container-selinux-2:2.124.0-1.gitf958d0c.module_el8.3.0+569+1bada >  A _ˢU]9[5Dy᝞\ذQah haǯ)+W _\GeGQ=ΌgϢ[ڒxV ĝB;Q.-q⊑: Lۤ9;ȳ81XAic:x-nލfBd! &2אa_m+;paΥ͘cRDrP6a;?Adj͉YuxxX4de2f30b501a794c6744f2b32f81c405e5060f02e6f6a4584a68aabc5f881b502d25c6e89e7005b6efc6f84017c126c85a3360c7#_ˡU]sb?\i:.JTsVW:07xA<5|yĥWPC eb]hw>J % GUྃG՛r53kƦqݯg >SV'A $gI[q5sWIzspnr ƞu:y!À8khpl4.U?4g^3/84Q1qIvAPF%/N6јfzu}zC!'7xYaH^ V{DQEOBhmh=tWW e l4BÄVx[&1!hz"'Ԡj-;8|l/ A[y(U{no^p\9}D܁f".m:G2=9 g$xBlJWO/Uwh3lQRجEjVE#SrR&vٮ=^{Zb+# 0!/ `1iL$.X>p6' ?&dH L t /_elt x |   $8@X(8E9 E:EA%F%G&H&I&$R&(\&,]&4^&ld&me&rf&w&|&&&&Ccontainer-selinux2.124.01.gitf958d0c.module_el8.3.0+569+1bada2e4SELinux policies for container runtimesSELinux policy modules for use with container runtimes._X.aah11.rdu2.centos.org-CentOSCentOSGPLv2CentOS Buildsys Unspecifiedcontainer-selinux-f958d0c.tar.gzhttps://github.com/containers/container-selinuxlinuxnoarchJ4G_W_We99fe1adcf08bcb4e466dccaad9e409d56cf41861f9bd9aa1cf420f984333943a266ccad44ff75b1207c87954e9c981b1a380e6380c0aeff67866c4bcb86a89f mockbuildmockbuildmockbuildmockbuild  gitpkgconfig(systemd)rpmlib(CompressedFileNames)rpmlib(FileDigests)selinux-policyselinux-policy-devel3.0.4-14.6.0-13.14.3-9.el83.14.3-9.el84.14.3^|@]߶\@\M[[ͻ[[@[[Xf@[L[K7@["X[@[@[[[Z@Z?ZZZ%Z%Z@Z - 2:2.124.0-1.gitf958d0cJindrich Novy - 2:2.94-2.git1e99f1dLokesh Mandvekar - 2:2.94-1.git1e99f1dLokesh Mandvekar - 2:2.89-1.git2521d0dLokesh Mandvekar - 2:2.75-1.git99e2cfdLokesh Mandvekar - 2:2.74-1Frantisek Kluknavsky - 2:2.73-3Frantisek Kluknavsky - 2:2.73-2Dan Walsh - 2.69-3Dan Walsh - 2.69-2Dan Walsh - 2.68-1Dan Walsh - 2.67-1Dan Walsh - 2.66-1Dan Walsh - 2.64-1Dan Walsh - 2.62-1Dan Walsh - 2.61-1Dan Walsh - 2.60-1Dan Walsh - 2.58-2Dan Walsh - 2.58-1Dan Walsh - 2.57-1Dan Walsh - 2.56-1Dan Walsh - 2.55-1Dan Walsh - 2.52-1Dan Walsh - 2.51-1Dan Walsh - 2.50-1Dan Walsh - 2.49-1Dan Walsh - 2.48-1Dan Walsh - 2.41-1Dan Walsh - 2.40-1Dan Walsh - 2.39-1Dan Walsh - 2.38-1Dan Walsh - 2.37-1Dan Walsh - 2.36-1Dan Walsh - 2.35-1Dan Walsh - 2.34-1Dan Walsh - 2.33-1Dan Walsh - 2.32-1Dan Walsh - 2.31-1Dan Walsh - 2.29-1Dan Walsh - 2.28-1Dan Walsh - 2.27-1Dan Walsh - 2.24-1Dan Walsh - 2.23-1Dan Walsh - 2.22-1Troy Dawson - 2.21-3Fedora Release Engineering - 2:2.21-2Dan Walsh - 2.21-1Dan Walsh - 2.20-2Dan Walsh - 2.20-1Lokesh Mandvekar - 2:2.19-2.1Dan Walsh - 2:2.19-1Lokesh Mandvekar - 2:2.15-1.1Dan Walsh - 2:2.10-2.1Dan Walsh - 2:2.10-1Lokesh Mandvekar - 2:2.9-4Lokesh Mandvekar - 2:2.9-3Lokesh Mandvekar - 2:2.9-2Lokesh Mandvekar - 2:2.8-2Lokesh Mandvekar - 2:2.7-1Lokesh Mandvekar - 2:2.4-2Dan Walsh - 2:2.4-1Dan Walsh - 2:2.3-1Lokesh Mandvekar - 2:2.2-4Jonathan Lebon - 2:2.2-3Lokesh Mandvekar - 2:2.2-2Lokesh Mandvekar - 2:2.2-1Lokesh Mandvekar - 2:2.0-2Lokesh Mandvekar - 2:2.0-1Lokesh Mandvekar - 2:1.12.4-29- update to 2.124.0 - Resolves: #1816541- rebuild because of CVE-2019-9512 and CVE-2019-9514 - Resolves: #1766316, #1766215- Resolves: #1690286 - bump to v2.94 - Resolves: #1693806, #1689255- bump to v2.89- bump to v2.75 - built commit 99e2cfd- Resolves: #1641655 - bump to v2.74 - built commit a62c2db- tweak macro for fedora - applies to rhel8 as well- moved changelog entries: - Define spc_t as a container_domain, so that container_runtime will transition to spc_t even when setup with nosuid. - Allow container_runtimes to setattr on callers fifo_files - Fix restorecon to not error on missing directory- Make sure we pull in the latest selinux-policy- Add map support to container-selinux for RHEL 7.5 - Dontudit attempts to write to kernel_sysctl_t- Add label for /var/lib/origin - Add customizable_file_t to customizable_types- Add policy for container_logreader_t- Allow dnsmasq to dbus chat with spc_t- Allow containers to create all socket classes- Label overlay directories under /var/lib/containers/ correctly- Allow spc_t to load kernel modules from inside of container- Allow containers to list cgroup directories - Transition for unconfined_service_t to container_runtime_t when executing container_runtime_exec_t.- Run restorecon /usr/bin/podman in postinstall- Add labels to allow podman to be run from a systemd unit file- Set the version of SELinux policy required to the latest to fix build issues.- Allow container_runtime_t to transition to spc_t over unlabeled filesAllow iptables to read container state Dontaudit attempts from containers to write to /proc/self Allow spc_t to change attributes on container_runtime_t fifo files- Add better support for writing custom selinux policy for customer container domains.- Allow shell_exec_t as a container_runtime_t entrypoint- Allow bin_t as a container_runtime_t entrypoint- Add support for MLS running container runtimes - Add missing allow rules for running systemd in a container- Update policy to match master branch - Remove typebounds and replace with nnp_transition and nosuid_transition calls- Add support to nnp_transition for container domains - Eliminates need for typebounds.- Allow container_runtime_t to use user ttys - Fixes bounds check for container_t- Allow container runtimes to use interited terminals. This helps satisfy the bounds check of container_t versus container_runtime_t.- Allow container runtimes to mmap container_file_t devices - Add labeling for rhel push plugin- Allow containers to use inherited ttys - Allow ostree to handle labels under /var/lib/containers/ostree- Allow containers to relabelto/from all file types to container_file_t- Allow container to map chr_files labeled container_file_t- Dontaudit container processes getattr on kernel file systems- Allow containers to read /etc/resolv.conf and /etc/hosts if volume - mounted into container.- Make sure users creating content in /var/lib with right labels- Allow the container runtime to dbus chat with dnsmasq - add dontaudit rules for container trying to write to /proc- Add support for lxcd - Add support for labeling of tmpfs storage created within a container.- Allow a container to umount a container_file_t filesystem- Allow container runtimes to work with the netfilter sockets - Allow container_file_t to be an entrypoint for VM's - Allow spc_t domains to transition to svirt_t- Make sure container_runtime_t has all access of container_t- Allow container runtimes to create sockets in tmp dirs- Add additonal support for crio labeling.- Fixup spec file conditionals- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- Allow containers to execmod on container_share_t files.- Relabel runc and crio executables- Allow container processes to getsession- update release tag to isolate from 7.3- Fix mcs transition problem on stdin/stdout/stderr - Add labels for CRI-O - Allow containers to use tunnel sockets- Resolves: #1451289 - rebase to v2.15 - built @origin/RHEL-1.12 commit 583ca40- Make sure we have a late enough version of policycoreutils- Update to the latest container-selinux patch from upstream - Label files under /usr/libexec/lxc as container_runtime_exec_t - Give container_t access to XFRM sockets - Allow spc_t to dbus chat with init system - Allow containers to read cgroup configuration mounted into a container- Resolves: #1425574 - built commit 79a6d70- Resolves: #1420591 - built @origin/RHEL-1.12 commit 8f876c4- built @origin/RHEL-1.12 commit 33cb78b-- built origin/RHEL-1.12 commit 21dd37b- correct version-release in changelog entries- Add typebounds statement for container_t from container_runtime_t - We should only label runc not runc*- Fix labeling on /usr/bin/runc.* - Add sandbox_net_domain access to container.te - Remove containers ability to look at /etc content- use upstream's RHEL-1.12 branch, commit 56c32da for CentOS 7- properly disable docker module in %post- depend on selinux-policy-targeted - relabel docker-latest* files as well- bump to v2.2 - additional labeling for ocid- install policy at level 200 - From: Dan Walsh - Resolves: #1406517 - bump to v2.0 (first upload to Fedora as a standalone package) - include projectatomic/RHEL-1.12 branch commit for building on centos/rhel- new package (separated from docker)noarchaah11.rdu2.centos.org 1604474926container-selinux-f958d0c.tar.gzcontainer-selinux.speccpiogzip9utf-89b4e2929bd63c185e841eca8050e9ac8fea283fd0d1eb6c7d7b7e7e89740120ccontainer-tools:1.0:8030020201104065729:2a301c24?C0 ФǶm۶m۶m۶m۶mϼcs7{VR?ш-FV3C&VvC=13۹Zڙ::XڹzКqr0ӹ:љ{GCo%WWKK#N6ڍ) : Id~x35CQ鰻c2FSʛ-,`kfQC ?y9}~J{^܄ʛNW $kop-72i~?Eɛr?ܼ|kI{s;D?[ _qRPe FfwQ횣4Qzɢ&W&F+)}Č%g*h7ū-I4EiUSBud^% h![whwkq"Ew0]~QJ(oҠʷqDDP?YC/SR-&M0}W9|De jb! G:S1EKWsC,$QcL{+! zVU$]msk]eI~:ǭnTOθI=%رUm.mXRpp,i&"{\7̵8-xC(s%/HgShȠK9jfudkྎK$sWTQR0m!nubY|% T;=(ϱEOCTό̳DHL{\AfHC;AG:-~"2E٫qwk I433ǀ暔&Z +1qSov wd?tϔd5 U]Dwb[Ԟ^Q,d$nhUذQj3>(kUQv;,ZQ8MZX!{!w^A.$TA5,XM+]&&C2 yx2etMOcB}Y>]TK˵Ws_K&+iW7LKL ixlݱ}L5A.!PrB@r&`؉r.p$)na"`AzT4O9] rۀ+IAbFKǮ{BC)RP&96r4 ™Xk/]ES r||ez{ÜD^Ic$urcf[lW9i3o,&:H&pҾ(!& ED2֐Q\˟0QOYuј.Zɿs'B٭dPSYg o>%8W{R0;uwo?OE[+ގEt/teDSX0QQtt 3U•n9b:d3S4l[]@ ٍUr|BɯEQ o8 yMƒdbG3ͻ250KMz YB ;v%e9ǚW#絝-ڀFqN+ {<vYP|23TZ q| D3r@8 >i[JǬ|eAD!]aN:4Z2Li[Fppw$Tv8Q=5"TU =wqmE@?'D)ʀ" %' `3IlP,8}gq'ɻغJH%t{23Ҡ:LiU]6-D/aJ !5I \8={˵iiO3 2 "N!ժGV4O\&)ȟ?, @nzPWćl2Ej`50۪aVQ0!5_CJB@$X ;\"W7jVɻݱ[$:<+N}[F&yM#aՆ=QDI訥# (nԨpda/.n{U[K@XD"yRڢ2Lєgg`ƽ?rǴ bwSy5иK8\lm='Me6yu5椫Z i{'UZP Nevs)śXI@\! f/: 5ã,eQK1xh"&E?MJ>dˇD2"2Z -]+$GPJPHGP:f=_ǎgN"cD [9萸2^wQo.ppG˕y3-HϭO}mܯu@cZuGzZz٠8F5ǝ$!.5]cUwYK)-D6u8:QU!yb-u7z4L\9 $Y1_!1P0#3W{PD~%T$:(ҁaB:4*l>g,גZݸ ;\Y}m6bUԞpjHLT7#fx}v%[Hv0TrcJ[zP1㙨P{!5C4EDb߇$"FHwJi.=.NG:"?-Xb䣺k2-79ai:.ųjʒ[KE`])/̾&D<M"tZ4Zj }?D(Og޶Uog۠C"mTJi{[r(%Jq~K\ {T{V7)0Ep VIa`$ {0}Ұ]B\S90)ӑK|wl>RUPnSن>7e MsE[)dM&iD\;}ldTYeT.8xT4N@I<+nAZ%5Lmy$,/O˃~pg4Փ!H@H34> dB"F;/f:=3*Hr߬?*^|M}VU9O$+j=UJZK *UDfzϲIZ/ӉlgtUTHeji[?h~:D$$ShkN2?#uc _ƗY;F )jmt߃¬uarqWvڙMXND5D40s E3%A4CqT%f@\AT(T:B-Z;w}iAGxn Ly3'm #6af}@*K+[Ye0ɳc0}(8ʱ_ЄJztتvtS L:H[$9=! FbK`Vy5R$Lz̪2v8i? \"X#=p9hw>\^"M(GE5T:m"d| Y&L/C2vmn!(d -xސVUp))Ѯ#EP"&r^ݰFM![Azi_S:;4bsY[g}A ,L̮ GQv)j IZ}y9v'ʱ(]Mףaԏ6gU\t{q=rB<7KLұz)Z~=םn82iLM 1_MDF$cWWNt4o($r\u]Y=U׺k `U; [1!d/71 ]JŌ ]7CZJ'觝Jρ\AJ!g*4s-/L jהu鵣ڄfD`i~$E`<d#reOv9EhZiO2H+. =R8M@MSrgeB5QG Ʀ6HXc5sm'VCU;~DCL5^&G`P澜j~}T:nk0D/D4GGQ Lt;4[jƹFj0vZJ˕="tTR hI zCLDv\plFK3n Lq+_Rs#e#Ku993#*kY*[nAL?&oì"ha5:ϱ}NS-66pzeDW٘eȁ;^ mfrp\ҏvss}'NPq]ys7-\U&(6H}3#j4Ǽ cq)y$۰7ube$:.@LHrm=,aB(7ϮA(`Y{~[zm@]Ah(:6Re.˺!*]!`17H CSm5@b:M^ޓ',aVj\阩~31 P)֠ EMHJb3'fhNB peSpעn@q8 QC<.ePU7EP R!v! uAkɓI]'BrYЍ8[Ia1f%TWuJ*YCEՕY Xsk[\BD HvYJUq\,ZbB2ENC1-pOQwf.9+xs 6nP7 &yg,|uq-paP=9vN3j`#$Ggy)-x+Kph~18'~9}19rUhǴ幹 rƜxY:>xs Bp<ZLܤ?v&a&~$,._Ŋ0_T;=\TW#y֋u{bXvNa.=pg4lvFg]|ޑ.*.\.B`ɀ Ɓؿk=WW^WC{ ;ÃgQ v@ Ƌ~? уK/L#<:;Sv^G._a"x^/b t`5H^λ΢(?׿&WR8~=i yo.IYa%Zw5S/I=0ڋIzؐ _,%=(g._U^AcFq'a2hQu_ホbݒOpy.=E$߇l.T$؞ق+8'nLl8Le-_*Cz6r;j f0Px0t=8 [9>Jh7׬B=7uijP}iu}qNQ| y:vi8g_5J$zi&ȐٝsO6n2s3$D`ug7'TAptFA\T+Ug>|? Қ1o)HtU#/ .hŀ..6gSBp<}rODr܍@Mi퍇6;KL;aKd97J邘UKeHT!A6I+Du@XKmqpPdA}`4|[ h?9]Nh(wfDQL3%|ޤ8:qEuEzf=j\/EOx;ZaOmWaX f?~e$,H|ĖF hҫi*QC[ŀC9_:3 D#bj7M-;q '"*&:[{ uNt"?W"GE7aLJ#AA!);~僫e=.GfFk 89Ϫ~m?mۧwgDX,Y4Fs~ ВA9H\aX4g9"]p!h{Dn2}訇}=A i< KP mAxMx~Aq1ߔxT{fUB$k6HG:a(Y?߳ǻp`OEe8+H"(PrG0@3-4,@V'b]ow>e3#|Q~@Ԋ8%l 6u!"}*fiw.^ |,~dBa'$rjz`z"v!X[F;DɍD׮OTrtdr{*up26JjGDEܥp!*8/*wVdݣqn>fy?SG"^\~tVy ;6 z[_;wËJ  xnBxy E|p@xO{I?M iG1Lu@+5@>=i7ȃKpXGga}$iCq1)B3v)(9.A...to\~W?1P'X|ox (KL8⭨Ȃ{qf۟-㏿u7T[]|Łbo|'&~߰_nȭgys''Id^heޒz>dg6p.j. Χ<ܗ_P*Boy[󦕑oH7"u~T:5  55 5Je$gFޅOZp8-,]VAiLL;E- o Hmk {SKK-Кf5ޖ\glof BLS^m+o+.jǴLyfSyKI+TXS| fp7}`@rYw'G6#)kv#zu' z y< hFK @!?nFÔⱞwRyT՚!3gdfNIcW=ȈzM@$La'u|m|4Υc`T㈉p^2z8x*cX5$1dwy gԛwᛚۼZ8#ux9xpׅ6ЉpE18-A /߽g308J{OCb9ٜgd&į+Օ)#%ݕ؇8v!,Y͸kvcP# o{l᜻c/M!-`~ΉˎR2@m s ͤЬ庂?4FWnqٰ Ja.ztbk(-ƬbYfwH_jbWix?ZkD`kTpX7YŘ0T Tm/XF~?}}`0:p}0N@eK9f504ձ! z,kSg?;gɹ}i4o?Se%MqYaŻG._h\>O&\jOnsm==8ֽ7 .^]V); /{EW@A&x}t+#p,4 C0( ?f[x4?J&g[5䌨PҢ0xnzQB0dia% אʸIJ*HVóD@bCܹaLL0B5I=lY:~_C #HGDyZ"=ǮK@$iӺK]]ǭu)I/=mȻsS6 Ye`y:p"uWȝic@i3. y7!!m\XA?i$8; VXt{ Bfd0 |OӔDJ׿<9h_$ާjɎjFˌ_<ӹ.y= aĶD7p j\+kߴ.l&}jLq}(Yg Fb:tjDYkW-ƪy UA1dgͤu-ȩؕ)No~L%& ƟWAt3k9RJXkn7(\n&PvCrHr:LʪhҢV0YxQF|;_614h|=B4$@eg fڧӕ^f@5FYKNC+?U#6 UXE3AYKGAd >] *}wõiHTzp0}allk1`2FDa5ȼ VOhG"%8D:Le8146^hEFvT#E5*h׫Z\DX:BSbAȭL5sVMض͓qY e=w%E:#I& 60šH:vK,*yA}Ҿh,rvF!;ZI'rӯt5;%:P# Ԕr7HKДY7'Ʌ)+bۻfIK 't!nGQRec1Vo6- 6aI7=f@-}`!Vnhh"Ӝ*uTJ!»xp&=;ZVĽվTzA)hYG53炥e9ϙ Q%VL`99OK!/&@- $!}c=|("4͎ "Z@h(MYp1VӤVJn,H2D)m.F: QG)_l?Il<5?i4׉KJܓ4XQ3cg3OGri{;%Gk:88Lw=H|kMz*'c/,dКHylh,x>w`u^¹:+r]{˩+r}|>Σ(`o42NFcSSusx؞O4r],_ݢy .UAb-ABBjC~Hcv =V+ =H Sy"}Y]FjOhHPl* =݊t3xmE]n?}Cn9C-(߫uhf㣆8Fh kB; iAx3;у4Xy1$dBa:bk["o)sԕѥoLB %v oѺ24Ζx&C|~1Z1wᲄ-A涐=J)w9y_7-|ـ qRI~؋~䨜szN Ց<2|М#UIH-'"YMxDdQ4ZjCBkɈ-Ds:B-Wtb?Ôa5$<P% ~:1| 7f,aS;ghS(1w[tcJS|"vf3܆iyvV(O֕thݧJsО)z <]熴Ϛ.x!2>+!@B_GS 4U}eӊ}=+@6B#4p#7brTdebAaQecJ&@{H;0GfB S$ xPg\Pr"ZIU kUnbsed{X`&:3Fi[x(- NDg 6$}`N"g{ƽ|e ŷGU,>5cZ,oz%Łs=װe#4߈Yh\"Hʕ ,w,p&>XΛR3DǢo)Snd +8+(#}ÈSC{gjqmɢ'tӉPcFe kc[IgL2"LZh\J5g?k͂ҋg0#g 3_^-f?{`*RB3 X̍ 4NEs+Rh . Zpxyx_ o\V-lEFXKh|Sh fE{ k%.K5>%& 3m]\m<ۺ[byZw\B^֖KWNx &״ (ɳa)T^ ^+`ᥳJ^'S2XO%b>9U!n-VԥlZB+L;XPe!XTR~_HI- i{{Axz&||9S> X6NoǺ9߆AL.ԓg ,2GF8łNNJBw*Rʉٟ/}N{﬏*IizU#pqi *TW# L D W,Ǩ_aoLJLP7fgt8QS-MjTnޑf#|#߂V{q:d#faJq9am*'L]>1ٿQcxj/J0*j.D5Plb{U0oW|e *RE+.(65A<{V]ˑEd? S P ڣx +6Dx|r2 %` u]ft1 f3FY]x ^qُ4LP e#Vۧx!{g0^%Ra$MIC5!Ngvp\:j p~hN _mO1H`ZQ)pv\=Q 4 ٣C7co-黟ͫ({c ؘ=N~fWegd)xΟ6&ӗٞ,@-'f0^mψ!.FKJkLFUe1MpX*چ(E6Ql]# -f=WX#h> f#uC^vvEW5PV_0*Y6@ hڙj9z "zIX6zb&@RTA}2w*b`/B R`fC%EUDx{ YX~ ӱlhHTmLw9չ !9Ò]6B[U@)9{` )yXV=i⮡tY{&AݫjTUo,%f⼶p0bEANPXǐ/ "Pȟby`wV8N#`fI%5%whrp%Մ<3&5.ITYm)sʃ)@?Ur$?K?WGqiL^熺#Nd]Uu 2ٕCeӽp3&V1A$&`HX+N4cتJzok>Y{;\- Lce˨7mywۢ*]tiQ3_۾<=aܣ&}{РHQ3JZQ#KseAW6'PO g [&RkxGEϐkmE[ݑT1X%ĂΖIzqɠ7yZlƩe$Z]9jŁ*3ʭϤ-e j,ش~3v&"z]+n&.ضב(*W !X]DUEVvRBvf͚w\Bi#kW+He2tEM)͙NM-$hAzo.j*gq_=hY&JJm`A4F,IJPJ2dJj+N۬NW5bTJC5mp; =DEd.5DI9 mcX<`!M(?`kHY#T@hҡ/שtO03%2YoUͭ֟Nd 9ye}l5\BNSy,*cxn5k;TNUW&H/A{fVމҗHI=mCDlκ(Y==jyi5 }.Y(KOxI(7-ͰelKb}IAT;n<ȑjEyn2;U\DMlG[dZ @1T!_g.?;\9j (+쀧]DG#ɤ3y\z_F{lV.mJ!{tp:J2r6z=R1IAt9JA1{x9r%1]D_KY3$b Ewfn2Wf{dP+U.ԮmBOՠV)B{gKL|s~-LiNGU*+Pn̮ ]:2&?xv0W]_m_z.E5s2;b=O/عEKO%Kt)m7>Flu5qr¦NS;wvq|Oj?jS!#; wJOYe)̺}ʠ%xR/uT)7sk-ya-?~nƢ|G3>[Ҙ=>[8=7_90զMڵճ$իaa4_{_ּ܁#/vݼ3>)5@3 {tuSEŁ9qu.گgkIBӔ-TW>_ʊ6,ӧ2Δة53|1)?ZR.5, SJJ JM?صX*M%BNl" *yY1ZU^3D ffS )H^̶jJ;jtEKs\;6#kG\|HcX Ը;GfsY挹qlw犷r_ }Ο?r\ӷN~8{TTYCn/yao?ɍoxcڴЉG]{\&9?'x>ĺq7Jnp k>{ؠGcZǗ>`J{̭MNdKM4vn#5};fGQwNm;yz}5,?0zqm-U0?]$Wt¸GqyqlWd [,9Wѭܒ__MtJ3gpwti!E+[  Æ豉 u].L猈7YdI6r*O|)3y ;&]2,z^zk)?9a\ɆL]wQ;K6nk߹b-߾uނnB-1AÊ._=raBYݫ.xŭsY$ȝ+'||e5+nU`w|bkXJ{Z57,z`?ON=fԹӭl$C!t?Xqvo?>4m9sqkŵ^mW=Z6cͻ-;BiZ*]d?j1+DY&~*-{斣OVDj7_7g Kq'&xoowUtm׼j[isE/v-v9xҔ/enm\޷Ej~ߞ;hOmC5lJ+{%L}aӨL~$_I/5YJI~#;;4zeA,Z6L;76677ݠ j?uȍǫ*gϹcB߸#PCWF_u.zf̕*Gs~{:?iBDGOoד k1̉AN,;brvwM,'])x~OLJ3yrƧm}zYEEwUe_VT48NUֶw:yU7ZƧ7}OfE_4hv>Xr˩vwb}Tƃ&زC;d(|ԴGn٤\ Bo|yْwg.wrWn֡~l:td2U,i3_$޽_F)[Nnݢ[:|=ntO-9kB2l! mre9ʠB!yƖ/u@5s2A Lr3kWxf'Ov<_0P :ޠTGhsdI*& e 鞉0s<*?f+:晣QεxœlYx#Jg9<3C6iD fygX$<2fαv$Xi:i/<$-z9 N A Z\6mGh#$0:D5ˈ򣩴dz| `Mَy} :|Ȉ|43ΌLx:CV'%Xa J$Rm!)ai2>);hύLoJоd D6_`@!chP;Vhʒu7J@(7tO Vwm PJvȁ4҉Z@Q;x +-mϋ 3Q.R,L т*nyا qx-כ{U|DHkc)dB7({AI='aB  }b Q*tpG:6jόo Փh &2.S@!p;, COw9tg@E?T"&w}BRlс t*Gb]@nsVn8cDr½s$B&qƇ{:ݐ*"k3+;VIA%D)OSp-.8{EǍHDBiI1 JJtBW^cL.6hg{np%=h{ΓKbۑ<<>Ƀ<}" /$Gh-2mp a쀯&`wE=}$'ӠtOt Ҋ9AOb*%ݒ>c2 7 ]L,$GTQfp8>.e[UC?f;q^/r%hOHOҵ㼰48Bf Rax9gxe<5Xz.I~'_D)rbqP',zIؕ[dPqͅi3RHJԯխ_qŁ@8O E.PV#ȪԔXSoc=A߿LjM%*FG>B<  o23: -% /#:N3MD!GqS,}jVE1jԷh`Uk-VڳBmk%?uz| 1=ӕ!thlzWV%@'{EiHJ'^?K8Fepހ# E@Ms,esL&:@LgCD9Sv_^@e$K2DSl8 HmfM g>Iqû<)yܯSF@ŷ 5zVDj*o7!xx8?JH'8SRy]U?JЪzxHETޓb#\[x}kTү \JiN'TigAg]V&X7|9+ }NRF+r91r잆m%')+.œ@&  O,%w'PToO8X֎6mG`sGjY@EZtc"ԠTO7e}^i. D]tB٤ӛA TL .D&$N*EpKl=,hF:_qq;@PqIl@5:tci C3 `a4~eiؖ|r%>^.t$osI_w eSm8-'q~!W\  ܣtҗ$-2@9cc栳\0vR3&Z[g3=aHr~ qڵÿ%h_Ā