container-selinux-2:2.164.1-1.module_el8.5.0+870+f792de72 >  A auoU]OOTM4 >+#tZ 6[qY"n4T%OSꝚQg2+̢M5.&zJ,S5S!?O_[W0jMljS7UN מd7aeGYgnjɦ**{1>)e=uUZvE>PQT ,UԤ=yyC*![cWeo~Bi8hH^0.c ո0jKotw,bjT2sA![ _0ߖ""nB{ mY}t2̌B'ELrȴBP[9vkТx(/fQ&Պx.n3>qBdE2H L|Z_Z (qMi&;ˌax[n$ّ,*6aow aYu%% eȋ=߼=Hu!>q*8 10e4279792533e751f8d95bf346478461e302942f11357a26c55477215809bf4096055d1b61daa508857d8e6073c2ec6e4486902zauoU]htP,Ob&^"/ N+p.h25c֤%5_GȧwR .獜D:]eX]aP<L}GGrNh<38[f)%0x^5ޭ4>5HJqp; @%/xLLech7=Nd7/׾1Is!}"A ~ĝ᧔;`Ŀ<㲗`!_cjS-z94t}nx<{ACv&|u1wmD.Ͼ;R֠"]?o|k9A,Nr\F ߕ"ɋT"5U>\kh nKS(+k⩄AuE7IJ6]6wz =Nx9#q] :}Ѥޙ䰶c4~ːLNf\M3U9.p>p7???d< @ h Aqw     (@(8k9k:akA=F=G=H=I>R>\> ]>^>rd>se>xf>}>>>>>Ccontainer-selinux2.164.11.module_el8.5.0+870+f792de72SELinux policies for container runtimesSELinux policy modules for use with container runtimes.ansx86-02.mbox.centos.orgCentOSCentOSGPLv2CentOS Buildsys Unspecifiedv2.164.1.tar.gzcontainer-selinux-1957904.patchrhel-fix.patchhttps://github.com/containers/container-selinuxlinuxnoarchMS^遤an,an/an,an.53f5a4e30667ee0baf37ec7256cb66c05b2b2afd1a3338cdee6c4685be5a7bad4af2c19c75d9e5243bb59109209d555d7fea0e2123c3c791106e14f73d3a48df0b1bd861e39720fcfa2a64dd84fcb4b4f347e65583ffc09ac03bc3529e045b66e9ba1d94fbe435cb267c136a19cff7216d8a77c8005b601bbc2ef63a6ce1f519 mockbuildmockbuildmockbuildmockbuildmockbuildmockbuildmockbuildmockbuild  gitpkgconfig(systemd)rpmlib(CompressedFileNames)rpmlib(FileDigests)selinux-policyselinux-policy-devel3.0.4-14.6.0-13.14.3-9.el83.14.3-9.el84.14.3` @`9@`Ȗ@```q`@`@`N@`@`dd@`Y@`&m`_T_`@_%_%_F@__"_5+@_16_p@_5_X@^n@^Ӝ@^@^^k@]@]B]]@]|@]@]X]W]R@]@\M[[ͻ[[@[[Xf@[L[K7@["X[@[@[[[Z@Z?ZZZ%Z%Z@Z - 2:2.164.1-1Jindrich Novy - 2:2.163.0-2Jindrich Novy - 2:2.163.0-1Jindrich Novy - 2:2.162.2-1Jindrich Novy - 2:2.162.1-1Jindrich Novy - 2:2.162.0-1Jindrich Novy - 2:2.161.1-2Jindrich Novy - 2:2.161.1-1Jindrich Novy - 2:2.160.2-1Jindrich Novy - 2:2.160.1-1Jindrich Novy - 2:2.160.0-1Jindrich Novy - 2:2.159.0-1Jindrich Novy - 2:2.158.0-1Jindrich Novy - 2:2.156.0-1Jindrich Novy - 2:2.155.0-1Jindrich Novy - 2:2.154.0-1Jindrich Novy - 2:2.153.0-1Jindrich Novy - 2:2.152.0-1Jindrich Novy - 2:2.151.0-1Jindrich Novy - 2:2.150.0-1Jindrich Novy - 2:2.145.0-1Jindrich Novy - 2:2.144.0-1Jindrich Novy - 2:2.143.0-1Jindrich Novy - 2:2.142.0-1Jindrich Novy - 2:2.139.0-1Jindrich Novy - 2:2.138.0-1Jindrich Novy - 2:2.137.0-1Jindrich Novy - 2:2.135.0-1Jindrich Novy - 2:2.134.0-1Jindrich Novy - 2:2.132.0-1Jindrich Novy - 2:2.130.0-1Jindrich Novy - 2:2.124.0-1Jindrich Novy - 2:2.123.0-2Jindrich Novy - 2:2.123.0-1Jindrich Novy - 2:2.122.0-1Jindrich Novy - 2:2.119.0-3.gita233788Jindrich Novy - 2:2.119.0-2Jindrich Novy - 2:2.119.0-1Jindrich Novy - 2:2.116-1Jindrich Novy - 2:2.107-2Lokesh Mandvekar - 2:2.107-1Lokesh Mandvekar - 2:2.89-1.git2521d0dLokesh Mandvekar - 2:2.75-1.git99e2cfdLokesh Mandvekar - 2:2.74-1Frantisek Kluknavsky - 2:2.73-3Frantisek Kluknavsky - 2:2.73-2Dan Walsh - 2.69-3Dan Walsh - 2.69-2Dan Walsh - 2.68-1Dan Walsh - 2.67-1Dan Walsh - 2.66-1Dan Walsh - 2.64-1Dan Walsh - 2.62-1Dan Walsh - 2.61-1Dan Walsh - 2.60-1Dan Walsh - 2.58-2Dan Walsh - 2.58-1Dan Walsh - 2.57-1Dan Walsh - 2.56-1Dan Walsh - 2.55-1Dan Walsh - 2.52-1Dan Walsh - 2.51-1Dan Walsh - 2.50-1Dan Walsh - 2.49-1Dan Walsh - 2.48-1Dan Walsh - 2.41-1Dan Walsh - 2.40-1Dan Walsh - 2.39-1Dan Walsh - 2.38-1Dan Walsh - 2.37-1Dan Walsh - 2.36-1Dan Walsh - 2.35-1Dan Walsh - 2.34-1Dan Walsh - 2.33-1Dan Walsh - 2.32-1Dan Walsh - 2.31-1Dan Walsh - 2.29-1Dan Walsh - 2.28-1Dan Walsh - 2.27-1Dan Walsh - 2.24-1Dan Walsh - 2.23-1Dan Walsh - 2.22-1Troy Dawson - 2.21-3Fedora Release Engineering - 2:2.21-2Dan Walsh - 2.21-1Dan Walsh - 2.20-2Dan Walsh - 2.20-1Lokesh Mandvekar - 2:2.19-2.1Dan Walsh - 2:2.19-1Lokesh Mandvekar - 2:2.15-1.1Dan Walsh - 2:2.10-2.1Dan Walsh - 2:2.10-1Lokesh Mandvekar - 2:2.9-4Lokesh Mandvekar - 2:2.9-3Lokesh Mandvekar - 2:2.9-2Lokesh Mandvekar - 2:2.8-2Lokesh Mandvekar - 2:2.7-1Lokesh Mandvekar - 2:2.4-2Dan Walsh - 2:2.4-1Dan Walsh - 2:2.3-1Lokesh Mandvekar - 2:2.2-4Jonathan Lebon - 2:2.2-3Lokesh Mandvekar - 2:2.2-2Lokesh Mandvekar - 2:2.2-1Lokesh Mandvekar - 2:2.0-2Lokesh Mandvekar - 2:2.0-1Lokesh Mandvekar - 2:1.12.4-29- update to https://github.com/containers/container-selinux/releases/tag/v2.164.1 - Related: #1934415- fix the build of 2.163.0 - Resolves: #1957904- update to https://github.com/containers/container-selinux/releases/tag/v2.163.0 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.162.2 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.162.1 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.162.0 - Related: #1934415- do not use lockdown class yet - it is not available in RHEL - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.161.1 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.160.2 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.160.1 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.160.0 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.159.0 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.158.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.156.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.155.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.154.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.153.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.152.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.151.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.150.0 - Related: #1883490- synchronize with stream-container-tools-rhel8 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.144.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.143.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.142.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.139.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.138.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.137.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.135.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.134.0 - Related: #1821193- synchronize containter-tools 8.3.0 with 8.2.1 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.130.0 - don't use macros in changelog - Related: #1821193- update to 2.124.0 - Related: RHELPLAN-25139- implement spec file refactoring by Zdenek Pytela, namely: Change the uninstall command in the %postun section of the specfile to use the %selinux_modules_uninstall macro which uses priority 200. Change the install command in the %post section if the specfile to use the %selinux_modules_install macro. Replace relabel commands with using the %selinux_relabel_pre and %selinux_relabel_post macros. Change formatting so that the lines are vertically aligned in the %postun section. (https://github.com/containers/container-selinux/pull/85) - Related: RHELPLAN-25139- update to 2.123.0 - Related: RHELPLAN-25139- update to 2.122.0 - Related: RHELPLAN-25139- update to master container-selinux - bug 1769469 - Related: RHELPLAN-25139- fix post scriptlet - fail if semodule fails - bug 1729272 - Related: RHELPLAN-25139- update to 2.119.0 - Related: RHELPLAN-25139- update to 2.116 Resolves: #1748519- Use at least selinux policy 3.14.3-9.el8, Resolves: #1728700- Resolves: #1720654 - rebase to v2.107- bump to v2.89- bump to v2.75 - built commit 99e2cfd- Resolves: #1641655 - bump to v2.74 - built commit a62c2db- tweak macro for fedora - applies to rhel8 as well- moved changelog entries: - Define spc_t as a container_domain, so that container_runtime will transition to spc_t even when setup with nosuid. - Allow container_runtimes to setattr on callers fifo_files - Fix restorecon to not error on missing directory- Make sure we pull in the latest selinux-policy- Add map support to container-selinux for RHEL 7.5 - Dontudit attempts to write to kernel_sysctl_t- Add label for /var/lib/origin - Add customizable_file_t to customizable_types- Add policy for container_logreader_t- Allow dnsmasq to dbus chat with spc_t- Allow containers to create all socket classes- Label overlay directories under /var/lib/containers/ correctly- Allow spc_t to load kernel modules from inside of container- Allow containers to list cgroup directories - Transition for unconfined_service_t to container_runtime_t when executing container_runtime_exec_t.- Run restorecon /usr/bin/podman in postinstall- Add labels to allow podman to be run from a systemd unit file- Set the version of SELinux policy required to the latest to fix build issues.- Allow container_runtime_t to transition to spc_t over unlabeled filesAllow iptables to read container state Dontaudit attempts from containers to write to /proc/self Allow spc_t to change attributes on container_runtime_t fifo files- Add better support for writing custom selinux policy for customer container domains.- Allow shell_exec_t as a container_runtime_t entrypoint- Allow bin_t as a container_runtime_t entrypoint- Add support for MLS running container runtimes - Add missing allow rules for running systemd in a container- Update policy to match master branch - Remove typebounds and replace with nnp_transition and nosuid_transition calls- Add support to nnp_transition for container domains - Eliminates need for typebounds.- Allow container_runtime_t to use user ttys - Fixes bounds check for container_t- Allow container runtimes to use interited terminals. This helps satisfy the bounds check of container_t versus container_runtime_t.- Allow container runtimes to mmap container_file_t devices - Add labeling for rhel push plugin- Allow containers to use inherited ttys - Allow ostree to handle labels under /var/lib/containers/ostree- Allow containers to relabelto/from all file types to container_file_t- Allow container to map chr_files labeled container_file_t- Dontaudit container processes getattr on kernel file systems- Allow containers to read /etc/resolv.conf and /etc/hosts if volume - mounted into container.- Make sure users creating content in /var/lib with right labels- Allow the container runtime to dbus chat with dnsmasq - add dontaudit rules for container trying to write to /proc- Add support for lxcd - Add support for labeling of tmpfs storage created within a container.- Allow a container to umount a container_file_t filesystem- Allow container runtimes to work with the netfilter sockets - Allow container_file_t to be an entrypoint for VM's - Allow spc_t domains to transition to svirt_t- Make sure container_runtime_t has all access of container_t- Allow container runtimes to create sockets in tmp dirs- Add additonal support for crio labeling.- Fixup spec file conditionals- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- Allow containers to execmod on container_share_t files.- Relabel runc and crio executables- Allow container processes to getsession- update release tag to isolate from 7.3- Fix mcs transition problem on stdin/stdout/stderr - Add labels for CRI-O - Allow containers to use tunnel sockets- Resolves: #1451289 - rebase to v2.15 - built @origin/RHEL-1.12 commit 583ca40- Make sure we have a late enough version of policycoreutils- Update to the latest container-selinux patch from upstream - Label files under /usr/libexec/lxc as container_runtime_exec_t - Give container_t access to XFRM sockets - Allow spc_t to dbus chat with init system - Allow containers to read cgroup configuration mounted into a container- Resolves: #1425574 - built commit 79a6d70- Resolves: #1420591 - built @origin/RHEL-1.12 commit 8f876c4- built @origin/RHEL-1.12 commit 33cb78b-- built origin/RHEL-1.12 commit 21dd37b- correct version-release in changelog entries- Add typebounds statement for container_t from container_runtime_t - We should only label runc not runc*- Fix labeling on /usr/bin/runc.* - Add sandbox_net_domain access to container.te - Remove containers ability to look at /etc content- use upstream's RHEL-1.12 branch, commit 56c32da for CentOS 7- properly disable docker module in %post- depend on selinux-policy-targeted - relabel docker-latest* files as well- bump to v2.2 - additional labeling for ocid- install policy at level 200 - From: Dan Walsh - Resolves: #1406517 - bump to v2.0 (first upload to Fedora as a standalone package) - include projectatomic/RHEL-1.12 branch commit for building on centos/rhel- new package (separated from docker)noarchx86-02.mbox.centos.org 1627483763container-selinux-1957904.patchcontainer-selinux.specrhel-fix.patchv2.164.1.tar.gzcpiogzip9utf-823d35c11d7a56a017552fc6c574262e6794be116b3c63953c0e028b09709dae8container-tools:rhel8:8050020210728141601:faa19cc5?< >d,wR{@!.O`Jd,`%b?E6O%/B9ف?1X#r$Mq¢aǓlQxkboB;Dċ{ ̭}qTYDQ~8JIy.W#B(T@9v8w0CؑW`(C( ŁALJClqT ĖD&ܰDP&qPyNpBRᱴw,;"_bL@Q!(2x"b b :ApD* l#PfR ( bd .,(LKP'A0$AuAs:6q݉DBD`۷nU,UD`E*ϭ3"V9}! $;^Uݰ.q"qh` r0yi94ήDB;(CX_ $ nL_{eLK PBuUr7 "{(IydF*)&$2+;7 (8W yKl"mn)JDǰ_fbcvAI c PTʠPgmFbہ `]kSR@!OxܘFŃ/ۜHOHڂ:_O&4 K#0" 0#ސ$Q;,DFPP'@dID(Oe1pz~jN> duP!a0Ў t|Cy(\݈Lra~-qoy遊x(p{bEh2Ή a_$3 .>e^07N"(*.$>v[PL (G,Z<o?bUf{L €Npb)F%HTo/ 231P}N؍&28"YAI 8;*" )<;3}dvZ=ͅivs vK f N&@dY頹IhG:ǰ*QX kq; Y% M<`A26au *7Cdc6[MSJڒH= P+V!Q?)aKr=z4 xn]`2D P3@; ;]Z>t3`3X?mvi=(^D#If*\VG$Q WGUU*(+??>p+(<]FZs,D牲s: @iSs@0 0I0@\t!< ,k9i9 W@hR ^J80@AVF1=@Hr x ̴Bơ $W", +ϸP;@K f4 @KY wY!B0%9yy!, Ɖ`GS`L2Shi7 / )3(੏'\?wx SZ2O?[2OY% 4wP}>/Pƣ(Ё5+ k N'+.O@fd/3ᩰd<'/0Y9ؒ1(D(dDk x**+⩇ZD(CQ)͞.S@Q4B-K]yTI1O00'̥RY%b g7DSg=Bxv'lixJ=Ńv 8ϙ }:DS`bW E;]!%RK^O-%,Ϝ)D<<m)O\ކ?I񊖀'?u %jאCR?KrKs1R -> uVuCUCW?ecFc%b<9ÐbBIoDe83OBF{w@@rX D C$2X`9#*L=oMF Zo>[ @!"3igKVӃsm2дU9S Nd#1YY9TpKCe" @cEKpBVP "NYnETpH %PpX28{0["n[82?3䬓 7 n b࿄'xIDn4@l\N4Et/[gD*(+(iR1M僶e*P8<((s;|^p%8*v) ~Z!߬ж3Ohb>WD=w,,Fl3@2 *d2^ͰDKGHYE<$G,D+E)oP7* *"2VZ؛5j IQ Y0vkN3+.Z~l$>al$Ҕ2 m63Z _*H S@ G15:A`tduőr8cH+$rT7,q&5Z' f Μ i`!>+M^. mCAT+n O5+mG&A % 0[X:Dpvb08@hէ,66 GhٗJ4jM=8bD[1x,{B%E&X tO DElez~q zym2?U\,,j9ftjUN,LQ/C~3օu&/‘_gAH9`"-7*t/yb2+Bzr!ԛ_'l=3R0-2]œP֝NK|oIǁUdhm:5DZaϞY,stuǢ]hAMw6Tפ4mb )B!2N$  #g5$CfR. 4h4łuD͞jCR*pKOW&Xzs~ +|1 > 49 t1%qUÖ b|Ÿ9 @4/Ug# A@K;ո@hjEA-6)E[,s&FJ+[hN8gPfAOȐ%s"|mT0Z8Ďf~tiƃfaCth-RsÇyzޚ G..Xd,o=D2XnV`!O\ϓ>3^]ug;* Z1DtK֕teF'g8S(q&D@ *hϠbKrH`ފziqT}SvS%ϊ݁G TnjkϤIw[4*zrJ0qQ" GDa΃^Bׅ0AP~5w KUr8 :X `GgPhb lNxyYxZj&% 'E,}NoH7౳OzEIERQU-3]*I6-N/_CE`)@(YWAGG~Тcb?4r\6\ |?j'AJiNWޅ:9b'D,Rѣ{IPeQج7d[4˦t>^nK`ALx Ca!;oLك37hY%b ǻ1z< '+jzċj^\*Qbs"hFĐWZ:Z܍Dv/%D,Mcia?$Xl b =gq07MfW΀苂Р.-UZdTfJKh>eaT 8*^h24ҋJL$xJо䕆h)JurqZ' LC[J]%$gt6=yAHi_iѡf4ed#FbpD$*%'@0օϤ"?-cUX*0"ǻx n~'KS`BQ]Α]:%egm JQtI. `?_¿A`A8f :8 Gtv J +Y%GtpEQ׌9mX[Wt& L?BF8wC:txN *#*J( rhd K'X%?"R-:}gxI HNmT]tdӤ%.,r#н6:`䐶 OÂVi_c謂^X6;gs(JKi9eAb!<cT<_J{@Jp"0C.W9C2:,AHK3G'zfW{X|olfolqxnEr@s6𛳈<`n4if2ZԜQ@1(004 Qs d/y~4%? 53DGA ]bDfh<3 ČXP,1+l`lqQ :xыf$4:SԹvZxxK—)B2,<Y0"BS,t&#8v`D O"bg ͏v d* G޳ җ̈4pEQZ^8Kx@ǍuuBiyVs8tgBb,_c?ag.UD@+#) q8eY`l0FxG#bC%Ɔd{7 R!B3GL:vhӬ,*xkώ0#)A€wvTfwi(7~ xPh'ףAU h)ILT32͐sڽn+'6]pÞV &)f;B|]/H۞( ,"9e; h`U)Oii,*sf-+hLC 60_[~굣~vWeP8wŲiҷr~(mڭ"Ʀij&O`1&1X>fxK[Y>Lz⫨;:610Wb5Eݾ~gT>:uci;yT૔ Gs*%${R|M02_*|OCٍ=HIZ?)9,yCz u9585]Ց71=0k]Gd`y/yZ-cVn7J+ښdLo^~0sz=6ەλ}V629=DZ7m Z6t M4l{6=ztvEhO|rrv0n:UG5'}u`h{j%؏>N\*}`<YJ0I|qv֌7$ɮMu ໱sN3!!큰p喗4n{in-{x#6ڜ<Ԛ!z8={K Z3>^xvuK}tWU4MKv+ XsPmus.+|TЫ6x]_v@'2=3wE-?|ϲ7l5{Ү<^Ƥ99ܔ\5Zm]yx0OqNrפ?F}/gSPg}Y?%]r*lFbg Yd-8jՏ"l>wECQUв$ˉk:Km6o箖&|K=c[YWTm -T9Y[]ddHeKtV3ETuU_7U?>L)ڴۯ 9<>Q[%+wr &Ok\fwjnY(()/+;*^%Ȩe(1NAh%YQu& ݈K.)sv]KE/'l]%H2_0) ,եYO u%2g\ne9F dlj{W ?ePuUm8B5ݧ([]y_xdrjYzˌy5fhRS xnOV-.*n3n_1@ױF$lPjy vT+(5CiwArm~2*L;髜 DޔT5. {Vw퉁N =ƈKF1nU@fk:(jȌ=xܧl5Ry*-EBttr e.RWU"X9 +ԕNNUk|g!3r]˵_hZQ3C[NWwӤC1J$48N15tlN6(*+9zLrIh}-j ֍/N/`x5dF K.,c{6xwhc/?ytU:.WVAj,bFf[P˽%=ȜͿY Q xIyTt=qSx]̐!l^vdK^K"䨕ΙM׊hqd1YLod.Ҳ&!r&o]Q3Ю.A=Ad}eJ WڱFU2,0]uVcmGSlUm|Zet@D^ /,B~O_k*+1PM?~ɸg@lDF>wD-^( }$L=T|`GGr =c~_ViLwjEni,bӲCRkH75qq0+iwy{Z6;#z}>:y Uzvrksӯv:c=% zgʪrqk9-WOx.xS@Rb^qQK)R\Gٶ\fKS0sE(y3gf7׹ͫ+O\룪rM6afQEߕZ )t^|^Cz}W%)*H{y2i{POSr=#T‚,"+0*:>߃ή0>**V@W)^$lۯݭ#Z'nm> ^ƥVqOoi~jq;d3uՂ\ӳusX>?P~iߧQlᵷ-0ح.F" ê; &w#{6$f^'P+0`"*(:i|a1fX;]2s 8FbSc%DKJqhnQr+ԜIrRl.n*S>H/ KU ϝ-tnn1;\g=8\&m{7/@zqyҫa|ɲ>m=7qX47Cy9z?~07)9vxґXsv1v˕{l|uUM{N/CFɿ8nzuup>-OrL" $,;>Li/wZ/h6@|q8~zbpl[XEc km@pOʹSM8ɴ1TƻZ|L#[~4.\eL5@uE@+TGu*[=e8lN}֬9xpBv$s ڟAH5|oYegPps}ʾ~ۄrR֯W `j\~ǽM\繙%HGnL%Tjǃ.izuF'L>_θ,0io!bp=MH׼f .}QQ6ګʱvb٣[ֈڲrng֗BWW+KU oМ"{.;*.5~͵1|{Pź(Ty4&ъGӓ;=#kw~lj~%w]Ҋj {5N>W  5h/5BdP3:_R1woO-jUZ,\Fm 寐%.}uTI7`5 7k-?Uש|l0OvIWcc}j0%15fC%졁XtieҢߝLԾi; X\Q/_'>N]g]u9Kg^SԑU7(2Qħ$.͎/y(x%ET#]Tj仑S4˫=ꊓNѱf2N%韼R&'4%\/U\Q[%fQV8w}S~wӣ>϶%Gty\k|U=uo_Ghm n۹I/DSXc#:/:52J) x,GG *ɗڶ51t VZ.^\fDF,&PF'8nĽn}H߇ξ_wz=9Н]=҇SCE&mlFV|H~v[w]J!qΫ~z͎FJH , y7YjsSY H .wmG6mXCϣ% njqܴSD5sPHmaGxf^ Šie\+CB% LEqaKľ~ uR8!hd. ۉ(CJ:vzj.镃UrROC46?Qp5Hd5A2fmdt!tT9&čws@|K1o+B٫ Ss=Q3;퉯1IiLi"5R.zh7b3Qku)隁p!q_!>6X92&6b5?dsdXݦgk>Zuh-gD_H/l14:rrY+#6c|4We;4| ~*pF{E ]WUJ3Q"_vvP>\&3sl%V/~ɼP畤 xx)7;yLjBR}ոV}{ț/VZ{ )^oM~rhS3$D-~DbT= yD!Ί;/.?aꎉX) s7zļ^,Im߻.ڟU&%+sŗ=[uzpбwB+bqPRG8"Pu2%|WmxvHG*i'|{e;߲lhSVtsO k_fa=39Z8*&ٹ |d_瓇vj$w?u]]#dj^|d7u.UM5y6+9Cnҭ}-³IԛeOv u*j EDVb X?mypكL5|Ƚ[<z/L]l-g]D1uMk|oŚ%X#VCWT֏1\#hj [߯ eOkY"1 SyvRGv (PE'yu|xgύ}/Gs L?m祵rUmz 7i"W`*2k IӽI>NrujzO?sXl{ia{Sc:io"2nCmARgu6T[X$eqia;W=$ ~vX%Ys}JuzKLpڬ=Pؽ?g{=Zw}y%ʛV낛ϾuS>IhߪXIX-f& QEa7o[>M.xrc o~^\ ̽eXbp"o#rwA)^lz;1φ8;5+:V"ˣ3d6.M;ZMol>T4<So\]Veo8A;\0~K7xaՃIR +V$^1gZ 7ȑ 8Ծ1ÖtxcMZE) s_jz$J2\jnAE.g6<7>?ٜϯBB@˴EnP=~YzWXQߣG|;mϯٽ(Yì"HmX A _Hgsꅗ\2>/ZRJogR:j V{^xO0wD՜t,aoZYs_B"ފxkS,̥|O 6_.3"yrҫ{sS96䀵7W1W>\8(06#`-˔>nc.ŕ.->F 9rؘ)2mu2BX{[.yam׼؟4ݔV-2H;ngy<\eL=CUțubupxy] F8Me։w ^{YȵE noPTY9g+$պG5`cEkmZ$vO~K{ B&.9j.t#t7:$rPeU%^&\\+6@9zV oΜmOʎ'?;ꄔ4Tjځ\k6ԘB_wl_ͬ:Dm=!`l#\{,!єZX~gPUXc[b`g]/>[tHEǷ.gX>#`Mi $zfXc ^]歶{IGO_h8jHIa󰛼[Zw%mg }8Z?ҭ}.> c.un%@2B\w[*A/I69s\ zt~rt3¤=6Uo[Itf*_X>OZ%VO=yk뵢>~Wz÷V‰V4ڂ^ nb~zlqv=f-5G b#@6o@o9NOv{]xdU|-UZHjtGד9km1;Hj.eK8r9+W"Ta%[B[U*֮0V,';z;>תy?g,5-E}q)RNN'tŤ=Ɗu~q"u~7 םU*}CpjyN'2^CvhP3Lx3弓Q!ڙ 6k[lOܾAR6'Ykk-o{YtNi2y [a9/}o<>J,/PW]Y YjcO8m34! |^|y;G^V^+K/[moXU5,@w(?)bZ^mlgB+6t9͵{3eK3w|ظwm SJV}˓݋yATa.Y۸Na +ȘX6xvOnQ)Vdho'"ʎP="^kU 2U qxT/ 6kks)"oՖ[+Ts;器//>H| 9t!1P_O(3Pz}D5y" >=MknFh:oTh;.4{|žs6c}SjI.9bq_'E+8;=k?~uY`p_S'{;%Ɩ)h$^`^LL`|>ۺq{Ҧw2תooxޮzNZ ,^E?zGM"|[z^Aک61Ѓ4V3jffZqF⸖;3F־mހS۔nXEy_mzf"Uk8pc#t$}Qo:8{w@7k?8=v+MH #Ħ/3Ճs|?6)B3*U+&`-~c!{yg:98 JcKp3]{p K;wn|i,ZcB5j_iצukJu],M +6w`@@3K[@W8 g#Ӎ[l80 gI7ltG2{@)8;=u-U$hPArK_EݛD‚#bZD vIZOQU*Sgoj(mT0ɾԩ]8c2D6rѿ^sIp,7ÝsM;No@eM6dr(LZX). /2h*mA,C= Y=['D),,utW`6qV@/Ii9G1!gX  za% ܩ8!'Ԙ*LsP Ętb ^ GQ>G 1"|GK#hMڊP !r(k{&|K#v0Q[$B0WZTcSrz@F-u I3͟>lUyG\Xդ,دqJ1}ޯ!gzqWNew9 O?9t\y j8ki1vUw_cpny5'skdT,lA#P g7UEy\Ba$"miFI%"LV^ /T٨J7I_x]^P˜[j^~elC_g>2Yz76n璿QeCnt` k2Bꭅ>/ߕPI7C'̟/N-G26Bzwt[mn cQ s̕XܾDc}xk{"$R%Ώb.[鷅 )'`<!pl@F b E='Tn߮i<|A&bXT;$ӫIh:,򸡉`ŋT^e2ឨݠ'BAC(.m/'[]H]51V{ݚ4dÑH7hӶ74OwN 3Ԏb)uo!p*h-lC:ۤ!Vaa2΢LN*[n_KI^U$Bu\w4?38))y%Z3H|de"^Ҫ+G!o͔ͤ01 m < 7M@1t-$iiEJi Rjcŋc#`9E:p Ty dUBAAZ!Wx_$&nfodh܊I~pMZplN$؝XՖ{s\Ge@q2ks!Aګ҉V&BKCzL:(@+.p#.k;_ YbkkF˰YŮ>h9ȳSnSgִ`TLyĪ9y4;ɼDCj d$ik"7u%TJniܦ'LQMBi=ǗwwR1CC`4uC1=zBqK*xrTI&vJzI>((6m֐b%k{"kdx+aiC^ 2@Ɋ$9m><8W3@||ZE_n3 f2k4؊YܝhX1j2S&=E*PW7ӇC[zIC$ 26A. !GƄmw5^ n"ŇC!0)i]ƫP^=GcZֆԮHcL!\T=G}M- a$lĔ $ h n_ /W.u2z2-"淴OcJB;Q@7,hM45شwEZ/ŝUh5/^ K'zhtYqɥ;N-y($z7TTWBXM>wuagz|rM g e]qF!Ph;D9e0Ə7+c 5=l8tjF_1). 6b{CE&xpL06-P6sCQ* o4]ZϙXodᜤW.b?|ٞ5~Ե>H9d?5 UGW~(&\(khTPV[,c{IJhC@kXnšnrQc*ȡTG$=tbVЃb^t2 HWK m$v=8m; P[bwN-uͽps{v̈́KT(av<ärxmtq6̻~^'CvyHxD1NVT-MK7V= 3 l+i* T~>p);WZŘZm})0p5ݧq|3lLG;T˘ulQ;ѓ`3}8D$UK1 uZo)k|"v^D獎k}WHU3"l@DBS^Y\[SZZ' Pid2*ĿEXV] ?(ա?U2EEvIAq"X,:13[ս[O [;D5X)R㖀٠*P#A.lJLI1;(TmmX›P]  O3qcTQcQb TP8 Es;3]y4hX{X`/ײM+}nqS*kˍVDH8PI&ps /aT~|rƿGCgZR &#N@w,H.G_`!s m`z=q} j%EŨ@GT(N{rZ<_*ڝ ݱsC<~QssZu2inu% d`aN6U?g-36c{ףm)wHjfr*1nmDτ%) PȥX$tɺdh2,a61K\:B36 ۡU\.ћ SB^LD9lU {U\wes|6R*3m AE.v=+arzMhB>tɁ4 _n6֑A^VYKSl:hFF=rk=3foMV4CITE=&-kdrZ qg) Ur}@ac-ےs8#i _yߵLYJㆃCՒXM/@!%P9$y摼If^e@2TUEJْZ tl$"MYšD)Ix=ORR6HI9M. KҒPXFD0uOFԣ(DK,6 fNWz^(G.F~b4k+`+u Q/e(/n@ML#O'Ah?Vs J_[2 SZ~\| 2ߥvQpՐ@Y8|+2u[` [v̂a.jMN4ҰVmxKxĈn,Bpu,֒2,vpeZg&˗_&p9I5雍[y8hnS^B 9Fxfv&kTƞ"I'P_X^Xy<5(#1KFt5vC'iOwCHB29!e|}mBmMei<_6lӏ+Y:?mL o^甕w8e2HR+Xꭶ7vpe&|;m+^jZwYa֧թϒ'iݹr/8/$'aEjCw YAU" DsClҝR˟w>:c vXb n7=tƗwdPKVoѣbE*1kθ3^3LнAD<"p 2JZ}硧ib' 3X"b>IxʸnYPtUsG.%2壒N郿kZҋE&\KMe<xo_Q˖+._ijp{sחHaHA<0j^T{{VbhY+:lH&bFv6Ml#\s=PEiZ/Py).$N#V<>U2ԐeJXiK;ʹH! ZU)-7!:ʗD_QOfqG]SNQW%1⃈U!yy!@vAoj(w.Bqb >'λ xCi/P |ơ~-ȎN2 iZ/;٣d,trmYr|SIshpλ$),R'He)ݓ2Փm2FnB?YK|OW֚☘-F BIy: (lDf")%5c9a@3D,/u޿+;a8Oxvڱ̴Iu'WNXZ̿n- {y#!c[QS s ;D+7 ֫̿^m^@jZRLŠhu M#kS3t>!@X0 3*:"Xcв$&Fc"h&2Pl%o'G;E\C^bEx|u>?,;́涫y èk?b.<1)}Xi.E? Vvަ>}V?qdA=mn0"a{)V?8yf`rΔ*zG>+߫!7?<悎Hy?j´OhƵE-Jg xiaEd}N\NB8Xbe8ԝ55F3(ڮRQtasaݞ3h޸Q" }aMptLq=]Rx\dSuN|lC4ۨP2/" bݧWϗD8mhaװ0?!'p"  6#1drZA-6Tq+)"P׳ňFR{ͼ0 ~M+p@Nt6*E=CC:Xid+D`%+ )KxCDNg@5SOq7Qk,6}3+ ^]q_f\Cp{>$sƈ&HTtȀ`^ 嚀(Q>9@|r"6vYl2jBFN6J_ot@įV΃XxB4.Cڿd]+O}LCgRryl.I6+t@;Jظ8Š/EGb#)38 RL_m9zx/ŕHR$Kar?VyۃN*/A`'B_g HUˆarfQV0MR؅Z;g\EJ,hzXv'8xݝw[e ^\ޓ >*lqEBeCt32P:oZ>q"Xl׹Le({L(*xƀ+mލ{B VZQ#ysI q*+Ӊwo%+~о1Y,¬MX5ϸ! Ɏ::aRD=r%+_F!kB1Ghۖt03]hGw ҧxa&hM]W?ߓgJFPICkRJIfF",tbB*)23.E pQ K*qW$8&j6}H׍ <Ա`caЍU6ƘԌiV' :O!>t#kݔmd_/]vpD+C0GģzJ&6zjFOT|suZmA C,F*/L.ta\5 1>WݒU\_W<,qZKq(Ln-߂bHd]Rߤ:z O }b}5S: \rc?K?qY&4ѱ/^d%Q7Xuj⊓dK`\YCwPYTd&$WJcflחIU%?^%? ɚsМIQ_ci* 7@24D-fh-2Lv '5b8:22#~4=a'>y`[h{ 16CgmL e9}u%R u#RmPmK>1 <wdR8uoXS}bY~-F+'wBV>eV̪t0`VzH̲۹, yG@eRʮNMݡ ~[,EX~hzz|1:l6GKUeuyyxPc+=ׂ4āY+cT9oK!ͦw 9h,Pw3R:=m \r|/4R` {SmaJBGzbmBBwc?w/bW%3a|-)mLl}Gh78zATA_x\A3 |Q]_fC>xSSAi9A}]|jOEHo4޻~WXO "{>⫃1>/X+@{0oH771׿/L"DH9t LzOB#4- UYlƽM$˜շ>enƟšTp=e(e.|QR^Wiq.תX3v,//v׬7OРPËڍ} 7;[e$AhQhT įo h"#h"ᤷnowUw#K0r)6>v=E}=Daz6%{x;zy)*+k$G5uɋ:2@x aQ qZ$QbyJr OP &eЈ&(0?fҶ ~ Us1b:\^cP\1?:hՁ R!h?Y屺o{VD3TwRpYJ8{+EV$\t`W(]>4.k`Oc$MR"X{&GR%y3 +GOesc7d%7ȯwhl&Ean~p(kSk>ώ{ X;՗C:eŖfZ͈ 2Y[`訂xͱ?eH!>|BO2> }nza._V~&0[NJGzuiL7B el_WF7's@d/]I~VccgQ|=bn-n#rGׯ:ExDX`\f'e/SM PWbK#-{{1Ǥ%"xgXZկ