setroubleshoot-3.3.26-3.el8 >  A b&*U]5^E18eZj:>t 2v{dLǗ#ǚŦQ'-2ӑ!W;kߧ=yKhv3;B\RK _zk>FU[xOEvۃT+@ߚVlO˕cxW&d)P="I QbԃZ ED#Ƕ`6]_ZS` HM+?TYZui@_NS:[eEy0pHkM&,zcff@؈.CjPfqSG2 zۦmK.OسzxQ\KUpjgFu {jjp/׆jB`$'J4!WMH&!;| RLPp='b͟vSIR--{;lt6gc@zٔ-dGMJ !X(%$uuuXrdf9052513f962bfc3bf94610e3b3692afa8fa86974bd04c32525c384b179468b507f24139114042db830cd85ed7663145c88e677<b&*U]Yk-QFb ړM3#yƵ.aN^TȚ4aLF8&_|VGE_2&73K&ߌ830+5hQr=dBmKfܭ,_.ʔ*Nk 7pr c,*4爥gȩ⬠XJ{ӇEj(#D"Y ]+fi^Ktw6 Bm=1$_.6w/Ȟ*;/oXNq0|0p<*?*d  B  CIT     T     4       P t  E(8I9I:KqIG H I X(YD\p ] ^"b$d%e%f%l%t& u& v'w)< x) y*< *h*l*r*Csetroubleshoot3.3.263.el8Helps troubleshoot SELinux problemssetroubleshoot GUI. Application that allows you to view setroubleshoot-server messages. Provides tools to help diagnose SELinux problems. When AVC messages are generated an alert can be generated that will give information about the problem and help track its resolution. Alerts can be configured to user preference. The same tools can be run on existing log files.b#aarch64-04.mbox.centos.orgkPCentOSCentOSGPLv2+CentOS Buildsys Unspecifiedhttps://gitlab.com/setroubleshoot/frameworklinuxaarch64rraa I`+P'& T SXCdlU&o;A큤A큤b#b#b#b#b#b#b#b#`>hb#b#b#b#b#b#b#b#b#b#b#b#b#b#b#b#b#b#b#b#b#b#b#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_icon.pngrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootsetroubleshoot-3.3.26-3.el8.src.rpmapplication()application(setroubleshoot.desktop)config(setroubleshoot)metainfo()metainfo(setroubleshoot.appdata.xml)setroubleshootsetroubleshoot(aarch-64)@ @     /usr/libexec/platform-pythonconfig(setroubleshoot)dbusdbusdesktop-file-utilsdesktop-file-utilsgtk3libnotifylibreport-gtkpython(abi)python3-gobjectpython3-libreportpython3-pydbusrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PartialHardlinkSets)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)setroubleshoot-serverxdg-utils3.3.26-3.el82.2.1-23.63.0.4-14.6.0-14.0.4-14.0-15.2-13.3.26-3.el84.14.3bbOaA@aQ@`>__3^@^^ @]@]V]/ \ڭ\ @\\w[[O+[;e@ZZ Z}@ZaZaZOhZ@ZZ YY@YyY?XXWWW@W!Wi,@WPWPWJUJ@JJ@J@JJJkJ@ĴJJęJ@JJ_@J@J;J@J@J J@J@Ju@J#JJJ:JJJJ@Jq@JmJlE@JeJc J[!JS8JKOJKOJHJD@JB@J?r@J:,@J7@J/@J,@J&eJB@J{II@I@In@II2Il@Il@Il@Iw@IpvI1.H@H׈HǶHe@He@He@GgG@G@GZ@G~Gt@G2FIFFFFFvFvFnF]g@F/BE{@E@E݅E՜E՜Eb@Eɿ@E'Ex@E&E@E%EE@E@Ez@EySEt Ep@EnEl$Ee@Eb@EQEPu@E>@E4E"PE"PE EgE@E@E @E E D@D@D@D}D@DDDDDDDDD@D@D@D@DNDZ@DD|D+@DԈ@D@DY@D@DDDDp@DDD@D@Dm@Vit Mojzis - 3.3.26-3Vit Mojzis - 3.3.26-2Vit Mojzis - 3.3.26-1Vit Mojzis - 3.3.24-4Vit Mojzis - 3.3.24-3Vit Mojzis - 3.3.24-2Vit Mojzis - 3.3.24-1Vit Mojzis - 3.3.23-1Petr Lautrbach - 3.3.22-2Petr Lautrbach - 3.3.22-1Vit Mojzis - 3.3.21-1Vit Mojzis - 3.3.20-2Vit Mojzis - 3.3.20-1Vit Mojzis - 3.3.19-2Petr Lautrbach - 3.3.19-1Petr Lautrbach - 3.3.18-4Petr Lautrbach - 3.3.18-3.1Petr Lautrbach - 3.3.18-2Petr Lautrbach - 3.3.18-1Tomas Orsava - 3.3.17-2Petr Lautrbach - 3.3.17-1Petr Lautrbach - 3.3.16-1Igor Gnatenko - 3.3.15-3Björn Esser - 3.3.15-2Petr Lautrbach - 3.3.15-1Igor Gnatenko - 3.3.14-4Petr Lautrbach - 3.3.14-3Petr Lautrbach - 3.3.14-2Petr Lautrbach - 3.3.14-1Petr Lautrbach - 3.3.13-1Fedora Release Engineering - 3.3.12-3Fedora Release Engineering - 3.3.12-2Petr Lautrbach - 3.3.12-1Fedora Release Engineering - 3.3.11-3Miro Hrončok - 3.3.11-2Petr Lautrbach - 3.3.11-1Fedora Release Engineering - 3.3.10-2Petr Lautrbach - 3.3.10-1Petr Lautrbach - 3.3.9.1-1Petr Lautrbach - 3.3.8.1-1Petr Lautrbach - 3.3.8-1Petr Lautrbach - 3.3.7-1Petr Lautrbach - 3.3.6-1Petr Lautrbach - 3.3.5-3Petr Lautrbach - 3.3.5-2Petr Lautrbach - 3.3.5-1Petr Lautrbach 3.3.4-1Fedora Release Engineering - 3.3.3-2Petr Lautrbach 3.3.3-1Fedora Release Engineering - 3.3.1-0.4Richard Hughes - 3.3.1-0.3Michal Srb - 3.3.1-0.2Petr Lautrbach 3.3.1-0.1Petr Lautrbach 3.2.24-3Fedora Release Engineering - 3.2.24-2Petr Lautrbach 3.2.24-1Petr Lautrbach 3.2.23-1Richard Hughes - 3.2.22-2Petr Lautrbach 3.2.22-1Petr Lautrbach 3.2.21-1Kevin Fenzi - 3.2.20-3Fedora Release Engineering - 3.2.20-2Dan Walsh - 3.2.20-1Fedora Release Engineering - 3.2.19-2Dan Walsh - 3.2.19-1Miroslav Grepl - 3.2.18-1.1Dan Walsh - 3.2.18-1Dan Walsh - 3.2.18-1Dan Walsh - 3.2.17-1Dan Walsh - 3.2.16-2Dan Walsh - 3.2.16-1Dan Walsh - 3.2.15-2Dan Walsh - 3.2.15-1Dan Walsh - 3.2.14-2Dan Walsh - 3.2.14-1Dan Walsh - 3.2.13-2Dan Walsh - 3.2.13-1Dan Walsh - 3.2.12-1Adam Williamson - 3.2.11-2Dan Walsh - 3.2.11-1Dan Walsh - 3.2.10-1Dan Walsh - 3.2.9-1Dan Walsh - 3.2.8-1Dan Walsh - 3.2.7-1Dan Walsh - 3.2.6-1Dan Walsh - 3.2.5-1Dan Walsh - 3.2.4-1Dan Walsh - 3.2.3-2Dan Walsh - 3.2.3-1Dan Walsh - 3.2.2-1Dan Walsh - 3.2.1-1Dan Walsh - 3.1.21-2Dan Walsh - 3.1.21-1Dan Walsh - 3.1.20-1Dan Walsh - 3.1.19-2Dan Walsh - 3.1.19-1Dan Walsh - 3.1.18-1Dan Walsh - 3.1.17-2Dan Walsh - 3.1.17-1Dan Walsh - 3.1.16-1Dan Walsh - 3.1.15-1Dan Walsh - 3.1.14-1Fedora Release Engineering - 3.1.12-4Dan Walsh - 3.1.12-3Dan Walsh - 3.1.12-1Dan Walsh - 3.1.11-1Dan Walsh - 3.1.9-1Dan Walsh - 3.1.8-1Dan Walsh - 3.1.7-1Dan Walsh - 3.1.6-1Dan Walsh - 3.1.5-1Dan Walsh - 3.1.4-1Dan Walsh - 3.1.3-1Dan Walsh - 3.1.2-1Dan Walsh - 3.1.1-1Dan Walsh - 3.0.47-1Dan Walsh - 3.0.45-1Rex Dieter 3.0.45-2 - 3.0.44-1 - 3.0.43-1 - 3.0.42-1 - 3.0.41-1 - 3.0.40-1 - 3.0.38-3 - 3.0.38-2 - 3.0.38-1 - 3.0.37-1 - 3.0.35-1 - 3.0.33-1 - 3.0.31-1 - 3.0.30-1 - 3.0.29-1 - 3.0.28-1 - 3.0.27-1 - 3.0.26-1Fedora Release Engineering - 3.0.25-2 - 3.0.25-1 - 3.0.24-1 - 3.0.23-1 - 3.0.22-1 - 3.0.20-1 - 3.0.19-1 - 3.0.17-1 - 3.0.16-1 - 3.0.15-1 - 3.0.14-1 - 3.0.13-1 - 3.0.12-2 - 3.0.12-1 - 3.0.11-1 - 3.0.9-1 - 3.0.8-1 - 3.0.7-1 - 3.0.6-1Dan Walsh - 2.2.69-1Dan Walsh - 2.2.67-1Dan Walsh - 2.2.66-1Dan Walsh - 2.2.65-1Dan Walsh - 2.2.64-1Dan Walsh - 2.2.63-2Dan Walsh - 2.2.63-1Dan Walsh - 2.2.62-1Dan Walsh - 2.2.61-1Dan Walsh - 2.2.60-1Dan Walsh - 2.2.58-1Dan Walsh - 2.2.57-1Dan Walsh - 2.2.56-1Dan Walsh - 2.2.55-2Dan Walsh - 2.2.52-1Dan Walsh - 2.2.50-1Dan Walsh - 2.2.48-1Dan Walsh - 2.2.47-1Dan Walsh - 2.2.46-1Dan Walsh - 2.2.45-1Dan Walsh - 2.2.44-1Dan Walsh - 2.2.43-1Dan Walsh - 2.2.42-1Dan Walsh - 2.2.41-1Dan Walsh - 2.2.40-1Dan Walsh - 2.2.39-1Dan Walsh - 2.2.38-1Dan Walsh - 2.2.37-1Dan Walsh - 2.2.36-1Dan Walsh - 2.2.35-1Dan Walsh - 2.2.33-1Dan Walsh - 2.2.32-1Dan Walsh - 2.2.31-1Dan Walsh - 2.2.30-1Dan Walsh - 2.2.28-1Dan Walsh - 2.2.27-1Dan Walsh - 2.2.26-1Dan Walsh - 2.2.25-1Dan Walsh - 2.2.24-1Dan Walsh - 2.2.23-3Dan Walsh - 2.2.23-2Dan Walsh - 2.2.23-1Dan Walsh - 2.2.22-2Dan Walsh - 2.2.22-1Dan Walsh - 2.2.21-2Dan Walsh - 2.2.21-1Dan Walsh - 2.2.20-1Dan Walsh - 2.2.19-1Dan Walsh - 2.2.18-2Dan Walsh - 2.2.18-1Dan Walsh - 2.2.17-1Fedora Release Engineering - 2.2.16-2Dan Walsh - 2.2.16-1Dan Walsh - 2.2.15-1Dan Walsh - 2.2.14-1Dan Walsh - 2.2.13-1Dan Walsh - 2.2.12-1Dan Walsh - 2.2.11-1Dan Walsh - 2.2.10-1Dan Walsh - 2.2.9-1Dan Walsh - 2.2.8-1Dan Walsh - 2.2.1-1Dan Walsh - 2.2.1-1Dan Walsh - 2.2.1-1Dan Walsh - 2.1.13-2Thomas Liu - 2.1.12-2Dan Walsh - 2.1.12-1Dan Walsh - 2.1.11-1Dan Walsh - 2.1.10-1Dan Walsh - 2.1.9-1Dan Walsh - 2.1.8-1Dan Walsh - 2.1.7-1Dan Walsh - 2.1.6-2Dan Walsh - 2.1.6-1Fedora Release Engineering - 2.1.5-2Dan Walsh - 2.1.5-1Dan Walsh - 2.1.4-1Dan Walsh - 2.1.3-1Dan Walsh - 2.1.2-1Dan Walsh - 2.1.1-1Ignacio Vazquez-Abrams - 2.0.12-2Dan Walsh - 2.0.12-1Dan Walsh - 2.0.11-1Dan Walsh - 2.0.10-2Dan Walsh - 2.0.10-1Dan Walsh - 2.0.8-2Dan Walsh - 2.0.8-1 - 2.0.6-1John Dennis - 2.0.5-1 - 2.0.4-1 - 2.0.2-1 - 2.0.1-1 - 2.0.0-1John Dennis - 1.10.7-1John Dennis - 1.10.6-1John Dennis - 1.10.5-1John Dennis - 1.10.4-1John Dennis - 1.10.3-1John Dennis - 1.10.2-1John Dennis - 1.10.1-1John Dennis - 1.10.0-1John Dennis - 1.9.7-1John Dennis - 1.9.6-1Dan Walsh - 1.9.5-1Dan Walsh - 1.9.4-1John Dennis - 1.9.3-1Dan Walsh - 1.9.2-1Dan Walsh - 1.9.1-1Dan Walsh - 1.8.19-1Dan Walsh - 1.8.18-1Dan Walsh - 1.8.17-1John Dennis - 1.8.16-1Dan Walsh - 1.8.15-1John Dennis - 1.8.14-1John Dennis - 1.8.13-1John Dennis - 1.8.12-1John Dennis - 1.8.11-1Dan Walsh - 1.8.10-1Dan Walsh - 1.8.9-1Dan Walsh - 1.8.8-1Dan Walsh - 1.8.7-1John Dennis - 1.8.6-1John Dennis - 1.8.5-1John Dennis - 1.8.3-1John Dennis - 1.8.1-1Dan Walsh - 1.7.1-1Dan Walsh - 1.7-1Dan Walsh - 1.5-1Dan Walsh - 1.4-1Dan Walsh - 1.3-1Dan Walsh - 1.2-1Dan Walsh - 1.1-1Dan Walsh - 1.0-1Dan Walsh - 0.48-1Dan Walsh - 0.47-1Dan Walsh - 0.46-1Dan Walsh - 0.45-1Dan Walsh - 0.44-1Dan Walsh - 0.43-1Dan Walsh - 0.42-1Dan Walsh - 0.41-1Dan Walsh - 0.40-1Dan Walsh - 0.39-1Dan Walsh - 0.38-1Dan Walsh - 0.37-1John Dennis - 0.36-1John Dennis - 0.35-1Dan Walsh - 0.34-1Dan Walsh - 0.33-1Dan Walsh - 0.32-1Dan Walsh - 0.31-1John Dennis - 0.30-1Dan Walsh - 0.29-1Dan Walsh - 0.28-1John Dennis - 0.27-1Dan Walsh - 0.26-1Dan Walsh - 0.25-1Dan Walsh - 0.24-1John Dennis - 0.23-1Dan Walsh - 0.20-1Dan Walsh - 0.19-1Dan Walsh - 0.18-1Dan Walsh - 0.17-1Dan Walsh - 0.16-1Dan Walsh - 0.15-1Dan Walsh - 0.13-1Dan Walsh - 0.12-1John Dennis - 0.11-1Dan Walsh - 0.10-1Dan Walsh - 0.9-1Dan Walsh - 0.8-1Dan Walsh - 0.7-1John Dennis - 0.3-1John Dennis - 0.2-1John Dennis - 0.1-1- Update translations (#2017299)- Improve after_first email filter behavior (#2050734)- Revert "Replace pydbus with dasbus" - Fix typos in --help, man pages and developer's guide (#2028226) - Do not use Python slip package - Stop SetroubleshootFixit after 10 seconds of inactivity - Fix plugin exception reporting - export alert dbus signal - Make sure local_policy_package is not None - sealert: add "Last Seen" column to alert list- Update translations (#1962030)- sealert: exit on any connection close (#1875290)- Optimize get_rpm_nvr_by_type by adding a cache (#1794807) - Stop building seappletlegacy (#1878792) - Update translations- Add 'fur' into shipped locales - Update translations (#1820570) - Log full reports with correct syslog identifier - Cancel pending alarm during AVC analyses- browser: Check return value of Gdk.Screen().get_default() (#1574434) - Improve and unify error messages (#1763982) - setroubleshoot.util: Catch exceptions from sepolicy import - Add dpkg support - Do not refer to hardcoded selinux-policy rpm in signature - Make date/time format locale specific (#1812674) - Improve speed of plugin evaluation (#1794807) - Do not try to report a bug on None package - sealert: Drop unused import slib.dbus.service - Drop updater.py - it's not used and doesn't work - root user doesn't need to use SetroubleshootPrivileged API - Use pydbus, a modern Python dbus API, for SetroubleshootPrivileged - Report bug on a package which owns the related SELinux domain (#1811644) https://pagure.io/setroubleshoot/issue/18 - Add Local SELinux policy package version to analyses reports - setroubleshoot.utils.get_rpm_nvr_by_scontext add option to use DBUS method - Export setroubleshoot.utils.get_rpm_nvr_by_scontext via DBUS - setroubleshoot.util: get_rpm_nvr_by_type() and get_rpm_nvr_by_scontext()- Log plugin exception traceback when log level is DEBUG - sepolicy.info() returns a generator, not a list (#1784564)- sepolicy.info() returns a generator, not a list (#1784564)- Use dbus.mainloop.glib.DBusGMainLoop() instead of dbus.glib - Fix AVC.__typeMatch to handle aliases properly - Handle sockets with abstract path properly (#1775135)- Fix file mode of email_alert_recipients (#1741960)- Add man page for seapplet (#1612529)- Update "missing" scripts to automake-1.15 - Add active polling for acquiring policy file - Fix translation of hex values in AVCs (#1477236, #1709742) - require initscripts to ensure that "service" call works properly- Require plugins >= 3.3.10- Update translations - Catch exceptions caused by lookup_signature- Update scriptlets to reload auditd after install or uninstall- Update translations - Improve myplatform detection in get_os_environment()- Move sedispatch.conf to /etc/audit/plugins.d/ - Fix summary and "if" text for AVCs with unknown target path- Switch hardcoded python3 shebangs into the %{__python3} macro- Set auto_save_interval to 5 (#1548913,#1523406,#1539180) - seapplet: Try send and close notifications (#1541624,#1541719,#1544222,#1539367)- Do not show status_icon when there's no alert (#1543758) - Run seapplet only on SELinux enabled system (#1541631) - Use context in Gio.AppInfo.launch (#1542156)- Escape macros in %changelog- Fix runtime dependency: 's!lipreport!libreport!g' (#1536580) - Prefer %global over %define - Remove obsolete %defattr(-,root,root,-)- Rewrite seapplet to Python3 to use Notify and Gtk 3.0 - Add setroubleshoot-seappletlegacy with legacy seappletlegacy based on Gtk 2 - sealert: Finish dbus communication after error- Remove obsolete scriptlets- Update translations- Update translations- Increase the space for suggested solutions in sealert - Highlight suggestions with the highest confidence - Remove additional "If " string from plugin messages - Fix sealert message for process2 (#1507909) - Do not change if_string[0] to lowercase- Don't stop when the plugin directory is empty - Fix missing margins on Troubleshoot window - Resize all solutions panels horizontally - Fix missing priority color for proposed solutions - Do not split If sentences to framework and plugins - requires setroubleshoot-plugins 3.3.8 at least (rhbz#1210243, rhbz#1322734, rhbz#1115510) - Set translation domain for Gtk.Builder() object to have strings correctly translated - Make labels on GtkButtons translatable - Handla all exceptions from do_analyze_logfile() - Fix semi-translated messages - Update translations - Do not catch POSIX signals (rhbz#1366004, rhbz#1419245)- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- Remove "Report bug" button when mozplugger plugin is used (#1290135) - Change "check_for_man" return value upon failure (#1431191) - Fix "plugin details" message content - Add "init_args" function to Plugin - Fix sealert crash when setroubleshootd fails to start (#1405003) - Improve obtaining AVC object path - Fix setroubleshootd.8 - Fix report problem summary string - sealert - provide a better error message when SELinux is disabled - Spelling fixes - Python 3.6 invalid escape sequence deprecation fixes- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild- Rebuild for Python 3.6- Fix "list all alerts" in sealert gui (#1370272, #1332485) - Fix sealert message for capability2 (#1360392)- https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages- setroubleshootd fixed to catch all subprocess exceptions - Translations updated- Do not use dangerous shell=True - Use subprocess.check_output() with a sequence of program arguments- fixed get_all_alerts_ignored()- added setroubleshootd_log.log_full=True|False directive - setroubleshootd_log.level and sealert_log.level can be set to different values - get_alert() and get_all_alerts_since() DBUS APIs change to use number of microseconds instead of date string - setroubleshoot.conf cleanup- Added new methods to DBUS API: set_filter(), get_all_alerts_ignored(), delete_alert()- Translations updated (#1322654) - Suggest my-.pp modules instead of mypol.pp (#1329037)- Drop unwanted debug message in sedispatch (#1326985)- setroubleshoot: Ensure that dbus string param isn't null- get_alert() DBUS API extended with more parameters - sedispatch uses a timeout when collecting audit events (#1322771) - Use correct packaging for byte compiled files (#1321047)- fixed traceback in SetroubleshootFixit.py (#1279396)- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild- fixed few UI browser problems - extended DBUS API, see DBUS.md - import MIMEText from the right module (#1297111) - Fix several GTK deprecated warnings- Rebuilt for https://fedoraproject.org/wiki/Changes/python3.5- Move the AppData file to the right subpackage so it gets used.- Sanitize requires for Python 3- port setroubleshoot to Python 3- setroubleshoot-server depends on policycoreutils-python-utils (#1246625)- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- translations updated from https://fedora.zanata.org/project/view/setroubleshoot - setroubleshoot_database.xml and email_alert_recipients are %ghost again- setroubleshootd is set to be run as setroubleshoot user instead of root user - several bugfixes- Add an AppData file for the software center- Ship a symbolic setroubleshoot icon (#1182652) - Fix get_rpm_nvr_*_temporary functions - CVE-2015-1815 (#1203352)- Provide the policy rpm in Bugzilla bug reports by jfilak@redhat.com- Rebuild for rpm bug 1131960- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild- Fix handling of target paths that decode screws up- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild- Remove at_console lines from policykit so cockpit can use dbus interfaces.- Add the policy rpm string to the user comments of an already reported bug from jfilak@redhat.com- Stop sending syslog.LOG_DEBUG Messages unless loglevel is set to debug- Stop sending syslog.LOG_DEBUG Messages unless loglevel is set to debug- Fix unicode settings- Remove requires for notify-python and yum- Don't error out on no policy installed - Update translations.- Eliminate requirement on service script.- Update Lanquages - Use setup.py in Makefile for setroubleshoot dir- Add requires for libreport-python- Remove "the the" typo from code. - Update Translations- Move some of the Requires block down to -server package- Fix typo again in audit_data.py - Make setroubleshoot less noicy in logs- Fix typo in audit_data.py- fix systemd-python requirement versioning- Add journald support for OBJECT_ID when logging journal messages - Update Translations.- Make audit2allow optional, only requre policycoreutils-python not -devel. - Update Translations.- On update cp instead of rename, since there could be a situation where someone has ~/.config on a different file sytem then ~. It has happened. - Fix --password spelling error - Remove --quit option from sealert - Update translations- Fix handling of timeout attempt #2- Fix translations to show in browser- Fix handling of timeout - Update Translations- Remove old options from setroubleshoot usage statement. - Update Translations- Fix usage of "it's" versus its in man pages. - Update Translations- Remove requirement for setools-libs-python, no longer needed.- Update Translations - Fix audit2allow -R output to actually work.- Fix handling of sesearch data- Remove sesearch from package and start using sepolicy from policycoreutils-python - Fix retrieval of writable types to translate attributes into the group of types available, and not return non file types.- Need to add a requires for systemd-python- Update translations. - Restart auditd service on install and removal- Update translations.- Require policycoreutils-devel to pull in audit2allow- Update Translations- Update Translations - Add keywords to desktop file- Update Translations- Update Translations- Fix sealert to handle avc's in /var/log/messages which will be numbered 1400 and 1107 rather then AVC and USER_AVC - Update Translations - Fix hostname substitution to only effect hostnames- More translation fixes.- Fix Translations code to actually show translations- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- Change requires to libreport-gtk instead of report-gtk- Update translations - Remove /var/log/setroubleshoot /run/setroubleshoot which are no longer used- Update translations - Only check for rpm on target process if is still exists- Add file_types as a param to setroubleshoot.utils - Update translations- Add missing lanquages, using lang supported by gtk- Add missing lanquages- Remove gnome-keyring requirement- Fix potential memory leak in setools - Update to latest translations- Update to latest translations- Update to latest translations - Fix handling of avc messages, missing \n - Default to check for AVC's on login- Fix crash caused by switching to syslog, and update trans- remove specific logging and move to syslog - Fix handling of AVC messages broken by fix for memory leaks- Fixup for memory leaks- Update to latest translations- optimize/update scriptlets - don't own icons/hicolor - drop %config tag on applications/*.desktop - Patch from Mgrepl to stop printable from crashing if None is passed in - Update to latest translations- Update to latest translations - Fix memory leak in sedispatch- Update to latest translations- Set the gobject prg_name for better integration into the desktop- Don't report to syslog when sedispatch gets an signal to exit.- Apply Miroslav patch that rewrites sealert option handling with using optparse. Fixing conflicting options problems.- Fix requires to include pygtk2-libglade- Fix path to setroubleshoot xml in spec file- Remove dependancy on X from sedispatch- Move serverconnection.py and FixIt commands from setroubleshoot to setroubleshoot-server - Remove run_cmd.py- Make work on RHEL6 - Fix if Button to allow user to select full button- Stop translating strings into bogus hex strings- Allow browser to close even if windows are still open - Cleanup imports in gui_utils.py- Change seapplet to only check for AVCs on login, if checkonlogin flag is turned on in ~/.setroubleshoot file - Fix list_all_alerts bug causing crash on bad type- Fix handling of "/" in alert list - Update translations- Tighten up screen to fit on little screens- Remove dependance on gnome python modules - Update translations- Cleanup handling of current_alert - Change Details button to say Plugin\nDetails- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- Turn off sensitivity of details button when no AVC's exist- Add ProtocolError from xmlrpclib so Bugzilla reporting throwing an error will work.- Fixup for allow_execstack have to add pid to avc struct- Fix email_alerts to work with new infrastructure- Added details button and context as tooltips to gui on front end for advanced users- Fix man page to reflect change in gui - Fix sealert -fixit call to import load_plugins - update translations - Fix handling of empty tpath in gui- Fix dbus Introspect handling - Make sealert use terminal for errors when in terminal mode- Update Translations- Fix Details Button - Fix table display - Handle situations when you have no spath and tpath- Fix dbus config file to allow console to use sealert- setroubleshoot will create /var/run/setroubleshoot if it does not exist- Ghost /var/run/setroubleshoot- Update translations - Allow seapplet to check for updates- Better handling of tracebacks in terminal mode - Fix up messages on process and capability avc messages - Update translations- Fix config name- Fix crash in sealert with missing log_* - Report bugzillas in english- Apply patch from Yuri Chornoivan to fix spelling mistakes - Remove py files that are no longer used - Add details button- Fix handling of report_count and ignore button- Add white level, so plugins can tell setroubleshoot to ignore avc- Fix browser to handle ignore flag - Remove tpath for signature - Fix audit2why handling for sealert and setroubleshoot - Fix sort order selection - Fix dontnotify handling- Update translations- Fix saving last position exception- Fix seapplet infinite loop from Tim Eliseo- Fix requires setools-libs-python line- Fix setroubleshoot seapplet to not show ignored avc- Remove packagekit dependancy- Add Gavin Romig-Koch report patch - Cleanup Browser window - Remove avc messages that are allowed or dontaudited in current poilcy- Remove untest attachfile code - Catch ProtocolError- Fix remembering of bugzilla username/password- Remove send_interface from Setroubleshootd.conf- Don't crash on missing inode - Fix up default_encoding an translations- Cleanup spec file - Add default_encoding - Fix wording in bug report window- Fix ignore button - Add delete button- Exit with error code if you run sealert as root and try to connect to session bus - Fix Crash when ino is not defined- Fix bug in substitute code- Fix semanage fcontext lines to substitute "." for " " in path - Update po- Fix bugzilla reporting to work on RHEL6- Do not translate hex files - Catch exception on non dbus system- Get version correct for both RHEL and Fedora- Fix crash on selinux disabled and bad /etc/redhat-release reporing of bugzillas- Update po - Fix bugzilla reporting to handle LoadError exception- Add icon to browser- Fix up browser button handling when there are 0, 1 or more alerts- Catch additional bugzilla exception- Show that the application is starting. - Fix ignore sealert button- Don't throw up an error box if yum cache is not setup- Fix Fix It button - Remove Setroubleshoot: from every heading- Fix translations, plurals and glade - Update Po - Fix plural form - Add support for Green Plugins- Fix translations, plurals and glade- Fix browser bug handling- Fix translations- Update po and fix translation line- Fix permissive domain check- Close open file descriptors on exec- Fix setroubleshoot error dialog and hash to catch more dups on reportbug- Fix pipe and socket plugins to return tclass as path- Fix permissive fix- Add PackageKit requires- Move python-slip-dbus requirement to server package- Fix Permissive Domain reporting- Turn on libcap-ng-devel- Differentiate between permissive domains and permissive mode- Turn on libpcap- Turn on copy to clipboard button-Update to upstream - 2009-8-18 Thomas Liu - Added check for new policy.- Default syscall field in audit_data- Add buildrequires python-slip-dbus- Add sgrubb drop capabilities, patch - Fix infiniteloop- Fix handling of mountpoints that the kernel reports as "/"- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- Fix sesearch handling- Fix a1 handling- Update to upstream 2009-7-15 Dan Walsh - Fix handling of syscall record a1 field - Translate "/" to mountpoint when returned by kernel- Update to upstream 2009-7-07 Thomas Liu - Fixed detail doc not clearing when deleting all alerts - Hid notify check when deleting all alerts.- Fix locate code to use os.lstat- Update to upstream 2009-7-01 Thomas Liu - Fixed browser behavior when there are no alerts - Fixed seapplet behavior when there are no alerts - Made delete all button delete alerts on server side and on local side- Add open access to audit_data.py define statements- Update to upstream 2009-6-25 Thomas Liu - Added a "Copy to Clipboard" button to the browser GUI.- Add sesearch- Fix handling of last seen - Add open_with_write check- Update to upstream * Thomas Liu Bug fixes to GUI, added Delete All Alerts menu item.- Update to upstream * New Gui- Fix handling of PATH with locatepwd- Redesign of GUI- Fix handling of PATH- Fix crash when gathering stats- Make sure setroubleshoot exists after 10 seconds- Change multiple signatures from exception to warning - Update links on fedorahosted.org- Fix sealert segfault- Stop sending messages with scon or tcon == setroubleshootd_t- Split out documentation- Stop logging on normal shutdown of sedispatch- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild- Fix cpu utilization problems - Save database on exit- make sure setroubleshoot is running when using sealert -l- sedispatch needs to connect to dbus on avc arrival, instead of startup, since the dbus daemon is not started when sedispatch starts- Fixes missing dbus config files- Switch to C Based applet - Use dbus for messaging. Only run setroubleshoot when- Rebuild for Python 2.6- Update to upstream - 2008-10-06 Dan Walsh - remove .png from desktop files- Update to upstream - 2008-10-22 - Fix pruning code - Fix time stamps- Fix requires line to gnome-python2-gnome- Fix startup problems- Fix setroubleshoot init to rely on messagebus being running- Fix spelling mistakes - Update translations- add dialog to run a command in the background, capture it's stdout & stderr report it's status, kill it, and pass it a pseudo terminal for password prompts - separate the fix command into it's own section in formatted alerts - add UI for running the fix command, enable only if there is a single selection and the selected alert has a fix command - add a config parameters 'run_fix_cmd_enable' to control if fix commands can be run, defaults to False - Resolve bug 431380: prevent notify popups while setroubleshoot is open- allow sealert -l lookup to accept * wildcard - add a few more audit fields needing special decode handling- Resolve bug 430421: audit_listener_database.xml:3029: parser error in xmlParseDoc() rewrite the audit_msg_decode logic to beaware of specific audit fields - add new template substitution $SOURCE, a friendly name, $SOURCE_PATH still exists and is the full path name of $SOURCE, also add 'source' attribute in AVC class, fix how source and source_path are computed from audit's comm and exe fields - fix the computation of tpath to also look at the audit name field, formerly it had only been looking at path, fixes showing up for many targets - add exception handling around xml file writes (Alan Cox reports problem when /var is full) - add testing documentation - Resolve bug 430845: obsolete URL in setroubleshoot package description - Resolve bug 428960: Permissive message makes no sense. - init script now allows extra test options - show_browser() now opens and raises the window (e.g. presents) rather than just assuring it's realized (e.g. iconified, or hidden) - sealert -l message in syslog converts from html before writing to syslog - Resolve bug 320881: export setroubleshoot_selinux_symposium in PDF format - add code to verify all async rpc's have been cleared from the async rpc cache - add code to set a default rpc method return if the interface does not define a callbak (methods which did not have a callback were not returning anything and hence were no getting cleared from the cache)- Resolve bug 428252: Problem with update/remove old version - Add code to validate xml database version, if file is incompatible it is not read, the next time the database is written it will be in the new version format. This means the database contents are not preserved across database version upgrades. - Remove postun trigger from spec file used to clear database between incompatible versions the new database version check during database read will handle this instead - bullet proof exit status in init script and rpm scriptlets - Resolve bug 247302: setroubleshoot's autostart .desktop file fails to start under a KDE session - Resolve bug 376041: Cannot check setroubleshoot service status as non-root - Resolve bug 332281: remove obsolete translation - Resolve bug 344331: No description in gnome-session-properties - Resolve bug 358581: missing libuser-python dependency - Resolve bug 426586: Renaming translation po file from sr@Latn to sr@latin - Resolve bug 427260: German Translation - enhance the sealert man page- make connection error message persist instead of timeout in browser - updated Brazilian Portuguese translation: Igor Pires Soares - implement uid,username checks - rpc methods now check for authenticated state - fix html handling of summary string - add 'named' messages to status bar, make sure all messages either timeout or are named - fix ordering of menus, resolves bug 427418 - add 'hide quiet' to browser view filtering, resolves bug 427421 - tweak siginfo text formatting - add logon to SECommandLine so that sealert -l works- prepare for v2 test release - Completed most work for version 2 of setroubleshoot, prepare for test release - import Dan's changes from the mainline primarily allow_postfix_local_write_mail_spool plugin - escape html, fix siginfo.format_html(), siginfo.format_text() - add async-error signal - change identity to just username - make sure set_filter user validation works and reports error in browser - fix generation of line numbers and host when connected to audispd - add permissive notification, resolves bug 231334: Wording doesn't change for permissive mode - resolves bug 244345: avc path information incomplete - get the uid,gid when a client connects to the server - set_filter now verifies the filter is owned by the user, - resolves bug 288261: setroubleshoot lack of user authentication - remove filter options which weren't being used - change '@' in audit data hostname to '.' - remove restart dialog resolves bug 321171: sealert's dialog after update is higly confusing - fix rpc xml arg - fix handling of host value - tweak what fields are in signature - move data items which had been in 'avc' object into siginfo - clean up siginfo format - large parts of new audit data pipeline working, checkpoint - fix duplicate xml nodes when generating xml tree - audit event can now be xml serialized - switch from using int's for audit record types to strings - avoid conversion headaches and possibilty of not being able to convert a new unknown type - add logic to allow XmlSerialize to be subclassed and init_from_xml_node to be overridden - add support to xml serialize classes AuditEventID, AuditEvent, AuditRecord - use metaclass for xml class init - start adding xml support to audit data classes - Use metaclass to wrap class init - move xml serialization code from signature.py to xml_serialize.py - simplify aspect of the serialization code - add unstructured xml mapping, each xml element name has its content mapped to obj.name - modify xml serialization to be driven by xml contents - general clean up - checkpoint conversion of serialization to use metaclasses - clean up class/data specifications for XmlSerializable - add support for client rpc testing - add changelog entry - add SubProcess class to setroubleshootd in preparation to - run daemon as subprocess so we can gather results and compare them to the expected data we sent - rewrite all plugins to use new v2 audit data - add SubProcess class to setroubleshootd in preparation to run daemon as subprocess so we can gather results and compare them to the expected data we sent - add new test support: add config section 'test', add boolean 'analyze' to config test section, add class TestPluginReportReceiver which is installed if test.analyze is True, it prints analysis report. In test_setroubleshootd send AUDIT_EOE to assure sequential event processing so analysis results have same ordering as events that are sent by test_setroubleshootd - alert signatures now include host information, alerts will be grouped by host- Fix spec file requires for opening an HTML page In configure.ac search for xdg-open and htmlview in priority order, set variable html_browser_open to the one found, in spec file require xdg-utils for fedora and htmlview for RHEL. - add "Host" column in browser add "Toggle Column Visibility" menu to toggle display of any column on/off - Resolves bug 310261: setroubleshoot notifications aren't throttled - add support for AUDIT_EOE, end-of-event, if AUDIT_EOE immediately emit cached event. Disable timeouts used to flush events if AUDIT_EOE has been seen.- make selinx-policy requires in spec file specific to dist tag- update code for command line log file scanning to work with new log file scanning code introduced for the browser. - update Bulgarian translation (Doncho N. Gunchev (gunchev@gmail.com)) - update Polish translation (Piotr Drąg (raven@pmail.pl)) - Resolves bug 239893: sealert wakes up very often This was caused by the use of threads and pygtk's thread signal handling. The only use of threads in sealert was for log file scanning so that the UI would remain responsive during a scan. Threads in sealert have now been completely removed. Instead the scanning work is performed in a gobject idle function called from the main loop. The idle function is written as a python generator function which allows for the function to perform a small amount of work, save it's execution state and return. The next time the idle function is called from the main loop it resumes execution from it's last state until it decides to yield control again. This way the long running scan/analysis can be performed in small successive units of work during the time the application is otherwise idle and it does not interfere with the rest of the GUI event processing. Everything now occurs in an event loop, think of it as the applications process/thread scheduler whose event handlers execute time slices. - rewrote parts of the audit input pipeline to use generators instead of callbacks, thus permitting the logfile scanning code to yield control with more granularity. Also updated test_setroubleshootd and audisp_listen to use the new generator/yield logic. - rewrote the dialog used for scanning log files, progress bar updates are now in the dialog, the scan can be terminated part way through, errors from the scan are reported in pop-up dialog, one can only dismiss the dialog with success if the scan had been successfully run to completion, otherwise the user is only left with the option to cancel. - Relates bug 252035 bug 247469, setroubleshootd and sealert should exit if SELinux is disabled. - add utility functions escape_html() and unescape_html() - fix initial sort order in browser, track sort order in browser - modify AVC.get_path() to only return a value if the 'path' field is set, formerly it also considered the fields 'name' & 'file' which were incorrect. get_path() now also looks to see if the string begins with a slash for a fully qualified path, if not it looks to see if its a pseudo path such as 'pipe[12345]' or 'socket[12345]' and if so strips out the instance information inside the brackets and returns just the type of the pseudo path. This is done because we do not want path information in the signature to be unique for each instance of the denial. - modify the TimeStamp class to hide it's internal datetime member, remove the cmp() method, the internal __cmp__ will be automatically invoked. - require selinux policy version in spec file to allow system dbus use - Resolves bug 256601: audit2allow generates incorrect syntax when comma "," in denied list - update po i18n files - Add support for pruning database by age and size- fix init script- modify avc_audit.py to use new audit_data.py implementation - can listen for audit events on either /var/run/audit_events in bindary protocol mode or /var/run/audisp_events in text protocol mode- remove all copied code from test_setroubleshootd, now we import from setroubleshoot - export ClientConnectionHandler from rpc.py as a base class. Derive SetroubleshootdClientConnectionHandler and AuditClientConnectionHandler from ClientConnectionHandler. - add audisp_listen as test program - create setroubleshoot sym link in top devel directory pointing to src so import setroubleshoot.foo if PYTHONPATH=topdir - add get_option, convert_cfg_type to config.py.in so that one can pass optional dict to override config file settings - rewrite log_init() so it's easier for other programs to use it, fix the import logic concering log & config - remove log code from test_setroubleshoot, now just does import from setroubleshoot. - test_setroubleshootd can now handle audit records in both text and binary formats, can be selected by command line arg. It can now either output to clients connecting on a socket or to stdout. Can now optionally exit after N socket client connections. - remove non audit record lines from test data - remove config_init() and log_init() from package __init__.py It was the wrong place to call them, now call them when the process initializes before the first setroubleshoot imports - add parse_config_setting() and set_config() to config module - setroubleshootd now accepts -c --config command line arg - test_sectroubleshoot: add err defines & program_error exception add is_valid() tests to assure we read a valid audit record log the unrecognized line if not valid, clean up socket close() - Relates Bug #247056, update initscript to LSB standards Note: LSB initscripts in Fedora is not yet a resolved issue, the changes implemented were to add an LSB block and support the new LSB try-restart and force-reload commands. However the new /lib/lsb/init-functions are NOT currently used as this is the unstable part.- add BuildRequires perl-XML-Parser- move all plugins and their translations to independent package - wrap XML generation inside try/except - correct how access list is obtained in avc_auparse.py - add try/except around top level of AnalyzeThread.run so exceptions in the thread get reported and the analysis thread does not just die. - also add try/except around LogfileThread.process_logfile - add new function assure_file_ownership_permissions() - server now forces it's database file permissions/ownership to be 0600 root:root - rpm now forces the server's database file permissions/ownership to be 0600 root:root - Resolves Bug #251545: Review Request: setroubleshoot-plugins - analysis plugins for setroubleshoot - clean up some other rpmlint warnings in setroubleshoot.spec - fix missing install of setroubleshoot icon and sym link to it - Resolves Bug #251551, setroubleshoot shows up in in wrong desktop menu also run desktop-file-install in rpm install - add /etc/dbus-1/system.d/setroubleshootd.conf dbus configuration file - Resolves Bug #250979, Bug #250932 Missing dependencies - Restore plugins/Makefile.am which got nuked somehow - remove dus.dbus_bindings.bus_name_has_owner(), deprecated as of F7 - wrap rpm transactions in try/except- Resolves Bug# 241739, this bug is the lead bug for several bug reports, all consequences of the same problem, setroubleshootd/sealert when run in a non latin language environment because of incompatibilities in i18n encoding between components.- add avc_auparse.py, now has option to use audit parsing library instead of built-in audit parsing. - fix bug in log file scanning and detail display update - Resolves Bug# 238516, python pkg directory not owned- Update translations - Fix mislabeled file- Remove disable_trans boolean - Check for paths in filesystem before suggesting chcon -R - Remove default to listen on local ports- install icon in /usr/share/icons, refer to icon by name using standard API - Fix performance problems in setroubleshoot browser log file scanning - Significant rewrite of data/view management code in setroubleshoot browser. data and view now cleanly separated, can easily switch between data views while maintaining selections, view state, with proper update of status information in status area - Resolves Bug# 227806: right click context menu resets selection - Logfile scans now operate in independent thread, proper asynchronous updates of browser during scan, browser used to appear to hang - Resolves Bug# 224340: Rewrite Menu/Toobar/Popup to use UIManger instead of glade - Add toobar support - Implement GUI to edit email recipient list in setroubleshoot browser - Added user help to setroubleshoot browser - Related Bug# 224343: Fix setroubleshoot browser to respond to desktop theme changes - improve traceback error reporting in sealert - rewrite AboutDialog, replacing glade version - Resolves bug 229849 Bug# 230115, Relates bug 221850: fix uuid code to resolve '_uuid_generate_random' is not defined error- Suck in AuditMsg since audit libs are dropping support- Split into server and gui packages- Remove use of ctypes in uuid, which is causing bad avc messages- Remove avc from Plugin.py- Remove tempfile handling in util.py. Causes lots of avc's and is not used[John Dennis ] - Fixes Bug# 224343 sealert's "Aditional Info:" text should be in white box - Fixes Bug# 224336 sealert should have GtkRadioButtons in menu View - Related: bug 224351 Rewrite parts of logging support to better support changing output categories, output destinations. Now -v -V verbose works in sealert. - Resolves bug 225161, granted AVC's incorrectly identified as a denial - add alert count to status bar - add "Help" command to Help menu, opens web browser on wiki User FAQ [Dan Walsh ] - Make setroubleshoot.logrotate correctly- Update po - Additional Plugins - Cleanup Plugins- Fixes 221850 plugin module loading was failing in python 2.5 with the message "SystemError: Parent module 'plugins' not loaded". This is due to a change in behavior between python 2.4 and 2.5, in python 2.4 the lack of a parent module was silently ignored. The fix is to load plugins.__init__ first.- update translations - change SETroubleshootDatabase so it is optional if it's backed by a file, this fixes the problem of us littering temporary files when scanning logfiles which does not require persistence. - disable the view logfile menu item if no logfile has been opened - fix redundant log messages for case where there is no log file and the console flag is set. When there is no log file the logging module opens a console stream, thus the console stream produced by the console flag was redundant. - add username and password command line arguments rework startup logic so that all command line args are processed before we do any real work - rework the email preferences so that each email address can have a filter type associated with it. add a new filter_type "Ignore After First Alert" which filters after the first alert has been delivered - add UI for setting the email addresses alerts are sent to. Add menu item to edit email list, add email list dialog. Remove 'recipient' config file entry, now list is stored in seperate file. Add rpc to query and set the email list, the GUI calls this to get the current list from the server and set it in the server, it is the server which reads and writes the file. Add 'enable' flag to each email entry. Modify how the server iterates over the email list when it receives an alert. When marking an alert as having been sent the username is the email address but with 'email:' prepended so as not to collide with non-email filtering options for the same user.- remove obsolte requires for python element tree- Fixes 216575, more translations - Replace delete and expunge menu labels with something more intuitive - add ability for browser to be restarted with identical window position and state - add pkg version and protocol version to logon handshake, test for compatibility between clint and server, prompt for restart - add non-modal restart dialog - add dialog to display traceback if sealert faults with an uncaught exception, try to limit invisible errors - fix return args on rpc method - add instance id to server- Improve quality of plugins - Make matching easier - Fixes 216575- Additional Translations - Fixes 216575- Additional Translations - Change sealert to be able to run without X-Windows - Fixes 216575- Additional Translations - Change avc_audit.py to allow it to analyze /var/log/messages- Fixes 218150, "If view is set to "hide delete" you cannot filter new entries" Actually, the bug was toggle cell renderer was connected to the base model instead of the model attached to the view, the sort model, this meant the toggle was occuring on the wrong row if the view was sorted differently than the base model.- fix bug, "could not convert path to a GtkTreePath" when database is initially empty, caused by last_selected_row == None- Fixes 217961, sealert needs pygtk2-libglade - more i18n translations - Fixes 217710, date representation did not respect locale, at the same time remove old date formatting code, now cruft since we can't use it because it was specific to US English. - fix how selections are handled when rows are expunged. - add Copy to Edit menu, for copying selection from detail pane, unfortunately gtkhtml2 widget does not preserve line breaks between table rows.- Fixes 216936, bug 215290, add 'Copy Alert' edit menu item - clean up menu items, add tooltips - fix printing so it will work with multiple alerts, force font to monospace 10pt, display error dialog if printing fails. - Fixes 216908, platform and raw audit messages were not wrapped to fit on page. - Related: 216575, update i18n po files - Fixes 216941, set default folder for save operation, also set default filename - Fixes 216327 add menu items "toggle hide deleted", "select none". Add model filter to control visibility of alerts - Fixes 214218, sealert with no command line arguments induces startup as dbus service, this had been a regression. - Fixes 216327, rework how deletes are performed in browser. Delete now marks each seleted siginfo with a delete flag, expunge permanently deletes siginfo's marked for deletion, also add undelete command, removed delete confirmation dialog. Modify how text attributes in cell renderer are computed to allow for strike-throughs of alerts marked for deletion. - multiple alerts can now be selected, add select all command,- New Icon and translations[John Dennis ] - Add command line utilities - logfile scanning finally seems to work connected to browser - Additional Information section of report now includes line number information (if alert was generated from logfile) - replace database update_callback() with notify interface, a more generic solution more easily shared between components - object implementing rpc method is now explicitly attached via connect_rpc_interface() instead of walking the MRO chain with magic exclusions. explicitly connecting is more flexible and robust (no getting the wrong object by mistake) - fix handling of return args in local rpc case - fix signal connections between audit and logfile - split databae and database_properties for audit and logfile - fix initial connection state - fix lookup_local_id- Speed up startup of service- Many fixes - Changed the api- Speed enhancments [John Dennis ] - log file parsing now approx 4 times faster - greatly enhance the statistics reporting capability in attempt to diagnose slow log file parsing performance - make gathering of environmenatal information optional, environment information is only relevant at the time the alert fires, not in a post processing scenario - clean up several places where environmental information was assumed and/or was always gathered, or gathered in the wrong place.- Fix signature for PORT_NUMBER src command- Additional Plugins for port_t and device_t and mislabled files.- Release of first version - Fix icon [John Dennis ] - Memory leak fixes - Substitution fixes - File names in hex fixes- Sealert only notify dropped connection once - setroubleshoot shutdown cleanly [John Dennis ] - Gui cleanups- Change close key binding to ctrl-w- Add new plugins cvs_data, rsync_data, xen_image, swapfile, samba_share [John Dennis ] - clear the GUI of old data before loading new data, fix the code used to display the filter icon in the filter column[John Dennis ] - Major rewrite of the client/server RPC code,- Fix Affected RPMS handling- Fix mail handling - fix bugs related to recording per user per signature filtering [John Dennis ] - fix bugs related to recording per user per signature filtering [Karl MacMillan ] - Add signal handling to client and server. - Fix minor plugin bugs.[Karl MacMillan ] - Add rpm information for target. - Add hostname and uname to signature info - Add display of the full AVC - Add display of the analysis id - Change html generation to be separated out and us elemmenttree [John Dennis ] - add CommunicationChannel class to encapsulate data transfer operations, in particular to provide an object threads can lock during data transfer. - checkpoint the logfile scanning code, somewhat working- Fix printing- Fix notification window problems. Now dissappears and does not regenerate if it has already been seen- Add Icon [John Dennis ] - dispatcher.py: rework how audit messages injected into the system and processed. Much of this work was in support of log file scanning which should be coupled to the exact same processing code as audit messages arriving from the audit socket. In essence log file scanning synthesizes an audit message and we inject it into the system the same way socket messages are injected. This was also an excellent moment correctly handle out of order audit messages, something we were not able to handle previously. This may have been contributing to splitting what should have been a single alert into two or more separate alerts because we didn't recongize the incoming audit events as a single event. Correctly assembling out of order messages introduced a fair amount of extra complexity as we now maintain a cache of recent audit events, this is fully documented in dispatcher.py - Turn notifications back on by default. [Karl MacMillan ] - Separated out HTML rendering and made it easier to translate.[Dan Walsh] - Hook up the rest of the menu bars on browser window - Add public_content.py plugin [John Dennis ] - add delete_signatures() method to AlertClient class - start using the AppBar in the browser. - "open logfile" now connected all the way from browser menu to server rpc, still needs implementation, but "plumbing" is working. - fixes for the date/time dialog - remove install of setroubleshoot.glade, we now only use setroubleshoot_browser.glade - some fixed to DateTimeDialog- Add back in the status icon- change dbclear trigger to 0.35- add sorting on category column and seen column in browser, fix reference to my_draw() in print function. - make browser window hidden by default so it does not flash when it's first realized, connect to the "realize" signal to initially position the vpane, add signal handlers to track when the browser is visible, the presentation of the status icon now checks if the browser is visible, the status icon is not presented if the browser is already displayed.- Standardize on the browser. remove alert window [John Dennis ] - remove all vestiges of popup alert, now browser is the only UI game in town - restore the automatic updating of the browser window which had been a regression, the AlertClient class now emits signals which the GUI classes can connect to receive signals from the fault server, also fix the "mark seen" regression - browser.py: restore mark_seen timeout- Spell check plugins - fix dbus instantiation- Add avc_syslog to syslog translated avc message - Fix submitbug button [John Dennis ] - fix signature inflation, all data attached to a signature is now encapsulated in a SEFaultSignatureInfo (siginfo) class. The GUI no longer reaches into a signature looking for information, it looks in the siginfo. The Plugin class now defines the method get_signature() which report() calls to obtain the signature. The default signature provided by the Plugin class includes the analysisID, an AVC with just the src & target contexts, and the object_path. All data accesses and parameters which had been "sig and solution" are now done via the unified siginfo class. There is still a bit more work to be done on this but this represents a reasonble point to checkpoint the code in CVS.- Fix desktop- fix bug 203479, missing requires of audit-libs-python - add support to sealert to listen on a dbus session signal to display the gui. This is needed for when the status icon is not visible and the user wants to see the UI. There is now a seperate program setroubleshoot_launch_gui which emits the signal.- Add Requires: audit-libs-python - Add translations- Fix allow_execmem.py file - Add translations- load_plugins() now catches exceptions when a plugin won't load, reports the traceback in the log file, and continues with the next plugin. Previously a bad plugin caused the entire plugin loading to abort and no plugins were loaded. - Add "daemon_name" to automake variables, change pid file to match - turn off "noreplace" on config file till things settle down a bit - browser.py now validates data, also test for missing column data in the cell_data function to avoid exceptions. - add stub for analyzie_logfile() rpc call - turn off balloon notifications by default in config file, libnotify is just plain busted at this point :-( - only the setroubleshootd daemon creates it's log file under /var/log now, the user app's do it in /tmp, change file permissions on /var/log/setroubleshoot back to 0644. - sealert now looks up the username rather than hardcoding it to "foo" - CamelCase to lowercase_underscore clean up- Zero out datbase.xml for updated browser- Fix 64 bit issue that caused runaway problem- add missing runcmd- fix for bug 202206, require correct version of audit, fixes for audit connection.- add html support - remove setroubleshoot_dispatcher2006-08-08 Dan Walsh - Fix up handling of mls ranges in context - Cleanup some pychecker errors 2006-08-07 John Dennis - add first seen, last seen, and report count to alert detail view - make the seen icon work, if the alert has been displayed more than N seconds, mark the alert as having been seen by the user and update the icon is the list view - change the schema for the xml data; the database now has a version, there is a local id attached to each signature, the filter list in the siginfo was replaced by a list of per user data, the per user data now contains the filter, seen_flag. Modify all the code which was operating on the filter information to use the new model. - fix the xml serialization so that booleans can be used as a basic type and also so that non-string types can be used in element attributes (e.g. int, bool) and the serialization code will automatically convert between python types and strings.- Add dispatcher.py[John Dennis ] - clean up and rework the timestamp code in util.py so that time zones are handled properly, there were a number of bugs. Hopefully it's correct now because timezone handling is a pain. - change the time format in the browser so all times are displayed identically, the friendly time relative format was hard to compare. - modify the plugin 'make install' to delete all existing plugin's prior to installing the new ones - add popup menu to status icon to choose between browser and alert GUI (not fully connected yet). Several bug fixes related to changing the filter_type from a string to an int. - add filter selection to bottom pane, change filter_type from string to integer constant. Enhance how columns are handled. Get init_combo_box to work. Remove unused RPM and Bugzilla fields from bottom pane. Modify the default size of the browser window. Fix missing import in util.py. - add ability in broswer to sort on columns, initially the report count column and the last seen date column. The date column now stores a TimeStamp object instead of a string. Add new method to TimeStamp to return a friendly string relative to the current time. The date column in the browser now has a cell data function which invokes the friendly format method of the TimeStamp object. - add ability fo serialize to/from xml for classes which can inititialized from strings and serialized as strings (e.g. numbers, TimeStamps, etc.) - add count of how many times a signature is reported, the date when first and last reported, add columns for report count and last date count to browser. - checkpoint browser code, list pane and detail pane now working. - add initial support for browser applet, move some functions which kept getting reused to util.py - add reporting of environment to email alert (email alerts still need work) [Dan Walsh ] - Fix disable_trans.py set_boolean call - Complete all boolean plugins except disable - Change interface to use audit unix domain socket[John Dennis ] - modify SetFilter in server to return errors instead of throwing an exception. Default the filter list on each alert display. - minor tweaks to alert queue handling - fix analyze() parameter list in ftp_is_daemon.py plugin - sealert now responds to pending alerts more correctly, it shows how many pending alerts are in the queue, if you filter the pending alert status is updated, the next alert button will advance you to the next alert in the queue - simplify major pieces of sealert by coalescing common code into subroutines. [Dan Walsh ] - Complete all boolean plugins except disable - Make Close button work. - Make setroubleshoot_dispatcher exit if it gets an avc about itself[Karl MacMillan ] - Add generic templating mechanism to Plugin - Ported all plugins to use templating mechanism- Fixes to plugins - Fixes to dispatcher- Fix problem in dispatcher- add email alerts - stop the status icon from blinking, add notification balloon.- Fix startup order for setrobleshoot - Fix Plugins- Additional Plugins plus a lot of cleanup- Added a bunch more plugins [Karl MacMillan ] - Add allow_cvs_read_shadow.py, allow_ftp_use_cifs, allow_ftp_use_nfs, and allow_gssd_read_tmp. - Change AVC to have additional helpers for matching messages. - Change Plugin to work better with more than one solution.- Fix setroubleshoot_dispatcher to catch all information from avc. Much cleaner interface and no longer uses audit2allow cruft. - Remove toolbar from popup window since it did nothing, and I think it looks better without it. - fix allow_execmod plugin to report better data.- add missing /var/log directory files section in spec file, and add logrotate script- clean up spec file, reduce rpmlint complaints- Initial build.  3.3.26-3.el83.3.26-3.el83.3.26-3.el8 sealertauto.desktopseappletsetroubleshootbrowser.cpython-36.opt-1.pycbrowser.cpython-36.pycgui_utils.cpython-36.opt-1.pycgui_utils.cpython-36.pycbrowser.pygui_utils.pysetroubleshoot.appdata.xmlsetroubleshoot.desktopsealert.servicesetroubleshoot_icon.pngsetroubleshoot_red_icon.pngsetroubleshoot_icon.pngsetroubleshoot_red_icon.pngsetroubleshoot_icon.pngsetroubleshoot_red_icon.pngsetroubleshoot_icon.pngsetroubleshoot_red_icon.pngsetroubleshoot_icon.pngsetroubleshoot_red_icon.pngsetroubleshoot_icon-symbolic.svgsetroubleshoot_icon.svgsetroubleshoot_red_icon.svgguibrowser.gladebug_report.gladefail_dialog.gladesetroubleshoot_icon.pngstyle.csssuccess_dialog.glade/etc/xdg/autostart//usr/bin//usr/lib/python3.6/site-packages//usr/lib/python3.6/site-packages/setroubleshoot/__pycache__//usr/lib/python3.6/site-packages/setroubleshoot//usr/share/appdata//usr/share/applications//usr/share/dbus-1/services//usr/share/icons/hicolor/16x16/apps//usr/share/icons/hicolor/22x22/apps//usr/share/icons/hicolor/24x24/apps//usr/share/icons/hicolor/32x32/apps//usr/share/icons/hicolor/48x48/apps//usr/share/icons/hicolor/scalable/apps//usr/share/setroubleshoot//usr/share/setroubleshoot/gui/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protectioncpioxz2aarch64-redhat-linux-gnu ASCII textPython script, ASCII text executabledirectorypython 3.6 byte-compiledPython script, UTF-8 Unicode text executableXML 1.0 document, ASCII textUTF-8 Unicode textPNG image data, 16 x 16, 8-bit/color RGBA, non-interlacedPNG image data, 22 x 22, 8-bit/color RGBA, non-interlacedPNG image data, 24 x 24, 8-bit/color RGBA, non-interlacedPNG image data, 32 x 32, 8-bit/color RGBA, non-interlacedPNG image data, 48 x 48, 8-bit/color RGBA, non-interlacedXML 1.0 document textSVG Scalable Vector Graphics imageXML 1.0 document, UTF-8 Unicode text RR R R R R R PPPPutf-832855b89d6cda6aa77a00924155496ca6196575fed34233fa53e278e94da53b9?@7zXZ !#,wI] b2u Q{LTC𙌖-60ZFc:s ^W< †4siT*3uF x2G~LU`T/}9!u{v=b }[^W)ªF$TzGDFsB^V23"5NAPSW7sV˙極 0#[qu1HB&pyXMo}ᷛ@#Omft>#im9GwqI@ʐ[RW?,V{]F^E[TTՎ %U1nץߚ)9@h = J*޼GƉ70PwyN\h_Ǘ52 ;[$SqT^/t&SȹMjF`?\ Zp\(^u?!F>4%|V)ϖ3ެ{çG&oRs݄nWp%zߥBFf^-4L4:T->yj} XTaUvؘ_QCD 2cB)ivV,ckx`WwiwV'e4pH4ʓTr?+o6jZr]F`Wѕ]Ϯ"e{;M QfXy0? p@ (hbdFoZbWxȫˍj!VlS1L'1D`˸'FT rF{k.V5SzShY~mU&) HzVDqp9A {EynFn)"(Gi^mhZMD88[%bu5o 26cSr꽯{Zp=0o I&R4,sr54>.&h\k@"Wb؉mܕaGya!ItgQJ//mdrI ;<hUɾݬ)ͣ: 8~SHVHSaf쭊㕳4RN: hb9>QǦOȫoݰ+|D~[%nω@ډz}4<7h`e3ߪTV@WLJmҽ$E]/{5MprX*Cph4$K:J¼!ܕpHJ8=wg72`xl\[XPUiN @&M܎Y>vjmw~(R`p(zb#0j/`Ms 37]To. E%=+`՜" T~X:!IJ4"QӀ5gmiwLwGg'Fw -a3_LRz͂ 9'F}PhlSS gR(ӂ tHڟܢPrcm:U"IڃH#Qvm&ڧ#磹҃| x1cU[KO|t \؏͆?TpO]A7"[ 낕>:DsNPxz 2l^q`tL.bM-ue~#/% ίnvSӦ[7'B LJ[H;8kTVo7|!Y x͑$6~_,C=}ZRs>Dy:+4kk{Z/710Xz3ưO35DKje|f Ԃꜵ09d %(xmd\xBw3b>V k jTXf2e FY[fuBŚ!Z%і'ԣR|V^@kӵ#.YԪp(^,kZ). "QoVp`t OVuO6HDoe ϴC ϢWGrRSRO c׌}!4q!" a2'/>hw_~ZZ8 +/T qdqIpYsh 6=S^2gxàQ4Pwh,u̗ T@)G`w {3% m2_i2$lma\O`A8 &2$1G@ʭ\1݄#OyVWNcp,65[K&#/5w^d{,sVt1]/o0/uf6957C) `Ա ׵C䲯a(aQB^3^?{aKm9޶;n*e&ȉVtBQF0%@@7& -)ڦl)vf̛{?{jiJԑ+Uay~'[Eq3(+ f`Fb?{bhNmBDEz˶MuDіcYh=Ԃ|BM bbɁW>ϖϫ]߄Gm?zGl/ևlWn =%oRXIwZ@z fDW 7;LIqi`2±cȈ˴9~4qzb0fu_^6E< (i׈p>nW1(㣵ĚVR<Φ%x% ; 1d?R>>%0"vBE zO~'jˎ/زE9x<F5?_0ivtc:ʷzqa_$3GB棞 bclD;oi5b/|?*LF )ޯ ]?""[ǩA^t`Mg[aY0@ kup+iHИcu*\-wkzT̕U.//mL:+y ! ]+E7Xܧ TыQ&*Ykx,`Q;hu PEnMC JbUԝp}~ިٕpB-vrm]>L"_ޛv WsYL5jz&R/2VҌv 0 ?g6Ug}L;8v7KPgjdq 3ah(4I  PP^.wџ;FyrU\@xXM&8f@V<[HF*,Uf4)l.ND-7 8Qt[M Z[ BՒ Gc|ƻGПg`ciEJW/ľT[N&4Nv7;h= P?}2ehJ'@hoޞu7qd"+6!qXhf אn :K\,J d2p#MYɧT<}ϻsp> . Z)ǎf;|N)PpmX4_=uc\j 0&^< Rx\<4A+:U.@0FRG6Ar ͢f8}y3(9L?E#yBfbB9_Mw=w!o=>|7O@*HGT Kh(l!|{3\m&X8v=0V<瞄 * !+?x35/3i&ʾWtJHCOGXj)xat 3n֛UHxU?m 8%}NŢ 0F%NSАCe"]Ù-?rynTqɕ?m"N. WFFq&-#ǏOlJg0Y}VZR,t̽Po'8 \J韜f)*jN? FR9=m!f5ҩaӼl[cN_9`u$ 떂-|'P*3=`6`^ҌB 5ע_}8EM¼9_+ e5 z}.kq^ʝ쨓VN_nr11R}}goH8[#UJot 5u3^Mgʃ%ݞbsL}l UgrhkB*1q&ic0+]dResF3j#8,F TVH6XHf18(7 ~OKd=ˆCmrKGǬQD]CL`H Si}tME,Ŀak%bZm!yP.dP̌U7hZr{- ц5?'xv)6#(Ʃ&) 9G%jz'51=DR^΁pXO~noꃳ6bS-&^ļd R7m#|uLj1`5Q4N]=4r#I_0~FA]gs=yu7e1*E0 \U(Fv6TDбfESD}&ev}#q븉gN769Gt=4c(!Z^ebe3=qcKH: G&?fZُ:@k^Mr5PT$s/xAx]JX7[q^.h Oi`$t4>`Uɏ|Θ_iqǣcm`U^=oii@|m!cL <*C+Rx'RH,ԝ v@ Kd&2_5kJn宍-׈IWnbm."cJx< E'wɃ'Cχu%/!%KjB AÃK!Zo{x\jaR[k =HniI˝k8a*rD{=r.5nIT,xEN6<&vp=^vY˼hɯ)Z<3oubHw z֓J|j;)qX*)F56qoAWe!a EF}AjeYx^Oz[/-tp Y *1G{:mlAڷ*mxi;/Ynyl%Ĵg;HI/̘m(\%Ԏ#'}kd1rһ3ƗitYq^t|ߓD,WҒTu01TYSC:av贖)>Έѫ n$-dN&`D" ޑ3JED< ⌗ D2|h Iݗ`UPYr0IhG[4z}yY 8(!hgS'Xu 8¨cLni z\t(%\/.[W;SGT!ѓz3TKsJڠV=g E*(~ˍ1OezC[@FI7jCxB="w} օA~%,0sfZ쾊mA>=1UAu5W7Џ8L2,.rL`֙[vNx}&g+[L=s_.4ᰶc- X,6HZԮA ,"N%Qޜ2_VdRyM#eVN+;7׼ǻ˘A%#;U]ͭ~/謥b< ..~MH@kC>a4I&R@p\KNR?`; OU1$hӨI2bh%1zQ>(/˷>`N41 I'k'e4+Sv-9!JU)kr[O UQ͝Gè0h`]"{wa"0Y5l%2Ŕ3~}b6o g+!~%rxouVCi~^/= uJ{ HR1Qp-%B=4d^͞/+MNyRHPMHǏެN<;.ڪJaSOQET X;=xd?t E-Ԡ@:,4:ӨdKrYLVynԘ=X4 $DTEspYx>IKhe=+k f1X̬ڷr(Cxoe!_]qvY4f̱5ǗPG]RsdVF:Zwbv_kT.֩4',#C&-VnuZ-kco!A!o+xm *~tmȤI|<%΅FIؙ,'' Ԑ cpۂ=;\ݍ4פGr{±{؋.~%u-d!29{q \z$udRƻ\ә1H[\,c3x,܃8xӹy3׮tOqIEf⬯J$)\ׁ5CZVV@@}ة7#2k2kRӜg=P.OaQ|C7/ISmjc&?V01H=hQVNmc@Æ 4Ng,4́ JAt;_[A0R;F ڤ{@L_=ϴ9>8s9Y }Ia](XSNz+:~}+LШ'Q2(~qD7 QOV@AS%xcɱ +˛t6g`uTFiWҌ1 &54υETlopp8壌t䪭$xeCnۣl8D BcV~*L.4HYʄ*.vFrI㦆U.p.(ՖW{v)گ8J͇֭E$ J O(JδF' e'ȂP :9 OQS=_p@?+޺K渄xKN>{s8O㬩js˝Ϻz`3S C \T|b6Bmi-CI `ʲk~ŕ+"&C^/(cC_ޣ?bI/;ê5Ag@q멕Cb }RrMtZ=9cLh`*mcu<VC2zZXD}s2ssJ%.Gʚhv$յc / 2p`2?"eSNO΂ֽ_~>~c肊/q nq]&C5NANǠGCd%QKN[,kޢFI.bL,>c#ڃ~9/|zJFĬb<bFbX`Wۑ`:v6VF-)#(~~IjkiiӖ>w8+v`y#=Ғ Ciw(<4((Z\[ *q YdW9y^4x7ܷf gF17}e*.^U;TEki>Ϥe/H)nwDs@zd"pCs܂T #8չ%x f!?aE#)KR}`OZ ^/zO[w-ky*|hŤPԟ6}Ptڌb?z? >(_A0e:;†pb rǝ~W$om @32"jm.auFJ6[E-EpJI'Z+MgCHy. ܘ0[* 1Ʀ@4|VNnaNJ0<\yؿD[3;wvolĿ?P>BH^nd&E|{*I K ,i,N4e%{Veck@[ۙ|(5N4]co3&0Z,(o.T|Y ~w߼.{яU?h@Fn˰ MuGUjpԙc*dz@~;!X,Rնg9{wpssN䥕 AdI嗾/B/nД80~X#䉽JG(#6?gt 9d>ނ65Cq ~c:樱CwB{P`R7dXp;v#qf m&ӈXU 0R FmgyefOU` Mν "@kcM! t"7PknDҵ.vHHOd8 I+Rsծjg bټ4p~*iS ez^HRYkAhC7;|vdXξM8܁#EY5A⚂c?~D!;Yzb4 Bu{Jc2<⎵#<]{[}Nvmr Sf8TxW2E+ZonxFSN` Rb؁UeLp#4y` F[:IFH_.\WBykVIU%'_%>x!%HHxUBJ * z9c7rse+}Z"LY,ԏn-<ڄds6|4Q-)~6DuV>H>eʈ8JNЪR/yQ[Am[`Gxw_Vg\LcٳoZh> ݚRޡ+~yjٝ_%^.MLF|o 6Vzh5%^J5Sjkޒoz&J2L!'|,T\Z_sx4xqGV"o\mFI=!h t k xSp ֓hV%:[cpw#ImO< q&ef&Bӵ_ۛ+lB`DfOb=B׶K;U {PaʻOg:c>ƥb D6_BUdWN|mFʆNA٢;p,k~~޺=,dc7beF'b0un{H->Uc.ePωZBYRat,xJ9@z;o&å$ߒ1['l-4P yoGi+nnvO( BMW&wM$L9.jL2JIkplګ9t[/Z]X~JJ8e?xeUflWBjswJJO.Yͺ2%)F3{ "a;@'z6w!-ߥ<5^u:nN\U| YyuXFu1^Eg^6k̫5dqYZ0Tu?ΉE]@XddJ G1n.F=g~\ed ջ`?+R֔\jA'OwxKDK$a$0D,v$CCZ#>?F;@WKI (n?0'YaޕZo$d0ZZOL$_M8Dg=Q۶h.PYJ,rk9٪!SL|-%L-@-?\٢I-5!VCUߜ{Ճ*Œ@0|RX WP`j{֊މM 4վ8ƮI0,@jGS'.oZބO~eo85rarwm+ƶ*Qزɶ"7v)0` 좣 r!+axVO -_m@r"ZĔz{|=)j(XBDm$ 㸝粢o~@g=VِlQ3k/ E2S()y\Q=Gopun0N6hڛqE !"oh8ӷ*!'6L-׈)t ,0)TOgq,1 |,#G1KDȸ%<i~Ly*Ğ !1 &R[vVO,L=% Z빥IWUiY:eo14nS~!Y-&n}V"a#OkT([&XVL81x'B2mz/4OU/xM m9b;̴vjA׶zY{@_o$d#5vuܰ&5EJOǻ$z&L"m4v+1AyVM 3) `A(Tt牥#0@LxR}y:zi#JY?*AExP1Fˢ&cuBC_xRaP\~' 0b1%F"ֺۢ)3p\bb".2&Se6v-i*p`9v;y/׶rܩJSP_sLn[̭'x=K\EC1+f|EJv)NW|K|d$֥ND$&yu©cDVk0 c;Zv͵pO D 0 ,;bFٝ̽p5Rk0$ ( rl*D65Q,pb'^tS܈RNDžC3BH[6pNCu/"E\yXJYԝPM b{13qU,:I@q.94+^bJ~κ99eQ?E&3} hTplU ahȖy]tR.IwN{/Qby(N 0N!dJ RT8Bx$~eLJu(.XR>@:؉Aw³V a>~^DBP P+!ǭ2Sm؋>NY<-C{M:~w8 =_;4-PEpQL f)c;GV";+3/džb'*JHR9{\%2?7m6R*B)U;QE?,db v^DP. xdRRdSɺb]Є <.Qu+ca qdvPKg٠*3rT mI+x/t:[d_%l<^DHS={D~*GE} ލc΢Vh+ZsI|sZv,b>@F2hT_l̀r,$N bJa %B):."u&y*3u>_H ?v!'rݚ_VKv1B=ckAo:ca,x孎]vB;:QLlK19}5VNp]?|1I)ڃ^BZ 3XoȨތkgդ c xJ?u3=ik8Z lvV)8I^>V wN{>4 d9ْ99E:us8kw_=ΣPTd: x6,e`ggV6)3# (-4yT 3$}A=}^ӴPh+Y⒗ :KUMr Hk1(N}-"u 8C`W#0K8 iI\sK^8O1#ϮCa.0fV Ȥ0HTؽp-|B_Fk=IG= ~-~GAe[mhQU&0Z&ԇNy],Q JJh{ X7dQns {BMa6'FngQTCp*gJ*};Uh`//sO߇C'lykJes?w50&LNYgb8Sx 5cɧU^'?ɌF HN[/yC6T5ln0Bt,HeDFʼn&]1 v^:3ꆭNjШujJ=GzGZ^?^@Tmwm[ Ѫ+=H~ri_ j< FsbX'Z(tqw 4:5NIE>f'-]YA߱O=Qw uE2n814aCk7bĩ>߁'7}YI}y*,"1z-B{OW),5{fIpk`h@~Eq/}ȯVrߙ?PǷ i/0Gy חګlatu鱮'NӘz!e;憄2mUNlJo~-(Rl Bݰ˞2Aܭ7I')ի];hP9>(^dӦ꾹\ bM:Dߦ$PCT4U LNC8o$"XL ^-XZ('K<](i{4`N51ЗB]/^CEn=x%ں!*K3s"q/;cGm$.[Mqa 7ߦZh9D'껇89pAs' q r'rc卥y}Q+K1'#f&%ʭAt_.z:]<'P"ćC~ޠ0˰ڔ(֦Th>uj~!%(M梠lG)\,K : } 9#Įtc+) Mمe=0h?BDWl\9H3-Hsmm6,PA驗Gre&IIXv /2fVT K V><3c4$cۮWBOn䰊^0u#̈gJi1`%PPtTxY(#}5'4T1}D|nX5';$y.+-aF kz1D(%^_2ܙ>Eaj\$qQ*8Է,GC6|+;P~ޚQ;T3; Dz}}vC͉-pw1w3NWyt5$%:^c$(Iϓe}?B͙ vɎ[B^Tx h R{  < 4u 65.2vydIfhZ%dDW.:7-z^u;=ij4##+U.V2+{ 8!&QW.MlSe_*.\L{DV^m/D9>I ˏvW4mq >#JCNk[4q+oZY?ϫ vmLy/>!>&7$FŤ}[eMxQH--6B*TǏ5š"#@S(my&Q ~kYȗ3ODhgoq\ɇpf9QX{Wo?PDn+LJv}]MB圑?lWg4^V'IG}XED%{(ۍ71miǚՉ) =kOnU=}} CNæHCecbҏ$Ъo3tuS>cbͻƢQ4TZQ0ǁBi0ǒl}"5ZK0nDpUqccɂ$lÀ gCyFbI(rqv;?"kbBİ. p*6]m΋EiW6H1@LTgTePT2dqVҍǘSUy9g$ǃ-:Gqy"6nG1ll0~V)BOAN,#WZ(ccY j\Jga;EkDՠr(e@'wiNd cW1ˏCDMί?)>|}XZ{'w&g=z E3`L>i AyfS_8ˠ;%CQ;|*$\PTa#`Qwk_6sbe<$97)ǷLr1;E2" *R>+k]CXg)MBv$ rDH%z 6@.CS0@ %l-F"lJ4t@+Yϸ;l|7@E%q<+[ߣr!m˼FiE_r:ٙ oI 5 ́7m;g棩K4H49q)|dC"/(E{8HYEu5|]N@\0.P.P#/0>w롚) .L9Iӈ<Ym_`;s"7ౠ+ʓ8,ԛqvsб;ˁM.)hp8_^hc39"ƒE `|8ުfu<#QKWw K &1r%ytoHOA=U˓6.!Uڋ8*4a& wNRL5qd֙" 1wKRs κ=.F&z<"-T֕:|d|'=TR'3M}mPޘ4@80[bhm`3vƶ&:kFv/t!!HI$ IƉ*Y&=ܙ.ƸY|?zȸϬja5[ 3|P!]8l7.zAp'Jf(P\Ecf1GwRXDT獒^k#uAU}B)&QNS^hVoR+~{0dT7Bec:%[vmN&ƏW&Ex-S( b@c[ĝTc|7 8R)vB ۑwhYR,/S>rRyxbS)$Jo M6{oפAj|Ӕf9.RZbٗuOJ2yD; ZE$/ZK@*lIi! PC<ȉ ._X!05Mڛ{n|nLdƊ-[I!01frMm!80IaU]n0؂_wkI5-EKM^oPC \;X|9AE 1C5KwJd04CQ$V&dȺO*/Oj|B{; C9Uڌʍ0<-5h|r #^)g驏Go)m5AV;XK )=K39}9wPnTi*3"R63]:Cfx88|}ۘ\~ Qn2 CDV*!1>s B2*X:Ƚ-זQ3="27>DsT{XD>r˗PK,_'ڏѴڰ)V$elщQ[&lfEC1{ąSA!2uf %BJ˳砸@;n3#N*FS;# baJeLLzjشpCqnN\aűP/Hٿς+Z`D7]f+ áY-Ms@n 돠:/SQn}W,WVWZG# >f#+?v'J@:ӭs&x[2ļ yuՋ3 h?ntTZ/WE[6irћ 2yۆ Q ePv,SGɭ+5aEBtO5SIܽ  _*?1 ٌ (Vd|3dfhZ0%qECɞ ky]x&Ba5K [U:0*ދK"(#Qbbz/1P$zJEX*c$Tc=Q ]X3?OA / {}347ۺ>'YlL{B/,t38߹֌g壀{xaѮ{(<6̱ i%Fs-> ؾ;F%GY>`CE֬nCJ_uGV=Z%2kug} e)d7q>_>gҪM`~]g ɂۡ~Ո k=YKwxBüyˆt?Zȓfo?!ȍ'.O.{>+ 2YaD:Z㙈mY|t^oJ9{2ȸ@{cfОrCCE6r*mט+{)4C.%I3Wk N:$Y(ZP+dSzy 7ge?CxPJX?} 4ֱeRb{|Px03̹yϭFϬbh1$|\fA- DJn#FQW'Lp//0d#Oh^U k 5` ?E[M qM0Z&.QcSWM]_^7pL；4"ȴB:KLWLR Q.9jܚn^8b˕If/$h7eI`J&*Ue3SxɠUtQȫ0_ ;H[ tXU3f47lf@k߰IuX g(Rƚ&ȍPrΉ] J220Xx+F05Vȴ ySWR7gO/ |Vb8PAATz-&8LOQ>v:y;ø=ϳBѣ_a9P.ܤ f/Pك77ÅȻ#Cyg[eo+diܣ!B_f2hUQ<8Mn(eeuxݛ_ aQv9ߵLJ-&y^>^s<}\=L=45Ak?Ǿq4"%Ym\it!֖*߁߲O33d@܋hG@Y.uz(D~ɮw(E'}rXv\YږN!8`p^uyڐZ&2`n3XRkCxtQ5e> |s1_7,cB? 58Zz_j$xP<<(O܂62$!n'qbӢr@J#r;}*V^A#?OG)nq|L ^mߩ{hRbӌZ ~iϬ\ii;XKXdF-T..+S yFOFS=ЧS (+#2O(~Dh)t(<[.do z!p O CVT,i!g <]̶NnkbA3GUƪ ?BKcFgbL{qQ~Ra}@v(W*hOJo` k :OZ}0T3 7 PWVz+֯qgE6wj73BӗBWv,9kiFeRyRC5u8;MPhﶣ`]3zJ#D{,dcUP׆ !4_s%Bċ ),,hw]ݨl=D\4e0ҶD7^ډfk4%3:YmJCP 4}*u~ѫ4UC0bj8v:X1vW?#͎тaAKxᷡ=Y;J>NDFzcC^>-aѪE(AIE,|3iZ6fIIw/#JUςn 1HeCbK|3 ? nDWKV=om<)E*!%H +, h[6l90S vm.XX : eA^XU&[ʔej%>9b5Dt4E(ạΔgJԐV) ;̐ IEZL@lxYapcXܶgTA8z>l+yHچFRD n6nJggOA3E=I'=~{,0̂?59*?a3i[ r8ܻ;k r)[ `!؊8kSU@k ȩ#ץ$byUc4!̌QQPbI ,z Cj4R}hF _qC{:57 h+_r~ĺIš!w ~Eiv\z?狱>B~?}5WxF68G얬2cAJ%'ſp p'_'fmLXtSs*yKRb-}&/ɞw繾N.=%^{ =\e5BEnY2tm*ZyV7JkpC_B+d}X_ZOxK+WnڿJ7!*`? p%0CШN{vEk~rLj&|n;m3-;2z`4*yM"ɳx4P9:s;3٧9ٳ7fK*> rOBr Ya٨HTbG.X) *d'-Ux,\L 2r+~ѶoqI "7li#tՏ U~_e׽[45TP;ɽ:;n 7_;**7\ʆS_\|,bQ Cϼyu\,0_qm%=H7 GJ[ϥvu"h5+8jLvafkdC2D: .ytLV*D(628-?aUAEEftji*ZbÙ{߶=bp8&z=9MTj|i!]B_-"vC p҅{3x<#$ SV9g րK<2Q kZWRӞ, P!BQd~e%H[m˜*LIJw&/Ci)f8}8|,XB2@'!shώh̯Ȯ=w _AbSxJsZ~[I읬-K Y9`?ѦCT!QɃ+< }DX:?xAsh?o}N^ eYК֦C|bL Qf4 dRCI2!2uQj6~wᄋlq֧,aZ*2&?/@)ni jJF޲^Q2 jmG#]yq(0."1zPՠ+FÕEc'{n Ξe"ܫk VTqϽl= .}Z7==ڍ&~rX3Ծ]i29ҌeΒqro.f@A~ڠ]_y_- K1f&ۂ&=o({B~6Lod۾π?3uHFoV]'@+;?_&igL+0G)8p7"O%d%7Z@ Mo~\B0CSP^6& 5x14VyU,`[LGV SipD>G~-ZMFƤjmJYuq?GS`^y,l5f)G4)>z .6/`GsveobjR}N_6ФgSb.e*pLeFev8tD7FSVv]2J1ɁU@s1 3ew{G':Έw;MٕyU1|2>TW(Spǖw3 !ZQ/,?ZofD)z.J]j{W$;ߩiKue})Pxkx; }pWTe9%+pCbo:3n[[- aoز\?`m\D>>P-sa\n#+ΝaRS]C٢8Ԥ)KVA׏dy|~GxЃ~Ѣ|beW^Lz(>4rEqn4ӌ%AU*5B7;!/Q ;rt'V%aC5]C3{)"K}|X/#48xŗLuK:~ⒽB%WSF7[Yl[wMK]]Ǽݯ5jWn*=}%5ԥ99kL~9Zaʀc/8t2@aIɪ=~)\`b9ixA=d!6Q7ۨ HND!UКL ~E J|k2M&de4[^[70F|z[|hN*d?RFuw3] }fD:9%@Npb xY69 uȗ L]ŝFvI4'P)1Aȃ qqKߛ'Q|M,I^=Ր'qɸᷔ؊LwT_܄:s>8e['$M}ڳMu~|;k :48=`N4nFc Ċ+~Y\<0RF1QT4}['vA+HL'CdʖT8e3ҫq9> F+ړUK0B rџ >ΘaaMN hь\oxY WSV'5ېĜ##UƱv:LLQCSgݲ]gk6-I򶻐}nLj1 (pCi0r(˄ ~0xȀ}|~nj'#5Sm-,#Z`e9q _Q,ɜTwe=)C"p8 ϳ ܲsI||ەmxOZKFMlXtRi)S$ShB9PU^\Y; fBTS]A4ݨTIkЕXa%S:H伍5ֹE%ةhmAN،b(YFsUN*&FS&+-YP`\|&+ C yY;bS+jK:%s[Pq. 襈&0EjQy‰VdrL'Y-1$Z4| H+!I,'dXiqsfϝߚ3ˁ2q>ݭ sb;gUntɻYHڪz'Q܎ | V?oMl79_֕\,M[eK-꽑1RKxItz;};loVpҬwaGE'pկE@Se uHM dlJfNT2O5 X_ZBdّׯnzꝦ% GUͶqO5^nQ$$-]  <~,eB:E=Di`05RXS+ye"y/d2\Əmxv̈́&%bK#A j@R2qre6_q*s&l*[z.mIKNt @z" ulj3/Nm`~L(h~`,w^#BIL1 'V1)OIZ4 Q,g#a\hTP)I; ѣ$rk|ω0 NbpuٽDAX] E;,}Nd"TYxb6't،0ӐeLJK :sOA[g&຿ x78-hE֬'YxT1 # =֫{ue 8Rȱ?jY0!UItТ=9Tɿ#fG s'_3in{E2DdE16O[i]Ԍ@ ` ޻'ƞ "EG_@ѵI;4X ?u1K6%&P] _V"X-pG~8]x'Һ6G~Ckؼ8Jarm%Ԑ-B>lZDvu1қ-Xz?7`Lbcdސ p41I*ϭxBӰzECtp t]: 8HL{A-f}b1h@$G]p]f3 \ScaW1,!wH .51/Vt \8 %Qi33(J+5y(&W$A7|}fS..@݅FƧIS:"CO\GҡH&+ōp/ZF A5k? n)h)^$.uQS bhR 4ޯ:B $#yG>RU{6a=s,Ζ\D|7!ZP!l %|ܝ =Yꈙ9>}PۓF6@\ZK@!H1%!D)lٲmajE*8ຽI:04LBM,|,̘CTq1e^0F%]~znH&7sux)ba}AD2ѴqL@eZZi:;wUHV ^}&thI Z|CX`Rs ?NjuRIkheI xХ2dvAk .xH" ;J޺%'xOYN@u#`9łY31ndfڈ:&Cfº{1b`xDzq$ٔfo(? ^8iA:Η̽)a#];~l훦M?6=L.O/D_?%Mz&z-HpqފÕ'| 7gh"DjVY]'`fޫ" Ζ6"$+acuy+GX/2X!ģ9])t $noPI&gW=,],*NHԽ#kr„ 84,j3r4Gre`?%1MJs\ =V0QZ ŧ߄"]dda?܆0٧?Xk7Ӂ7ou,Y|h+_׺6'"c|0l}ҁQKR;ۍTnK@^eny$vK]_3(xgq$2>P=>gʿw& V 'o0}J^Z5_DU*| 4e12 7]sF zb4A UVݪ|, # ann ޮa l.= [|O-rր rck%!yI&36$Rc;U*u~ly?~jgcoN-">^ t\R\SHar bjʉF ?%k:ү@>9ٯ r5f1bHw``PyI釤?ԐgT#g{^I&L'6GԺS/S==r5N4_:De8ijYFl}- ,9"0\WBI1)$# mdaڥXi*߀!kD1LyyZUjeKqA{+ [%HpP]Qn=S!x\>_(áW?zCLSΑAjT=צ`eoblȔ%2Xw88[ b&w e &vOzWxr >&%Ys>$Wc~M5Lҳ#hHcN *,G".5{;01 WBC62,/L9} 'afn\*)]'Lz>U5^ROJ6zs"6>\HsbފӂV]E&t $-/%bȸl/b )-u+ݬZת}]CI™j'1nyy Sf?$K/K#AQGE7j߿׎ywјX03|2]f|02a p RHBykZ=ŹM.~ؚ_ 꿂lV cyKh* uBYl?l'R_8D0_2}v,G6˥"`+)c%R>Mz ?QWY% IflSKiXD z5?mKq4<늺%GT"kh[]B֩Ϣ6S_@s\oNq ҖZ~GvT]5ie2B*G}ъv lگ]=Gk ܙ ޤZ^_-cת'RhiƕN z A"H\*JEU64wVq Sz,.iM =xDj/S /^or86"@}я [ycs\z*^C OSKdSH'"rX'D*TAðyp Q 1|7Y!ERb?oV,H%j5s =[ĀD0;n nك_֡L7 ʧt/•L5 k_T+U6a%V*r>blY5v&Sn{!_-;jrKN8B3W3 %'n=5-d&?]E,k9󾪉Av}ǥ: 84q@G-#0}\cCӦc[mu`.zo3g}{3lVɁG{UuYռw:ϺӖQ; JH48,U=,I+p4%ɏJ@u' ` Vq ǭ vhT%B#t} ?=desRV+Hn7\TPm5kX8-i. He QAPNcuin\D2}O0-&C8h@'I:k;m;?X2= TL_TEW6Aqz^,j e;T'9|UoM piVZ$:4<)6TxAa4*Y!`|RǛtsc=rݘG*$?yUtp;GrV{ fI8hDuv0[5!WceͽX)tŀu;gFYlry@nXՋ2OkaZV5g4v 7yid_9~NF}a)V[ܞ]m~+ k'P L"Q2HN#ky\ZÕHM `D^8D V?a s~|+(tkĐ SCb@ߏyEIxcfVR'\U<3rܩhw6l-o/EĄTRA>rXJ%i*,$h<Ͻ{FG{5kα&̋f~ /8 4N\q$t)~zzz;m& Uu/hܯw\ '$}thAno]G@0&O /?}|~O*B؝ 8X#ExBoH`ċ۾B{LpYyr^K{Ͳ{9pvR=A2ۥ8q`wnnXo#WT _9N"ĠJ7QE3isW] |8+i%__FE@F"I~%;׼#{Ao4պ1>]Dz#⩎y+Np@!n-Ea2xԽ~䶯Ûv!ykNֽJR]yT#\ʻS#oy",}@m^A5~@_RX0TW与OCZ+nů D1Fs u-*z4KĶǓ 4Iٓ-٧ Ɏ0Vgkx\Q8S!@]'xAZXG.㡢zo sX·7Y+k|nZ+qD!Wl>pzr~}jU-.\u^|kFP=G=sz_qMf$ 9D_7I^Я|ZUh(J+ZK|U)+CeU4bn|o~RR/ò)F2T͉7 > ].0nDJ0Y2 XCi:e]/}JR:pNUk/ - a!>Z9Qo0@sQ3ESx>EBfHsdC1篁N@c!XQg;p/;utKNYG& [д䄞eኘ|΃^ئK@4l5쩋2uoYы`t[;lۺCznu\pvwFA&LMT}lJ%%裐m|4DE^J=\:YekXt5U#=e+&|NGpMHĿ㗉WOzݼ=xfY|L_@dF<0Z5#s v_K͘Qŵ@h=aII\1/; XQ [/+& #AtQljv%XO_p Mt?2Cd}*ׁs-SY m&`֧ePl2aMvfO8"5A?µ @s,q;oHe:Q IoJe_jYYzҾ4 xAgEG[ls $VɰsHU+>BFT8>,q14nqW42F7GO`3zϸ5qї`Qe\aI;p߬M3v-1i_e[:]M Fί8) E&anҿ\)C۽C􅊯^CtqJDC&W.zgVbKXoTYF4 }wOV^En^,-_HY1Us6qTi+-eV5(1hz2ҴEM'-)u- ́yFBi& 5:Vsf 2u̷QYme#xGCvʹW WLB ˪GmZUʥZanE`쌮B T/`v*BԂ*FUcSGE? 70o?DwK9D+*=lѕ"z9mwFI (`* $s g@%okz/796z c!\UОU#jQiuG~9ec+ceiCxX&qwBNmS?f5jdRTI;~ jڕ(BH8*낿q"+7&耋;4~\Q4&yE!AL2.g}+Y.;atZr iUV={#[O|{l=GL Ѓ[,-w!fŽMۍ4Z:37-rO pɗ%3\W' AƢ4j=rLہeRO{ӭJ/4OuNRCQ"wo:F,Rɹz6  'w&fBL9hѯ2ؾOFfyl4o̙]Syf)s.8XVrOwԍo>4T iw2 hm"PxUl* bGŁm"?EUe+}/㦰z2B{`𻵫;e#Ÿ5B%Z7CBl7/9n^6.5ֽ {i;h  `X"3{F M0v`5Ɏ4c|P S:MеNd!UǢ?OYF wF 6;JW*&"I  ,]$<r3Z|HdK~ `h {0Bu@tEuI)Ltn3ߚsW-9u͊@XrC+z3-b`>P5#?vչ&te؊EĹMVLewcBK2{+$3ؚE YDj4 @LxC1éSs̏yK:iPܟ0 r|BX\WEdDOiQryy,naQ C]73F; .n*‚z$7Q]4aRZMuai|;Cϩ-ؘYLb>aCJR*z&_}ӭeHSe//% f L&^91E9\ridRHB[ lN.Q\B:\P7!Kș`*NTimkSqcob Vp_z["? (2 ϫe0lt kI `YI=gxOU0YjfB E]  yj;7Eߊ)Bǥ[9t/D)+;pAp+aBtEI!WEô:1Y%Bn yWT;9$JLW4qM-@B_u OFvגa¥2Lˠ17KF' c_Xoz]dZ}WP7< ѐF7Jl9w}2$ѥJ~}V@sUtzÁ8~9$̂ 7<ӄ TQ4 S@gO{Y$~iT2GX *zU"9!l-a݋-8StC$/!J}/:bқ PL|e#繣lhDϫNV,.Ξ\m0-|A; ^FZ 뱿O0A @EE[xX\#N])#VEeM0d5QBR?6^2/R|d ʠUPCڗ JX!XG&*򆡈 . (Dd?ד_LFZ1S)TZ- 3F _]@^E*ye#ئ83b>:JzɐjP| ?Z_lk_j^xuˍ[edҥG'^c'} CjP(THcBէЌGdRzkEыJf%Nr' =rZ)kշuኪ,2n)oY%]~+xϽЄ ic-RRXY1n61F4/ I*a]?$QͯHWpCHOwZ2 fj^[&≑JF:64aDV>v4YL^ȗ$c^Ѕh!9jƽy> *Ce.'0ߒ~H[}CH[-hJxJsl1lX.$ߚe8`n?)әI஧J4Ai=x}曶䓃s+=G X@KWxȓi6;ؕn&bAе{UIoZt|")!cS3d%)`(C7QJ@̂Q)plA<#(k<:.]H:KӸpwݪ;636il|0\)>V^r {`ȧH-#@ |W]1@ .ǺhcMaP=IF-T 1f8fXWBW* MTEptM+e!5NI:}8]~4Ya/^'$pi"xKGKF.mX7([_9OE:=* ЊCQԔ˅[C8rN~s+ܟSF^6I6, v/AّswZp% baum:R=tQro}h7V=F/;-bCJGNphҸlԄH K_ b7RЉ%kE:FQc®w)XOѡ?"M+N'8r˴ylH.0d3 l|Њ,Bm3`F<7ua U@؃YfT2ce?ef4M$G,Rо{~b*b<8Lַ՜%r^GC>{@7bFt2]4^IUI6YgapgI J:6NԫyU/ɚnhm`QR/#zkO*Xshb$HO3$5oY`#D;BRYqIݛ&XmޠccC]I6(,D'5d C5OkrBN[ ]P]ppg"Mkdm鮰,UD*9v cI)=)0͵-;pnzqT"Ze-܀`ވ=2>-̤gV~`w I7xԐ!ͷ( >qef,25&"_MxPzWzҺF+B1욄c?yaer1`̋zw9iӲf!9)s‡˽N害6 ^ 3YIː 1{~=Qūhz*Nl{r !_ >͓{/ʷ͖._9:hV*Itp_0p)`{yid5V.)r|I3CAq`@#S 1YU=Gf+}0Zl0BR<>S~yc-NMww&$r`R@Yj1$n=ܰ0 KRᎤ`' %UMK=ηp-?!nl)%B+}F0-9@T &`з\#႙WQUm Eed-7pL4W4Qc禰yܰ6 ßwlabZ_/yC"pE p;< ܄"ܹaQ]'a@~׈ dغ(K! kw;1ƼˍÏ[S%n6"DX ,.Q~>C!HeԬ%6dٙX`OT[vv氷Dr^9CF-uS;"'%Hh l5T11>2̵vcM3j/nJa40R4F(-kSщ O* h2@=m. ɥr0ThYV8Qa#\m(XsA*;8Mɽŵp)*=y8Q=,Vf*h/񗜊5'}aͧ ~\F)ѻR_ EpMdS$:&wKBZ"v|ucֽo6.,7#"V&Fc, q瘜疠1Hah IchtFĤ,2-+ dLJRg-: ᧝[sqcnڂ)G2 Jqv jxؾX;L:KK*.@x/Z30nCS "m2z =@\j0pn'-yj+8HCLnC`KZB~Cq. ^"e(mH5Ѥ"M*ec,a#l)Љ5h$xpA.:?SQS &,*x2]dp~KD>J/ M%f7a#(?tFl >ijqnIr /G=v RP"Eb FMT  65(x`}qGhbײ0/G̝(z8/ AR1fKB*,<E3ӎ,r(vj/uy(CTmϟX q4 e"h YLUj3q ?jtkJ`PRTpL+ ǘ9 Z%P>\nfp49=I^-s-6Qx9;Θ7JP)v.R*W㘫 :!HʁzMpfľos+閔1c6vNC~ȱA5TŜj~N,RꥬBxjX04oX]q|96;Hh?Q_m۱ Qy@dЧ8*'_\<25:&<q"Vq)vo7b-@XL۟s;SS(yZ6sP%@`w3r.`8ׇYqTYa7|%[s8vD :z"v+-F) Z/Xl$+"7s땬DCvL*zN0D՝;+> 'LWM`5S5|{uk෇psxueb2~ݑ {~@>^"]S? cx$ o̴{BHW8| W=zQ=ԅ$3h=}TE %}IP8)CnOaHFȇ{. $:F`=VDw)~XS0dgrW˚~+5.6C~P)P&#F r5F*f=+zL4J`3c+gq)Y.t>G}$~4 h[So@,j?@ω2x;@KaKPvӤnA{6 ]mv/t۝L/HhѣYмkBAT|*9-[ID>B*@gmV{qCl#[Zt.Ju4]d3vʠ>cW*J}8CJ|7}; J~ؔo)?}`KdC!c$p: W#A$G+̮PfC_X-I⼓NN36Ό]yйw ,ey!IhUY>޴r 5=fOyCz  _6{3QR 3:z$U|ޭ" xaF,sB{αu6`n79%:lpջ/e dٿa!M ߩQ+ZQ2B bVӞJJfLaaEVDV2#=V$u7b+TwqbVܫ]1b׋?PT# .o'J D71R :;.OSt|ƅAȀ풢L(L->6aPXeyXZȻapAyU>1 S8Ӳ%QA@Za7Sh.ျC=" \ph< * CA:DrG@Y[歜7#X;c&OB[\͌3L̬UrKqo9;ˮ[ĦNP͚)2~l'ڟBrdU(^%jA< -"I=jiZbn`W| W„Ql!ZIw4تh굫p;J\ mLRS05Iaܮ,Sjr\g KiBe7ͷAo CUյN}BRmsjePo'mMGPUvlٷ2v2xuLhwER{wTk2@^C (^GD^lAU. zye3n1Qۊەdj$ȴ{ɓ̄PB4hf zPHEȝb=) \dϽ Շ/bg?_GiЛYߝ$-,gq6~ګUMɚ=F؊5`Օ$U xp(Gb{kOɪc! ?i5Qw81}='*0.J=_]XKnSB;-fFq_Že8uլ`FOE̽lN_=? qIٱ ?՟c ǵX~ A ط>,l*cCr/:SAEaͭ cc|{s3&+msՎ&Zc؜ 8ŋhsiOϨio.tQSrl"=b$cKIZ[j fLźMD4bYriKf"ZOfd\UUx8" x'5H>ƨ@7 E+A1= N27Gtb U(H usMSbLv:$u k~X) J SAF @pi`!ZPe\jn#pAFЈ3Skw*/?Gg{E*XNGQ1zr>[/!}G&tnH1z 2b>)Qޅ6`PA ɀ*aA1o`طJe8*3i,Fqðp%{| !1ژӹ(~X)w)ɒpjY a@UaNƞAm *"E*jb^9Ӕ*p" ^W= BL+bꡮ*}Q| 0 ̜ڮHm\X1._y "* 7YqʆcIPJZ2#9OL 0* 湱7NN+E<|⭚V UW=qߨ)'9?X4N/[Ae$Acr},+9R^1zha:@Zs`R~oXwyH}Ƃ̂8XϠu| e&ʚt:Jqc)Ԥ/_?lF~gRU NBT+ >'4Jq_2?xueVFRWu/Gr/у gsXN"mWt|rV8]dPWqܼRX8-DqSz OZ_rqdڲ"qI `mD!ԥal4~ָٍO.Y?ݏ{9=2FMgHjK7942_cbtW$֑ Nnc!N|.&p+,ʓ<1ff%c[uԤ#YNyUS#2q#WG{V4O9Yx %7{0Q#Q8dH8_ ۼpLMot Z=!gAtS{\ }猟r$^q*q`Q.ToZ!T`_/fP!^ mژ XpQ f aR$rQ;h4n)WOh)8ƐJ=l$?aZ=PET.!!dR2rݙCo#{"œrcnR덀dG-dwZف9 0t.#.}X64qC~ N 's?YBJ"|qnayF߈0ś~J1IޞyιE$MaA՝I¨g;.Tvgaiyr>9f?M0%r:S3SySP]r\3qHU|rh7[#|ש+!^ ru8MͅIDkS5pmb|Ť "婛pmJOw(CSQXJ>Ț/4r<=J>E#ųG4)l7[oX#ܷK0Ow"h$Bh5:152mwÎV69ܹR#' ^.oCkݸ):e !q+*Lߗijq`mcDHX O/x6Aw䃣) \Xr0>\mgyq3TN>P}{Zx *̗)2Z7 P!oCsjH"3S\s\iI/0'HK\kՀ xy0E yVE=` .Ng*l ,>N-$']:S3iqk44"<)J/=L94r»j 999[,&5$*;m /=p] c%ع>F-j:bDmjO"܇'vz5YAVte r9/mʀH[-1eȼZc(u`Pu2SQ7(%b, .52t9ncY~1xg)gcv1[WYlȝ#^L$S?q >}L(20 `Љ\PtncfsYsl6ˤBn` HKbs&OQثG&A/0't6؃8uxF=nƍ*F0vXu'm+yTc @l)1-}FFbu"m9pN{"fSTXԼ"ӰS]Z(NK[U(I==͈#/Aqd!=Ye pY 2vmWW_@۸;p?@Xϙfyak@9$%`M! ~H/˘`7cȽ8\xZ>{"0ƭ>{FoEagTrb"f[̵ ?G3[ 78T91jXAa58ԿciؘW5MF1,dh 60?(Bge _n_PfcܱZU^_WpZnli};Ͼ|+Q`7t_jWPj`@A~@sUΧSC?`>Dի&"LO;)}ꑨŴ;7V+(7ŀr.!3xYAԤѐm K\=/hcГp,/:_ֳe`*](QEAJ1qnz8A3i2i=$׋2Pv7+#Ļymcӽ`l*[!|j^ޭM$xKg4_# Y_DLWɻa,[& "K&Byyl-w;d9Pz<#-mхɫ}MrYib Zlu¸E la}9.scigY&1G YZ