container-selinux-2:2.189.0-1.module_el8.7.0+1217+ea57d1f1 >  A c+/U]cpV&S(R뇺7iiw9w^ ~OEgl'XvEk>%|t[9`DdHfV6S feIuԇhgOzu.Ew!3Q_"qծ!׋P:2i-t&T{"֯:Iܠ'6b$Sy^nX"8sU/b:+:hfwI]ńj&ĉ@N  #2ޒKt9:9 Lib&bbkdER@N#(FxW!7|⌼#9BKw6 ?+: % ]ByiDu *=|~suq[44{RpN}Kxv3(']$ (@GCЩ IfekgLFj _&zGWb⎽uT":3Q>Be+D20f04bcc614f75b71a3d8d99859ab9044af6b59288ef65a3d63957f3450ed978df83cae1a959aa9dc6654426fefc371f5a8fe654c+/U]ׯH8\/PE0H G#35[y CV 3Ua Aљ8}}ȴ꟰ sU낖ǡX@/.In\D{~ۄHsۚb.K>GG~i` L^50)V1)D=#ctc9WYoH@L@O.J#[RR>HJsqKzFJj-0Ak6J5x8 Rb P_׊`u[8RC]Z:-Fؙ8 P8n$YJYz^ n3yƈr͛&0"om `dR1[sQ켁u Mx"-^t]|]ۑ[er*&9esc:ks_pp_sf헤3o+Š07&@#w# ,ƗDl'!~> B\Ü}`z ZѠ!*LKt:_W(v[oieG$b >p7M}?Mmd< @ h 2bhp|    W \h3(a8h9|:ALAFLHGLlHLxILRL\L]L^LdLeLfLLLLM8M<Ccontainer-selinux2.189.01.module_el8.7.0+1217+ea57d1f1SELinux policies for container runtimesSELinux policy modules for use with container runtimes.c+x86-01.mbox.centos.orgCentOSCentOSGPLv2CentOS Buildsys Unspecifiedv2.189.0.tar.gzcontainer-selinux-1957904.patchhttps://github.com/containers/container-selinuxlinuxnoarch_1f c+c+c+53f5a4e30667ee0baf37ec7256cb66c05b2b2afd1a3338cdee6c4685be5a7bad5059222adc10506fb5fd410116ccf334e120d967a174f999f515a70fdbcdeaa428077feee4804b445f8bd6144a96e3049ab2396d20dd5afaeb803c1c24c6a64b mockbuildmockbuildmockbuildmockbuildmockbuildmockbuild  gitpkgconfig(systemd)rpmlib(CompressedFileNames)rpmlib(FileDigests)selinux-policyselinux-policy-devel3.0.4-14.6.0-13.14.3-80.el83.14.3-80.el84.14.3bVbbkb_b<]@b%b@bOb@aar@a@a@a@aaa+@aaa]aQ@aI@aA@a'@a&0a /` @`9@`Ȗ@```q`@`@`N@`@`dd@`Y@`&m`_T_`@_%_%_F@__"_5+@_16_p@_5_X@^n@^Ӝ@^@^^k@]@]B]]@]|@]@]X]W]R@]@\M[[ͻ[[@[[Xf@[L[K7@["X[@[@[[[Z@Z?ZZZ%Z%Z@Z - 2:2.189.0-1Jindrich Novy - 2:2.188.0-1Jindrich Novy - 2:2.187.0-1Jindrich Novy - 2:2.183.0-1Jindrich Novy - 2:2.181.0-1Jindrich Novy - 2:2.180.0-1Jindrich Novy - 2:2.179.1-1Jindrich Novy - 2:2.178.0-1Jindrich Novy - 2:2.177.0-1Jindrich Novy - 2:2.176.0-1Jindrich Novy - 2:2.174.0-1Jindrich Novy - 2:2.173.2-1Jindrich Novy - 2:2.173.1-2Jindrich Novy - 2:2.173.1-1Jindrich Novy - 2:2.173.0-2Jindrich Novy - 2:2.173.0-1Jindrich Novy - 2:2.172.1-1Jindrich Novy - 2:2.172.0-1Jindrich Novy - 2:2.171.0-1Jindrich Novy - 2:2.170.0-1Jindrich Novy - 2:2.169.0-1Vit Mojzis - 2:2.168.0-2Jindrich Novy - 2:2.168.0-1Jindrich Novy - 2:2.167.0-1Jindrich Novy - 2:2.165.1-2Jindrich Novy - 2:2.164.2-1Jindrich Novy - 2:2.164.1-1Jindrich Novy - 2:2.163.0-2Jindrich Novy - 2:2.163.0-1Jindrich Novy - 2:2.162.2-1Jindrich Novy - 2:2.162.1-1Jindrich Novy - 2:2.162.0-1Jindrich Novy - 2:2.161.1-2Jindrich Novy - 2:2.161.1-1Jindrich Novy - 2:2.160.2-1Jindrich Novy - 2:2.160.1-1Jindrich Novy - 2:2.160.0-1Jindrich Novy - 2:2.159.0-1Jindrich Novy - 2:2.158.0-1Jindrich Novy - 2:2.156.0-1Jindrich Novy - 2:2.155.0-1Jindrich Novy - 2:2.154.0-1Jindrich Novy - 2:2.153.0-1Jindrich Novy - 2:2.152.0-1Jindrich Novy - 2:2.151.0-1Jindrich Novy - 2:2.150.0-1Jindrich Novy - 2:2.145.0-1Jindrich Novy - 2:2.144.0-1Jindrich Novy - 2:2.143.0-1Jindrich Novy - 2:2.142.0-1Jindrich Novy - 2:2.139.0-1Jindrich Novy - 2:2.138.0-1Jindrich Novy - 2:2.137.0-1Jindrich Novy - 2:2.135.0-1Jindrich Novy - 2:2.134.0-1Jindrich Novy - 2:2.132.0-1Jindrich Novy - 2:2.130.0-1Jindrich Novy - 2:2.124.0-1Jindrich Novy - 2:2.123.0-2Jindrich Novy - 2:2.123.0-1Jindrich Novy - 2:2.122.0-1Jindrich Novy - 2:2.119.0-3.gita233788Jindrich Novy - 2:2.119.0-2Jindrich Novy - 2:2.119.0-1Jindrich Novy - 2:2.116-1Jindrich Novy - 2:2.107-2Lokesh Mandvekar - 2:2.107-1Lokesh Mandvekar - 2:2.89-1.git2521d0dLokesh Mandvekar - 2:2.75-1.git99e2cfdLokesh Mandvekar - 2:2.74-1Frantisek Kluknavsky - 2:2.73-3Frantisek Kluknavsky - 2:2.73-2Dan Walsh - 2.69-3Dan Walsh - 2.69-2Dan Walsh - 2.68-1Dan Walsh - 2.67-1Dan Walsh - 2.66-1Dan Walsh - 2.64-1Dan Walsh - 2.62-1Dan Walsh - 2.61-1Dan Walsh - 2.60-1Dan Walsh - 2.58-2Dan Walsh - 2.58-1Dan Walsh - 2.57-1Dan Walsh - 2.56-1Dan Walsh - 2.55-1Dan Walsh - 2.52-1Dan Walsh - 2.51-1Dan Walsh - 2.50-1Dan Walsh - 2.49-1Dan Walsh - 2.48-1Dan Walsh - 2.41-1Dan Walsh - 2.40-1Dan Walsh - 2.39-1Dan Walsh - 2.38-1Dan Walsh - 2.37-1Dan Walsh - 2.36-1Dan Walsh - 2.35-1Dan Walsh - 2.34-1Dan Walsh - 2.33-1Dan Walsh - 2.32-1Dan Walsh - 2.31-1Dan Walsh - 2.29-1Dan Walsh - 2.28-1Dan Walsh - 2.27-1Dan Walsh - 2.24-1Dan Walsh - 2.23-1Dan Walsh - 2.22-1Troy Dawson - 2.21-3Fedora Release Engineering - 2:2.21-2Dan Walsh - 2.21-1Dan Walsh - 2.20-2Dan Walsh - 2.20-1Lokesh Mandvekar - 2:2.19-2.1Dan Walsh - 2:2.19-1Lokesh Mandvekar - 2:2.15-1.1Dan Walsh - 2:2.10-2.1Dan Walsh - 2:2.10-1Lokesh Mandvekar - 2:2.9-4Lokesh Mandvekar - 2:2.9-3Lokesh Mandvekar - 2:2.9-2Lokesh Mandvekar - 2:2.8-2Lokesh Mandvekar - 2:2.7-1Lokesh Mandvekar - 2:2.4-2Dan Walsh - 2:2.4-1Dan Walsh - 2:2.3-1Lokesh Mandvekar - 2:2.2-4Jonathan Lebon - 2:2.2-3Lokesh Mandvekar - 2:2.2-2Lokesh Mandvekar - 2:2.2-1Lokesh Mandvekar - 2:2.0-2Lokesh Mandvekar - 2:2.0-1Lokesh Mandvekar - 2:1.12.4-29- update to https://github.com/containers/container-selinux/releases/tag/v2.189.0 - Related: #2061390- update to https://github.com/containers/container-selinux/releases/tag/v2.188.0 - Related: #2061390- update to https://github.com/containers/container-selinux/releases/tag/v2.187.0 - Related: #2061390- update to https://github.com/containers/container-selinux/releases/tag/v2.183.0 - Related: #2061390- update to https://github.com/containers/container-selinux/releases/tag/v2.181.0 - Related: #2061390- update to https://github.com/containers/container-selinux/releases/tag/v2.180.0 - Related: #2061390- update to https://github.com/containers/container-selinux/releases/tag/v2.179.1 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.178.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.177.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.176.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.174.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.173.2 - Related: #2001445- update minimal selinux_policy dependency - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.173.1 - Related: #2001445- lockdown allow rule was removed - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.173.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.172.1 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.172.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.171.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.170.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.169.0 - Related: #2001445- Start shipping udica templates - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.168.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.167.0 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.165.1 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.164.2 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.164.1 - Related: #1934415- fix the build of 2.163.0 - Resolves: #1957904- update to https://github.com/containers/container-selinux/releases/tag/v2.163.0 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.162.2 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.162.1 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.162.0 - Related: #1934415- do not use lockdown class yet - it is not available in RHEL - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.161.1 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.160.2 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.160.1 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.160.0 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.159.0 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.158.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.156.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.155.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.154.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.153.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.152.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.151.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.150.0 - Related: #1883490- synchronize with stream-container-tools-rhel8 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.144.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.143.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.142.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.139.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.138.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.137.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.135.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.134.0 - Related: #1821193- synchronize containter-tools 8.3.0 with 8.2.1 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.130.0 - don't use macros in changelog - Related: #1821193- update to 2.124.0 - Related: RHELPLAN-25139- implement spec file refactoring by Zdenek Pytela, namely: Change the uninstall command in the %postun section of the specfile to use the %selinux_modules_uninstall macro which uses priority 200. Change the install command in the %post section if the specfile to use the %selinux_modules_install macro. Replace relabel commands with using the %selinux_relabel_pre and %selinux_relabel_post macros. Change formatting so that the lines are vertically aligned in the %postun section. (https://github.com/containers/container-selinux/pull/85) - Related: RHELPLAN-25139- update to 2.123.0 - Related: RHELPLAN-25139- update to 2.122.0 - Related: RHELPLAN-25139- update to master container-selinux - bug 1769469 - Related: RHELPLAN-25139- fix post scriptlet - fail if semodule fails - bug 1729272 - Related: RHELPLAN-25139- update to 2.119.0 - Related: RHELPLAN-25139- update to 2.116 Resolves: #1748519- Use at least selinux policy 3.14.3-9.el8, Resolves: #1728700- Resolves: #1720654 - rebase to v2.107- bump to v2.89- bump to v2.75 - built commit 99e2cfd- Resolves: #1641655 - bump to v2.74 - built commit a62c2db- tweak macro for fedora - applies to rhel8 as well- moved changelog entries: - Define spc_t as a container_domain, so that container_runtime will transition to spc_t even when setup with nosuid. - Allow container_runtimes to setattr on callers fifo_files - Fix restorecon to not error on missing directory- Make sure we pull in the latest selinux-policy- Add map support to container-selinux for RHEL 7.5 - Dontudit attempts to write to kernel_sysctl_t- Add label for /var/lib/origin - Add customizable_file_t to customizable_types- Add policy for container_logreader_t- Allow dnsmasq to dbus chat with spc_t- Allow containers to create all socket classes- Label overlay directories under /var/lib/containers/ correctly- Allow spc_t to load kernel modules from inside of container- Allow containers to list cgroup directories - Transition for unconfined_service_t to container_runtime_t when executing container_runtime_exec_t.- Run restorecon /usr/bin/podman in postinstall- Add labels to allow podman to be run from a systemd unit file- Set the version of SELinux policy required to the latest to fix build issues.- Allow container_runtime_t to transition to spc_t over unlabeled filesAllow iptables to read container state Dontaudit attempts from containers to write to /proc/self Allow spc_t to change attributes on container_runtime_t fifo files- Add better support for writing custom selinux policy for customer container domains.- Allow shell_exec_t as a container_runtime_t entrypoint- Allow bin_t as a container_runtime_t entrypoint- Add support for MLS running container runtimes - Add missing allow rules for running systemd in a container- Update policy to match master branch - Remove typebounds and replace with nnp_transition and nosuid_transition calls- Add support to nnp_transition for container domains - Eliminates need for typebounds.- Allow container_runtime_t to use user ttys - Fixes bounds check for container_t- Allow container runtimes to use interited terminals. This helps satisfy the bounds check of container_t versus container_runtime_t.- Allow container runtimes to mmap container_file_t devices - Add labeling for rhel push plugin- Allow containers to use inherited ttys - Allow ostree to handle labels under /var/lib/containers/ostree- Allow containers to relabelto/from all file types to container_file_t- Allow container to map chr_files labeled container_file_t- Dontaudit container processes getattr on kernel file systems- Allow containers to read /etc/resolv.conf and /etc/hosts if volume - mounted into container.- Make sure users creating content in /var/lib with right labels- Allow the container runtime to dbus chat with dnsmasq - add dontaudit rules for container trying to write to /proc- Add support for lxcd - Add support for labeling of tmpfs storage created within a container.- Allow a container to umount a container_file_t filesystem- Allow container runtimes to work with the netfilter sockets - Allow container_file_t to be an entrypoint for VM's - Allow spc_t domains to transition to svirt_t- Make sure container_runtime_t has all access of container_t- Allow container runtimes to create sockets in tmp dirs- Add additonal support for crio labeling.- Fixup spec file conditionals- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- Allow containers to execmod on container_share_t files.- Relabel runc and crio executables- Allow container processes to getsession- update release tag to isolate from 7.3- Fix mcs transition problem on stdin/stdout/stderr - Add labels for CRI-O - Allow containers to use tunnel sockets- Resolves: #1451289 - rebase to v2.15 - built @origin/RHEL-1.12 commit 583ca40- Make sure we have a late enough version of policycoreutils- Update to the latest container-selinux patch from upstream - Label files under /usr/libexec/lxc as container_runtime_exec_t - Give container_t access to XFRM sockets - Allow spc_t to dbus chat with init system - Allow containers to read cgroup configuration mounted into a container- Resolves: #1425574 - built commit 79a6d70- Resolves: #1420591 - built @origin/RHEL-1.12 commit 8f876c4- built @origin/RHEL-1.12 commit 33cb78b-- built origin/RHEL-1.12 commit 21dd37b- correct version-release in changelog entries- Add typebounds statement for container_t from container_runtime_t - We should only label runc not runc*- Fix labeling on /usr/bin/runc.* - Add sandbox_net_domain access to container.te - Remove containers ability to look at /etc content- use upstream's RHEL-1.12 branch, commit 56c32da for CentOS 7- properly disable docker module in %post- depend on selinux-policy-targeted - relabel docker-latest* files as well- bump to v2.2 - additional labeling for ocid- install policy at level 200 - From: Dan Walsh - Resolves: #1406517 - bump to v2.0 (first upload to Fedora as a standalone package) - include projectatomic/RHEL-1.12 branch commit for building on centos/rhel- new package (separated from docker)noarchx86-01.mbox.centos.org 1663766405container-selinux-1957904.patchcontainer-selinux.specv2.189.0.tar.gzcpiogzip9utf-817de894183e96c8e87eb9e4ca23380ef3c57960af5408be9e50c92bca6170261container-tools:3.0:8070020220921123812:39077419?\ <H˜ k!d( 3̘.*{,YJ{ٕ,3ֶ{.{=y0$ ~+Q_0A~s9!ɐ18,-WV@*Dх urP_E@P7P J a222tCe`2pE\Q.ÐH28.))!HEH45!2 HR8=N!d{7\$*up@>d mO(T= {',C!`ˢ$' Z.(=ţFf uLyb@j- * A1?kA]. LLzz?(8#(qԇIGp@ hٞrtC9c  r̶qR` HV>Py)&W=B*ƒD ' t%eIE@0Gs, q H/ D"C(.6G`f`sgS|  =%@8 Y;<C8(K2п 쎢@Apy )qp .*1@W6C x WR8蓯idJ!0-xNCO 0P$8̩(P,yz$s$G lYPYOq ru0=&T,EG'џa [u(ϲx* 1\S73sSYxCE<  "j?$S]A6J6(oПY #+X\}c=6&:s$w/lpCT <b$DÊ64 P [QH{^߼VeF6'?MvBG3 4M~WRMh cNeL(i(BM6jϼ Ye6؞m*@՝s(NKH6Y/aI0֊VNO_n7#8sl蒰]TA.@HXG1~id`©ħ\ d T"@1ΦdY`.d=g¦ل)aN#@ wQAJqZP!F(BAȿ{ր" NS g'/Y>A0FpSA(1 q}WK N8AAߑ?NP>i8#_w$qĩp*'hh8 8](Rp At?U1xG?M(Gqh*>f*^(LƉ+t 10ϣB hN_G;8p AH$8C1_Hd0|p̻`wŒ!?~ Si̘ HCj%?"H1N)C8EuI))<|4Sa[T. JƠ5T߇)`'X@ 8O0ޚQ+3%9` .|I#Hc Z\; q(2⃡oB' r_sxGbE<-3B 29Lv g[.F#癋7@0qG^8ͩxzʠ>]89Ͽ) 9یhCNpTr?;1huB!g~j_KrKs99B5%(`j] Se`1 00/<9CH";28@FC `8?Ӆ B9RңU7[úqw 2}B8)XwEc7! |Thm7;xZ9C  5^U8V6 /ptd0R,cP a8#/>YjdNݶ@Gw] @@ v 48Đ(XG: _IFHdY *@r`XE =/!'Aa`6 !'TRZDEl/N@,8O E6[Ƨ\VtBaqmTp!H?(Zڥp4Cp3C`ZB[`/)|~ )W^ E; CҘm @AC3o@9 wB - n hOQő~ STj0SBڛ :MIIYDOYaXh9)+B_d昉}f} gLYo0l+˒OH-קYL -C,"u+L T/| kʌ†e0$^L{=(3r aݱx7?$  XQP(>3=O) dañm"o;82; ԕH ɇr!օ0@Pɿ;tF ?L~< AcW:,pϠ* ĉ8*L<4N{$u/}/d)8lbQQ(TB)R8iv)EA? T҅N ~E|4 O=ۘ@ |Z>A7s|Ar 4]E@ 4SJ{,wzpTw MnkQb=/&LOf Y1; vJ'=vc 4;?/ЙhB[N3] g$Ǐܬga FѿzEAHܯhaѩg&x`;8md OR_iqQ f2gRT 1evR.^_Ҥe=1$爒_te8'a3hud(Z9 "7.D_,H~^ݒI"*qtLmg"}8 P&X]q`'( =fF %,X}qEgk$MrŜ?#@/G0 s2? BAJ2J\| aZr?т)(Y WgBrrH%EA&pR`H{GmtCrHE_o5LƙY=5 ..BK8_ ւl]X]#*7HSk DcfB Y^`'_?[[(,ܷF["@s6[t4z،q CE^vs r4!Eܜ]@GDb%C߿k\#ӎ8܆8A~£9:`ڹK-4}i.<3w` |=uX̦ŷW6W"h/4c4o1t2# YL*fp8h6>ڭ(pQGn`F 'e嬟%iMqs nx,J$CDhuUKxuw;EE㿼Kg苄3~Xlݣ꒾Lg|om=K^Ml[d]b`e )E·اwXlx c 3LP}-Rq;;qThsPYd)w+**Zj\^?kŷ>dTU& 7t(9S¹2:fGp߃SSo.X;ſH׷ y6f49k/O L7 \KTd`Tp yNͧ޽㻳.; 5}qߣm&{N- Vv |ꎛ^1mŧKH<|PrȾֳx`˸ EzfEvw}|3J?TV*"]Mr$:2]4q=˯Z< ܤeidPTӥiA657C75&'w yE} k\eRc})%-H\wt˭rk3Z^z̗^ ^n}i;^H>5\qA$V_Q_/j؈FJO^j=73퓑iZq7;$-/·dov>n`Z/@U{*p6[i{*gf!ͩKcw<#דУXWHhCYI^-t}\pݡ"*1Cد{ p6ֈOeH4ںw1ȏ"7W۝k6fk%蟿(*uiӱ,yLK?WMˉGb'5 k7ד믯q+i~Yxz|E#^XZf>艎uTG%}8HGf6[_awPIq˰IGmVk%gt.Y3pTu׮Q/޽>t$PNe#J{Om\ ?=EYZ}47j6'ñW?Ih?u2qF{>s1{aĘ~6ȼi%;2U)"dlȑk-}KWxM!ǯ_bҵ"zyL(oa>ɢuS3!Fʕ2wg}keq4+k9~\n}.=k)jK[rW݁3\jGZ"2i)[RI!QEN:̛ED[^ٰQ~WI/YSavGon>e.'છg5}"Pq҈z(a\ k3oId٬|ܫApc쇉y%e[3{@dQ ^Tٴ`-={80mv&ضFZ H06a+[?eʏ)h LBR)15^aG\i̓2+֩ݡ& ]V3?)ߏwSOPU+wZN3aCZJ&VCi &+L6jDŽ~J4s4{0 Ek~?yhdHæ#Os2R R?X6؞xSh2!q1"fqfW;W}'|s6:>#_9]ΎH#Zqw;T>ެL/ݻ!H}l*Y3O;ؖmM$Dk: s ڌjD (`{3Ｈ5w8tr7h*rqt+jhsIG*nmл=|ަq%}6c&_i\d`[6̮_oԑc_|y›w9c1sl-ׅuHoiV֯"n J)oyPz:B~Xڳ7E-> h3a1gGz\>cjc%rdg ˪OFWOw\rC:nJ3Z9\)e$QYe.YXLn9i4Iy˗T꺊_.S;vIK_s=c84Ó%2nob[U3MÞj=6:]D(F{}ҎM{#wP?uCL1&/TZlʶ\YF =v҉cсl/bb̡ZUĝNOE^R^&Ha{xU!^I^oۊcF>N)v x"rާMO\oN|Ҡu-6dɞ=/=Lm_!(wC}F*lo|(xSr]Rs jՍ58ܧڒlN?f jĤ_dy+R uO 9yn]^iv 3/~NmIe;\8Z_P¥cVLky'%6f`9/U3'Xgݼf'e.&?utU;+M 5-s-U9+d-۰līfiHT5+xI^?fUOeW͖KcySφS^AJJc?!lz˼YP};xW\ɗ3ȻD_7زy^miAe:~KH jWbMc}xNItRooY\_~d3>a}R\۶l(ީz, rbrKz&2߃>6G|gmwxQEB񔏣9i)`x,&[najt)ѻ{՛{<ݜLACF!Ͽ+!J\gGG:|_,˿ׯa*c 8ڜL[/ 3&e-Nqn- yt*ٯ_t宷7ʹ{1x#IZW.^YZ|UX)p^W@Z̓-+T.Uk+S[wb埂X&-4EYc֖K TqFZ~]j&K󾢮TMyJRl!kkU.RbRoԑ; Wvv%}+p7q " Lt5"-+Jv J |K dǗzQw&VL5c9ҷqX:LOm_Ȳ6)6U5 ;'ɗ0W-FҮWi+O9S@ۦp>qHu]&̤s"?V*{s>ߒjsx7?,ƥԄ؊q{=FN۟S鹶lZcɕo;jWr BtO+|z*%\oɈ & +jGVG']ƊU)?,WސՓ>]|mۺ{ U8+~,pKΤtY)7}^]wwyՃ eM1}Uџd7xc ǒmX6Ǒc7_8w.`h"3ԕKEt6Rc9XH\tq}\eИ{g nJz6Xyy?)ս:=Qܗ5Sk\ }gG Z{}ZJgt]='7Y(Ʋm[q+S G[ űʗ@6}I}7z~IG9̣h%Ft|k;UDmrD9OO'*H]떩rmAj(W2R^t6h.],'j$:;7&eDUדG+&EF0= k(^TG7=wuˍ{P-;G-]86p3۷cM^F|9?Ĥ]w{ıs-Z's"Cd{x?;Xo  ^a Y=}QPqgzUVZdkkw/)kujGxYUO@Dg"+ѡ$ =+ٸa Θn/W]ZSqrf@YgE摞ޫSi6'B:5I0e)kqqZW r5'!jBǼxl UO;8\Y$j{D_뛴1#꫈JXBr "þjSLLǙJBC`zơD:[;? EDIsu"}E}MkfL yxߟ2+bK;+=w[7VBntIXdnՈ#3xG07ֽVWT;^X:ٺ{A"g;)-LWGvy>Ҹ晦$. +YzkD =ii?xB  O+3AL9[Wt^8?Nϟw;ԣ.}"hʊ+.R_O'ɠߦ ϕ~?iA*{E<}kzJgh:lOW{|=D]c!"m~M37z#rT{X&s>Z3br޽el.lp̃ Og'PV7h,`ƇyD5Pj;DoJK:n>QS3y/g^i8QpDh| s.Z5i[W= "b> [< Jt+inBxtUMqq1:^ZfOF[磆M t~w -tw#bKtQ瘪F>Цi-sVfSukM 8uY!~gi>*D}}T5I=sJN?` C]*e6qa_b_:l޸)#gk/jz^qM-e"([Gl ֿh xUi'd#V5^);uixi[ie|{kk3Kޯ:I vD;0s<Ɲ.Pn8 h

bp.PTaX^i*5pM5i{.w4^_iv*/—<ew{}ϾQrw}[cQw> {}yǞN6l>p8}]:e7Wݧ|}۔;_l bcHȔA]ΧZ_}rL'֨XiVw]Jo> nk>*{PR8|qbwMVKLO0Qiƪ'suVE( |c-0!3G%G'$SRMHD2%o{.>}'D4qǡ Gt;k˔fjW 1gMzTa-pWB`^yKmb[=5PD޲>'6nWzfHSSVxܝ=8/->źP87Uw+Çʊh>tpe@ʍi 6ǩwbg▖7:Ŀ23}u 5d_۬Ǥf1sQ>S|Vy U/N7FgMy/r֩7AWa령< Tw&wg7QzE1/˳\"r2WmvVhQ2l6}7K1q -_6%X" |֢AֺXQש lu7mZ'|%P/k&% IZ>6z7xE;b_uqWĶ]U<\7LDwnv>rz<eTp?ZX#iih9upw}Ɏ+'}ξϯRVx9joӾitT98\Y^lz/;4/$먃/^sȦrAW> 39斣vqT1_n{DV7mY w\db~a)zOAaGK./yڏ6/JOs<%z]Yj-/fV\/EznM6([NuØR2hd6\E DΙSH7b5-7+^3xxZI6pFx#',sZٸ* U"q-.7 }oNk;Ŷ4&%p`%X{*Q"(Gz8y&\FS abK,mS:b?sV[.S}u 7w0Մ&(XtT!rrŎ-cw9[EKݯ ҈[oy"JQS1߯ջZ2m̵zjO}Vm1.wC70}RdrrVMj}`x#ҹ]7:|x |f dDcqz˓o nUe T,_]nzyЁ|˨CQ{%lc 7?v0=蘶fTKfibo$n NHV ,?4A[O=1#۰K}vGܳ?{X`Ak/! ur\?1򺆔s [lxx͔y~ċ{6+WAZ[5֌Ɇ)[c2uB0Oę4^y4-*[s_i7BջؾvEͻ=wwunS"Zx{M! ;lK{$]mw) e( xbWJ{De':`\40ߖ;Ɗ[/6Fsj@Ecx?/{ᐄ#FNmyu{D;!&$nzgJ/:=kV_*^9qKڿ;V6,$G띗~%[Wp=楳¦o}'^I$qI~E>Ξy15X7y]K:t!M{ ǁs8*\Xt*MEMj]aToɡ׏M彞T<{*qN>)W(qm9[Ƽ.| u[~Mq}eצUd6ObԘMno-by]:d텚8؎o"M5ftmIyM;Ƌ N#C꽝D8/;߅=.튒-c_iS"OQc|S-)p!yha56׷q8yD<|w[}jN-wãgO~SkHn"O%8=)viIyv4wwc,9loHxBK fGQ=eW`Lm)V]=q/.rh_n5ֵJњ񇒏N eۚ$}m>{#T CB=h)-V}g2eo->MζV&Ow ,z{U.>߅YTS82ы,zQudCHrXRPI^7q8$.U9˾BʵFǔ8\݂=7EA_Zg*MyI? m ]pWF Sa"$#!̃i8[.kd91N.k nkfr.6h0ߩUYUXv5TeVUR @Ƶ7G|T{7Greq-s;*c!wuƽRO9/ g7~u sXuXoiJur[i{G T!<&tsYCUk_r^8W⁒DdL,y$8zOdiGWson-tv^sݬ D[~ڢ ל:{)RI7{6G ,JYypτzy'Lu'윺+tÎmttcضmc;ضm۶=ߜŻTuSxW'O+sM 0a㴬-E&~lN oĕc\'1 "*3R㠢%xY ƅw1B6 ScMHhF{`t K Y%rV?R~rJ'-gaӯh0M|پN7"c OE[xBg%tQkrD gDTT]P&~Nwmɲ8c9׳UdóLIusuy\w.L:oiQD yq26Ղ mpf_`޶tI Cy Y-aZg+]yEEz'/@[ģ8u ե[toG2r%TଷM9UiugRaKH)tAi"{7H~vV+& ac/蘥ӂArJ2ZԯwL-<ʜ-yh̼r_46#/JË$=? w}?é!3  ݽpֶ!tOpR?*#Zu'O7 3jZ)xn'vWA55ccnHdZ}õޝ.xφJ#X Ȥb}h! @sql~bi]{e՘vdjB?"pYo"Ih`|?1V[-VQ\QeJ39cg[mY5^LgTsU-O'V;'i囗`*ywT9qd{dh|FZ*ϱҐI;^Rt wA=f'=+sX%WZ"$k?}ܤgzG-Ѣyڐc>֡NY՜?XWIglRh˄ۊ"7zXf:Re~e!{|yClކ;돣$m쪘`iMR'fN2=嶠'#V\ߚQ9B6^\ZʹpǙueMߞbQkGMM.?B${ET8AF_ڦ}`?ܝ<2H3|[_-ybJ5VԒ}GA:Օ]1 dxc?~#G ̛b]T3(7yWM$tma6:Rz7M o#+Մ_} %%/b:VzturJBTWKΓ馛f~ ]Vg).kI1ʖF.|?349VB/^F \P ʪ9\.3#A[Ky%cg)HAk*""vp.@mqDIw>bk9:3D?V#7uRg]l$-ԛv<.BnHnQ⅑t1f)NX*;CpHd4q"Qa*]݄5NiMm?ŧNݩm4ˆ>Fҙk-) r4K9@$1(OPFq@z}Y6O|51!'Zυs9TlwMr?̃!UL~.^8k~n) z&;Wp,C˃^Fo=z*κV⸮^ўw ^yKe1T.Kܩ\s9cJ=q¾ľ5k =f 8+d5^7%ͮ '9-G?m)T |>>%䭄QF0W{7"ctWE7.Q}j'v쬭%RN;SCRЫ/y6IiKýI2ڰ<Ҿ1!0Š}Cl,sݜzԲ|p*VKǯRj .S`3OtDNe]}z䰼4kP/QOJɊ&Lv<|~Knݰ2zb5˖ ̑7qЦ<:<8q1`p`b2ɧ =`徴U@4*M@ܡ@=ң A$1 r]u TK&B̈OQeM̃h V8V s/ƥnK2Ϳ獹~Q97@AE'KRPG.=ͰZ|رi͝X{ (hF Ӣ(IɅfX҄4<@A.gbhO$ae_H~}iCw'ԓ==JTljVGNF>ô-m~Iԋiy|60R`%.r=c}ʜ=[?×Zh26&PdzZB玴aCd_d^x!@0`2ZSp8} *}ߞ*]e乨^mklԅI%<=)|ؿ h mcK;׵C랄Gܼصkc 3Sh= P\4d-f:$[pʥD'BB]UFZ1w*]ZkZ*RE5ewp)^s["Z\TyWNV[R͚.O<-:&'w#fԤ1PR|s|UӈXPL 9 a{߄ë#fvHs'[]~d2y\H2FMKM; 6p]rsWzZ#V4~g#Ѫ3{j_^NoZe:|A*7M/ݣ0(<,u@3*r0Y,>~-zxO0yi<W\^^^3CpQ]2#1]?Rg\~0TLtq)n亢 [Acw|6a%\"![=aY%oe3/)$%)`꯹w󆏗KZ*jr xItF|( O[g2T U76|24ND"J9|.YX2=&֧!9APt)NWV3'ȼ7k:_V;ce(K\L=@;gHWb~b4z}NF}g-:jƱƈwë́F`UkE " d[J; Hcb(z+f51TnTOb4QPOKg.x=ԇb 8RU ǩ1ٝxD捞]:K_sj~X$xm7se5ʫ_1jC\ZPt9 5< b́U ;1Ă PWOTN, U@_>E g*"uy5{2P GgX|iU-[N-^mgJfutlTSx?Iz8sH3iSZfT6S6R8t I{[n΢?lRp%kYG%gИOb TgWO=Rw4zxsIQcBW喇hDAcxI[8`3(V) lZ:p7K%IC.sBfes׉+]v`e\Ff#1 7*qhgnid+A2/Y-5w.[EۧoPJڌXA?g:aPY/ef5rDC oH8"$HQ B"cis99JdM&/H Pe?<2AN%m]F8ߪ9I}H~PzjI:XkAeP̽g\R1~nJ,[ca!DLƁ+I۟h>52 w0^5q*P~}!]!xnO j4'/<ԟBJ T^B}$vt%6wf^lCeE+.pCٿl"|ޜh2M8vΡVie~1ObvLXH;(ίʼbL;W(f,J"ǩg?|"_7qA0aPzݵN|C FIWboص{F֪X.'c-X9&%8z{+3 6Ͱ?8ΠѠl!=Gt[T)sDb=j~*PT Y~ m"LBN#z%} /8/> 1y6FQVRDorW]@WFqH:v4aO>$Q>G6|P̳Yc•yAB#O2$9(5~M}hd:\*wCVBXeEM 0k7*:GGQ\ a2js>DR R9۞5E&K04E 5[]h &%jy˦K`ᕌ Jnji!-t@^ܢ+3Y ,^uiOWܕS55jbdn61A#qby-Pzd3|T&stC ὚e^5tR3b邚E8_>IT_) 3|0eXZQޥjLTC%9pL,O~i/*}m p8n06v-[roLe7wޥPRuD1)ݷ%TJcs,5d%,薌}>T]Ca'T&Zד2.E̹M\O9"ԨҚgnxg(]Ͳv,)5bQ*#FQt/ޠ^*hXJr}#5N!XNQS;ZŴzuS&9TUTsE%%bdQi% 6:~ ![\2pWc[|\LR|LBң·15H-{n c1*ajrk}V-:zS6ƌ\>EJ Dշ.L4aYt"P;HRV`vyɱʙtnNKӎ4Yoi `H&e,Nǣ O)v AJv$L<i!=b3iۥuoV !ŧкS80ƘE~'2t.vW5 5b)l TvukuAe`!4-Ww)m5z5!"i6P5>*'#Z7WEq,X_2Oa lϮ\Z (;Nڵݲ:B>/ W?7`TҚ ,?ԚmRVADwyOJ1;,|(nk_LcF3?JD0#ls4/1,Waijsэy]!'0o=^NgKa.a+"b WYV{ǮmwiSurC6l/>=<$m v],EZGUnirx V2,i̖۹ t;$7D?EpԪpxKKLOp6(). U3$E.KL49"||2?$^,O=Qv0iΠrҎ-% `50]W=.psFh@-LGޘ\;>en"]VO@sE~JϞ;'N@JGV\oO{PCUac_Tgt;-l-h( fJօn{Ge[+Q7~y@.Y<:kI!xZv2*~" >; ^V y^Ϝt/Cԗ>o`U grhN`R]zɹaF҂F3L|Liq$^4;p35)*B:MAfwin1JCb S8]yGSL9祰jzƋV,H|B=*|ζ\J$ʱԬV0QuNe4Yk>ʮeެp!<ȝ6O Ӛ!KL`".`lS[s~ F)ZsjɨxߌTڿhQa+8rv5Mw{D%SqNLv'Y@¯N>1I2 x"I߭l~xġPuZ?|J]6w!H3Gez}=o`?̙@YF!`&R1;Y^jK;3wTs}Mo<{1 "?IY0YMAn5L9= 侤p#y8NHIAĘ^t%{|Ye臕x( }à|q(})xޫCn<0D۞<#^T2R *(b&QXut'Ԣ0W9GiK/>;mVq&YXd} _ML]^C4$(Yq4 "U!BG_׉hMŌRC-\Ty5Hd?:O~%r!1'ܢ-?v8ʶ8 AA4siJaqBkWlz楹h>#Ɔx8~89,TrQ UΖ#g/X;0w#{e= :BW 3Ƒ .q邬Gt&ȩ#R{Up!y.TDa4>G`9 J Ѧ4МA ѝ-zYvV"OIZŅmZ8.5m;q\W/5D|bD-11J>ml3ŵB4A͡GpDN"HQRXe3qS=O4l19l2,'Q;u⟕FH_wfVNp#ZpmdY![ie=ѯ,.Z0mo(cMYo!,Y0*7$OugMg ۴C❌ q-øńr6ir]8ΣQMѹ ∑M? +GR".4%|ɏFw pߢ3o{6fh3b2ZG0wytJ,'9V.s]YlRx[ـR6 l #U>זͧO I &Fi»{ʴ4氆{BX›32yˌE-u9&u=Mq]v`mbͅ 78b/=2=cr*| ,*r?#P- ,-AD zΕp@Y65rHwFZbײC?-IpNZ#IV 'x< yh>I1*'0]nF2[5)WUj{?)5}-x^Ea? <>,h \A/J6pUn>@ (J"k0y"o3$25]L_\]4m9J\*8;#\כ0Ԙр0&: 5K9MThpIWSK8Ĕ,MAH`*&:2eU"nfv&$Y"jUO04yAm[n坟Wx UjB;:E1={"~8V2a>!R޴%LM xꡅ B䭁&La"9΃?O+>`>AMw# $RAR-A:js?{Kѷz6oJb%g+)cBH=A<}g>04g*U 'C2C߃h*~ݣD!XI=iq>I*aR*J+OgD9)]f6蛚;9yУeD䞃hU3<K@ECAKmU թvt|T\X˒ڙ8}f_zjOB3yr Ug smfZ\~&y ;s{0ݴ`_TSS%ʔ, {:X1𕶅`.5ڡ?6 |xF!i5]X !j:oy=8wi% R*Gv&zSF`z:A1]26Oϕ/Xw:|4J0\Rʖ K~F87w<(d鎞A龶8wdsš1M'4 %d7;} 8 yk K5z >.=<1ׅԎ0@;1hsdsjmx})gVP}F^2M :cFR͢ $/|I1*ei*>ziPP[ K8s)LUrR2 _o](r~1r G*f !ܺaBms y.u" bKGUf U6)/]=h[ů(e02pd/q-B7Z8[!vtga Mfg!77CWf(>=gт"W]Ǿ]پ[ɺ%7"x =]=mk쮹B9_+z,} ݌ƴnspYKm.yzkf53.s`;Q|AƗU܌ MD"{U8eSetI- mT0M(~`8`@5u3cGCH0C5s#X+ю˘oչ@7ݳğO$^vcB"~2OS&Um4yta^o\a=:C5o0 n%V7 }=Mfpj:Z9=p6i 1->`t""lu؂!C{Tsv'hF;4'-i_xgtT_9>-k8A+>|4Z'D߉%#% s=;|~Q?|%ޙ3R?IJFHp >NRI>qaJJgks+VA|Z ЖA)סP۝su*錖o_y=>4@qW$xߨ(-I\xrIȯoȻTV%ļ:5lTJ;RCgH/i`qK7X#rZR4+NZ(_zQPå8ꈹ|\ǛJ7>q\@K+'Ҽuw.+O`u5Y6ى? +(R ,ljA~s8oFʧ#qWDi| B }-ɵ0{\9p5 Gʉ/ܶ[ X*j,[54/\9@^+~<>8;s{R>_7v70ērֶϡ_y8m?_H~<*/+CӐ Q`AS5&EӨ)3WEѡ0Sgs$4T&'.|gҬ֖̀:YT]T,.Ky^aw7rdo߅Hj:]Q.܊W{2LiH,I`O|BgIP!} 4i3¨cbD0x&_#F /ɂguK |)(mx쳩R #Mɻ*i*Pc ^ʻo6TKS(d#0U1+S!к ̟%}OP[zn dPk\QqJ|ؼԮ0dij'Ḭ.R Gxk+Ý!>lufKkfJC)bl+j uR;Gޱ?yJm a <5^%;;{*gTA] ߜk[4$< IU}FQ2e2R3p;R zLH1;@wN]3 #~y"N\{sFž@ 7bT2AŨ)8NXy_jnu&\ReG&-5rbN;'-n Nwl "jGՕP9lW*?>`!`]!s'f93630pa ]GH`:>T kFuT)צu! b@e5K ljߔlUOH6=^/@qa龏x15NDֈX}wܑ0Q|%.jʓw5zóMŽ9+xRʈaǴ1 K럡.~bWV3FAB"y= s`-BD> l}X^54 /o&~SB>0ɢCeoa%a)Yq%RR'V