{@CyCp@Cp@CoACkM@CiCf@C_oC_oC^@C^@CX@CWCS@COCFc@CFc@CECECBnCA@C;@C:C*C&@C&@C%mCC@CC C a@C a@C&B=BۙB@B@Br!Br!Br!Bn-@BgB] B] BZfBS@BQ,@BIC@BAZ@B9q@B9q@B06B-B$Y@B#BB@B@B LB LBBAA)@A@A@AA@A@A@AyAҜ@AJA@A`A`AA@AA@Ak@AAA@AvA@AAoA]FA]FAQi@AN@AI@AF@AF@AA@A>@A>@A7 @A7 @A5A4h@A3A3A/"@A-A+-A(A$@A!@A A A@A@@@q@7@@@@6@@@A@)@@@@@@@@@~y@@~y@@~y@@}'@s@@s@@s@@l@@ia@@b@b@b@O@@O@@Dw@@9@@,@@ @/@@???E@?E@?٭???q@??@?@?@?}d?z?a@?M?D@>S@Vit Mojzis - 2.5-14.1Vit Mojzis - 2.5-13Vit Mojzis - 2.5-12Petr Lautrbach - 2.5-11Petr Lautrbach - 2.5-10Petr Lautrbach - 2.5-9Vit Mojzis - 2.5-8Petr Lautrbach - 2.5-7Petr Lautrbach 2.5-6Petr Lautrbach 2.5-5Petr Lautrbach - 2.5-4Petr Lautrbach - 2.5-3Petr Lautrbach - 2.5-2Petr Lautrbach 2.5-1Dan Walsh - 2.2.2-6Dan Walsh - 2.2.2-5Miroslav Grepl - 2.2.2-4Daniel Mach - 2.2.2-3Dan Walsh - 2.2.2-2Dan Walsh - 2.2.2-1Adam Williamson - 2.2.1-6Dan Walsh - 2.2.1-5Dan Walsh - 2.2.1-4Daniel Mach - 2.2.1-3Dan Walsh - 2.2.1-2Dan Walsh - 2.2.1-1Dan Walsh - 2.2-1Dan Walsh - 2.1.13-21Dan Walsh - 2.1.13-20Dan Walsh - 2.1.13-19Dan Walsh - 2.1.13-17Fedora Release Engineering - 2.1.13-17Dan Walsh - 2.1.13-16Dan Walsh - 2.1.13-15Dan Walsh - 2.1.13-14Dan Walsh - 2.1.13-13Dan Walsh - 2.1.13-12Dan Walsh - 2.1.13-11Dan Walsh - 2.1.13-10Dan Walsh - 2.1.13-9Dan Walsh - 2.1.13-8Dan Walsh - 2.1.13-7Dan Walsh - 2.1.13-6Dan Walsh - 2.1.13-5Dan Walsh - 2.1.13-4Dan Walsh - 2.1.13-3Dan Walsh - 2.1.13-2Dan Walsh - 2.1.13-1Dan Walsh - 2.1.12-20Dan Walsh - 2.1.12-19Dan Walsh - 2.1.12-18Dan Walsh - 2.1.12-17Dan Walsh - 2.1.12-16Dan Walsh - 2.1.12-15Dan Walsh - 2.1.12-14Dan Walsh - 2.1.12-13Dan Walsh - 2.1.12-12Dan Walsh - 2.1.12-11Dan Walsh - 2.1.12-10Dan Walsh - 2.1.12-9Dan Walsh - 2.1.12-8Dan Walsh - 2.1.12-7Dan Walsh - 2.1.12-6Dan Walsh - 2.1.12-5Dan Walsh - 2.1.12-4Dan Walsh - 2.1.12-3Dan Walsh - 2.1.12-2Dan Walsh - 2.1.12-1David Malcolm - 2.1.11-6David Malcolm - 2.1.11-5Fedora Release Engineering - 2.1.11-4Dan Walsh - 2.1.11-3Dan Walsh - 2.1.11-2Dan Walsh - 2.1.11-1Dan Walsh - 2.1.10-5Dan Walsh - 2.1.10-4Dan Walsh - 2.1.10-3Dan Walsh - 2.1.10-2Dan Walsh - 2.1.10-1Dan Walsh - 2.1.9-9Dan Walsh - 2.1.9-8Dan Walsh - 2.1.9-7Kay Sievers - 2.1.9-6Dan Walsh - 2.1.9-5Harald Hoyer 2.1.9-4Dan Walsh - 2.1.9-3Dan Walsh - 2.1.9-2Dan Walsh - 2.1.9-1Dan Walsh - 2.1.8-5Dan Walsh - 2.1.8-4Dan Walsh - 2.1.8-2Dan Walsh - 2.1.8-1Dan Walsh - 2.1.7-2Dan Walsh - 2.1.7-1Dan Walsh - 2.1.6-4Dan Walsh - 2.1.6-3Dan Walsh - 2.1.6-2Dan Walsh - 2.1.6-1Dan Walsh - 2.1.5-5Ville Skyttä - 2.1.5-4Dan Walsh - 2.1.5-3Dan Walsh - 2.1.5-2Dan Walsh - 2.1.5-1Dan Walsh - 2.1.4-2Dan Walsh - 2.1.4-1Dan Walsh - 2.1.0-1Dan Walsh - 2.0.102-6Dan Walsh - 2.0.102-5Dan Walsh - 2.0.102-4Dan Walsh - 2.0.102-3Dan Walsh - 2.0.102-2Dan Walsh - 2.0.102-1Dan Walsh - 2.0.101-1Dan Walsh - 2.0.99-5Dan Walsh - 2.0.99-4Dan Walsh - 2.0.99-3Dan Walsh - 2.0.99-2Dan Walsh - 2.0.99-1Fedora Release Engineering Dan Walsh - 2.0.98-3Dan Walsh - 2.0.98-2Dan Walsh - 2.0.98-1Dan Walsh - 2.0.97-1Dan Walsh - 2.0.96-9Dan Walsh - 2.0.96-8jkeating - 2.0.96-7Adam Tkac - 2.0.96-6Dan Walsh - 2.0.96-5Dan Walsh - 2.0.96-4David Malcolm - 2.0.96-3Dan Walsh - 2.0.96-2Dan Walsh - 2.0.96-1Dan Walsh - 2.0.94-1Dan Walsh - 2.0.93-1Dan Walsh - 2.0.92-1Dan Walsh - 2.0.91-1Dan Walsh - 2.0.90-5Dan Walsh - 2.0.90-4Dan Walsh - 2.0.90-3Dan Walsh - 2.0.90-2Dan Walsh - 2.0.90-1Dan Walsh - 2.0.89-2Dan Walsh - 2.0.89-1Dan Walsh - 2.0.88-1Dan Walsh - 2.0.87-1Dan Walsh - 2.0.86-2Dan Walsh - 2.0.86-1Fedora Release Engineering - 2.0.85-2Dan Walsh - 2.0.85-1Dan Walsh - 2.0.84-1Dan Walsh - 2.0.82-2Dan Walsh - 2.0.82-1Dan Walsh - 2.0.81-1Dan Walsh - 2.0.80-1Dan Walsh - 2.0.79-6Dan Walsh - 2.0.79-5Dan Walsh - 2.0.79-4Dan Walsh - 2.0.79-3Dan Walsh - 2.0.79-1Dan Walsh - 2.0.78-5Dan Walsh - 2.0.78-4Dan Walsh - 2.0.78-3Dan Walsh - 2.0.78-2Dan Walsh - 2.0.78-1Fedora Release Engineering - 2.0.77-6Dan Walsh - 2.0.77-5Dan Walsh - 2.0.77-3Dan Walsh - 2.0.77-2Dan Walsh - 2.0.77-1Dan Walsh - 2.0.76-6Dan Walsh l - 2.0.76-5Dan Walsh - 2.0.76-4Ignacio Vazquez-Abrams - 2.0.76-2Dan Walsh - 2.0.76-1Dan Walsh - 2.0.75-2Dan Walsh - 2.0.75-1Dan Walsh - 2.0.73-1Dan Walsh - 2.0.71-6Dan Walsh - 2.0.71-5Dan Walsh - 2.0.71-4Dan Walsh - 2.0.71-3Dan Walsh - 2.0.71-2Dan Walsh - 2.0.71-1Dan Walsh - 2.0.70-1Dan Walsh - 2.0.69-2Dan Walsh - 2.0.69-1Dan Walsh - 2.0.67-4Dan Walsh - 2.0.67-3Dan Walsh - 2.0.67-2Dan Walsh - 2.0.67-1Dan Walsh - 2.0.65-1Dan Walsh - 2.0.64-3Dan Walsh - 2.0.64-2Dan Walsh - 2.0.64-1Dan Walsh - 2.0.61-4Dan Walsh - 2.0.61-3Dan Walsh - 2.0.61-2Dan Walsh - 2.0.61-1Dan Walsh - 2.0.60-1Dan Walsh - 2.0.59-2Dan Walsh - 2.0.59-1Dan Walsh - 2.0.58-1Dan Walsh - 2.0.57-2Dan Walsh - 2.0.57-1Dan Walsh - 2.0.56-1Dan Walsh - 2.0.55-1Dan Walsh - 2.0.53-1Dan Walsh - 2.0.52-1Dan Walsh - 2.0.50-1Dan Walsh - 2.0.49-2Dan Walsh - 2.0.49-1Dan Walsh - 2.0.48-1Dan Walsh - 2.0.47-4Adel Gadllah - 2.0.47-3Dan Walsh - 2.0.47-2Dan Walsh - 2.0.47-1Dan Walsh - 2.0.46-6Dan Walsh - 2.0.46-5Dan Walsh - 2.0.46-4Dan Walsh - 2.0.46-3Dan Walsh - 2.0.46-2Dan Walsh - 2.0.46-1Dan Walsh - 2.0.45-1Dan Walsh - 2.0.43-1Dan Walsh - 2.0.42-1Dan Walsh - 2.0.40-1Dan Walsh - 2.0.37-1Dan Walsh - 2.0.36-1Dan Walsh - 2.0.35-2Dan Walsh - 2.0.35-1Dan Walsh - 2.0.34-3Dan Walsh - 2.0.34-2Dan Walsh - 2.0.34-1Dan Walsh - 2.0.33-2Dan Walsh - 2.0.33-1Dan Walsh - 2.0.31-4Dan Walsh - 2.0.31-3Dan Walsh - 2.0.31-2Dan Walsh - 2.0.30-2Dan Walsh - 2.0.30-1Dan Walsh - 2.0.29-1Dan Walsh - 2.0.24-3Dan Walsh - 2.0.24-2Dan Walsh - 2.0.24-1Dan Walsh - 2.0.23-3Dan Walsh - 2.0.23-2Dan Walsh - 2.0.23-1Dan Walsh - 2.0.22-1Dan Walsh - 2.0.21-2Dan Walsh - 2.0.21-1Dan Walsh - 2.0.18-1Dan Walsh - 2.0.16-1Dan Walsh - 2.0.14-1Dan Walsh - 2.0.13-2Dan Walsh - 2.0.13-1Dan Walsh - 2.0.12-2Dan Walsh - 2.0.12-1Dan Walsh - 2.0.11-1Dan Walsh - 2.0.9-2Dan Walsh - 2.0.9-1Dan Walsh - 2.0.8-1Dan Walsh - 2.0.7-2Dan Walsh - 2.0.7-1Dan Walsh - 2.0.5-2Dan Walsh - 2.0.5-1Dan Walsh - 2.0.4-1Dan Walsh - 2.0.2-1Dan Walsh - 2.0.1-1Dan Walsh - 2.0.0-1Dan Walsh - 1.34.0-2Dan Walsh - 1.34.0-1Dan Walsh - 1.33.6-1Dan Walsh - 1.33.5-1Dan Walsh - 1.33.4-3Dan Walsh - 1.33.4-2Dan Walsh - 1.33.4-1Dan Walsh - 1.33.3-3Dan Walsh - 1.33.3-2Dan Walsh - 1.33.3-1Jeremy Katz - 1.33.2-4Dan Walsh - 1.33.2-3Dan Walsh - 1.33.2-2Dan Walsh - 1.33.2-1Dan Walsh - 1.33.1-2Dan Walsh - 1.33.1-1Dan Walsh - 1.32-1Jesse Keating - 1.30.29-2Dan Walsh - 1.30.29-1Jeremy Katz - 1.30.28-3Dan Walsh - 1.30.28-2Dan Walsh - 1.30.28-1Jeremy Katz - 1.30.27-2Dan Walsh - 1.30.27-1Jesse Keating - 1.20.26-2Dan Walsh - 1.30.25-1Dan Walsh - 1.30.24-1Dan Walsh - 1.30.22-2Dan Walsh - 1.30.22-1Dan Walsh - 1.30.20-1Jeremy Katz - 1.30.19-5Jeremy Katz - 1.30.19-4Dan Walsh 1.30.19-3Dan Walsh 1.30.19-2Dan Walsh 1.30.19-1Dan Walsh 1.30.15-5Dan Walsh 1.30.15-4Dan Walsh 1.30.15-3Dan Walsh 1.30.15-2Dan Walsh 1.30.15-1Dan Walsh 1.30.12-2Dan Walsh 1.30.12-1Dan Walsh 1.30.11-2Dan Walsh 1.30.11-1Dan Walsh 1.30.10-4Dan Walsh 1.30.10-3Dan Walsh 1.30.10-2Dan Walsh 1.30.10-1Dan Walsh 1.30.8-1Dan Walsh 1.30.7-2Dan Walsh 1.30.7-1Dan Walsh 1.30.6-2Dan Walsh 1.30.6-1Dan Walsh 1.30.5-1Dan Walsh 1.30.3-3Dan Walsh 1.30.3-2Dan Walsh 1.30.3-1Dan Walsh 1.30.1-2Dan Walsh 1.30.1-1Dan Walsh 1.30-1Jesse Keating - 1.29.7-1.2Jesse Keating - 1.29.7-1.1Dan Walsh 1.29.7-1Dan Walsh 1.29.6-1Dan Walsh 1.29.5-2Dan Walsh 1.29.5-1Dan Walsh 1.29.4-1Dan Walsh 1.29.3-2Dan Walsh 1.29.3-1Dan Walsh 1.29.2-4Dan Walsh 1.29.2-3Dan Walsh 1.29.2-2Dan Walsh 1.29.2-1Dan Walsh 1.29.1-3Jesse Keating Dan Walsh 1.29.1-1Dan Walsh 1.28-1Dan Walsh 1.27.28-2Dan Walsh 1.27.28-1Dan Walsh 1.27.26-1Dan Walsh 1.27.25-1Dan Walsh 1.27.23-1Dan Walsh 1.27.22-4Dan Walsh 1.27.22-3Dan Walsh 1.27.22-2Dan Walsh 1.27.22-1Dan Walsh 1.27.21-2Dan Walsh 1.27.21-1Dan Walsh 1.27.20-1Dan Walsh 1.27.19-1Dan Walsh 1.27.18-1Dan Walsh 1.27.17-4Dan Walsh 1.27.17-2Dan Walsh 1.27.17-1Dan Walsh 1.27.14-3Dan Walsh 1.27.14-2Dan Walsh 1.27.14-1Dan Walsh 1.27.13-2Dan Walsh 1.27.13-1Dan Walsh 1.27.12-1Dan Walsh 1.27.9-2Dan Walsh 1.27.9-1Dan Walsh 1.27.7-1Dan Walsh 1.27.6-1Dan Walsh 1.27.4-1Dan Walsh 1.27.3-1Dan Walsh 1.27.2-1Dan Walsh 1.27.1-3Dan Walsh 1.27.1-2Dan Walsh 1.26-6Dan Walsh 1.26-5Dan Walsh 1.26-3Dan Walsh 1.26-2Dan Walsh 1.25.7-1Dan Walsh 1.25.6-1Dan Walsh 1.25.5-1Dan Walsh 1.25.4-1Dan Walsh 1.25.3-2Dan Walsh 1.25.3-1Dan Walsh 1.25.2-2Dan Walsh 1.25.2-1Dan Walsh 1.24.2-1Dan Walsh 1.24.1-1Dan Walsh 1.23.11-1Dan Walsh 1.23.10-3Dan Walsh 1.23.10-2Dan Walsh 1.23.10-1Dan Walsh 1.23.8-1Dan Walsh 1.23.7-3Dan Walsh 1.23.7-2Dan Walsh 1.23.7-1Dan Walsh 1.23.6-1Dan Walsh 1.23.5-1Dan Walsh 1.23.4-1Dan Walsh 1.23.2-3Dan Walsh 1.23.2-2Dan Walsh 1.23.2-1Dan Walsh 1.23.1-1Dan Walsh 1.22-1Dan Walsh 1.21.13-1Dan Walsh 1.21.12-1Dan Walsh 1.21.11-2Dan Walsh 1.21.11-1Dan Walsh 1.21.10-3Dan Walsh 1.21.10-1Dan Walsh 1.21.9-2Dan Walsh 1.21.9-1Dan Walsh 1.21.8-1Dan Walsh 1.21.7-1Dan Walsh 1.21.5-1Dan Walsh 1.21.4-1Dan Walsh 1.21.2-1Dan Walsh 1.21.1-3Dan Walsh 1.21.1-2Dan Walsh 1.21.1-1Dan Walsh 1.20.1-3Dan Walsh 1.20.1-2Dan Walsh 1.20.1-1Dan Walsh 1.19.4-1Dan Walsh 1.19.3-3Dan Walsh 1.19.3-2Dan Walsh 1.19.3-1Dan Walsh 1.19.2-1Dan Walsh 1.19.1-6Dan Walsh 1.19.1-4Dan Walsh 1.19.1-2Dan Walsh 1.19.1-1Steve Grubb 1.18.1-5Dan Walsh 1.18.1-4Dan Walsh 1.18.1-3Steve Grubb 1.18.1-2Dan Walsh 1.18.1-1Steve Grubb 1.17.15-2Steve Grubb 1.17.15-2Dan Walsh 1.17.15-1Dan Walsh 1.17.14-1Dan Walsh 1.17.13-3Dan Walsh 1.17.13-2Dan Walsh 1.17.13-1Dan Walsh 1.17.12-2Dan Walsh 1.17.12-1Dan Walsh 1.17.11-1Dan Walsh 1.17.10-1Dan Walsh 1.17.9-2Dan Walsh 1.17.9-1Dan Walsh 1.17.8-2Dan Walsh 1.17.8-1Dan Walsh 1.17.7-1Dan Walsh 1.17.6-1Dan Walsh 1.17.5-1Dan Walsh 1.17.4-1Dan Walsh 1.17.3-1Dan Walsh 1.17.2-1Dan Walsh 1.17.1-1Dan Walsh 1.16.1-1Colin Walters 1.16-1Dan Walsh 1.15.7-1Dan Walsh 1.15.6-1Dan Walsh 1.15.5-1Dan Walsh 1.15.4-1Dan Walsh 1.15.3-2Dan Walsh 1.15.3-1Dan Walsh 1.15.2-1Dan Walsh 1.15.1-3Dan Walsh 1.15.1-2Dan Walsh 1.15.1-1Dan Walsh 1.14.1-1Dan Walsh 1.13.4-1Elliot Lee Dan Walsh 1.13.3-2Dan Walsh 1.13.2-1Dan Walsh 1.13.1-1Dan Walsh 1.12-2Dan Walsh 1.12-1Dan Walsh 1.11.4-1Dan Walsh 1.11.3-1Dan Walsh 1.11.2-1Dan Walsh 1.11-4Dan Walsh 1.11-3Dan Walsh 1.11-2Dan Walsh 1.11-1Dan Walsh 1.10-2Dan Walsh 1.10-1Dan Walsh 1.9-1Dan Walsh 1.8-1Dan Walsh 1.6-6Dan Walsh 1.6-5Dan Walsh 1.6-4Dan Walsh 1.6-3Dan Walsh 1.6-2Elliot Lee Dan Walsh 1.4-11Elliot Lee Dan Walsh 1.4-9Dan Walsh 1.4-8Dan Walsh 1.4-7Dan Walsh 1.4-6Dan Walsh 1.4-5Dan Walsh 1.4-4Dan Walsh 1.4-3Dan Walsh 1.4-2Dan Walsh 1.4-1Dan Walsh 1.3-2Dan Walsh 1.3-1Dan Walsh 1.2-9Dan Walsh 1.2-8Dan Walsh 1.2-7Dan Walsh 1.2-6Dan Walsh 1.2-5Dan Walsh 1.2-4Dan Walsh 1.2-3Dan Walsh 1.2-2Dan Walsh 1.2-1Dan Walsh 1.0-1- Add conflict with selinux policy from before store migration (#1469571)- Correct manpages regarding removable_context (#1395621)- Improve getfilecon man page (#1258513)- Fix audit2why.init error reporting (#1435139)- Add missing av_permission values (#1025931) - Set an appropriate errno in booleans.c (#1402140) - Change matchpathcon usage to match with matchpathcon manpage (#1412797)- Fix pointer handling in realpath_not_final (#1404644)- selinux_restorecon: fix realpath logic (#1386498)- Keep recursing if matchpathcon returns ENOENT (#1406520)- Handle NULL pcre study data- Fix in tree compilation of utils that depend on libsepol- Clarify is_selinux_mls_enabled() description - Explain how to free policy type from selinux_getpolicytype() - Compare absolute pathname in matchpathcon -V - Add selinux_snapperd_contexts_path() - Modify audit2why analyze function to use loaded policy - Sort object files for deterministic linking order - Respect CC and PKG_CONFIG environment variable - Avoid mounting /proc outside of selinux_init_load_policy() - Fix multiple spelling errors- Fix setexecfilecon() to work better in a chroot (#1329931) - Fix typo in sefcontext_compile.8 (#1320062)- Fix location of selinuxfs mount point (#1321086) - Only mount /proc if necessary - procattr: return einval for <= 0 pid args - procattr: return error on invalid pid_t inpu- Update to upstream release 2016-02-23- Add additional go bindings for get*con calls - Add go bindings test command - Modify man pages of set*con calls to mention that they are thread specific Resolves:#1053122- Move selinux.go to /usr/lib64/golang/src/pkg/github.com/selinux/selinux.go - Add Int_to_mcs function to generate MCS labels from integers.- Fix libselinux.spec file - Move selinux.go to /usr/lib64/golang/src/pkg/github.com/selinux/selinux.go - Add Int_to_mcs function to generate MCS labels from integers.- Mass rebuild 2014-01-24- Add ghost flag for /var/run/setrans Resolves: #1053122- Update to upstream * Fix userspace AVC handling of per-domain permissive mode. - Verify context is not null when passed into *setfilecon_raw- revert unexplained change to rhat.patch which broke SELinux disablement- Verify context is not null when passed into lsetfilecon_raw- Mv selinux.go to /usr/share/gocode/src/selinux - Add golang support to selinux.- Mass rebuild 2013-12-27- Remove togglesebool man page Resolves: #1038606- Update to upstream * Remove -lpthread from pkg-config file; it is not required. - Add support for policy compressed with xv- Update to upstream * Fix avc_has_perm() returns -1 even when SELinux is in permissive mode. * Support overriding Makefile RANLIB from Sven Vermeulen. * Update pkgconfig definition from Sven Vermeulen. * Mount sysfs before trying to mount selinuxfs from Sven Vermeulen. * Fix man pages from Laurent Bigonville. * Support overriding PATH and LIBBASE in Makefiles from Laurent Bigonville. * Fix LDFLAGS usage from Laurent Bigonville * Avoid shadowing stat in load_mmap from Joe MacDonald. * Support building on older PCRE libraries from Joe MacDonald. * Fix handling of temporary file in sefcontext_compile from Dan Walsh. * Fix procattr cache from Dan Walsh. * Define python constants for getenforce result from Dan Walsh. * Fix label substitution handling of / from Dan Walsh. * Add selinux_current_policy_path from Dan Walsh. * Change get_context_list to only return good matches from Dan Walsh. * Support udev-197 and higher from Sven Vermeulen and Dan Walsh. * Add support for local substitutions from Dan Walsh. * Change setfilecon to not return ENOSUP if context is already correct from Dan Walsh. * Python wrapper leak fixes from Dan Walsh. * Export SELINUX_TRANS_DIR definition in selinux.h from Dan Walsh. * Add selinux_systemd_contexts_path from Dan Walsh. * Add selinux_set_policy_root from Dan Walsh. * Add man page for sefcontext_compile from Dan Walsh.- Add systemd_contexts support - Do substitutions on a local sub followed by a dist sub Resolves: #971425- Eliminate requirement on pthread library, by applying patch for Jakub Jelinek Resolves: #1013801- Fix handling of libselinux getconlist with only one entry- Add Python constants for SELinux enforcing modes- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild- Add sefcontext_compile.8 man page - Add Russell Coker patch to fix man pages - Add patches from Laurent Bigonville to fix Makefiles for debian. - modify spec file to use /usr/lib- Fix patch that Handles substitutions for /- Handle substitutions for / - semanage fcontext -a -e / /opt/rh/devtoolset-2/root- Add Eric Paris patch to fix procattr calls after a fork.- Move secolor.conf.5 into mcstrans package and out of libselinux- Fix python bindings for selinux_check_access- Fix reseting the policy root in matchpathcon- Cleanup setfcontext_compile atomic patch - Add matchpathcon -P /etc/selinux/mls support by allowing users to set alternate root - Make sure we set exit codes from selinux_label calls to ENOENT or SUCCESS- Make setfcontext_compile atomic- Fix memory leak in set*con calls.- Move matchpathcon to -utils package - Remove togglesebool- Fix selinux man page to reflect what current selinux policy is.- Add new constant SETRANS_DIR which points to the directory where mstransd can find the socket and libvirt can write its translations files.- Bring back selinux_current_policy_path- Revert some changes which are causing the wrong policy version file to be created- Update to upstream * audit2why: make sure path is nul terminated * utils: new file context regex compiler * label_file: use precompiled filecontext when possible * do not leak mmapfd * sefcontontext_compile: Add error handling to help debug problems in libsemanage. * man: make selinux.8 mention service man pages * audit2why: Fix segfault if finish() called twice * audit2why: do not leak on multiple init() calls * mode_to_security_class: interface to translate a mode_t in to a security class * audit2why: Cleanup audit2why analysys function * man: Fix program synopsis and function prototypes in man pages * man: Fix man pages formatting * man: Fix typo in man page * man: Add references and man page links to _raw function variants * Use ENOTSUP instead of EOPNOTSUPP for getfilecon functions * man: context_new(3): fix the return value description * selinux_status_open: handle error from sysconf * selinux_status_open: do not leak statusfd on exec * Fix errors found by coverity * Change boooleans.subs to booleans.subs_dist. * optimize set*con functions * pkg-config do not specifc ruby version * unmap file contexts on selabel_close() * do not leak file contexts with mmap'd backend * sefcontext_compile: do not leak fd on error * matchmediacon: do not leak fd * src/label_android_property: do not leak fd on error- Update to latest patches from eparis/Upstream- Update to latest patches from eparis/Upstream- Try procatt speedup patch again- Roll back procattr speedups since it seems to be screwing up systemd labeling.- Fix tid handling for setfscreatecon, old patch still broken in libvirt- Fix tid handling for setfscreatecon, old patch still broken in libvirt- setfscreatecon after fork was broken by the Set*con patch. - We needed to reset the thread variables after a fork.- Fix setfscreatecon call to handle failure mode, which was breaking udev- Ondrej Oprala patch to optimize set*con functions - Set*con now caches the security context and only re-sets it if it changes.- Rebuild against latest libsepol- Update to latest patches from eparis/Upstream - Fix errors found by coverity - set the sepol_compute_av_reason_buffer flag to 0. This means calculate denials only? - audit2why: remove a useless policy vers variable - audit2why: use the new constraint information- Rebuild with latest libsepol- Return EPERM if login program can not reach default label for user - Attempt to return container info from audit2why- Apply patch from eparis to fix leaked file descriptor in new labeling code- Add new function mode_to_security_class which takes mode instead of a string. - Possibly will be used with coreutils.- Add back selinuxconlist and selinuxdefcon man pages- Fix segfault from calling audit2why.finish() multiple times- Fix up selinux man page to reference service man pages- Rebuild with fixed libsepol- Update to upstream * Add support for lxc_contexts_path * utils: add service to getdefaultcon * libsemanage: do not set soname needlessly * libsemanage: remove PYTHONLIBDIR and ruby equivalent * boolean name equivalency * getsebool: support boolean name substitution * Add man page for new selinux_boolean_sub function. * expose selinux_boolean_sub * matchpathcon: add -m option to force file type check * utils: avcstat: clear sa_mask set * seusers: Check for strchr failure * booleans: initialize pointer to silence coveriety * stop messages when SELinux disabled * label_file: use PCRE instead of glibc regex functions * label_file: remove all typedefs * label_file: move definitions to include file * label_file: do string to mode_t conversion in a helper function * label_file: move error reporting back into caller * label_file: move stem/spec handling to header * label_file: drop useless ncomp field from label_file data * label_file: move spec_hasMetaChars to header * label_file: fix potential read past buffer in spec_hasMetaChars * label_file: move regex sorting to the header * label_file: add accessors for the pcre extra data * label_file: only run regex files one time * label_file: new process_file function * label_file: break up find_stem_from_spec * label_file: struct reorg * label_file: only run array once when sorting * Ensure that we only close the selinux netlink socket once. * improve the file_contexts.5 manual page- rebuild for https://fedoraproject.org/wiki/Features/Python_3.3- make with_python3 be conditional on fedora- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- Move the tmpfiles.d content from /etc/tmpfiles.d to /usr/lib/tmpfiles.d- Revert Eric Paris Patch for selinux_binary_policy_path- Update to upstream * Fortify source now requires all code to be compiled with -O flag * asprintf return code must be checked * avc_netlink_recieve handle EINTR * audit2why: silence -Wmissing-prototypes warning * libsemanage: remove build warning when build swig c files * matchpathcon: bad handling of symlinks in / * seusers: remove unused lineno * seusers: getseuser: gracefully handle NULL service * New Android property labeling backend * label_android_property whitespace cleanups * additional makefile support for rubywrap- Fix booleans.subs name, change function name to selinux_boolean_sub, add man page, minor fixes to the function- Fix to compile with Fortify source * Add -O compiler flag * Check return code from asprintf - Fix handling of symbolic links in / by realpath_not_final- Add support for lxc contexts file- Add support fot boolean subs file- Update to upstream * Fix dead links to www.nsa.gov/selinux * Remove jump over variable declaration * Fix old style function definitions * Fix const-correctness * Remove unused flush_class_cache method * Add prototype decl for destructor * Add more printf format annotations * Add printf format attribute annotation to die() method * Fix const-ness of parameters & make usage() methods static * Enable many more gcc warnings for libselinux/src/ builds * utils: Enable many more gcc warnings for libselinux/utils builds * Change annotation on include/selinux/avc.h to avoid upsetting SWIG * Ensure there is a prototype for 'matchpathcon_lib_destructor' * Update Makefiles to handle /usrmove * utils: Stop separating out matchpathcon as something special * pkg-config to figure out where ruby include files are located * build with either ruby 1.9 or ruby 1.8 * assert if avc_init() not called * take security_deny_unknown into account * security_compute_create_name(3) * Do not link against python library, this is considered * bad practice in debian * Hide unnecessarily-exported library destructors- Add selinux_current_policy_path to return /sys/fs/selinux/policy if it exists - Otherwise search for policy on disk- Change selinux_binary_policy_path to return /sys/fs/selinux/policy - Add selinux_installed_policy_path to return what selinux_binary_policy_path used to return - avc_has_perm will now return yes if the machine is in permissive mode - Make work with ruby-1.9- avc_netlink_recieve should continue to poll if it receinves an EINTR rather- use /sbin/ldconfig, glibc does not provide /usr/sbin/ldconfig in the RPM database for now- Rebuild with cleaned up upstream to work in /usr- install everything in /usr https://fedoraproject.org/wiki/Features/UsrMove- Add Dan Berrange code cleanup patches.- Fix selabal_open man page to refer to proper selinux_opt structure-Update to upstream * Fix setenforce man page to refer to selinux man page * Cleanup Man pages * merge freecon with getcon man page- Add patch from Richard Haines When selabel_lookup found an invalid context with validation enabled, it always stated it was 'file_contexts' whether media, x, db or file. The fix is to store the spec file name in the selabel_lookup_rec on selabel_open and use this as output for logs. Also a minor fix if key is NULL to stop seg faults. - Fix setenforce manage page.- Rebuild with new libsepol- Fix setenforce man page, from Miroslav Grepl- Upgrade to upstream * selinuxswig_python.i: don't make syscall if it won't change anything * Remove assert in security_get_boolean_names(3) * Mapped compute functions now obey deny_unknown flag * get_default_type now sets EINVAL if no entry. * return EINVAL if invalid role selected * Updated selabel_file(5) man page * Updated selabel_db(5) man page * Updated selabel_media(5) man page * Updated selabel_x(5) man page * Add man/man5 man pages * Add man/man5 man pages * Add man/man5 man pages * use -W and -Werror in utils- Change python binding for restorecon to check if the context matches. - If it does do not reset- Upgrade to upstream * Makefiles: syntax, convert all ${VAR} to $(VAR) * load_policy: handle selinux=0 and /sys/fs/selinux not exist * regenerate .pc on VERSION change * label: cosmetic cleanups * simple interface for access checks * Don't reinitialize avc_init if it has been called previously * seusers: fix to handle large sets of groups * audit2why: close fd on enomem * rename and export symlink_realpath * label_file: style changes to make Eric happy.- Apply libselinux patch to handle large groups in seusers.- Add selinux_check_access function. Needed for passwd, chfn, chsh- Handle situation where selinux=0 passed to the kernel and both /selinux and-Update to upstream * utils: matchpathcon: remove duplicate declaration * src: matchpathcon: use myprintf not fprintf * src: matchpathcon: make sure resolved path starts * put libselinux.so.1 in /lib not /usr/lib * tree: default make target to all not- Switch to use ":" as prefix separator rather then ";"- Avoid unnecessary shell invocation in %post.- Fix handling of subset labeling that is causing segfault in restorecon- Change matchpathcon_init_prefix and selabel_open to allow multiple initial prefixes. Now you can specify a ";" separated list of prefixes and the labeling system will only load regular expressions that match these prefixes.- Change matchpatcon to use proper myprintf - Fix symlink_realpath to always include "/" - Update to upstream * selinux_file_context_verify function returns wrong value. * move realpath helper to matchpathcon library * python wrapper makefile changes- Move to new Makefile that can build with or without PYTHON being set-Update to upstream 2.1.4 2011-0817 * mapping fix for invalid class/perms after selinux_set_mapping * audit2why: work around python bug not defining * resolv symlinks and dot directories before matching 2.1.2 2011-0803 * audit2allow: do not print statistics * make python bindings for restorecon work on relative path * fix python audit2why binding error * support new python3 functions * do not check fcontext duplicates on use * Patch for python3 for libselinux 2.1.1 2011-08-02 * move .gitignore into utils * new setexecon utility * selabel_open fix processing of substitution files * mountpoint changing patch. * simplify SRCS in Makefile 2.1.1 2011-08-01 * Remove generated files, introduce more .gitignore-Update to upstream * Release, minor version bump * Give correct names to mount points in load_policy by Dan Walsh. * Make sure selinux state is reported correctly if selinux is disabled or fails to load by Dan Walsh. * Fix crash if selinux_key_create was never called by Dan Walsh. * Add new file_context.subs_dist for distro specific filecon substitutions by Dan Walsh. * Update man pages for selinux_color_* functions by Richard Haines.- Only call dups check within selabel/matchpathcon if you are validating the context - This seems to speed the loading of labels by 4 times.- Move /selinux to /sys/fs/selinux - Add selinuxexeccon - Add realpath to matchpathcon to handle matchpathcon * type queries.- Update for latest libsepol- Update for latest libsepol- Fix restorecon python binding to accept relative paths-Update to upstream * Give correct names to mount points in load_policy by Dan Walsh. * Make sure selinux state is reported correctly if selinux is disabled or fails to load by Dan Walsh. * Fix crash if selinux_key_create was never called by Dan Walsh. * Add new file_context.subs_dist for distro specific filecon substitutions by Dan Walsh. * Update man pages for selinux_color_* functions by Richard Haines.- Clean up patch to make handling of constructor cleanup more portable * db_language object class support for selabel_lookup from KaiGai Kohei. * Library destructors for thread local storage keys from Eamon Walsh.- Add distribution subs pathAdd patch from dbhole@redhat.com to initialize thread keys to -1 Errors were being seen in libpthread/libdl that were related to corrupt thread specific keys. Global destructors that are called on dl unload. During destruction delete a thread specific key without checking if it has been initialized. Since the constructor is not called each time (i.e. key is not initialized with pthread_key_create each time), and the default is 0, there is a possibility that key 0 for an active thread gets deleted. This is exactly what is happening in case of OpenJDK. Workaround patch that initializes the key to -1. Thus if the constructor is not called, the destructor tries to delete key -1 which is deemed invalid by pthread_key_delete, and is ignored.- Call fini_selinuxmnt if selinux is disabled, to cause is_selinux_disabled() to report correct data- Change mount source options to use "proc" and "selinuxfs"- Update to upstream * Turn off default user handling when computing user contexts by Dan Walsh- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- Fixup selinux man page- Fix Makefile to use pkg-config --cflags python3 to discover include paths- Update to upstream - Turn off fallback in to SELINUX_DEFAULTUSER in get_context_list- Update to upstream * Thread local storage fixes from Eamon Walsh.- Add /etc/tmpfiles.d support for /var/run/setrans- Ghost /var/run/setrans- Rebuilt for gcc bug 634757- rebuild via updated swig (#624674)- Update for python 3.2a1- Turn off fallback in to SELINUX_DEFAULTUSER in get_context_list- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild- Turn off messages in audit2why- Update to upstream * Add const qualifiers to public API where appropriate by KaiGai Kohei. 2.0.95 2010-06-10 * Remove duplicate slashes in paths in selabel_lookup from Chad Sellers * Adds a chcon method to the libselinux python bindings from Steve Lawrence - add python3 subpackage from David Malcolm* Set errno=EINVAL for invalid contexts from Dan Walsh.- Update to upstream * Show strerror for security_getenforce() by Colin Waters. * Merged selabel database support by KaiGai Kohei. * Modify netlink socket blocking code by KaiGai Kohei.- Update to upstream * Fix from Eric Paris to fix leak on non-selinux systems. * regenerate swig wrappers * pkgconfig fix to respect LIBDIR from Dan Walsh.- Update to upstream * Change the AVC to only audit the permissions specified by the policy, excluding any permissions specified via dontaudit or not specified via auditallow. * Fix compilation of label_file.c with latest glibc headers.- Fix potential doublefree on init- Fix libselinux.pc- Fix man page for selinuxdefcon- Free memory on disabled selinux boxes- Update to upstream * add/reformat man pages by Guido Trentalancia . * Change exception.sh to be called with bash by Manoj Srivastava - Fix selinuxdefcon man page- Update to upstream * Add pkgconfig file from Eamon Walsh.- Update to upstream * Rename and export selinux_reset_config()- Update to upstream * Add exception handling in libselinux from Dan Walsh. This uses a shell script called exception.sh to generate a swig interface file. * make swigify * Make matchpathcon print <> if path not found in fcontext file.- Eliminate -pthread switch in Makefile- Update to upstream * Removal of reference counting on userspace AVC SID's.- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- Update to upstream * Reverted Tomas Mraz's fix for freeing thread local storage to avoid pthread dependency. * Removed fini_context_translations() altogether. * Merged lazy init patch from Stephen Smalley based on original patch by Steve Grubb.- Update to upstream * Add per-service seuser support from Dan Walsh. * Let load_policy gracefully handle selinuxfs being mounted from Stephen Smalley. * Check /proc/filesystems before /proc/mounts for selinuxfs from Eric Paris.- Add provices ruby(selinux)- Update to upstream * Fix improper use of thread local storage from Tomas Mraz . * Label substitution support from Dan Walsh. * Support for labeling virtual machine images from Dan Walsh.- Update to upstream * Trim / from the end of input paths to matchpathcon from Dan Walsh. * Fix leak in process_line in label_file.c from Hiroshi Shinji. * Move matchpathcon to /sbin, add matchpathcon to clean target from Dan Walsh. * getdefaultcon to print just the correct match and add verbose option from Dan Walsh.- Update to upstream * deny_unknown wrapper function from KaiGai Kohei. * security_compute_av_flags API from KaiGai Kohei. * Netlink socket management and callbacks from KaiGai Kohei.- Fix Memory Leak- Fix crash in python- Add back in additional interfaces- Add back in av_decision to python swig- Update to upstream * Netlink socket handoff patch from Adam Jackson. * AVC caching of compute_create results by Eric Paris.- Add patch from ajax to accellerate X SELinux - Update eparis patch- Add eparis patch to accellerate Xwindows performance- Fix URL- Add substitute pattern - matchpathcon output <> on ENOENT- Update to upstream * Fix incorrect conversion in discover_class code.- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild- Add - selinux_virtual_domain_context_path - selinux_virtual_image_context_path- Throw exeptions in python swig bindings on failures- Fix restorecon python code- Update to upstream- Strip trailing / for matchpathcon- Fix segfault if seusers file does not work- Add new function getseuser which will take username and service and return - seuser and level. ipa will populate file in future. - Change selinuxdefcon to return just the context by default- Rebuild for Python 2.6- Update to Upstream * Allow shell-style wildcards in x_contexts file.- Eamon Walsh Patch - libselinux: allow shell-style wildcarding in X names - Add Restorecon/Install python functions from Luke Macken- Update to Upstream * Correct message types in AVC log messages. * Make matchpathcon -V pass mode from Dan Walsh. * Add man page for selinux_file_context_cmp from Dan Walsh.- Update to Upstream * New man pages from Dan Walsh. * Update flask headers from refpolicy trunk from Dan Walsh.- Fix matchpathcon -V call- Add flask definitions for open, X and nlmsg_tty_audit- Add missing get/setkeycreatecon man pages- Split out utilities- Add missing man page links for [lf]getfilecon- Update to Upstream * Add group support to seusers using %groupname syntax from Dan Walsh. * Mark setrans socket close-on-exec from Stephen Smalley. * Only apply nodups checking to base file contexts from Stephen Smalley.- Update to Upstream * Merge ruby bindings from Dan Walsh. - Add support for Linux groups to getseuserbyname- Allow group handling in getseuser call- Update to Upstream * Handle duplicate file context regexes as a fatal error from Stephen Smalley. This prevents adding them via semanage. * Fix audit2why shadowed variables from Stephen Smalley. * Note that freecon NULL is legal in man page from Karel Zak.- Add ruby support for puppet- Rebuild for new libsepol- Add Karel Zak patch for freecon man page- Update to Upstream * New and revised AVC, label, and mapping man pages from Eamon Walsh. * Add swig python bindings for avc interfaces from Dan Walsh.- Update to Upstream * Fix selinux_file_context_verify() and selinux_lsetfilecon_default() to call matchpathcon_init_prefix if not already initialized. * Add -q qualifier for -V option of matchpathcon and change it to indicate whether verification succeeded or failed via exit status.- libselinux no longer neets to telnet -u in post install- Add sedefaultcon and setconlist commands to dump login context- Update to Upstream * Fixed selinux_set_callback man page. * Try loading the max of the kernel-supported version and the libsepol-supported version when no manipulation of the binary policy is needed from Stephen Smalley. * Fix memory leaks in matchpathcon from Eamon Walsh.- Add Xavior Toth patch for security_id_t in swig- Add avc.h to swig code- Grab the latest policy for the kernel- Update to Upstream * Man page typo fix from Jim Meyering.- Update to Upstream * Changed selinux_init_load_policy() to not warn about a failed mount of selinuxfs if selinux was disabled in the kernel.- Fix matchpathcon memory leak- Update to Upstream * Merged new X label "poly_selection" namespace from Eamon Walsh.- Update to Upstream * Merged reset_selinux_config() for load policy from Dan Walsh.- Reload library on loading of policy to handle chroot- Update to Upstream * Merged avc_has_perm() errno fix from Eamon Walsh.- Update to Upstream * Regenerated Flask headers from refpolicy flask definitions.- Update to Upstream * Merged compute_member AVC function and manpages from Eamon Walsh. * Provide more error reporting on load policy failures from Stephen Smalley.- Update to Upstream * Merged new X label "poly_prop" namespace from Eamon Walsh.- Update to Upstream * Disable setlocaldefs if no local boolean or users files are present from Stephen Smalley. * Skip userspace preservebools processing for Linux >= 2.6.22 from Stephen Smalley.- Update to Upstream * Merged fix for audit2why from Dan Walsh.- Fix audit2why to grab latest policy versus the one selected by the kernel* Merged audit2why python binding from Dan Walsh.* Merged updated swig bindings from Dan Walsh, including typemap for pid_t.- Update to use libsepol-static library- Move libselinux.a to -static package - Spec cleanups- Put back libselinux.a- Fix memory references in audit2why and change to use tuples - Update to Upstream * Fix for the avc: granted null message bug from Stephen Smalley.- Fix __init__.py specification- Add audit2why python bindings- Add pid_t typemap for swig bindings- smp_mflag- Fix spec file caused by spec review- Upgrade to upstream * matchpathcon(8) man page update from Dan Walsh.- Upgrade to upstream * dlopen libsepol.so.1 rather than libsepol.so from Stephen Smalley. * Based on a suggestion from Ulrich Drepper, defer regex compilation until we have a stem match, by Stephen Smalley. * A further optimization would be to defer regex compilation until we have a complete match of the constant prefix of the regex - TBD.- Upgrade to upstream * Regenerated Flask headers from policy.- Upgrade to upstream * AVC enforcing mode override patch from Eamon Walsh. * Aligned attributes in AVC netlink code from Eamon Walsh. - Move libselinux.so back into devel package, procps has been fixed- Upgrade to upstream * Merged refactored AVC netlink code from Eamon Walsh. * Merged new X label namespaces from Eamon Walsh. * Bux fix and minor refactoring in string representation code.- Upgrade to upstream * Merged selinux_get_callback, avc_open, empty string mapping from Eamon Walsh.- Upgrade to upstream * Fix segfault resulting from missing file_contexts file.- Fix segfault on missing file_context file- Upgrade to upstream * Make netlink socket close-on-exec to avoid descriptor leakage from Dan Walsh. * Pass CFLAGS when using gcc for linking from Dennis Gilmore.- Add sparc patch to from Dennis Gilmore to build on Sparc platform- Remove leaked file descriptor- Upgrade to latest from NSA * Fix selabel option flag setting for 64-bit from Stephen Smalley.- Change matchpatcon to use syslog instead of syserror- Upgrade to latest from NSA * Re-map a getxattr return value of 0 to a getfilecon return value of -1 with errno EOPNOTSUPP from Stephen Smalley. * Fall back to the compat code for security_class_to_string and security_av_perm_to_string from Stephen Smalley. * Fix swig binding for rpm_execcon from James Athey.- Apply James Athway patch to fix rpm_execcon python binding- Move libselinux.so back into main package, breaks procps- Upgrade to upstream * Fix file_contexts.homedirs path from Todd Miller.- Remove requirement on setransd, Moved to selinux-policy-mls- Move libselinux.so into devel package - Upgrade to upstream * Fix segfault resulting from uninitialized print-callback pointer. * Added x_contexts path function patch from Eamon Walsh. * Fix build for EMBEDDED=y from Yuichi Nakamura. * Fix markup problems in selinux man pages from Dan Walsh.- Upgrade to upstream * Updated version for stable branch. * Added x_contexts path function patch from Eamon Walsh. * Fix build for EMBEDDED=y from Yuichi Nakamura. * Fix markup problems in selinux man pages from Dan Walsh. * Updated av_permissions.h and flask.h to include new nscd permissions from Dan Walsh. * Added swigify to top-level Makefile from Dan Walsh. * Fix for string_to_security_class segfault on x86_64 from Stephen Smalley.- Apply Steven Smalley patch to fix segfault in string_to_security_class- Fix matchpathcon to set default myprintf- Upgrade to upstream * Fix for getfilecon() for zero-length contexts from Stephen Smalley.- Update to match flask/access_vectors in policy- Fix man page markup lanquage for translations- Fix semanage segfault on x86 platform- Upgrade to upstream * Labeling and callback interface patches from Eamon Walsh.- Refactored swig- Upgrade to upstream * Class and permission mapping support patches from Eamon Walsh. * Object class discovery support patches from Chris PeBenito. * Refactoring and errno support in string representation code.- Upgrade to upstream - Merged patch to reduce size of libselinux and remove need for libsepol for embedded systems from Yuichi Nakamura. This patch also turns the link-time dependency on libsepol into a runtime (dlopen) dependency even in the non-embedded case. 2.0.17 2007-05-31 * Updated Lindent script and reindented two header files.- Upgrade to upstream * Merged additional swig python bindings from Dan Walsh. * Merged helpful message when selinuxfs mount fails patch from Dax Kelson.- Upgrade to upstream * Merged build fix for avc_internal.c from Joshua Brindle.- Add get_context_list funcitions to swig file- Upgrade to upstream * Merged rpm_execcon python binding fix, matchpathcon man page fix, and getsebool -a handling for EACCES from Dan Walsh.- Add missing interface- Upgrade to upstream * Merged support for getting initial contexts from James Carter.- Upgrade to upstream * Merged userspace AVC patch to follow kernel's behavior for permissive mode in caching previous denials from Eamon Walsh. * Merged sidput(NULL) patch from Eamon Walsh.- Make rpm_exec swig work- Upgrade to upstream * Merged class/av string conversion and avc_compute_create patch from Eamon Walsh.- Upgrade to upstream * Merged fix for avc.h #include's from Eamon Walsh.- Add stdint.h to avc.h- Merged patch to drop support for CACHETRANS=0 config option from Steve Grubb. - Merged patch to drop support for old /etc/sysconfig/selinux and - /etc/security policy file layout from Steve Grubb.- Do not fail on permission denied in getsebool- Upgrade to upstream * Merged init_selinuxmnt() and is_selinux_enabled() improvements from Steve Grubb.- Upgrade to upstream * Removed sending of setrans init message. * Merged matchpathcon memory leak fix from Steve Grubb.- Upgrade to upstream * Merged more swig initializers from Dan Walsh.- Upgrade to upstream * Merged patch from Todd Miller to convert int types over to C99 style.- Merged patch from Todd Miller to remove sscanf in matchpathcon.c because of the use of the non-standard format (original patch changed for style). - Merged patch from Todd Miller to fix memory leak in matchpathcon.c.- Add context function to python to split context into 4 parts- Upgrade to upstream * Updated version for stable branch.- Upgrade to upstream * Merged man page updates to make "apropos selinux" work from Dan Walsh.- Upgrade to upstream * Merged getdefaultcon utility from Dan Walsh.- Add Ulrich NSCD__GETSERV and NSCD__SHMEMGRP for Uli- Add reference to selinux man page in all man pages to make apropos work Resolves: # 217881- Upstream wanted some minor changes, upgrading to keep api the same - Upgrade to upstream * Merged selinux_check_securetty_context() and support from Dan Walsh. Resolves: #200110- Cleanup patch- Add securetty handling Resolves: #200110- Upgrade to upstream * Merged patch for matchpathcon utility to use file mode information when available from Dan Walsh.- rebuild against python 2.5- Fix matchpathcon to lstat files- Update man page- Upgrade to upstream- Add James Antill patch for login verification of MLS Levels - MLS ragnes need to be checked, Eg. login/cron. This patch adds infrastructure.- Upgrade to latest from NSA * Merged updated flask definitions from Darrel Goeddel. This adds the context security class, and also adds the string definitions for setsockcreate and polmatch.- Upgrade to latest from NSA * Updated version for release.- rebuilt for unwind info generation, broken in gcc-4.1.1-21- Upgrade to latest from NSA * Merged av_permissions.h update from Steve Grubb, adding setsockcreate and polmatch definitions.- really make -devel depend on libsepol-devel- Add sgrubb patch for polmatch- Upgrade to latest from NSA * Merged patch from Steve Smalley to fix SIGPIPE in setrans_client- have -devel require libsepol-devel- Upgrade to latest from NSA * Merged patch to not log avc stats upon a reset from Steve Grubb. * Applied patch to revert compat_net setting upon policy load. * Merged file context homedir and local path functions from Chris PeBenito.- rebuilt with latest binutils to pick up 64K -z commonpagesize on ppc* (#203001)- Upgrade to latest from NSA * Merged file context homedir and local path functions from Chris PeBenito. * Rework functions that access /proc/pid/attr to access the per-thread nodes, and unify the code to simplify maintenance.- Upgrade to latest from NSA * Merged return value fix for *getfilecon() from Dan Walsh. * Merged sockcreate interfaces from Eric Paris.- Fix translation return codes to return size of buffer- Upgrade to latest from NSA * Merged no-tls-direct-seg-refs patch from Jeremy Katz. * Merged netfilter_contexts support patch from Chris PeBenito.- Upgrade to latest from NSA * Merged context_*_set errno patch from Jim Meyering.- only build non-fpic objects with -mno-tls-direct-seg-refs- build with -mno-tls-direct-seg-refs on x86 to avoid triggering segfaults with xen (#200783)- Rebuild for new gcc- Fix libselinux to not telinit during installs- Upgrade to latest from NSA * Lindent. * Merged {get,set}procattrcon patch set from Eric Paris. * Merged re-base of keycreate patch originally by Michael LeMay from Eric Paris. * Regenerated Flask headers from refpolicy. * Merged patch from Dan Walsh with: - Added selinux_file_context_{cmp,verify}. - Added selinux_lsetfilecon_default. - Delay translation of contexts in matchpathcon.- Yet another change to matchpathcon- Turn off error printing in library. Need to compile with DEBUG to get it back- Fix error reporting of matchpathcon- Add function to compare file context on disk versus contexts in file_contexts file.- Upgrade to latest from NSA * Merged patch from Dan Walsh with: * Added selinux_getpolicytype() function. * Modified setrans code to skip processing if !mls_enabled. * Set errno in the !selinux_mnt case. * Allocate large buffers from the heap, not on stack. Affects is_context_customizable, selinux_init_load_policy, and selinux_getenforcemode.- Add selinux_getpolicytype()- Upgrade to latest from NSA * Merged !selinux_mnt checks from Ian Kent.- Check for selinux_mnt == NULL- Merged matchmediacon and trans_to_raw_context fixes from Serge Hallyn.- Remove getseuser- Bump requires to grab latest libsepol- Add BuildRequires for swig- Upgrade to latest from NSA * Merged simple setrans client cache from Dan Walsh. Merged avcstat patch from Russell Coker. * Modified selinux_mkload_policy() to also set /selinux/compat_net appropriately for the loaded policy.- More fixes for translation cache - Upgrade to latest from NSA * Added matchpathcon_fini() function to free memory allocated by matchpathcon_init().- Add simple cache to improve translation speed- Upgrade to latest from NSA * Merged setrans client cleanup patch from Steve Grubb.- Add Russell's AVC patch to handle large numbers- Upgrade to latest from NSA * Merged getfscreatecon man page fix from Dan Walsh. * Updated booleans(8) man page to drop references to the old booleans file and to note that setsebool can be used to set the boot-time defaults via -P.- Upgrade to latest from NSA * Merged fix warnings patch from Karl MacMillan. * Merged setrans client support from Dan Walsh. This removes use of libsetrans. * Merged patch to eliminate use of PAGE_SIZE constant from Dan Walsh. * Merged swig typemap fixes from Glauber de Oliveira Costa.- Change the way translations work, Use setransd/remove libsetrans- Add selinuxswig fixes - Stop using PAGE_SIZE and start using sysconf(_SC_PAGE_SIZE)- Upgrade to latest from NSA * Added distclean target to Makefile. * Regenerated swig files. * Changed matchpathcon_init to verify that the spec file is a regular file. * Merged python binding t_output_helper removal patch from Dan Walsh.- Fix python bindings for matchpathcon - Fix booleans man page- Merged Makefile PYLIBVER definition patch from Dan Walsh.- Make some fixes so it will build on RHEL4 - Upgrade to latest from NSA * Updated version for release. * Altered rpm_execcon fallback logic for permissive mode to also handle case where /selinux/enforce is not available.- bump again for double-long bug on ppc(64)- rebuilt for new gcc4.1 snapshot and glibc changes- Upgrade to latest from NSA * Merged install-pywrap Makefile patch from Joshua Brindle.- Upgrade to latest from NSA * Merged pywrap Makefile patch from Dan Walsh.- Split out pywrap in Makefile- Upgrade to latest from NSA * Added getseuser test program.- Upgrade to latest from NSA * Added format attribute to myprintf in matchpathcon.c and removed obsoleted rootlen variable in init_selinux_config().- Build with new libsepol- Upgrade to latest from NSA * Merged several fixes and improvements from Ulrich Drepper (Red Hat), including: - corrected use of getline - further calls to __fsetlocking for local files - use of strdupa and asprintf - proper handling of dirent in booleans code - use of -z relro - several other optimizations * Merged getpidcon python wrapper from Dan Walsh (Red Hat).- Add build requires line for libsepol-devel- Fix swig call for getpidcon- Move libselinux.so to base package- Upgrade to latest from NSA * Merged call to finish_context_translations from Dan Walsh. This eliminates a memory leak from failing to release memory allocated by libsetrans.- update to latest libsetrans - Fix potential memory leak- rebuilt- Update to never version * Merged patch for swig interfaces from Dan Walsh.- Update to never version- Fix some of the python swig objects- Update to latest from NSA * Added MATCHPATHCON_VALIDATE flag for set_matchpathcon_flags() and modified matchpathcon implementation to make context validation/ canonicalization optional at matchpathcon_init time, deferring it to a successful matchpathcon by default unless the new flag is set by the caller. * Added matchpathcon_init_prefix() interface, and reworked matchpathcon implementation to support selective loading of file contexts entries based on prefix matching between the pathname regex stems and the specified path prefix (stem must be a prefix of the specified path prefix).- Update to latest from NSA * Change getsebool to return on/off instead of active/inactive- Update to latest from NSA * Added -f file_contexts option to matchpathcon util. Fixed warning message in matchpathcon_init(). * Merged Makefile python definitions patch from Dan Walsh.- Update to latest from NSA * Merged swigify patch from Dan Walsh.- Separate out libselinux-python bindings into separate rpm- Read libsetrans requirement- Add python bindings- Update to latest from NSA * Merged make failure in rpm_execcon non-fatal in permissive mode patch from Ivan Gyurdiev.- Remove requirement for libsetrans- Update to latest from NSA * Added MATCHPATHCON_NOTRANS flag for set_matchpathcon_flags() and modified matchpathcon_init() to skip context translation if it is set by the caller.- Update to latest from NSA * Added security_canonicalize_context() interface and set_matchpathcon_canoncon() interface for obtaining canonical contexts. Changed matchpathcon internals to obtain canonical contexts by default. Provided fallback for kernels that lack extended selinuxfs context interface. - Patch to not translate mls when calling setfiles- Update to latest from NSA * Merged seusers parser changes from Ivan Gyurdiev. * Merged setsebool to libsemanage patch from Ivan Gyurdiev. * Changed seusers parser to reject empty fields.- Update to latest from NSA * Merged seusers empty level handling patch from Jonathan Kim (TCS).- Rebuild for latest libsepol- Rebuild for latest libsepol- Change default to __default__- Change default to __default__- Add selinux_translations_path- Update to latest from NSA * Merged selinux_path() and selinux_homedir_context_path() functions from Joshua Brindle.- Need to check for /sbin/telinit- Update to latest from NSA * Merged fixes for make DESTDIR= builds from Joshua Brindle.- Update to latest from NSA * Merged get_default_context_with_rolelevel and man pages from Dan Walsh (Red Hat). * Updated call to sepol_policydb_to_image for sepol changes. * Changed getseuserbyname to ignore empty lines and to handle no matching entry in the same manner as no seusers file.- Tell init to reexec itself in post script- Update to latest from NSA * Changed selinux_mkload_policy to try downgrading the latest policy version available to the kernel-supported version. * Changed selinux_mkload_policy to fall back to the maximum policy version supported by libsepol if the kernel policy version falls outside of the supported range.- Update to latest from NSA * Changed getseuserbyname to fall back to the Linux username and NULL level if seusers config file doesn't exist unless REQUIRESEUSERS=1 is set in /etc/selinux/config. * Moved seusers.conf under $SELINUXTYPE and renamed to seusers.- Update to latest from NSA * Added selinux_init_load_policy() function as an even higher level interface for the initial policy load by /sbin/init. This obsoletes the load_policy() function in the sysvinit-selinux.patch. * Added selinux_mkload_policy() function as a higher level interface for loading policy than the security_load_policy() interface.- Update to latest from NSA * Merged fix for matchpathcon (regcomp error checking) from Johan Fischer. Also added use of regerror to obtain the error string for inclusion in the error message.- Update to latest from NSA * Changed getseuserbyname to not require (and ignore if present) the MLS level in seusers.conf if MLS is disabled, setting *level to NULL in this case.- Update to latest from NSA * Merged getseuserbyname patch from Dan Walsh.- Fix patch to satisfy upstream- Update to latest from NSA - Add getseuserbyname- Fix patch call- Fix strip_con call- Go back to original libsetrans code- Eliminate forth param from mls context when mls is not enabled.- Update from NSA * Merged modified form of patch to avoid dlopen/dlclose by the static libselinux from Dan Walsh. Users of the static libselinux will not have any context translation by default.- Update from NSA * Added public functions to export context translation to users of libselinux (selinux_trans_to_raw_context, selinux_raw_to_trans_context).- Update from NSA * Remove special definition for context_range_set; use common code.- Update from NSA * Hid translation-related symbols entirely and ensured that raw functions have hidden definitions for internal use. * Allowed setting NULL via context_set* functions. * Allowed whitespace in MLS component of context. * Changed rpm_execcon to use translated functions to workaround lack of MLS level on upgraded systems.- Allow set_comp on unset ranges- Merged context translation patch, originally by TCS, with modifications by Dan Walsh (Red Hat).- Apply translation patch- Update from NSA * Merged several fixes for error handling paths in the AVC sidtab, matchpathcon, booleans, context, and get_context_list code from Serge Hallyn (IBM). Bugs found by Coverity. * Removed setupns; migrated to pam. * Merged patches to rename checkPasswdAccess() from Joshua Brindle. Original symbol is temporarily retained for compatibility until all callers are updated.- Update makefiles- Update from NSA * Merged security_setupns() from Chad Sellers. - fix selinuxenabled man page- Update from NSA * Merged avcstat and selinux man page from Dan Walsh. * Changed security_load_booleans to process booleans.local even if booleans file doesn't exist.- Fix avcstat to clear totals- Add info to man page- Update from NSA * Merged set_selinuxmnt patch from Bill Nottingham (Red Hat). * Rewrote get_ordered_context_list and helpers, including changing logic to allow variable MLS fields.- Update from NSA- Add backin matchpathcon- Fix selinux_policy_root man page- Change assert(selinux_mnt) to if (!selinux_mnt) return -1;- Update from NSA * Fixed bug in matchpathcon_filespec_destroy.- Update from NSA * Fixed bug in rpm_execcon error handling path.- Update from NSA * Merged fix for set_matchpathcon* functions from Andreas Steinmetz. * Merged fix for getconlist utility from Andreas Steinmetz.- Update from NSA- Better handling of booleans- Update from NSA * Merged destructors patch from Tomas Mraz.- Update from NSA * Added set_matchpathcon_flags() function for setting flags controlling operation of matchpathcon. MATCHPATHCON_BASEONLY means only process the base file_contexts file, not file_contexts.homedirs or file_contexts.local, and is for use by setfiles -c. * Updated matchpathcon.3 man page.- Update from NSA- Update from NSA * Fixed bug in matchpathcon_filespec_add() - failure to clear fl_head.- Update from NSA * Changed matchpathcon_common to ignore any non-format bits in the mode.- Default matchpathcon to regular files if the user specifies a mode- Update from NSA * Merged several fixes from Ulrich Drepper.- Fix matchpathcon on eof.- Update from NSA * Merged matchpathcon patch for file_contexts.homedir from Dan Walsh. * Added selinux_users_path() for path to directory containing system.users and local.users.- Process file_context.homedir- Update from NSA * Changed relabel Makefile target to use restorecon.- Update from NSA * Regenerated av_permissions.h.- Update from NSA * Modified avc_dump_av to explicitly check for any permissions that cannot be mapped to string names and display them as a hex value. * Regenerated av_permissions.h.- Update from NSA * Generalized matchpathcon internals, exported more interfaces, and moved additional code from setfiles into libselinux so that setfiles can directly use matchpathcon.- Update from NSA * Prevent overflow of spec array in matchpathcon. * Fixed several uses of internal functions to avoid relocations. * Changed rpm_execcon to check is_selinux_enabled() and fallback to a regular execve if not enabled (or unable to determine due to a lack of /proc, e.g. chroot'd environment).- Update from NSA * Merged minor fix for avcstat from Dan Walsh.- rpmexeccon should not fail in permissive mode.- fix printf in avcstat- Update from NSA- Modify matchpathcon to also process file_contexts.local if it exists- Add is_customizable_types function call- Update to latest from upstream * Just changing version number to match upstream- Update to latest from upstream * Changed matchpathcon to return -1 with errno ENOENT for <> entries, and also for an empty file_contexts configuration.- Fix link devel libraries- Fix unitialized variable in avcstat.c- Upgrade to upstream * Removed some trivial utils that were not useful or redundant. * Changed BINDIR default to /usr/sbin to match change in Fedora. * Added security_compute_member. * Added man page for setcon.- Upgrade to upstream- Add avcstat program- Add lots of missing man pages- Fix output of getsebool.- Update from upstream, fix setsebool -P segfault- Add a patch from upstream. Fixes signed/unsigned issues, and incomplete structure copy.- More fixes from sgrubb, better syslog- Have setsebool and togglesebool log changes to syslog- Add patch to make setsebool update bool on disk - Make togglesebool have a rollback capability in case it blows up inflight- Upgrade to latest from NSA- Changed the location of the utilities to /usr/sbin since normal users can't use them anyways.- Updated various utilities, removed utilities that are for testing, added man pages.- Add -g flag to make - Upgrade to latest from NSA * Added rpm_execcon.- Upgrade to latest from NSA * Merged setenforce and removable context patch from Dan Walsh. * Merged build fix for alpha from Ulrich Drepper. * Removed copyright/license from selinux_netlink.h - definitions only.- Change setenforce to accept Enforcing and Permissive- Add alpha patch- Upgrade to latest from NSA- Add selinux_removable_context_path- Update from NSA * Add matchmediacon- Update from NSA * Merged in matchmediacon changes.- Update from NSA * Regenerated headers for new nscd permissions.- Add matchmediacon- Update from NSA * Added get_default_context_with_role.- Clean up spec file * Patch from Matthias Saou- Update from NSA * Added set_matchpathcon_printf.- Update from NSA * Reworked av_inherit.h to allow easier re-use by kernel.- Add strcasecmp in selinux_config - Update from NSA * Changed avc_has_perm_noaudit to not fail on netlink errors. * Changed avc netlink code to check pid based on patch by Steve Grubb. * Merged second optimization patch from Ulrich Drepper. * Changed matchpathcon to skip invalid file_contexts entries. * Made string tables private to libselinux. * Merged strcat->stpcpy patch from Ulrich Drepper. * Merged matchpathcon man page from Dan Walsh. * Merged patch to eliminate PLTs for local syms from Ulrich Drepper. * Autobind netlink socket. * Dropped compatibility code from security_compute_user. * Merged fix for context_range_set from Chad Hanson. * Merged allocation failure checking patch from Chad Hanson. * Merged avc netlink error message patch from Colin Walters.- Update from NSA * Merged second optimization patch from Ulrich Drepper. * Changed matchpathcon to skip invalid file_contexts entries. * Made string tables private to libselinux. * Merged strcat->stpcpy patch from Ulrich Drepper. * Merged matchpathcon man page from Dan Walsh. * Merged patch to eliminate PLTs for local syms from Ulrich Drepper. * Autobind netlink socket. * Dropped compatibility code from security_compute_user. * Merged fix for context_range_set from Chad Hanson. * Merged allocation failure checking patch from Chad Hanson. * Merged avc netlink error message patch from Colin Walters.- Update from NSA - Add optflags- Update from NSA- Add matchpathcon man page - Latest from NSA * Merged patch to eliminate PLTs for local syms from Ulrich Drepper. * Autobind netlink socket. * Dropped compatibility code from security_compute_user. * Merged fix for context_range_set from Chad Hanson. * Merged allocation failure checking patch from Chad Hanson. * Merged avc netlink error message patch from Colin Walters.- Latest from NSA * Autobind netlink socket. * Dropped compatibility code from security_compute_user. * Merged fix for context_range_set from Chad Hanson. * Merged allocation failure checking patch from Chad Hanson. * Merged avc netlink error message patch from Colin Walters.- Latest from NSA- New upstream version- Latest from Upstream- Fix man pages- Latest from Upstream- Latest from Upstream- Add man page for boolean functions and SELinux- Latest from NSA- Latest from NSA- uppercase getenforce returns, to make them match system-config-securitylevel- Remove old path patch- Update to latest from NSA - Add fix to only get old path if file_context file exists in old location- Update to latest from NSA- add nlclass patch - Update to latest from NSA- rebuilt- Fix selinux_config to break once it finds SELINUXTYPE.-Update with latest from NSA- Change to use new policy mechanism- add man patch- Update with latest from NSA- Update with latest from NSA- Add changes for relaxed policy - Update to match NSA- Add relaxed policy changes- Sync with NSA- Remove requires glibc>2.3.4- Fix selinuxenabled man page.- Upgrade to 1.11- Add memleaks patch- Upgrade to latest from NSA and add more man pages- Update to match NSA - Cleanup some man pages- Upgrade to latest from NSA- Add Russell's Man pages- Change getenforce to also check is_selinux_enabled- Add ownership to /usr/include/selinux- fix location of file_contexts file.- Fix matchpathcon to use BUFSIZ- rebuilt- add matchpathcon- rebuilt- Add rootok patch- Updated getpeernam patch- Add getpeernam patch- Add getpeercon patch- Put mntpoint patch, because found fix for SysVinit- Add remove mntpoint patch, because it breaks SysVinit- Add mntpoint patch for SysVinit- Add -r -u -t to getcon- Upgrade to latest from NSA- Fix x86_64 build- Latest tarball from NSA.- Update with latest changes from NSA- Change location of .so file- Break out into development library- Move location of libselinux.so to /lib- Add selinuxenabled patch- Update with final NSA 1.2 sources.- Update with latest from NSA.- Fix to build on x86_64- update for version 1.2- Initial version2.5-14.1.el72.5-14.1.el7libselinux.a/usr/lib64/-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -m64 -mtune=genericcpioxz2x86_64-redhat-linux-gnucurrent ar archive?7zXZ !#,O] b2u Q{KC/8[b)k#CyV9,OÙ eȔ&/KeOc?b34"[7CkEDcN2TEir'I[~|@Z  TXNWjti)yR=Aq1з TIؤ MaՓ2VҮZE !>1e[piD`O_<ɜ;i=fQ\"<*az^zۇYXFqf~jd+#yeM1vs+1+g״nNIAT/Xʣ{waMsG.\)dUI^ hhT`^u3.θb0}og*ﰟ]r}RWX/%-HqD=%Elu=Ee蛕I{0MeD:$zۍ| MQpAWR%uyc4.VZ*  Q_ Io5"a9_ HńLTV%Z]u&yLA77Y 5t.]IW([_KVZg[C;f#[>AiLZ ]PE@F}.Ī}B ͈L ݃wWnnJ[!X b$gmzv"Lz큱;Qsjº=RqYj7lSs8I(HT%=򶗫UVؽfhu|<Ƭ𳻇 ;)kYaJr*Sk"O53Z e";K @TuA?V?ԓ [FnInT%x.%9'Vc5 ~vñjp"NHvmKET 4&Ej䩊\;=\(bSHxTZֲ$yl+%D[:6("w khiDT<,1*+2/IDn ꒟wG<$֎0YHKjNIH ػJץ"g/yU[qw'!u-VεMp bŸ1/66˓@ +]jm~!uEGG3ct <{tceλI~L]kI~6Ce5lI;ƍa!l0 g=28[%`,WJܨqrOxʯ@=BtB8\g /FN6u_<9n.!zI󛝾nB<FDt0+-1/wN!I3%)D\]Wǵʋw1'!eA3+ #Z 4u(٥엠)#zis@ ߆N݂q-A$P]$p(HkAِYuJ-B؛fߔcXoϑB OJ|y1 |sXgitF`fa'-?JM4rJ+#]H%oN˲9J˦Gld5I1LWJ*Tl pJf10bqz&]z*r \#}4RUOcbmR@߮kBOg{DAqnKt4b{eSM?waREngX!I_Þ6PH,G:측>Z|#,CR668s*0mahRPBݺƊ0 Vf!^ݰtp>Dxt: Ә_N;UdlqNu+`[rHO _3Tl~ê6 2"{8 |F._OJ;QwJO;:{![[}h5seOAg dژ"alneo_ˈ^= ZbpU¦>o tK?`s?,2j .~<8 (I804K[ȳCNOhTK"}!h&X7!+9'q̬]cWEʞ*.W`{ [W ~to,z4tg\vwp_fɵ+)gy* N$,^v>2RϺN{yq@ukT L~:ZgyzY˹g%yOaM8QuU6 L^=)2Ý?r"Eըaޓ_zC jSG`P5::#-58 -?9ADNSVG,:vm2^Ǫ`(JXl5jL8g10>܏B1Ui0yH=HPu~pFU A{b`7rF]cj'mK]z ek0nX( tݽ2JM[Š)G7sRw?}7'iqƎҪP9VȞ'ǡ5%퉃&?+^UT.菶~I0CN̷cJrt_NOcTLBCEH0$ӀyaҦ o \_EI: (j,ǡxy :oLr@S5jd,rX=V 9Y_ @3Lݵ'9U/Y\s\i36Z᳣s8zmb2C>S :y[EowUU!=3kdi\]"0yeUM=f[/N=/8#EfVKRVj Oō(bOd|8P7ĻyDCԵEVL^ʧ dA6A9IaYLI* CFv-11\5;-V+2sVqiOGK%o@/q?7ˁ=4wYuIߜZ,oz€[2r?Eu8%8.$%^sӹu}K~{ja8Ocø8Wn+\׻LBy*ㆩݒTh$j<-my4?󒹎n5t_Z|>١Q &GQ<#+sI jk{Ly2{|6=ALV'{V7Q!hk~8q fumV C^=QH|uadѣi }leiq*qgz+*ީI`HUJ*cxbSL|of~oyIf \b`f &$K9v'DW}z)a[ ն М 4*0[:$4Pq6qLBr4GW&|~* $QnB@;bV\Xbd怿q2N9A.S<(CUcA;YR~ g Kw{ %ƞ8-6N=Tֈ[# EyhՁ;qd؊RFQGp9-*F_(H_a"C+Cbć' k{{P11p;kr)E\̅4JJKQA{F%drhuNPRISv WtU;Y, `@ y1IӔ2Zh=7.emU'=xD7L1In}maG GEaƥzmr"al|{Ssj=*j$%q8rBVl>"gP-`qq1&9/[dJ Әj{#Q_S vGj9#IRb nIނWҲh~s2y&F6{s"ΘXv4BebjmK`W4voSlΕmcVWz!(EVȟ 6_9XCk ,S`=n7*Rh/YI シ;0Є93f9_\Es}CO Bz!=M(A=plt [9rMo*Y"%=[GG0ZE87T,Lrr vȧTjHKx+)` 9f~.5Fxj`F=`B??|<TM,̰ǯqdR,Ԩd|~5l&8YbR48#OY-.VCQ.H2gyJ%Sx!M&0ڇEK%*d3NIrϤŕA 5͝O/R9+C?蜐b :5̱_(#,F\#TEl/^|~Jȡ<֦O.yfN.aQAK׸o4z$r2^R5J[YZ</4y~!O$Ά?>Zv6#ObKM)F7b6_8+a&@k)=?Nb#ʶft|ܲG= ;%M3(ۖOhh[aYZ8IcaLڃ\!YKMU'tdl08|4F# UW(6=gfC %#rPů bAѬ@?8hѮcpN2MzIЦS9|gȿ$gi7}ݍDNmUwշ3!;f>+p>tNֶ߻aC-_#UE!`U2$l " s[NME;W$݌_=zYŘ[ %&Mynٺ-I9q((qfikZ#RJ}QF,% nfxuu{ZeD='v~ N3G ؿ*CSZb2$SF׎E~G)D٧U1v3լG'I!_fgS ]W">@Ҿn[>ڶNjRh͌ګ"9.k J0;#'^ 2^ žmh7޷`(&JN"~nѼmju`SlX ٮpZ#Ehv, +V;Rb//9x|D.xEIJ`ʎT cܶ(Io 8Iv}<&9K]oj ԉ8>e2F:pdW l ̜;{=iY^#[=oҘ4[VmC"LaȰ~[-Oy'u5*1;Xx;M.9Dxj[|PW'5]uGHrb D,KD`TX{O\P" b 05S^W\2G̚S"%bԸi;r "9l'CKwAW,]cBJY_9㥯kv/s ֬\WYjnJg1Y }=*6]ſWC ça0:T2J׬83 14u9Ico r x ٞ a}3zIEK0q T5WF ے6ZXu~V ߠ?%;VopX(0KE\,fHsC &bZ168pK_ ϛ8sѿ"^`ȈbɅU8cM) _;gv.=|K$YLgG@8ugDf +`Ukjjw@Vs},[]?钎znŌQv CsϤImCPntC!w{iHGU#hWMI˂+tT aicx6nCo. &#j&FM@@'uJiaϐaBoxS|ea.X3WT %V&nLH')Y-r*kag/B!E9:RRcFvg}ʟr B:IV;UkF.KO*{8mI7$#2C cz_pue 􇐨%NaၫksW0NU ס>,Dm΄O r - ^-dZjU/}N kv}N>&v}^3ag.2r!NPBP6Y^!n1DF*\vJ4JT%})ZC,8u 0}+cv-ZUjs?dMЁkԸk _~2s%D5\Bu{XO 0֣& Oܑߌ& ̕(Рu(@^7b|Bl[fL^]]CG]B5gilvH7]_ʽ"P" ?M͸4b0[8֯C.Ĉ]jr1 (6Nf ρm]}ԿʻpQ'YK-_xT(:IpF!:w-v"2Il?r qN8a'\9Hvq|؏u\'bжaaѨyeZNyU"P˶HpCeK9 ؎ p~?0kNk@Q;9\ ~;P 2lW*gf4*΍a=l6 "cm~me+9  fCCqLpҔXo$8GEipa)zFSs %\ _2{k( <~2Ct9"*.b8|T`xvEVXwVkD]Ol_Rj =S lVfLiQf/RQh^ކ!\YJ  nl.{ĆoE=erZۿ]lѢ3FYw1\4ei;ToC0 |fN CWtW3yx f/Y|`)ޖn!Hrg^ B -ڕ`8"f ;zיJ&~eGL]M۶9˭*b|l:cW+CCG3]>ḾFkhB0p ha7 9Iw8z&~Rx;oTI\~P$oYU-"!#&8VIie-wVaCf.nmz=%P[X}sɦb:VYJe)ݎ)i԰:%mS&2/Q>7S>pT OwY;C)!Ade\j75E|c7 ~.c 833t+%78 3nu];k#; awش _tRr\xW#CoI = *OrP1f;?{)BQ:QC>&imn:;RӡEaUu-Ȏh4nJ-/یw7&*0LxŶdC*ýۊMNܩy19MH2:̑/Bay $TaB>?i&]ͪUTuO~q4d ;}_v5@QJ+mz Ç6&ӕ/4B"!3~^|+.O*\YD>oz :bg%Y !,)t$ԯ12Y8y޹,^J5h_f lM}HeXkvNplcXg-QK:+DvJYIFx!Y6 VHޑ3{ Lc !3ŢjhmOĀ)arQfY!4rNS y$գ?rg;ouiBoĿ"(gFuTgp@>^rKtzyuV/DwvI~jn4&4#LQFe̷yrqgԦjF!Q~տn?zqR붦8]x2=_;% Jfn{hY>L/*@>Cr{Dѭz.=D9sth#1`!? d=Ӝ`~ I'dj3OX *4y٬x:c5}h LR'y&;ab^1-ɔQn1?B25y`q YQ D(]G?3l]4Y&8SŘL%7@Ӡ-wM*&B T" tQLP>NFҩ\\YYC3 ^oӀUAUl 7׏BHP1g3S\*D(`ۏ'3Bv"aezYr*7DcM󓮘jZ7ƣ=S|R!?!~`V YdC2=uD?p:,_AH7͈d7ά*$ eoXUXRv=S}Oy[.Lj4S;TsΣJ]w (#'vZ qAYU]\… 2u`jdt5-ibA~*(f<>Wq ꍄO1ag OΟogXӲQ<[u%±]}VtǮCI`nl/Pt8B_'#"b{v Č#rwJȤjKVHJ5޷RỵҶ,TA_>:Fh<1tbީ9ԟ(wokn޵@CAdzӣ#Ն)d&Wkx>4sd]`ÃSG57[3eaN$p<#,2hv&sw-[JU-Kg-14"h'e:.#[UL>)jtq3=e iX[jb(I9'or0a[ru&/eS BW#oCOnn[ 2~WO9'$M~:`]F})`ˆӭK\Q%%Ui#h`(ڟWv#;C2^za7<O}§}[z?]Ngs 62>b&jW0(UUaŃU%ۢ)Xɲ۲5ԝzU89Vswj0>%"գ`.JA\⚌䈏0F_VW)s?ÂLps|Ʉ8ia['g'd/1Q(D|b>>msK~p`|xD7?!2+IghyB4ČT (*߁E\ޝɁ-7z?<-Q-M&q vʦMw&c;7mDtQlTj| JKN:ڂ[7M\(q|Iȝv*w壱w [W&t L_ Eqa̎|;%C]_=@Ee@I9 ,:]+u%ͶU:kAdz0d&z*%ygEfKk 9SN%o皞 5HʚkP^3+/E(e0Il}(-6#+.5`f |ŞKK+f#/rdT`x.6";/"E>1Ap7^{a~GzK{ޫ^WC7T2:SS)@ q (G3[N.D"o]-~&Zݙ{x: gn_|7qqHOyኍնπ|KcZGdmۊ" Z*`)cQgLœhKc]lQ/bnY:[4}`#!sxHKw oBŐj.!݊q唧U9W;dGF΃'t(sXȅF( aqRKn6GP1QwAJU_ %Q .&4 `EܝEPҐ|Uv $E5'8XY$$l3=eoQM3"'\K"_Q~`}-lxo[w\x+;L],M@[OKU:A Y:ŧD,RľҫJ?&<8V V:Z2"X}^Rb q|Qݔ $[<ݺGsqˣ>L,71,f$=5!M+F-m`z]aB])Wq*fryt mh6g:!]Vvj׮]>MB؈R_0MQ@by]Ys }Y,H>Z4iӌD!,$vI:wI!H.F t$/tpGõIנW^|xSx{Om1;S% @٠`IpswbX 249E) 5|[+Vڅ OZ!MN@:v xʾ7CQ])L$ r;):S@!y.3{-5f(0nA&BE]nģ"2B< [쳈IaS^TeUEղ>MO2wg/^9 %"tR5a$YyJtfzhHnw8W(:b|;b V>ֹ i,2!RSmS}г #lÓ yX}Q-yt2׏ &W-&l4g0UN8y!r% "ԧeʕpK^thQ61I--8Wo34Hžv3Eɧ\2&$΃"SNNĿxMZ9h'h`RIt.7]32 ZT+dDOmC@puA.* uD.ڢ[.^f:cIl#,`p>-$!c .|MGB:qj膋G@( !a#,P2(;e2q:k4ck08VWY99N-#9KwD\WHd26 7\:uP$I98q E{2# Y7_Lv`@~%K4&'\HSL֋M"JA\ *× ~W7幽1X{/asO`2-8(3:c.Tb;-s::DI=05 ^gg4*'*VBgpi/("UTwJB¶PrWq?lTƪ>ǥjT_`1yERlj[ Xu_uY>{osP$8F|}驑)55ٜ ~\z r-;k0,d(ph$L l/wf-#m'Fr1D #9.G"&ᗞ~I,-L_hF%tT{WNJ3_cn]\ǫ@ע+ MK|) $lMQ iFhBy:cQR>^ ^s|JѬUx²[2i{D\]4 ^mk=Nާ+ڎI+fXC4JP? :#_j-Z<2A*/-. E}!,PYM3Liڈ/Z/*UGPRR3YHmҦW1I4ڶ@?TGqp̙MwP[87b+6:^4}UXsj$~ `_M]hznܗVx 7p {~7>)& 䂛x> ]8gg mm4rX#Vv XƜ;e Ej3e[*7 FAc:Ǔ,y.:uUZH-Bd2#D~ewANf-0VS$-כXpUi_C8 ۀSM.ow62ܩr/rUF cB10 " EOGͲZ3W; -RoZ$ۃwlyYVPp&D|:|Kk&W5ڦ'-m+kesI5|>OاcZUrii98w$jq_R,N 9ԿG&:phʶl7]\aԦ\e%~0fU̕G^dI"i597)P O#Gf^AW#qܫfŠ?j"KQ ˴:0 ExD.y :)p'MueHօS#- T&yo7Y|v 2 i]n;a) o`}5/+w۽zq}Wg<rx3'ވ6jnWE#j)퟾"}f!4E +8Xx(/)) 33ԚR%6{wUzakӵ~Vhv%'X pJ{Wϛ-X`1&-:fH~ csw$/VQؚg;usŠ,r"mOޥ EU`l_g|VPq#-jb1W:BW(=1|M_&枴|+8qa2Fi CPKn#ᰊ)"YTcmhٷSFo'@gYZ'|N-=PJ'U4blC'mAT #(Óij"س%16#E _Ŕ|-d}Eщm4U64+f੆k剄eyϸO: [ugT0b#qR67U*U`n>^61= ᵜ8!KB8gT45\c$$ZXC?r`O{5b VP2~݆ ' )[2<HG5>[AV!woō~3_5jN N~3"k{Z[Wfd/DV:dnԔnu/?O05II5Xtj/`AR6s,͋lvf-)I*:AVfvM;ciLKG߽27WCLt &$p*崷~K/ςjܻHmf~,Wd#tvpcc.sw5*D\-'Q[GDVOSC0X[wݬDMSXLL2#]=oV}65f՗^k3u@￧HIA+-ADSQzHؿkۄLdFt 4 uryPNbi Pui59i.0E͐d0P9V?z@";9jcᖝ}TSj%glMDwe[}COn NAQD~ڌ!<Ʈ9Uwyͣ Ĝ{]z 1R^UPK(t\UZB ?{6i@1嶌! ΄JA<\IۋwZo<dJ}Ɯ%*nkGgJ;0bі zVQ9 :0^C<}"ӳ|R^HnX]&ч?;q.WwcfZ=OvH`\<(;xXijt㑊JC` i[qI֠J_2%i_E[3)~= T㔵6b,$KCw˼\Vt ?w1Q!>n)YNp<^g}S}E5RЍ;Hڀ:y H']/e9cC2 3Q[2rex)vv? I1&K!P9db"[(RE sڱ7vq+㍿I7SΊ[HZ edr ^tJ.D!vfR6.zuDQU?bUGEĘEhj*)bbGLO#"1KOC ې8qSes.ЅRZr;w8ZM5d˰n#U޴N1ێz\C._Yñ0!Kl뎃 ,2椚c|<ʔrdn*?b= D }F=o~+)L!c<3kR(9;:k?bDŽy^dc$Lm՚J|-X}I7i]QSg9(C9t\sS R)`?rJU>ƩR41d;iD-Ibbi;-CXv$+DR5T0 y'C6q=ܷٲ6Y􆬑jvA_E͍rlrPO^\'wBTsƢ]"=ʟ1K|UV 9G"R*KhR0As _$)iv|PoW6\O7m;@5E %W>B-y ~2_Jk5 Tl5Hq1تon%cא-9q(UEIPRT`~aY,D1*1H]@b?S!W0G+G<^{dEQ aF/h >A 2{s^#yNL h?@7 ؄ sj\kPPq-Gؖ #\5WuxhcY1513eN>f˃ lK Y Pr 0qbB}_ה0ym6&꨻[T'[1yx,JqZyBVmu0AZla ѵߒZrPKԦ:ul;k&db ,xBV*|Yo-aC;J Dxš 1QG% ?jXbtcPE&(/e;t?{=y<%}60`Ohg0N)tܮ~WBSk-aQr_קz7Ko& "a= ͓JK0S} nەCcNhzGz2=1Z׷׭vb_jZ, c}YF AJ7⣤o8)I"4xV?ً ]cV:d bAtpz8ܟ(KxMh2R}!MYQt8SAQN8f\B5W?+eD3#*3F!*V(36PUym l6ʕc1:wydwrn(uUʡ)y&risաdWcW6-]'9{^T ><SLB nt6҉}–Ȓx`^0DJ$yfsU Luqn-2{n#5{ G"/d&Y'+nɏ}qvT% ku.̩ƄvjE_Jmx!h|ɲҧEKsNop͓u`DՉ-d@ OHiVD=ѫ6B'0)ww~=uvi9?_Z6o>mzW&18/k8Q.,%KYաA&Ii֩Pq+L,]}sb*!A/ؽ1VPzaDJkjn+dzp ef/Ѣā?nc5bzqH{f<ԫk YNLB;4 ͸_r'.sG?T:V9JBsi|\:[S IO,0NW>ceVFE}oTGѱ|jP=&#_>SDDy~{g1I lM>#SEFЛ$5/JN.d]ׯVDF/ ӝ2ksd܇*srTIǒY_*nוֹxțJ7@=Y &9!X3.6iR#C-H=yh|d %{yϵX@z:\c{gOQTAaq=-m9IE,l<g&5 w3M12RKâYGN䇋X :[ nyrJG:ne2BQVPȡ _⊑[[\iZ*K@lsy_Эh1HMrN]:J07 Jgȑ(f%2]_('zY(W)cқ[vH;mq!_ 7)bL9+{ Zg^ i녃B'O}B+@pnH[RF,A= )`B25GFbaS5ǢLoR["*б&u @u\. 6$qDIJ@rxA/нrxМ5ޙDe틵wb $s~FZbNeMVb"xH{Yk\G4ˠˏX]_ohy7&2>jI"]x1h_dYI W1=D9@3vt˼z 0  LW ;q\_Dli,8OsPk,ةGM6]PV +g'w5pF,@8COė7K=M ՚Fk<}v>%?w폚 ٤$fqd 24mQ/*غn[X^0".C8Ye5`D% Lș3Yb_Ҿ(I,vd=Kh׹Ar%͒G[N+FRwѸnk =ѯVqT:N啰A滹5Y`;^HuKM <ɖP+m*f+/Z5U"bx0(<"-}Mx7|ڔu /+qrs)\_Rn;hU^$q LP8kH[b`%6)&6;fù[>dץ]etNuTC10 坃JB,Ml4kcъT5lɻӁoի[Lk3kMrL@8pR7q ڑ@kw>fbҬ<!"f㥦;+P4]l - +V$e5s.cIcmX/F2gJuղTg24frh I|0y8ƍ+?-`I;&4ItM43g9T71|D2|%i|HJ1=|UY \h5ʐMP7wiơ 8] oj}qOr1q'WZ\01 ?7lo8A7Ѝm5r4H8ζJ|T;&<1^D5 {TuDT)Ux]~r-CBw@ wpK[?+Ldq\hOt$;5r4N/pܤ}8o)!d郅}nN~{J<.l}(PkrqV}OR!iTգ幻鄉UP;4'9T]۷ȳUdl@~-lڶRω"\~? pS55d/Q?=Yyf[! 3_@AouUjQÊ*Xpѽ俇W%Rv6\R^X7M0eL7SCCzȃ8ŕۥ LbyBA$b9@YUZUs-Ke*;E[7qhPI" Ľ`Bo%C^Jd,6z^ȓ. 냂0/*+ӎeIiر{Ŏhkp<1ڮꛉC,[e9h ;/$hx}9vУc0dޜOy+1t }DVgv NlxRo<ǁwQŪ <8 Q)OhFSH&,_1[k53&>>(CcM]*\퀆0XMUNڝM^-Ÿwǀτ#Y1|7i* aQ ,-:=#Kn#d]6ؽN.*16Z ȋTQcsl:iۆyz=zSv<g|" ;Jg2WeC"'cPuWƆuGQ{*L_%mֵu:!*dt:3A[Ơ3c@̨9gTqdvDǫ"Bg7߰yU?XbqU[Ҍ!ț =!m+f"B;%3|o&AcXF[aC9M}$AmrzYD{O'Y`55ޠtG!S&u|8bD>hj{`m Mmj gHi5Sgc³29Pڕ% ڞHU~%ǞbJAl@}Oz@~ jL ^| HA,_F#Q'&Şת0-  Hh?B( *qx Vz 2 pZb_J&ljFt+:T7e:Ȝ*UJ?Yl8ё !i\YH5(Iec̰c5c:ȣB4 7ip6x;T}ONi{)b\[=~my<_y sQ_tP+xT9lPy+(njPLBw!mB2ݥÆTiD b}6/g/K/0d3lN5"Y }i FS0A}d4u$+O]S }2$^G5R( ~"12;! >t[*P]}e+b J ̉BW \d,s:UyoH]MXo6'Unٜ ' S`^&}11|?}q!K{T'pa&" 4ߕal[AlO|&cD/xvOǻ̔l!v2hf]ɹF6c`iv$iAC [q*eȵ6oD Xʅ~}-*wr4 7%N$Hr:I#' ͲD6?`Ҳa13-kԇj{}25dr oujd'32`Q1a mBAkK:/< PB9IكWRY_5_9mUgp;]ڊ@YZ첡P(b $$|5Gd!ak W;@)ŤRteX&>rڨ˩إGH>en5Җ#^"(!ˣk[ͯjKT4=)JZKxw>9vY F'Zfrav^<D/Tȉ82}o-.!~ˇ>ו>~[;wq7t.EŞ,ߌ2ȥ);OҊRg;rM*-6S Na2"{&u/C:.A\`fRx}F6ڙsgEC:Tj6`#p$ X뵰pVx:d3NN+&FGk RQuXw$9Kݖw]Ϳ4ӓ6!T yLLLvG酻mnڈ'm\9tB{mRh׿ӹs7xT$๼P%YHN5"iY,9[졢%w/qsX0cGA!~6$KSx# 3 DI29чb_@x:rȎ,DZ |lk7hVL/7LrPXw9ġEg;85{&ӆBÜ'}/uE2 dM˜j4NdXHCz:OҍZV(Q˛tGg|鏍#2Y):%R^X&4b)0+_H.>69#pU]dÞ>PA~Rdqyk84͏˾_Ka!?f/[6 xVNs)=[ IYnq6Gh=CϯF= 3|͙\yJvN^Y4&óӈ:tƧ*6QJ,є\ D8=xnr^d5795`K:(1lNBSERf:nu֊Rt1&#fm.ls2?T{˴0l6c}-5j'"n R][͜jⶉ!缍rڪ0xji,e,DL~R` 1"K&!CGwyOYWK`9fʰS'DƒߺxiCݦ4GsB0z%`LC̍ưhzFcIzJ-J2 Ev" ; Na2c[ECbIw~s/5i`A>/ABe+v?c zuSF%[UI ia4/1}qƣij!:Wҿ0Vݪ9($]%SK@r[.@ g$ xLQ O .cZ8\ߛk-mY8z 8iT,Jsա Q fhf$R=s:3`ᄙ¯QSHxytsCw'ы ̀!Akc] :eط!j'A/6j`-jlDNJWC68G3SkRFd38o:JU^,x}u,r%KָMʸKu@3³oDu T[:_ +O<*.ʿK'±zuh"<+.&~,sX䥜{KNπIO˲v~Uΐ6~vbjx]I|VC) vU@EI÷-'p,ۢbܼ ڞ 4,f큨wDˀS[X^XF0 Azun(Q0ĥ%" NW9N ”{c9ά{qt3i)Ѭct /4zV~k|+՜/ZA+cI(L.V~>\EMTxV0ECqPTe( Uɳp J`MřNJ+6 >xkusȻ! ]n[όga(W 󻽞71]òWBo{*wdKG .q5FmPi=>s3V8 1d!!-Q_ 7?av^&"yKl@ ~&x]{?ʄfU ](%A[/\!Dp칱IS5Ҋÿ3 ⮺\=f2X9+5o)E:Cd(g*G3 hxhnĈQ}-"6 ʻ{/[uubE3Oo/~Lp| \vz܁]\tK'25}{9t>x5MXyzl7U{B:2`:RST+Cd\'2Tllw1d:P2 Y;A%2f>& b *3RFmaq:XuyP-au3"rA8U"1R ~['阷a.bf%!^%)";0;|;9yˠ-yPt옂4Ae󜸎OeYܞ۱Hv7WGלU=Ց*㼾Ĥ.i gxD{XzK7!iy7P`#y"l H<~0bz T0԰E!w;_s_\&.gOu#vϳ/M UjE9 K@}Μ*6PX3.-3y hUt8dTb '1|̘+M']QsڒazI*dG@) +RN`bOQJ'.ze 3:?\p CFkj۷Pu+YbJʁwXSpwKYE@+2vL8)*煡︭;"å" d! dN78??\>*\ ǚIV9ܥ6.mIh %!n!5O0` EQsWVe;f5|Htim xc p\&Q_pۃԟjfxQ/J+b5Ehn&29F~Yl#kZ))lDyK5/:$F3"oY[TdMzj]<35~ L6E:uOwvD S5g貋Ξ6R!e9 hl]!O9E pK$Pn@ZfIGgUVfP`D˗K2'*;xvzQCuf͊ U iohZ$ OL 1=_`}0'Ŋ]@-|Z5."D苁qg}.vxj/Qhw=x ȃ\˓ʡQu o.tGĘzn~誱{$Z*_:E^'ǭ"2#3' =Q$xz_sΘ5I hﴲϭS} Q{h`c.8 ~#rB3}O&V{vqAC%~cNuNϐort-?tt]pHwjܩ2PN.\n=;huRvĬ8t/dpՎGڥ5bI0sbt-?SZNcEݡ_qv&U%LnPbt$)p?>W ]+4|:FЌ ;?ۼTEib~P^ܝDX}ut*"}.'012]A$O-\<4_lb$N>?!} DԐNR@pDe4TڎR+[Dv*#6ICsu8dQP99;:w޹ BjP&`:ю L~ٰh_Q%s;ܱr3ԯTD_B {|,:N *x=[=(l,JZAJP|螢F.޶Ճie Z*b#'j>=Qa`pU}ɾnF*Xƒ-&yf;L53BӿT=哟lhgb~#l _7qd3Y+Cݴe_n>Q3Xx7 prrC0 i83.cv-x>,cG8ϚU:(6G9+ Nt9d Q뭍)2z<$f~@w&UaX*"9TV]{u[6aX;_Gz;+AKb%b)hLd{IVo0-Ι]s#` דXuF[1x*9c4ګ> Yy66 $,>F@.ÏtVxIqUBUNB5 y %{FPmNyW3 eM.m&gOD@[JHޱcNJƛN50@,jV-%<\_S 'οwiGaGS}abW{W@Ayٗvj*\|_Ƹ1ə꜓߷ rb 7:ؾK; kxu*dE@S4""9y3-vtu%]eS[_quC 3{iq(074.sHM\( }`ET2`SgGٝ_`^*wjS7D{YGj>dy0(E3!0>>#|U45Oп^'/JV hdԙ`2xl|u{^<"@$R2j-:n7̝:$;xŖԤate fR:k]%*{b4J]OM rp}ق#bپvHAx\|]iGWN-B}!HuCqTw5an0&\pn. g8r'_ߣt9t|s<7~4i*bOR-ԉ&!k`7 VA;R+N6pͰN|d07:"i*2=p [ `DiY{RM)+rA!;D&f s5h-1Ky\Bq*GP>{(P"Rt麎X!bx<~,Nm^՟]F%}wv9?gT%I}gQUWEѡ ]ˀwbêzn5Xљ&o+ȐL^ETqS;)7r^Yz0_F4(0Y2bg'b Qp է<+U0֣4ӇpҼL=Л:97@=k4K q YE#ȵ8ޑH.m-  {B6+CF8cp h$hNYUQZ!.DO~9r :#B#. Ĵ }UyW'+Nʰ%PD>oа$">W!|QpCb F#NiZqy.R5_뻒n*j5:tM,ޥ;\nk]I4 PeIdɤ DB a*&?yb! ,i/hȿ@w VR R)I^o ;v_bylP֚۲5ZHqR( >|X*}ӒVKE"($K?zRO\D@0 _Z}YN5n6*‚x9+)!E6$p5RS̭ɂ\?U.|ޡ.!9w0L| 8T(Az& u7 ̖.QHT]6 wPcnt:]kmŗ fXjJyATh U}N4-*\TmE2ӋN27;@ÊxlðN/u"+K yE I4佫a?827 q_>INc;>&^~ ]Q&wrmb> `+Da u=/Mw[B&jМz@5(({rܻ}+z%9߂v()@Ec#K!'V,%"$i 8 eK#ڞ'FT6v,$IQ/w#_x۟EBo r/ӏph|E*FI .{YT9匓 8?Z[daa\4KuVw-u:ivԗF!HVA;fbtr MgJ82csӃI|Xe.|(K$ i4-}؛Q}sXȺ*Q:#RQADB{6썻#MŃ\rdd?K$'v;Rλ_ 7͢߇WﮖE()+aXߚY{h҄@O=Cۍ<쮥Hk]Pr[%$nrhKO}is)iRZf=xkLxiPzk̗nkheeP,6Z1Pd |?F^ބ#/~ dV{l%)no:^=Y*0J~Ty#["2췅I5df|lb$Pj)a9;;h*KdYRNŃ^[ eŚ=ܦ=kt @7 f EG\pp%>bpqUU[#yvqi2 Zl5^\BK Gl@8_OaUS|^%XaG.VtSo&b5 h]X$c*:\vd/0_W/$ q&nyLfI; z-3=)c|玖}[BF}zLD]p9hsm3_SC­a~ :5;АLd<nϻۂvA[!Ih}:Cc W}RU϶~V&";rZOH$?T^E:ӎ㌖S-/ ٕczLυ ;u? u:zNƗW 6 MVc+D {2' Y6 4Z1$ mZZK) ~ڲgPR)2 tC<=)ǟ6Kxk6IOP7 Hg_^ U6^EdV]gs4= z`3U7m ӽkg FE|/i%bJVtlB1Id;}YC^&n GV׊uoC\|IV&Ұ` y,Yj4'B(b)&,}>hsZxRo6ɧBdba ϨP{7ijKKk\]g]>?+?NД\.nHE8uY9bm]]D7{!IYSlŚ΅:Ľso,U]=?bݛ)-Szp<n%rj/,xD e3e6T38Y{ڂ 8Z[RhC|'C|ʔrMQ_HloN&1-zEFj8oo*M849pv=_lni@^#S̿pD&U1Pd׽&_ E~jnf #p5pn?LwҢIjؽc weuO?$Ʉ6B]]oN8N) Z&~yd.eH>{0Y3CKvnp 92RwLI%=&'ȿUjCC ^qiP|lIz3ǖW!ȇ@ҥ榦Xf\dL#O0O'^uT[W W.(.@*5M@k4}ͱ!2;PAb|ȕ+go!Ǟ c["# 3ȘeNDZ p,ٳӵ _ՄC.+{Q%d* /?C7rX0Gynmz bb?R#e;\Hpg'rc B{#gd**# -S$o엘MrU.&[qUe ']eiu0X#*@axCѺPZj_&sDE5 cx狗cE`?#wu8X}&!ft94UULwjqQf=#ݛ@:yѣ׺CHe5Sxk/XfDpO܅ZCfB$B;ɾ%㣹.,$sq- sylVz85UqjK*ѣW4|tʎ|rZyZ@3)ha_=g*y;F'ZA. 0Z<uJ 3p2I<+}jZ3D#2g:ݷkZ=wsXz[`BvF "ǽ_F+fUi N`m7j KA%Q&̫>*-Opñ۸@Hf5"+ >qhB˹&w#Ԡ/ܕ.hCP ZED TWM"" &):'N%tBx;0GRã\~71[@wA)$~lt{UV* 4 ?eT2E;" 9́%uj6=~%J7Eܒ&yVKKT FU b;V*Ե7^Zdj WfS(pt8\ߪRZ/l7м߱3/AԝM bW{Jr-:"c-Ƿ&?P0C"YY.ᨛd`2 a[Mg5R)k],o圠/bT3c9Y% 67U΃5&/j]̝VģͨcGZqmc[Ԣ +'DX>a*8oI,w $sBς3MZ8"z9Ju` <.WϩQ/4um>.5%6yq j#ChΠ֤MɋV9b)oG_6Eڃ`<$ݳGQȔwݼTU,eq4!ZeJHI'TN\ţ}Ss\ξW<*hErfЎJNRI¶Egyi@U c҆1W=F\_ƪe _+ 91[~-q2l8&.2z;Ya.% [$X/e1__ʹD9w.BhSӲ`dʊQf ۭ}i {!~>` $2<2Ʉ!3+ F5q8 UCܛBHa|ߺChVG%@csRqfrTl~`SW(?@;kʋXb oT, ăt)Ym@c1ENd!(A,T佯tݶ )T}BSl7p ,U);gUe5˟k7MS/]Ɂsʎ(##aZYnJWVUf0 WLQ`'aw?ܯ.2Lyjnͳgp{ߥH3#Mՙ%5`9͞4}DMgK'räytȠa2M.Nn83t'yX;hZzTĿ\M;X$yaqY L37.?[/)`ai/ /!=5(=z>̅4VXA ܰ:S#tbIV!@ ~i-Ԙh$XcXNfGA)(Ƞ(2c~=v!̴Nj' ־P+QoS2_!8 l {骡1HGƆ3RJ|΍ٜ @ٮ[I( bw0W9FMd S} .ni*<| @qr`-JI/t_^ô`ܕqqԽu6UYsk_QaTjf lhp'cǸ-my@ozi%uS~Z˥-磩Ne~?4!#[b>]U%XVpx=2c*|)" e`J7G^6.^MJcq9aJMOX e.7|[0IX)M's[d065Jz.?6xT:٠f)wWPI%ңG{xwФ϶2+^|n-sD>SPrnwVQ\@B#q2Bږ90͌'rC!X +y4(SYit7=;7đq DH'jN\! =q[a\bqnJ?Rȟx\9yg{*MsѢ>s3@& µ8@#(L-1Ii2P-)GC u0t UPo2#,`Q(]Bؽ?MpN i$a(Q<. w($B'QRS Fy}r.V]yϨo0q~s6w`Gn(3aw_!#׭`q,gpţ N+R;s۶Gbd}f aAF5QVQ9#ixD +R`9&$ ՄLSWi?JLvnggNS ޷ȄylmF:$FI= )St>`Gd \n<<$DÏ3P. PN,ZbXۆC*I89:AFw^XVS1+U&sGS(6C O7IЬo1aٿ[mGD*D*ɳH U o7L-A&ԛ4Ӝm6 ߉efKO!xHs]v"}HǖķE>W,[<]OՐrH5]$C 4J.!D.]b"-S)2TY.ie'^S0EQzSEx M Йt3toOM DǞ㷢MHoŢ*PTg0e8tP%͏ ~*(Ј혷52?c6;ItBGB ̲Pո!@+94 mexȇNekwa+|$) z({wr5{IujT=ElJt`Bf5z\Nt&Fk;.sz t};̸oϝx$Nt++m!lWF.1q7xByn);@漖HΓثニ:icͥ6NFO܋jA˳.?Oۜ胏*u&26tޚ CMui;2aX88Y=L`ͭLU,_ /~xٞa΀0u|6URwLn_#O-tM?I%Ŭ'XegD량IС~O!LsL/然IV{X#hΟ%9?/L= wx;e c~x mqtfw@˺. Z`o{G]kKƱy!`1e[ʔbWϿaʗS (~?>Ǝۉ' 0Zj*wnug)JVq D'"^,2冄k:7oODT:)~5d^fV`Sġ2?~+p{˫_$6i5ߝ΢S!Dc*Ϸ&h_c+OtURP[$u4x&|eyIj]zC~@mr2_%Q4OqLt PMz}63{CS%$!Ef6G1JO Pu ?Baiܟtលuq~Ϧp80SEKܟYxl֞-]b者%c/;z%VIu%ةB4d)g@1T\1.qB7 g>B2v Yqʚ7c$ȆG37Kd$+Dc)3R@u/UHX5S_ UR- JS;}HDPΕO_ijgwkQYdL'9sZQRXI ԋ6جr gC7#aG]/*qܜ%2R@.\4e.x|b#c5J9ļ1T?s*zxmFT/-N 4_YP nҕC_ mR=X- ֈ˛lNEi7Zd:[ڛÚ3߃q.Cz>uVTNwoTx4)wTȳ+e0PKChqi(ύH ~{>ˌݲnp8CW5ֆHS.;~sQkijz=Ӳy '8rS-%~U~zL0'3 2JY3YRgq"A^ ( g"92DM5gU8y?ƏKkA}/'Y^ dhJ+t{=rjDBc[)6w\I*Zb0}ܸ.spȾySO0Z.Rjdh`lX~3R#ƾv+MLC&6D;ܓa~,|}S'ڧ( dtdHm2"߸@5K{e;8uk9' ߴN ǝ;a-u T?1w;$MϦW(>q!8=\~tYlD_LN>kj;Ěŕ c囉Lˍ=}Ф4qZ7|&#>̪WJ&*p%-HfMk{xD`rYsP2Kzg:MSa=4)>VQ{K7=v7?EE qjWa"@G1 AK;`#'jن,5JC_ߍ#_Fo0MFi}\X<3 '1PcrJ WeI7XnؽZgӟKB>j|(yגdaFmboEub_)Wc EU> +/uP!*sUBӮ2C\g;T]ޚotjI͕<\?$-3 [qB8VAůi5¬6%MNֺoz`@`2v }^sr54i<1(0ʴ /yNo=/H@$P!JFܭW?67CRV|@_6>Qάc_>/nxb|;qeț॔R/!`(14zh985*(!'HӞ=NXJMD1~V[Ma-{n=_g؄d1"䌩 n eY\fH&Bprlbu9 ?׵.:yH]Zm(i֯8":׆2G& ElɄHߜe_%]-Ѱ)mڤTkC>>0r+Ilb Ѣ8:ۼQg8St D 4~Jr㍹O9xW**g;lo "^ft!l FBA ͦ8ؔ}؆8MwF8o;G2\UAW֫x~AMյx}ۣ٧/, g͋dϩ7KjXu6wSs4rCx2ךո ׫>mQ[N9,=@٬oS]k@HA|0XPx܄b%(lp? z0Lr~(Az: }>҄bRsn\AXo)e 頁sO8Eq̼g:9&s:f3@gQ埕${rm }Ck {OXX{ >o:w?,lrƺ *?eZNGd[ ɔ`E{.0ZP2_#H0XKS=H똜eY,T_K%#JQ u/2Q-L:@_ ugxɤŅ%1ΞkV+Yx 4uS#ov"\e1gv;s{rWGܩ 6gծ|hSrO^ٺXu Zn)`lh UٓL-V+՟Kh3&=4csw T&|D9cD*{'OZ-Y(1U40a}aH5 urƟwcI)]ɦޕx $udNrbk_C?‚fY)$εP&=?{9XM `ty}&oP=W ]]dckkvrµsQ۪]Ki҄OoJ^.>lJ',Ly6>IM҆>N^DUz c4e ܲ+kOCZ)0*[K͊4sCPt@$6B<#͗MCU~(Zi-3"5eܳJǼ`Ϊz_Tܯ|Z1oZ>#2 VmO_Y󿤢cvZ\țR{cW]|z; a2"e"9i`?*eS"ƉXFӰ{-׾ =cＯJC{Ï`OxFc.l~Bp= :! Mg,Jr9z,`!FUu 'dyOח%Wy%|R;1UV+zO9,k48؝]{:qXfL'EzRD`ݳD1]®*(V] #bֺxw}@|e@~',#o^ 譔H(k_U\;VzO 'RCfsRb ΞJ0 0-]5d%k"=A%_4B ks>9bۋK|sA h)`mo!!1hvDIt_b%1j.mQ=J5N&X&끂j2T„?p]nFjxTk5aR OwKvK*>"#rP)irA1>o'4mku48]VYjOQZԱ͹LCP b;|gk43dMgR4Êrkۜy)帘aKHAjE&&ov}IFpuj*QKe)År`9KZ#K L A<=Y0@LZ `FNZ19ۯzX MH5=SlKHVE\M /tu^o4k"cs ܀jzv.p ڂ9b sD/L_ z|en t.8zfp̎:{m8s={P+ĻE9J<fi֮dօLŔm,ҮЅ"Bv×|bݿ\Q`w,zY8BA> $X:/?艔9Ym'-3s ~-~,4h:c &=̡{PQk:Giiob JR?~#3>nS[Ta߇YTc4ɀEeRudHf]޶t=QL;AbLIhuēPg,Wk|G>|orS" RGʊtBkSXv+ 8h' ب1)KKSI$wV&9~: =FC 7 "Em2H gSU$o]҇"fO+cnH+Sϯe-V˰k*\(+֤ʗ͒iRjA0eNgh# 8nQ߫02_E>[} AF%yCV\ +QBr}Ƞ6R%w*w;Ô[>gp'[Au[ia`//]Wz&=dPOg O># Yp&ri>ҧO%gZ@ 1h$u^w@Jpy M\2w8mMscioIϘ/AL<I"dQi5 FcUG"v H"sPVа>28&vNP$V;E^d^9jB`Ũ6T$Kx9 j%X_ -8b\͉>\_cLO e|e=>}`؝T 9=P51YYYGhr+^/~CL6?4$:`*}:aQ*4FyT ^0( qўZ=]O;@9xFf Xd\wз6W\>ىj&)mALg8=s<ZmifS`#>A.[T@s|锳WDJH-&O?̟~p0;AL+cGX'%y< qF4$}*v_KzI[@3KqaKˢُi/(J;fe=ps$.p[/5PmaS27&PvȁI~8^;<6:T +6p"*yaju ᭭" $^ .pO@[,Y%Ծ ]lzȡwh~yBX!,23,T^عzs)Nq g\&ݝ_mf )t֎7unPa>O[({1Lȴ<@LbJ \)l<|~InfGܬ{*6܊p+\,`/#мٸfJ2k[Z=4N,TCU^+$%ND IRz `&sGS,Sٱ?fJ@% g];j=>yAiܽs2f'h D WJ'x{=$P\=!70(,3uădE;zQ.LМOVP _3 zZsJ|̷Yp|tZ@,) -D]x-j/.aEՂ5\\[]̌$m^/^W;\1vdJQ#] xU\( 2A]s6?$dBrGw#@֠%7X>I&I:盌5ܶsxCdPو\H6$y2tʅ<̯ļEm`ApZWp-:yHJk )Ql~,ÌEIp2ԟ% % 糴Lgp:e(c:y`XKW jJ|r$&WX(b~o襟Gt(B߅&]7d :D3Vg*I@H놪vDJ}7o/aI]^Ho6mn p\G`Naض`0yg˳t9`[C[N61&K~Hsj"UѺ q:d.=y";p rĕ-=hSM,`$9ta]O>]%?83̨tF?)""rr޽1JO'BK|20wRPwԚ4M7\Ee[sxQ1#W&Jj**t$fۨP"$I^ƘM M]TY JߟeJȋxZG:=jtXmK!s@eppE H71c-SF@8IQL^&h1 Vvl3Z^Ixͨp@x_ }*lo:kT|06R Z1ٳ7H/ǹTc{e%~t=JI`̶u&>7HJ2Wdg/0ٝ g()ۀ{nOy@jLk᪳Y2Q! ]Ve@~'C?vzBZkfŗ,'~K |Z΁jѓxZ,x ̷1pB#nKfGLc2)ٰ 'u mk8;/ f >0: ߺZGGLOOF4EIB:%̀qlYV~p l~_\ Uk1cY˘ p]XrcIv>M>*/ѿ)5\Y3{ny:CPGW&a$ 6!(-(qLX KI6fcۏnp7|NOWr &GSa*;hP\m/FHgD@X"?(2iA513w tB0?6N~cTC/222QI0"\?xy@Yf, mАkAk\Ucݍo#b(k鞃m5"~h tʃ]}|RAw78_Z}XM ȥE$"ިFdx(U 0&hfU8 [t`LY9ka%ڞZj;gWKȣnin4'u\8Ҝju!));y8tuT8uvv%Y9ψKAZPzH =O&*wGW_O{ўdu@J >ͶĄm[XscP$#oU|M(cF+rƅ9®u hWEʬL3,fI!,ܧ6( ` 6BwztSPW*lEʈp=S0RZȕtF ~ L3hN&:ܘ%0NYMtW6eYڄj܅xZpT]r| KvNv*:,kXZ'|a~ɉ'V&_?yAƂIB@ i Z;:SENan)f#$W:tgVix80D0DB`-9S}ǿ\RB1ݔB1%ǔsAY@ޅARP\rH'δM:y9{?WPދك?278$j_Va*|-)+}LFDv[ tm: ѕ@cHI$F2P(CKt~ܢ>n-<೐=)}Z?M4Hf2Aڿ.WLjxl\ھ‘T 5KrFM{^yǀT4S~ЭWg3ЪoUS$yKߺv5{a6 x4EZ2 8 oF眸7%i{\NϕD e2}"vAWAGb @t{NswK':0cMnO`&5Hi/t͎R!aW)z^lQ,70*:<=w o]Sq).S$+#|Q @ hX.]v!7h[RH$"#"=g#&`t "RJ? j,ƀK\8*4L L92SуSjmge2v|Զk ]l{0p٘im|ŀaJѷM-N@q.)Փm ü(_P$~0 qtH^a3h~( ;d%#VK-vQ ~#32\fQT S,f3`uj2~p2yNaIKH/hTQZS.x ]Rkgzfϰ=3eyI1ƽSD9>nrQXܺţ t%\MCm`Zlp7 -SS-YmӃomAq,͎a>v;3a/1`5w1l"#I 8Qۏ%L]r}GF@Z}xInOk=%s6_9_լUԙ~gٴKfٮLF"Aԋ.06yQ$FsRJK)>wA>%3E twJ9S5`VB`q}!v!ěJ^{RINά&BV]yd%0nf9'Ǚ @ ;϶wĺE5v"|Er;+ #NM;<+V"sq"Yܛ >>$KYx >'V2osx*W]`P=P*s=DYqo#Ȓ'C 5LF*# |YI:_.S)sI+VQ$^t OIs&e d-ԝ?HH1vsR leff}?>K̈́EH,.[ŭfq]_UomR.c8;NUDbG4[eqzĝY+k-fFe`"%WpZ`~.XA}!bHOnqvGv?*IaR]~fS ?Y4}^ 0_7[VBcMNBƜL:wR"'I-dPy}x 5꽼{Z;˭@u5wHԿy@؝cG/Oa.r9m; .k/ϮY˵Iu|}F> 漫uc,>{thT"s%ZZFg>07dܽYiߺ  lf+֦hkGdi2*;o¸xxdIXd{8h2eˣ'Z#V>:sm~qSžꘌ<4LcYOf}B[y5Bc{x穊OmG!BTS|Ub+ҭUӯbXї>Oh),b'n$:7R'"B4%ŇT6>y2St<:o*9xdЊCL*Uݥ62a:GfD)d/XF̗$S_.&BkԠݥ0uUXHŨ»r &ڲwmf7WŔLOޘ%&EZ:5Ejz$WR.GAIFklGuP^|v0{Z]l7'И"Bho_Vf.3B"7x9Z1yC}8:7̏M4c/Bd:G@*gV-ALl, (mPg{e N gmˑ QbbFw(x5j~(atK|8C}2SӺ2<{3vo@\仆-*}8F7{gO"z3eGLNL+~-'o YEuE2x에H"^.[ʞ3 bQy*sվd-Cc嗌_em_ wQ! _+Lj]-׉8" N]:RWc8 sa1nk̬qgȑR?5|DFW_/w:cIrj -ܨ1lh ,=:kڏV%i C6Nw П?C#5ӹq`| u%w1z!(J6#Vns&n=yIk)Am5lc1yH>pn()ǂ,52>Pn%&Otj|zۅL-N@\eoӽV|~vZr1KH@gJåщeOC~(,==.@zuӑ]&Qb*PNb{O:lw9zwه,QCY!܏?.-ٞb0>ep>n}c'ls{=`8+Dj.ntE#P|Z{|j SIHaںBmOMt~ x+#H.KGdtd xhKaD7Bks}3Ϛn0]=˂"f_]Z{NfW LM,eR^{dўGnH"V4{1>ݗkȻG nØd67gGa KFf4 ~ $=#-DU֏ o Tn`/\F5}1b8`JQ({b  CEbH,T[j,16q#'^C}_|Ir~@^BplH8J}y1X1%H uY+Zc ۠cS囍ǑdE8\;SE7qD3scYY*0j4?@Uz-'dLІZ maW୴THSR2xʲ$esl3st5VZÄf+5{,Gz;}P 1\Y0*cNT˛gg\wDS35zÊ}ЂhPd6>oR, 3,Z(BAMaIE{fohw}tQyts~%R_(L5 <({ +)!1)E5BAϠMUd<4`lR5niQdž&,`.!{_1]#ިihT.gI#9xnkFk?F*Fk*Z)Q@@vJn숱㦌n k#_I$= sg;x}yFgwE .cHxgY51N -j vwLN!fbAV5fNbJx.?D61Ywnw)-#b7֜Atcj`KӀaՠT[[jvdVo}O)wB0tsMxh]rok֚``i # ֍^$Up&[ F{,F8k$o-vʰލOTRLwJ4cZ{i~f`:%S!P5^Qz'QBtFYy0y7?ܓd}s `3KW{2V\W\ۯn]&PT$Ea!Q"qG*&t);KP'ciqߎN8QכiUV{\ވBaEnŀ}^,0ǃ\vD Y#+ i4jٴ=vBB #Fzb_ucZfl!_R`=BCG{/l8\d(SÕ#i3*UwEGE/g_sv[uڼ:Yk7܃gHK\a$@?,BF|(0!|X QAJz"?}L/6A}F.cݯ G{*n_oUp.tp:=ʹdSZg%81,Mp\_` ʤa+p?tO նG8~vW,Yw/Ÿj>/룑& eSxd呋FM!]1c{|c !-=߯#?VVJ*1A>$5ۡ\'ylz)2N èZGW>˰<9o0m q+)hb*EFepY?FV{* {\$nfb I /46V=3j1a}L|Rl=J?u-:-/kMks˯%Kڴ1 EF-diυa6ߚ #%*MQ3ΫZ *W=h[q+) *w6LN4)q~0MJ%msL){PߩMUj2?AF*ɳ+HOOv6B6s6M3Qc|}v\L=k }ێ12G){+v ~:-":ֱ^W;%k]4ddx|u402Ҭ@r Vi&OM:H!¡{ɑ3^*9L1>{ jþކ"L%WHL ems;a^V)7ݷ\9|{B[a> r4sMC|sYpX~8V0Uaߓw N%OiϺ?#VDQht仿=ViحQ\}y 3/$YQ뿮Kb?@$Qha9Aؠ/XFtKL̀NN9aDPf7[1 xTad] vi*\vH%,:޵Lu |$8aČpDP6L{:Y/P?Jld2))>T[jSME}g٪նI5#@oIyzL h6YFR4aĤAş۟A"lPrW+%'q3#dh zbN"**օɗR GE,ưczc)9Jz%Y#)Nkgҥs"ٯCՒ#na*baݱW)ݴ6tgo<`wu]f>EllRiDHAF|,~ʚe>d@[7 74{~VWCY1G3wq.2c~9Uv{aUkN@Y`>x4M1h2MS\QDl5F輹+] ᧥OtVEXH8|/6MVV"k(AU=. #1 Jle= 1O*J{`j#==Db_qD0"@ 4ef\#اTC^qj%-X:&&!r)Qf ;܏.ܛ5dD.QFV_Fq0.NF"HQy>4rV1f׶ Y)irĩcszck$9\M,ʱ#5G9,3 h [fX7MYs~-!؂Uڂ"'ʈ}. 7'y%nI:!5(]+'@$}j:M٧pKju o"T!G{/~\/nye S-wiE >GYkN `l鞨5}Fkؖu{Jӊ,"WRho?k h4g=)ZT}pZ7dMGsni2FѮ::A %n=hhk0DK|MxJk yu4{5[/~A.f&7JwP Q^[yc"J뉗#'_掙y2[ \3;F>Gu'("l鵿Mvb짶vJcG>{E[ЈaQPNӝIa"+BYiT53Իdz;a؟S^`}P&55(b`fN{zF_^ ~׈x.hag5sjzmvIZck YZ