container-selinux-2:2.167.0-1.module_el8.6.0+1107+d59a301b >  A b1>U]_UU]K[IB_rK/~[ZPya ˜C~S3E:g5A|g0kh z_l ›DNev>*`oRWQB ʟY1siz3Wz6`3vO&Nхug[,#קhB}ITOk& ݧ`2"h"=]_X>d}c:lbMUK?y+8N]U `Kbdd;ZC0E2#|~̎l)^(1.,mQj~?˟\HDyVSq0JXvR(;L`#&'7_(Ce v\SEN̅1MbX@\ >Ra/6DBUYiyћKg}.9p \ҵ١/cVDeGhxdAhNSէ[+eYS @Nl($>p7@?@d< @ h Aqw     (@(8n9n:nA?F?G?H?I?R?\?]?^@:d@;e@@f@E@H@L@R@@Ccontainer-selinux2.167.01.module_el8.6.0+1107+d59a301bSELinux policies for container runtimesSELinux policy modules for use with container runtimes.b0x86-02.mbox.centos.orgCentOSCentOSGPLv2CentOS Buildsys Unspecifiedv2.167.0.tar.gzcontainer-selinux-1957904.patchrhel-fix.patchhttps://github.com/containers/container-selinuxlinuxnoarchOS_b0b0b0b053f5a4e30667ee0baf37ec7256cb66c05b2b2afd1a3338cdee6c4685be5a7bad37e94a50876060b534158021d5db9e59188b1e39e043f7557105149d1a90334b0b1bd861e39720fcfa2a64dd84fcb4b4f347e65583ffc09ac03bc3529e045b66e52f5b177660e617af5f076369619066fe482b3a5f4753968c383e7e77e266c2 mockbuildmockbuildmockbuildmockbuildmockbuildmockbuildmockbuildmockbuild  gitpkgconfig(systemd)rpmlib(CompressedFileNames)rpmlib(FileDigests)selinux-policyselinux-policy-devel3.0.4-14.6.0-13.14.3-9.el83.14.3-9.el84.14.3a'@a&0a /` @`9@`Ȗ@```q`@`@`N@`@`dd@`Y@`&m`_T_`@_%_%_F@__"_5+@_16_p@_5_X@^n@^Ӝ@^@^^k@]@]B]]@]|@]@]X]W]R@]@\M[[ͻ[[@[[Xf@[L[K7@["X[@[@[[[Z@Z?ZZZ%Z%Z@Z - 2:2.167.0-1Jindrich Novy - 2:2.165.1-2Jindrich Novy - 2:2.164.2-1Jindrich Novy - 2:2.164.1-1Jindrich Novy - 2:2.163.0-2Jindrich Novy - 2:2.163.0-1Jindrich Novy - 2:2.162.2-1Jindrich Novy - 2:2.162.1-1Jindrich Novy - 2:2.162.0-1Jindrich Novy - 2:2.161.1-2Jindrich Novy - 2:2.161.1-1Jindrich Novy - 2:2.160.2-1Jindrich Novy - 2:2.160.1-1Jindrich Novy - 2:2.160.0-1Jindrich Novy - 2:2.159.0-1Jindrich Novy - 2:2.158.0-1Jindrich Novy - 2:2.156.0-1Jindrich Novy - 2:2.155.0-1Jindrich Novy - 2:2.154.0-1Jindrich Novy - 2:2.153.0-1Jindrich Novy - 2:2.152.0-1Jindrich Novy - 2:2.151.0-1Jindrich Novy - 2:2.150.0-1Jindrich Novy - 2:2.145.0-1Jindrich Novy - 2:2.144.0-1Jindrich Novy - 2:2.143.0-1Jindrich Novy - 2:2.142.0-1Jindrich Novy - 2:2.139.0-1Jindrich Novy - 2:2.138.0-1Jindrich Novy - 2:2.137.0-1Jindrich Novy - 2:2.135.0-1Jindrich Novy - 2:2.134.0-1Jindrich Novy - 2:2.132.0-1Jindrich Novy - 2:2.130.0-1Jindrich Novy - 2:2.124.0-1Jindrich Novy - 2:2.123.0-2Jindrich Novy - 2:2.123.0-1Jindrich Novy - 2:2.122.0-1Jindrich Novy - 2:2.119.0-3.gita233788Jindrich Novy - 2:2.119.0-2Jindrich Novy - 2:2.119.0-1Jindrich Novy - 2:2.116-1Jindrich Novy - 2:2.107-2Lokesh Mandvekar - 2:2.107-1Lokesh Mandvekar - 2:2.89-1.git2521d0dLokesh Mandvekar - 2:2.75-1.git99e2cfdLokesh Mandvekar - 2:2.74-1Frantisek Kluknavsky - 2:2.73-3Frantisek Kluknavsky - 2:2.73-2Dan Walsh - 2.69-3Dan Walsh - 2.69-2Dan Walsh - 2.68-1Dan Walsh - 2.67-1Dan Walsh - 2.66-1Dan Walsh - 2.64-1Dan Walsh - 2.62-1Dan Walsh - 2.61-1Dan Walsh - 2.60-1Dan Walsh - 2.58-2Dan Walsh - 2.58-1Dan Walsh - 2.57-1Dan Walsh - 2.56-1Dan Walsh - 2.55-1Dan Walsh - 2.52-1Dan Walsh - 2.51-1Dan Walsh - 2.50-1Dan Walsh - 2.49-1Dan Walsh - 2.48-1Dan Walsh - 2.41-1Dan Walsh - 2.40-1Dan Walsh - 2.39-1Dan Walsh - 2.38-1Dan Walsh - 2.37-1Dan Walsh - 2.36-1Dan Walsh - 2.35-1Dan Walsh - 2.34-1Dan Walsh - 2.33-1Dan Walsh - 2.32-1Dan Walsh - 2.31-1Dan Walsh - 2.29-1Dan Walsh - 2.28-1Dan Walsh - 2.27-1Dan Walsh - 2.24-1Dan Walsh - 2.23-1Dan Walsh - 2.22-1Troy Dawson - 2.21-3Fedora Release Engineering - 2:2.21-2Dan Walsh - 2.21-1Dan Walsh - 2.20-2Dan Walsh - 2.20-1Lokesh Mandvekar - 2:2.19-2.1Dan Walsh - 2:2.19-1Lokesh Mandvekar - 2:2.15-1.1Dan Walsh - 2:2.10-2.1Dan Walsh - 2:2.10-1Lokesh Mandvekar - 2:2.9-4Lokesh Mandvekar - 2:2.9-3Lokesh Mandvekar - 2:2.9-2Lokesh Mandvekar - 2:2.8-2Lokesh Mandvekar - 2:2.7-1Lokesh Mandvekar - 2:2.4-2Dan Walsh - 2:2.4-1Dan Walsh - 2:2.3-1Lokesh Mandvekar - 2:2.2-4Jonathan Lebon - 2:2.2-3Lokesh Mandvekar - 2:2.2-2Lokesh Mandvekar - 2:2.2-1Lokesh Mandvekar - 2:2.0-2Lokesh Mandvekar - 2:2.0-1Lokesh Mandvekar - 2:1.12.4-29- update to https://github.com/containers/container-selinux/releases/tag/v2.167.0 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.165.1 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.164.2 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.164.1 - Related: #1934415- fix the build of 2.163.0 - Resolves: #1957904- update to https://github.com/containers/container-selinux/releases/tag/v2.163.0 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.162.2 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.162.1 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.162.0 - Related: #1934415- do not use lockdown class yet - it is not available in RHEL - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.161.1 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.160.2 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.160.1 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.160.0 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.159.0 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.158.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.156.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.155.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.154.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.153.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.152.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.151.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.150.0 - Related: #1883490- synchronize with stream-container-tools-rhel8 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.144.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.143.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.142.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.139.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.138.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.137.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.135.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.134.0 - Related: #1821193- synchronize containter-tools 8.3.0 with 8.2.1 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.130.0 - don't use macros in changelog - Related: #1821193- update to 2.124.0 - Related: RHELPLAN-25139- implement spec file refactoring by Zdenek Pytela, namely: Change the uninstall command in the %postun section of the specfile to use the %selinux_modules_uninstall macro which uses priority 200. Change the install command in the %post section if the specfile to use the %selinux_modules_install macro. Replace relabel commands with using the %selinux_relabel_pre and %selinux_relabel_post macros. Change formatting so that the lines are vertically aligned in the %postun section. (https://github.com/containers/container-selinux/pull/85) - Related: RHELPLAN-25139- update to 2.123.0 - Related: RHELPLAN-25139- update to 2.122.0 - Related: RHELPLAN-25139- update to master container-selinux - bug 1769469 - Related: RHELPLAN-25139- fix post scriptlet - fail if semodule fails - bug 1729272 - Related: RHELPLAN-25139- update to 2.119.0 - Related: RHELPLAN-25139- update to 2.116 Resolves: #1748519- Use at least selinux policy 3.14.3-9.el8, Resolves: #1728700- Resolves: #1720654 - rebase to v2.107- bump to v2.89- bump to v2.75 - built commit 99e2cfd- Resolves: #1641655 - bump to v2.74 - built commit a62c2db- tweak macro for fedora - applies to rhel8 as well- moved changelog entries: - Define spc_t as a container_domain, so that container_runtime will transition to spc_t even when setup with nosuid. - Allow container_runtimes to setattr on callers fifo_files - Fix restorecon to not error on missing directory- Make sure we pull in the latest selinux-policy- Add map support to container-selinux for RHEL 7.5 - Dontudit attempts to write to kernel_sysctl_t- Add label for /var/lib/origin - Add customizable_file_t to customizable_types- Add policy for container_logreader_t- Allow dnsmasq to dbus chat with spc_t- Allow containers to create all socket classes- Label overlay directories under /var/lib/containers/ correctly- Allow spc_t to load kernel modules from inside of container- Allow containers to list cgroup directories - Transition for unconfined_service_t to container_runtime_t when executing container_runtime_exec_t.- Run restorecon /usr/bin/podman in postinstall- Add labels to allow podman to be run from a systemd unit file- Set the version of SELinux policy required to the latest to fix build issues.- Allow container_runtime_t to transition to spc_t over unlabeled filesAllow iptables to read container state Dontaudit attempts from containers to write to /proc/self Allow spc_t to change attributes on container_runtime_t fifo files- Add better support for writing custom selinux policy for customer container domains.- Allow shell_exec_t as a container_runtime_t entrypoint- Allow bin_t as a container_runtime_t entrypoint- Add support for MLS running container runtimes - Add missing allow rules for running systemd in a container- Update policy to match master branch - Remove typebounds and replace with nnp_transition and nosuid_transition calls- Add support to nnp_transition for container domains - Eliminates need for typebounds.- Allow container_runtime_t to use user ttys - Fixes bounds check for container_t- Allow container runtimes to use interited terminals. This helps satisfy the bounds check of container_t versus container_runtime_t.- Allow container runtimes to mmap container_file_t devices - Add labeling for rhel push plugin- Allow containers to use inherited ttys - Allow ostree to handle labels under /var/lib/containers/ostree- Allow containers to relabelto/from all file types to container_file_t- Allow container to map chr_files labeled container_file_t- Dontaudit container processes getattr on kernel file systems- Allow containers to read /etc/resolv.conf and /etc/hosts if volume - mounted into container.- Make sure users creating content in /var/lib with right labels- Allow the container runtime to dbus chat with dnsmasq - add dontaudit rules for container trying to write to /proc- Add support for lxcd - Add support for labeling of tmpfs storage created within a container.- Allow a container to umount a container_file_t filesystem- Allow container runtimes to work with the netfilter sockets - Allow container_file_t to be an entrypoint for VM's - Allow spc_t domains to transition to svirt_t- Make sure container_runtime_t has all access of container_t- Allow container runtimes to create sockets in tmp dirs- Add additonal support for crio labeling.- Fixup spec file conditionals- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- Allow containers to execmod on container_share_t files.- Relabel runc and crio executables- Allow container processes to getsession- update release tag to isolate from 7.3- Fix mcs transition problem on stdin/stdout/stderr - Add labels for CRI-O - Allow containers to use tunnel sockets- Resolves: #1451289 - rebase to v2.15 - built @origin/RHEL-1.12 commit 583ca40- Make sure we have a late enough version of policycoreutils- Update to the latest container-selinux patch from upstream - Label files under /usr/libexec/lxc as container_runtime_exec_t - Give container_t access to XFRM sockets - Allow spc_t to dbus chat with init system - Allow containers to read cgroup configuration mounted into a container- Resolves: #1425574 - built commit 79a6d70- Resolves: #1420591 - built @origin/RHEL-1.12 commit 8f876c4- built @origin/RHEL-1.12 commit 33cb78b-- built origin/RHEL-1.12 commit 21dd37b- correct version-release in changelog entries- Add typebounds statement for container_t from container_runtime_t - We should only label runc not runc*- Fix labeling on /usr/bin/runc.* - Add sandbox_net_domain access to container.te - Remove containers ability to look at /etc content- use upstream's RHEL-1.12 branch, commit 56c32da for CentOS 7- properly disable docker module in %post- depend on selinux-policy-targeted - relabel docker-latest* files as well- bump to v2.2 - additional labeling for ocid- install policy at level 200 - From: Dan Walsh - Resolves: #1406517 - bump to v2.0 (first upload to Fedora as a standalone package) - include projectatomic/RHEL-1.12 branch commit for building on centos/rhel- new package (separated from docker)noarchx86-02.mbox.centos.org 1647371966container-selinux-1957904.patchcontainer-selinux.specrhel-fix.patchv2.167.0.tar.gzcpiogzip9utf-8c26380ea28828ee1f374610fc84ba16a9eddb522fa46deb7cbcfd961884163e3container-tools:3.0:8060020220315184500:2e213529?< 8.Z+Gȿ#kwr@V)8[P|H6쭜1{"D@Qqٗpw3,;" G>hR{(J b+NCs:x"5ÓhC8DFaDPg@ N$C:GN"&ܝId* PT.D"He =#┡ e,@L TuÁh( ikL"m=d(iY4¢LuP, X_4$ p+Ou,Bf1W=edcbNHoS4'8VD;*6$wcȭ8X?L;/ǀ1Fy R IHehc`c{/M,cY@x&Tr^$+2`)L2[ci)Hc SoȀ>,XaOPm7ܳo.mYfD04Wߧa Ti !`/沗>5 "@4~PADooͷ̅U|O]4w@ B_&W)# "t7I" )b=F 0*ܬn5Ҍ;UDwz=%m;? OAhh ` ФHyJ!P9D?4b(TS}8Ҵ C3X,0 (2 -e\g\w:(BEY !iJ O)'!e<1n'\vx:=1DO}(==Aԧzxʂ @!>CK:@zBHfVQoSFp@3Ax"'?OD '?'/Tc#5!D7[PC"Fl  SP4G/2lDeN[2A=y@6P5#Z^%w;D l&ϐz B(x!h?(zإ? !fx&O{hBq.=X8N=e2=T`"Q24OG h8|Æb `@rQ@[Nĺ1d@@q fHT=Fѫ2Hz{3F!)(#,q NF-[Qal7@+e<i6=z܊\(HOtG!Q?#mXC)}A91G{?~,L8NDQ8;Jz ӁwB9djclkE@cT1*f Oؠ+lO' #0,na$ j$ǣSN22PUގ(joNIu#I>Nx ݐc{nj)Ϡ6 0@&RAp&Id{:鋷t]1ԐRf5%-"bX,, Pgz18˟ G>ҐlаR8'g*nEW82V**:^PwdQ $Ó0qŐex8~^I ,>*mL5,B:y^2t>*HQ as%R@?^@nC@E΋A2}BD@vpPs)(N\Qȱ@;TF%3Og@_MP[ (3"'5yvcZ9Sf(p;ͺ߫R# s{>$'dl{V1je6З9c5_tgP玳у@ﬨI)е ȂsT BeIX0GTIXi: mJ눙9TF Lqp̨B/ȭfTƀFrKX ;PHAЉˡ9r:[*iTҽ TsĈ^Ho Y|B_1kbd@"K9fE~@#64t @* ,hBڌ-$™.vt;CO77s<1Fk>´|}y8DK\ Cd(8sI<Ѵ31Ty4LA/sAZ`P]{4'c}*%NG6:Ѓ z;ؐhP [3L wl5G xSťݓW\(ڈ a?5`/m OT)IrwБOJvqYD:=~㾻  =Y_a̍= p:/#n#Yt]iN"޾'4_&ҐMW Pt+@sSఌlͥBcxߓʢ0#mȀhM|<7\R;?/B'f1gdǏ܌g kOp>6(@/>^znzp\G1FgyѴ!g\#(`C2tXJhɉ8*~/I@Vs9:ӍO;Ci24 ]|~ 8@(tR7?Xҹ*V?Z4Y='zO[((x*do!@;DLLHCٜ/ÀfD[P(V8PDf@ ;?_d8lf JdK7Hd$t=YmcpV Y%Ecz'm8]1 BK N 1wU9`clNвQXlZ9RH;Jy[Y$0 Fz5Mt Z>! F3L6(#GLWA]1.{4N~#=\3D7 晾a`$mƜbaRyڋ0#댠{ AL1gT~pr@Ȉ )}o|:J@ 8"C q3ʼnGme~dKEpEQz^8ϙ˗ Ǎs1dz&2A)+'ww f̿m? Nӗi@CҊrH$B-/ws8+ABBs9ws"9ݜL]5ЯoB,GD:vJ ZT#Td~Gc'G"SBjA1nP-TA_ ]x+.`b5]9mf'44$o=p[81B[lp0Ist8 ifK"o{b(7,UEr>vX*̿7Őii C"f\2}!('V,-0>9cV' lRJ2Y͏pGb|L~7d-Oa8 6mu+o8\Ӛ>));v}US;n=hhqqG\!27n~gӵnNܙ<1 =M45kDgo#i?KJ8VI%#4}pl틧g]+F^}>2;j|m:߈Ol~tԋO Pj9z"N*'42{cCw~ &oD/y[O;viC;2EGz52=Y^KiHR”Sg@zz&Ӝ)6 V0ykyXof604~&.{^W!:WֵԃUQ[uj29ʯ}J۳zyyZNek?_=D~sͷF Qk+M_n,KKdg9#˽P&a55t;SvǍ5JsF)B*ݳY|ZaVeTl/2(*j5/WgW? ێV*TVq^+Bu%.}b8x}ѮKI`&)l 0Ul]KCMNT_UV| ZuǛ5=q#,wkqtT; ߗx*UA?raƢ>+]x$9] Rn4N᱖ zR+ByӖ4LUԋP_Jiܯ^LDFWf NZx$V\*VMHJuUeh%Uf/85f#O>fXz6zvmxַF띗nS07.7r+ {c:l;{ S*?ms~|!<\x!q#ɿGSYLG-Sֆ]*![/o2? l0?vNJXD%ܗΏR1 9LPғU^קXnQ"*-VQ+A^5*BL \?PH+K`<+y#]|9u?پC {j͟v\8:6[yq[=lRǗгYR([eq}ݍE|>=EW5l**F xI/*c\4'u&ёz$*nx]2O{/=/aA/Y&pl랳Qןcz0lZmoe:J~ma ;ύ1{\XΗI5}A޽g.si>swϽc2^;l$̅+dcBaS獗=;c‚lV{ zkYO 26o 9#ݒ}~-xkLܫ(9 fٗcʢ7GYL[4Q){ݒ!%6z,cĵS%?i1SW 2\BN&͒ko.A'2T5~Q\Şm$fI34- I8N~Z֛.Hltݒ磯|bt]MyYowJvay7񠔚ޥPk۵]Ϲp$S^5M![Z!0 /I3;0n:씛p}]oo0Qs|wL-ǂf5&o/m9}7g[6~K܉~akC}]`}*ϹƳB!r=qŕce>.xEu$@!'N,jCpξ;cN6H|i8ZR%A\ž8sa#LHt1we-,zE斜 {b}}2{ y_C-Xd8%m=&2|~5yMo4yrPl|mTź[ H^rN67}i${\Q;~+W#WmJZTFľ;.{~|fik(p絞VXx3߲?J߼[}\J+b5ZVXmc:xA)2wTɤs-@ 刖ĥ/}zuK0Aajڊyv>?BG7 =qԒۢ;xFŇv,?E, x2|d3߸啓S69i=U\RF+ 'MQsuĖc82)Mt/'cHhlY$q#W @TUfE \r42biݰcce1n܅I 7xGLE=tbڵ,6U4б otsw-*_faM,s[nu=|P?Q'Ȏ(ä[R#s|QmͲ/*"Jz~v~r=L'cscc& ѥxzEuc_IvB q.[%ҵSzZƴGiG.:#eݮ3{>Jk>pv, w} CIO<7Ӆ)wX_XJi ̀B;%ٝޗ{_E{ ~Ss؂^{%T„6bM[$_m^2+\V ~ɘ'bDqV|Q'{37*v/㾶q<\)_0fXU/OxI^(6Xw-Zv Klر/otlJ!H3? nL'xrM &@HȢw}Š?JېGtsuA_VOG< k-}y/wO;Zʥب} (Z%RҢm' VYtMo,ؿ[ϛ6x' m BZH'm{/IzqNW}lճȣgKDv?|VgVR@7E x42=ջ/rec}OtR|"|{Lܻ& 5]g3{ e5j3^ʷ@HM܊_+U}£gZ=Rމv1m8S jliͭͤ)'eVq^Q`uN~3z&J37~]na>%_iK] v'x[1ج+Ol|jMDz6`zr1njHOqY>T3ZpUa*5:އkyԬ6l9}y ;Y!$(eoߵ:2\t ǵ\Fa67<}~[ޏZDrrD8zꮗZf4FdDc&!ڂ_q/X]]M0Nڷt&,jMXYͫOPZd2ySSTەt?&4<+NFש$ZiGM yb%O9N9e&/1- ps `DNWR= |}|ث!s>ZBvVW;زm$&P'2{S&4y͸|%U^[IhpJS7ٲ|!+EV_54.lg[=ZԜ*ƕEb!Uj1R=gPٓ}j`C՛u\+'+N1my}%#SѾs̉m#~|HYb.AV9EIy5TiqSK^,F숊Q%f-o/c5<[pm3ؼc z"4spLurlks?4Gwe3O8*v4Ht buOUFo4=j?n~<ǭ.=یeed N%pr:xDbS+bD-W$҆Kl%=qYnfs!:.Fmݥ|ؠ]7)'hԘF7c$vMOsǽcwƬR  _\y8{\etu˵Ղٸhgm%[-U}HJkǺ^g]uX]jA>Q;.-zɺ;!wW]1*ag!QNDn{LWArҎ؆s|ۇj;R*ƥٻLɹ||1l%;6s]/{t'g, ʁ̖o>bH'fff1Nkzlt_a{C#X$ J}HS[|sPEh+пR`~B',.ػirQ蓼nnw\mRT"Z׷<_ɗS;O,~2}mUӷk鳶;E=z825Myf>LěG˝Dx)k8hUplRuEXMye 1\neĞ ͬx" ?!w냋ͺn:uG'B5NDew 7J2>pZ"e<,N`EꅴE6&JnqȪ.ã9.Ls1*[N|뵸 !J53#D3SE/K5Ix> ;}(8EcQhGӥ'n-VfW-Ryr&w/ b-;j3:~g8l mIrW"乓=Moz^N7΃5uJ]v;wyӛՒnh >ZyQM~:{OD:>lHUcE%Gm<+r/&t@p5Byn!7;x*7F%ĭzU5ҡuY~Xŷצw#2839.+=*,1M_wZopU(x*XKAHԊ`C!~΋oFxuޭykbϯ[`vZ/Х)!D5!Qx[^D;o,ǛF82)5|AkYĶ63^+Ѕ-cc UCPofwq_9I5Tj'z2Y`I×<^NV݌f\z[ZgyI#m2m쨩>Yϭ«|F5-ȗdM+ڴ ]H{Ѕ:]+'r9|_j4;%+Pzӻݷ&?zUSTÎwΪȕƹKzڟz~%K7!iݴ7a{~9gXtbcƝEUfH;%Å47,6U.ĭ<|x龦ɲ.os//"}|bQEN&"]ӝغnF&23l?<0d{8[3CLIYK19s Å' g^(FWu{S>USS7OM=~<5e?\27oT9K Gg qx 13;SߖF^ulRFh$l30TWqʍ,60_IJ5j*{?Ӷ/R<\DS`-U߯a]{_9xWzCŞ~$6[k.r/,g#z l2CJv~͎->WEPS{bqXU*JBW+僭__#v smjLi#ђ~GRy7?F>nQRSg9-x Uݒ˵n:瑭#L;퓷>8M%U>{ͩs2_贶8M.>ju[ir؏Z\x{յz'EBp\^So>5^zlO:cMXW=Bw/}ZɣξΡڼ +j%|\T]W|bHw~=˜&:YxEʺ+޷Z1I((돏|rXޙvh8P;]^.Wm|6z 0CKģ[Gq<ZOIr)նՖ-Q"Y{F3HtgD=& ׌ٞ}^!sN{x\KL}ղJwX #ܞ!yWyΣNѲ)ۄU|bEllQl<]єɧLO/pQm:Tn"c~!RNJNŭ4-Tx)r?Nǣb;[%f7K󑇣ط!·를8o 5v~+a^|eǚm|_tD&,GΌI:o;>̝p( ΩTiJ o$Qc=a.o+yj36{כ+;cPC ZG{]NVh'J=0(jTSc>'\|1w]r39u6DH9r|WQn^NݴM{'u.uQ~SSr姎[Tni1w9{bUg+߹uxƲI߻wm:tVձ%^J&nYzALK kyKϽH,]luɨm8~AdʧB'J>)bUtuyC&QKGr*dƳ]y?ۛZR#FЎ]cd][Ln-ĭ\Wh_e ,۶mmm'۶Ll;gb[-۫]NSed%E_v7tEjLGFJAw@f}݊Cuh}%nlڸa3Q% qGR@?I"1G1=4s"YUr;XaȎ|0@,7Mjҧ9{0{dE3f^= +(Vݓ2 |G/̿Mfm*'~{#c47]iڲah}o/ 1OQAʵƨ60{('ھ4j`H'OZI̾x܆ V|k[:XA ܘ۴mT$ڠ"uhl=D<Ҋ##+RJI,Hf+xAL Y iI MgT薹Yj}כyfPz[%BM-ٴ#;s0Uү7,T(Q _12 lUaO,V$N?so`"G0#F-BHHw_lU: <P(5am*ӌ0XMJJ A2͵lQ,E ЌIdž#2W^j O{вȽdfؤ}S~?3myNtٸ;qc!PzmrR~qĝK-taER_SD7hJjd60D#NR\M"ltBZ[=ǿoRRt' T} ؾM?2oMk+|f\]k콊ϝŞOfs Coh+kxM /+_៸rGN71 t,R )6SGq#I% f~:c paeTX-JBCk/ڜ&NtLCKj@ dqf QBx4ؤ-'$O_ .uZ<.*[ݕ~==\^:k?q]9I JX嫸q*l s=;ӼY51Rjh7wOr+b>Y~Ss`&2\atV5FK٘,'=D,UF' PF~[Xƽ ~P婎t5lM4 E>X*FHT \w-K+89m2/M8\Ț,׫]B'2G)2HTR`ׁrr+Gpi7*k4u, MfaYȂݎ(2ڠ#!FɜHKy`J qȑ pGe"lW"PX KH` \:u{ÆӮşFp qw:->35*NlB1k-&3 :]i?)6ɰC4Tt:hNukΆdPW(ds& k<(c;)aE؄]R.EP@ cI9$(_ID$pJ@qVRR~nvfPpV?Zqo?\r.)Xg׬}y28|lAy` 3$kA SO yu= la`'PͺWD7_6Ii )t oeiqbrsϜ^ :QIo88Qol;MIjn\}]Z*-ib45cMGғptIϧR,h,9ir(\3J`Thjza^2ߑMPulP)"\P90n3BX?̃b:tD%(Y1lgQpȊK~߂7ǵ332zMT6Isɬ-D~PQirkq8?y+%kAϗGOյfd2-yF }[1@'eɘ#MٸA;yE8S җ'u]"_)yT~+UX*뤀K71Q4X~jAЪ5R :]HQ.$$mԝK“vl*h[=jU3,;?3b.xd˸1nsR&RI/8hӍzQv 4a| X茦韙Jbfo%2`#fbwZBJkb<k7\ +R(-$y $Lu2Ea`;o h7ǯ==l攰IO}՗G9SMqB~*Kb``Gc@TgWo~y}Q|>aZ E7_C&Ut5M(04`6s4&4۸;[Jb|DͥPWWy] (깧B@~@uD1|I9g%`4$B].W; 䅀[Ci,:ge 6;޲coAj檕i[Dzէ"u0E:Wf*{QLE+ySڥ0^NIoY"Z}SmR4kEi˵ڑ&Xn(@č;pf(K.8)k%/gL;x Z-2`kOvn/ƂL8XiĔ+!EֺBk&}aoQ+pʵ viu/ ۉZ;QMֱ:?IB<ض )[(R]|Z =d%O,򫶏 (*P))!zSa ߙDGsr1, 67Iӂ#[.FLH }m7Zg 50k"1K 8܆zQ1 OL ,8"-E_:(ySjV+Z:^nuغѸuQ&wdv2VuE2nfh[iN5Z V5Z@T^JjoLbq$n:y%rxESi8UYaފ8zju0p#AJ:0JJyJBy"g_}sH#'69ŧga^3A V;8PݑB~@:x1rވZ$Ɉ^?Z~h֠(0̓2 MJz  ]{zK&!MD_bVŤCv,sچ{}\V%mƘ^f⯐@f_hsl ƇZkfI۞RUIi B}kU9DIX7BC0k >i*4:oA_J:$#$ &r*`9 CG5Pܰ5-Ӂ GY=sC֠βnoҕ<{P&{ˉAj& U@LeɉTaN1aew;{Wx_ꄪ>b|H (1g5՘lFwHal-8I-< cKEXCˁ_ApumkI3J;'Վ+5,4[ $˱J7{I,O7ذwbڕ"ͫ!Pc\W=-E,3JAhmqbgj"{Zbq_c*_nc,o^ x6 g-֢lrqi{jl5ߦY(E5}bN) Vۗ2jkd|##-' p¦V\O8u2q=fÝRïƦ+s.tŒL`!vhgSU2T&gvN[PoK&hK6wig0KDD'Ay w6\vLU KfU¯=&H8`ׅl`tl x(FLcAq ]A#]痺ڀ,%OFܙZ g$Nv sU/ϸfBˌiP+LHyxkiv4RX6HDRb6$ XѶa*ع3PDiĀ֪^R}V+JNDi5FrNz'ˆ̵qȹO_-fj(HbhG"y.2YTٽSos)]#T@с^W6+h,Mx#\Pa:>Bst>W9VjV&Auc7+ psKQL4xJ %/~e6 I?_䢥6w.Ϫ8ğj| i DѽLӋ:Q}ͪ[U5GWd~ǢXMҊM<#{4PfY֩:Pi*| UIYC c@b>jW0V&F NBaL;VwFG)(M!Rc\ #XΨ\VQvl0cǮ`ZK'õxWYU'Gfp %a;]Lݍ[4@ol~(6wcJ 6jV=_^ |σm vKCXұ'cwY]Vu+EJO5TXܴhc1+ur<2;Ȯ9V#2Lz^Ҥlzzw(4kv`bPEPaBV`J8k0 ^}0NlHx*T|խu>sҜ&U m}أ*rrݕ&+wC֨$h<Žp\p%Mp@|SB`sL?N8Ȭjq )ކyO5MAa3lWWëC}bb$=YC)zJYXٕnc"K, hMޏcS=&zmc\Y =}$Z5.;i0pIJ~0m%X4|U!"(<}#!@BBqk1Ӭ;ku) 5qg*,IPl!LΒ&[:d_VG-`~HPlDu!Ф3}-&L~8z' $@!#/ WoWÿ |%pC )!,E 9 xe ޶Xi}V,5m=&. (4[r;ưǫw n ].)mnj?RAN߉UotWcT5dZ`(MdHnJl[Of1*D8N#d1CƥQݮo+0ږwj<EW7PƊbDvǟ^RyQɐ@ 8tr&ޘf<(Vx8:>hD*҃k$bXytD)+ɥDd^COD]ahE04t?|]$ؐB~Fk+1{,'(N8ϒY YCE9i0F?/r$!\Qf'uZy3|jÐ׀'KRGk*?S=[EH|!ڨ*jjD} ha0 geJk,_oMmQxcC9l9SvfWshF_V5TAC067r4+KŌ>_x3'$39і-g¬(HU[Jĺp>Sb]Iڂu.,:&*,d]A6b}T߼0kúWkH315DbtG5Ei`c60#!cKwXhNMAu|ݱh"q,! !6loAAdOQrASvgf~W)1D# Y)5LGn-GGwa*Y?wz>]w1aN.*M VAEG&d/';N3O5[a7W-F.a\mv,- c)SI#E#Nl m?hń ah%YQy#`GXD&GQ3O='*N'&X׵"%z7^#V7;aأ\vr_m89VN48~uf ?p̧Vr#@pûDl HJI es~}hlI"5%ЬyP,RYxt-n1jg8Vʯ,N`Vj5o̷M`adD*y`۾}kx'N:OdAAF &]R=`2}x/.o;a)%I%90-4ϷeX?.1|qx9C0)pkty%w{Wύv=5Vم#-QԦ8!{ܞ6! bz_KmoB:I+Ou,_ ®Ӹ/(pI92u(}ˈ􈞒^ʧ=|Ov!.6?i{J5+zt^Pu[ &oBm&:Vl1U1U]9* <΄gQH28'ۺDꑚUAG僚 j5!?3*PegV~^UtlXo \,Hxĥ優VI<j72q,쏹Xa ~#3L-Y4LwbPzGAPwjuƂX*3~`{b/^t|4_E*mR|~6ɿf l>֗k/dY`5{5i≡> Ci8 HM"[bsr/c/\[84+1/ddECr_$j qpێ/gpy֣V sdP(#VuŁLlVl-w`]DX=[\{o6_ ܓ|sFJWki%GUs钳 _vdB<\Bk"īY7n]hS])ֈ\Q GiAr>)"s5Syy; f BI%ONlIS+O4)5K[A`@,N9t.^*ᓩз.7rAXZ$/ݪ"?ʩ [9Z@\ Ȭ)&ɑH[('ZILy`v4okf!vwY2s:%HL/P$sgSĀ0%el肈1|7{ ω@e+KK;i')뮗0ObQ -V,>M-sISʡf_Z/rmy\sVdHMmR&%ƅêU)i3GT%9V w^ss'P%5JL˴Zj~k~j Lyr۲H~< &i) ~JNG/٪7S)Vs|\]^_Ppz((iß$9o+aO ?-r=- =tS- /''_#qrjYVLQ:/"G`0U _'Þ?儲I5_gd>h\ć!~r<M' |Nj:fΦ@S‚cK= R] n2 hx҆}K=/=ݦDkkǟJ7h0W|wa2 2m.㸾XG_ ? B9Z۟oD?V4@+r|ʯGœXt ;,-F1 2c _7C 6Kg`H?:.zv:zCA#k (S P=xb RBK"JG^ADn w_?|ꕔzr=JȊ fWLj,{?`wH;N:"^L]beŅ8Y {CD(/n+jrD5G{`!# 9[:47T,6YW:|5a0L4Rgm.ޮѨh,mμ8оwcٔ_]~CYBgJG܈J3($y@'9.g%j**?a37ؼJ F6BgO$o@_5"Ik1@fCE,#Z %H-{\G=/2A+)UzD7 ~c6X]?13t@Cus# v;-v#$qOV?E}v[[U~L=EmpUgǝ@!ޮtG!3gzk" "#|3g*%޾EȠ>n_θj Xw7hq̢ Hlp5C96oG >Y ‘U5?I<YS`qw7qF:؈& 8< /G)|)fy @0}E)O4*m6'D0>cls֋SXOr8)=?k HrΎvC21!xÛõёpdE Fhnh-`={MWw $_}:yRY,M;!IGt6M}MMۥ967#osi0$ +Ȱ_Ԭoz]q] bd/ͪ}2E4q>Oiۏ}ޣ>'`睠ࡠ@0Ӭ}zcP K 6IQ2kh(yl``pnH@`"5ӗFr`h`o$(ޓ@PHK:0>3pg wwrkA`s^@  92@]UDF^B $