crypto-policies-20211116-1.gitae470d6.el8 > 6 6_6 3!pQp)Tξ7]mtZ`bo{ ]mtZ`8OIE1x"=\}V{{Vn.ezP])`KdJ%u}?`2Ʊֈw/?\=ÿ.Lz-PȒ.l#b7_s O]C7BiGẗ<†)d,]\"JIH*$t[|*ֺû;[ ` -.ML$X.ɇ:\N41{q(:q!>F6_ ;Ӗ{df]8=M)L#%k!N'[b:/0]W0ʨALdb1.ZuD€#na6 d 9Y}/E(BwTKK[%ϽQ,pÐ?^lC(ϡ רLܦ;+oM.x@W]S|΋g=^b]կz+DT U32~\^*U.< -w[lJdkxƀ&2908643d5253b3206960a6f9c9dd042d0d392f5ade775d8c507357b6e5f4f913d61f72d4bc0ed50eb13f6d9fb2fbb817bc00fe583!pQp)Tξ7]mtZ`bo{ ]mtZ`',׍D{m, n &…xQS11lo<^{y~K:Ira hޮВiSbV[KC[+6+mz(3]m!f= -h>a9\!q=XO`DczN=R!T1t;JBmfm..Sfn=_ TaU2Ss<kC6eILkvɍ!EUUXr |KK lҠ{?lW>RGaŰL݁>s> fX^Ow U!'iBMĕܲ!ae94.ED* '0JyVX=XJt\*ܬ s~'lX+P!LG}ZD_";ww pD?d , H # AM0 V  |   ( +$-p0O3.3`5556677,(7T87\X98X:NX>rPBrVGrhHtIwXwYwZw[w\w]z8^gb-defltuvd Ccrypto-policies202111161.gitae470d6.el8System-wide crypto policiesThis package provides pre-built configuration files with cryptographic policies for various cryptographic back-ends, such as SSL/TLS libraries.bUord1-prod-x86build002.svc.aws.rockylinux.org,KojiRockyLGPLv2+infrastructure@rockylinux.orgUnspecifiedhttps://gitlab.com/redhat-crypto/fedora-crypto-policieslinuxnoarchif not posix.access("/etc/crypto-policies/config") then local policy = "DEFAULT" local cf = io.open("/proc/sys/crypto/fips_enabled", "r") if cf then if cf:read() == "1" then policy = "FIPS" end cf:close() end cf = io.open("/etc/crypto-policies/config", "w") if cf then cf:write(policy.."\n") cf:close() end cf = io.open("/etc/crypto-policies/state/current", "w") if cf then cf:write(policy.."\n") cf:close() end local policypath = "/usr/share/crypto-policies/"..policy for fn in posix.files(policypath) do local backend = fn:gsub(".*/", ""):gsub("%..*", "") local cfgfn = "/etc/crypto-policies/back-ends/"..backend..".config" posix.unlink(cfgfn) posix.symlink(policypath.."/"..fn, cfgfn) end end+-++0-*.4.1K,{*$&iKgpVSi)[@DFOeK}K,iKgpVSi)[@DFOeK} m V>yZ{g@5AAAAAA큤AA큤A큤A큤A큤A큤AA큤A큤A큤A큤A큤A큤A큤bUbUbUbUbUbUbUbUbUbUbUbUbUa>bUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUbUa>bUa>a>a>a>a>bUa>a>a>a>a>bUbUa>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-policies/DEFAULT/bind.txt/usr/share/crypto-policies/DEFAULT/gnutls.txt/usr/share/crypto-policies/DEFAULT/java.txt/usr/share/crypto-policies/DEFAULT/krb5.txt/usr/share/crypto-policies/DEFAULT/libreswan.txt/usr/share/crypto-policies/DEFAULT/libssh.txt/usr/share/crypto-policies/DEFAULT/nss.txt/usr/share/crypto-policies/DEFAULT/openssh.txt/usr/share/crypto-policies/DEFAULT/opensshserver.txt/usr/share/crypto-policies/DEFAULT/openssl.txt/usr/share/crypto-policies/DEFAULT/opensslcnf.txtYYYYYYYYYYYY@@rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootcrypto-policies-20211116-1.gitae470d6.el8.src.rpmconfig(crypto-policies)crypto-policies      config(crypto-policies)rpmlib(BuiltinLuaScripts)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PartialHardlinkSets)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)20211116-1.gitae470d6.el84.2.2-13.0.4-14.6.0-14.0.4-14.0-15.2-1gnutlslibreswanlibsshnssopensshopenssl3.6.123.280.9.43.44.08.0p1-51.1.1k4.14.3a@`9@`"y@_ L^z^@^y^@^ϧ]q]@]߶])]J@]H@]:\j@\]o@\T4\G\E@\[@[[#@[#@[@[qr[a[WZmZZH@ZZ}@Zz@Z ,@Yn@Y3YYx@Yw2Yu@Y6@Y.@Xߖ@XDX@XX@X@X%W_@W Wv@W@W@WgW9@VV9@V*!@Vf@Ua@UY@TTTE@TTTTsTmT S@SSSS@S"@S@SS!@S~@S}S|@S{CSy@Alexander Sosedkin - 20211116-1.gitae470d6Alexander Sosedkin - 20210617-1.gitc776d3eAlexander Sosedkin - 20210209-1.gitbfb6bedTomáš Mráz - 20200713-1.git51d1222Tomáš Mráz - 20200629-1.git806b5d3Tomáš Mráz - 20200610-1.git0ac8b1fTomáš Mráz - 20200527-5.gitb234a47Tomáš Mráz - 20200527-4.gitb234a47Tomáš Mráz - 20200527-2.git63fc906Tomáš Mráz - 20191128-2.git23e1bf1Tomáš Mráz - 20191128-1.git23e1bf1Tomáš Mráz - 20191127-1.git1179826Tomáš Mráz - 20191022-1.gite17cc3aTomáš Mráz - 20190807-1.git9b1477bTomáš Mráz - 20190613-2.git21ffdc8Tomáš Mráz - 20190613-1.git21ffdc8Tomáš Mráz - 20181217-6.git9a35207Tomáš Mráz - 20181217-5.git9a35207Tomáš Mráz - 20181217-4.git9a35207Tomáš Mráz - 20181217-3.git9a35207Tomáš Mráz - 20181217-2.git9a35207Tomáš Mráz - 20181217-1.git9a35207Tomáš Mráz - 20181122-1.git70769d9Tomáš Mráz - 20181026-1.gitcc78cb7Tomáš Mráz - 20180925-2.git3ce363aTomáš Mráz - 20180925-1.git3ce363aTomáš Mráz - 20180921-1.git62bafdeTomáš Mráz - 20180801-2.git2b95edeTomáš Mráz - 20180801-1.git2b95edeTomáš Mráz - 20180723-1.gitdb825c0Tomáš Mráz - 20180425-1.git6ad4018Nikos Mavrogiannopoulos - 20180306-1.gitaea6928Nikos Mavrogiannopoulos - 20180227-1.git0ce1729Nikos Mavrogiannopoulos - 20180112-1.git386e3feIgor Gnatenko - 20171115-3.git921600eFedora Release Engineering - 20171115-2.git921600eNikos Mavrogiannopoulos - 20171115-1.git921600eNikos Mavrogiannopoulos - 20170823-1.git8d18c27Nikos Mavrogiannopoulos - 20170816-1.git2618a6cNikos Mavrogiannopoulos - 20170802-1.git9300620Fedora Release Engineering - 20170606-4.git7c32281Igor Gnatenko - 20170606-3.git7c32281Troy Dawson 20170606-2.git7c32281Nikos Mavrogiannopoulos - 20170606-1.git7c32281Nikos Mavrogiannopoulos - 20170531-1.gitce0df7bBjörn Esser - 20170330-3.git55b66daPetr Šabata - 20170330-2.git55b66daNikos Mavrogiannopoulos - 20170330-1-git55b66daNikos Mavrogiannopoulos - 20160214-2-gitf3018ddNikos Mavrogiannopoulos - 20160214-1-gitf3018ddFedora Release Engineering - 20161111-2.gita2363ceNikos Mavrogiannopoulos - 20161111-1-gita2363ceNikos Mavrogiannopoulos - 20160926-2-git08b5501Nikos Mavrogiannopoulos - 20160926-1-git08b5501Nikos Mavrogiannopoulos - 20160921-1-git75b9b04Nikos Mavrogiannopoulos - 20160718-2-gitdb5ca59Nikos Mavrogiannopoulos - 20160718-1-git340cb69Nikos Mavrogiannopoulos - 20160718-1-gitcaa4a8dNikos Mavrogiannopoulos - 20160516-1-git8f69c35Fedora Release Engineering - 20151104-2.gitf1cba5fNikos Mavrogiannopoulos - 20151104-1-gitcf1cba5fNikos Mavrogiannopoulos - 20151005-2-gitc8452f8Nikos Mavrogiannopoulos - 20151005-1-gitc8452f8Fedora Release Engineering - 20150518-2.gitffe885eNikos Mavrogiannopoulos - 20150518-1-gitffe885eNikos Mavrogiannopoulos - 20150305-3-git2eeb03bNikos Mavrogiannopoulos - 20150305-2-git44afaa1Nikos Mavrogiannopoulos - 20150305-1-git098a8a6Peter Robinson 20150115-3-git9ef7493Nikos Mavrogiannopoulos - 20150115-2-git9ef7493Nikos Mavrogiannopoulos - 20141124-2-gitd4aa178Nikos Mavrogiannopoulos - 20141124-1-gitd4aa178Nikos Mavrogiannopoulos - 20141120-1-git9a26a5bNikos Mavrogiannopoulos - 20140905-1-git4649b7dNikos Mavrogiannopoulos - 20140827-1-git4e06f1dNikos Mavrogiannopoulos - 20140814-1-git80e1e98Nikos Mavrogiannopoulos - 20140812-1-gitb914bfdTom Callaway - 20140708-2-git3a7ae3fNikos Mavrogiannopoulos - 20140708-1-git3a7ae3fNikos Mavrogiannopoulos - 20140620-1-gitdac1524Nikos Mavrogiannopoulos - 0.9-7-20140612gita2fa0c6Fedora Release Engineering - 0.9-7.20140522gita50bad2Nikos Mavrogiannopoulos - 0.9-6-20140522gita50bad2Nikos Mavrogiannopoulos - 0.9-5-20140522gita50bad2Nikos Mavrogiannopoulos - 0.9-4-20140522gita50bad2Nikos Mavrogiannopoulos - 0.9-3-20140520git81364e4Nikos Mavrogiannopoulos - 0.9-2-20140520git81364e4Nikos Mavrogiannopoulos - 0.9-1-20140519gitf15621a- OSPP: relax -ECDSA-SHA2-512, -FFDHE-* - fips-mode-setup, fips-finish-install: call zipl more often (s390x-specific) - libssh: enable diffie-hellman-group14-sha256 support - openssl: fix disabling ChaCha20- implement scoped policies, e.g., cipher@SSH = ... (#1960266) - implement algorithm globbing, e.g., cipher@SSH = -*-CBC - deprecate derived properties: tls_cipher, ssh_cipher, ssh_group, ike_protocol - deprecate sha1_in_dnssec property - deprecate unscoped form of protocol property - update documentation - expand upstream test coverage - openssl: set MinProtocol / MaxProtocol separately for TLS and DTLS (#1946522) - support AES-192 ciphers in custom policies for non-TLS scenarios (#1876846) - stop claiming Camellia is disabled (#1925104) - disable CBC ciphers in FUTURE for everything but Kerberos (#1933016) - drop SHA224 from signature algorithms in FIPS:OSPP (#1934755) - condition ecdh-sha2-nistp384 on SECP384R1- OSPP subpolicy: tweak for RHEL-8.3+ - libssh: respect ssh_certs- OSPP subpolicy: remove AES-CCM - openssl: handle the AES-CCM removal properly- disallow X448/ED448 in FIPS policy with gnutls >= 3.6.12 - add AD-SUPPORT policy module- fallback to FIPS policy instead of the default-config in FIPS mode - java: Document properly how to override the crypto policy - krb5: No support for 3des anymore - reorder the signature algorithms to follow the order in default openssl list- make the post script work in environments where /proc/sys is not available- automatically set up FIPS policy in FIPS mode on first install- explicitly enable DHE-DSS in gnutls config if enabled in policy - use grubby with --update-kernel=ALL to avoid breaking kernelopts - OSPP subpolicy: Allow GCM for SSH protocol - openssh: Support newly standardized ECDHE-GSS and DHE-GSS key exchanges - if the policy in FIPS mode is not a FIPS policy print a message - openssl: Add SignatureAlgorithms support - custom crypto policies: enable completely overriding contents of the list value - added ECDHE-ONLY.pmod policy module example - openssh: make LEGACY policy to prefer strong public key algorithms - various python code cleanups - update-crypto-policies: dump the current policy to /etc/crypto-policies/state/CURRENT.pol - split scripts into their own subpackage- move the pre-built .config files to /usr/share/crypto-policies/back-ends- fips-mode-setup: compatibility with RHCOS- add FIPS subpolicy for OSPP- custom crypto policies support - update-crypto-policies: fix handling of list operations in policy modules - update-crypto-policies: fix updating of the current policy marker - fips-mode-setup: fixes related to containers and non-root execution - make it possible to use fips-mode-setup --check without dracut - add .config symlinks so a crypto policy can be set with read-only /etc by bind-mounting /usr/share/crypto-policies/ to /etc/crypto-policies/back-ends - run the update-crypto-policies in posttrans- gnutls: enable TLS-1.3 in the FIPS policy- fix ownership of policy directories - nss: enable X25519 in appropriate policies and conflict with old nss - openssh: conflict with old incompatible openssh version- openssh: add missing curve25519-sha256 to the key exchange list - openssh: fix RSA certificate support - fips-mode-setup: drop the kernel boot option if there is no separate /boot drive - fips-finish-install: regenerate all initramdisks - add libssh configuration backend- libreswan: Allow coalescing the IKE/IPSEC proposals- cleanups of the crypto-policies.7 manual page- Java: Fix FIPS and FUTURE policy to allow RSA certificates in TLS- cleanup duplicate and incorrect information from update-crypto-policies.8 manual page- add crypto-policies.7 manual page- update-crypto-policies: Fix endless loop - update-crypto-policies: Add warning about the need of system restart - fips-mode-setup: Use grub2-editenv to modify the kernelopts for BLS- update-crypto-policies: fix error on multiple matches in local.d - Print warning when update-crypto-policies --set is used in the FIPS mode - Java: Add 3DES and RC4 to legacy algorithms in LEGACY policy - OpenSSL: Properly disable non AEAD and AES128 ciphersuites in FUTURE - libreswan: Add chacha20_poly1305 to all policies and drop ikev1 from LEGACY- Fix regression in discovery of additional configuration - NSS: add DSA keyword to LEGACY policy - GnuTLS: Add 3DES and RC4 to LEGACY policy- Improve the package description- Use Recommends instead of Requires for grubby - Revert setting of HostKeyAlgorithms for ssh client for now- OpenSSH: Generate policy for sign algorithms - Enable >= 255 bits EC curves in FUTURE policy - OpenSSH: Add group1 key exchanges in LEGACY policy - NSS: Add SHA224 to hash lists - Print warning when update-crypto-policies --set FIPS is used - fips-mode-setup: Kernel boot options are now modified with grubby- Fix build to use the system python- Add OpenSSL configuration file include support - Disable TLS-1.0, 1.1 and DH with less than 2048 bits in DEFAULT policy- Initial FIPS mode setup support - NSS: Add tests for the generated policy - Enable TLS-1.3 if available in the respective TLS library - Enable SHA1 in certificates in LEGACY policy - Disable CAMELLIA - libreswan: Multiple bug fixes in policies- Restart/reload only enabled services - Do not enable PSK ciphersuites by default in gnutls and openssl - krb5: fix when more than 2048 bits keys are required - Fix discovery of additional configurations #1564595 - Fix incorrect ciphersuite setup for libreswan- Updated policy to reduce DH parameter size on DEFAULT level, taking into account feedback in #1549242,1#534532. - Renamed openssh-server.config to opensshserver.config to reduce conflicts when local.d/ appending is used.- Updated to include policies for libreswan- Updated to apply the settings as in StrongCryptoSettings project. The restriction to TLS1.2, is not yet applied as we have no method to impose that in openssl. https://fedoraproject.org/wiki/Changes/StrongCryptoSettings- Escape macros in %changelog- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild- Updated openssh policies for new openssh without rc4 - Removed policies for compat-gnutls28- Updated gnutls policies for 3.6.0- Updated to latest upstream - Restarts openssh server on policy update- Updated to latest upstream - Reloads openssh server on policy update- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- Restore Requires(post)- perl dependency renamed to perl-interpreter - remove useless Requires(post) - Fix path of libdir in generate-policies.pl (#1474442) - Updated to latest upstream - Allows gnutls applications in LEGACY mode, to use certificates of 768-bits- Updated to latest upstream - Added new kerberos key types- Add Requires for update-crypto-policies in %post- update-crypto-policies uses gred and sed, require them- GnuTLS policies include RC4 in legacy mode (#1437213)- Added openssh file- Updated policies for BIND to address #1421875- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild- Include OpenJDK documentation.- Improved messages on error.- Added support for openssh client policy- Updated with latest upstream.- Added support for administrator overrides in generated policies in local.d- Fixed NSS policy generation to include allowed hash algorithms- Updated to new version with auto-generated policies- Generate policies for NSS - OpenJDK policies were updated for opendjk 8- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild- Generate policies for compat-gnutls28 (#1277790)- Generated files are put in a %ghost directive- Updated policies from upstream - Added support for the generation of libkrb5 policy - Added support for the generation of openjdk policy- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- Updated policies to remove SSL 3.0 and RC4 (#1220679)- Added make check- Removed support for SECLEVEL (#1199274)- Include AEAD ciphersuites in gnutls (#1198979)- Bump release so lastest git snapshot is newer NVR- Updated to newest upstream version. - Includes bind policies (#1179925)- Corrected typo in gnutls' future policy (#1173886)- re-enable SSL 3.0 (until its removal is coordinated with a Fedora change request)- disable SSL 3.0 (doesn't work in openssl)- enforce the acceptable TLS versions in openssl- fix issue with RC4 being disabled in DEFAULT settings for openssl- fix issue in post script run on upgrade (#1130074)- updated crypto-policies from repository- fix license handling- updated crypto-policies from repository- updated crypto-policies from repository - changed versioning- updated crypto-policies from repository- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild- Require(post) coreutils (#1100335).- Require coreutils.- Install the default configuration file.- Run update-crypto-policies after installation.- Updated spec based on comments by Petr Lautrbach.- Initial package buildcrypto-policies  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRS !_/0123456789k;<=>?@ABCDEwGHIJKLMNOPQ20211116-1.gitae470d6.el820211116-1.gitae470d6.el820200527-1.git0a29b28      crypto-policiesback-endsbind.configgnutls.configjava.configkrb5.configlibreswan.configlibssh.confignss.configopenssh.configopensshserver.configopenssl.configopensslcnf.configconfiglocal.dpoliciesmodulesstateCURRENT.polcurrentcrypto-policiesDEFAULTbind.txtgnutls.txtjava.txtkrb5.txtlibreswan.txtlibssh.txtnss.txtopenssh.txtopensshserver.txtopenssl.txtopensslcnf.txtEMPTYbind.txtgnutls.txtjava.txtkrb5.txtlibreswan.txtlibssh.txtnss.txtopenssh.txtopensshserver.txtopenssl.txtopensslcnf.txtFIPSbind.txtgnutls.txtjava.txtkrb5.txtlibreswan.txtlibssh.txtnss.txtopenssh.txtopensshserver.txtopenssl.txtopensslcnf.txtFUTUREbind.txtgnutls.txtjava.txtkrb5.txtlibreswan.txtlibssh.txtnss.txtopenssh.txtopensshserver.txtopenssl.txtopensslcnf.txtLEGACYbind.txtgnutls.txtjava.txtkrb5.txtlibreswan.txtlibssh.txtnss.txtopenssh.txtopensshserver.txtopenssl.txtopensslcnf.txtback-endsDEFAULTbind.configgnutls.configjava.configkrb5.configlibreswan.configlibssh.confignss.configopenssh.configopensshserver.configopenssl.configopensslcnf.configFIPSbind.configgnutls.configjava.configkrb5.configlibreswan.configlibssh.confignss.configopenssh.configopensshserver.configopenssl.configopensslcnf.configFUTUREbind.configgnutls.configjava.configkrb5.configlibreswan.configlibssh.confignss.configopenssh.configopensshserver.configopenssl.configopensslcnf.configLEGACYbind.configgnutls.configjava.configkrb5.configlibreswan.configlibssh.confignss.configopenssh.configopensshserver.configopenssl.configopensslcnf.configdefault-configpoliciesDEFAULT.polEMPTY.polFIPS.polFUTURE.polLEGACY.polmodulesAD-SUPPORT.pmodECDHE-ONLY.pmodNO-CAMELLIA.pmodNO-SHA1.pmodOSPP.pmodreload-cmds.shcrypto-policiesCOPYING.LESSERcrypto-policies.7.gz/etc//etc/crypto-policies//etc/crypto-policies/back-ends//etc/crypto-policies/policies//etc/crypto-policies/state//usr/share//usr/share/crypto-policies//usr/share/crypto-policies/DEFAULT//usr/share/crypto-policies/EMPTY//usr/share/crypto-policies/FIPS//usr/share/crypto-policies/FUTURE//usr/share/crypto-policies/LEGACY//usr/share/crypto-policies/back-ends//usr/share/crypto-policies/back-ends/DEFAULT//usr/share/crypto-policies/back-ends/FIPS//usr/share/crypto-policies/back-ends/FUTURE//usr/share/crypto-policies/back-ends/LEGACY//usr/share/crypto-policies/policies//usr/share/crypto-policies/policies/modules//usr/share/licenses//usr/share/licenses/crypto-policies//usr/share/man/man7/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m32 -march=x86-64 -mtune=generic -mfpmath=sse -mstackrealign -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protectioncpioxz2noarch-redhat-linux-gnudirectoryASCII textemptyASCII text, with very long linesASCII text, with very long lines, with no line terminatorsASCII text, with no line terminatorsUTF-8 Unicode texttroff or preprocessor input, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix)crypto-policies-scriptsutf-83ad80c3f4988ca3d1ce7227eacddc135ff41463106c8c3ceaa108de64500d479?7zXZ !#,pXP] b2u jӫ`(y-Ӿ9*-n?M+#ь1p^p~1Ke+]-LR"_/k,R X{|f5tX-mRS!ʶ;rӃ+ َ>W g@w7?O]1X5`_?L~!|sT4HJEv*nF]j#MN8OCqxJ͚lU{v1SuW[b^E)*`nxlW)R-x-*WC\X襵u%t>pu󛃘ftc[cE| ̉g~V.$Q`͓<۱ b(c2 :4~udgš1FfTeCD|eMjݎD XG)g>DtyI >rU 9){~j2槡D=1i`7̿ 7/<:=ƨPK;jy^}J@L/*Z`םg_h]=\8FqףsuşHqW0j)jh7aڠF/GۦOGV`ӭ_”Eߕ#v))]M@ "~rMXBne,}*1d_ͻާJʎG"֚T2;QÂ8yS=Tdku]=5rޛD@T5͇ވ!/ Sհkl U!T{loC8-6=0#{1Dy$w-=j )ኜ# %` %݉F&lfxo{ h {5og!dAsb7Ikлb "Ou>}º7;1t*B3|I/rhzy ӽYeQ:l3X ThsZ jOsNwM,^fpyˆ$@"UL+mhꮖ"7$=l C"ܺ9MdO2OEa<DDv+ϕMZĄX gWN6k!L/teSl8F{qO]9^oTS vј^k2]檜{IO0{ DP+t: ESBOo %(eN[2z>麴< ߷!9%ݏvgQnˆ<8)+gֶp \g +6MoBd7VU@8Q_H'ȡpxq+%O֎As&BTuw\{#uTo{֋gZFa|] &bS`"i58u%d F'KyO:pR8AQT\usS\އ-MLGGi]kgk] J[$q<dDZo[D~QC]=`YRW,v}pBgpsS|D S\ VjGd318@dkl. `#0;9l~֝hƗTl#؂^][Aߏc2YSbQNQȎ욓C)?fKw.?@(])հC'2]47X13͊q5O`Ϲl#%!2kWjaϙZ*y:H]ʱbvqt\@Lt0e4B [}Wl"ܢ#D,<܉*Τn5T)4'驁|"+1 ^I~krz%e79W\q΍B l8MA3KSEǝ8 IA0K@fGlןAHmGS !aT \K$n9|EB^Ӓbް~R"E,X,B8,sλŌGFVO8_Ǿ\/[&Ա"5h~[n{F~ 5[2}? =*5`[GK.~AcwˑLbʥp%W48/,Qrh..ZJwAڙyQ du'gU.janVSG: sF֌'$OP6,҂ $i_%/=]-{鿼isFd殠C`us+/q+js O7;jN]oE-c=*mvF@@UUV)6- N8^}Ik2-lu0֬WA333$25>b8|5'>llt c:ģw(VO.7d|',UP6慱I-+%s{$l?z<'Њ͍?Y~MT8!hOe~2#f%TD5KQjbF &q.PyؿdF W>+]{R [³:Nm/u٨/'0ψ\gKg A*%'/Ќ#;H~[RA?%)ݗT|(_6Euձ354">)9YHͭXm8Eb_JF;U)EsmMSB3 hl`) Tq,vBEkƈ.N`|FaEqTfK[kѢh}6g^#!u-7BO*D28e֮`kU_ә|=*^٢IUib(eC1o*`7{/h[,ļW҃نq'DZzSSjs*RC/E*>'Z/)"M~Yso2v'A &.$K(yyl任%g ~ )SLn?/ qS`%U~U 4Ir9R-cȿg;2(Rcڋք)o x.MMS=.A2U FⶈA>ڌUbW/EQ\aF>5Am@{3WjI>IOxś;5:gC)N "WIYAnG RbDdS>Sqnݱ%InE!F(ֽnqsKV0W"UzTܖDbn.)7rSI/+-b_>"t2;6R/=ы{Vn0*q @ěZEo I$T# ׅ w uuhjv>KK0Є5DBk g`Mf%MmE)'qD?Z" wꉻ"/ I,gz!>ӭRKٞnL*Z^qS'ס+*~ġ=nޞh/<`3$",u0# 91bUйcҺX]o;urC+G qKlVod̚Gh()3჉2`Cw8HFFF u|nX&)/sYdždY8R HP*,ҞQX:m4TCң!K}i1>#K3kfoշÓ^b7 q碅+9* N`?ԞF(*JS$L%TDDX gWU'z&)+)vwoqlLչ (fG_[{S@` |3W86i'#Y; !-Fs3ݱt .VژcNIR"RL'eTٗ(Ak3V f 8Ɇ,\3&~77RIH2VrRU!9S0M*D,W#an"xHmƲsCS54w7"P#O;GLz{"੾΢*R`ˇ1gvA *.Esj|x"Q֧#F0T˲zDž#5xkvnx[ү ᏭynT2PLBCP&>vL! `4ȣbYm~LR}=JԶ+bo"EEGeZA\h6q#X @ üQ0Z~}V% GE4O\mCZ e; P]$r5iğ)c#odFqo RU6:A2lsϕ$l -|9-k$#'T>f/X6\G943fY-"@FHv  5%x^2F]:d41=&+X7U fӁY%ghN\qEHǝ?[bKTSKBJ@%?9Kyc{+e8{)=w3æ)L@TG\i$3Ҩ"CUi˧R⦗tY*N-6g1X-OB Ak˚5EL )\-X]C`D!5]RQ;ꋘaԏVnM$25{Nj3H'h3TG.{9"-qXr(@np emiG"~:PHkww>_w2K&jZ-y(͖UN=crޙu_u|&4C. {Sl-vq^感p5YW!V[Oސ !0{FqRy0u9h#!6Mk!ahπbD29KӀp%H% jp PaQASpS.?3(;W8% "d5VXXͯO I۩fAQ*?1=(YzSG^wz9X-Fe-t`*$PoH[>΀G/CxfXIɮ|e"X9X&d6CA gXot_>O${4+xŵqit9ueYr@j}dM`wNGs ^vHK|_8H u& ,D)XdžTNnjCZuFMe0/P8)vGqOcUx|J2UE=gSY053[ _RwkмbrlrG٥MVh<5 vA|Hy^ MwXu~Mz*u 7UvBjO6@(m`i= QU@iw*u*P9 -TPla2(@? cn,:Ln#i:\;;SM=Y~GJ2=)n@LFcć僁bȫƔaH)U)Xv25/|d>|7j8#/ 5A4ӳ9:~f#VĮ!0 pSZi_oz [MA#=/ʡƌĝKc6I!߼u3b\lw42E+8'[ͭ"|3Ѷ@F?`@ΨudAb)?qݨGXQ=OaeŚM, g,EqUVF(U:*Z_Z-i*l>ס:{gГQB beEG.΃pd1.ȵ!i!N[mWl GQ8~O8xUI)7=WIW- h<, w)s$pUX6Yv>+4edt_ 3GxYqt`ǤI B5L]bwcΚMԀDO֮g|,’ M(4WI]]eH[ZtRe/YVQ9?bk-Rbqۤab~o-;hU֬J?#D=7;S|*h̀}j}b(ݬ ]+DTUgj3|Di0jWhR΋At@qom'BM#SwX [p6IZs ES>轷dysw[KXK-wtgg{`/eB/)mQ.l**H}0~ak1vjyh@ʆ3uK> #˫ ]&3K@O䂫&zR,(*`]|lL^,@USW!h(mgoEV-[+؆6f+3>,ԙxA;zuDUY)FjKٝP\0T?;]z˝^!ϬۄAIȸImS?N dX69ذ {C*Le2My3O%>Ntۂ̵x1bjW h\K>JU ]CdK,ONųj2O6 w>U]pBc>M7|G=u 0"f3Aa\ә]nwPSWT8Q-kLb{W/ 1'x~!?peC9kiCѝ;Em%<Ӝ^?P}?vO[Gaaw xX ݴKoI"->x5 ͈&WڑNsbEdѪ0E#3(c?ra~:fIs#5,;䍶qm {<3q0ΏWddG#xZ4A>h ]P9/!RP/L.HB#ot35 F\çԶNr\e}}(%)ecBN4feu[c'-|`\Q}Нէ^+JG.ͼ>uzqViFr@}Wdz[v06]^@^(}8uX9uPvCwWJj񫨇+B7W1@P6XM%V@ .K[4]'@CW9_fPqOF-3kV֚0,,"RH١p  _Q#V.]2`tZIx֐ H!nCJ/tZ7`,u2"|7lI)T\AOV9O7.R]EQmYH1RO}+by 0v0!P7iͶk< sQ>Oxox!|qM#H{훡B_Cb$@Vpr|1Vkq@e [=3 z@6[P!8Wfo@GLZ# jk p&LitEN//UC2T[<`_םR-ő.iD$;E@&0 DY߮.Mk.nu"mF{4iF,zl߾rRmR>4JjĖwnce jm[ $S%tL=J()Ã\ :*Q}s:$F:41{\έGm~!\ELu犋1j>t$4 8@0;(~R4Դ!<<c w}u6Iu7܌8| ZuLAHO ӛݖWtw^C"8Q =ɸw ]Xws9Yᝯg J88J Α^?n2qxU+P')3ד*/Oy[[߀cam/=Lᨩ7b)k=(<)s9Y = 8`a}¿i,0:|"hJ+Lvk@͏OY:K͞=uTܕNVrz6]/B@./ [rCRM ?l;d.&RӘJ&) &́/7ًсzh| YLF76D,Xţ@ri65(0FX2=P?`n`_Dj!=IAVҁakp[.@(i/S6h7de>eۂ:xq^0 :8ԱۥO|BS^0ly9:s'ш=_ 494b>Xڰ0>J.}ta ^pօ-lM7퉐3 OBɮHG;,eW;tkqpٛ 9ה-Z{ܩa'*'YUcZ,kʏcM/1g`o`d'J=⟫W=p;FkU0LzUUI$v0BG+X롪OH"w.H;m-qgׁwY) SȎSru\^qiK{Uݨ# Qšu} hmQ<u2@pkcW~a'sMcu?1A?`Xhyr| .QyQ{Iv 58IӃszI!տ({iOcoXwϝ6WЇ1+jE`?QIzkR*QџE[[0MɧIFm!,Y]8mBll^6@^r=W M ،].*vuw|aYޥN/oKɭ|wiTnhih]ŴzO_U Ԃ 'l'Ay_ť}[*jn 5v,3TXV$9@~?R7`w¼" mFڡ 8rhf\wl^ls0¹ 2vYkq98יAa-g B8v"6 Otc"wˬ̡3O#DYQD^)M3pPv4@= n5i_Dbi)HV鲷B']svɼ#d$ )yg+7z7F W.+!&E3_~EDIzZFO&}ÿ_5tVy9n /4JѮMc!S;,};n1x$%ld֪ՄҽŠ~ pϞV4!1%l`8|4 JuRgnW2l/:GE Y*@ޔ-zͰCo{v-` dp\3(6dsS89j6~$FY핏۴htuaYS:J@5?q2@8Fmtm]QkƇ%evJRd̮][S{ UnJYP!`:plnI?MOwk=l&ԃm%Njŷ1zN;w\mH6W P ,l/="<-ʃIDv&EdZvϊQʓu1Fb}, |ca7P DI=Eĕ+/r:`qN?6%:SˆaW M1f.=V$% 72y.Ut NZd*#Ko@s׭v9g0:MlESn7Ễ'_uT18NPXj}&7J/_tx>츥1g_!L'"8slGߡ#J=4Py/چA6e(5!K 3zb@NB8⬌jQ2GHă ]k7ỈiDH;hfVq1h\ 3 Z+Zt1`b+ڽ߸ae VdP_ T:wB$FD>`ܐxFSt7: P+@fɤ-[x~ U*]*R|1Z~q`v'%d0@ha t&~I/"0W<1(?`PJWP$Mo6U*X+~gؼ1;TOtOfJ>"vir~OtYiB~Y5wkJͻ4~;s&I~C D W׈ N.訶.@ C_>P')-]`I#0_8FJ23cyG'`}6s'2{#Ř(w37ؗ8+098L 1k+ |I `^QJdx'/ H^x0ka&f2<'62ydV6WR.zy'83P-bxRd I )UKRQ5!ynHO НX%.^YWI89',=0dIW[ xVQ+hN T `T#8cjﺓ|:FCD!wuvJ+T_$,B"Pw@ (SS~\ &۳ )9KF)*(]beD7@pNk "5iT;o*$K%w g'/K FG&D!b(gm]Y=$utDԦ$ o'qb) S\*]M l26iʲHQ7`7j+Pc^8z2yeV4 ]m̍ulb(+\1L,֭T`=AfqjY]rmg(%sn=zSq4gXG<^:JkB|j-1 68$U bSA[) w ̀gkem&a,,O"4]Ӆ `sU_ϳm $ZJU!ƶH]Ta3C(5rNP f5s*n h}ՃI^/Dj™~Z#yE:9x=$9?HT".цf.Êf~# %5 lF;"|er9lZC'ifN B3PޢE#mc l V}mqK [-1vDX)nn5zcV~׵Ü.*?h]9˱1>R6 TnƨWcre2Rv+ O'5 opThau/FO-Ɂ_>X -%i6K.M!\3jXQLnVva]G5r``k% ABI2 ܭiA)I B[~?>ŔV@lP59_,!CEG]3g\hr q'U"CBQ\{w_%\\p1 a*PHp֗^wpμBFnS4?b8MI{ !QvuD" c"ex\8|nub{)tLL37G?$ªHRp3!%x[%[ɂUPV$v$@U`",M%<OWK!˱ Bvˎa ƪ~28L¼ 11}z3hvTzﲪ4(:0T_ Lb/lKu.{s1Vnc-I`9?)v~jY S2.,A쌞X*lʅXî]DԻ*6ye ;RB_ DV A\4jz;1Bn3 cJ~ܥu&8ˌD,]^JLGV9x򎓶jO\ӌVg7l!B&RpC~+Jp28HҬynD[ދqB8B\3d&BnT M*xCn>ZOVQR7pc)E}Syg讻▅3_Wo-j]?1>nA>ІJqr틂\~ Gm9 ) `]𼭸7\kÇO۽72|g$\s0TK(Y&anOR@^7.t7~7ȁkiP%\] aŒ p'x&ל{w?8u(-̋ qa ,B q@#_Q~\}~2]V6-W{?ڽSc)oFlY={A\ml(&m%*/䪆O B8e5NGAZFRcgLB!~t-3`E1ȰB+|S-6'G_3y@Q\PffG.RW66ֲBE3U^eS4.Ê}E/Ͼ!.Y˾E !\K^2_kJYY`q[P)xXaМ'тnPڸyG]c`r "D321Ek"_p·!:ƅ3R įX'o\7 :0)u˲`*12\.<`tA;'D@3l܇8qhbP %if۔32d9)bdXhTWuLnh1GuZ#]K6*ALSvYQ|X%B 'uK)M`upschյULtI2Zb`[9ȸ|EKa_Y93"汍i.1`\NJY֗8({Q?,i_'yc$4!2*m@8ӹ48bP%[vHpA<eW!85!XZ]F۰li yGL/fd_ѿ q(L #b.H[\}%.hzi<۞AkCD[XYE"u.RF :"?ӵ٣TϹZڨ@*ZZԲ1W-S1e5[r0bY6d>\%s`)30v7`]Ө|` o>Ѣ13蛐ju?oQ;|aqF\e1q9- IUf'5Y1Z˪:sҼV+sN.EilhbDvT9T9Ss[,BU2sޑu.Z# !Bj@u@hH]v؁JJf ?f{4Ϟv(J?w:oۭ-QMDOLa%%Zqk¤J!QQIY^HR K@b^IYN/3N:\,ysR,VL{q籐=`<J|q@$gx /oJ#)!R^O\`F[HIģ!A4D5qj+vwMD01my VA" i@0'FjfxA߱uuBKCH&(ARu~% ObSS@+cJ#[w[$_n8L5l>rG%I]Ȝ5ϣ.,cojBn1-YI>`q#N"y­:cR%y>':~\B d˩>Lf|y* b]y"F{}YVςȾѿ0Bh n7fauQBAT9$eяa~[&2˼^R~X/힇t܊kO& DC+'LNH͡&[b]~2ebN\jIe60}eHLm̓+ Ep8*rB UC-ZddIϱF1{7OGd5_m3Նdh 䎘A#EoJ/K48d"p6hX!at-f*aґds9Tiw?!A IМdU)šR뚍cyoގOH,Phط̌渝҆hё1." )Hԡ`EJ}y$y:08"; u@Gsiy=44 ap{|DldbŐ4i#HyGUi8(^YHJLJ6rն9t$7g)pЕkK *_l-FLݓE` ș!BPr15$"34ALճhL 0ɗcDZ t K{g O8$.t΄p3J|qGυ=9wo5Rr. oNt%Dicd@,*u^] 6D(=[DeS֟OwR~t 6]o,j|Ê_cL[۲Ξojꓝ7jYCMvEV@+eLVbt elp4`H|j#ݐ=dX`b%%qW"9(.X7̈́yI~̀J%S?V:}P ;ˢVr^Kݿazi& g yMnI/52\1T&MqW@yNb B.‹8g3z yC&!{b҅ Z !Фy'ؖ# ۾#U>18hi%ɘ13,UcCM6ꮒ2Y1$l1 Ӧ(8ȁ#"uR8>; pRq ~]] z˲jx,S=MǗjcJ|i'?>kC"J% ~}F0$a1! l2 6I 9rL\0W Sb7Jq, pTnK{Q°7sSg("s]mmT2:dej˹ۋJ-I~BCمҨ<+gNCù%T Onw`b&ڣ*Ֆ!(=[2j[h}I8pGn*zGe{+ kITK'H@E);_0%ć;hc_Kwf,O,7ĸw2[4j[SvCbq37`"o6.!F؛T\@ӆk'H\UPqmF8 n~!m܈M0ӨiN]pU7 },1Qkt(DtkPC{="#墀W158OI|b>21_l!vt<Η55I)}I|7NboPs? ;/do}SB&;r{ ѵ  q-2^Ly+KAAmy 9BgP Pj,t0gwJff C SRZ ]A! LJG㉠џ?l^>Tqr0|@'" 7'c|Fd^uyv}U#u% ƂX#^uchWc%t O-7!/VX@kQuFP(:| ՖԹQ|HOOʺ%:<oZPQ|{vmMޓ>q襗V7^-Qܔl\l;(&.0b Jg?O~XI,黨s$wLɧ`gIU鄝X`]*:/ȐB a7%mǗڣ"e+EO#q |it%0n;ЏuzwIm}DNAaIqG"8~%A D?Y@/j![wolqcK8mg\,ҮNxAK]B)ܗr@@أw+,ʩ34-׋D̯{{^D>xl/Zd1Qx[Dtd-@}p:Nyh%M `뜜ܳ4mZѻ(d.&9L<{ΉcR]P<h02nnT[IAAG5JK)']g8l1VMi/LPM9ʜT+#J(Kr&pc QKe{!2ݡLhVQ^ Kv;qR?>mBj p6˫5jf|b݂ uui*{ YZ