container-selinux-2:2.158.0-1.module_el8.4.0+781+acf4c33b >  A `@U]RHU<HilD@?m}Q`Kmwiv@1]XSwތFd-oIvXD %TLq},-A1B]-2#9oNNnA.QtN>\󼶱@HϣGCdEEP˕N(J?%7є eWh+O잛sQe0c!/5;K:o&㔤^bleJ Cy5'&_zF̌ ^,&Iyh_DD|!V$K>C,a˳d< (W<+ŽjUNfӘo~ȹJ W\~GɭO$7o5k+do/a#WNB%Mڬ+;x)I-9`5tP ^uڍ>9148896a2a7a8c627a8011cb3b44e660365cc03ad31d50d938b711aa72345066da272ac0733a4a604d9834563f9a267c1763d6a6dbdÉ`@U]9~W H&I]٧ _-$ζit{Gz߅C]E=_ e^%.DkTU zR^K2A&kVv7%Ѡ[9D]&qထE^5JJ zJ@lqYD.;nIQFda>x>YWW/qѵj w >p66?6d< @ h BHPX \ ` h  $<(8_9X_:_A5F5G5H6I6 R6\6]6^6Cd6De6If6N6P6T6Z66Ccontainer-selinux2.158.01.module_el8.4.0+781+acf4c33bSELinux policies for container runtimesSELinux policy modules for use with container runtimes.`Rx86-01.mbox.centos.orgCentOSCentOSGPLv2CentOS Buildsys Unspecifiedv2.158.0.tar.gzhttps://github.com/containers/container-selinuxlinuxnoarchF ]w``50d70024d9fb9c76c1a11bff9474f170c54fedc43222185b9ecdf3c6e20101b78f4a4e7d56eddd249cf2a2f7703722d8970648ad94aba802d0102cb0f1ebbb5e mockbuildmockbuildmockbuildmockbuild  gitpkgconfig(systemd)rpmlib(CompressedFileNames)rpmlib(FileDigests)selinux-policyselinux-policy-devel3.0.4-14.6.0-13.14.3-9.el83.14.3-9.el84.14.3`&m`_T_`@_%_%_F@__"_5+@_16_p@_5_X@^n@^Ӝ@^@^^k@]@]B]]@]|@]@]X]W]R@]@\M[[ͻ[[@[[Xf@[L[K7@["X[@[@[[[Z@Z?ZZZ%Z%Z@Z - 2:2.158.0-1Jindrich Novy - 2:2.156.0-1Jindrich Novy - 2:2.155.0-1Jindrich Novy - 2:2.154.0-1Jindrich Novy - 2:2.153.0-1Jindrich Novy - 2:2.152.0-1Jindrich Novy - 2:2.151.0-1Jindrich Novy - 2:2.150.0-1Jindrich Novy - 2:2.145.0-1Jindrich Novy - 2:2.144.0-1Jindrich Novy - 2:2.143.0-1Jindrich Novy - 2:2.142.0-1Jindrich Novy - 2:2.139.0-1Jindrich Novy - 2:2.138.0-1Jindrich Novy - 2:2.137.0-1Jindrich Novy - 2:2.135.0-1Jindrich Novy - 2:2.134.0-1Jindrich Novy - 2:2.132.0-1Jindrich Novy - 2:2.130.0-1Jindrich Novy - 2:2.124.0-1Jindrich Novy - 2:2.123.0-2Jindrich Novy - 2:2.123.0-1Jindrich Novy - 2:2.122.0-1Jindrich Novy - 2:2.119.0-3.gita233788Jindrich Novy - 2:2.119.0-2Jindrich Novy - 2:2.119.0-1Jindrich Novy - 2:2.116-1Jindrich Novy - 2:2.107-2Lokesh Mandvekar - 2:2.107-1Lokesh Mandvekar - 2:2.89-1.git2521d0dLokesh Mandvekar - 2:2.75-1.git99e2cfdLokesh Mandvekar - 2:2.74-1Frantisek Kluknavsky - 2:2.73-3Frantisek Kluknavsky - 2:2.73-2Dan Walsh - 2.69-3Dan Walsh - 2.69-2Dan Walsh - 2.68-1Dan Walsh - 2.67-1Dan Walsh - 2.66-1Dan Walsh - 2.64-1Dan Walsh - 2.62-1Dan Walsh - 2.61-1Dan Walsh - 2.60-1Dan Walsh - 2.58-2Dan Walsh - 2.58-1Dan Walsh - 2.57-1Dan Walsh - 2.56-1Dan Walsh - 2.55-1Dan Walsh - 2.52-1Dan Walsh - 2.51-1Dan Walsh - 2.50-1Dan Walsh - 2.49-1Dan Walsh - 2.48-1Dan Walsh - 2.41-1Dan Walsh - 2.40-1Dan Walsh - 2.39-1Dan Walsh - 2.38-1Dan Walsh - 2.37-1Dan Walsh - 2.36-1Dan Walsh - 2.35-1Dan Walsh - 2.34-1Dan Walsh - 2.33-1Dan Walsh - 2.32-1Dan Walsh - 2.31-1Dan Walsh - 2.29-1Dan Walsh - 2.28-1Dan Walsh - 2.27-1Dan Walsh - 2.24-1Dan Walsh - 2.23-1Dan Walsh - 2.22-1Troy Dawson - 2.21-3Fedora Release Engineering - 2:2.21-2Dan Walsh - 2.21-1Dan Walsh - 2.20-2Dan Walsh - 2.20-1Lokesh Mandvekar - 2:2.19-2.1Dan Walsh - 2:2.19-1Lokesh Mandvekar - 2:2.15-1.1Dan Walsh - 2:2.10-2.1Dan Walsh - 2:2.10-1Lokesh Mandvekar - 2:2.9-4Lokesh Mandvekar - 2:2.9-3Lokesh Mandvekar - 2:2.9-2Lokesh Mandvekar - 2:2.8-2Lokesh Mandvekar - 2:2.7-1Lokesh Mandvekar - 2:2.4-2Dan Walsh - 2:2.4-1Dan Walsh - 2:2.3-1Lokesh Mandvekar - 2:2.2-4Jonathan Lebon - 2:2.2-3Lokesh Mandvekar - 2:2.2-2Lokesh Mandvekar - 2:2.2-1Lokesh Mandvekar - 2:2.0-2Lokesh Mandvekar - 2:2.0-1Lokesh Mandvekar - 2:1.12.4-29- update to https://github.com/containers/container-selinux/releases/tag/v2.158.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.156.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.155.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.154.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.153.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.152.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.151.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.150.0 - Related: #1883490- synchronize with stream-container-tools-rhel8 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.144.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.143.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.142.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.139.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.138.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.137.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.135.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.134.0 - Related: #1821193- synchronize containter-tools 8.3.0 with 8.2.1 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.130.0 - don't use macros in changelog - Related: #1821193- update to 2.124.0 - Related: RHELPLAN-25139- implement spec file refactoring by Zdenek Pytela, namely: Change the uninstall command in the %postun section of the specfile to use the %selinux_modules_uninstall macro which uses priority 200. Change the install command in the %post section if the specfile to use the %selinux_modules_install macro. Replace relabel commands with using the %selinux_relabel_pre and %selinux_relabel_post macros. Change formatting so that the lines are vertically aligned in the %postun section. (https://github.com/containers/container-selinux/pull/85) - Related: RHELPLAN-25139- update to 2.123.0 - Related: RHELPLAN-25139- update to 2.122.0 - Related: RHELPLAN-25139- update to master container-selinux - bug 1769469 - Related: RHELPLAN-25139- fix post scriptlet - fail if semodule fails - bug 1729272 - Related: RHELPLAN-25139- update to 2.119.0 - Related: RHELPLAN-25139- update to 2.116 Resolves: #1748519- Use at least selinux policy 3.14.3-9.el8, Resolves: #1728700- Resolves: #1720654 - rebase to v2.107- bump to v2.89- bump to v2.75 - built commit 99e2cfd- Resolves: #1641655 - bump to v2.74 - built commit a62c2db- tweak macro for fedora - applies to rhel8 as well- moved changelog entries: - Define spc_t as a container_domain, so that container_runtime will transition to spc_t even when setup with nosuid. - Allow container_runtimes to setattr on callers fifo_files - Fix restorecon to not error on missing directory- Make sure we pull in the latest selinux-policy- Add map support to container-selinux for RHEL 7.5 - Dontudit attempts to write to kernel_sysctl_t- Add label for /var/lib/origin - Add customizable_file_t to customizable_types- Add policy for container_logreader_t- Allow dnsmasq to dbus chat with spc_t- Allow containers to create all socket classes- Label overlay directories under /var/lib/containers/ correctly- Allow spc_t to load kernel modules from inside of container- Allow containers to list cgroup directories - Transition for unconfined_service_t to container_runtime_t when executing container_runtime_exec_t.- Run restorecon /usr/bin/podman in postinstall- Add labels to allow podman to be run from a systemd unit file- Set the version of SELinux policy required to the latest to fix build issues.- Allow container_runtime_t to transition to spc_t over unlabeled filesAllow iptables to read container state Dontaudit attempts from containers to write to /proc/self Allow spc_t to change attributes on container_runtime_t fifo files- Add better support for writing custom selinux policy for customer container domains.- Allow shell_exec_t as a container_runtime_t entrypoint- Allow bin_t as a container_runtime_t entrypoint- Add support for MLS running container runtimes - Add missing allow rules for running systemd in a container- Update policy to match master branch - Remove typebounds and replace with nnp_transition and nosuid_transition calls- Add support to nnp_transition for container domains - Eliminates need for typebounds.- Allow container_runtime_t to use user ttys - Fixes bounds check for container_t- Allow container runtimes to use interited terminals. This helps satisfy the bounds check of container_t versus container_runtime_t.- Allow container runtimes to mmap container_file_t devices - Add labeling for rhel push plugin- Allow containers to use inherited ttys - Allow ostree to handle labels under /var/lib/containers/ostree- Allow containers to relabelto/from all file types to container_file_t- Allow container to map chr_files labeled container_file_t- Dontaudit container processes getattr on kernel file systems- Allow containers to read /etc/resolv.conf and /etc/hosts if volume - mounted into container.- Make sure users creating content in /var/lib with right labels- Allow the container runtime to dbus chat with dnsmasq - add dontaudit rules for container trying to write to /proc- Add support for lxcd - Add support for labeling of tmpfs storage created within a container.- Allow a container to umount a container_file_t filesystem- Allow container runtimes to work with the netfilter sockets - Allow container_file_t to be an entrypoint for VM's - Allow spc_t domains to transition to svirt_t- Make sure container_runtime_t has all access of container_t- Allow container runtimes to create sockets in tmp dirs- Add additonal support for crio labeling.- Fixup spec file conditionals- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- Allow containers to execmod on container_share_t files.- Relabel runc and crio executables- Allow container processes to getsession- update release tag to isolate from 7.3- Fix mcs transition problem on stdin/stdout/stderr - Add labels for CRI-O - Allow containers to use tunnel sockets- Resolves: #1451289 - rebase to v2.15 - built @origin/RHEL-1.12 commit 583ca40- Make sure we have a late enough version of policycoreutils- Update to the latest container-selinux patch from upstream - Label files under /usr/libexec/lxc as container_runtime_exec_t - Give container_t access to XFRM sockets - Allow spc_t to dbus chat with init system - Allow containers to read cgroup configuration mounted into a container- Resolves: #1425574 - built commit 79a6d70- Resolves: #1420591 - built @origin/RHEL-1.12 commit 8f876c4- built @origin/RHEL-1.12 commit 33cb78b-- built origin/RHEL-1.12 commit 21dd37b- correct version-release in changelog entries- Add typebounds statement for container_t from container_runtime_t - We should only label runc not runc*- Fix labeling on /usr/bin/runc.* - Add sandbox_net_domain access to container.te - Remove containers ability to look at /etc content- use upstream's RHEL-1.12 branch, commit 56c32da for CentOS 7- properly disable docker module in %post- depend on selinux-policy-targeted - relabel docker-latest* files as well- bump to v2.2 - additional labeling for ocid- install policy at level 200 - From: Dan Walsh - Resolves: #1406517 - bump to v2.0 (first upload to Fedora as a standalone package) - include projectatomic/RHEL-1.12 branch commit for building on centos/rhel- new package (separated from docker)noarchx86-01.mbox.centos.org 1621527634container-selinux.specv2.158.0.tar.gzcpiogzip9utf-87a6089fb4a6d20416ab5eb6345b8834a3f471d87dae1dc61a8e4abc9902c57f9container-tools:rhel8:8040020210520154711:59631bd5?<<%) ]9{dU8p٫B!TFf)e$#Qy>{|y&I(/$B痤, !+#ߗ!a%) #!8A q>Dw%;"0P$pAAPA Y&$;QQB(J|A}VIPaw"Pg<,$( ADAQ$'"x, &xBB x,䊂Q8" ;¾r뎂 ~GzbP{D "r?"+B AR>}8$Thd!(GƒxOP"AP($ T֓HZҽ]Qu<"p$W4ID9{b㺂^(O A$*6y FJZ"Jw^(/x R l 6$s$孽;v*%.)-.% C x'WE(b U|@Kȋ 攽WJ "DR xI 27T%2b"$cF#!xO } 텒_@q@L] h RRÃ(WQhjů\ha/":bt1 Ϡ*T~cCP5V\$%daP1(CO`0[u:AO$ IGPùSn9 (OCe$%!hg( &+ UAQH<K:lj@P"_NhFcЎRH#&p; O TIQR\LH#c\bJ{h_D\ @N; IK}W,,EWF+8 /!O"yC,@8j"P4 0@W>"jL ->~p 1$@yUO G"H$(BĊ!#:+9a<("QX߮5W)O[;Gb5բ-'ֱ$+PXুpƠ ,T༪8'WEb G# c\XB ByoU8{^8aGD8e;($T QOѸ(G<)T&Q9KRC wB 6L,w7 ' 'CXb\P_n>6D{_"%C lp%ɞ=DV)P q0/y#(W74TZ !KS,yx,Nh>J& bd\`VХ8 x.0WqE<kwm;Ԁ tE\K+q$D @%gV3,K [ Dߠ(B$奤`< 8:O:5(2b*?_it2y GS-eALaS RLL/RP:1H뽉 _/ xJOU'\ xo%! b`) UtJ[ܒ]ᒒ R F@x@N<xJ58'f,  g<%և?'ًxsߥц?[ցOw#/TjVGkH=?A<]zEu;V|ҪʋbŁY; [''EyHI9iyw Ll+: { 5Y S&MA"B!Pe +(Pea2`"w9y䪎 : I^ALy \ CB@,.Ԓ(ז;9 ;C"e4 :lr _/H&+-)+#p'8q^ ;TR\Dx^D7@z(_>p[`S 1`7Q*dr9pPx~G0SEݝI hĚN>~w`?t WrMDPVBypG. lC=,OD# \&h#XwF;)h1`֔`E sh"ّ#}`揄)K=B(N& .d*7<~uQF=X=WrCwLN>PP9qPHP|I$֝D7q̓CؓVŋꮛ-dDR &^(y.hZ86:;?5䟎B6@OUqas(8|ѓi.pP‘^gM; @``KEZbD" a$v݄ ɻ X XeU@cD~p]փ)FG WD)Lܣ(0;ї4x̅ ->  + VUC\&Gɓ$>gO'[s@טL O"Ap#4f`z*dM1dO?+( eЕ_`JJWXCzS ny~@o>(' >k,9 /'$s!X)@AXBf"xvl O]$ i\FF8y(Q?]w^*Sp%6#A0ŤDwItDlm՗ LV;5';IQ?F'3|E50ZuǣqUI[37@=D1DnZZ8xDqA~mu :Zsm4tYQI $ K\Uur%'CV`H`݊Ra8w5 ާDk!.qmO^ahKe0$χ|WAc8X I φLJhI>K#lXI) #D\GGjw;8w4 ;BD9/m` t>?.pz ?S_O_A(ʑ5T%Z  +O.^ne$E*)Nɔ)jׁ'eOEE*wIx Jb;OA"2Tҕ]|d0J@(0HWq2;({R @hB>+H WqlJ] N/<":=@!)8 ?EI(&HIVؐ|ѪRVxmAhv~S?$+)0OngFǯܪ gagqB=NXwg"W'(/L^|mypR_kG?+'Y~V(Y 2uub#֊{ n"q,9'a#ذZȑylm$f%2_ ];2)|P?`, (w/tmo.rVriKNk 2#M.?9$}D2 IkW.I.Q0@*^\=:cdPm*(r Y\0E2HJR4YmN6G톖@!D{LR^KSX<|{U+0X,$ɉI)3=)IlcN "XK b+էJ4v(HN\O-Yh+E|qlÂF$!8 ' |C?@438(wkhd"wk+IZF.xndQ `_m/K9!a?s`$le~N"A.g⺶wk1OX0\GYNNRN98LmW"}8 P&IX(. SֵAtq~`qűM(R<'I@%r(s?91_.#{RN!.LdXuÒ LFAEYY^NIz-tJgx] HJQNyI.:WDmT S$)%ؐ0i2gV+z,jמo[m~wls( Vi1˚L>rK1bpX `\ c|k|%ح?[[][7RɏaMo!o5XytWkďtQ[G4%%e{ɀIG<*fJg^~uQEX VΓϒ *|ےymD|Jtt'|vԱbI]v+욌4sFuW`Je>}.C/bMʕ+-|>7rý6IzD[=&Zl>T,w=S?DAXk3C] k `݌K,̄2"پ֤ V$6\[CeWU,SOG7/ɜ*ٺ;{墘'#o>sT8fݝ~ y7f>tZY2fW0sRK{}1 Kg¾oAwe;K'wj'9,]))'믟G'4Z_8$B'yno-\4C4H-xe$ϛ p~wЏU? & j 4|dbhT(奢Z*wr_t:}a3}L:.L McjZӿ 561ӡKV[˽9ݤudU;] kPM T/vfyU?}/F{omo2\^.?d߲.T/oNuIMmW7J #; nW]D*`hԸ[3^`w}ɮkjW 6h:UվB)BԽ7]aZ-hR}KDRDtbfdzS?]b<.{d}Bu[ۼ&Zf>s9]IfTWa\ΉI^ ]g2ycɩ@+1sÏyѠyKHQ܊ZG BQeѺT#,y!D+OG j6 5::խ+.x 7>b4!z*V&9 p.ֵ.3饢)=- ˻T{$ kk~ޚ-fcoc{6Bce $((3\r8uz5-?zֿQ}+T0+Fٰy$s`%f{z] o?7m7vM׈^QyPDqq>c kVIgq^ +7(B:$g.% e<} X4?]Ƚ+XR.#͟~}WJkN_ckF/ƜhmT`foe|Ccz#ÆQ3vlx6OinEvkϰAF.L2qwjGGMlMo5k\zЬRv<?[i=.Nk{îzN*Ee:idM(:[ @q>/V-:홈GBƢO=y`$O0[TZF^16bF' GQg[Sw| ]mu~dm3h` @|vCJWFqm+ M|;NlB̙J>OǪ)+K\СTEѭ+L:鎧aR5i*.|FrwvI7|G=qq ܹkoj'fBa.4Ly2f`:~sj' lc p %Al.ՅJvEޒ 5}66qk ; r |mk\[7:vŅ2Ml_{n^dblu;zIci~[NágLGf-- 5epN"PM_?^/bh w"O8|mErB S†j՘Ƹ_}qddt)#[[SpeZFRJ•]&T*spӇk}uOt[J\>5첥0hsƇEM1 ŨKX GmQEBig.ČܹRouuWp%wWw |S`1h{=e&E"P!h]OtPt^m2k طitC`⫣'>Q46$bI23n>Gi1tzIfsKS^Eel[sfWueN g? x8 ^Gn臾`#b=b|3)ׂQt6 ݋6=!anz=O{Nn 1( C)=K45BOZڿ/QHi\$98.klvTj|+{c&^b ޯ^'tZh]~H؋wNzI7Z["5-vEG.zHNÉdSUJU]wi͋H)'s0C4>\"rQbPN);{r4⶝ jKn;% c*m66 jl6-yf5σ69bavb'Y!gElƜNkt5] gx͞'bNR2Q,h<yїAnA~8b |J0wv}wO&+}Xlō+'ċ×}(w4{2onre|@G6Zl_Wmks9)c{9Vnx(8 tJvჅ&pZӾjtJxa *Ώ0zʝs栊Ң'ڜ9C Ac4G}bO9\8kk;m; 0uߠ…qol=[b/D֢ٛo_xvTŧ}Y/ZZxP[{8#GڋίE~f\B_d}5lu[nPv%~x6cC-.o#4ArhD\,b𞄿ڗ]go6뙬̃-N^3?eMF{D0NQ=KMh}ӦaIߔO~ctͶλXG #ڲ_|uR|ۂp6M5l)hQ4#蕹m'0e-;:>YC6NuUbXIC̦V.ǺӉ ԅikll@ĕ~}$6OR'~fjC_,?\z,_*,˗sۦrφ:* ىX0uEmFFGpW .\~{ϲ1^šIc22R>p/-ջ%}@1r֣1MYiN&so~XOJ.9M1WDv3`L e]U($q~[V!ӬR71t mu M,~x:|i)ȮNőe}WE4wfW]fX!Dq "%ƅQΝ"ܥԞFƱ߰T\1Ѿ׾Skn^VKjYCdN}p ~zt>4Derj-N7.&,2fBkm}J5r?}[Kt(J]N~rhFr_Nj3de {omv lEC}U;U*c"rL.i˼bᇉ~B:w YLN]}5'mIb&m}AB@[$| \^BBޢ季ʋ7fpR/H쿴ŃzLdK>;}{Uɑ.@}Y{~:#h)Ӎ8'_FY9C;[VtN>5e\eQ Cc:Q- 닆sx~7|ݮU/Z'{S脸"ˆcG{pW7qoWܻ!])ۛ?ct?~mK5p\AM 3?8f[ņcy!WyZtt8Aw{XQ+5oqL^}ShYcⳳT&zMm4;k\,=q#w>9f|^hsթc3R#_d^D4m`8_p8r}Rćl,NV?iX&~*7ul0˶Y;Wt$ߖϩV.V_QY|{[qMi6uͤn(/p$`gm˧{ &4qN243^_y~<ƻpN]zuPOMK:+>3a_MЇ`l^xAz;h 3Լd^Nw)]׶* tЉ/W<)p.3^W/}CsK4ܟFF+;2xs%I~nkL]Q6ݦ>AXa84zly;,1 yb^`L@8Syi󚒮f.Td'm("OD{`5>7;]+Nvw^k:].W̶p)ێP3[+ӊJK{$ݱV<\]\{R F:z֨ðD1l/g$ .>б6on#kU*Tv4)Jewp3׼#S M.[jtص20} κڷu}ڑm)ӖgbOW(rl#d; 0_tSZ%xG]SĦ/“-dR nwVl3sIWبs4KV0hOIF#D:O~=ASQiR pzSJA"]fg|$ǔ9Bӏhy}d/  xEX6:2F[tǚ՗B޼u&<=վ F3VSeݖgTS7-{\t]; *;Pww502Ex/+5-6v*(98ve``Cmh+_|wc5#nKk9m̅Tol]k(4ţl8N4MC/e-^\ ?\\Zmˌӻ5ﻅ#cnO G8*$%:cqM[$|N⾼\N o]oE>6LUesW2\ |`ook j2֮Rjvd|@L;[_ۥ(Wu(g^lQҎ>7zSc!4_vޓs#cӕe;F̪ U7W mj9͗Ǻۛ-60̨hW*4RӆW^S] ~\Od1!65ht>6͛RݳnEM}pG!cU F4+fTij͚M{>xDuW?`d &]/NORUl{=u_qK ҈a ov1^185h "ߜ.dLzV"g-ye]"mٖ;\o*xhP&<[7}Yxfq-**қS' }h͊-:n}+oҳ~Gɴ123y4©| /MOf]V[|.].MXίV`FŽyo?װ]d(Nyi3dI<\Ǘ/:K 9TK+:7T4;ȍuZ.j56vy b$]0,Q=vpn<^{3̧?{+"v,Q\#ԩua~9 T"$=||ʵsnZoCJ}']z[1b+GHAȭv40zA:.~;ϚnIKjsmMJJ :_MfHyO?wj?کn*R<^%b~-'b \w|"8d/s ]IYMCDMJG-8qrkkyzcҰw*v!0}l6y)?oF3XNs6ia_lPUzSµZ_f.*UW½|.G;d#;wtc9&9vHpxTl ¤WnN֍ w{aGq̐>$F]IL,bxS'kuþc&k  X]2v't2X?儺p_49dL/#g ]5"xk'᛭s8 l~RSH_tHȶ֠gvznmx/‚~ M{ܓYBah̠WW(Sv&T,v.?2c|e>upiF:pΆ'햱G\_TSLSٗanf>קj$r +㋯v7%)wkk 7!k3C_hF;6#uW/^ m%K>;~wh+,%xGW1)yBM[ygo}o  "XŢnT0d`N VSS1WZ`&7]gqcW @@s#^uMAU5j^B_Ǟ6:*Xîu }z8η_;lv]]7?b4x0EHǠX@jMTH/P]`a +*i5%Q)\fp zns/zuNӃ'o{؏+l\᱐:=+Cd~=eZLymkԹ: e BnpMvhCᨺdt焥ŗ[&>`yW'{Vʑԭ4٣vQ"կ߳p6QMGe/Ņl+6LUPM=7gnȰu,zD zoRe:jmjʽI7a8[.^L:j!SV螻ƕ^'da.;qn{Hp`ę{srG =y#-Vќhޟ6r_Iv4$lfR9y-E*byHaF3LλMbåaKyIdSzwr#XKTvViΑʾ #w:J3-ET[S~Yײ8=Z98SZ~:K&Q݆H@ ~Iz(k r+9t&QIkٍx_p2I;sETv .]TZ9?zYe~tneom2rf*1hekޏ)F[1t-]nV}NK .hɘ7,ϝ8;jEo{TpO1b3z}!a˝ 6;ڼ0eP#MEV։ȫ34s[74Ե4dԻ{ܝ$vwWn~t& ǣxM[u-m.;Ss72ܭږn;,Ҝm>‘`)Ch)kO7r6QɲӉyӫzP o>aȕW#Ԡ+ѳ&!|MC,xT8&239~c:~cO;߬;wؾaCXIHlSݬX J2s]F`-f%3 騝drs:O]T}NMΚ e9q?a?2&h6Z<yCÓy膺uVWG 7ϟv!yxs bKgz!s, ?HMlsϗ~-is=3(J[>y*e'|~pWE ^4rNXad7M̒gtQvˆP-5[JX2|#%i>$9l#O3~mZL|E!g5L}fӪn$hȻ3|Λf ;U^NXk]RRsųn}^eڦ1ĩEj:0.:odvl=s4Ғ 1ѽ `u:>Huaӳm-t^a7!zll$ѫS9ݸG]īƏS.Bgj+D# zGҮJk m3Ú5<\x~ٽ$lkLY['On>-M?Ϭ}Vܛ wVgzOrB^^3;%⋂ԷR^H&2gX ^1U&kmWʶ~3¡\xRcd^;z8l9fvKhc_DljE1U=]isC&B3 VbCju.rAVbbzVBBj5]QZV@U;zo8[]ML/$5_ x>fYtچ+4+R1>N/b=;2n5O5|oGY{fӝ 62_/55XVe;}"WvjVFG!{Z~LHǽP6ϛ;ϡVjImYFYᴉ[:a7"'9n8yʃwӅ xaG'FcamE-$'R>= BґFY2[F<>.ᛟdE ;NaOMō䜺3$c;NضmV6:m۶7mٳW3U7 M=]Du?Ѓt? |6iu=*R>ॿGsԲ[V'%L| k3,lA F^tmN%8KIWc4t`+F+HW]ٿH-RY(@o4,) ڑKqtҹ& {jNʥܘ RƧ5U0eKfܵ)?vOw+(ն| rP76e }Yi;0E YZދkC D쪋kރdjM#7; TŴSA&6<-NԴpB*; [ÍfƮwEŀɧˏn\E䯶:SHkZk]=hPjc9vZ)vZؖs&P}jUwOֳ&)('-_{NeU|)ժ oj[Iv5TT4E](#?-^Tƌ$Y׶,Ȭhmp Mf97_??q#z\)ߍh/wƊ=iĿ2jƷDN}N(9S41b/xx/=z/v.; X 9S -ѹ ]oei󝠲4n.ihQpu5\hFлf,lu[Cf7~+3Kn2)NNθt%74:ϸ%8LdT{QoL돡x\1NՄ8Ɵ:G̡ \ڂ=\(r"ݹZrf.2L?fN@lRdb5B҂TZ7 u0%;0FbX7Xr2+]^o)(]wL!zoL\/(T!trrq`$T9v|#c-)iQԿ_ZhML8z@#Qi#;Kq}:lzp3n4]BvHiHSP}}G,ާZD:8`0c/lFX GpOkeپue簠0ծ/ꔤ[]r׊*xR.ɪЙRFBRIOeBQuŪ-ΓOgt_+*y3!Gzfs^LrUս4ĖY%CPC!mcEYڋ%fkD.JQMave@ eaN Q iVzغVQD5Φ 3|Ux*8h=zkoLVtxtl !}PA-6-8#8,VQ-B8T3jpE.HT8Y2sT=SaN{KdPV2(P Te ,"t&[ զJXW#V% 1Mz6kb\8$ܽ bki5) (skz 5g&0G?E~TPwPڨhQƂ־xQכI2-3U=dt!] OY(zѱHI)/J좻? |%Zf2yGR(c)/AN `b|(\s%ʥiBKbS-e5%mQn0d]Ϧ Ĭ-XJVq+\{ vB+mv _Τ&pG,dåfRmd293yvw=Mg sу(dCE]ubCÎ9hG3&վ$a /x耄.4ojDD1cۃw3lbٜ@册$Ğ bݗ=0Uۨ/ay6!l,W#$N i̱ڣ͏-2FRwq{@ Nx)]ړ™d |epNv䤢]a4g BS6yQ5%ɎKq$5Ty_Z60fЯ&0P_0 Z^oX;g@q=P/gk@B!O@+ЏXuP|lٳMCd/3iR(~~Șخ(NЂbd Ub6kfdtkdbŴ*D,2._m\ P8atEa"DmZ4p~ZOCMŠ11޿!îbǢ3k t(oy0Njfy¨1x0o {#5Iٞcs%w'zj+bWVKJI5 7+p42_[阼둖i?_jG[o`>""2"I`Q6B{. D"ïOB$)+VPj\-HtepQy ŧ.!F䠃|jD2.ޢu2G~J5T +3&P&lՀAWp=ގ63<|oM4XJ\ڵ>%YT1QrVU~kܒM_;Xu>Vxl2пUbcQt6h=VN.QCT>V9+B1>r#lS oLT}ۊHNˌ+?ߞ{lʯʳ4 T R ;2)>ȝOFlJ+xP 0ad}Kؠ;*peTW4 yIA&q cلDs ع"7!hM]+i3.IZ+e+7~ມ:p};>ȵMȽ-񟅠zбl fcڪ4lF:|JAj]P`L0]iM\IElu`rS3~2OKwvۧ2K9iXyjE *X+B}+rlDm2nM{[ћcE蟱u ^ꇙĞPlfsd6l=xŨ-0F V(TmYГrdY[xl,MYae'TF m44,s"wnRY"TR6D zğ"Z3Ȩ]N`׼txa!y dq*֘e.J$SA?cj^ٚus mllXQ3<"|+P)ˤYT[svK̬ZaR;%y3/g ]nFJ Gm'RρhbCti[7u)~㳰!U,%1? ,<%1X~@WŨ&5;O,ʄRpU2jNJ0 1Y4Jb}ibI22~Q|)3[R~bz.j12~.l>wEN5FzK2\}?bB~DAߊ~ _w-k!+;֞כ?>{c3K7T̠`J9w^uk>Z ܏7NH %^7_1{,9`y˼.d( :vp&"[IQ&ٵؙ3bo,S{<-sAVX4|H-3AOԓ߽"<=4>uO_̢r8q/4ʖ !}Ѽ##i1-EtlŞKERxcR#CCN:Cj+~3!P{&q$pĴJ76Vm=^?Q!j}Ff|G{>LZ.=Upuhto"RAHǼG%7ƀ,,!#_hj+L]v;ْx}(j[Q N.Oטt}\uOS0Z\X:J{0j}tzcMF ͙Iđ£ R9EopUP8a/ɱpK0G$ĽjLGҡ@ d#M{¸wLc&3 nx5CbS(qu6BX[*FEnNGaO, *s#赽HR2#BZ@U/L`%.NSC$.X_/Ҥqܧe:lDZ ix$eqn'Kk"j1PDW|!DS"ǐ<kHz@Wg]PFM%-kCEioXKѲ٬XITʻ2c\,^mV8p@w=`[Q1p5QO*MI]y&MP/gʱ{fuۓ+J`"߳[!o{/jʯ6wKg5ݡPw>:pV5#u;Ew06l@d?n!AUml,O)\j6L$bHlk;]^-Lg;ҭ@2orUON,Nz` EOP1Ȑ 9mi쩡t(6,MDRtly<=>-y_z:ۃp.Ibܶt4/NΒD"ltG.kXToNt~( >ȘoiS׏ G @kv/{7OngA(3)98DuƊNsb‰MdRg!ӍcQ T zJx?zmT;xfv泔~vҽ+3%T!C%B<M]dfq$\YpJEF)Mک.qz 1*v'r'+1ǵu~]*E-!FyMm;e7lۍ[>(noQ Bg#6o.)rfkBL &}e&qٟ'C#;c``$n  |Z;T^@fn^#% 䆔!0WEBX7E~\iڞ[Qϫ+2LV:->Lx;iѧ%A$T/a1;P*})@uŔ?Ԗ`kisKDF0|>ܖuiw 1omiA\\l <&"Q^J5\i|*u fa97dG3Ql~J<%7א0KmQ~!LPpf75]o8?z [t S?:4uH28Ufг~kUߡW얁 Ϸ ۏZf }zcNcO:?_AD?gF핅Co%cZ;0CEuv'pX`zAB>̀b;Gn;^Iݳ na)G;"}ɕ_'s-)o%^ 儶w||` uCtCvIku鞰· 8<޾3*Chs-Cy<h܇wJ']`E C;gSiUr0|BfvGKOCLj]Ԅг 6&z Lφ-!Hԯ>ߥF:=}9`zAQB;aN3Uٸ6 ɫͳὬ Rc=5V򬣣8fw$ComjqphϤWBx c؁ rBe+8v*}_seG1 򣊡#A4#CNSQryO ǔ$skwNJѹ?Տn 0 )8=loW83ր>ٷѣOO웼|!Z=(=.`0qoa?k4nx:H!+6F`;v`p*^hCC$:(J '/t0: 4渎%|%~Hm qoPQU"!!oPkf