container-selinux-2:2.158.0-1.module_el8.5.0+736+58cc1a5a >  A `^U]YM<~%vq.Q( " U`Z0Owuq #oｦ&vkc?Vۿ4`[D)^T nS zco 8UJ,mU(ԚKSqKh!xܯ0o%R1KkYR -iOCXA y?InY X?䫸; (U0kOgKE$B9N(`[` t/xz]3z%#+L@p9\O 扐G*4ߢ"97&I@ 4ҷr^8x.fWJ>AnJNjxTǜ".W1ΐՖu"| #$L>Ԑ>ai\{HEG6) ScoudE2וV"_kp;bU&gݻ+EhͲ^6P%}@r7~0320ce5eaf0ca02bfe25c59076b2357a59d7563c4b77951258e1dfb3bd36f7e5c96ca49eb18635adb2bc8cb6783a48aad942a674`^U];J=KvФSÙqRq4m!DU2En񉥸|_OtW,\5i޺H$RRk^sMbSOn\R|1ޠ5x q%A%1x;cv,Mp66?6d< @ h BHPX \ ` h  $<(8_9X_:_A5F5G5H6I6 R6\6]6^6Cd6De6If6N6P6T6Z66Ccontainer-selinux2.158.01.module_el8.5.0+736+58cc1a5aSELinux policies for container runtimesSELinux policy modules for use with container runtimes.`^Ex86-01.mbox.centos.orgCentOSCentOSGPLv2CentOS Buildsys Unspecifiedv2.158.0.tar.gzhttps://github.com/containers/container-selinuxlinuxnoarchF ]w`^Ed`^Eb50d70024d9fb9c76c1a11bff9474f170c54fedc43222185b9ecdf3c6e20101b78f4a4e7d56eddd249cf2a2f7703722d8970648ad94aba802d0102cb0f1ebbb5e mockbuildmockbuildmockbuildmockbuild  gitpkgconfig(systemd)rpmlib(CompressedFileNames)rpmlib(FileDigests)selinux-policyselinux-policy-devel3.0.4-14.6.0-13.14.3-9.el83.14.3-9.el84.14.3`&m`_T_`@_%_%_F@__"_5+@_16_p@_5_X@^n@^Ӝ@^@^^k@]@]B]]@]|@]@]X]W]R@]@\M[[ͻ[[@[[Xf@[L[K7@["X[@[@[[[Z@Z?ZZZ%Z%Z@Z - 2:2.158.0-1Jindrich Novy - 2:2.156.0-1Jindrich Novy - 2:2.155.0-1Jindrich Novy - 2:2.154.0-1Jindrich Novy - 2:2.153.0-1Jindrich Novy - 2:2.152.0-1Jindrich Novy - 2:2.151.0-1Jindrich Novy - 2:2.150.0-1Jindrich Novy - 2:2.145.0-1Jindrich Novy - 2:2.144.0-1Jindrich Novy - 2:2.143.0-1Jindrich Novy - 2:2.142.0-1Jindrich Novy - 2:2.139.0-1Jindrich Novy - 2:2.138.0-1Jindrich Novy - 2:2.137.0-1Jindrich Novy - 2:2.135.0-1Jindrich Novy - 2:2.134.0-1Jindrich Novy - 2:2.132.0-1Jindrich Novy - 2:2.130.0-1Jindrich Novy - 2:2.124.0-1Jindrich Novy - 2:2.123.0-2Jindrich Novy - 2:2.123.0-1Jindrich Novy - 2:2.122.0-1Jindrich Novy - 2:2.119.0-3.gita233788Jindrich Novy - 2:2.119.0-2Jindrich Novy - 2:2.119.0-1Jindrich Novy - 2:2.116-1Jindrich Novy - 2:2.107-2Lokesh Mandvekar - 2:2.107-1Lokesh Mandvekar - 2:2.89-1.git2521d0dLokesh Mandvekar - 2:2.75-1.git99e2cfdLokesh Mandvekar - 2:2.74-1Frantisek Kluknavsky - 2:2.73-3Frantisek Kluknavsky - 2:2.73-2Dan Walsh - 2.69-3Dan Walsh - 2.69-2Dan Walsh - 2.68-1Dan Walsh - 2.67-1Dan Walsh - 2.66-1Dan Walsh - 2.64-1Dan Walsh - 2.62-1Dan Walsh - 2.61-1Dan Walsh - 2.60-1Dan Walsh - 2.58-2Dan Walsh - 2.58-1Dan Walsh - 2.57-1Dan Walsh - 2.56-1Dan Walsh - 2.55-1Dan Walsh - 2.52-1Dan Walsh - 2.51-1Dan Walsh - 2.50-1Dan Walsh - 2.49-1Dan Walsh - 2.48-1Dan Walsh - 2.41-1Dan Walsh - 2.40-1Dan Walsh - 2.39-1Dan Walsh - 2.38-1Dan Walsh - 2.37-1Dan Walsh - 2.36-1Dan Walsh - 2.35-1Dan Walsh - 2.34-1Dan Walsh - 2.33-1Dan Walsh - 2.32-1Dan Walsh - 2.31-1Dan Walsh - 2.29-1Dan Walsh - 2.28-1Dan Walsh - 2.27-1Dan Walsh - 2.24-1Dan Walsh - 2.23-1Dan Walsh - 2.22-1Troy Dawson - 2.21-3Fedora Release Engineering - 2:2.21-2Dan Walsh - 2.21-1Dan Walsh - 2.20-2Dan Walsh - 2.20-1Lokesh Mandvekar - 2:2.19-2.1Dan Walsh - 2:2.19-1Lokesh Mandvekar - 2:2.15-1.1Dan Walsh - 2:2.10-2.1Dan Walsh - 2:2.10-1Lokesh Mandvekar - 2:2.9-4Lokesh Mandvekar - 2:2.9-3Lokesh Mandvekar - 2:2.9-2Lokesh Mandvekar - 2:2.8-2Lokesh Mandvekar - 2:2.7-1Lokesh Mandvekar - 2:2.4-2Dan Walsh - 2:2.4-1Dan Walsh - 2:2.3-1Lokesh Mandvekar - 2:2.2-4Jonathan Lebon - 2:2.2-3Lokesh Mandvekar - 2:2.2-2Lokesh Mandvekar - 2:2.2-1Lokesh Mandvekar - 2:2.0-2Lokesh Mandvekar - 2:2.0-1Lokesh Mandvekar - 2:1.12.4-29- update to https://github.com/containers/container-selinux/releases/tag/v2.158.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.156.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.155.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.154.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.153.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.152.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.151.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.150.0 - Related: #1883490- synchronize with stream-container-tools-rhel8 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.144.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.143.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.142.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.139.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.138.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.137.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.135.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.134.0 - Related: #1821193- synchronize containter-tools 8.3.0 with 8.2.1 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.130.0 - don't use macros in changelog - Related: #1821193- update to 2.124.0 - Related: RHELPLAN-25139- implement spec file refactoring by Zdenek Pytela, namely: Change the uninstall command in the %postun section of the specfile to use the %selinux_modules_uninstall macro which uses priority 200. Change the install command in the %post section if the specfile to use the %selinux_modules_install macro. Replace relabel commands with using the %selinux_relabel_pre and %selinux_relabel_post macros. Change formatting so that the lines are vertically aligned in the %postun section. (https://github.com/containers/container-selinux/pull/85) - Related: RHELPLAN-25139- update to 2.123.0 - Related: RHELPLAN-25139- update to 2.122.0 - Related: RHELPLAN-25139- update to master container-selinux - bug 1769469 - Related: RHELPLAN-25139- fix post scriptlet - fail if semodule fails - bug 1729272 - Related: RHELPLAN-25139- update to 2.119.0 - Related: RHELPLAN-25139- update to 2.116 Resolves: #1748519- Use at least selinux policy 3.14.3-9.el8, Resolves: #1728700- Resolves: #1720654 - rebase to v2.107- bump to v2.89- bump to v2.75 - built commit 99e2cfd- Resolves: #1641655 - bump to v2.74 - built commit a62c2db- tweak macro for fedora - applies to rhel8 as well- moved changelog entries: - Define spc_t as a container_domain, so that container_runtime will transition to spc_t even when setup with nosuid. - Allow container_runtimes to setattr on callers fifo_files - Fix restorecon to not error on missing directory- Make sure we pull in the latest selinux-policy- Add map support to container-selinux for RHEL 7.5 - Dontudit attempts to write to kernel_sysctl_t- Add label for /var/lib/origin - Add customizable_file_t to customizable_types- Add policy for container_logreader_t- Allow dnsmasq to dbus chat with spc_t- Allow containers to create all socket classes- Label overlay directories under /var/lib/containers/ correctly- Allow spc_t to load kernel modules from inside of container- Allow containers to list cgroup directories - Transition for unconfined_service_t to container_runtime_t when executing container_runtime_exec_t.- Run restorecon /usr/bin/podman in postinstall- Add labels to allow podman to be run from a systemd unit file- Set the version of SELinux policy required to the latest to fix build issues.- Allow container_runtime_t to transition to spc_t over unlabeled filesAllow iptables to read container state Dontaudit attempts from containers to write to /proc/self Allow spc_t to change attributes on container_runtime_t fifo files- Add better support for writing custom selinux policy for customer container domains.- Allow shell_exec_t as a container_runtime_t entrypoint- Allow bin_t as a container_runtime_t entrypoint- Add support for MLS running container runtimes - Add missing allow rules for running systemd in a container- Update policy to match master branch - Remove typebounds and replace with nnp_transition and nosuid_transition calls- Add support to nnp_transition for container domains - Eliminates need for typebounds.- Allow container_runtime_t to use user ttys - Fixes bounds check for container_t- Allow container runtimes to use interited terminals. This helps satisfy the bounds check of container_t versus container_runtime_t.- Allow container runtimes to mmap container_file_t devices - Add labeling for rhel push plugin- Allow containers to use inherited ttys - Allow ostree to handle labels under /var/lib/containers/ostree- Allow containers to relabelto/from all file types to container_file_t- Allow container to map chr_files labeled container_file_t- Dontaudit container processes getattr on kernel file systems- Allow containers to read /etc/resolv.conf and /etc/hosts if volume - mounted into container.- Make sure users creating content in /var/lib with right labels- Allow the container runtime to dbus chat with dnsmasq - add dontaudit rules for container trying to write to /proc- Add support for lxcd - Add support for labeling of tmpfs storage created within a container.- Allow a container to umount a container_file_t filesystem- Allow container runtimes to work with the netfilter sockets - Allow container_file_t to be an entrypoint for VM's - Allow spc_t domains to transition to svirt_t- Make sure container_runtime_t has all access of container_t- Allow container runtimes to create sockets in tmp dirs- Add additonal support for crio labeling.- Fixup spec file conditionals- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- Allow containers to execmod on container_share_t files.- Relabel runc and crio executables- Allow container processes to getsession- update release tag to isolate from 7.3- Fix mcs transition problem on stdin/stdout/stderr - Add labels for CRI-O - Allow containers to use tunnel sockets- Resolves: #1451289 - rebase to v2.15 - built @origin/RHEL-1.12 commit 583ca40- Make sure we have a late enough version of policycoreutils- Update to the latest container-selinux patch from upstream - Label files under /usr/libexec/lxc as container_runtime_exec_t - Give container_t access to XFRM sockets - Allow spc_t to dbus chat with init system - Allow containers to read cgroup configuration mounted into a container- Resolves: #1425574 - built commit 79a6d70- Resolves: #1420591 - built @origin/RHEL-1.12 commit 8f876c4- built @origin/RHEL-1.12 commit 33cb78b-- built origin/RHEL-1.12 commit 21dd37b- correct version-release in changelog entries- Add typebounds statement for container_t from container_runtime_t - We should only label runc not runc*- Fix labeling on /usr/bin/runc.* - Add sandbox_net_domain access to container.te - Remove containers ability to look at /etc content- use upstream's RHEL-1.12 branch, commit 56c32da for CentOS 7- properly disable docker module in %post- depend on selinux-policy-targeted - relabel docker-latest* files as well- bump to v2.2 - additional labeling for ocid- install policy at level 200 - From: Dan Walsh - Resolves: #1406517 - bump to v2.0 (first upload to Fedora as a standalone package) - include projectatomic/RHEL-1.12 branch commit for building on centos/rhel- new package (separated from docker)noarchx86-01.mbox.centos.org 1616790979container-selinux.specv2.158.0.tar.gzcpiogzip9utf-82b95a4490ae24e254e08e9bae43298e264ed5d19df27adcfed126313fd93aaf2container-tools:3.0:8050020210326200241:faa19cc5?<<%) ]9{dU8p٫B!TFf)e$#Qy>{|y&I(/$B痤,L%-#K/- CKRnGBq(A<}ĉ( KwD`H; ႂB84&6:MA]I$wQ >(?%<3 ,Ex XIPHN{E,XM"B:X(ŻpD@w+}G}:%!.( &Ġ( EEeEW8c$|i#pHКBP4ĕD(šPH>e%' *#%{x(E|Ih ԓr|uP;@ HU"l$E P^hM(jmH7 I[{w< TJ\RZ\JLA@NP8Z A){WE@!+8𒮩benJd E|I"<(GBC,' + %%"‘A4<:Q<<QԊ_/P.D_" Eu bAU%Dy09j%:IJ*äbPba06'E!qu;HsW5_ϧrP$4΃ˈIJBP MW&/8xst#0DԿ !οƠWɥ,;3G"0MvП@2@$0#x'5F@i1<ĔB#0- @/&b¹ hwpXX ~WZq`_C$<EtYpE/h`0|D`fhYj[@}bH$<(oDH4!PbhC\;GuVsx"QEPYi$] kRvIkE_'ZO(c5IW"x/O AAXyU;q N('7@V  G#(; ߪppp"27vP~I* =#89':q+\%Qx<S1 M ns&|%#އ|lpAѿmY !P1[op((N8O@ֱr8 N_ݺ}.X_m8D#Kf.(b J=)U zG%%Ra^_GPoh~<}cC6ځ߅Y X|LArfA<ɤ"($10K p@0\p-<`x,װrvxzC~6Wh A7[RN>$*P$ǁ@IP/2گHV\SW  Եűߕk0MF 0N wP#TP@Yh'W1|  Wd1IJ ֙fXD ^AaQIKI+ +x pPIu)+u1kL-=QdLaTQ0d<׻J=Z˂=RL'^J0ub*?Rɿ{'^Ox\"xrAGt>$ALӿ\] \OPX .؜U)d *p`m4¢p uF8)-p"Q8ԗ! K"iAnJ(Xp !B(rmAhb2e_]zPw &3:wTC'D@(w 9^F;cRkaH` ?[C E$U\ p,"N~@vvr_mzd]I Of'x`IN)qO"`3е:1¿<9 Z/f) 0(0ƀ^ ~ "]^퐤¿!0-['< 9o;x0Us ` "pKR3&;ٓ@Ј5($ |~Y825Bߏ]؆${XFP1둹L' G vSjbP)3 7@`D#G U2RG-zH QÝ?L\U o `x*ꪣ{z>`%$g2: ;ԝ|LwghOrh"+D9b§ %ފ} PN!A|XrV^@OI>UC`Cr; 'Z# R݁:D'2@XAH@K;ӸFȍpPУ ~v)MY= (wUJ'mG@o`I#@-"ڪ/5ęvd?k@Ov;k<(%Of0+k`GH^fo{c:!J+|߁72qt%Y(UA>t1?iuJi鲢+@I@;JN*ȇ aD wqkTO^C\ڞzі`H310KƢq#&A X$ߕ^'|>8G ^ՓRFе w0Dq(h"PWw"r0g_ ׵@ |<]|r)$ "Q#k3Jd(; W6\':H_URv26) @S0OʌrEU/Q])8v1: ;Dddl+ 8h׽alㇷQ`vudvP GAs=fЄ|V@∃6ٔ/2@˝^x'E.uzBR%q@x-׋%QM:1!U18 v%J'%v[kHBWS` <]t|͏_U;@։5U{6D(O^Q2^$z֎"~V:OQe~54JV98F([ n9E`XrO5Ga&#Hh4Jd !!&wdR, > \X̧x%Wab4XH!R!gk{>Rp.3Dcq߅߷(=V:iO(h킗Qԟ`[($WX'Z ؆HBqxO"~.*"i/f7q& HQr5ІɮE`V$\܂R%=8^rBH~*IʾԝpEY)\?umb &a{Fӝrp{ۮD`q@MbJWQ`]ꧬkŃ17Z,)G-cPt LyNƓ KO1/P~#!s bҿ \F^B)]Ȱ`%,?Z#d %\ _)0u@(pI$RJq!!adάWVXl@=߶P֭c5-r=|b/A$=1BJ[ ~ط$)n\;ÚB|j Dt؉ Fh xn܏»@s5A:$\[1BDѢE;Y')8Aq&P"o@GDj%CÀk8xGCWN@yt9r)h#Q(9R"<+VS̾Īw$>+Q3tPOa[gt-SfT~p`2B?1v2# ,pu%38@qK5t*l;I*ޫ  xX\3$ټɮՇ ^*LD#:٪Qm/dÆ K.?. y RN_.OO'nN'-^oq3YrJQC*/QwĜ-.~K'ڇ] >^q鑣w0,!AIC۳Uν,7ڑSҹ4|_b#:S.++((WPUo\0s 5`玼084'K\Uao-(sQ!\qSɏE~c^G(.^:7,/UMt{ɟY:|‹'Kvor.pKk FJlX *Zns)zǏ<C遲-Z{?5%gw ,.OU,-+,-,u/{,knOemc+x) J50p$U#ˏ̣N->y%3LuIYrD-wyq{/ nxܹEe9ޡ qB}JJBrxT>,"_4l7>rͱ-\'% T%ڈ$i֝/DOةc?`Ū+ 铺W\5iZ7ˌ'}]$^Ě+W[/"}&nD516L{m%(4z8>M|HY{p܁GR6if͇<o^%X e D\--}CIA+ImH!cʀ! 5aYFC"mo?^9Uus;'qQ]9fwF3FYE1OF|pL{;fnR}蠥2ej`ʋ;ba}'$f{߂*FwNNrYPRzSN_?m=Nli*pHXU O&}T[hNuhxZ@˹2I-707p)+~HALWAģ:h"u= P'&&KE{!=TCx:y^jsVC,Maӵ_^dD_O]=BgkJ=m1MG Q^e/޳޷̋a]rL]6?tc[D_fҎ3[t(_nu겘KLK@{+f +pFjY:dHѻ$dXK&oQ4@=ssU|xtN7et3߇ykgt2\c@=1ǜպhAkm> cC;%÷{sIȪv|_Ћ~>^X#1 m&ec'] Qɾe)~G]橀7_r7?4GOn͓h#XoΕ­4FtTwܾ'D/ 9%|UL==ШqfL98V4 ]$Ԯ2lHu}WiR{o)ôZDknyu*ݰOK޾xAhu^61:*e^M{SSc#_26nUM:]5ކyk{J/7+s3Z=שKHfa>%{0+AE((Li: <1']!4ޯbJߐ沲`@ -[UZhyzZ:hfxHɜE|ag)KRY\o G*>aӦ@f|p-]<ɷy-L,8̖ݧ}:6rk廒̊]%g7 u*%elS(V$?c撘gxE@*೶J e;ra>?uA3{|nq\9dy- ,2ohG;auLT2dih!62S0s9^*٪ۡ(SCtp%$<@5ݗ4Riϧ~͢+naNgTvsQe0 ykrCVP8XBVQNVqm~#ju"`gu[W\Bto| h.6z;MC52TLr2v<>]9kב]6fLoKESzZwS 5oI|d5[&izw-ߖmrwIQPgpkZ0)lVh`>Wҍ@aH#JYjfn9 ~nn욲7&h|gK+7}W=+q9 %.ӯ.z"vַWnoQtuH\J޽yG"ʇ]_y?<(TՋt5֛n_Q*3=ud?:'~uv}^J\[t3E;z::noI`ʷbmC%Nζ|+FCgqAVvx慘3|vUS"W.4H} 9oRNa?l"ۭzYOSOŖrMaYog@ uU3j㮏O. J {inJha;Nnlٵ*`շ7OYÅj Xקu+#vP];ʨ^#hؕ9C=m?o{2177 -T4`ig`J90RFoegQγP"c҆GJ58x ڳǔ*¦v p p˛|\h2>ڙdxi#W= t"O,.٨RnKv1#\ |/}%+p'?>k2mm^vZJ᣹nt&F eYCپ,7ݼvV=wP2=CϘ$-br[Z0j>Y)%&xEX)|~^:т=)&2E>p8,bTm4… ժ1/-ћq SnG\l9u{)tօ+QLiéU\Hr)[&6J3l^1|jR/7 eKa;V5a{u5:c6QTA5Kn zN텒n]5.s&xP; KV gcf{{8LEBu5-ckŏ۶] e蕱o}U7 ӰWGO=P} !hlIegQ|b~4掗Ƌ>ZCٰ.%ͮ&~x= Vqz5ó }y{ϝGh{\/*fRk=mPA8?>lzB{n1bP8(g9S&,2{ hk9_ӾH #rpPW]h\fGV2/L" _O7e]1={??ЪP!"=f?-ڝЭ$~Bo?-ڵD.k1O[트\ɦݕ''tӚ!R??S|Osai|ٹ := Drɹ 7ReXx6/܂pŎ`wxGyMVFkY3يWNq?/G1?Qi ;6Ke|BOn16^lؾ@=կ6rR@RsPpFP( =Lദ}Ja'>Tia0;}qa8M%AEO9Ks#hĞrXqy)X}&-swPwaAw;ʅ $z&^:E=7$GxFѩOSn5lx_=w~q1Gg_$9 ȅj?jA ;㻷pOc畡'Jm‡Z\ކG"Ti*K-ЌXx[ӄMB&OƈQIP}= ߓ/\?.ԟm~%3YM-M[>g~3`ڣzX qݧMÒ)xjowtg9;}}>3mw{Femjу1kTK".)VS ڱh,GL+s'N`6=n[vt|7ڡm$W՝t1,JuRMA \u; x 4u?&;*\_ـ++4Hm`KO{U.ՆiIX./P7XXmUGY/" ܷMs uTr-u`dڌ>g,,;ᮯLS7o]YKVec CC"9ddv}>4W_di[bwcK:y'U5ӛ8]ͻ}b&ʭGc|Lv]r bw6-g4c;:/NQHjeJ٭BY%ncz -Xt!~NS]1#?h;)vB̰lCz'=4EJ F;EK=cۿan0c*}}3c 7ܼ01*ԲPPI>1|Bi⧑[ޙTo],++iMKYd5.dvk7T/ P}4ĝ<(ߍ徜`fQGe2Ug/؊xK,#v?<|UD|\Җy' Zw|quAO:iO$3jdOڒLȗ4ՁʻH@f?AiE9[GGC˻oܥ_ i6ܗ|wl# ]4LMtFRqOX888r"v:MT}jj8Xca˔@jtʣZ 縧%IoiW7'o9C]u^N qE e`tr?n>pm(_6wCxǮ- ]jN)ŤQYy|SJ75ۙnοK?k2A-xg~mqRͶ >D1B&G3>0rp Wk,Pr/.%ggL0ja޹i3w!v}/Y^{ϟG|s;b2]Sf¥DGȼLoiqi lpJ׿r #q&">}Y~~g˱MZqUn5ؔamAw,V6IԿ-S0]pGsO.9Xݛ2&m*v=I?Q_H\ΖmۖO Lسidhgx+wܝ"B;/qB>N?١tVy<:GĬm#CLqGfQ}tV}&g¾R?\ټH__元tQtwfy#YfS<maAUoϡ_x5R]fλ=^-"-M=笗xhN/?V,ve;JjA>ט6>=\mM}ۃPqh(Aɳv$Yc3żn> 4/q, 5%].r]7N PtMEh;2,j}ov#!Vp)t ]zm%R#.|geVybBf3)Ϲҥ-#{D7.z\&Α~DdzmWB$a4)/};}XG'E͎F& bJףz7YNWgl/c,͝UP g53#S.u>`Y˳5l.D?:mRF{v txAuQacxk_^I@]}cm5Fxy3תU NhR>twgyF֧4\$4+27D6ke`uos.Lsϛ/Auӷ7[L''jm`QѮThZ D/<|) Ȗ9=bBlxkp|}m7gJ轛8L5<&1B#ƪFiW̮R*Ԛ5>3}T^+b?~]l/ /Mx_4X9GG 9!6 Z7r\e{ꐿ"b㖪5 /_bb>qk@]/#$E9]|;yCªTBG+b&b&wқe)mT`xfJ+#sw|);ѹYϳ(syr(YXuWW?_pF.h)t5k~ ~S%T!d8tyUJ[SO%`9EpV=~_&26,?~([p(&%)5-P;.a) 2U(B`&l]#$R~f$m)$d=ky*?_::秄k\;]T1{')\=ɽvuFv:*h>sE؝!vE-3ݨ`zգTڭ<,bMnd8=Z1F'&ą)\k3hq1<=mtT]s}poU/ȓwv[»4o:Q8i`|Aqj/&_:`1=gv*V$Tjhi;JSi o$0_Rꜝا3iO("[aWc!u(nM6.׆to<7M8G}WzՆ{nwq\thC֧=wUuei+O\w-ӑ.RG3RbzF6Z9_?m,-徒hI< ͤrd[#U[ boa% XgwuņKqÖx6&G /4x*#}SӜ#}KCAFzKufZ`R#Ƨïeql{rqZ?t^g M #?Ɂr'QVrH;L6!ײdvz',h\..= sh$r-= ]q4Me=UBcZ#SΣc2Zݻ |ݬ\>)\61oX;q v.'зfbg|y%1 [tC;;[#/Hmvy+:a~FԭwW>finhkiw):i=(;I!"LG  (-v=:Z\vXod׹[-zwQY9(|}?#RaS)nמyˮ' |nleWxf}'+FAWg;MBXR'#Yx6 b|"=pLdgrt>nR=}w_Yw}æh'f駺YC:S?d^,5)[2RK2gQ;PuỨ/62!57<;s*$~\e=L:5vDͯm`9x+u'_ u(쭤7 o25?wC򺩛VApB,VYF9%% Z~V!z/4i[`rzfQ̓ϵ |tTNïin:.4~/He,n%B +:Zk 4RzVDdF$J:J|QSOy?Hr=FV$gĵ%+B^kSkxӱ\`ty@{SBrP4EާFty=)ixry\ +H+w,Qmdr!Nh+M\)38R1]9Rg9< ѥjNz顒tyӡ X@Q<[osvdw6ٽvf˃7ҶH@`F=<\n~|͘UH: :ށ'ѐwg~cD7' }tֺإڥg2˽nKMcS"}9+t` \tz'"h%Ktc{r5t:}*O¦gZnz)JC,IIsWKsqW3?\LOVFN9 R]&rۤg5kNy1 Q{n{IbN|2Z5;~Y7حrۅ.hf&*vvK~7o^MFy SeΰPŻbLoijm`gC>ʇ2ǽvn q*r)hg͜~Ц蓿^ԊS3=0Lf@4\7$.ܭ&8&k w2rI$} w Hq%nCMTl_HjNN|Q WhWb}"J_zvd|k5jf֏B(ݱ̦;=-ld^1kVyhCV%M6gmDX2].:n;VC*5w'</b5z]rH鶼7oezS}!JhCOylHw <.@F!3SpyYEfr:ew}@+'jd!NwE9լvC`K{9m.7=:vChըڰ.A!we,itnHEO$s?qB Nj34~! N z%|{ˋ[I4O\i |:{R#;yXfO4%yPԨ5Ϧ (h4ap[h+`Yn:Z8k%RN]%lֻb4ТTl1 ݽv윦`=E~̴8hc @4?EaaF݈wt5|d:5y|]7?Ɋv4&W9ug0H:vvҝm۶mtl۶m;ol6曳g/vfnԩzt~,A!mT{Uࡥ}K(1eyNVg[+KT(koHaKv`nh"eVR8P ˻ RB꿫^,Q8@5B(6x9y1 9»pCvK]ܰ_ʺN*z%Cm.Kf@,S{F+G".HBW<^~q3`Jbt JQ@Đ1(I;3#˜xGY\6[0)X-0+ڼm " t;{T])Ȕ&B]0mщ4fӄqMiCcѬSA Ԗ)>8ĸ][;TVIjd~|HrGGZUcSll%F2dU#ӧqF8ӔGv``u:fv5:i3=>~BCCRۄNJīh;9&>J(f50\3&0+>a)_/ ح4uǭ1p!,ckMf! Tqp#{Mۓ0ߘl"imؤB1iV[lZp`Gp5Y*[2q f2],xqdTzHÜ ȠeXQU>n5,YELȫM/%ӕz1]GJ{@c"l4FŸqH>{/מjRPG6*k΀587:Ma̩!VQ+"Ѝí}o=7nk e[g zȖBA-x!:,pբ7Rnlnn j|S_ %abDqEmʓ6?6 7U A?Y> _ 3*BZ(xrt1^6Bp:⍡⸮erX[4Q؂N>M4ILz$c5@Q=]K#x0嶰mKCM.:6S}@QcyS^kJEw(baW!$g5K d򰏨Q dS^w̓&hD!ĒPJrK_=؅ŦZ6jJۢaȺM${Yo[# ',3B)W bWŝI#PMYHKͤȶe rf< 0q/{e QȆ D=x|@Mņȇ s`c^fL:}I +Â9_|;y ]niԮbǶ5pgZ_G0yeYmӪAyֿaXS{ZcE\9tƝ86+ |;λݢ=o z}P;9C ϙI=9//x{_7jaQ_YW?:mC XFHҘcGk[dH"0"5R'3yݏ@4IEx,i]& ҅nl8jJZ+&z0H4$kکd$l`ړ9 ̠_M`JͿ`\3&=;"d5߰h H=i+LY2#=Ekݤ0k3sD&l6v˵3*1?cEx"*אELRw@6CUl=jhyZrLiZfc/RX*V,/"K"v,! Oe_%ϏY(h^]Mv;^^~<73Eߵ4Q5livDȌa8c4MJnS3).I'|"iW{ۍ)&dZjQ'~&f_N5R(" #3W  iZ(ޡM7g)vPn5p7`5d+U^ӏ&]d:l=VcT34|ӥF؃̊^eGb(6*i[)V7Q>Ϙ;th=-%#{'k{aNP]ee#Sk޴-XfBgjBTvFkÏell/7-z0/N>]Λm(؉Zg-Q=Y^cF&PyYtU_59hC6#eҞ:3pjya)IR1\{ýZc٥_<1 .wH$`%*1PW^0AqR(&4y :YHFv ÆiTbhO([)K~=*"|fr%QI@,ٯy6,OC McOU1]0VI ,:<-*5E*҃!uy(ꉣfxBy;EVRpqeyʐ $>[`207=dεmp/I*|W-#YƽlR}yycC;_%VI02ZRw۱"`MǘV5I*PukURQb:&ީ"ϡg[̯lQ%mQ?z`DUλ6SƐ=fspg3ؽZc O+z*=9Qe׽ˉ=Y(),1pR57|yI+:Q햘Y W w6K29dտg._C܌OH#Ɵ  Іd)nS(gaU_C:2& Y 8\0X X4*6bX@\un]7RjfY߆T{v0DYGGajT$Y}bsAKף0xiF)p+Œ.$(ddRi6ݳS).훻g]\; cd\|Qkdv;Ή?B@fr[7CV)v=7~9}dfo0GgAsAr%=3|-o(@Jn#b !)Xf{sy]zQtMDxs2 M748k/N 3;gĘX ;yZP7փ?Yi0g[Fgȯ'?{1Exzh|0ٟ E["q~^h- ByGFҌ b[85*5Jy='Ƥ}GiuWo!sgUCj ݵzM9Hinl|{2POC8 D?}s o]z{$DJyK!nYXNCGW0&O@#5w%yBni`kp$*۔եDXvC$HgzM5H0=SOKEH*:=70('G#eJ&TuXgx4(h*y>3P/5Q˹'ѦNf{9A^O(ʂ,#sy}Hg43dxݵÅX40h?`l`W> {eMUWT|rP6"4(۝6]1%4F =`|Ϲ3tF!`#ƚ֍(43؉#хG @s,RQ pN$1_c ca.$Iĉ{.DCF1qfY?I M8gg4AjCu D#ƧP*7^q9:m(ܱpU;:ܜXxfUFk{?gdGn pߡ ^T8:J\.}H].&\=*N_I!XO婩tva:PM5&WH54OO6.EbcB D!yՑ28JZ0J`['eY3@we WX ?vpk+ zH!bkd T MЛd_ cT{'WDgB_Ԕ_E)ljC;|t5*S5WkX?F1#'vȋlal0vȦܮCuN#XRl۟I6Ő0ѭw&Z.θ)v[ev-Yfa?F[ߋ&b!U'Er6~7I0SCPlY槛hF:#* xz|Z}󾻿uB\ĸm^Qi_>&%+ʼnDQ{+Qx(bK8M0GXϲR]҇%Ibs:Q؇O5>4$V +VVx(!$Y5XD3f-Qc1Pb[ĐY❄9..z/A]|$|9 ֵf484ylrTȊhn!6!&ڪ1҆z/!?#KV2_&J\2OC ]ْ*&*9U2YU{eE\O8#F \'w{Y fJ|9\[p08; `pmRq{E$)dEPLr8Nh07{ӓ SI-QpQLg=+XM^];52B5,qqq VSS2B`ix"/Y0teP☝KTUV4%2q:ʳGzbaGJć1(/ uTʙЀ/sE{AnD#[*_Ѫyx4G[7㑩/pm0Zbn`1 7ym&g3iw\VYI&E2S:V)Tu+cQI1nIm쳹]ǺZ6fE%ʖJž€܍5''[lpuH S@LP?2;N5$Ij7%SQA{Pٓ .t2 V+Mg^1H~6)nAB[Af]uk$X'v!s`s8WQ2\=d"eS5kBvJw9f,94H ɳajgU@5V`OVVY5ܛn/^^=ehb'Z(6%R4NЌqj\y'=">;oQbRJ"EeژE7i?f5p]"'j\Y}WuҋNP_^1K[AIL?J4 KZƔp-Reimn:d0s~ aUќ] B'~xoө48|WRݦ}ET?|S% Y#X䉜Xrcz).*m#)qG8D[1@}sP%q,*ńBa=!Ɣf%ϕĉ8` qI^f=scvTR8>Ƌ)wBɷ-0)uao#6`.|-y`/c~c80$!yrM:}-E_jF-JSYU>r~oɎ8pgN1ćyJ`o27 !asKBơJnkp~>>*@xOt [i ceqB填͠guXI[+C=-oAU%ǜ.M`/(6t b~(p+ ބK#v`$,o rO@6| 4>hwvvK98gA! 30>RwwE+9ƿN[RX7`K mσ 5k? }#ꨇ&=ao/4px!}U+/TgT[|! e ByoC DO^ hT vTP'8=`̎펠vI4^_3 ީ glLw *ZB@9_G}^-K->uzsg?wzÜfqmWg{YS{k0XOYGGq|it]@HphМI(H8҅ưu,!kˠWp TVb,GCGb 93h4FZ%p))ϓ2 +3HF14cslsU:0<`R>q.{|Vqg_ |o?PG)P?7yXCȵ{PvY{^ $]`a^ >?~h` tB