container-selinux-2:2.167.0-1.module_el8.6.0+926+8bef8ae7 >  A aIU]zQ&P%dA _38>n  ?TGHBMmC(ԡؑ4*" xJEs1Eq8NɄh;j$T;ZM{%gvg3$'t P/Re!6Hdq?8t P{-|;?C}z] iIW^l Ǫ 955Dhn~0bE Ē̡wa|q0۱pQCRnC=ufL)U3Wx(k(i-2}pWE:r׉:I ~ȍq(E7GE.([n@yȔH_Y1-O8ox %`nV.)U٥sT3 e0FQ$$U\$KYk߸tA/OEHwfwm9/\ (&߈oeX?r $$>p7@?@d< @ h Aqw     (@(8n9n:nA?F?G?H?I?R?\?]?^@:d@;e@@f@E@H@L@R@@Ccontainer-selinux2.167.01.module_el8.6.0+926+8bef8ae7SELinux policies for container runtimesSELinux policy modules for use with container runtimes.aIx86-01.mbox.centos.orgCentOSCentOSGPLv2CentOS Buildsys Unspecifiedv2.167.0.tar.gzcontainer-selinux-1957904.patchrhel-fix.patchhttps://github.com/containers/container-selinuxlinuxnoarchOS_aIaIaIaI53f5a4e30667ee0baf37ec7256cb66c05b2b2afd1a3338cdee6c4685be5a7bad37e94a50876060b534158021d5db9e59188b1e39e043f7557105149d1a90334b0b1bd861e39720fcfa2a64dd84fcb4b4f347e65583ffc09ac03bc3529e045b66e52f5b177660e617af5f076369619066fe482b3a5f4753968c383e7e77e266c2 mockbuildmockbuildmockbuildmockbuildmockbuildmockbuildmockbuildmockbuild  gitpkgconfig(systemd)rpmlib(CompressedFileNames)rpmlib(FileDigests)selinux-policyselinux-policy-devel3.0.4-14.6.0-13.14.3-9.el83.14.3-9.el84.14.3a'@a&0a /` @`9@`Ȗ@```q`@`@`N@`@`dd@`Y@`&m`_T_`@_%_%_F@__"_5+@_16_p@_5_X@^n@^Ӝ@^@^^k@]@]B]]@]|@]@]X]W]R@]@\M[[ͻ[[@[[Xf@[L[K7@["X[@[@[[[Z@Z?ZZZ%Z%Z@Z - 2:2.167.0-1Jindrich Novy - 2:2.165.1-2Jindrich Novy - 2:2.164.2-1Jindrich Novy - 2:2.164.1-1Jindrich Novy - 2:2.163.0-2Jindrich Novy - 2:2.163.0-1Jindrich Novy - 2:2.162.2-1Jindrich Novy - 2:2.162.1-1Jindrich Novy - 2:2.162.0-1Jindrich Novy - 2:2.161.1-2Jindrich Novy - 2:2.161.1-1Jindrich Novy - 2:2.160.2-1Jindrich Novy - 2:2.160.1-1Jindrich Novy - 2:2.160.0-1Jindrich Novy - 2:2.159.0-1Jindrich Novy - 2:2.158.0-1Jindrich Novy - 2:2.156.0-1Jindrich Novy - 2:2.155.0-1Jindrich Novy - 2:2.154.0-1Jindrich Novy - 2:2.153.0-1Jindrich Novy - 2:2.152.0-1Jindrich Novy - 2:2.151.0-1Jindrich Novy - 2:2.150.0-1Jindrich Novy - 2:2.145.0-1Jindrich Novy - 2:2.144.0-1Jindrich Novy - 2:2.143.0-1Jindrich Novy - 2:2.142.0-1Jindrich Novy - 2:2.139.0-1Jindrich Novy - 2:2.138.0-1Jindrich Novy - 2:2.137.0-1Jindrich Novy - 2:2.135.0-1Jindrich Novy - 2:2.134.0-1Jindrich Novy - 2:2.132.0-1Jindrich Novy - 2:2.130.0-1Jindrich Novy - 2:2.124.0-1Jindrich Novy - 2:2.123.0-2Jindrich Novy - 2:2.123.0-1Jindrich Novy - 2:2.122.0-1Jindrich Novy - 2:2.119.0-3.gita233788Jindrich Novy - 2:2.119.0-2Jindrich Novy - 2:2.119.0-1Jindrich Novy - 2:2.116-1Jindrich Novy - 2:2.107-2Lokesh Mandvekar - 2:2.107-1Lokesh Mandvekar - 2:2.89-1.git2521d0dLokesh Mandvekar - 2:2.75-1.git99e2cfdLokesh Mandvekar - 2:2.74-1Frantisek Kluknavsky - 2:2.73-3Frantisek Kluknavsky - 2:2.73-2Dan Walsh - 2.69-3Dan Walsh - 2.69-2Dan Walsh - 2.68-1Dan Walsh - 2.67-1Dan Walsh - 2.66-1Dan Walsh - 2.64-1Dan Walsh - 2.62-1Dan Walsh - 2.61-1Dan Walsh - 2.60-1Dan Walsh - 2.58-2Dan Walsh - 2.58-1Dan Walsh - 2.57-1Dan Walsh - 2.56-1Dan Walsh - 2.55-1Dan Walsh - 2.52-1Dan Walsh - 2.51-1Dan Walsh - 2.50-1Dan Walsh - 2.49-1Dan Walsh - 2.48-1Dan Walsh - 2.41-1Dan Walsh - 2.40-1Dan Walsh - 2.39-1Dan Walsh - 2.38-1Dan Walsh - 2.37-1Dan Walsh - 2.36-1Dan Walsh - 2.35-1Dan Walsh - 2.34-1Dan Walsh - 2.33-1Dan Walsh - 2.32-1Dan Walsh - 2.31-1Dan Walsh - 2.29-1Dan Walsh - 2.28-1Dan Walsh - 2.27-1Dan Walsh - 2.24-1Dan Walsh - 2.23-1Dan Walsh - 2.22-1Troy Dawson - 2.21-3Fedora Release Engineering - 2:2.21-2Dan Walsh - 2.21-1Dan Walsh - 2.20-2Dan Walsh - 2.20-1Lokesh Mandvekar - 2:2.19-2.1Dan Walsh - 2:2.19-1Lokesh Mandvekar - 2:2.15-1.1Dan Walsh - 2:2.10-2.1Dan Walsh - 2:2.10-1Lokesh Mandvekar - 2:2.9-4Lokesh Mandvekar - 2:2.9-3Lokesh Mandvekar - 2:2.9-2Lokesh Mandvekar - 2:2.8-2Lokesh Mandvekar - 2:2.7-1Lokesh Mandvekar - 2:2.4-2Dan Walsh - 2:2.4-1Dan Walsh - 2:2.3-1Lokesh Mandvekar - 2:2.2-4Jonathan Lebon - 2:2.2-3Lokesh Mandvekar - 2:2.2-2Lokesh Mandvekar - 2:2.2-1Lokesh Mandvekar - 2:2.0-2Lokesh Mandvekar - 2:2.0-1Lokesh Mandvekar - 2:1.12.4-29- update to https://github.com/containers/container-selinux/releases/tag/v2.167.0 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.165.1 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.164.2 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.164.1 - Related: #1934415- fix the build of 2.163.0 - Resolves: #1957904- update to https://github.com/containers/container-selinux/releases/tag/v2.163.0 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.162.2 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.162.1 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.162.0 - Related: #1934415- do not use lockdown class yet - it is not available in RHEL - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.161.1 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.160.2 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.160.1 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.160.0 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.159.0 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.158.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.156.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.155.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.154.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.153.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.152.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.151.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.150.0 - Related: #1883490- synchronize with stream-container-tools-rhel8 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.144.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.143.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.142.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.139.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.138.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.137.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.135.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.134.0 - Related: #1821193- synchronize containter-tools 8.3.0 with 8.2.1 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.130.0 - don't use macros in changelog - Related: #1821193- update to 2.124.0 - Related: RHELPLAN-25139- implement spec file refactoring by Zdenek Pytela, namely: Change the uninstall command in the %postun section of the specfile to use the %selinux_modules_uninstall macro which uses priority 200. Change the install command in the %post section if the specfile to use the %selinux_modules_install macro. Replace relabel commands with using the %selinux_relabel_pre and %selinux_relabel_post macros. Change formatting so that the lines are vertically aligned in the %postun section. (https://github.com/containers/container-selinux/pull/85) - Related: RHELPLAN-25139- update to 2.123.0 - Related: RHELPLAN-25139- update to 2.122.0 - Related: RHELPLAN-25139- update to master container-selinux - bug 1769469 - Related: RHELPLAN-25139- fix post scriptlet - fail if semodule fails - bug 1729272 - Related: RHELPLAN-25139- update to 2.119.0 - Related: RHELPLAN-25139- update to 2.116 Resolves: #1748519- Use at least selinux policy 3.14.3-9.el8, Resolves: #1728700- Resolves: #1720654 - rebase to v2.107- bump to v2.89- bump to v2.75 - built commit 99e2cfd- Resolves: #1641655 - bump to v2.74 - built commit a62c2db- tweak macro for fedora - applies to rhel8 as well- moved changelog entries: - Define spc_t as a container_domain, so that container_runtime will transition to spc_t even when setup with nosuid. - Allow container_runtimes to setattr on callers fifo_files - Fix restorecon to not error on missing directory- Make sure we pull in the latest selinux-policy- Add map support to container-selinux for RHEL 7.5 - Dontudit attempts to write to kernel_sysctl_t- Add label for /var/lib/origin - Add customizable_file_t to customizable_types- Add policy for container_logreader_t- Allow dnsmasq to dbus chat with spc_t- Allow containers to create all socket classes- Label overlay directories under /var/lib/containers/ correctly- Allow spc_t to load kernel modules from inside of container- Allow containers to list cgroup directories - Transition for unconfined_service_t to container_runtime_t when executing container_runtime_exec_t.- Run restorecon /usr/bin/podman in postinstall- Add labels to allow podman to be run from a systemd unit file- Set the version of SELinux policy required to the latest to fix build issues.- Allow container_runtime_t to transition to spc_t over unlabeled filesAllow iptables to read container state Dontaudit attempts from containers to write to /proc/self Allow spc_t to change attributes on container_runtime_t fifo files- Add better support for writing custom selinux policy for customer container domains.- Allow shell_exec_t as a container_runtime_t entrypoint- Allow bin_t as a container_runtime_t entrypoint- Add support for MLS running container runtimes - Add missing allow rules for running systemd in a container- Update policy to match master branch - Remove typebounds and replace with nnp_transition and nosuid_transition calls- Add support to nnp_transition for container domains - Eliminates need for typebounds.- Allow container_runtime_t to use user ttys - Fixes bounds check for container_t- Allow container runtimes to use interited terminals. This helps satisfy the bounds check of container_t versus container_runtime_t.- Allow container runtimes to mmap container_file_t devices - Add labeling for rhel push plugin- Allow containers to use inherited ttys - Allow ostree to handle labels under /var/lib/containers/ostree- Allow containers to relabelto/from all file types to container_file_t- Allow container to map chr_files labeled container_file_t- Dontaudit container processes getattr on kernel file systems- Allow containers to read /etc/resolv.conf and /etc/hosts if volume - mounted into container.- Make sure users creating content in /var/lib with right labels- Allow the container runtime to dbus chat with dnsmasq - add dontaudit rules for container trying to write to /proc- Add support for lxcd - Add support for labeling of tmpfs storage created within a container.- Allow a container to umount a container_file_t filesystem- Allow container runtimes to work with the netfilter sockets - Allow container_file_t to be an entrypoint for VM's - Allow spc_t domains to transition to svirt_t- Make sure container_runtime_t has all access of container_t- Allow container runtimes to create sockets in tmp dirs- Add additonal support for crio labeling.- Fixup spec file conditionals- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- Allow containers to execmod on container_share_t files.- Relabel runc and crio executables- Allow container processes to getsession- update release tag to isolate from 7.3- Fix mcs transition problem on stdin/stdout/stderr - Add labels for CRI-O - Allow containers to use tunnel sockets- Resolves: #1451289 - rebase to v2.15 - built @origin/RHEL-1.12 commit 583ca40- Make sure we have a late enough version of policycoreutils- Update to the latest container-selinux patch from upstream - Label files under /usr/libexec/lxc as container_runtime_exec_t - Give container_t access to XFRM sockets - Allow spc_t to dbus chat with init system - Allow containers to read cgroup configuration mounted into a container- Resolves: #1425574 - built commit 79a6d70- Resolves: #1420591 - built @origin/RHEL-1.12 commit 8f876c4- built @origin/RHEL-1.12 commit 33cb78b-- built origin/RHEL-1.12 commit 21dd37b- correct version-release in changelog entries- Add typebounds statement for container_t from container_runtime_t - We should only label runc not runc*- Fix labeling on /usr/bin/runc.* - Add sandbox_net_domain access to container.te - Remove containers ability to look at /etc content- use upstream's RHEL-1.12 branch, commit 56c32da for CentOS 7- properly disable docker module in %post- depend on selinux-policy-targeted - relabel docker-latest* files as well- bump to v2.2 - additional labeling for ocid- install policy at level 200 - From: Dan Walsh - Resolves: #1406517 - bump to v2.0 (first upload to Fedora as a standalone package) - include projectatomic/RHEL-1.12 branch commit for building on centos/rhel- new package (separated from docker)noarchx86-01.mbox.centos.org 1632178936container-selinux-1957904.patchcontainer-selinux.specrhel-fix.patchv2.167.0.tar.gzcpiogzip9utf-8827b433c2f859078dc15c75cce8a7978102446205579f9e3416fc023b5622c4fcontainer-tools:rhel8:8060020210920222800:2e213529?< #j5 Gv]O C"DfЛqB 4{'8%2d%l3!:XA?H` HA!п#i3E" `q64{+g#'Ofa[YfpJu(Ȁ?h6Ҷ$\LF(T(bdp+D\a$ Ga(8G1) D&pXLr8#i8 `zbO?z8qTv%$@ KqQ 8`섡2 vw΢H%A$e)P"t#9(P(@#, =x=đv4,Ӹ8wg Tdu჋<#oeh,R)Bψ8eh{ Sm:Up 4 GZ9x[pYiJZ(#(h;l$!V5 lE4ńJBSPY U!Btw"Y(Ӂ8қŔ!{(I;<`Z*),$Ah+NUsA6?̲ 2<`Sa|ŢEdDBÃJ 9;ڃŦ-f`1H3i Ź+hC9,G0\N /5w, q3B IH}g3^ْ8A!`q7//;DP0gPdID@e1tz~jML1ـ$buHpNJi}b-$[9:{C Lrc-qoV?Amxg*e{L+haL~yip8`hTG]H)$|,"68aq< s@FpEy\ @p.8 y3D;fEdU c3\ю` ɝrm1;;1`L9H9T v!@Zi>t`5X?mi:=(G#If*\w8Ɋ X {+S~~iLVXZ һ؂2; VTx mK{elA7?st؂U肀~ OCa@& TۛC-s}e6|rod:C3Х p aH&ݍc{DHr X <7[M4tQĝ4@@OIsNmi'%6“y@!0E@4iR>(,d`HrT p @4f,0 B f4 HK;,JBQBȱxRCSnxI#`Opṛ ] (iNOp?S9bx"<OO?iD^ BPO7P,:!cC ۔D@xx,\"!iD= I" < ؈iM%@%[B/;^T@A }߮ttX PZ%-Ϭ _ Ã=`\FZ(ϨGG!OFxކ[qm*ihxY*Ydud_CVʟ^^_hi\3PU C+H ?y %E!ƖLo}OfM!zTM;ϫ>t.$(?@u AY᝜ 8'} 0T*_cqD#˃ !@~mSKBq k@jA/D 429@Sg2đ .=?"3 ~aChs&`l!z76fQN/aۓ`Kp _o0XnάThH  %0p82o `x{h"@-TNirF/ @n! O woYi,ZAah' ԙ(ƒ6ψWD+B1I3^Ag*0x$(;,^HE$*v)xBſY!(,og,/ P E;{f@LdT-͓簡qЖ8G P!P~⇽4./Uqj. rFƠތQkH 0H9$ Dz@\<=|QF1VT!m~-G'PJOfMO" Qy99`>pԏ1H[$ff8gCx h_whD+;GƏ_!! ǧ06*bԸm0ą7Cn8aft8ļP}3ç8ZQ!И9AJkYS-6h8AJ/koI0F¹∠A& * [X"BcAT; s#Ta#1 :ڛSRAeldB7X<l1c B3 C0TnЧc9ɤC`'iٞNAiyE8$4pdWg 5Ծ냙z͹{r & 23ԙ^u gcO4$?4,ľT*əJqՃ#L Jΰ=]0Y! Ld\1dF:ǁ'NWR(ˡOJy9S =дNW Roy;訅abp(|Qb |](8sʃ ʁWrl)PQ ̦#rcWd8ʌAF}x ~dbΔJ-NT8(:^'- x=*94[U}ZY" gXC,TrĹli &;+kRr tmb)CelDg e3Us!3Vo!i:0tNb:bfN3A!)Q?:gg(S#rŴ~ 3*>s49 r1%ѫ#b9|EA$t"Broo\Ζ/ v0`t/U1&қB3ߤmx̚(nYQfHd 6">aJ# D,'P6cK!IpӍ `C њ@0-?:_yk$<:`1WdBD)ή\40ğ8O}?G4L{q A=0qFiЋ!cXD1TF<9 X F (^.6$DV %:[m=rq)s6'*C.|lM1Kw!G?2Go}J/tR=]{tNOyn+BEOVWsc!z:q?!((x 3c0;F \\:#!CjseqNPc5<11ϐ( ؀ 4y^xzj. 'Š }hH6p3OFyIEBQ-]*Iᧀ6=80ϩc/~t`3C| ƈ6[@E|g ͅ* 4`U)(J"МpT(8,d[s飰P$(@lƈA2-aS`4t2|`0iOb t:<aInLك37YFmz< ''g; +AzFċj\(!Q|hw4DbH+-X G-F";2Zr" ¦s,6ІGN;Etcx/!8o }_9/ tno)r:2MVzjωS& {J"B0-Ozy%G(dЍ>Wb_~LJ#%:ќ Sҗ= iݣ?O hӏ[*;7Sd!1df6'#w0Y!V;1'{*,T%"PN?Y`ƹeCy>羧#s0ԏ yǢg `X?)"򶨹; g@6hyA:Mz2| 1PH+{"SfzeFa3 zn}̖aΡ(.XQ>˜=L/9!C2;a$ :_J$xsl%[ }]B!:ۀ@HKW9N=1 P}?Ձ@L7ky FҥV;k1ҎRDV0 )Gi~?*"y}t#? ӕDeW 9A9tO7 +y/ai1XbF#$#t'Hxts8:#)vBA)SdY<8<1;02|JߛNP΃HDuqob[{!i9Dr3v7s%q#f(8g gk5̻cPvAwup//D[ws9l99er0(%99%9Gݜ?pJpP"bݜnNt7'bE%@W kE9&,.-yF{:5ف@gGQXɑƔ`ڠo5:3;dTdg xPfB XMuxN'&[ى=- !g{2V,(Nx }V=$LRf;G@@/H۞ @wU2, E1d /*gwfqi+XSx1OI 6)%,Rlj1yy>&x_m2_캕7PT5V.$~XyŲɯ^.iMݔ?SН^>Z~3{=^ftz95gƐdG||J{4Jm%V1F2vvTL;sc\nP24+(ݪ}CϠCS^S)22;FeLu2[YEFW_rmr ۥ{w82լZݳ$s"C)*Dݞit4ȸ#vytEƳZ7'eLڞ&537}S]U|ŸK%XT`>8Ӂ.#>nZ5>U6Mo'P6wJFmbEsǧH}c(_}^ ' zIV=V1;yap{7C["֗k Xż-W'mq!N#f~U=|vžG]Wyo?)MaJ~v =~}WLiΔNf zybmlnw%YM-NnԲG߯"?XT9u[W_Jz/TxLH~%%s?||_ܜ[ڑ^NoGL)Ud9!,}n0s2E^{~Pt n+㟅mG+*+8M>1u vhmܤcTZqWmKA~*&y*+>Sź͚GRݑ^58:KgV[)' /In׾7E5G/? O20o5:~ӏ.3 c̻C"1Uo:+U}ˢ F;jRzfqBV4x/tSmS󋷇Ʉ J{k<*ȶ/Uj Wr C~'VӢ̵/-ϐ|k*S gͦuܫ}SU'BvCE߽]vp桉oηS@(5`U(MM{y‚hD6!Y{QWO%!>ۑѰw~kQt+R+sj9ͷǯHp3R|ې/t&f8ϐ?Yফ¶ Ը J9#߭0cJkNSVJV+oW=AScyO t.rQƸ-odlK,)|K2X8z[Ǝ"UJߢ{d6NS{n Z^{wU_l?3A1eћᣍ,G-X|ɔnΒX=1کݟ+VT.!lfɵٷrvK~Yj( cbOt6ً3ؤ_dž$]H'jn]MOVm_}ncx6DnW w_:U<{zPj[ 0|ƛxPJMҋber5Z߮~B\8vܚ|w-{DJnzR uvM8ஷv7Om9z?S;&cᗍr꾛-%]{Xྏq 0>܍WaYdʂgu{"xD'!8g_S❱g'$4htS}tQg .PyaV KBf0בH&$~\rڻ2RUkM"@sK=1־Z^Wd=|/b!w Y,Wђlf횼W&7dnw~(q66^bݭx/9r k4ܽ{s͋{xsӕ uFPv6%p-?#qbk?>4ay5RwZi+,.{-J+vn{R ;dbt ryrDK\v[=޺o%}ޠ0n5m< AՆ8jIm<`CqJ" kXr<>2~XLoI)y\nLX_*.)yrNǦ:b1r&U:k|Sғw$x\4^QU6,+WO _**".9[nϱ1ݲWQB$ɄK#}:1hZzfpqRe؅u7}/3z2 VҠf]YQxF7S'XUoq=؞Yts9ʇ- ?>JdG\ a-A9>aB(W϶fRM%=?mab&Yケ\n11ۆRT^ =򢺱$J;!Tj}e)=-QBBScZӣh#{ {R2znc=j`[uL5vv^8;>ꅡNϋy$'Zڛ;r^/c,Ak ̴f@AbqX篢K?)|flA׽k*aBe-vޯ{EŶ/_+oCddfk"ʋ8_XIV(gj{zꓽقdi;q_۸soqk /q|t3'YLxoIݝDž+~W:xsp*a:99#Vi4aM]2d)~`2={:x[j:'HlB:Se1,Oddy7lv [[{G)^ǂ`˿#ޝ=l5v9y;wyf,9ˉZF.In_vۢe8~wM])]eiѶZ+,:¦ ߭U {cPusNgwߗ$ 8d>`T]YymK%"Yߟ >K3qzLt o"\_Vy<1Y> ':pEJ>K=&]Ն}k.=2t/[D&jn/ޕ>سZ-)D6)K56ƴVf2|H(:'݇Uh=s.{0ԥ.jZn;edlΕ'60}0r o]Y嗅^DYx!>qB8OQg:ޅR 8<ޱHZxq+b^Z{H1uȚŒa +sTV_6I?ބwjj(wZncqeS-5-v?qs$s&2Kbj~2x줝S@}~'ˌ||ĄɲrWxx2kspW]c3Pq5sˮK.kn>ѤVEH8ڮ;6hzpdyI5Ӓ!"XkA܈um~M;n9i:7^u{;,g;U*bBoO݁D L/է_j?Xyq(2-`T=ݵx}Ie>Z`+Da6:92A3Õߧ:xFV,;90͟SmӧrkwV[g==cpeM7BN,d(0rRHw;ISWjG(i'# ]VK8~z`*m$8?_qȚO&ep(ޭ뗭+kjKvO5OyzP}kQkgMϔW؏_t__וa 2 Tޘ7%*wx혶w N%w Jq=>&UcoNvQ=T75vN'̸`w* -~X0weõ׼ jd6˜|<ȬYZcvs]xKl#ZXhsz}>-GM-u"?9h"z[YuE-h{L‰]V#2qmύ,ɮ.&SZ`q:o&,q'(~b-2[Ƽ)])qmh{U~UxnTN&>Q>U_-!jl6ghvIa=ipMRf\y>*Eɭ$4p%~)BE}IlYk[ ƕO+3 -Ğlw-QjNvEʢn*O5EBLLx>xsp!>Qh_96_[?|>,p1~"rd{_8k%/#vD(vM{F-M6l^1o [l=UgZj98?9n9y@כ#!zf@ jPrQP=Ya,K/r ne4:#N%LOK\? 0 14ut {- ]i;PȽcA7Qit1&֧pcn &M,z7aѵҢ;@ҩ \'0j\Ȯ~jSʵe6W'=C &4/!;6drV[}UuǾSKd⸻U}APw;! ; Viv\%6NԈ^b>ن8lP.՛MmNqjL|ɱo;&'|Hޱip׻wOcV) /z. <|=p2ڇGjAl\W4-ܖ >px{[Tqw%c]{.:A _{ַȵaxnVJG+?VA{}ݺ;Nqg" Vc&Շi}dgӻy>nXØpPW+槴؇,55u49k-j@OCI(!dݝ`s޻.و3ِwet('Nc=N 9iq|lùACS )zRSs&|o>AU>O}ҒaY®=:@Ǔ3@tef˷edmJ333՘uUQJ6|[/WO}EUwꌽB>)->t9"dL_)0?ݴl|SF\zN7OUI;}6)*CmoZѯK'b?ž6*e\۵YJu=j<3Xs_&MȣN"v <o5V[JvI*8{~",sm޼2.xSƲUbfV[}Z\QTͤdݾna^ޢ(tRFUA҇j~3"-KrL(@v]L^G"c g ّk/DoYd|Fd)uovC}He>ũԐ¶!wٙ\dzpأ98"|V^!/$,vJnx`ob8&)EuMKNNi.NlTSr'#d5|:.V\:T_|^:vڒrw_eX8|jƶOD}̊gPnF'76UNUu>p輯ƒV=rvb* u,hwbH–Xl;Ӹ/srOwt*5=,HKN~|/}'nF3.=-F_ֳפ66vTPdpVU>Ky^mDŽ.v~alBN{q9>/c5OL}[֟c*e})H*aG@cx;FgՉZFy\O=^OM=tq4Inڛ=U3n,:1r"t*]BNGjV~~>t_˂dYnn>yIv1^("'Ial~7Rs# ?e L=N Z!&,9Γ]T3/ɜrhIπgW[sDD|;󪬇&^ZhBJt^?~RjcGf\ۯ]|6VwWI[G9li$%3EH6y~U#ҫ:)TCҪܩ)ۛ?Nmz}.Uwޜ%\jo#3˄b8<[xڙǩuoKesv:r{#4YFu6ˈQN丿]F@/v 5Lg~ iۗt |~V.s)0MW*װ=mW*74O]O|UPҋZZ,ƣ/o]ܾ^qjNjyz*Y-w#Qsj8WY{}yؿe0-b}-ky[xb5vI865O?䲉n{צq{m**t< ,w†B1Q4 MRXo>H"5z-Xl"e6i4f,werPȨRQRE5rxޫuiΡbO?Zd-vR5ly=WmOڡy%Z;Pf~(~\)=8,*s%{JVemM65h]5e{%/ˤ`pbBnhR#r)yɛJPg#^Zdq(z[M3EЖ}C*nZD^fƝS *9gutZ[&cr-4GGr-dl.em*Ƽ>GgݕG\P!!7ouؔ^1X[m9QMBgkmopm^o|5܎d>.*+>1$dƞeNU]a,[ JVO OL{M;4 .jI>my!j%ѭ8 -'u$IKj[jK햨 =yK3j"Skl>L8K&D9ɽ[jY;qeτ/=`#%N9=hu꠻߬,w{(aqA&3)OvHOK2ݔ|+i'%]nOϼ+[ѼmQ'hOm*t>JWI6hSQڧM6Zu7Ao1oc e*o]9˟Qrڒ^F_QRq7⅚YP;kc?0JyW;WS;ԁ9,HY۲|:wK므qZV_^FWkҪ/8CXlc6>/:J"#gFKOdz$7Q|~NwgyoUFj*ӴTuYyVXA֞`<5[M1k!\zp.'4?%u\m5QLϩ1 ..az噜:V`"v[IqFZ~ʫ(f/v nڦ:cJT?Mϩ)SG-N*F7`4٘= xgtתdz̕:kcaݻՃt{M%D,=~YxƵd~ޮ_dTSB ն o eSU!%TE*~^ME!`ɥ ww9e2q] ?Zb.d"""1ΈRR*Sije_+!Y*(e?z,jOT,¾9Q^j}=sD ѬU]uj0)IcòtD:рLo\RY#b YWPҗXj5wRՖaK Ύ5,ĥU6L{ZwZ3\<7yYm+,{*;:^Ş>mAGkW+[ ?)<)?>*IdqqoT}\T$Z j3Koɫnm G>:mB4?٬|2|)WQeﾻ4ᕨk&ϩd},D^]Y Ʀ^sKt 5TӜ=="Rx gЉAhDUk&6 ˓e=GIʮ4mى04>ʷtAaȘ ZcT=^pdm @|5Ij0`hw'$f_VnC+v>ӵIky~qnm6]*nmHD.hՁjOM `29\gů|D儂EgFۼG@iQmbZDzJjDk*~XoG dG S͊OWNj·s7rdADl,uۥ (x3ud7NmpF6: C6ĞKxiwΑ) W$RO]$WO_p<ߠk&Q _3dt,M"N ]/TZ˨e}=sgm#QRC3RR )]͵Qc'tٲ:H,sęcu}yf C ٺK95]K7}Xsq--eeT򬵳άo-^Wz)s5A{eU*DZl- ̱ 9 SMζOcTCAE@my[ȍA[ |>*N?öuD[06Bu1h[,+̝L1D%mUn{ 9TU4=Q=.]ַ:_DJv>v>ʅ7A83)1` )F&6:G!7)Sy˓]>_telߦNe·v5>3k.w̮5^NbOhy'UɄ!7l dJ/O\u9r'rY[y…b磸Hj3?1~2\*{L!յmN'Yizz5 28(!<LlR\{C@ӯ~:-ZjѭJ˂AG.s/xV5Yq^B$%Y`U܏@}i`֬Z5 ;}@b,)QE9K0ZZ\0:lL X"Fq(#ԁ-_ޅb?X(TGh 6y&anC"?ZY a]~v#$*^g M6×&.dI.R\!PУ$*)A9J9hhU S5TU lJL3TsӰqdnGHmP 傑#dNUDSAi4JC~1sš1#I]oA c#2.VIx/J]&C*12lq8:$S)Ll4N4ImC%[xH*O5N0/YHMQ(:kmx.\!ޟdW1H:"PBAtZ6{WӋ(k7;Ԉ0ޘR8doZIv&*$zI9d"?45_8fğh+a`NYmh+UK{B!=W F&+Aゝ'Hm;zIjl;x{W®X.e3#%W+l*8kR  (_UOJ!@xC=L$:ݫQp$z3;XH]{PMpMZD~q-&&=sa_{+؉K$7ΠqJ{Zs5q@FT_̄j(I}S7)asd miWW<{g MS b4Twk66d:P^;vo%\O{ڵ%?*ɯRH F4 5@N`K1DtFS\P%mS 3;JqSfHV51.|W) \L]^&C:sް}07z4׈QH6sJ$n`z 'U^о_˿ѦtM?N%j1001UճիA?WWм(N0rㅢǯ!* :]&tJSK$..N~Q܆0$ U^C]%Nhz&jhg Nac9!hBWCakF}|/,m12 p_#wnOM}4PGoK ڄ`rŊn.c\l~?MxR*1S,Ф e&\s,\اB._^|>B.:!S~dΪs[>ؚ/+4wMJ@iZ9mvmܝi%1lY^"эIER(ҫ«}Srh!u ?P:>zZ3 0f ߮?b}ԝlB-4 ߋ{GRoٱڠg5sJ-M=u@ r:"K3grǽ^(V͢Hwk)R_ſ,-)6svr4[@{vH?P7 FSZU\U߫޾%wKEʖI0B6;9)Gz~ [,V->Q20kȣ1$`P4ճXJph/_D)K6t;c]twĒb7TKy3&1m,OaK7܃ *hgWRdj2Yo^rϠ:LN r{l2ƿFB>zd:9ELD)` U\a 8xL@3F%Zz<{-K~~S5\ [7NcADhY4bؕZ_SkW5[{x>԰ķvX{e8چC;Q w Ĩn&X}Fm!zl̔-IBVgowC.D>AUzOD_MKrxޔiL"9_Nyit耭{ ` y#&\M޾6z{s5I%pnq(uS'x&F{nyy/vc)5G-@HwW:l]hܺq׍(λRv;yzLZ7gi4 tgqu}/p%`&ut8܎SG7O.j|}ВPXc̈n/Utf3zXWHpJV4@{6@`@^Ck-W53ɤmOAW*_l4k!̾az "$,G^ћMPCw4B/cg%`wN{!W@(nnHr^V kGkPg_7h{7J=GĠV_u* &òDYvG'ߘۻ ]ཫ_GuBUmi`]>xMXjfjL6; 0U u$ v̎˖_1t"{ :`6 ɵ[ZXjGtњXZsY^zw=o?$ڧlػDifzT1[k{{`MoC߶8VO5u^=~b81 /17/X[Qc3k6Z8= N_o,\1}]IC52aUl8faSS. ':c NWUc¹]J:ao&n4*Q?|3~ ̭[i(J%3EkQ UVE{"wUHJeq <;][.C;&Bw%3R*$qzʍF60cr%'"ʹC#K9ZkeCZ~"*TU'W uvx35x|wT1#<Z}h?)9씮V@~/ɂmT&Ѓg}.Oְn|h9W_IMƜB+kb|R5+a ͠H%Y(&BhtdqQ] 2 ֤/rRp~?gkOC5H>L^DTj[FM]p&EN ̿fU-ܪ+t2LTcъQ~,&i&{=w(r R͇MT_4ڋ`Ϊ! dRP+Ejv#'K0d]ңi VT)uCx .NJgT.(q;6ihcW0VZfJORAn'|6$mQ9T];xkT`4]e8_.\&^`)!^Ix'dVcoԼ ȿlt{KY؎ëݿա>11!%,mJ`B1%KMPĆ?J&GK)Q\GV1.bN,SD{@J$|A%?ǃ,~ݾ  !!5Lg Ti֝8Fi{U$(6&gQvVg-2/+#0`MSW(H6:^EahJz&?OVjZ~}+|淫_z!w Djj?<2so[4~>L+ǚD6EzGU-}~cջxc ׆P.cF) 'D7X:ū~1P*cv2-0&2cC~R%B'm"!RS(`nOhۃZm;5t [{r"[atcE1y;dOMsT)ۼ?_dHUh R:9oLs^j3D+.lH!][? L5֕=J'g׬Z!좜W#}r9OrFRkJak@%NrqyQ©-"$gkmT5r"> WճK%^5/76yԨNd)r+W4#/*Ӌ !Yd JbFl/<MehKٖ3a}b$cDS%IڀFb]^8awTwd$jm:fnsDA^ S>qnoXȵpwaJ_׵ yљ"1J#˚ ޢ401 _B;,4:JXU48uM6q7 (9ˠ)w3yw~֬uEJi&#»0QEqO ;=.0'&~D\ 㢂#{ UE'ԙ' I -|P0]īy0.6;H1$b͢ Mz'6TxbB0,Juãj,~"UԨpu'Ó_szZכh+0QUX;/6V+A_ :qW8bS\alH ]E"]6_D$%$hp?>H$hV^v(g`!)7_{߰T¸#G{ g}z=~-:/8.`zI6FaLSas FĄ/iWJj&]ֿؑB>i7"d'!ۚO6o_,ʿ8Ω!35^ @m'  0[<AIM0pp${蒜Vcg 2mwktaKgy<pj=+[JF;BБԨtjSD~=nOː1ނFQf=gfί%A7!hPRƺPI[/„QaWiܗYyf8$R5khx~ai}3p yط",ׂAQPԁ h7*Q ũ+4S_L<\N#OS!Eh '9# r?_c 3okUZq0f;ͽorGqbh1 j_0XJHB %qpx+uZТf1'uk%VkquM3Ly爴:O*@&:ԾeDzDO SC >c'mqx%ޚ=:/w:B-7!6uS +6fFyug3Ҩ $m]bm]H́vˠA|23s\+?a: 67v^F$@A_rBU+ɤLmwmLTJm0,Q&p;1(= ;:NcAM,YBB\IX?=Uy/Mr>"V[P6)>?E׉_F 6O|52,њњ4 XPzIߡ4M$VqM-͊i1Q9ݱTOZw񏉘 p2"!9/88mG^՗3Mq jx2P(jgQ&W+GF ^hf. C,XˎȞy .=fLI on#I54ϒ#EpkܹtC/Y2\p!n.e ^_fլțqb.MkD(x#׎ 9c9ᚩj{sw Ҽ<3 Uz''6Щ'uȥ歠 0i Bxj:p/]T[qR k ML\lngPzԄ- ~dH-RGuxV$c?v;?GSm;,9^C`x(9s޳pbO26mttADkLD زו%lьoETuK'f@+V&¹$ኩoP/zxm r +pZ¶uc~McaUQI[LĪ4̙#*ߜy@X+ T;} CUGJaeZpk?55IWxrjblB&LwoqmY^q$^?GtSSSQ?_?l՛e>^./(ـ ?QUN4x{ 7հVs'AK9p ՞ : jiE/ɸI9lt\VW\#P0ƪaϟrB𤚯3tL2k4S\ÐJ^?9&V>q`5HZ^ i3gSY)azryy^Jn7]g_4ҥ{nSp%}`+>;c|q q\an|,D{CУ?!Xr7fUw+ VMJeh9>j`5CF_&|0MHh}UV{wp*Xa"eO`XM .UyףɎ[~,Ov1Cu%zd0 =;_ 5Nl<A R)!RT %c%Rȣ P|/ܠ " iÄA;ׯ>oJJ=NGx%dEbHe+&LA=rs;$yJao/C& .2jpB\ds,H=ZT~ !"[r?cIuECqi@E#HH0~cZ5}Kjsvj A*̀鵷-*P?aZȢ 6*3Nyodvhi3{|5{ w3N xo"}dPJ gxD_Yz` q@e48fQ68^˚!ҜSFu[j C ᬩ^mgUh@ջʈ؛Z_Aĸf#T`^lD~m3ǼU ྡྷK'WdaAqo@1h9E),'9faqbp$e9egGqru;!DK}<\),&g$#p:^@x7߹4ObCidodؿ/XjX7 `Ը.n1fU>"Sظe˴nj>QPqE{NPPP i>1T(h%LDLX(54<6w0pwwz7rJy u0oRB Rx#9v047WyAD HL(pL$%83r; ^9{uo/ ~ AX@@ߜ]_*"#/JJJ_@$