container-selinux-2:2.168.0-2.module_el8.6.0+944+d413f95e >  A aWU] ]F,df(ho`}vč6 6 mĝ؃5d:SM`iʃ8^ҟ:vԾ S0/f5Kr_εr2r}/9#Is0zȄQU#ۺҔP>Gҵ r7Vg)kC. 㺕Y)o tYb745Q쀷LAdܯy )Q?O=v@j'NTQ+1'lz-ͤOIk?v1 pv%#^?liTP$^-h<rk"{_.C)ZYb.SE(-Rf`ƀ /Σnsr_}#S8ǀzv9D5rfxSc0D[qPN. :0^~ ʸUD۾T tAςJ;U`}@;4GQa11c93bf0218f32c5249d84a778a2db1cb95b83f70dc4f001431792ff39bc5857cb87173cf95c3d2d668d37caa05c1c5185f71e0<aWU]_SlՒ"a/ݧQ3@h^Ǭa+ 0`+g{Ըfǯ"w d |rɐe]Mg95,;&(B dxk 7L"z;-)_{Yo͚YwYk*kV"v!D)ĿO'P` ybGq ^FOUEj75x-5r 1ɪ8I8M7,b,fDZ3{0rk>Gv xb&Uop7A?Ad< @ h Aqw     (@(8p9p:_pA@F@G@H@I@R@\@]@^A:dA;eA@fAEAHALARAACcontainer-selinux2.168.02.module_el8.6.0+944+d413f95eSELinux policies for container runtimesSELinux policy modules for use with container runtimes.aUԦx86-02.mbox.centos.orgCentOSCentOSGPLv2CentOS Buildsys Unspecifiedv2.168.0.tar.gzcontainer-selinux-1957904.patchrhel-fix.patchhttps://github.com/containers/container-selinuxlinuxnoarchQSeaUwaU{aUwaUz53f5a4e30667ee0baf37ec7256cb66c05b2b2afd1a3338cdee6c4685be5a7badfa0796a183d577407b3bebe43ad40f83aca8e370377edc960bde99c84e8850420b1bd861e39720fcfa2a64dd84fcb4b4f347e65583ffc09ac03bc3529e045b6676406c8f8edece4165c84893a9e2277c4dea02442ff6997c63e46f12b72a69bf mockbuildmockbuildmockbuildmockbuildmockbuildmockbuildmockbuildmockbuild  gitpkgconfig(systemd)rpmlib(CompressedFileNames)rpmlib(FileDigests)selinux-policyselinux-policy-devel3.0.4-14.6.0-13.14.3-9.el83.14.3-9.el84.14.3aI@aA@a'@a&0a /` @`9@`Ȗ@```q`@`@`N@`@`dd@`Y@`&m`_T_`@_%_%_F@__"_5+@_16_p@_5_X@^n@^Ӝ@^@^^k@]@]B]]@]|@]@]X]W]R@]@\M[[ͻ[[@[[Xf@[L[K7@["X[@[@[[[Z@Z?ZZZ%Z%Z@Z - 2:2.168.0-2Jindrich Novy - 2:2.168.0-1Jindrich Novy - 2:2.167.0-1Jindrich Novy - 2:2.165.1-2Jindrich Novy - 2:2.164.2-1Jindrich Novy - 2:2.164.1-1Jindrich Novy - 2:2.163.0-2Jindrich Novy - 2:2.163.0-1Jindrich Novy - 2:2.162.2-1Jindrich Novy - 2:2.162.1-1Jindrich Novy - 2:2.162.0-1Jindrich Novy - 2:2.161.1-2Jindrich Novy - 2:2.161.1-1Jindrich Novy - 2:2.160.2-1Jindrich Novy - 2:2.160.1-1Jindrich Novy - 2:2.160.0-1Jindrich Novy - 2:2.159.0-1Jindrich Novy - 2:2.158.0-1Jindrich Novy - 2:2.156.0-1Jindrich Novy - 2:2.155.0-1Jindrich Novy - 2:2.154.0-1Jindrich Novy - 2:2.153.0-1Jindrich Novy - 2:2.152.0-1Jindrich Novy - 2:2.151.0-1Jindrich Novy - 2:2.150.0-1Jindrich Novy - 2:2.145.0-1Jindrich Novy - 2:2.144.0-1Jindrich Novy - 2:2.143.0-1Jindrich Novy - 2:2.142.0-1Jindrich Novy - 2:2.139.0-1Jindrich Novy - 2:2.138.0-1Jindrich Novy - 2:2.137.0-1Jindrich Novy - 2:2.135.0-1Jindrich Novy - 2:2.134.0-1Jindrich Novy - 2:2.132.0-1Jindrich Novy - 2:2.130.0-1Jindrich Novy - 2:2.124.0-1Jindrich Novy - 2:2.123.0-2Jindrich Novy - 2:2.123.0-1Jindrich Novy - 2:2.122.0-1Jindrich Novy - 2:2.119.0-3.gita233788Jindrich Novy - 2:2.119.0-2Jindrich Novy - 2:2.119.0-1Jindrich Novy - 2:2.116-1Jindrich Novy - 2:2.107-2Lokesh Mandvekar - 2:2.107-1Lokesh Mandvekar - 2:2.89-1.git2521d0dLokesh Mandvekar - 2:2.75-1.git99e2cfdLokesh Mandvekar - 2:2.74-1Frantisek Kluknavsky - 2:2.73-3Frantisek Kluknavsky - 2:2.73-2Dan Walsh - 2.69-3Dan Walsh - 2.69-2Dan Walsh - 2.68-1Dan Walsh - 2.67-1Dan Walsh - 2.66-1Dan Walsh - 2.64-1Dan Walsh - 2.62-1Dan Walsh - 2.61-1Dan Walsh - 2.60-1Dan Walsh - 2.58-2Dan Walsh - 2.58-1Dan Walsh - 2.57-1Dan Walsh - 2.56-1Dan Walsh - 2.55-1Dan Walsh - 2.52-1Dan Walsh - 2.51-1Dan Walsh - 2.50-1Dan Walsh - 2.49-1Dan Walsh - 2.48-1Dan Walsh - 2.41-1Dan Walsh - 2.40-1Dan Walsh - 2.39-1Dan Walsh - 2.38-1Dan Walsh - 2.37-1Dan Walsh - 2.36-1Dan Walsh - 2.35-1Dan Walsh - 2.34-1Dan Walsh - 2.33-1Dan Walsh - 2.32-1Dan Walsh - 2.31-1Dan Walsh - 2.29-1Dan Walsh - 2.28-1Dan Walsh - 2.27-1Dan Walsh - 2.24-1Dan Walsh - 2.23-1Dan Walsh - 2.22-1Troy Dawson - 2.21-3Fedora Release Engineering - 2:2.21-2Dan Walsh - 2.21-1Dan Walsh - 2.20-2Dan Walsh - 2.20-1Lokesh Mandvekar - 2:2.19-2.1Dan Walsh - 2:2.19-1Lokesh Mandvekar - 2:2.15-1.1Dan Walsh - 2:2.10-2.1Dan Walsh - 2:2.10-1Lokesh Mandvekar - 2:2.9-4Lokesh Mandvekar - 2:2.9-3Lokesh Mandvekar - 2:2.9-2Lokesh Mandvekar - 2:2.8-2Lokesh Mandvekar - 2:2.7-1Lokesh Mandvekar - 2:2.4-2Dan Walsh - 2:2.4-1Dan Walsh - 2:2.3-1Lokesh Mandvekar - 2:2.2-4Jonathan Lebon - 2:2.2-3Lokesh Mandvekar - 2:2.2-2Lokesh Mandvekar - 2:2.2-1Lokesh Mandvekar - 2:2.0-2Lokesh Mandvekar - 2:2.0-1Lokesh Mandvekar - 2:1.12.4-29- Start shipping udica templates - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.168.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.167.0 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.165.1 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.164.2 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.164.1 - Related: #1934415- fix the build of 2.163.0 - Resolves: #1957904- update to https://github.com/containers/container-selinux/releases/tag/v2.163.0 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.162.2 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.162.1 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.162.0 - Related: #1934415- do not use lockdown class yet - it is not available in RHEL - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.161.1 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.160.2 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.160.1 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.160.0 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.159.0 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.158.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.156.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.155.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.154.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.153.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.152.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.151.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.150.0 - Related: #1883490- synchronize with stream-container-tools-rhel8 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.144.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.143.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.142.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.139.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.138.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.137.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.135.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.134.0 - Related: #1821193- synchronize containter-tools 8.3.0 with 8.2.1 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.130.0 - don't use macros in changelog - Related: #1821193- update to 2.124.0 - Related: RHELPLAN-25139- implement spec file refactoring by Zdenek Pytela, namely: Change the uninstall command in the %postun section of the specfile to use the %selinux_modules_uninstall macro which uses priority 200. Change the install command in the %post section if the specfile to use the %selinux_modules_install macro. Replace relabel commands with using the %selinux_relabel_pre and %selinux_relabel_post macros. Change formatting so that the lines are vertically aligned in the %postun section. (https://github.com/containers/container-selinux/pull/85) - Related: RHELPLAN-25139- update to 2.123.0 - Related: RHELPLAN-25139- update to 2.122.0 - Related: RHELPLAN-25139- update to master container-selinux - bug 1769469 - Related: RHELPLAN-25139- fix post scriptlet - fail if semodule fails - bug 1729272 - Related: RHELPLAN-25139- update to 2.119.0 - Related: RHELPLAN-25139- update to 2.116 Resolves: #1748519- Use at least selinux policy 3.14.3-9.el8, Resolves: #1728700- Resolves: #1720654 - rebase to v2.107- bump to v2.89- bump to v2.75 - built commit 99e2cfd- Resolves: #1641655 - bump to v2.74 - built commit a62c2db- tweak macro for fedora - applies to rhel8 as well- moved changelog entries: - Define spc_t as a container_domain, so that container_runtime will transition to spc_t even when setup with nosuid. - Allow container_runtimes to setattr on callers fifo_files - Fix restorecon to not error on missing directory- Make sure we pull in the latest selinux-policy- Add map support to container-selinux for RHEL 7.5 - Dontudit attempts to write to kernel_sysctl_t- Add label for /var/lib/origin - Add customizable_file_t to customizable_types- Add policy for container_logreader_t- Allow dnsmasq to dbus chat with spc_t- Allow containers to create all socket classes- Label overlay directories under /var/lib/containers/ correctly- Allow spc_t to load kernel modules from inside of container- Allow containers to list cgroup directories - Transition for unconfined_service_t to container_runtime_t when executing container_runtime_exec_t.- Run restorecon /usr/bin/podman in postinstall- Add labels to allow podman to be run from a systemd unit file- Set the version of SELinux policy required to the latest to fix build issues.- Allow container_runtime_t to transition to spc_t over unlabeled filesAllow iptables to read container state Dontaudit attempts from containers to write to /proc/self Allow spc_t to change attributes on container_runtime_t fifo files- Add better support for writing custom selinux policy for customer container domains.- Allow shell_exec_t as a container_runtime_t entrypoint- Allow bin_t as a container_runtime_t entrypoint- Add support for MLS running container runtimes - Add missing allow rules for running systemd in a container- Update policy to match master branch - Remove typebounds and replace with nnp_transition and nosuid_transition calls- Add support to nnp_transition for container domains - Eliminates need for typebounds.- Allow container_runtime_t to use user ttys - Fixes bounds check for container_t- Allow container runtimes to use interited terminals. This helps satisfy the bounds check of container_t versus container_runtime_t.- Allow container runtimes to mmap container_file_t devices - Add labeling for rhel push plugin- Allow containers to use inherited ttys - Allow ostree to handle labels under /var/lib/containers/ostree- Allow containers to relabelto/from all file types to container_file_t- Allow container to map chr_files labeled container_file_t- Dontaudit container processes getattr on kernel file systems- Allow containers to read /etc/resolv.conf and /etc/hosts if volume - mounted into container.- Make sure users creating content in /var/lib with right labels- Allow the container runtime to dbus chat with dnsmasq - add dontaudit rules for container trying to write to /proc- Add support for lxcd - Add support for labeling of tmpfs storage created within a container.- Allow a container to umount a container_file_t filesystem- Allow container runtimes to work with the netfilter sockets - Allow container_file_t to be an entrypoint for VM's - Allow spc_t domains to transition to svirt_t- Make sure container_runtime_t has all access of container_t- Allow container runtimes to create sockets in tmp dirs- Add additonal support for crio labeling.- Fixup spec file conditionals- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- Allow containers to execmod on container_share_t files.- Relabel runc and crio executables- Allow container processes to getsession- update release tag to isolate from 7.3- Fix mcs transition problem on stdin/stdout/stderr - Add labels for CRI-O - Allow containers to use tunnel sockets- Resolves: #1451289 - rebase to v2.15 - built @origin/RHEL-1.12 commit 583ca40- Make sure we have a late enough version of policycoreutils- Update to the latest container-selinux patch from upstream - Label files under /usr/libexec/lxc as container_runtime_exec_t - Give container_t access to XFRM sockets - Allow spc_t to dbus chat with init system - Allow containers to read cgroup configuration mounted into a container- Resolves: #1425574 - built commit 79a6d70- Resolves: #1420591 - built @origin/RHEL-1.12 commit 8f876c4- built @origin/RHEL-1.12 commit 33cb78b-- built origin/RHEL-1.12 commit 21dd37b- correct version-release in changelog entries- Add typebounds statement for container_t from container_runtime_t - We should only label runc not runc*- Fix labeling on /usr/bin/runc.* - Add sandbox_net_domain access to container.te - Remove containers ability to look at /etc content- use upstream's RHEL-1.12 branch, commit 56c32da for CentOS 7- properly disable docker module in %post- depend on selinux-policy-targeted - relabel docker-latest* files as well- bump to v2.2 - additional labeling for ocid- install policy at level 200 - From: Dan Walsh - Resolves: #1406517 - bump to v2.0 (first upload to Fedora as a standalone package) - include projectatomic/RHEL-1.12 branch commit for building on centos/rhel- new package (separated from docker)noarchx86-02.mbox.centos.org 1633014950container-selinux-1957904.patchcontainer-selinux.specrhel-fix.patchv2.168.0.tar.gzcpiogzip9utf-8d80cd694b5b608f6a3d5ceaa1d51776a24e0421dd473c0a7b8ca9e8bd0fbbb3dcontainer-tools:rhel8:8060020210930144226:2e213529?<yxҟg/PBRFca'1h"0m)h#B8%ԏ-aH es/9Om_.8ka0%"T ,X'L,͙;(d8NwitĀ:;-ݟ K쇄)!10#^PM( |`ǑJ,$i4&NOtYL d'0 h R椆!SG:*!U T v m{}91)sO< ?V@Ё8 ՀaH)A bX*B:Aȿfi@UX" D ͠ix:]Yr ÀqB;hL}DlܶH* s !fJ&ӽd͖dGی`| X4x#,/4Drgo#5 ?˓c ܔ ` ?t^u᧟O Ƥ; Ј.@,t>rr-AOM+Ou{u:z߾M?`=>Py+h\}ֻzH<paNh `JO8Щ{H@/%sjh*F$4mƑφU\Oƿ]~w ”_&W) LO$2S 8ŹCY-cT;`j.tW1Pܙ=xq:یuaN`矅KhDBAit@j81h` HB Z (́@0%]A0d5# T+@@%T@ĩԄ8D>~ ʠ3dj C^<.o0HyD'BUAQ1CO& \O` r'\ax*:=1DOqF*'?ӀA"PSaJ|aO`b% 3GcBdF+Ȅ?@){4F_"!i yD=y I"@<؈)M#30%.Jbh < (`\"}޽]v߯1ӊPZex^f甉@o`tS yc (<꿏'8ԣzx 'ߨ߈PQQPTOiTRCQ)Ӟ狩@Qi+'U3){LLL ?s)T0L",;)=:<}=]b≘ROs'adTƟ//:LɁ[9*]թ1Oj)*RY y< ˘Qc@B* MZi\OmrPC@'jϤ LYxhGD`}+ iCͬwX;{/Yif@)zs`?@} E@4`@t&5]Tୀ5Nt-}ɢ,I'b" y4~N9M5 BS:yN}:x2,+G~3A>eHPQgVH9`"- 6*YtD{b<#jڂJF!P=1H, #=S|0@̚2K%Ѹ)^t N{F'߫%9E6&@]3U Mb  .۹;s|Rx7< ~n_RRajsgLy*!)d #g%C| L4 q:ϱ!)U;kƨg) <+r͔~jq >49 tY1%a0ؿ#ʿbY|E3A$L"ooV/x  `u/T,1b}2=פ0mx̘y(nQfHTPiA0KQD 'bt0Z83Ŏi~tƃfveC,њ8%?:_zk2D]]0oɘ{,ez N%O ϊ݁}tkO2<mИ) #D'ۀO:D ;ĕB@ f*lg h|_6a\A?5F3(JLf6p :S L35QXu/kY f2kC"~1'/ʿEu*K'˳f&Y.8u,Q2, 4?+c;Eǃ{X>3R3|+aׄy2u tt!Nxf.8315&H+iNfzs>G< -eklY=qSqD|U"[SNdyqZ~a/p40YpiJ0#{> ~7<40}I3KrBaÒ`vL/S b*V9@clN8I̠x*unR dr;gҁPOі1K"pǭ$E%R㝻}'KS`΁ϟu;R43h2av쇋0fc 0+`Gyyi VL™Ny`rp@I|0K(0v ~N5eAt̍gQ?xK08eNeYT4s?#@ϩ)pH%*Qhej,*YYNU 3lJ9JРYv1 X$2;-9Ԝ7,5!_5(x*18N]1UI^sƺd:aK<Obzj`i^Y3uHOٌY! Y=7aFpЩι1{)L1kT~pJ@sJS,t*#80M$J1Ǽ: ncdiˌD p8&( 3/To[F»Nc )h*3j,n~IyӪwK̽ e&rةTC()))`JH$B8)C%sY"{YYཬD-5-s׷ҥ P.MMO;Mv7@tHJЄq=}7~*`Â;4敩P/[l ;S}XUH BN*w_K\a .6*\Um#btx\K o/|7=kx)yl`Ёk#.WHi DWg}QevMFߞ VV{Rz*kLnPWUlo'a/\;15enoUo%/mu >-QD|/|[kroN^Vlķ@dϺUU<''{'*&<#UZ?hP?xcwdVɶԾ=>t>H.Q9ifjy]Ώ>Iao l;$dY)^"]ž})CE.®4&n>Z61 &8Ug]؍p+L*r-v[3^QPur2+sZZL^9V4>9yǧzȫW٤MV #a/F\,Am#kEw>.sue^D^=|Ŕ߽C+wwLU(70 S>s+{M'gcqw5U? WC7Zs1^.J}6hl`PMÚYИvgˍQc%O9hjזb-4|4ز6V YVLuFF׹oJʭ]4 Qjw()O2>) n+\eaTݬTzڤ⡝麼:wg VEd<kǵn =Ҋf \;&=ud¢'.+7rB l&V현 [ G;g f?]dx5<ۡkָn@(Dk|~غ;n+د\bLoS%6,םURG%닍OzûJ !7 :/zAj!r՚AI dZƠt1>c's^> ͷ4zmτ[tVu"?UVKNٿ7HQ?׹s𮳉M:ͫMba}Zd|en=y=Jbůe7$I}e+f(G㉾ ǨS'ae  f㪌t^Y^ ?#.DzÕӓ}+?|aMueoSeNJxᣍWR6fYX hr]_es-|^G VT y번/n\x{4MFomsK1oF\9k. :tj{{ݓ-LjMQS|l@tܫPmc?w:݈u#rEwɶdDxpކs˂sP]9Ӭ[J,Wuʀ ^je[%1*#e12 n/9fO;b]Ŝjc(k |eu T :8X5 wdg-764EzOy75Ef~kQۇ{ >]%pqA5 ~ѷؐD)J>#[ݨ-$h`unD7^N[6OWqȮ{x|8u͖E Zٙ|u*%NJ5tCNy5ʐz8Lm*|r҂za±OcT> [)_x@G3|c.#n?bWV{xO$3kq|VSFLR›2-;YMZ߅<дԫy:e{}QYbP`ɪhhex' ) Co0rU؞}jh{7Lgg y']{ 5o^lZ3pj"Gpﻅ D l\wY=A|#$fX1 C:**%ֆ<*R-x?UXܚ|)o,7g_]⡱Je8uٵsWlRra Wxy5Dr7w-;@%D\LbÓ uLׂ/ktshz6h~($Z{C;6cpn+J7hZԟč^v u.qGEMGWt/ ;_~0ҹ于wmAKYv 0Lq\:pab[|9;$,c$C!lخQNMOoz٫]BwuJ3[ >tw}mZӂFk=6^Y9ROjԿ2w:)ҷR2t]`Ke}P=ٺFiNFڳ֪؋XiwcTpZFb5m(**S2]7.T X?d_&t>q8X?Jih;cW\Kˉ2Z#m^'"~F$HH^ܖ+Xj9j]KNĥ7Ksոj-otӶEu\k<ǿXppiqcg^,]Bz R\9[/ rA XmXp{{M3ۣ[l{v%^.8E ^gׄjm`i 4ͳCn._5ݫlq"P(n~FfsmƧsp%h>"׾}>(+q}ɁEIPSumڷ>6h쩶̋al`jhlRmR#N 4^~⭨8&dk(5,'Q_OT(C=䓻aϕ<-$~+'KdЉ49v/R͑UrQW Q %* cכ(o] )>ޮ2-9}b%V~kɼRfd8Wc![j'uy?\Ga-C {)g`UNe ݚhԩhNn+YڞyySR|IGQμx*0 8S- -c1[^_ )>3q;Si?~D/VV76?K[c :tr0KSrz)T)ECql.׮W>Z1IΒ=A%f!=ǻiG?fhΣ̗g1V~A>ߡWzR <$s;EoWۦu2vUlv_ؖ(PD.wҡ;2#-T6=zZ89vkT-r2|wR>R_2OJ=J&>bbb[ Slbk<9Q$L5t5Y;Drv>P?XPXVH4(X QaUrA0_|i&=r^6{V5PV^)̏zyֆQ{Ll$$"e}f&$ iF?  v:&^cєvxG:!8; `?B64Dz^/ǻvGGv[XSӺՑԽܻgǹ ܸxiymFj8Q y[OG,ߟ)jh)f~'X~s[ЍLywsG־x{<>c#k=Xt;1?sxva䲖TDu=;4qBSP{-ot[7_ur:\q$A?AӺdN^R|դXom#m͚[}rj.Wؖ30%5XksA8ưgÏ/ٓϜBpZ'2 Rw < :hTI?SGaU=F5KuλBi {6^XwRZbHEEמtr[mսay!lCёCf\vGGQ"/iK6*ïGmrp y o>KiwIHB;z@&†C[6w$/Kޗw=.5RTcbq5.{aE|zaŭیQ&FTض8kۛ^?_({+pEΧ<5U8GZE'NkzsCmEhgĭXBWۮ%wPGscJ'‡]6B}(RӄǨ[ G>wvw/cIpOOcQY_n҄>:8[_liӿM{i mOc8~ީl뻏_}Z<.e-x/<4?# _Nzu=nqIĕ׊kzo[ǃ)W>:GlV>ښMe o=["ǵʈ'~/- <?X?MgGi__Yi2 #F^z- rS)!u@WZf䆷 /*.m2t~>Ԫ\xKk]Sϔ&cE[XcJ|A s_K.*]z=A84t~<%Y7aG0n ,8ras@siÎX7/6.v)*jI ORxu'^xCOwp~Ү|` d7czߍ$/ oX 4wQn }h >iNW[=շ{-\F}ۋ;y?dZ7 KKE.qVs+0 Ŝж̸}jY|vg5#&|A9fd}]7И~~yQ6åEo'Yo%ӯ垵r[_o3jH\1QMA5fa~Զ2ɡ Ѓrڰ_±-^ck_󶃙W^D~---y-^a.z.bZVeGožO$?& ?Yr;y ;ѽqt`}Zb3|kηY޻}Uwlt?1D"Y+ά\& ڃUaSdaAx{~e~H( pHORrkb'\WHme"0xjqX܊.R.!1u{zu*9ݖeډx.bX(5Hddo˛VxY4&?qG,cWtºֱxrdmqZVo.T`sQ\fبfOHFߜzS {dKR=;ٙ/+[̂/_ -]' .Rn0#Lev ]tVjÉ*+#;ѩ޷NN<^"cw\ (@SHss@BBsRI-o˨$/vv\]T~ևa(oQA!~ddX|Zna>X*T It喉~N5O^-x'|Ƣ7dquV^{ӎ #2_zWr ۝"V;mN[& G;kC+7[7?)֧ZQ~}v={O25b5>8} v%S%dߢEKGݔ{" z^Z$dmqgAV^Hg(ow'Z| A1;5aWT:/!!%T큸-]ݎ pReϢqR9p / ŵO-2:ٹ0z)Ix^\pבq^dzso/c{ת4ٴ&hdfZ&ʝ\mpoi힯j_sMiA91=+Js |Ѕ9=l+j >exw ]׽f6`؂m ޮh):0M5 veMnC6RhBazِ{ HŞCkH 892y.gkR{$9Y{fȋ{gJ_|UN&]%u ]VPکzֲ;y/20KK3y1wM}@hnX`19—jɱ]xuf]ž/k%LzlqP&?WjyTTX˷ZNB_Bl|ѡEwhnMU˓xѾ'I6>qޔmAOk`ZK&Q&\0"=i5}!9ZFB+ 9$8,p;?0#}u>/@]ml(Ϟ~҃]yPp+J}}ՈX`p^OkMZ/༡=oC1ݟ8o$fn ϱ0⋸K/G0R_W>rs$XGRh]#X{/Ԯnz<)fHm{|gfq',tV>d},S! )c+t #AQ/~w_7whi;b:\avxiq$,4 %Cuf~$Hg8eF['=Qf+o`q#t] 02Y|ާx`M8K.[UV*2z $!sG0wmx0jc] xfzUޙBfK$cwF]><\4 @BWcۺ!ã٪~7i^@u,r 6M}<PJ=X_JsݻjPӺog77/ Jݓfv]uf-9>c *Wbgܟo#p`ENaKP1,YK6]&Z`9ܫU Y)ƶs8_t}_fmBB?kVևh%m'+WmJA4MU[j:*jaij:%0N&}>T؂_RPg'2DHGJg V4L&]{&x~MGkJB&<KOgi8 F`c"Eay%WQYg¥TUM s/6[~siVsr>nw5y '\dܾ%rnݔz˝nJ6 !TQPQh㘚.#eO[yH@uiyN.IQ9o`,tV.$^F{;ѳ2z/$Omߖ; ȃתΊ{4Gaþ2ڷz#r>d}ޞn*= ;mԆ ۷_WiA]8o9KQbw%3|y ͶB%҉ ]yK/an^'~2>rY!od'vSSyO_*SIu|Pot!枠.)}})qŁˎ9E+"/v4rs'@r٫JH_b+ R#?i\pRK jɚo--=>tI@78J3@/]t{[L^o{Mb+ع=[C%C7;|}q\uO˹8}5[fy$F-Gޜ8JY6~=g̕eX mc|%|QÁ7tH6cK H-I]9>jˌ]A N k8⭬R?UdopЅ%^r~*5ڣ^*u ޡNnp%ވ]|ڌ[ިݽ0f9Y^=1o_%۔>|J -\F]O}x^ P, 2_([<&._l!n{-y,ޝcF(SEyK ҇2~rNPl-;ue5T ڝ26EYhӣu*ؾiA9OtZeWdW}Rw"o^B5]euk^§ĺ! }M!=A|mwuA i ZI5YoʒfڟcTJ!5C__}P/ш-=^rцHވ__qX$zщ/lO(Y} 3.=5yb_c v MXO螸nvGn*w>5^DfK ڤ~AƠ.uPKÈwS7C kIcsۻ|]ɒ?0ծ vAk{d|!QW@'IZ,8H}bX&ͱGo*٫Sۮ1S?DP^JB Қ>^rd˰HHyŅ=L.Gz9t~'1R*[c:7qRX6mbϖo<m SÝDkh|ޯ)sJN~LIOđuF5O*z Mf~;d6h\KYuKm|Ѧ 1-#r+ro Q5tƇ v;pr pݬhkBb;V Y$(s$[GA"C2Lwj=\h>nrh7pkԿ)+gI |Qٟ5>zWEV;ڼVEv{h)֔ хS{΍jr2LRk[o_R_O$]k*4'd u4CfZe$3rb$V@,EAp_q-yȗ)Ҭ/ưf>tG[D BҶ!t\6]3E"+yjenUVwqȇ>律}".{UšhNlR<Du &\5lbps6-w8j{~'JP&Wgt!=t1N 4=PzPQaq0`k[EV莕ʪc<5n&-"#$Yf&Co 섎=\Cu4%'F, jȝґ,޴ mTƯQҾ^hz+m,"nxЄbf!k+<\n]Z [@,SxE@|H3^^k-D5oό+S:_z؉P:DVZrvlJi0a[Vyo8+jٓf1L [0͖#>UbF+N (ؙ1]y4E ؏kvbBh:uUB %S(JUv&wOىA}3ڷ<خ *Xss(%ղx5)Oo=khߥ8vD^FHBe'p&T| rRn#ݍ٘H}y10U;Z绠V_-S/z?Z#ٖfǩS߱>ȳ!O[іKWIbJRޏk Vh:Um^T|O^6-'ߣ]M#Vǹp7CZt`)3ѽKy*m5omǷR΍ٟ.Gj֧jMX?j HaYkeÙN㠌QRvqV$^j&]#De-AW/yHԁi_~'ݙ<ӯ-Rp8UE χϾ%rzU@Wr7`AYr(rRHتk]>06TrvCii$S,^2q5OWoDHegzw?\x!ˑ9 f]ZQܿ df/ =Eʡ>f1rL/>* uݎuZv@'@&ZpkbŚ ՜egNIŽo%lRNdɉa˩-_`A(l;_ z:nIBnނc@g ?'X5^7ArvҎB'_eA':"Z#fpresU>_I -buC?gÄGi%lj-;WK:[bA?%dMKUf}1"NqKCK*Y_{C}PINJg͚ȶMmnB}'P%TJ<zkmTR(y o&b9> ƝGD\)#lcZˍ ,udB`m\XD]x\o RaU'[')#?GiFbHm*涘<7AE p(Đ8_stOlya޲/| 9`׍ܙfEDDP7"Rkbqؔ0qVOAKI]2C{؊Y GdW_֏Iq%ZЈ;"C'EM{A}.6xVt{ u "̦&Ʀ7m~5K43(+؝0EK8J lc idwfR[K| &%tz5PUnBdc\%kȑy#3Bgq}]g ; @iJVtZ2MRRCjTlܿ#N Ek{IX#hT1qANdz<y CT{kRhPmu`MxEA4V\%uXCj)llQ`Mt%^4W|TSW%K `^mo-GT3 鱉=dƝrf- ~uk24p16U0 aĘ`_u<fEWz&R+Ggjo fǘ6>IȤS] Vr,KQlRoقFwB&i>hKL\9PՄ UQ0~P*hJ[a);N; 1] %InKE2"z% ) 0tjMyТƭs[D BH1{ڳ:/[PžI>5:Pʓ%D sB&%=f㜹,t[j38[; ȹsC/Jb=ZTYIo Ʀe w״2u(en1vȖ !4vwޯ ;P.p?A'sƤ9}hJ7*H O)#U7p\{:(WoĒ%i+K)a1"W.:&X*,_^^g!J;s;:Uwv|$yEʫq-)%eE@wm}6L!Um zSy43J` e>60D̦x{҄ c!:8$찈z-Xo%ܨ{0tU: M^X'`Mu,]D1N#Ź6[۠<$ȚũwxXD]% Pɸ|x-uk*փOh5fN|D5ޭ]6] /S;?tΚ Iеy?*fkʹtU78r F#estzg_)]]u䏪*0I<dmji^WsVfV­_EL3#0V}K^xoNѸ'PK?)=&؍46-XC:{pAC r8Ög@*VVun3kx\CN[&Q`鉐@O$^ҭr;~5Phur!Awݶ zP87mǦ 6dPXeSl|ů_ QWxq=lVNȦˇ dL}L@C{ LEd?l_~ʬK=遤25'BLHhnR!Rak2oZ|n9:d:3MJLح.[J#pԘE( vLbdETr>2Aki e̫LxD]ƴt@EInIǬ!uU6<ȵm]Jn@SmKjHc\.Hs˴NN5F yݴ;bFgF̓TjX/n>ߠ s 'o+F&V6~,ݳsU^j]LaR|]:;Ѱӣĭi,<Ko=ԺAs_(lk2YKIцW>(U*"25){0a,jݨ89JՁ>řF\Juip}%qs%Rc6*i)l)(MW̦ )qͭDQ l[&wpʖ妡2RY/U2R(#Hi!P& 2& ad(o)dv.x9%E24,pX1&ڀ'u|f^;iul˰jfG.3#  >F@*N`\iԇbxaRTs͔fj(Edʻ uz#7L.|&l-TUXd5޸f:NoCDDs;z$䍾5euZaK%W_`Sr58-+̒V5aF:j?ߵ o5SRd7iĉ]48Бch%ob@[#Π#%-\y?E$wbWiU ڝ^֤Q0u=Iα\pݡQZcۀh65yTt(7+O6A͍­` Ta]2QoӚW9w5'QM ^0x ЯZZ~_)r4ݖR| &>uIxNr0,Ay!sk~ɪ9duMFBo}m3F?P.+˶D1T^lC k֙YY^hdRQȴd`Ig*@!C ucOV6ɦtNΟe9Vv#镱b#M 21ln0b:0JGRcw)mF guȬrXz?u:q3=\ã¬gbS'uG k!Y疡 ƾ>:O `C}H,YH{P0AB%L%͠A5<,D;Sn7q!4HEqmYcдEj̴*!w3ʴ)hVnX!7`|e҉UMe&J̙Vyc5m E6K)1aRY;d[/9%,6aD|$;%o{̨g[! ؤ{Ļ`FRWic1zDM|-8J-/Odw;,MU<_Wdמn5ٌ',㈄ts7o~na<2A%#xsr jf׷Q)9Y',g;ӻ;@T]׏\ n4b0?׬⹠ݒbsjMI6g׊O.mWڢ &v?V@NOB[?x]dMsh׮T8>~CZØ&{fS Sh>3 !bH (C_6QL5i!gV?s(ڨ[mB0NaF(r 8?3LƦB;+dFAl<نӟu99YlZOܱ6-X)KYh]ys2&!ygހ^S׉_%Y -\/ߋS3:挕1-b[ޫ~ǀ `l Dd.nR_ rIϵ) zeW\f{r}^;ijDBAxւ+avr C*-\y:ZD7zEK[8)vR;۪\ ei2wDND,6TeT a|._+lP`e(5F]zҁV +lNҪ]*=F:A; yO?-kc^ *פw C'6*e2@Y6!3 cnSaD$V5 p-xO@`%Bzٻ%&m,w;>zKgZi%&YEzTge-GX⹻>$vO ] ׷3 #+0(s!<>hJ|`]&?Bngղ.< Wn!!tȾ>q#;i}O3m;.m˕nܧAec쏂Ch(ߢ+&W-fg |==r :Ӌb_:79cPp PD=s&@yf)vjŽ;;*rpDeğ#96#ݘR&H KEhuk{>ڼ-x`!BtZso%, rR s{uJՖtǂ 粦3A⬢ʾy9EG( Mo C;#~%qsx;AnDDhJJWu˥w{2 {\Ȣro {K:~ȱQÔ4AoƑg[1| oJ&dhqX)F9Yc"5_;eV;J(1* @vow[syK;k|o+ELgINkHD͙]B3pbmtxTNL0wHfb]i5kxGT "ϛ!Y\ ]sHKqv^OݓJٍz_ z#8 S,ɬe wuLqGo.fmnqoe o痂Cn~?g'Do?rL6@ /<4T+"PV̠-C X6j')z@H6j$*$ G+׹}M ,8'|QsNz gַ病'?p[ X\:BOQھ"ru\r0mTVgn,Z٣ + zfcKyǡ_|{LEjvGqF%\< *F_kt1g.`B+Q'H#m,u

=tp|98B7.yM{ٿ}!e> * =l| FgYJԅ$Y duW9,d:}r  6^E g:O\ȅLX7LM ,Ҭ=V۪Wf¤z~Q1l _/8Wz"}/2ڽPHZߛeBf5Xa`3ʥnq 9+TS4T94h44$S(-kǯN V?f.:&éi4)ɾ9X;XiNXWf-DB_K7E b".zx -:D[v=7}w}N[Eqioϴ4j-d(l }8 *ׂs!tY?J4پ&&p<硦͢~ۣ a@N kdo*DV9v`ToF(ӟ=}Uދ"/.td^;DߑVvîx! n:8}P]6lauUةT*^!WtyS,! جTȶlu\+}B /ٺ9>a*eaX5?46QfE|duqj.8Hժw<28+!W\Z9luI%x,:12pUʍ+c1Bgy]/W&F`l\%+JXJ?ؙp1QHNE$(zT0Ͻ q:{DIH p-੦5 ~|S ^vMXW=\ [KhI1M*WW|Tb1.RDqTL'bd=we=œ^Zga(6,HΚG[H(4unfn+b/z&6V?$U_0k\C-ipXt'\vH@0RjT( ӀƙfW4=A ȇ-]=3*}ne)YkձF%* laF#+wc',7_5΅Sr7`JeٵzCXWT1AI:z įQPLLz #f=8]azN˰`K STđ5{c(yG ~H@@cJ#Zӟ}drC-YC E}i’ qtLߴ-2lW`kUlULX\y8 0ܮY!.hYd;akH tf' tR+sLW.Iۂ B9mwwԦ;ZhQAN2/w^c_ yʊ+\1F8pC?TwMXUC77#80f7>'/xrрj~ݍu8 /''P 1Pv1Q_*|Y@`uUYswpyO0ط=چѿ'uA&@0򐐝EPE/֬?I"ݭL:?.CCVxv}Α#!Cߞ73Mߧ:ގ;r^3hB5 {@$Kl&sq:{S{M:aJʮʾ,!;`!5jW؃Zd=A I4'wOyV5tDg>+h;!*~'S9ܨg:^>$(괦#x9wgRFK1:I"}71 pW3+|=> "DB pw&ߜl9dYj~ؔm) RQ`5`=P^g  .`̗ή EG vShj"oHA<1k$CH2p ^Zz.!)iZ,ǜ'MaI#&n1aِDYxّc(Ό'-?'H; 2O}v @wN߬*rBF^1a,{tkP]A*`JP0=u^YhO;txn`-Kcπne)rxnY*uTdSj3P4ˏ阜8IPt~߈ŭq&o=:e{vnKyܯ$eyl -N'A`$ͯtb^N3fqA3ȴZ H\DϳSoFu΁ۙ񈤺 (xB/%Co]_88!$>㇁ NP` m"?Gdž_a Tm'v Oj8$|7+02~i#뜖Xt<:x~|} oB#@AvFvۋ+Lƀ;brȜJ~RZ{;1^)M;Ex{BDvXr\;ebbAD(RRtgތ{Xf N,tʣ fgHFԬrܝ9|ܫXFsofia P4KHysYxiׄxۧΘ({@y;A 8s.wy#>+[k>@ A[>ABOH 't8.^Nb^W!!aBBabϞ>{cR :%\1 b6֑ फ़oMo>A0Fn:;:X% !nx-1qle2'~K-+Ը(C JVjv5DӛRɿ$8]J\y1x\/<}h"&ݝzc FZ=J1#->QJ *ŚnEpUH6#X&g-@]zt楬ݢyZ^I^VOaA@xOȡ8M\adة̄@ًag TɭN:tґæyڢܢuѡwCGq {m|Z*u@%~԰vQ;-?Ʋ/Habk̋|tBAΆVQ[U;^ءL{Reu&dIf&8XRZ[; AG2[(9ý`h[&:PVIfꆬ%xO (8+m(5r2xTuvWϘ6.X<$t]>)Y/|+uF%27V=EtU6*QIr|9[unmh5jeyvw;yie\$F _.zѰ/϶ձ@wߧQOO+=i.6 3_E@.CNiWԙY-ItE&.I7V=+\7BflFXk$ >Zx :nzn.Ė~4EGU8Kvpbmag@w QUO?[4W;PM'J:&n*D˄(mO׼tDjP-ȉ8]8y:#uz]KO`&Tηpm4iX:&6s\1%FN&R9u){qQd@;'mX3j @Tm7rw05u}rm=/8;){`#-knu-`5aѩ3~̛ݺׁHH7@z6rB@Ȣk2V52"Ǩ_A{b#wTZ(xF;`+IBh̅#أ@_Lj kpWf*FQMU#k{@l&V5s6c}t 1*eUe!)Y1ebbA/'(