chrony-4.1-150400.21.8.1 < > , hp9|nR
rnV"$d{ӟ?z'՟\gC jKF; ,AExPrй>5jq既c"A1S5
7m%/h5 @˦v Sڑ^ v*DDǙO~NwI,<[
4^2Z"V"TIVeLW bZRWPHR%9HdӘZH#WXwS7vsaG_;U > I p ? ` d
J 5 ; B 9 d . . .
@ . . & .
d . ! . " . # #$ . # $( * $ * (h * ( ( 8 ( @ 9 ) @ : .
@ = > ? @ F G . H p . I ( . X X Y p \ . ] d . ^ b c e d e f l u . v w . x d . y . z \ C chrony 4.1 150400.21.8.1 System Clock Synchronization Client and Server Chrony is an implementation of the Network Time Protocol (NTP). It can
synchronize the system clock with NTP servers, reference clocks (e.g. a
GPS receiver), and manual input using wristwatch and keyboard. It can
also operate as an NTPv4 (RFC 5905) server and peer to provide a time
service to other computers in the network.
Chrony consists of two programs: chronyd and chronyc.
Chronyd is a daemon which runs in the background on the system. It
obtains measurements of the system clock’s offset relative to time
servers on other systems via the network and adjusts the system time
accordingly. For isolated systems, the user can periodically enter the
correct time by hand (using chronyc). In either case, chronyd
determines the rate at which the computer gains or loses time, and
compensates for this. Chronyd can act as either a client or a server.
Chronyc provides a user interface to chronyd for monitoring its
performance and configuring various settings. It can do so while
running on the same computer as the chronyd instance it is controlling
or a different computer. hh04-ch1b SUSE Linux Enterprise 15 SUSE LLC GPL-2.0-only https://www.suse.com/ Productivity/Networking/Other https://chrony.tuxfamily.org/ linux x86_64
if [ -x /usr/bin/systemctl ]; then
test -n "$FIRST_ARG" || FIRST_ARG="$1"
[ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || :
for service in chronyd.service chrony-wait.service ; do
sysv_service=${service%.*}
if [ ! -e /usr/lib/systemd/system/$service ] &&
[ ! -e /etc/init.d/$sysv_service ]; then
mkdir -p /run/systemd/rpm/needs-preset
touch /run/systemd/rpm/needs-preset/$service
elif [ -e /etc/init.d/$sysv_service ] &&
[ ! -e /var/lib/systemd/migrated/$sysv_service ]; then
/usr/sbin/systemd-sysv-convert --save $sysv_service || :
mkdir -p /run/systemd/rpm/needs-sysv-convert
touch /run/systemd/rpm/needs-sysv-convert/$service
fi
done
fi
/usr/sbin/sysusers2shadow system-user-chrony.conf <<"EOF" || [ -f /.buildenv ]
u chrony - "Chrony Daemon" /var/lib/chrony -
EOF
PNAME=chronyd
SUBPNAME=
SYSC_TEMPLATE=/usr/share/fillup-templates/sysconfig.$PNAME$SUBPNAME
# If template not in new /usr/share/fillup-templates, fallback to old TEMPLATE_DIR
if [ ! -f $SYSC_TEMPLATE ] ; then
TEMPLATE_DIR=/var/adm/fillup-templates
SYSC_TEMPLATE=$TEMPLATE_DIR/sysconfig.$PNAME$SUBPNAME
fi
SD_NAME=""
if [ -x /bin/fillup ] ; then
if [ -f $SYSC_TEMPLATE ] ; then
echo "Updating /etc/sysconfig/$SD_NAME$PNAME ..."
mkdir -p /etc/sysconfig/$SD_NAME
touch /etc/sysconfig/$SD_NAME$PNAME
/bin/fillup -q /etc/sysconfig/$SD_NAME$PNAME $SYSC_TEMPLATE
fi
else
echo "ERROR: fillup not found. This should not happen. Please compare"
echo "/etc/sysconfig/$PNAME and $TEMPLATE_DIR/sysconfig.$PNAME and"
echo "update by hand."
fi
[ -z "${TRANSACTIONAL_UPDATE}" -a -x /usr/bin/systemd-tmpfiles ] &&
/usr/bin/systemd-tmpfiles --create chrony.conf || :
if [ -x /usr/bin/systemctl ]; then
test -n "$FIRST_ARG" || FIRST_ARG="$1"
[ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || :
if [ "$YAST_IS_RUNNING" != "instsys" ]; then
/usr/bin/systemctl daemon-reload || :
fi
for service in chronyd.service chrony-wait.service ; do
sysv_service=${service%.*}
if [ -e /run/systemd/rpm/needs-preset/$service ]; then
/usr/bin/systemctl preset $service || :
rm "/run/systemd/rpm/needs-preset/$service" || :
elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then
/usr/sbin/systemd-sysv-convert --apply $sysv_service || :
rm "/run/systemd/rpm/needs-sysv-convert/$service" || :
touch /var/lib/systemd/migrated/$sysv_service || :
fi
done
fi
test -n "$FIRST_ARG" || FIRST_ARG="$1"
if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then
# Package removal, not upgrade
/usr/bin/systemctl --no-reload disable chronyd.service chrony-wait.service || :
(
test "$YAST_IS_RUNNING" = instsys && exit 0
test -f /etc/sysconfig/services -a \
-z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services
test "$DISABLE_STOP_ON_REMOVAL" = yes -o \
"$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0
/usr/bin/systemctl stop chronyd.service chrony-wait.service
) || :
fi
test -n "$FIRST_ARG" || FIRST_ARG="$1"
if [ $1 -eq 0 ]; then
# Package removal
for service in chronyd.service chrony-wait.service ; do
sysv_service="${service%.*}"
rm -f "/var/lib/systemd/migrated/$sysv_service" || :
done
fi
if [ -x /usr/bin/systemctl ]; then
/usr/bin/systemctl daemon-reload || :
fi
if [ "$FIRST_ARG" -ge 1 ]; then
# Package upgrade, not uninstall
if [ -x /usr/bin/systemctl ]; then
(
test "$YAST_IS_RUNNING" = instsys && exit 0
test -f /etc/sysconfig/services -a \
-z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services
test "$DISABLE_RESTART_ON_UPDATE" = yes -o \
"$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0
/usr/bin/systemctl try-restart chronyd.service chrony-wait.service
) || :
fi
fi i L ! k8 s i s 5 X E FC GK - = 큠A큠AA큤A큤A큤A큤A큤A聠A hحhحhحhحhحhحhحhحhhحhحhحhحhحhحhحhحhحhحhحhحhحh```hةhة`hة``hة``hةhحh`hحhحhحhحhحhحhح67a34f1ba05278d5044def6cfaa12399b6a2b716fef3db4b713f5148b2aaafa6 656fd8d61ad5efb514156e2cac4b38677fbf971d41fb09af6df4f872a572e1d5 14932958d0ef92c5559483fca2f3da37a687cbf06f1bafe776d616b8673abcde f0e1c9019ebfc4c90bd35ceb1ce2096fec58a3cde88d9ae9e9516e42dcb30a2d ca42afdb2a9c00ef4ae8279a49467160ba65fd835fbd1cbe7f90ec554c215ef7 271d46d495ae8af15ebf7b1064b4d37cff9e0639c198f753971bccdad8b084ed 7abd42ac314ff1857c3c036139f5cccce749ef1d386b8bf06bd9c64ada928e45 8ce6899d05799a0b7528e3d9e09b32f00ec4a0697ba37437cd4a4b795b87a86d 107740517c66beb57602ee50708df7b97d96a14531fca2a30b2a3c0ee18b7931 df830c5bcde1a55d78f19016f65b927adb9cbeb165181a56fb35fdfce8f6f5ae 51bb01aca6f160a9738cfef9714521141b47de3f0b2697c5d31993ef0167fc71 ef546fe12f9d205b9aaf34a2bf2176d36515ed40ba8d50a4f4d060dcd0b6302c e76f87c52ae451e373ca78371cf898a9b2b6eb4bd6aca052ad6329fbd919908b c03f5872ad56bdfee2fd9f31e8c4e7243603b706e866faf68678886a1d26b12f 03f5af8ff42bbd6f473d236fe4860aeebeeef1ec10ec53d136ad978d3d6b02f8 443a94bf1e0e375db050c29814fb6f16f30d0392e812eaa6ce09b5d73d4a9cf8 301b3e70b44e276724826416ad6abbebafed29f80baa465ac797a8e95af91126 28e68268e69adfbd1ae6907472aab7f716ceead6c31f4f3e4625c24884583628 51bb01aca6f160a9738cfef9714521141b47de3f0b2697c5d31993ef0167fc71 d837d18c293b538ce86735aee7eb0bdcbfe4231f827b8aa78ee39b6f461bfe1c 656fd8d61ad5efb514156e2cac4b38677fbf971d41fb09af6df4f872a572e1d5 6625c634d4ded1a58b81166a24a261ea540fbe4668c322372b3c4c51f1b894c7 14932958d0ef92c5559483fca2f3da37a687cbf06f1bafe776d616b8673abcde ca42afdb2a9c00ef4ae8279a49467160ba65fd835fbd1cbe7f90ec554c215ef7 ec63cf471909fba8427f864d42491cac0a9601dac187abb0d39bfd007d9c80ad 67a34f1ba05278d5044def6cfaa12399b6a2b716fef3db4b713f5148b2aaafa6 db980af9d9d0067bd9757711327382e2ab897fce920d7a1fa75757bb913e891c 368ffdbb50cda151a830e58f017f81d0a594a5bf6164ee8ffac90714a6b2b5ea ab15fd526bd8dd18a9e77ebc139656bf4d33e97fc7238cd11bf60e2b9b8666c6 1a8275cb600610f20b5498f4a9be5a2e32583f472f05e161bf04f2680eea06a6 53462c1b4998264e04c5e58da6fa5f5865dd8274592ebf4d9d53594102f3c4bf 434eb911d7ebf4555b819a7032c00d181c48f9c9c255701680b511c72406724c service service @ @ @ root root root root root root root root chrony root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root chrony chrony chrony chrony root chrony root chrony root root root root chrony root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root chrony chrony chrony chrony chrony-4.1-150400.21.8.1.src.rpm chrony chrony(x86-64) config(chrony) group(chrony) ntp-daemon user(chrony) @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
/bin/bash /bin/sh /bin/sh /bin/sh /bin/sh /bin/sh chrony-pool config(chrony) coreutils diffutils fillup grep libc.so.6()(64bit) libc.so.6(GLIBC_2.12)(64bit) libc.so.6(GLIBC_2.14)(64bit) libc.so.6(GLIBC_2.15)(64bit) libc.so.6(GLIBC_2.17)(64bit) libc.so.6(GLIBC_2.2.5)(64bit) libc.so.6(GLIBC_2.25)(64bit) libc.so.6(GLIBC_2.27)(64bit) libc.so.6(GLIBC_2.3)(64bit) libc.so.6(GLIBC_2.3.4)(64bit) libc.so.6(GLIBC_2.4)(64bit) libc.so.6(GLIBC_2.7)(64bit) libcap.so.2()(64bit) libedit.so.0()(64bit) libgnutls.so.30()(64bit) libgnutls.so.30(GNUTLS_3_4)(64bit) libgnutls.so.30(GNUTLS_3_6_3)(64bit) libm.so.6()(64bit) libm.so.6(GLIBC_2.2.5)(64bit) libm.so.6(GLIBC_2.29)(64bit) libnettle.so.8()(64bit) libnettle.so.8(NETTLE_8)(64bit) libpthread.so.0()(64bit) libpthread.so.0(GLIBC_2.2.5)(64bit) libseccomp.so.2()(64bit) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) sysuser-shadow 4.1-150400.21.8.1 3.0.4-1 4.6.0-1 4.0-1 5.2-1 3.2 4.14.3 h¹f@e8@b<]@a aLaa`2a,@`ݮ@`@`r`!@` 3@_@_@_]@__[@_^ _&^@^^E:@^C]5@]@]@]]]\|\@\@\@[@[u[u[:@[dC[b@[aZ3@ZZZ}@Z@Y@Y+@Y@YX@X|@X|X=mWXW4W W@W@WV VŲ@VT@VV@VV@max@suse.com max@suse.com max@suse.com max@suse.com max@suse.com max@suse.com max@suse.com max@suse.com jsegitz@suse.com max@suse.com gmbr3@opensuse.org gmbr3@opensuse.org max@suse.com max@suse.com mrueckert@suse.de mrueckert@suse.de kukuk@suse.com max@suse.com elimat@opensuse.org callumjfarmer13@gmail.com max@suse.com dimstar@opensuse.org mliska@suse.cz mliska@suse.cz suse+build@de-korte.org suse+build@de-korte.org suse+build@de-korte.org mpluskal@suse.com Mathias.Homann@opensuse.org Mathias.Homann@opensuse.org max@suse.com mpluskal@suse.com max@suse.com mpluskal@suse.com mpluskal@suse.com idonmez@suse.com mpluskal@suse.com michael@stroeder.com mpluskal@suse.com mpluskal@suse.com bwiedemann@suse.com mpost@suse.com kukuk@suse.de kukuk@suse.de mpluskal@suse.com rbrown@suse.com mpluskal@suse.com mpost@suse.com mrueckert@suse.de mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mrueckert@suse.de mpluskal@suse.com meissner@suse.com mpluskal@suse.com mpluskal@suse.com mpost@suse.com mpluskal@suse.com mrueckert@suse.de mrueckert@suse.de mrueckert@suse.de mrueckert@suse.de - bsc#1246544: Fix racy socket creation
* Add chrony-unix-socket.patch
* Add chrony-remove-chmod.patch
- Use make quickcheck to speedup build. - Use make quickcheck instead of make check to avoid >1h build
times and failures due to timeouts. This was the default before
3.2 but it changed to make tests more reliable. Here a seed is
already set to get deterministic execution. - Use shorter NTS-KE retry interval when network is down
(bsc#1213551, chrony-burst_total_samples_to_go.patch,
chrony-retry_interval_ke_start.patch). - Fix config file handling in the spec file and remove "ntsdumpdir"
from default config, because augeas-lenses cannot parse it during
installation of SLE Micro on SLE-15-SP3 (bsc#1194220). - bsc#1194229: Fix pool package dependencies, so that SLE actually
prefers chrony-pool-suse over chrony-pool-empty. - Add chrony-htonl.patch to work around undocumented behaviour of
htonl() in older glibc versions (SLE-12) on 64 bit big endian
architectures (s390x). - SLE bugs that have been fixed in openSUSE up to this point
without explicit references: bsc#1183783, bsc#1184400,
bsc#1171806, bsc#1161119, bsc#1159840.
- Obsoleted SLE patches:
* chrony-fix-open.patch
* chrony-gettimeofday.patch
* chrony-ntp-era-split.patch
* chrony-pidfile.patch
* chrony-select-timeout.patch
* chrony-urandom.patch
* chrony.sysconfig
* clknetsim-glibc-2.31.patch - boo#1190926: PrivateDevices is too strict, we might need to
access the rtc and ptp devices.
- Add back support to build chrony on SLE12.
- Drop dependency on asciidoctor. It is only needed for building
the HTML documentation which we don't package anyway. - Added hardening to systemd service(s). Added patch(es):
* harden_chrony-wait.service.patch
* harden_chronyd.service.patch - boo#1187906: Consolidate all references to the helper script.
- bsc#1173760: MD5 is not available from mozilla-nss in FIPS mode,
but needed for calculating refids from IPv6 addresses as part of
the NTP protocol (rfc5905). As this is a non-cryptographic use of
MD5 we can use our own implementation without violating FIPS
rules: chrony-refid-internal-md5.patch . - Add now working CONFIG parameter to sysusers generator - Change to using systemd-sysusers
- Remove otherproviders, not needed anymore - Update to 4.1
* Add support for NTS servers specified by IP address (matching
Subject Alternative Name in server certificate)
* Add source-specific configuration of trusted certificates
* Allow multiple files and directories with trusted certificates
* Allow multiple pairs of server keys and certificates
* Add copy option to server/pool directive
* Increase PPS lock limit to 40% of pulse interval
* Perform source selection immediately after loading dump files
* Reload dump files for addresses negotiated by NTS-KE server
* Update seccomp filter and add less restrictive level
* Restart ongoing name resolution on online command
* Fix dump files to not include uncorrected offset
* Fix initstepslew to accept time from own NTP clients
* Reset NTP address and port when no longer negotiated by NTS-KE
server
- Update clknetsim to snapshot f89702d.
- Refresh chrony.keyring from
https://chrony.tuxfamily.org/gpgkey-8F375C7E8D0EE125A3D3BD51537E2B76F7680DAC.asc
- Ensure the correct pool packages are installed for openSUSE
and SLE (bsc#1180689). - Enable syscallfilter unconditionally [boo#1181826]. - drop buildrequires on NSS. We need gnutls for NTS anyway and we
can do all the other required crypto via nettle+gnutls. no need
for another crypto library. - Update to 4.0
- Enhancements
- Add support for Network Time Security (NTS) authentication
- Add support for AES-CMAC keys (AES128, AES256) with Nettle
- Add authselectmode directive to control selection of
unauthenticated sources
- Add binddevice, bindacqdevice, bindcmddevice directives
- Add confdir directive to better support fragmented
configuration
- Add sourcedir directive and "reload sources" command to
support dynamic NTP sources specified in files
- Add clockprecision directive
- Add dscp directive to set Differentiated Services Code Point
(DSCP)
- Add -L option to limit log messages by severity
- Add -p option to print whole configuration with included
files
- Add -U option to allow start under non-root user
- Allow maxsamples to be set to 1 for faster update with -q/-Q
option
- Avoid replacing NTP sources with sources that have
unreachable address
- Improve pools to repeat name resolution to get "maxsources"
sources
- Improve source selection with trusted sources
- Improve NTP loop test to prevent synchronisation to itself
- Repeat iburst when NTP source is switched from offline state
to online
- Update clock synchronisation status and leap status more
frequently
- Update seccomp filter
- Add "add pool" command
- Add "reset sources" command to drop all measurements
- Add authdata command to print details about NTP
authentication
- Add selectdata command to print details about source
selection
- Add -N option and sourcename command to print original names
of sources
- Add -a option to some commands to print also unresolved
sources
- Add -k, -p, -r options to clients command to select, limit,
reset data
- Bug fixes
- Don’t set interface for NTP responses to allow asymmetric
routing
- Handle RTCs that don’t support interrupts
- Respond to command requests with correct address on
multihomed hosts
- Removed features
- Drop support for RIPEMD keys (RMD128, RMD160, RMD256, RMD320)
- Drop support for long (non-standard) MACs in NTPv4 packets
(chrony 2.x clients using non-MD5/SHA1 keys need to use
option "version 3")
- Drop support for line editing with GNU Readline
- add BuildRequires for gnutls-devel (which also pulls nettle to
enable the new features)
- drop patches which are included in the update:
chrony-test-update-processing-of-packet-log.patch
chrony-test-fix-util-unit-test-for-NTP-era-split.patch
- refreshed chrony-config.patch
- track series file for easier quilt setup
- added option to turn off testsuite with
osc build --without=testsuite
testsuite still runs by default - By default we don't write log files but log to journald, so
only recommend logrotate. - Adjust and rename the sysconfig file, so that it matches the
expectations of chronyd.service (bsc#1173277). - Update to 3.5.1:
* Create new file when writing pidfile (CVE-2020-14367, bsc#1174911) - Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075) - Add chrony-pool-suse and chrony-pool-openSUSE subpackages that
preconfigure chrony to use NTP servers from the respective
pools for SUSE and openSUSE (bsc#1156884, SLE-11424).
- Add chrony-pool-empty to still allow installing chrony without
preconfigured servers.
- Use iburst in the default pool statements to speed up initial
synchronisation (bsc#1172113). - Use _systemdutildir instead of _libexecdir/systemd: systemd does
not actually live below libexecdir. - Add chrony-test-update-processing-of-packet-log.patch in order
to fix test-suite failure. - Update clknetsim to version 79ffe44 (fixes boo#1162964).
- Backport chrony-test-fix-util-unit-test-for-NTP-era-split.patch. - Change to BuildRequires: rubygem(asciidoctor) and remove conditional
(is available in SLE12-SP4 and SLE15* as well)
- Fix typo in %install - Fix asciidoc in Tumbleweed
- Revert clknetsim to version 58c5e8b - Fix incorrect download link for package signature - Temporarily disable signature usage as its expired
- Update clknetsim to version ac3c832 - fix chrony-service-helper.patch - Update to 3.5:
+ Add support for more accurate reading of PHC on Linux 5.0
+ Add support for hardware timestamping on interfaces with read-only timestamping configuration
+ Add support for memory locking and real-time priority on FreeBSD, NetBSD, Solaris
+ Update seccomp filter to work on more architectures
+ Validate refclock driver options
+ Fix bindaddress directive on FreeBSD
+ Fix transposition of hardware RX timestamp on Linux 4.13 and later
+ Fix building on non-glibc systems - Fix ordering and dependencies of chronyd.service, so that it is
started after name resolution is up (bsc#1129914).
- Add chrony-service-ordering.patch
- Fix location of helper script in chrony-dnssrv@.service
(bsc#1128846). - Update testsuite to version 58c5e8b - Read runtime servers from /var/run/netconfig/chrony.servers to
fix bsc#1099272.
- Move chrony-helper to /usr/lib/chrony/helper, because there
should be no executables in /usr/share. - Make sure to generate correct sysconfig file (boo#1117147)
- Update clknetsim to revision 8b48422 - Remove discrepancies between spec file and chrony-tmpfiles (boo#1115529) - Update the keyring and uncomment it in the spec file - Comment out bad signature - Added %{_tmpfilesdir}/%{name}.conf
- Updated clknetsim
- Update to version 3.4
* Enhancements
+ Add filter option to server/pool/peer directive
+ Add minsamples and maxsamples options to hwtimestamp directive
+ Add support for faster frequency adjustments in Linux 4.19
+ Change default pidfile to /var/run/chrony/chronyd.pid to allow chronyd
without root privileges to remove it on exit
+ Disable sub-second polling intervals for distant NTP sources
+ Extend range of supported sub-second polling intervals
+ Get/set IPv4 destination/source address of NTP packets on FreeBSD
+ Make burst options and command useful with short polling intervals
+ Modify auto_offline option to activate when sending request failed
+ Respond from interface that received NTP request if possible
+ Add onoffline command to switch between online and offline state
according to current system network configuration
+ Improve example NetworkManager dispatcher script
* Bug fixes
+ Avoid waiting in Linux getrandom system call
+ Fix PPS support on FreeBSD and NetBSD - Update clknetsim to revision 42b693b
* Drop not needed chrony-fix-open.patch
- Build tests with optflags as well
- Do not run tests on i586
- Enable signd - Mention all sources as such in spec file
- Fix formatting of changelog
- Drop reference to change is not present - Update to version 3.3
* Enhancements:
+ Add burst option to server/pool directive
+ Add stratum and tai options to refclock directive
+ Add support for Nettle crypto library
+ Add workaround for missing kernel receive timestamps on Linux
+ Wait for late hardware transmit timestamps
+ Improve source selection with unreachable sources
+ Improve protection against replay attacks on symmetric mode
+ Allow PHC refclock to use socket in /var/run/chrony
+ Add shutdown command to stop chronyd
+ Simplify format of response to manual list command
+ Improve handling of unknown responses in chronyc
* Bug fixes:
+ Respond to NTPv1 client requests with zero mode
+ Fix -x option to not require CAP_SYS_TIME under non-root user
+ Fix acquisitionport directive to work with privilege separation
+ Fix handling of socket errors on Linux to avoid high CPU usage
+ Fix chronyc to not get stuck in infinite loop after clock step - Added /etc/chrony.d/ directory to the package (bsc#1083597)
Modifed default chrony.conf to add "include /etc/chrony.d/*" - Use %license instead of %doc [bsc#1082318] - Fix name of fillup template (was never installed before)
- Fix Requires for fillup, it's used in post, not pre. - Enable pps support - Replace references to /var/adm/fillup-templates with new
%_fillupdir macro (boo#1069468) - Cleanup spec file:
* Drop pre systemd support
* Run spec-cleaner - Modified the spec file to comment out the pool statement
in chrony.conf if _not_ building for openSUSE. (bsc#1063704). - refresh patches to apply cleanly again
- chrony-config.patch
- chrony-fix-open.patch - Upgraded to version 3.2:
Enhancements
* Improve stability with NTP sources and reference clocks
* Improve stability with hardware timestamping
* Improve support for NTP interleaved modes
* Control frequency of system clock on macOS 10.13 and later
* Set TAI-UTC offset of system clock with leapsectz directive
* Minimise data in client requests to improve privacy
* Allow transmit-only hardware timestamping
* Add support for new timestamping options introduced in Linux 4.13
* Add root delay, root dispersion and maximum error to tracking log
* Add mindelay and asymmetry options to server/peer/pool directive
* Add extpps option to PHC refclock to timestamp external PPS signal
* Add pps option to refclock directive to treat any refclock as PPS
* Add width option to refclock directive to filter wrong pulse edges
* Add rxfilter option to hwtimestamp directive
* Add -x option to disable control of system clock
* Add -l option to log to specified file instead of syslog
* Allow multiple command-line options to be specified together
* Allow starting without root privileges with -Q option
* Update seccomp filter for new glibc versions
* Dump history on exit by default with dumpdir directive
* Use hardening compiler options by default
Bug fixes
* Don't drop PHC samples with low-resolution system clock
* Ignore outliers in PHC tracking, RTC tracking, manual input
* Increase polling interval when peer is not responding
* Exit with error message when include directive fails
* Don't allow slash after hostname in allow/deny directive/command
* Try to connect to all addresses in chronyc before giving up
- Upgraded clknetsim to version 71dbbc5.
- Reworked chrony-fix-open.patch to fit the new version - Upgraded to version 3.1:
- Enhancements
- Add support for precise cross timestamping of PHC on Linux
- Add minpoll, precision, nocrossts options to hwtimestamp directive
- Add rawmeasurements option to log directive and modify measurements
option to log only valid measurements from synchronised sources
- Allow sub-second polling interval with NTP sources
- Bug fixes
- Fix time smoothing in interleaved mode
- Upgraded clknetsim to version ce89a1b.
- Reworked the following patches to fit the new versions
- chrony-config.patch
- chrony-service-helper.patch
- chrony-fix-open.patch - Upgraded to version 3.0:
- Enhancements
- Add support for software and hardware timestamping on Linux
- Add support for client/server and symmetric interleaved modes
- Add support for MS-SNTP authentication in Samba
- Add support for truncated MACs in NTPv4 packets
- Estimate and correct for asymmetric network jitter
- Increase default minsamples and polltarget to improve stability with very low jitter
- Add maxjitter directive to limit source selection by jitter
- Add offset option to server/pool/peer directive
- Add maxlockage option to refclock directive
- Add -t option to chronyd to exit after specified time
- Add partial protection against replay attacks on symmetric mode
- Don't reset polling interval when switching sources to online state
- Allow rate limiting with very short intervals
- Improve maximum server throughput on Linux and NetBSD
- Remove dump files after start
- Add tab-completion to chronyc with libedit/readline
- Add ntpdata command to print details about NTP measurements
- Allow all source options to be set in add server/peer command
- Indicate truncated addresses/hostnames in chronyc output
- Print reference IDs as hexadecimal numbers to avoid confusion with IPv4 addresses
- Bug fixes
- Fix crash with disabled asynchronous name resolving
- Upgraded clknetsim to version 6bb6519. - Upgraded to version 2.4.1:
- Bug fixes
- Fix processing of kernel timestamps on non-Linux systems
- Fix crash with smoothtime directive
- Fix validation of refclock sample times
- Fix parsing of refclock directive - update to 2.4:
- Enhancements
- Add orphan option to local directive for orphan mode
compatible with ntpd
- Add distance option to local directive to set activation
threshold (1 second by default)
- Add maxdrift directive to set maximum allowed drift of system
clock
- Try to replace NTP sources exceeding maximum distance
- Randomise source replacement to avoid getting stuck with bad
sources
- Randomise selection of sources from pools on start
- Ignore reference timestamp as ntpd doesn't always set it
correctly
- Modify tracking report to use same values as seen by NTP
clients
- Add -c option to chronyc to write reports in CSV format
- Provide detailed manual pages
- Bug fixes
- Fix SOCK refclock to work correctly when not specified as
last refclock
- Fix initstepslew and -q/-Q options to accept time from own
NTP clients
- Fix authentication with keys using 512-bit hash functions
- Fix crash on exit when multiple signals are received
- Fix conversion of very small floating-point numbers in
command packets
- Removed features
- Drop documentation in Texinfo format
- update clknetsim to a5949fe for fixing a testsuite failure:
- add IP_PKTINFO socket option
- accept environment variables in make
- fix building with FORTIFY_SOURCE
- fix compiler warning
- support multiple SHM refclocks
- fix recv functions with new glibc headers
- refreshed chrony-fix-open.patch: to apply cleanly after clknetsim
update
- drop patches:
- chrony-include-termios.patch
- make-105-ntpauth-more-reliable.patch
- drop buildrequires for texinfo and pre requires on the install
info packages
- no longer use make install-docs: it only installed 0 byte html
files. - Provide ntp-daemon (bsc#973981) - chrony-fix-open.patch: make sure _open and _close are initialized
in open()/close() override, as libfreebl3 also calls from the
the ELF constructor. FATE#319508
- enable mozilla-nss - Use correct license
- Drop hardcoded dependency on libseccomp, it is detected during
build - Undo reference to chrony-dnssrv@.service in %pre, %preun, %post,
and %postun as it would lead to error.
- Change conditions for libseccom, we can use any version on SLE-12
x86_64 - Removed %if for distributions that aren't building chrony.
- Renamed chrony-2.2_logrotate.patch to chrony-logrotate.patch since
the patch is not particularly version-dependent.
- Added clknetsim for "make check" processing.
- Added Buildrequires for gcc-c++ and timezone for building clknetsim
and running "make check".
- Changed Buildrequires and Requires to specify the minimum level of
libseccomp needed to build on s390x and ppc64le.
- Removed "-Recommends: timedatex" since I couldn't find any instance
of it anywhere in the build service.
- Modified the description to use some of the information from the
chrony web site.
- Added chrony-include-termios.patch so that it will build on ppc64le.
- Added make-105-ntpauth-more-reliable.patch so that "make check"
will not report a non-failure as a failure.
- Added --without-nss to ./configure to avoid "interruption code
0x2003B in chronyd" errors.
- Changed the symbolic links for rcchronyd and rcchronyd-wait to
point to the actual location of the service command, not the symlink
in /sbin.
- Added reference to chrony-dnssrv@.service in %pre, %preun, %post,
and %postun. - Cleanup spec file with spec-cleaner
- Prepare for submission to Factory (see fate#319508) - update to 2.3
- Enhancements
- Add support for NTP and command response rate limiting
- Add support for dropping root privileges on Mac OS X,
FreeBSD, Solaris
- Add require and trust options for source selection
- Enable logchange by default (1 second threshold)
- Set RTC on Mac OS X with rtcsync directive
- Allow binding to NTP port after dropping root privileges on
NetBSD
- Drop CAP_NET_BIND_SERVICE capability on Linux when NTP port
is disabled
- Resolve names in separate process when seccomp filter is
enabled
- Replace old records in client log when memory limit is
reached
- Don't reveal local time and synchronisation state in client
packets
- Don't keep client sockets open for longer than necessary
- Ignore poll in KoD RATE packets as ntpd doesn't always set it
correctly
- Warn when using keys shorter than 80 bits
- Add keygen command to generate random keys easily
- Add serverstats command to report NTP and command packet
statistics
- Bug fixes
- Fix clock correction after making step on Mac OS X
- Fix building on Solaris
- refreshed patches to apply cleanly again:
chrony-2.2_logrotate.patch
chrony-config.patch
chrony-service-helper.patch - update to 2.2.1
Restrict authentication of NTP server/peer to specified key
(CVE-2016-1567) - silence groupadd/useradd call and drop the shell from the user. - update to 2.2
see /usr/share/doc/packages/chrony/NEWS
- sync with fedora spec and add systemd support
- refreshed chrony-config.patch to apply cleanly again
- added chrony-2.2_logrotate.patch: add missing su option as we no
longer have the daemon run as root.
- added chrony-service-helper.patch: imported from fedora with a
changed path for moving from libexecdir to datadir
- only use syscall filters on 12.3 and newer
- move helper from libexecdir to datadir /bin/sh /bin/sh /bin/sh /bin/sh h04-ch1b 1757599993
! " # $ % & ' ( ) * + , - . 4.1-150400.21.8.1 4.1-150400.21.8.1 4.1-150400.21.8.1
20-chrony chrony.conf chrony.d chrony.keys dhcp dhclient.d chrony.sh chrony chrony chronyc chrony helper 50-chronyd.list chrony-dnssrv@.service chrony-dnssrv@.timer chrony-wait.service chronyd.service system-user-chrony.conf chrony.conf chronyd rcchrony-wait rcchronyd chrony FAQ NEWS README examples chrony-wait.service chrony.conf.example1 chrony.conf.example2 chrony.conf.example3 chrony.keys.example chrony.logrotate chrony.nm-dispatcher.dhcp chrony.nm-dispatcher.onoffline chronyd.service sysconfig.chronyd chrony COPYING chronyc.1.gz chrony.conf.5.gz chronyd.8.gz chrony drift rtc chrony /etc/NetworkManager/dispatcher.d/ /etc/ /etc/dhcp/ /etc/dhcp/dhclient.d/ /etc/logrotate.d/ /run/ /usr/bin/ /usr/lib/ /usr/lib/chrony/ /usr/lib/systemd/ntp-units.d/ /usr/lib/systemd/system/ /usr/lib/sysusers.d/ /usr/lib/tmpfiles.d/ /usr/sbin/ /usr/share/doc/packages/ /usr/share/doc/packages/chrony/ /usr/share/doc/packages/chrony/examples/ /usr/share/fillup-templates/ /usr/share/licenses/ /usr/share/licenses/chrony/ /usr/share/man/man1/ /usr/share/man/man5/ /usr/share/man/man8/ /var/lib/ /var/lib/chrony/ /var/log/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:40620/SUSE_SLE-15-SP4_Update/e5e45a97277f70e448c79d37d0051b05-chrony.SUSE_SLE-15-SP4_Update drpm xz 5 x86_64-suse-linux
POSIX shell script, ASCII text executable ASCII text directory Bourne-Again shell script, ASCII text executable cannot open `/home/abuild/rpmbuild/BUILDROOT/chrony-4.1-150400.21.8.1.x86_64/run/chrony' (No such file or directory) ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=e0d42682e1e6971b9f81a74391de99746a676d0a, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=f1a7a3923732954455a1f463c8458078227b384f, stripped UTF-8 Unicode text troff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix) empty R R R R !R #R R R R R R R
R R R R R R "R R P P R !R R R #R R R R R R R
R R R R R R R R R R R $R "R RYhy chrony-pool-nonempty logrotate utf-8 4996e1af6ff182356cc3c5f95cd0bfa4da8884edc961a1103ef7fa48290d7d3e ? p 7zXZ
! t/,n] "k%f +Ch.(:bGփ''XY
;^+*gd bη+~ "B 5"YQA
]&NulaTEq8 B/@ǃn!
qn#CO6|#dtqu,س7kݴl%^L zYJiDنN~F>gux
[ no~|S~
q1}[Rp)v>
ajWv&{: iʹa~ѯŁ<j n 5&v6#RXW?߷ FRM_/˫t?+26]zQljbޘ.|ѷYO yҔZ #V ǍT8
,cNzLcl4U6ORrB K$ ăR6 ; W
c)@Ѱ1Vg+*O( ƤscKJU
M-_rucġ!! ^`yd^.Lb!~Af\0ht*̈`͏sO}.(K0:3ۘ|Z?Ci *Mdgˌ!vf h@)kz7 : <({'zЍS$!9^wu` rU,HW%APfR*;XQ1#*FwL3|kg6m`>`AҎN_U`]7CRSf)3HVpF? n $bsMg$Ѽ":@kM~|x8\is#8$7я3vZ`tt2ŭ4õs߲ұuZ9 0frܓKOP r| U QĽ Qha ϯF`#=W'"[dRP奤c#cqGp W;$6Z cvfU@1:q) U_XFB +Ս)LD;}WNHA͵BB]k`0c >|ET;YWڰ?ijRPzvgyD
qC̬ [5Wt%2?GBPu.]YO1~ynnr)cݲ4,pݾyEU$:+NT@\P"eXt#w@xGɵ>fNfp@4c
T9sE֮(]:)w(!?!rcd*uޟ6\?
"_BOiA$c ~ C= VW$4^.TTޢфk^wBn &N&D
D6v{ ;X@p?=̃|w +@`v@ZHȗ^HS)G- TED+E>r7JhHOߐ% nJ7M]mkU)L-QN Kf6 9QQ%?~&L
9k QiIJٶ.f[ |8 òf'> v u/78Tkd 0R,[L d@Ⳉ+&yp\[L< '5F
qЪ~XɓO O?̟;nL*NJ |.W ƵŵtH!\ e}eC)8\Xd8Ez0q&`M8z"#flQ("34<|qJT, u Kd0f
)E BUY
b[4Ӧhr' 8apLCD ׁlQD7kFH isr[ž~bDvQT5N"2~i@N9e++am, A4EB}S-Kw
nLҡt;pTG.Mi|?c]| (YNtW%hM,qNj%65p ҐA,59.Yo('$gѨUf-S͎!k-4jSǶ/" @B (>(G$[:7*lAQ>K9:c_R@``h ⤜S3qm2 a F5.-M:UuKO%|:h/Uu-+O/n>z"epu.Cmݜ;1^hQ5]6*_.l^ Ɋ uL;~%~MH9U2<5$8E.o1FbR81ȰPޞ7%àJ*5ҩ?ĐE6p=M"'Œ08;u9ڼM! $TޟnO`!Kl$ 5lh_p(u1- g&ceiTGpKG8U1} ʺxǞh)JOiHcQyCi/ϝ.A=T ΙR70\N DTeCl/舛 }%S|7ǡR D/_`d0'ey๑(M:_dZ]6+Xv&Z P-\/
<∛߭
oGJ`ɫUK
IRmp(`][)EON@Y̍?-wu.HKAOQز7eQ0ؿoc[Mw=ke.&
=j&|}0&;(Xdgم
6𔑥fتPm]+
m;TiJ6,\ӹ6ڞU%ʂҗlDM/ :Ț f)̢9 zj(ٳY5Ӝbft;ЗxO,vFjd5Viy+ଅ 'KzsiVfAd#[%{8g^! ƽS
0AR+(Du}%Y([)Ee#|o MX)1Dee~LD}T-h U
9A?8
OZm
z@OQ8*aVԳd
NY7;bvQ8aa*8̉,(g|4uo/|eq3Uw3+BSk6Lbxav"[:tDBhCt!k T $9Y`N#qЖvTΫ˞qƝ Uy}G.B:I;τ^}vӹO"-y ep圜d˙ 5 28-,Hɬȿ\I/y1#/e8݂A
L^{.[YcI.R~3It:g@ yQ-Yv ,JYa@Krlw/cD lKij{0绣9ՙYx\ -P'Hb#O7/nrS D p=柤4Z(\J;rZ~v$绎(0', y\R :[7ts p 7j?ē"+M!Ȳ۷DFiiMNAO'}0g_-xH42o*%B-t( CQx,)1Q(FN 1 &'<4q qrq75x x
LL-S~WxzL^̣q: c#FtPzlkK҆W`X2dHBp4bքquEjV*j(c6&}p= !Z+fK8JO
# :kRF % PȂXy^H.gGΔμHa\_( [ܲ sZՀXRG ' = ([ w9mU\Fpv<".p[q #̰H~jᰚz~\5pcs udGe3`M^Ļ
ƇLs.] !!J_Qlo} &>[
s`rqbLK9!@1.+F5΅6Xަ9+HinvXua ;
x3>I\$5PV%D~j1 uYVӚ6 4,>Ը̑Gkyx_XU5]\A03~2?hGWDxP&!k
V GؙL} H]wGzY7љ)l=Ь C`#PT ^cK Ρ侂[
!V ֢,Uݐ AP,B/6
G!Un vT (5=EJH];&u2@@tR6C{WT /:YL" ̸Tq ʃ!nz̔_k%$P9 o#ց T1&U?_R+
终=zbfBMFTϲ*xswӞCnI( ]ZPUn d-]]/rZ1KN 6h SVY$riv-V qz20](܉ϝ% ëzXmFa0%_7 _6w:/.֙➘z'V d=<@ь-朅B<6CVY}َ5Ɍ a2>g =9- űVwy/?e2DR8E@ؕBa(~E54iES`T?LN*mF52M1V tjR+)!:Vl%~wZ?)q`,
XO FkWSgrhF&vV`Y@C A=Xh'-ej4 Tu|G5bL\-nSh!JA'|~z`
OmEw ݴ!ȷE'E F Zc!W F L8Vn%4-ϺMM)o
&( yKJV;]!9e@jѧ"- hGo4H6}
/ھQC܈(щ!92ߺ
Ek<&Ar[M% mr٫rʎVz3-|ڨPNj
EZ^kx;q
e^ -^7<*U=^]vw5Ƀ/tũ ARUYb7]TJ'v⭸PX9)YU )L<:2p}iߢ GnW&2)TANhl*ĝoC;*s i끓9gŖ b ZWX7fZkAp
̂#pz "O=!e{ s~8?ٌ+) Zi@<|pe.IQ9UUtj*
RChl,q{rM';EcggC͇^Jy[(#f9.QG
xH{㼕>1e
܋ D1kʚszn3 zk!7':2ȃWgKel%]7EfX ߚJx68b;ֹ (Y;m&SOP 5Ӱ~y8|
bN=߃6'ڢ`oRUmBBì`q~B".* ;Z ^lfQe}h^oac^b " ?. rwJ` =z
U'Ek0F뀫#u 1{NШ_OZ77Ha|U66*$[s߸RK % gTjA'{g$wۍQ%
yD(KV(2HCVOS#l`xSœY۵K'="Qj(JyC]Dke سA%)Hzz9aEa"W!pbFtd HxXSJ-HIf2OM?kvweڡm8p#kwd8v*x,@ręOҚaK|$Wwg'
_4"ҏOG^8) rS0Pm]'vc40r&>'}h)2LԷH
əJ 鉢 {Es&E@ Wշs#Z܁d TL#W},nhRvAEW4bZk@+N2Bm\.dfI V.wn^-&8v$U;hi-Z}]
`HpB&-F:rE5֮)i"ME$Q3fr
h{T8LS{ V-Er+#
m&}}
5N,dp SnM-{ UY-Kvfd_:HHpNuLE $6F;CplZZbToS` ίZ+B{
-XZi ZZ<c
YrJۇƯW%k}Ϛ!9Kd7`3VaZ4"'K77 HV3Mcon;8V^d"^DGzUiUF#1V#Dya#HX5!h֍92)Ι3#WH@;+;~
9*ł;t *i22],I4x}&v-jv{iWZʹ eu7i⢗[ÁC~2Zq< "% mmc{ ltLicdN;4BCڸP'}#jMvW7O(.À(L8:4R$!1 &
?^ gJmq f M%iր?5 V8lܺݕo <9S:ݸ ( Nzkǃ!vL^2SWeL}h`3}㗍[)a6-wj)nϡZFua
u |Ȼg.G(sOڧAH
Ǒ+{~/dj',t # d77zD g% GlTvʗ=SH9\Q\;C 1kkѧ] " +|\YT0O xJpaQn 37ٿeɑ%%\u`}B5|X $5tW-jCj]2 D cW6"\br/~Tiy3! t&&ժ%L=4*>GO*Q_Q
㥥wIL oq(Dz6BJӔ
BAښr~l3^_%Vf|0^k#B:whJ@,pGuO3!S2T ޱuAUd^j f
#a A{D"4w :(Y+saLM {.!gPxMNo~.u`(lR@ Ʌrا3cla2#\qׇqA ǣm
$;pN}Xe$m܍MhYl-G[piq[*@.ZsN#+F`^ԂrՎF i5ֵy 8-~om6!`1zb"C=v\ ƫHs[|"KAc@d:ղSY8bY;k] =g#ʔW)RXDiѺ>k @գ ʉ2adI PC(`N=T
_.eJ=ň`V4Z\zKܩǺ, pvTsCFS\ e,9 T+[ IS+rڼszɦ!|sN 6x%
gLqi8fT! K!n$:ޭ C85r t1ĉüɒQ2xuIT72j @h\̅{S"wH/7 PC >Ԓe3!pesʌ
4 dpҀ( SYɿl&l(r &#ZKO-9 w RZ.мT,_9 ذaD̓G9 1).6z`R[%c uMwJe51 9U.Whw4$$俘CnMC㤌s#
R BVSl+'$wz`ݑ-ݦz^Ouv12m@ja9r@H~{ꍫuP6^9
|yV p4ނQ,e9@ GDOKn74l?4wn(Zkn2*T'htD"W='1C)]9l 5QR3OI\`ʣTbi5 0Fp>j.\߀CbQ RubMBCD;z8B7Y ~ ^{jپ SNp
1 *xc
:l?
?cȘBp] f]?Cl{D19'+?U
h[f\ 9 2}5~q
܇+DznOk77kKw@`r=Xd2QQBQ Lbæf{@dT)5yPқD} L;UNs R JIT)*:7|a& )'wljXZL$ +ߝ'8˩t^pt LV8+qY3%>* ]3 dyX@#`|G]#c[#'#T!7kY]lK-Ȥ_Lԃ7t}#` d f~ܭ;Pt?.Krr `iL哠Z`|W7LN2wEF Arq%kRRfaV|n6
(k
$8Ksꪷ UX
b.c/BIα_m}7TÏiR753jHRS'crYmVO 2&A?Ri+R)T !-:̸[v(5J-^
wa?#UUǔApBuXAK"3WWz .\ݖE$EfNѢq/q F FBḖeQ#x+ ,-,@=? T\\as}m>U\W0%@%d qr?<0F kSNjz
2Gl7Mb+ZuX}GΩ'oϒxR5yGP;Z%HJ / ^48+xEJ#W_弞?v)ió,2R92>QTl?
@: c(M=>{ _KiJ ?ǼVi ]Tڞ8[)C~M+W*I$+ yhoYGv[9R
+Iik=@汛ATaY #(3 az
n=@ܥ
y _=m%$X2 i L]o1z$sP&@a 4+jcXKXxˤyO@ tR"VF obZU= س XmP [RPUus)b p7>o
ihKҐP&ˁWAl< Z,%yu]
,͜/~ŏt"Z]A沚Qz⭞B\N0I.eZB!iQɓNٝ2!@G F߂QR8 ܼ('p30.<@~gijC.8?%1F^a
3:٫6 }hijQ&DX@J^hq#t $U%l=W,jRcW DL6@'7@yz f=$2 Kl99g@+69]kyNQ7(fJzshWD4
413T;KzAMRXNh.RFcs #/+xSK~X r7ɯD)1 5sS(G y+'ԇ;J|8 V5SQiç ,[+:*gAjM/XȸgD+U;b?R>I
_2A%8):jfV
s$7eO f&oOAҾǧ^. j Hsoe(w 4!Pd7^JR Z'x]V;JP6<dqSu;MP%4sL i^0DMACϾ}^_vưgt^왊Q҈Ϣc/h"tyrag-o,=NN$1v՛l*_ hxuzG9
^ >uo&l5,ͬiT)GσFxմ"ujʇ}ۍ$jCSA?
e⨅fs4
fcta>otW2%e;}yPYupj:d0GK"pk;s":4ޔ>` NLj.$I_Ch] Q*c |1DJa.sQ!e_<+C]ٵns9ǥ ċ}S*t-%@⎳fU JMtTU"{t ԟ_"TbLp8XNlR%| G)M
:G+vDUdXkW30K"1=W{4قRuOhOPs%@5w.ʦˋl3"lAw(
? B6C|WTq?e2>u 0s8-2܃ ?өgZ .fyг ~P)QLPbledIkaO v{e@Hd`Ц/y (!1 "grfclOu| ~="ŮRˠ(7_˯K'=0\o3mNhq*B wGJބ#r܍L红 -H◚L/{ٛSx\U%w1:VT_cZBW#D #V (6lK (}h+uДȐeX+XwjIJ
yy`F [7X_ښ@r4#s)]|M&8(/k1 +;`vj.IPBj<~Zy^3Vy@BC!`2G2rX;S\jN
Y6too B8Ie`*1pl ~D~-]"aE\!ʚ b!UMKra)'SsOd;0`21߶2ApeTճߢR;Y{p@,h8՝x/
E 5իұUO/NkmU"͒蘥(G@M-= <`{E'ў,FriH#BZY EkoI5[Z0d݀U ͣ;a_8s܇ONK p*8^xMOYϭ`{Mx9Uo%Bl0WkiI6K/ l ˔}歑͘{2K= -[%D3u\0 bkÄ LZ#Bϖ
4p<@b>,f69 %
b֘emn~c 8VV+6 梘pYtx(f;䕇jAP2n
}=/ſ P14Q.n
~մ] s|, &'PXUt х&`D \V<ǠjaDƨf3cA<Ț4lg-|FH4 7ۋV%4;,?yEzg; _AT&T8wTApE"٠Y77EG .iȎ
`$FM(o$P~SbxE;M ew3$ 5KC `1:WrWLޟ9얖@3 6l-@E ~0 -.UNna{h!e{; ^Fh
""˦ n|+Imy0]/x1=*u7^ ٚ; [eblp yqaQ[c~
m]S~SMTp;Ƶ?-`낀(ٝFv[nG(D
5 ݱDJ Z^W1:y Ji @_B
-{E q%'
Uaث`/˜)wUtBVՄI;4.Dۜ~߄ . B=Y ZIH4 bk zqU~څ@1je.>Ne1TikcO
ma6è'H][ۮm@V'b aP|C-BĮ9!
6A:ef֒oxizNZ&J NSbE-M# q <_}x sC+ćXyR|Ȍu</[E@$FYK{B >ӹ} hsv/~jb)v F8`[(V2D2Q9 $~6+3( NyqInM3wT>Oʘ8β֜щյǂ`8hK5 9[
K*IfDz&{obu3ӱ,Fe_դv?pQeD#<"E 2Qaq0u
Slp@ ,r/"$$'}[~l$O'nQ)k5TzVxOMXw:p O BGacy<+N9Nzu#p'Q 5ycbl 1/
;
G,c |Sej)=?7Y2j i|n,49caLIEY4볋Y<8D!m.1,lJvX(!mt8ɽk _[1vyYq)ݢ /XEUG#a/m D's%U*q?Y2(u/o*mZTф[eOwqrF~sE% \"T` ;ųMhbgVN$;
xq UGT̙q0Nrgoĸi) V ef&1FkX~Ij
2U&|~eAJaQ ) cG&O gͦbr n3?Vp7c&eҹҽA]GY!eS#W)Jկn1-9G!$mĩu%-t"]6Qu($&8_
") f=Mܗ K8J~DS
K M2% U69> C3 LmV!:QƮK
\qIƃ5[$FaCOEݦ$
e
.wR dW3. }#' YF
XϹ.daabH g=Q_8q"T{۶ ?pR" 7}V/VSPS5MYQŶHSZF{"{cDlʗ)u>=C*`tPKcw5:LФ?;]6á &p7;_
P?G{a; !y+| 0?QĺQhBCo_p?:u8Ovk.Ф7p5p PoUB `͞|>[T~ؿ/[}~1 &5j} 'V](*3͇/0 hQ[WǞhR#? vL}kj'̫ ;9zro!.%oxʦ*ƀx{X6b%x 'L?DױxS&^;D@nڔ*5d)eoB
%VUOʵ"(s(T
2Y(s(/e m츼
5FN>jF3c{/p )1#UÞ4 q<[m8s?&^g$5gjX|dcvсM*mҧVu[Tv7rX|l?#-+I)&i4e9Z\Fh
2ҩYur3> EKA LS2$__I+ֳ)DI^J\u|Jn]d7
Ą5mciB߸ϘW<
3H8»OQ@S^Pvm7;X9ODk hlX#
#mH~ D/ Ƿ|.t~yPU~"*K 5z##^ ]F hzYMkJ;3@ |pYiMu\En5Y"p!S~^ R7+Hb%?>c}89\(Uhw,5Hަi*|D864|5 _)HPHc3jo8;0Q
X zjz&yb7ݧ\KbZ !uF]VHO܊ݿ]
/9AvcNYxB9_&52`vo1h̿Eo#KK-&K e/A;% JOTߛu\,5&5oꓴ"FZha98U[$f9`Iv]jjtP7H F | %נ @"T @ZǬ4KJ%YX5ЧU'2m
!ܩ%);\RcȾ D
GV??ۂ;OTb>EVw0m+?YæcVF.v͡ʀR_E3qO +f|z E/hn.d C5@/ķ~,n
пU7zp!o_G+1kalY><+Hc}7w<
ڊH */옃☚}﹕q=T<'Moi:Us
%OE_DK1%1`aN"BgVk]>N0dWsd>Z9q-
\R 1 zrY*1t cWj+Lh:NKřQCls]]=.B0+OZJ 28rA} P JМT@\A(2.IMkNyj3h^tW36}jVC iS^DfLP`hc¸kk=롰xzm,M-C8 MBrp?( [0M[ 5U m3kD$
a@U#n
q;Ĕb5LUV҂حѿ 2MD?}e%5BmgKkֿmp¸'tVȏ
χ_6Q 0}#ȿ_8kf
Ccv-]59H;8Pacb :oR Y
S#~^rowxls[urtb&5gT$3d\c "|Kf6* V@ $ G(ʞ XػnRhoJ>\"@D5B yUŒD&0 @T Pն*'*t&:! ůιҬIy %! ׆wD>& }qxYݯG y)@gyضRρCYr\wUR_:ЊŽx;S1{Da/Kn|R ((cO[zΉ4 NC"> #e&$F= 967dH;T3+
W{encPZ&=>i8'[=1"j)KA hvZE
(R[+x5T_ RQWHJ =el}N~M$tR[C,nڨɿ~sE7ΣgYhY !y#&8')BtI 0P
Sj yjy Xvr?=QD3jfKV|`댫m$0 䋍+jf?mt{VZ @#uۥe\fnk61|JL}5 "Sf} EڮF'2)K ufRjzQ qWej[Z7iM$HL=ox*[]Vi~id^KdcY7L(mn=Ŧ zH5SlVmY;Ϛ^iܯ/T =Za K;8G"3 {i j*Ru*[3PI2,-(*MwNDd$ !v? `nTWKFZ/#f(cMR*b6Ô~֓U(i ,[2~4j%{K '-O~h*{e0li{MʾlLIEvOf
e Ϟ
sI^dAFr~/wSu2د؍ve#Cd[B4ioT9=|/-P <=ϔtݵ
vmGD{M N$ 7}^Sӳ R>8̺$v
@m 4DdK=@hEۓ/?^И0۪дXy'@ߨNלϿ9, ފ
G-ͺ/SaPS >aӐ&?*<"wdzM<.9%QjrPXj5eŦOBDA#S)y8q wu܄9h=h'WSD9@- xWnL Ҕo,= !Fo]!JGw?vRa%cG8aZg#YG^z
5eQX\ ̂bRi id_L21/؞@9-5, @=ׄ~gCAFߦS[3˵nQ
to׆SIOx ڛGj_(J^Tlݟ ѩ1̺[ ) *Բӧ~4FfxR -PL"<0#tڇfV͟z 濓#~Xz1
H !Z`Q
$c$:'_b}PHOԊa 2Q/>[%N3 H
F*0&O~c/]`W}Jjn<{ZҿpYק;Hz]e~NCun #*!TyO@5w 3$t V!sNMp?'+ J/`ЉF.Cll)c^ќ[-3 15B q(%w2x}Ɣʋ*1\ˣ P/戜)qŃnny2
/r;爂1V>Nx(~Ø1j؏ibF*0@M ` R`KuF
S"o ,O"#ßY g5ODHsP,
:s`'LC"baU,u#HF?VטRp1fӶ<9%LI+ )>') z-jn*{؏YYtbp[@5u" {&#j;8;
X!Ԗ*/)
ɖB{Bh8j%_Ң7t5ns|@/{OiN_G!OLI˙+oCB@# >y1 ZS_nq[3VOKd=_e$()`-nD89!+$9`֚
Ou /BjA*v怏A̚)B{*adsr1_o6J&)TQ\pa3e@S& D)CkAqj҃qIXBH
AjMg,#(^W-[5Jf3w7~VA)PM5dJ܅Z7"(b(IpUC%[Cr$;< EZ]hZ,:[e sM͘QH M/kykCzٝDp, kRn|`RmDhD,8'>,3ZfTi8anzxKv?gȄ孾-"l7o:ʇyRgɾwl4=U^M.
QM lJИ"t
4P0%>y" aZi"<cBdqL7NM63B Taj9SdToWTm R[ kI`Ǩ;Y\e:2H
б: F( z9
,v`bJhzj Z\xE S ao9'D~9 b1/0F
}X- ]͟S F˥n02+Ҁ2
Iщf1XYƚ[:L$pQȻ 7~^Jpq萋XX\ZCiB5 6J iN~
ֹԮNZf$6;WFwvOO1]|)&xrd'rCzaRq+MlBU.3 <&@a\_aQ$KzwU ؛Άm]J슖gh]D߱Ew?0 fW%Q/^Ctimq
@C|vk&ͨS:L6mOmTo l q-ZIe)m۷^=L[i9x
B>/cAb'[;$]~O@0|zo >p\}H!ڸR l%xn$q +x3) Dޕ_;z#GޑKJfGSn1J
&YA_#{JihiC;rRo#Q?ݬ$òQ72_~v͞ ?&ꃡABm)p >1e6:OzP-e\ OYR:Ǣch+DẉtdY -:Vhb/i1 OST{᮪` D(:4/IBݙ
Vؐj`aO< TdJp|۳+2XOFdQᚬ!gZP Ѱk.T198.
b {__PTDBvݦ Fw\%Qª+MZ.](,w6VLa90 ^؊I#8nVFpP7ŴhcHb|ŚӓN9ͧȢ{FHY h8u5)p FvIi^*: mb## -%}IT &H ]?pUe. z*)ZXt!=pI .DZ{م8.øƍ\B ^-y
s<2 ys- dy1Wʫ m '"Cu(LMIP@pS C3a_&ى`9j_FBw (C6+[V?6%>_z.
&R/UU}G<2>7 i Cߩ!Qmm;Ͳ`Df5 ?جF#2BIsHu3#Dc5DŽG-k SysDYγKjE`tl-"`b4 >P-kVa,dTA"<$1t,9m\3H?ڀ CKlv्
8$Bl O
IœY
|w ^P b{ǮONlBQzKєxߟa2Nw\KLL^UE@^z/'W$뾧ð=b/I5\`F7
r{uX&`&?Ev7 )jG I: 1pl xPnBrM4WN$|q
KB ڎ
nm*v3~lHFuWˎ8&rK mbPTȥ_xa qwCS2{
(bL
'nd~,u2Sӟ"Tp%2d\Ă4dK:?%rs lhpeGZZF(O]IS]ͩ!w e( BԬRjf𡉶0 7y}ڂaB.TKnvhbVexn:(" bu üʢQK߉s0Xށ