container-selinux-2:2.119.2-1.911c772.el7_8>t  DH`p_6%$ƨ:LeцxhᙽLb1yzFƲ˺75r ]zɻiXtemCZBdz"O B, CZIד c*f;#;#1p[ʈ,;+'n0S]{niH9(@᧜W%˼n`xmXt-r2(*WL&NC 4jE x6B[}x*.:^A.ņa#"V>=YfO멮\ס /HSSR2i1%Aq +EvPN`x~.tsB'פNwjē U'ޤzGg`\3E^0K ڪ1mp^Et{}ѯ@z 3C{bfkTiH:‚v'x/ؕ u,uxaLyc8df5f4df0bb72187bb7991aeefb46cf3daa4ed2(_6%$ƨ~ߍBw Y24d:t.fb X5&0۪Kq Kj?F.;)Txօcr%>A<}%GqbSfE0c8;=BQ0|WnD~nt|q` z<,? ErK`e+l "a .K t+1ɹgp[@}#wƿ P 'H*{ NZd?5} +UE1 ]>~z' JY10 X:J> {tKy(E_³֣±K !ξX6De%:YELBfu2Q> * t3*@\4`P8bHjl@I2V 3z `֥iRܱ0'}{L4rrfѵnM0`x-|:5j7fq@@" ?ʇ=rr κ uva`n2TUN-%e%j~ʱ*Y~r>s0eiRbu{>0'?'d, 0 X FLT\ ` d l    (@(8J9 J:JA'XF'_G'H'I'\']'^'d'e'f''Ccontainer-selinux2.119.21.911c772.el7_8SELinux policies for container runtimesSELinux policy modules for use with container runtimes.^x86-01.bsys.centos.orgkCentOSGPLv2CentOS BuildSystem Unspecifiedcontainer-selinux-911c772.tar.gzhttps://github.com/containers/container-selinuxlinuxnoarchH:^^f4c9b429cbb947ff9810a1cdfb962ba625fdb611d18f70d16f7a684ca486a617f21460c0b951b93ca676af53ac10d30f0fdd067830bf69578ee90ef2a477d85e mockbuildmockbuildmockbuildmockbuild   gitpkgconfig(systemd)selinux-policyselinux-policy-develrpmlib(FileDigests)rpmlib(CompressedFileNames)3.13.1-216.el73.13.1-216.el74.6.0-13.0.4-14.11.3^?@]]D%]'$]@\@\N\w@\4[k@[@[[@[[Xf@[L[K7@["X[@[@[[[Z@Z?ZZZ%Z%Z@Z - 2:2.119.2-1.911c772Jindrich Novy - 2:2.119.1-2.c57a6f9Jindrich Novy - 2:2.107-3Lokesh Mandvekar - 2:2.107-2Lokesh Mandvekar - 2:2.107-1Lokesh Mandvekar - 2:2.99-1Frantisek Kluknavsky - 2:2.95-2Frantisek Kluknavsky - 2:2.84-2Frantisek Kluknavsky - 2.77-1Dan Walsh - 2.76-1Dan Walsh - 2.74-1Frantisek Kluknavsky - 2:2.73-3Frantisek Kluknavsky - 2:2.73-2Dan Walsh - 2.69-3Dan Walsh - 2.69-2Dan Walsh - 2.68-1Dan Walsh - 2.67-1Dan Walsh - 2.66-1Dan Walsh - 2.64-1Dan Walsh - 2.62-1Dan Walsh - 2.61-1Dan Walsh - 2.60-1Dan Walsh - 2.58-2Dan Walsh - 2.58-1Dan Walsh - 2.57-1Dan Walsh - 2.56-1Dan Walsh - 2.55-1Dan Walsh - 2.52-1Dan Walsh - 2.51-1Dan Walsh - 2.50-1Dan Walsh - 2.49-1Dan Walsh - 2.48-1Dan Walsh - 2.41-1Dan Walsh - 2.40-1Dan Walsh - 2.39-1Dan Walsh - 2.38-1Dan Walsh - 2.37-1Dan Walsh - 2.36-1Dan Walsh - 2.35-1Dan Walsh - 2.34-1Dan Walsh - 2.33-1Dan Walsh - 2.32-1Dan Walsh - 2.31-1Dan Walsh - 2.29-1Dan Walsh - 2.28-1Dan Walsh - 2.27-1Dan Walsh - 2.24-1Dan Walsh - 2.23-1Dan Walsh - 2.22-1Troy Dawson - 2.21-3Fedora Release Engineering - 2:2.21-2Dan Walsh - 2.21-1Dan Walsh - 2.20-2Dan Walsh - 2.20-1Lokesh Mandvekar - 2:2.19-2.1Dan Walsh - 2:2.19-1Lokesh Mandvekar - 2:2.15-1.1Dan Walsh - 2:2.10-2.1Dan Walsh - 2:2.10-1Lokesh Mandvekar - 2:2.9-4Lokesh Mandvekar - 2:2.9-3Lokesh Mandvekar - 2:2.9-2Lokesh Mandvekar - 2:2.8-2Lokesh Mandvekar - 2:2.7-1Lokesh Mandvekar - 2:2.4-2Dan Walsh - 2:2.4-1Dan Walsh - 2:2.3-1Lokesh Mandvekar - 2:2.2-4Jonathan Lebon - 2:2.2-3Lokesh Mandvekar - 2:2.2-2Lokesh Mandvekar - 2:2.2-1Lokesh Mandvekar - 2:2.0-2Lokesh Mandvekar - 2:2.0-1Lokesh Mandvekar - 2:1.12.4-29- fix #1811759- update to 2.119.1 RHEL7 branch - Related: RHELPLAN-26239- use 2.107 in RHEL7u7 - add build.sh script- Resolves: #1626215- bump to v2.107- built commit b13d03b- rebase- rebase- backported fixes from upstream- Allow containers to use fuse file systems by default - Allow containers to sendto dgram socket of container runtimes - Needed to run container runtimes in notify socket unit files.- Allow containers to setexec themselves- tweak macro for fedora - applies to rhel8 as well- moved changelog entries: - Define spc_t as a container_domain, so that container_runtime will transition to spc_t even when setup with nosuid. - Allow container_runtimes to setattr on callers fifo_files - Fix restorecon to not error on missing directory- Make sure we pull in the latest selinux-policy- Add map support to container-selinux for RHEL 7.5 - Dontudit attempts to write to kernel_sysctl_t- Add label for /var/lib/origin - Add customizable_file_t to customizable_types- Add policy for container_logreader_t- Allow dnsmasq to dbus chat with spc_t- Allow containers to create all socket classes- Label overlay directories under /var/lib/containers/ correctly- Allow spc_t to load kernel modules from inside of container- Allow containers to list cgroup directories - Transition for unconfined_service_t to container_runtime_t when executing container_runtime_exec_t.- Run restorecon /usr/bin/podman in postinstall- Add labels to allow podman to be run from a systemd unit file- Set the version of SELinux policy required to the latest to fix build issues.- Allow container_runtime_t to transition to spc_t over unlabeled filesAllow iptables to read container state Dontaudit attempts from containers to write to /proc/self Allow spc_t to change attributes on container_runtime_t fifo files- Add better support for writing custom selinux policy for customer container domains.- Allow shell_exec_t as a container_runtime_t entrypoint- Allow bin_t as a container_runtime_t entrypoint- Add support for MLS running container runtimes - Add missing allow rules for running systemd in a container- Update policy to match master branch - Remove typebounds and replace with nnp_transition and nosuid_transition calls- Add support to nnp_transition for container domains - Eliminates need for typebounds.- Allow container_runtime_t to use user ttys - Fixes bounds check for container_t- Allow container runtimes to use interited terminals. This helps satisfy the bounds check of container_t versus container_runtime_t.- Allow container runtimes to mmap container_file_t devices - Add labeling for rhel push plugin- Allow containers to use inherited ttys - Allow ostree to handle labels under /var/lib/containers/ostree- Allow containers to relabelto/from all file types to container_file_t- Allow container to map chr_files labeled container_file_t- Dontaudit container processes getattr on kernel file systems- Allow containers to read /etc/resolv.conf and /etc/hosts if volume - mounted into container.- Make sure users creating content in /var/lib with right labels- Allow the container runtime to dbus chat with dnsmasq - add dontaudit rules for container trying to write to /proc- Add support for lxcd - Add support for labeling of tmpfs storage created within a container.- Allow a container to umount a container_file_t filesystem- Allow container runtimes to work with the netfilter sockets - Allow container_file_t to be an entrypoint for VM's - Allow spc_t domains to transition to svirt_t- Make sure container_runtime_t has all access of container_t- Allow container runtimes to create sockets in tmp dirs- Add additonal support for crio labeling.- Fixup spec file conditionals- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- Allow containers to execmod on container_share_t files.- Relabel runc and crio executables- Allow container processes to getsession- update release tag to isolate from 7.3- Fix mcs transition problem on stdin/stdout/stderr - Add labels for CRI-O - Allow containers to use tunnel sockets- Resolves: #1451289 - rebase to v2.15 - built @origin/RHEL-1.12 commit 583ca40- Make sure we have a late enough version of policycoreutils- Update to the latest container-selinux patch from upstream - Label files under /usr/libexec/lxc as container_runtime_exec_t - Give container_t access to XFRM sockets - Allow spc_t to dbus chat with init system - Allow containers to read cgroup configuration mounted into a container- Resolves: #1425574 - built commit 79a6d70- Resolves: #1420591 - built @origin/RHEL-1.12 commit 8f876c4- built @origin/RHEL-1.12 commit 33cb78b-- built origin/RHEL-1.12 commit 21dd37b- correct version-release in changelog entries- Add typebounds statement for container_t from container_runtime_t - We should only label runc not runc*- Fix labeling on /usr/bin/runc.* - Add sandbox_net_domain access to container.te - Remove containers ability to look at /etc content- use upstream's RHEL-1.12 branch, commit 56c32da for CentOS 7- properly disable docker module in %post- depend on selinux-policy-targeted - relabel docker-latest* files as well- bump to v2.2 - additional labeling for ocid- install policy at level 200 - From: Dan Walsh - Resolves: #1406517 - bump to v2.0 (first upload to Fedora as a standalone package) - include projectatomic/RHEL-1.12 branch commit for building on centos/rhel- new package (separated from docker)noarchx86-01.bsys.centos.org 1593615304container-selinux-911c772.tar.gzcontainer-selinux.speccpiogzip9?|C. ̥o۶m۸m۶m۶m߶mm?5y6d"urd̘ˌ'lfg4s13us6sbb2`w1t7 r)tVY_q'-J7زW@6u/Z&5m',(A%|fn3zp+bT97+]]X].̢dA}?==Bɿx_J?=*u-ixozBl|о}%_3JW#=>?n樗NHD/cc5gXeqKUL<`LRc#xvǐ̤mf>wRh#u_apq eF 9~lyv\= X <}4\l}X\Sk̉+=ib~\W*}0G4>/3~ۆ_b͞+`k⦮Cll*~F6107v^]?fJD'*0_Sn/Z$54ҹiW3J4xFh20]׎&MV8UAy/mLIJJNo#3,d@ (ݛ0:[s~B?bwT O xg՟="̑u6V>'$ǃz`uإ}F.FkX5i !/)xg'Z x8Va,Z:b%d^JD/]i V-#jq$l\,JӸuRtMMi.@$}LiFh;}b{a/@b2[rԽM/`h=B--A;dBCC\ΐT2:>.$\t]# b p/#ƮsQa#7D|Ӗ)ǎ2*#1Œ 0C;aG*-^<' eٳ?Qgұs?,'@M\}ZԩC@sM4h-7q04@j!2Ē=J$$Ytၒ ӊE.P|1{) |0 =l(*M3gzGuàW5JndچMb<I ;tw2$K+3ؕt:؁Uɠ# Dzitt~RW50_lYa4D(-x/Is%!W K&`iz)c)dlvqv )FPfqb΅çnvʴҳ,$T8EŭfH >scBìWA h&2a}8K.a 7cv= r f)03%P㯔`Ȭ .h3Ndl(̌S _N˝;)zm[Gz {x=/bd2_ M)lX(hzRJ\Y iI:]?! HUrBIu=vx# B s1b>M9P͸| YB ;r#(e`9'5z`@ƑqNh|-$vYx23Z qDrxij,l${7$:cX߰Xg?oNd:tZ2i[{ƍ𷤃̔R c$FH`SU6Oq 68E@*s,B .STJNBjm V:4t}Y|,+x=Bav~Q-Qdž(*YXLXMbj j;im!NTUH'6lW]xYܳ}YjAjl dfIAGlz ^Rw’ 7KcDJ[zV01ch0a{0|Eb߇d"ZZ(P7Jv.N:"g?Lr8#װԴ5䆥p;O+K_n-buNtzfa3}%h86 עV$ MũOG*%(Gs}:Ĩ֑C9-XR+w]l(ˣ)Q/VPs n&{oQ-9a *@/3:I`)=dC_c˹p!aQJGI .9W~GLQY2 GJ{F^?Np htG4,7m`:95u$QcUVe?h8"殹7{صL&Qq :n1 ȦǑg $͇ yh ڈ:Ubgu6GmSRCPkAGFg{pϔsݖ0cHܑfVu­X;Z=g ۂ(^OSE4CFX#ұb3hr Y@h #&s!VbK`fEblj̚2NE/+B7X#=px!B~2}0{e%L }"D|I? xڥ#wW5R`x3t,^(yCZEaB SȑնsoitR J2ͦq_PCN},nu*pT]g#dvqC|ZɆkfr܏KeF퉾otPbMnc3"81n;q:!섾B`䡐/g쫵@..:W]W#&0ttW^H9 B~xHS,}lL;ӻgQ-|~ګvp˜JA:{ ^cTϠuNY[^9kd # だLP*}ʘ%|]d}2ZϷYOPzݞ!Fbm+;z5956D|&{wxeM}H]=vn7[NT8L_HzwdCY~ӯIô4{jF(ls83-v&BrKW8H ".HiCy9 qP|;],-)E/cYdO^N`b*lmm%-n'R]L~jStjdk(`a"B×~-VExi*Ȝ<6kQk}7Y=_t>!=1tJO ;8w݆5SoSSnSW*OQ c~ ^H{p?q\*[Evbr%x\؅$Wґ";r û #4:X:p̋62$ۄ +w[WJ,NL%SYEMΪN"tju貔\T mCƳٴ% .'kV3 ހ .AGCmֱ*[uYұU 9EVT8s;B4YxZ{MҡGbuD(#[q3a^kC0CX%7AQ>2Btbb(A%D/~u9EYؤ|_%q.<ιA)%D 7nM%@ۥK_ILj?/a"58ՂD(/?I8F5#[jGR]*G\\z7c\"2i5KRUF`e6G_,rFy{=sY{0[8a"I?;VpEW$M} 60'dxs+ Ъ`닷,mA1t|E ӖG$ s*W7gk^ Wjk5J-щxS!k#kJuB$ 8F&읦|?g'kh|R]7saSV aԏEJ?׽AIOb)ʁ;D ̍1Ӡ-z?~wſjWỰZNpc\ے56S8kn? C)6]y8[[O cce~o ?=>}we*{} "rFW1> 6gNJ/i߉[[%F_gK< btZArlMJ){<;~Vzf,FD$jWo:Zʵ>5?4V>8 IN)=LNj?~vbI"g/}I6sMܓ6$NvxJHȔHZ7۪% )η[L*a͈^nk0}Yɷ| r81)5dRa_2׫&GD2b(JNh$Gx'wo!#ea\G!OHQ0KeqLO"罢x 0&#ڸ 04^@]ؘr&A'zn:\O#M8_4%F_*upOoJ`l٤=h7sOu9h䬔U2˥(" !Fe`Ĥ݆W}%VAЃ:Ӭy@KЍτɪ[_#߾.g' ԛs fiWRQV9/⺢?z[fjcNȍy1Lnawm͌xlX3L`ixPNt*ϪR((&asI]b<ϥ ju%·F-;3D?@]˶~7t X髌' A٣{=e`F*8Bk!!)J>&'V1,G]nl#zLzD(⑲ P5a@ PM[pp#bcaSخx4/%bB~-E]aGSj Ӗ6:`_OH2Ae$oتHDy=3o mHvoW`Ao =D(!aKa7ܶwˡNq rrh֌/vvK/;P+ ed:e7d7xlφ0^,YE+BX=5L`}/=:&ݤ1%v}T|\<8x(~lBi/TxttM=b~V #+BZ'WsVVt:w< CBC&p!*;-*sVGexI=0H[He<Ƀ=_y},M)|yrЧ%D%!<1ȭW@b߯ߙ%֘ddo+h}Ե7veDQ [@Jun?6㍒#}D4@"Fީ̠#w[;xIڑCo',O&}&TvJ<OXAА=~u,1] "$9o{©1bޔ1S5;/FPf0-ф$u&7Ze4ǡ*?/_I/i V%xK8 ccc9P/ɋFwǕ12?PCh\'? SmGcvDʦI&\ ]V* UX2῝_: f@1:<] g(#yfHбk@1۰I:^y`lTÝkc7U_nK-zR n 0Z;y*g 鲹Tz0+RK»$}[UP@;iQ611P+%Js>uקWnm빔/Rʤu%H*]ج-ղ}-E`eϨ5 :j T@m$鯱2Js k߫ {v D!o)`^9\]zF̶ŀ.-9P/r jQvPڀ;8צam :?+zg"Qu֛=c8eZSA |fuFذ|Ea .T rܿƍ1m=Z CI-&]YZ7{ެ<9(4!=Wd2JPL58acz b-+k,Xg }qaؿu9ŅXC4?<;gU?PyA>98Fd6myq=^V%qȵvusV("Us73x$~'2\Y[18aCj&+OVPzu*<'MGN?Cb Ď)m)z_QbMG_M`b~WH c|ͽbw$=Ƴ̤LlI7g?$s4V&rqw|6Eb˼WpwvZ@t])/^s_o`gH^꽤 aMv;li+,pTS]עiԖ~TQDeh R<7٨Iq8RV &IjB󒔔=&UtNKE1 n3 )` ~=tN${(RGH:g 5Q.;'*݂R%l vNn`4'4cܸ`-&0%2Oo Od֠2q=N5WܥZ2(G]W\DgYw|lF R /d# ]XOQd`=Fh> GyF]uG juJqr#hyŴh͐8a F>mϿƍWCܵ *]ڏjh!uK'9֬Eg N[ KӇμ2@YDcFc1lk.eFp}mH t1i&,F^^9(Ӂd -W*EvTDjׂ͉BMH`YWAX+b|j*$z YX@sa)3* ~S1BV59+U:6x'(Jpݜb S5;"3yHWڮ7.fzE5*(~yzG :Hk'|tG bV; 4Ć84"dS< с"E4TW{A^HYQY{5 %T ?z>xt>x|gI2ð0hy,+vƩ[6Y&Fî:kWI?UlOjVmU|Vj:sh ݂"mmX<ϬOrZ'8sDfjtŮ°rwh-o;a(L׸B_i 'J) ]<m%n{P^v_(ƓatW rnMߧV<+Wn>h+τj|-=C 4GmXϖciБ*D8rф%ъN_ aL# jo/n>pO wWuY*48\yPF>)љ҉ch-STv;S/$/ϴzRJJ~sӐ{[U*oJJ(جW_BJKLwTLTլ|2=lT7|?5 yS4Mq6oB݃·Xw68wq>5qST\:k`<]L2,MV]xKMOl,6g2b{}(ڙi~@W,^a6ʋDz`w`/|1|P֩`83l‰3Y ;{)B̓aM`P[x3Cb\*'®f[:d #IX<y~ (fyL&pS*~]Fǟ+݃B/H9ڞ&֠SrNφ44`y\hP1XnL|F9Cggc+J] w'UQ?: OoE4WW d):~ך 6b |m b$.enYHv>]gnHS/'o ƪ"HtqN0}nm$tL;'^98" lKbɟJwtJ^j֨74!ʘy pUTV ɛSK԰z{X2j-zKIml0ٵ=JGꊊ,LH\&kS|ނR5>!3FڡɩhRaEU64:(ẂަNӪ rij1=D~xV,bU o:\HRIS eH@CJF_𥚕1꼗$^G"V#gT2{+QWc6T.F6 q(= ˁ|Uy:oNmQ:Eg[DK S~][Sp^?yObaC&7}{}ؓ! {W@ܩ=-58pcy$׺Klߨ#Pd@L- ad./UOkGVڍ'.o7uMQ@I ; ͇@WҨY1r&l,EPZjj7ϮFZpNbj d\{uD QQr4c#yf h8k.Bf8|'h%#yJYAGIALf8ʎ!p7v?wmt,B^%O!D_lNdQcТHw^ay/2 LCMavEx}kP:5 @#Af }!kb~S93ih^7h N6Cs04R Dum]7-v.h@SRXl3n;ПlӢlR"(vͤQ۝=uMѪ-֔ CӸ< "}EyyaiI R'j}!jSǀAcegF]۴eiӹo g/%7|}¯vGg$u߹ ~mrhC{@s٤ɍ і OjpW򍧗NQ1FvʵAٳOBڳN۸LA$/Ála#i{6z l8E(hJE\E(uit*'>w*惫%SvKiz|*a(O:v6mDZiz*HY`6RLKऩ:&3zqN=#I`Dv-X؏w:)DYt/\/Ɋڤ QD3:&'uU6bBrHB6^a %z8Zp=";idgTb/obhvЖ,>NR)VC g'TP?[ ED:[^e"RAt/'eDCI25S{I "|tMM c)cp}%\a@s3ߪ>~@Xh(B@|j2jg<.V @č@Fw%M>dw-rt#N\""t،5ᖒ@1k\*+lԎ@zI`{j AaK;Kk aڲ ˧(;̂&tG gAe co~)lb89KR1շ";VH7U1O۹cw!w,q`tKN/Dlnܛ]^sk'mz:—WkݮӤ%R|d_ߛ b^Տ,^*b5o8\z@qe$jM?Ġ3J354$cI5-؁W7Q7X$u28\Fh)uZGʚב=AE˜fŲꕋie jQbkr &`Z 8f%1y vLd+4k,Ɯv vE\5H+rt+F,:bFux'4*XK$ Kbi}JQ`44C [b 0+{ 2sL è_߫i)` 1W!K3Y ;h0TiRbsH<@_p;OcZ*gd!C{x6V7r]!N sD &|1Per(N?Nf"t4"rRLj 4w FV-.-b$'$xz]W @0U=z=]QmVcFe!tjE90ϰ g~"&.QEHꞣKœ®.EŮ5{Vr8ǻ}$쫙ZH/ Fx*dS}I XQ vkgg]$6N9Lo𒘹e$3e&brJl&.Ce,ПF-N:RAd*Xfýk7Д,Čl[*貏4e 5(IhN=;O% |czoYS@%K(-NXU9{zd#k5HQ.a2U=cHF_ Xڲ0Qʆ,#Fe`zChPɺVlHl^o[e۱ bS֌E(':z+úp\h?^54mG1؇49A!#-(yXz{'[z2L%&]!@) ;|ڶ2F˳0 ʭFLY|{'hJ}]qj(2\%=] e,IKue&˥_hj TgUȓxݨ`J,ԖozDSP,WCljVޮM fX`@ 0i-Vrg<+Ɇ-[e̤_l찉` l(bD׋u+8հ8l6%m7fz➥JNZ&'XFvIߙ[BuOU/Tz{1l& _t_[dX# h`Q\3W{Y6a;36m ҏrܷuc=!>޴5N^s]@-U,F%]*VruùIt*8NHnϘh-я|C/cooy<@X%'F !q78ZTN}bxx-)V_JvmՍ4 kSDVcxSDd'\tBTxU1CzK-(.툧Η^XүQSi(UmPd0ɱ,aa B!ϡV@[C aƺA&lЅjl7P[5HPD*^O{6 @T~ b8)2v9E;/) J@TP˕T {ņOG3UKoXC}lGsē Weg1 ]UX[HкW()\qݓD:ZCWa5_҆RbiQu9֟ ?W[ GˤAyJo>jbl)ș "&҄5Y!6>C0z(i($E^GMNEMhC\UŪ‹C H+ΐ㬍^4 {UE+k(Ͻ3LH{99ޔ'Nٷ_Źh;w=;({Y/ޫZuk2s^/޲ڤeL/a\ ^rp[i'=ãxoǩ T{n};3^9߻u/kWչo|BNI/=;SN:[ I&NYrXzm+BiǭmzuZ>ھxj+9ƕoxf/5/qҸkޞi}@n>hEq%߈AjdKse~2pɚjΟϝgx'8f|LO8ƃ /}eΊ-[{ㄨD_>lL[ k~;oqՊ}~2,)lvvυ]9u{Ӎ+ 6|dũQεKw;2daLɫ6N.͸¶{w[Ncƛ{e񷌜=7xty9Xz=pfݟ'g|bO؅ZtpG]EowJ?QQu;1tӁ%lvK{ԟu^q~m K+K+dUߥyӟhYIO6<~˩Ng:ꤾ OLXv>j݆Q5w&ܴ >0ssOM{s]~È~3>7zzޱ=c&˛.zyC>GAoE@ğ m_B}6S`ߏ?/N0<ݫߝѱ7;@U_9򔲁㪣G|Jp都pȮimqG|[}Vsˉuo~ޏez+K3u,_MYhʶ7gXdf`PbfZMߌ3gwx._P5f;xԓ;gm֗Wwھ|WU􋝢z3zQ'+KV?}ee}ES_?[1jϭܜIgi̭=r>.15yi.MZik׊xa_}iKJzko[¤}jg.xw:_|ȁ~?㋘n_>Mf8^TotMUfݿgMRc~c_jt7wti74>ڭp?snnXgs܁l*jW70i8G\sٞf6vGٜΩ!C\h;Wm]kk(&wa%1qLc}fch˅Uu~v׼Vӿt.]O;z > Ϛ}YT;MS[3nYP%#6gj^!Fp6;L[v8M fk w[|f!6|CɈ^,r}'Jg< m]FÈʺ; 3{f9ҙ=eOMfJ}ߎY7z ;|]{~[~^0BǗ{S )'oZ$,eߦK~]kpHG:._q}/Oo]w&WJE(U~chn7twчv_5w5||KEG XP07_ޒ0OkObi/WTl]>~֐~n+|2ci+Ub[E=Yvg׎cW]9r]Ҵ1TUT_ps祊[]={hy͞{Ϟ&hIηLҶmL߭d߭?$P)kJfk[ UJ198D3@Or!Scb?j6Wa%H_p\![ xK&Ɲ`3 gəlNv'Y+!8QΎs )R>"р"dǷ>ۍf P>hсܼgc(A2"ټANV>[H03>Q (R q,? (!:!DFc]䝏2bhxSSDXߎP% [x^|4LEO0PQ"1 GJހ(P쀂X$=D*yW.#18P1P BvMD(ykgiBvk7}rd)Lh%Wj+W}𱒆A1^鵛o}TD#ZYeYp)`\a4g8͝؀ʞx7N$n_9~c]P s:]wyȢko!*`lN1XtYr#!HcѬ(2a>[e`W.)닛d|9g׾.fCKF漅J.]R;VdP)Glp> Ve  1D[==+kB ybҼ2ݢ2#@ gsс8_1um[,52AA4otlcW]G! +b8rT.bq &Ũi܄S2ӳрopαzɪK4%Q$(v`T_u cF4c b"g/JNLl ui/2۾(6z1Ez")$@.Ŷ N UHUˇ`L!{9)qhȌLŨڧ#5Hށ'a7~ O8?+#œ#u@Ip ' p|~ iSI6 jB1 F$fQWJ~լ @G*೓!yRJ[#/lp (Ah"9|52I@8ciX--`!+ &P "D8e4f'%#Yr^w@hԸPQBcwk]Yx%u@$÷ CC"DK p/s)T3q;P\<FUlVX)|Zg}jpĞoNQ`rRLL j@+q}aQO[죠89t u4HKWs3A)"D9tM;%ݒn+bHWC'DRV|>CO1%cM1$~l1JX/á\ B[2%LW|ʄT@{p!$ &8.[H]/!% 38Aj`,N4 wVD~Q'RPAiFZ0' w"l@xUťC+&=cW"n;qoM-X#`z.qW4Ǩu)жA,HYm 4U%(N DC u|#I-*PG&""DG>BXa":6RN f Jܐؼ p_)b1Q<reUb h+_Oha5rDSj\-!H[k۔# rcQ|\I&v" fKk'EJ8Tw4OnRVd|$h|hM(:Kx4Q%%Ǟ`CR=rY(M#C}"_N+I|D7^n6ǘFbuD!ϤYD՜)/Oס=Cn&er_% SnZu3EN% cg"FH\ ^ W1Pa!Y -ѺmJ!ؼXmD>#$6QY'\gJP*2\0Zj#3""ib_JSϤpn-z<ߢf&\T)c\&Eoa R  椖a@S0њVI~6el }ܜTnYjs1aUAY4ɲI; ZbqQIWJX#(baI;\ͥ%)ɚdܚB%֠1Zi%4eJJ1_ݔmn5ٕnN\NͩUB(mfV)&k+X57ZbkS\_E!z|@9_QXh*͎t FZ*f4H?(Rk51N\!J|ZK~E]2[#5!HBl0 R b&hT['n;{秜,Jy/S-|}o'0%8Ɗ(dZrqp0$,4%A`B6IS$0  `/?#pOF\i?B%_tBW06m3>Z^e AJ\P* 5dKgE7xK/Xmq-G~b2a/5oXipLIPPL( vJfRJ NpPѿԼU%.p^4gH_n>&_ʼnHD5u?'{?:fgu]gcpͯ