container-selinux-2:2.170.0-1.module_el8.6.0+954+963caf36 >  A ap?U]FHU|Kn ’%`l2clr~׿c><r`zɗ( q(p:j\po k@/bO1!K5PL@IV4`3_+8hAN ;QBEy b1ޯ dh=щ|yXe/ZNlDpK\2$ %I}%1o1. pGZcTk&_$b0ZqiGp,NOr#~9H`WffS nEY:%Xĭ÷J?@,ecjP9,6-Ъ2|<|S;3ec9afbea9cd592557610ed4d08d295d48074141bbb71eb66c9defc927851d7a08795a9c9136c767d2606ff7438023e199cab3ee6ap?U]  ++ RJf'B/iKl 9Wn,§S@i`e6@hO 3{4Jf 3z/ޤ1XC\,K,E҅^%] n\JŠ,bf KwD?ijoY8VJ3U5l:TP|GmA$]G3k"9mN{^dF)/ 5s t6I? I5T pڑs HWc,Q-TtB5P2 0"W3&~ ʺ6Nv$1ĩ[fCEop՚mk 8nUD ɉ^"c*@~QcPK;Zg^ `)ǃ& Qxz"&bh)<5V3Hm/JD}J1c,k C5qa/,b%플RM*Rp7C?Bd< @ h Aqw     (@(8r9r:rAAFAGAHAIBRB\B]B^BndBoeBtfByB|BBBBCcontainer-selinux2.170.01.module_el8.6.0+954+963caf36SELinux policies for container runtimesSELinux policy modules for use with container runtimes.anx86-01.mbox.centos.orgCentOSCentOSGPLv2CentOS Buildsys Unspecifiedv2.170.0.tar.gzcontainer-selinux-1957904.patchrhel-fix.patchhttps://github.com/containers/container-selinuxlinuxnoarchS&Scanananan53f5a4e30667ee0baf37ec7256cb66c05b2b2afd1a3338cdee6c4685be5a7badee80484a2723cfc5a495ee844296c3820c5e617227521151f3d8bfd77ed530680b1bd861e39720fcfa2a64dd84fcb4b4f347e65583ffc09ac03bc3529e045b6618afbb5c7c1bd720acc9fd42f410eb7f81d6fcd27150e71ecc36e7b846366b80 mockbuildmockbuildmockbuildmockbuildmockbuildmockbuildmockbuildmockbuild  gitpkgconfig(systemd)rpmlib(CompressedFileNames)rpmlib(FileDigests)selinux-policyselinux-policy-devel3.0.4-14.6.0-13.14.3-9.el83.14.3-9.el84.14.3a]aQ@aI@aA@a'@a&0a /` @`9@`Ȗ@```q`@`@`N@`@`dd@`Y@`&m`_T_`@_%_%_F@__"_5+@_16_p@_5_X@^n@^Ӝ@^@^^k@]@]B]]@]|@]@]X]W]R@]@\M[[ͻ[[@[[Xf@[L[K7@["X[@[@[[[Z@Z?ZZZ%Z%Z@Z - 2:2.170.0-1Jindrich Novy - 2:2.169.0-1Vit Mojzis - 2:2.168.0-2Jindrich Novy - 2:2.168.0-1Jindrich Novy - 2:2.167.0-1Jindrich Novy - 2:2.165.1-2Jindrich Novy - 2:2.164.2-1Jindrich Novy - 2:2.164.1-1Jindrich Novy - 2:2.163.0-2Jindrich Novy - 2:2.163.0-1Jindrich Novy - 2:2.162.2-1Jindrich Novy - 2:2.162.1-1Jindrich Novy - 2:2.162.0-1Jindrich Novy - 2:2.161.1-2Jindrich Novy - 2:2.161.1-1Jindrich Novy - 2:2.160.2-1Jindrich Novy - 2:2.160.1-1Jindrich Novy - 2:2.160.0-1Jindrich Novy - 2:2.159.0-1Jindrich Novy - 2:2.158.0-1Jindrich Novy - 2:2.156.0-1Jindrich Novy - 2:2.155.0-1Jindrich Novy - 2:2.154.0-1Jindrich Novy - 2:2.153.0-1Jindrich Novy - 2:2.152.0-1Jindrich Novy - 2:2.151.0-1Jindrich Novy - 2:2.150.0-1Jindrich Novy - 2:2.145.0-1Jindrich Novy - 2:2.144.0-1Jindrich Novy - 2:2.143.0-1Jindrich Novy - 2:2.142.0-1Jindrich Novy - 2:2.139.0-1Jindrich Novy - 2:2.138.0-1Jindrich Novy - 2:2.137.0-1Jindrich Novy - 2:2.135.0-1Jindrich Novy - 2:2.134.0-1Jindrich Novy - 2:2.132.0-1Jindrich Novy - 2:2.130.0-1Jindrich Novy - 2:2.124.0-1Jindrich Novy - 2:2.123.0-2Jindrich Novy - 2:2.123.0-1Jindrich Novy - 2:2.122.0-1Jindrich Novy - 2:2.119.0-3.gita233788Jindrich Novy - 2:2.119.0-2Jindrich Novy - 2:2.119.0-1Jindrich Novy - 2:2.116-1Jindrich Novy - 2:2.107-2Lokesh Mandvekar - 2:2.107-1Lokesh Mandvekar - 2:2.89-1.git2521d0dLokesh Mandvekar - 2:2.75-1.git99e2cfdLokesh Mandvekar - 2:2.74-1Frantisek Kluknavsky - 2:2.73-3Frantisek Kluknavsky - 2:2.73-2Dan Walsh - 2.69-3Dan Walsh - 2.69-2Dan Walsh - 2.68-1Dan Walsh - 2.67-1Dan Walsh - 2.66-1Dan Walsh - 2.64-1Dan Walsh - 2.62-1Dan Walsh - 2.61-1Dan Walsh - 2.60-1Dan Walsh - 2.58-2Dan Walsh - 2.58-1Dan Walsh - 2.57-1Dan Walsh - 2.56-1Dan Walsh - 2.55-1Dan Walsh - 2.52-1Dan Walsh - 2.51-1Dan Walsh - 2.50-1Dan Walsh - 2.49-1Dan Walsh - 2.48-1Dan Walsh - 2.41-1Dan Walsh - 2.40-1Dan Walsh - 2.39-1Dan Walsh - 2.38-1Dan Walsh - 2.37-1Dan Walsh - 2.36-1Dan Walsh - 2.35-1Dan Walsh - 2.34-1Dan Walsh - 2.33-1Dan Walsh - 2.32-1Dan Walsh - 2.31-1Dan Walsh - 2.29-1Dan Walsh - 2.28-1Dan Walsh - 2.27-1Dan Walsh - 2.24-1Dan Walsh - 2.23-1Dan Walsh - 2.22-1Troy Dawson - 2.21-3Fedora Release Engineering - 2:2.21-2Dan Walsh - 2.21-1Dan Walsh - 2.20-2Dan Walsh - 2.20-1Lokesh Mandvekar - 2:2.19-2.1Dan Walsh - 2:2.19-1Lokesh Mandvekar - 2:2.15-1.1Dan Walsh - 2:2.10-2.1Dan Walsh - 2:2.10-1Lokesh Mandvekar - 2:2.9-4Lokesh Mandvekar - 2:2.9-3Lokesh Mandvekar - 2:2.9-2Lokesh Mandvekar - 2:2.8-2Lokesh Mandvekar - 2:2.7-1Lokesh Mandvekar - 2:2.4-2Dan Walsh - 2:2.4-1Dan Walsh - 2:2.3-1Lokesh Mandvekar - 2:2.2-4Jonathan Lebon - 2:2.2-3Lokesh Mandvekar - 2:2.2-2Lokesh Mandvekar - 2:2.2-1Lokesh Mandvekar - 2:2.0-2Lokesh Mandvekar - 2:2.0-1Lokesh Mandvekar - 2:1.12.4-29- update to https://github.com/containers/container-selinux/releases/tag/v2.170.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.169.0 - Related: #2001445- Start shipping udica templates - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.168.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.167.0 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.165.1 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.164.2 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.164.1 - Related: #1934415- fix the build of 2.163.0 - Resolves: #1957904- update to https://github.com/containers/container-selinux/releases/tag/v2.163.0 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.162.2 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.162.1 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.162.0 - Related: #1934415- do not use lockdown class yet - it is not available in RHEL - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.161.1 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.160.2 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.160.1 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.160.0 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.159.0 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.158.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.156.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.155.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.154.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.153.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.152.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.151.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.150.0 - Related: #1883490- synchronize with stream-container-tools-rhel8 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.144.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.143.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.142.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.139.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.138.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.137.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.135.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.134.0 - Related: #1821193- synchronize containter-tools 8.3.0 with 8.2.1 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.130.0 - don't use macros in changelog - Related: #1821193- update to 2.124.0 - Related: RHELPLAN-25139- implement spec file refactoring by Zdenek Pytela, namely: Change the uninstall command in the %postun section of the specfile to use the %selinux_modules_uninstall macro which uses priority 200. Change the install command in the %post section if the specfile to use the %selinux_modules_install macro. Replace relabel commands with using the %selinux_relabel_pre and %selinux_relabel_post macros. Change formatting so that the lines are vertically aligned in the %postun section. (https://github.com/containers/container-selinux/pull/85) - Related: RHELPLAN-25139- update to 2.123.0 - Related: RHELPLAN-25139- update to 2.122.0 - Related: RHELPLAN-25139- update to master container-selinux - bug 1769469 - Related: RHELPLAN-25139- fix post scriptlet - fail if semodule fails - bug 1729272 - Related: RHELPLAN-25139- update to 2.119.0 - Related: RHELPLAN-25139- update to 2.116 Resolves: #1748519- Use at least selinux policy 3.14.3-9.el8, Resolves: #1728700- Resolves: #1720654 - rebase to v2.107- bump to v2.89- bump to v2.75 - built commit 99e2cfd- Resolves: #1641655 - bump to v2.74 - built commit a62c2db- tweak macro for fedora - applies to rhel8 as well- moved changelog entries: - Define spc_t as a container_domain, so that container_runtime will transition to spc_t even when setup with nosuid. - Allow container_runtimes to setattr on callers fifo_files - Fix restorecon to not error on missing directory- Make sure we pull in the latest selinux-policy- Add map support to container-selinux for RHEL 7.5 - Dontudit attempts to write to kernel_sysctl_t- Add label for /var/lib/origin - Add customizable_file_t to customizable_types- Add policy for container_logreader_t- Allow dnsmasq to dbus chat with spc_t- Allow containers to create all socket classes- Label overlay directories under /var/lib/containers/ correctly- Allow spc_t to load kernel modules from inside of container- Allow containers to list cgroup directories - Transition for unconfined_service_t to container_runtime_t when executing container_runtime_exec_t.- Run restorecon /usr/bin/podman in postinstall- Add labels to allow podman to be run from a systemd unit file- Set the version of SELinux policy required to the latest to fix build issues.- Allow container_runtime_t to transition to spc_t over unlabeled filesAllow iptables to read container state Dontaudit attempts from containers to write to /proc/self Allow spc_t to change attributes on container_runtime_t fifo files- Add better support for writing custom selinux policy for customer container domains.- Allow shell_exec_t as a container_runtime_t entrypoint- Allow bin_t as a container_runtime_t entrypoint- Add support for MLS running container runtimes - Add missing allow rules for running systemd in a container- Update policy to match master branch - Remove typebounds and replace with nnp_transition and nosuid_transition calls- Add support to nnp_transition for container domains - Eliminates need for typebounds.- Allow container_runtime_t to use user ttys - Fixes bounds check for container_t- Allow container runtimes to use interited terminals. This helps satisfy the bounds check of container_t versus container_runtime_t.- Allow container runtimes to mmap container_file_t devices - Add labeling for rhel push plugin- Allow containers to use inherited ttys - Allow ostree to handle labels under /var/lib/containers/ostree- Allow containers to relabelto/from all file types to container_file_t- Allow container to map chr_files labeled container_file_t- Dontaudit container processes getattr on kernel file systems- Allow containers to read /etc/resolv.conf and /etc/hosts if volume - mounted into container.- Make sure users creating content in /var/lib with right labels- Allow the container runtime to dbus chat with dnsmasq - add dontaudit rules for container trying to write to /proc- Add support for lxcd - Add support for labeling of tmpfs storage created within a container.- Allow a container to umount a container_file_t filesystem- Allow container runtimes to work with the netfilter sockets - Allow container_file_t to be an entrypoint for VM's - Allow spc_t domains to transition to svirt_t- Make sure container_runtime_t has all access of container_t- Allow container runtimes to create sockets in tmp dirs- Add additonal support for crio labeling.- Fixup spec file conditionals- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- Allow containers to execmod on container_share_t files.- Relabel runc and crio executables- Allow container processes to getsession- update release tag to isolate from 7.3- Fix mcs transition problem on stdin/stdout/stderr - Add labels for CRI-O - Allow containers to use tunnel sockets- Resolves: #1451289 - rebase to v2.15 - built @origin/RHEL-1.12 commit 583ca40- Make sure we have a late enough version of policycoreutils- Update to the latest container-selinux patch from upstream - Label files under /usr/libexec/lxc as container_runtime_exec_t - Give container_t access to XFRM sockets - Allow spc_t to dbus chat with init system - Allow containers to read cgroup configuration mounted into a container- Resolves: #1425574 - built commit 79a6d70- Resolves: #1420591 - built @origin/RHEL-1.12 commit 8f876c4- built @origin/RHEL-1.12 commit 33cb78b-- built origin/RHEL-1.12 commit 21dd37b- correct version-release in changelog entries- Add typebounds statement for container_t from container_runtime_t - We should only label runc not runc*- Fix labeling on /usr/bin/runc.* - Add sandbox_net_domain access to container.te - Remove containers ability to look at /etc content- use upstream's RHEL-1.12 branch, commit 56c32da for CentOS 7- properly disable docker module in %post- depend on selinux-policy-targeted - relabel docker-latest* files as well- bump to v2.2 - additional labeling for ocid- install policy at level 200 - From: Dan Walsh - Resolves: #1406517 - bump to v2.0 (first upload to Fedora as a standalone package) - include projectatomic/RHEL-1.12 branch commit for building on centos/rhel- new package (separated from docker)noarchx86-01.mbox.centos.org 1634659842container-selinux-1957904.patchcontainer-selinux.specrhel-fix.patchv2.170.0.tar.gzcpiogzip9utf-8db3440d09b2cb7037f2b381b900ba3b5cb212ecc546c14037561ae72c9854d8dcontainer-tools:rhel8:8060020211019153644:2e213529?< *)TʪgpGYYV.ܝU$BV4)RVHsg|}>>~(( *H`0E,f;)B>͙DqD,E㈞>0e2)GFӜݘ08'cSL!y#Gʑ(8׿l&++aYP8L( SU`HO$Ȁb1,RPRNK "T@nBAd IᩎFA#)DeP}4,HiTG4I]px,:Rh3/84G<Gtzs J{aAFt= lO{'0% MpδESn$K]_&&\9+ )G0/HJ:$'9 ՑvvGb!`c[٦hPF?dyFX0uq*S">#bU Z1Brөп#9ArYe9,^MLrvSL*?)H@9l;kibpTZ1*D6c/8c`: G{h tLpX:gAfN8c3#ȃ{M_&r{ٶhJqeneX"cOf3bm1Dd(*PDvwuJM鵍߷ 9DC^˾ଝ€))AY^2A'At)2JNN _gr&Qt )`l8`F  ߟ!QJ ,(K&ShLZqNe #10lfN)H@Y0'>1=) WbF!y0?i xʬȊM){b9!j\ā)82 6O}t7C ag~Tr(%"=i$*x\;F@c8hL}501ӱ45,6C̖>*D9b44G #Kc78xO V~Ɛ LQD"g) 0wT )6=ers4DZsϛ LF7Cg=y@hOH@/;^^Z` $/<5葳QY˴]8 ݰ eVjxG!D:@&l )hhhg0a Ad^ltWёeQN$@mYSYs$PaTr"!3 cs(/Yac"Y37G剞/` ̔ u^upO T;G#|` "vrr#Mb'J񕿪*-@mg'B} b~jjicsn4;.,ۋvsL:H GzXѧ憦`1`tNbAs 6`w\x@_)a9 2ߏ@R^L8E1@D+@Hr _ k:N2OwPŝг/N[DWvQF8 Joc}~RDW,& ̙hWF9ALI^=DC ` P ?Lk $A*tX" T @C":g<1Bxҭ8 ҟ$NyE d߯;!u@(B%oLLuDOBV%9@0X@,C0lDd3DΜD<@zC vW}\H`~`,\9\£go:w#XHP.hg|!0X"͗ nM}Uom _OmAX/[p YF_8;=BiAr-23#JQw;D l:ϐztA!3x(U=Ra`B`XBX<ş@S S E;P3 -f}-r=p%:aC20&cn-'bh D O%(w{3(8TQä`u`A1崌iאea 0 r <5|QF)0VV]@JGL7=n/$)"a G+[0%p= HQjt'3~ ,EOD Q- Ax@7X<~n=C47 dYg JQqB%;;@9t3 f  Wz ^)L1 Kl?4a`%ITOFǓN`8)`ykx\p.$[7X DCQ|u HHEuD50b,Bt#Q\ST/  X썅vuPhW>KVX8DpŴ1YP2~#PBPr <1 Z ހEWX V1ޑ6^PwdQ $Ó1BS8'yD8~^>L5 BS:y^?x,# as!R?~ɓ m*/섈B SRcKhJ7 c/ϘQETODzk<𾳶wZ9Sf(`x3źEaa`t2[%8+(94Z[̨>Fi9^~ 'q0C9b}Ξ &;GkR Jtm`9*SޓJw$  #$CB t4v‚uDO CRyΌQ PXFɥ)@a/ЭfTē~(`vP[,PPЉp9|:[)TԽ PsĈ^FKo Z|B_1cb`9fD~#QpN'*Y0'g8 Ki[ J*3]v{n0whS=J EI&@EebF ܐl42 Ѧxn-Nv~S)ϭM/1g_ܴg sq>7d*W+)/>^nnzp\GΓF)%JC:OF4 98CGV{(~,=a5ǑDrN7g> $٤,߬p}Q83ns3x UpTFeS& x6G# 203Gzy%GH, M0/'y0zp{nTGp0$=? "6 YA&Ox?&\X!4!h x! iz+\_* ZIH-S~Sߎr&Pg3̑v? OpeɈlZH @3gO!'J@HXU2dȴӟd.ˊi̷k.dZ(r9oI-ƀҔT9 }RQnW~R=>j` }L'Ϥ[YIMw3bCOL!~r0?4V7I֖H{]3\.jmjir۫1Ql;l[a2#G'<'O2 8$8$|8/, $V9>I84J '͞xZL]C! C&|[Î5h;DԼ6 x{t~L-l[Of>P_ɧ+wj>ݧ38Y>>:Hc߄k/&~U k2117fo>|q./1doh%e׌,rPOTZVxa-2zA=:{WNc,}u}veOR(HO]Uտ,]į5!5q]AzG:&&>tL>sf{rrS^__ Y{ucbP ߋOUFMfg{>XLmP{>@ֹgHփ2] `Ժ$vrlwYaAKxx̦-^dX=aj7O,>^kk);52䬳Q]֠OZ ws7گS-Qx+9RwpX+UirU)V6P%z#jnʺJbJ5CqϏZ=_f9L=XAs usXt.$ >z}}Ѓ勪r\sbvrʼ֕XQ8k)/AQjͼS2>sK%%iN(ĕp{rJWI/|6=mH$BXZ܅Wp0R g>РDVc-+[{: ,YZߣa˓z+n0?kŏk1 /r:hk_YB]R `؜vaQRdQa;/5X8 f;oH:ݎ;H> [wbȜ5NX!rYbש|\K漬vnvV,@R`7״¤k ])J$ƅCחp[DX>iAAkuGx 5/J+߶iiRң#(aBf96;Əu^r;a3' ͋m?tl(ٛtX0kROb +$/w}}OC'!)0!@έD]aG} ]9tn4o-@~^B0o 8h+ȠeʶN%;Xev#jk.\)mhNohnu)s~nGpʻ8JRkXğ}^U3(ozymp˵1թ<'#"ٯK1VIG9eV KL{2ͤd237kKpl[8{M+ڏ}PWVv've|ٜKXT[`lhm㛗>3hqT,%j-Τh{d>|ȭGɖOf}VIū]dggqHhrvGYm2o{(kEg)/OSFH*xVLu_9)loN&$8}vcP빔W*oIhiuaIjVYpHo~ss'R^"LmQ{xvi-S`BR[P+Y4gU^8 +z*zwɉ{Ԟ ?P;p~֠+ ䷦5-D>x̕8E͋gu cE)EVe%TuqV[,o=_{=-.W+I<Ȋ^TU(U|rV0M{Eիk-iӨ*҈* bUO$`MB 3{'[?7U)ksOnt;֍=,*< EZ[c2?K>6rga=HqzcU_+5wxuɱsўʸ55nud4`~?lsԿ`k)l%۰}ݜ"rABfR̫V[=YYUv<'Y=pw F%ߵ ޾ 6{ym,7VDݫBPCo/[{e mgtƨ3*x( W_sV3y,s6ދ5 *skPmE__iZ) ":-KU"lnW<_U7,I\b|jX"%[sYLTycWmZׄ#xɞo4D9%OJ6s汅ݟ[6x=7Puײ7^7x{p\>)qI]nSBYr-1;m3(WU/fdttdٷQxHkyjco'ya]2gל|Öz"ލ.V|ڍq^1ԗbw_6}6T/ٸ&.t9?R=uU5m#U!| 8U~J-X{ـw{93Y:A,?D O)-Cl*!v1%5քڧ;4'y8\X#BʍKkLZ/ǟ>פ72Pr%J!| 7U.]~:-J(뫃P._]u?WeUrʏ씵oi{-E{13ɦ!4=a`zBCsk/-X;S+No7:ysâo/ٚ'vCu!.Wf2⑚+} v:5sLR_ 'Ave5̢\wEEO%Y\QC+56^~&1W2u'\yFMt3g<`]&i)ۯ/&^ݼ]vZع5َKZ160KU=|jK&MlՋ fBM@Vȓ(=}{Rss#r3 jEvGj5U]CJ ,lf/jߗ6`'}cWcRٙ!h7a,\l&u3ī`+! XGաy:-2R.yt}v3Je+ʅ<1|n(Z=d]+sd"{`~t*w-]3ң +L^27ci~|n;tǝj[d&:u\Uy(WNfC{LԒijBIᯍ>El~$^&Ȏ1Ӌ6?dM_I6,s d]g&! u߁CJǕiK~k.;KBAQۋI̟bNM| 湑jd_(S`ے[|vaw7rB-RpU?Pг#/ZVh^=.lɳ6XE5%^ؐnʆk=C3gϊ.Uzr}0[$ i Fz#vg !bFي>`,!PD^ ֺg=;FZսp7YSÝQx;qk)4J7x~f;r+ӆQOYɼ4G Ή,baz˱iE;r'8#\ss?k3Nfk V~4<ֶh` KYO|9؍ [ko>O˺{cQp=ܯ2}.Ȯ>'Hx?=.o~ĺ[Rq_dV9|z<4Ƴ m|i$sj"֦}^z1h0ڼNAXC76͚ח-G_=-xs qgT plLevۦDigO™.N,- n9hbؔUYnj҉;"/f񞕚KT y؄fW-;vw3P Qᩱvѣ[4=*0jpnH}ayOnP޶[5hXԧ*`{q%Ε1i>. /?y[g5KZ*ökj<{ UW?sނW?^Vv+B靦R6L/ֳ*{;Mi@;JuDQ_yuv= y01aC {h58Tkr\4 9N;&5E.g'ZwI:s"zqY˹ZG9ޅ\a&伤!l|܎&VFjA&|a}soZ7v6*refƗko:'[AeEBHɱP+2s3' jv$Zl (^ݕB<[yͱjY/@VE97hqط`3rq5ʾ'V'Vr6~z&3PSX~򲐓z,,=[ t?XT~Qe7. BauKګ\ig}prΦ}`[o\hYUߦQ̬0T(UA.rx3ךocev/N{7,C0N|M&\C]Uɧ%Ì:۾whPk:%{mV2?xyc_sUo8;749XG8l&e?,^< mu^p*2*(QWN<}t}6~"$z UIU͵gFQ& zN%җDmcھk9J_9QLԡWo&$#jN~d@FKTWYt6@iv(~Jfsp{z\A~O*~kPYϧ4ilBXk>M6Ps,z8$H9\4B4L*v6g:gƒ{U۠n:*8`9+A>N$.F{iE(hɼ'* mɪDUb>h<3y˝AI6½h4G T ͂e|U˰KU%+TXqX+6AASĥo.Y]тy|RhHRw Q'4GYsɶao,/7<Iy8^*.-CFOǛŌ*X™:C4stBlՠ8sAրicye]8˖+pH*1 㷋H DR>fftCHb>J9'{IW oBHc-bɋ7~0mhٚts]0b\y)Q)īֱe۩jMlzXݠ]ڷdziFwee ^&!760B. ~[KAMr׷NG?zdZyuX}̣P%'½DW{Wr_.kizNN+ +t9wh`/Jf^׫#$L:h9u>S:M^bQp<9esUA+ih6so,+Xߑ$ԕ7vCE/ɠ-Í],W|. Vmxox$Ȝ|JQ+n0V;$.oZg/[AS|Wf;0q̡v>^e>mYS JeI`dw:;ko;_߶I"hޞ7A.餕K-1}Q 4uװ-O{ӫ\iXwUycbz糝(x5WL;jŸe,ȫ ۔ ٷW-+z,Mȗx־AV߾Ig"z; JU+.v82Ok$⑁Wg֬v[!G2^jbnWQ)|/_l KdlB= ,hs ^й^h٪gG[L 􁪩mll.0Sh;!$5t[ȫĵ2ye<&svhcߖ"MYq#H;rrxۤ' *hz+;Beޔw&d( Pآ5zw=*j^1qw∊MZ$wmm !*vpڭ-t^sn6ڗ$KZA_<}=|_nzsP<[([[{GH]dSyZYWd,Z#AbsxMn'n`F(#sOCyi u>>Ç3,X;ҫv"cdD2rrڹʹ7v-yͣVX= gQFZ5^ӤQχQNųxTkl4aDVg w99 z$jJ-%wa.Fr a:~Aá QU[#0گ/ջ] lX/ɯ|S-J+"{D7I ^vĴF=8ڻu9u{df,? CķwF{^|& eIAysAn+G=e>ɹгM *GZoBO 5p -N9@]. ;\^;;٢lbM 4'ylf?+meښz4}4U a顙PQb¹Ųڦ6:_}6{{esl0n~5PxhMhZnϓ&cnZ<=R14T,쵣J>I)Pc;!G^ns8va(S{b-yG ږm~E ;%>>CD͂A\JD~'} ̟[C ׹loPb[& P:;տ5jz{ln;)Fe)fHd>ֹ6}ilKiiK:kWhH^T0_OYZStR:ݭ**[T-5[Y\ʮ 1 iYOnR]<%5)U@J1;_*9"JsckĘܸjߥ>!2 4yG{e*Zv~KN\MU&fN%cU+j5p'Gt_Ne^9Tɾ^n$x]ZXޡۺw{vo43'0i<{.gC+Kf⩊l:>m{KsU-Pgה|oʪB=I3W'JnkeEt0cRvI;#_9CrOyH٘.}Tȹf6H7EFg65+8BOz#Ϻ]Xuvծ{D )VҴ!FB[$WXF} ~*^PG8cyvVy+Ui4ro:G(:(}".YPg ^1%?砱^곤6>7vBq!ƥ/8?f ɜg3˚gN_%)\{r⼽zg}7qYt-:s{Uب-_Hpn&' eM|֯1bă02M+#r]]ۆ;r)yT^NmlC-Vci۝ma؊ڛsZ ML?q<ʣ=[ <'w9,y[s?!|RyQ䉂i⟮:Hp+ ŇFdcGQ}ra XFH1oG8-imǃ(±CvPf{IjBᛎ (xѱˊp]qu'7pG7\ }5O|t|c)gõjDl_e㊍y754Ul=8b3jJCٹʩV<{Ф8ݽ8ć6Zh1KݦY[Wݯ`'B]ny-E^ T)˞A։Q [BwH:ebGsnJxڬL[IpYct]c_TͽB%zyaˇclsI.$zWp kkwQ,p`#0^Wl_3_S\~˭x֤zV{nՑ{ޠk7r\f;xr\T'=>E|X]7f_!EJv' q7Pj@Jv{Ŝ"p*:WG섴6EVi:o޾1p b˸&f+ԛrEYYRK9{^} V$HR=5KJFp lUvڶm۶m۶tc;cضm'=nG{&Z_UNDz8xԾ&ߋI<%4"1k>%zѸ_ró͠^|UdnN5#Kٍ f n1}%.0I^8q&D^XfバKW;l0ZV%´woxf"K,5a7oB ǿ'Ԡ;,q Ʀ0,nY ;`[ wFҚh,XήKxZ$0>A/,aozf--+mh[/8W0ދ! O֑0|V<䌁yp=h>/>Lek)lw ,Uz~Uf 7z~*]~ݸ<R3Zk$aS݊5ywOSh?x5y+Ĵ5: dwSV+Py"HFeDN sφ]I"7DhZVm  2rha؃z9DE4a_jiN;g7# [/JP>Z˚:k} hqi7Bϥlҳ]M QLMpE623.lM*Oen=ե{@WG?6$5f1H%Ɠ&o ay̢ sI~ 7I{_oYȥ_Zc؆c6U[HVix= Z"-Dߙ7h%1pRHg|I)ٿƸʕEƗ_H|P$H&ҕV-bbtGٶDòD͆:\8P% Yx7L*uslSP[=k$d2ϸx&PꣾNӊ,X9P(LATa? <3=x[F4B36)6XI ^ze)zb6'隬!eؤz+E7TQk|]^aC+Ld#t峯݈kNjCAS!ꤌVV=kUc*W鑪i!TqmKօ_+;AubT[Y3h3vŔl3~T1-h/}@fOm^T&JNHļ5YҞY$k}K ZC,lnǃ݃!" n}5Etpwlqy-1WNG 50`P$X/W/~ `\ChbBQ8ߨ,bo jZ(͠%Ϡƒ/&o"gɓ6[+kW^],R7{WA@UC^ 1o!3!܄TJ e+G%ᰆ<˜,$>9Q ZKxtq[E+]2:(|َ(W\|x;l9tSc,Pj-)gYŸ6tg4*CŠ{ D:^:aoS~$ndGt!N&$f dMbK5-ͳs E9M"&MU:"zVeu\WK#^-G-3Ub9l$wL<غUb$^גا̃}- ӁlGVR.:|U8LS2ݡyd ,zC.8 k*=I \~V2rh-puѹ7\rb sO2LHWAF]9/[bŁ#]ݫW&;$Si| _T*JrTfQ l^ց/崈9eA h߱Yb)y,"fu6mCMzR xMq:QK_i.˴@AUc‹ rɃ ۥSpWXH]I Hh)?З U w*547\ZJPÝwBb!5t:U>8{O|l2mP]^6b4gD&^(CMbQ׽%svc|(Cq\ې я·,@gᠽ5lʪԮdj4?|20?v40QZk2}&(ȯ $A&ktsV"[mEn|-+uhaUӱli0 ?|WOV 3)&j;JA Fe&nDDSHsZvojHA䢔x'ѭ)̝!8@R@GGc7X ׮ogܲOG0d76 즺Mo*1=%oH$Q:Oa8YXN569QP۵>1|VBد!cTP,9ԉaU6_y*htKsjNb9TJ)*І.%٬qN*3ɍ5Uchrj)jo0ЂUS]@F UCXU5>f;Q"p0V i i!4A$}*=mk.*,&pKXW]PK>+$Y1 H6_ !9(7o#aj K<_`TK3AnӔ-u8LgWkwPϯ&i-!㔪ԈG\ʊ_!j:) 8mc ̝Rh+7n7jm8t Z陦QҊKƴ椽|.j8f#ߒ+ʷҽ4cZ ~"Q_R Ѐׇ"]/_J?>M5Cbh] [8km#pOm7OϦGӜzLX«Eu*ŬiSFjXZ},dЬ/sY=ju&o谪OO(/y1vkg:Ҫ&P](ɈmnӴWX SÐ$j9=a1;,&Ѯ?(WG3ڋhe2JZӌDm/N(tC/Y]5؝ kS |e^MI#j5"X]5|u> %2V̩[p{ڈ o+9T :⺐ nZ7jAT8׏U,J F(q%朢{S*mbuVDZ$b4r?=k1~]uvgZ\ $UC;G_V'_a#p5EgNœ4!FCf忾 T J '`r4a,TM1瞸}+m6R 5uA`ՆF3b^󐽵WfibJ;̦ L6BR-4 ?xz_֯J< Dǭ>s)>U>yD0mgÝhpI'tKCyYFw*rPJGx_]|At;CQ>* sލ5ײ(ICkHPU ~#oI* ȱ^ZAy7oNsSb*%sh˪X%DE'MC5ܵ01ZH KgǕQ^t;UӽvtPE%zV ܩeghōZdα?:V&T;Cohtz|˽H>(\J+072UW o'~io:ɱLN:XM}-㯷s$4uCA* #s\|+Kc{1<梫HV-L(f02="q9W89,TPΔ81i6PxX[g,bg&ѡJsŰ#Xe[x6F\S cnCi9껠\o03:+M64CePOS8lրQ+%znilg@xۻb9O(P*46m]uz TSfYB,oܲEyV.pG $4be<9=fb:w<&˞gsRDt<OIjp]ePDVH´7JKՐ ;u13"_V, d!!rg.c^I j̔[DaW ˪7|-QG{ؔύ-!YM lZLs5c;E1w,^d[n9GfAUuLxk;e+9mxnN{ Fr7al52ÁӦ&ͱ6=5@ғ[FU.50ӱk,J?m(mIW"{v D-L eG s@ni G[) 3k{ 868e*5 .TVikKm8h9Xrb ƯR %xi!_`VzNalu\oɕll %T!B r}L48h{6ou2' e+lˠ&*aq{SI?<04z5SNErlF+%Zzr:,=>M[֚\%R,déS4SVsG%&WfPTy8䄂bz̊.ivU~ #1BAmw\!wU'KSơ*dukCgPIW>$Gy #`J΃fq ?Ca>Dokީei%z*mc73D Sףߘ̸&Ug]+px اF]ʅE<`jW`aI5o–zHUZ%X-oVH'O+>*ȝL[^ϳǿ,Lߒn %i+Ô5zlBY84LjoN ̵ٓDxMrL0ƙvu鄈QOPg)UB#jϚQպh53y­;":V_%V^7g9% ΏU FєedPzXή([u/Ӿ阡#eժGА#2MuC'?(B?&AS00Pdܢ@MBqax_W:P,i779h|3_6uWtuȸٰiAqm)  IHNRZȅgeU2gF-gp]WX2D 8bYfOj*[wcS^0A7/i+ >? bC6>fh$w8o`yt\Oxǝ?;Үٱ lcII;'.o soѽT)>sGS~{Wr~JINsA#7g\]&Lb4vr>G;b_ttѭDxSx]>%psPSֻ+/ b^)-uz,JS/]/a3w yp54Dm>&7V0!oWG+z.o//+,g¹z`5zbpܛ<+D}Kc1iY:A+2hx { }>lH/cѤGa=.UIJtv2/Jz񙡠eA+v`_I\aWrJNϳY,Ov4 $ nZrKxHP@WyK<00E Dm{ZjǑ [h8[z$o*6vᳯ9?X  (˅V] ]-xSPt3vBS8-dZ! %SITaR/^u%  |;tkYjLo{8pfsh6>͛ @ @[Іߘ7C D wNᙄU9|&UMBV֠{zs,£/*~#T0ef P:M*NPm蔷@b0v{ ] Dh0v2gq*3Yv仂OXyN.WO0+A}!,BVe[7CݺIS.ptd×h>Tb^ ̫ќ/WN!u= GF8g(۞ Y#^ϾFETx bl*mЄxzd3;Ʒb;VhC԰p|2o7؊ `ѾymkxrSFv͖z-4MdɆ@D7,|Qpyȏ7.q 'rn_-ay ;kp} dDGv/AWf;cK.r!}r&YLNcEA`2ᬰsXqjU fB_SqnɬW{$-ǶrsIPt:VZ z>_@d罿 v37#/ۓIlbqLF'XUu qu6B\DqW+S̲ɑXuX1ȼ(GlS}0.\u2ew8?*3k[ZAV Yw Vz]eDgc8 玍=gӞ˧qg^v)(p^q۾+qo_s/CPjn|`&QW)K.hZYLZ2+wR']Cϊ`(Fe(-š-TD /!⊹Of;A !^TҦ.|!>A u!J<1.ff#Փ1AIJs;FFHeo6qt2\t(12RF˛lj2aʼm$DK;.+pŒ_A2Ҳ]T dc|% ]rܲ>p<ҘEЇa)z# _*O-:]*TJc>} LyO;OA6ИVaƔ'$S/C&h&?M YʄOɽ≩6xkhsVx:kJļb{Cz/[TMgUj_y)?Zݰ‚ReӸo Dmbp~ۧ8ry'>]΢rg z(vγ,4O! @X֥|uAEhNO-'+jN,@qQr,7ɞXmY=Bk*zP픩<3 j6Fx›8fD9QB$9rR(R;? ىIiIlĴDžş_CeO0Wg,S 'F7\jC)g1z4S"U7j|Ο6a|)>,)Q͑p]צ i3/vgz_vz0J'$H1Ht׸2MY#w(3!O$'20ϳoH*޵8h\qpN~폊Ǚh)[A,kV5UvUn.`1~KBpSmfS3[$yPNJl9]Ղ)1Jvj'J^LȽqQ`v)=c,\;U/N0kDbti16>q0"J"]M;Z`{l +Yv[-b?jEʧ=) ~($-mJֈ.`GʔcXT]-~sf@+}.0 5qo񜟹NL&H y,GݘG[MP ^MZdH:1 2rmNm:98\"yzNae~݅1o "#P s.ؓxf^UXn#o%} ~d\2D/1{Z6~Bywx0?ʓ-> _aAf.4dr?<8JމGJƖƾJJŽ&&&R\@eIJф:ȓ+O3%s~y|8e o/)ߔ,$ywo"aXufpiG#Y!T&/f`֟,d,2OHgHd$ay,45dbEw]zq EE܏PaZeI/b}+3E6/[xE?6M9Uk6*܁y6l`#/8y_MBzklcH==dJ&E#Z9puE5_jqוֹ u#sDypWnp eu G"ntxpw'JxX:mZӠ^ejǀЅ;/e"WX!&-3`^i6L68+!C5 iJϜ`rr3q-9>']W/2ԁP靃n.E^b% ɘ#,`ϥ؃,VGw)M5~Pz>d mTNA)sq_ߵ*g!- otgvVQQ jhmcOТ%Uh2Z"tP̯NGqT?q $.sjV7ԪK:nmhZW/Wbȅ-T8*NP?u#4N=vdžv xrea9gw&-?yIOD_ 2YsKtKT]MT 0IޝP )jz > *RfnHwՑr>P$³b /sR=q{I.6p)Go/'F0eSMH>1gC~3}t˜zb~_*>À u)Neg$RwA[M! a1<lM0$5ۚ䷋n@Up31ҚͲŸ/X/ކ76CzZ(3pu5ʲʻS><]CEHJ%Yl(0c_IE&w('$Pq "†J_]Ox  _  !Ay] D. ];xHޱ}lDBKCy迭 W}(tY%}  \~D~O7t3=Z$X`rR+F Oa%nm:h(O#,ÜApnʥi'{nlݙʛ?KHxKb b Uj6\/o`Z)Tzi,>p˶I=^Q W`LUL37O9 tOrsVpjҙcs'q]a>e_xYIgayԭvzf^h<ט60m@8/[ĵ1:=c[!&hi4i$"DQ&r:2Ԁd]gBxi'`c8t1F Om]K*-y{~}#KS| P`ԑOշ=+5(fţ7g֟}Vn2LӸW)lfkAfgZ#'-+fHM!o>* *# ?{nշ؝3׀rx9h~Ψ-A޹@Y3[}4 T=ֿV=Ui11fYxX< Џ\-~ m]U,q6ɟ(Xsyc)qD4nK~>Wb[ ϚEgtC$aN)m «u^J . 95>}bgL-YHԞjI ۞*N< ^*kvWA٭; _?oϢ&* FJJʐE<