container-selinux-2:2.189.0-1.module_el8.7.0+1197+29cf2b8e >  A cZRU]ߜ2!WAemX|y^s"gȣkO7CAN^̏QqV<6Z*gV8#lX2*i?S$8-;fn,@)& >*RgA/{O%h(2ve|"i[,m4902p7M}?Mmd< @ h 2bhp|    W \h3(a8h9|:ALAFLHGLlHLxILRL\L]L^LdLeLfLLLLM8M<Ccontainer-selinux2.189.01.module_el8.7.0+1197+29cf2b8eSELinux policies for container runtimesSELinux policy modules for use with container runtimes.c@x86-02.mbox.centos.orgCentOSCentOSGPLv2CentOS Buildsys Unspecifiedv2.189.0.tar.gzcontainer-selinux-1957904.patchhttps://github.com/containers/container-selinuxlinuxnoarch_1f ccc53f5a4e30667ee0baf37ec7256cb66c05b2b2afd1a3338cdee6c4685be5a7bad5059222adc10506fb5fd410116ccf334e120d967a174f999f515a70fdbcdeaa428077feee4804b445f8bd6144a96e3049ab2396d20dd5afaeb803c1c24c6a64b mockbuildmockbuildmockbuildmockbuildmockbuildmockbuild  gitpkgconfig(systemd)rpmlib(CompressedFileNames)rpmlib(FileDigests)selinux-policyselinux-policy-devel3.0.4-14.6.0-13.14.3-80.el83.14.3-80.el84.14.3bVbbkb_b<]@b%b@bOb@aar@a@a@a@aaa+@aaa]aQ@aI@aA@a'@a&0a /` @`9@`Ȗ@```q`@`@`N@`@`dd@`Y@`&m`_T_`@_%_%_F@__"_5+@_16_p@_5_X@^n@^Ӝ@^@^^k@]@]B]]@]|@]@]X]W]R@]@\M[[ͻ[[@[[Xf@[L[K7@["X[@[@[[[Z@Z?ZZZ%Z%Z@Z - 2:2.189.0-1Jindrich Novy - 2:2.188.0-1Jindrich Novy - 2:2.187.0-1Jindrich Novy - 2:2.183.0-1Jindrich Novy - 2:2.181.0-1Jindrich Novy - 2:2.180.0-1Jindrich Novy - 2:2.179.1-1Jindrich Novy - 2:2.178.0-1Jindrich Novy - 2:2.177.0-1Jindrich Novy - 2:2.176.0-1Jindrich Novy - 2:2.174.0-1Jindrich Novy - 2:2.173.2-1Jindrich Novy - 2:2.173.1-2Jindrich Novy - 2:2.173.1-1Jindrich Novy - 2:2.173.0-2Jindrich Novy - 2:2.173.0-1Jindrich Novy - 2:2.172.1-1Jindrich Novy - 2:2.172.0-1Jindrich Novy - 2:2.171.0-1Jindrich Novy - 2:2.170.0-1Jindrich Novy - 2:2.169.0-1Vit Mojzis - 2:2.168.0-2Jindrich Novy - 2:2.168.0-1Jindrich Novy - 2:2.167.0-1Jindrich Novy - 2:2.165.1-2Jindrich Novy - 2:2.164.2-1Jindrich Novy - 2:2.164.1-1Jindrich Novy - 2:2.163.0-2Jindrich Novy - 2:2.163.0-1Jindrich Novy - 2:2.162.2-1Jindrich Novy - 2:2.162.1-1Jindrich Novy - 2:2.162.0-1Jindrich Novy - 2:2.161.1-2Jindrich Novy - 2:2.161.1-1Jindrich Novy - 2:2.160.2-1Jindrich Novy - 2:2.160.1-1Jindrich Novy - 2:2.160.0-1Jindrich Novy - 2:2.159.0-1Jindrich Novy - 2:2.158.0-1Jindrich Novy - 2:2.156.0-1Jindrich Novy - 2:2.155.0-1Jindrich Novy - 2:2.154.0-1Jindrich Novy - 2:2.153.0-1Jindrich Novy - 2:2.152.0-1Jindrich Novy - 2:2.151.0-1Jindrich Novy - 2:2.150.0-1Jindrich Novy - 2:2.145.0-1Jindrich Novy - 2:2.144.0-1Jindrich Novy - 2:2.143.0-1Jindrich Novy - 2:2.142.0-1Jindrich Novy - 2:2.139.0-1Jindrich Novy - 2:2.138.0-1Jindrich Novy - 2:2.137.0-1Jindrich Novy - 2:2.135.0-1Jindrich Novy - 2:2.134.0-1Jindrich Novy - 2:2.132.0-1Jindrich Novy - 2:2.130.0-1Jindrich Novy - 2:2.124.0-1Jindrich Novy - 2:2.123.0-2Jindrich Novy - 2:2.123.0-1Jindrich Novy - 2:2.122.0-1Jindrich Novy - 2:2.119.0-3.gita233788Jindrich Novy - 2:2.119.0-2Jindrich Novy - 2:2.119.0-1Jindrich Novy - 2:2.116-1Jindrich Novy - 2:2.107-2Lokesh Mandvekar - 2:2.107-1Lokesh Mandvekar - 2:2.89-1.git2521d0dLokesh Mandvekar - 2:2.75-1.git99e2cfdLokesh Mandvekar - 2:2.74-1Frantisek Kluknavsky - 2:2.73-3Frantisek Kluknavsky - 2:2.73-2Dan Walsh - 2.69-3Dan Walsh - 2.69-2Dan Walsh - 2.68-1Dan Walsh - 2.67-1Dan Walsh - 2.66-1Dan Walsh - 2.64-1Dan Walsh - 2.62-1Dan Walsh - 2.61-1Dan Walsh - 2.60-1Dan Walsh - 2.58-2Dan Walsh - 2.58-1Dan Walsh - 2.57-1Dan Walsh - 2.56-1Dan Walsh - 2.55-1Dan Walsh - 2.52-1Dan Walsh - 2.51-1Dan Walsh - 2.50-1Dan Walsh - 2.49-1Dan Walsh - 2.48-1Dan Walsh - 2.41-1Dan Walsh - 2.40-1Dan Walsh - 2.39-1Dan Walsh - 2.38-1Dan Walsh - 2.37-1Dan Walsh - 2.36-1Dan Walsh - 2.35-1Dan Walsh - 2.34-1Dan Walsh - 2.33-1Dan Walsh - 2.32-1Dan Walsh - 2.31-1Dan Walsh - 2.29-1Dan Walsh - 2.28-1Dan Walsh - 2.27-1Dan Walsh - 2.24-1Dan Walsh - 2.23-1Dan Walsh - 2.22-1Troy Dawson - 2.21-3Fedora Release Engineering - 2:2.21-2Dan Walsh - 2.21-1Dan Walsh - 2.20-2Dan Walsh - 2.20-1Lokesh Mandvekar - 2:2.19-2.1Dan Walsh - 2:2.19-1Lokesh Mandvekar - 2:2.15-1.1Dan Walsh - 2:2.10-2.1Dan Walsh - 2:2.10-1Lokesh Mandvekar - 2:2.9-4Lokesh Mandvekar - 2:2.9-3Lokesh Mandvekar - 2:2.9-2Lokesh Mandvekar - 2:2.8-2Lokesh Mandvekar - 2:2.7-1Lokesh Mandvekar - 2:2.4-2Dan Walsh - 2:2.4-1Dan Walsh - 2:2.3-1Lokesh Mandvekar - 2:2.2-4Jonathan Lebon - 2:2.2-3Lokesh Mandvekar - 2:2.2-2Lokesh Mandvekar - 2:2.2-1Lokesh Mandvekar - 2:2.0-2Lokesh Mandvekar - 2:2.0-1Lokesh Mandvekar - 2:1.12.4-29- update to https://github.com/containers/container-selinux/releases/tag/v2.189.0 - Related: #2061390- update to https://github.com/containers/container-selinux/releases/tag/v2.188.0 - Related: #2061390- update to https://github.com/containers/container-selinux/releases/tag/v2.187.0 - Related: #2061390- update to https://github.com/containers/container-selinux/releases/tag/v2.183.0 - Related: #2061390- update to https://github.com/containers/container-selinux/releases/tag/v2.181.0 - Related: #2061390- update to https://github.com/containers/container-selinux/releases/tag/v2.180.0 - Related: #2061390- update to https://github.com/containers/container-selinux/releases/tag/v2.179.1 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.178.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.177.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.176.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.174.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.173.2 - Related: #2001445- update minimal selinux_policy dependency - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.173.1 - Related: #2001445- lockdown allow rule was removed - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.173.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.172.1 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.172.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.171.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.170.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.169.0 - Related: #2001445- Start shipping udica templates - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.168.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.167.0 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.165.1 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.164.2 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.164.1 - Related: #1934415- fix the build of 2.163.0 - Resolves: #1957904- update to https://github.com/containers/container-selinux/releases/tag/v2.163.0 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.162.2 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.162.1 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.162.0 - Related: #1934415- do not use lockdown class yet - it is not available in RHEL - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.161.1 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.160.2 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.160.1 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.160.0 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.159.0 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.158.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.156.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.155.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.154.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.153.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.152.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.151.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.150.0 - Related: #1883490- synchronize with stream-container-tools-rhel8 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.144.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.143.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.142.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.139.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.138.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.137.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.135.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.134.0 - Related: #1821193- synchronize containter-tools 8.3.0 with 8.2.1 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.130.0 - don't use macros in changelog - Related: #1821193- update to 2.124.0 - Related: RHELPLAN-25139- implement spec file refactoring by Zdenek Pytela, namely: Change the uninstall command in the %postun section of the specfile to use the %selinux_modules_uninstall macro which uses priority 200. Change the install command in the %post section if the specfile to use the %selinux_modules_install macro. Replace relabel commands with using the %selinux_relabel_pre and %selinux_relabel_post macros. Change formatting so that the lines are vertically aligned in the %postun section. (https://github.com/containers/container-selinux/pull/85) - Related: RHELPLAN-25139- update to 2.123.0 - Related: RHELPLAN-25139- update to 2.122.0 - Related: RHELPLAN-25139- update to master container-selinux - bug 1769469 - Related: RHELPLAN-25139- fix post scriptlet - fail if semodule fails - bug 1729272 - Related: RHELPLAN-25139- update to 2.119.0 - Related: RHELPLAN-25139- update to 2.116 Resolves: #1748519- Use at least selinux policy 3.14.3-9.el8, Resolves: #1728700- Resolves: #1720654 - rebase to v2.107- bump to v2.89- bump to v2.75 - built commit 99e2cfd- Resolves: #1641655 - bump to v2.74 - built commit a62c2db- tweak macro for fedora - applies to rhel8 as well- moved changelog entries: - Define spc_t as a container_domain, so that container_runtime will transition to spc_t even when setup with nosuid. - Allow container_runtimes to setattr on callers fifo_files - Fix restorecon to not error on missing directory- Make sure we pull in the latest selinux-policy- Add map support to container-selinux for RHEL 7.5 - Dontudit attempts to write to kernel_sysctl_t- Add label for /var/lib/origin - Add customizable_file_t to customizable_types- Add policy for container_logreader_t- Allow dnsmasq to dbus chat with spc_t- Allow containers to create all socket classes- Label overlay directories under /var/lib/containers/ correctly- Allow spc_t to load kernel modules from inside of container- Allow containers to list cgroup directories - Transition for unconfined_service_t to container_runtime_t when executing container_runtime_exec_t.- Run restorecon /usr/bin/podman in postinstall- Add labels to allow podman to be run from a systemd unit file- Set the version of SELinux policy required to the latest to fix build issues.- Allow container_runtime_t to transition to spc_t over unlabeled filesAllow iptables to read container state Dontaudit attempts from containers to write to /proc/self Allow spc_t to change attributes on container_runtime_t fifo files- Add better support for writing custom selinux policy for customer container domains.- Allow shell_exec_t as a container_runtime_t entrypoint- Allow bin_t as a container_runtime_t entrypoint- Add support for MLS running container runtimes - Add missing allow rules for running systemd in a container- Update policy to match master branch - Remove typebounds and replace with nnp_transition and nosuid_transition calls- Add support to nnp_transition for container domains - Eliminates need for typebounds.- Allow container_runtime_t to use user ttys - Fixes bounds check for container_t- Allow container runtimes to use interited terminals. This helps satisfy the bounds check of container_t versus container_runtime_t.- Allow container runtimes to mmap container_file_t devices - Add labeling for rhel push plugin- Allow containers to use inherited ttys - Allow ostree to handle labels under /var/lib/containers/ostree- Allow containers to relabelto/from all file types to container_file_t- Allow container to map chr_files labeled container_file_t- Dontaudit container processes getattr on kernel file systems- Allow containers to read /etc/resolv.conf and /etc/hosts if volume - mounted into container.- Make sure users creating content in /var/lib with right labels- Allow the container runtime to dbus chat with dnsmasq - add dontaudit rules for container trying to write to /proc- Add support for lxcd - Add support for labeling of tmpfs storage created within a container.- Allow a container to umount a container_file_t filesystem- Allow container runtimes to work with the netfilter sockets - Allow container_file_t to be an entrypoint for VM's - Allow spc_t domains to transition to svirt_t- Make sure container_runtime_t has all access of container_t- Allow container runtimes to create sockets in tmp dirs- Add additonal support for crio labeling.- Fixup spec file conditionals- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- Allow containers to execmod on container_share_t files.- Relabel runc and crio executables- Allow container processes to getsession- update release tag to isolate from 7.3- Fix mcs transition problem on stdin/stdout/stderr - Add labels for CRI-O - Allow containers to use tunnel sockets- Resolves: #1451289 - rebase to v2.15 - built @origin/RHEL-1.12 commit 583ca40- Make sure we have a late enough version of policycoreutils- Update to the latest container-selinux patch from upstream - Label files under /usr/libexec/lxc as container_runtime_exec_t - Give container_t access to XFRM sockets - Allow spc_t to dbus chat with init system - Allow containers to read cgroup configuration mounted into a container- Resolves: #1425574 - built commit 79a6d70- Resolves: #1420591 - built @origin/RHEL-1.12 commit 8f876c4- built @origin/RHEL-1.12 commit 33cb78b-- built origin/RHEL-1.12 commit 21dd37b- correct version-release in changelog entries- Add typebounds statement for container_t from container_runtime_t - We should only label runc not runc*- Fix labeling on /usr/bin/runc.* - Add sandbox_net_domain access to container.te - Remove containers ability to look at /etc content- use upstream's RHEL-1.12 branch, commit 56c32da for CentOS 7- properly disable docker module in %post- depend on selinux-policy-targeted - relabel docker-latest* files as well- bump to v2.2 - additional labeling for ocid- install policy at level 200 - From: Dan Walsh - Resolves: #1406517 - bump to v2.0 (first upload to Fedora as a standalone package) - include projectatomic/RHEL-1.12 branch commit for building on centos/rhel- new package (separated from docker)noarchx86-02.mbox.centos.org 1661869376container-selinux-1957904.patchcontainer-selinux.specv2.189.0.tar.gzcpiogzip9utf-8ed9a52fdfbc34b1a3f0fe38c011e9713526182e0bc2441b42e8354aa35ce4cc3container-tools:4.0:8070020220830134531:39077419?\ <H˜ k!d( 3̘.*{,YJ{ٕ,3ֶ{.{=y0$ ~+Q_`2A~s9!ɐ18,-WV@*Dх urP_E@P7P J a222tCe`2pE\Q.ÐH28.))!HEH45!2 HR8=N!d{7\$*up@>d mO(T= {',C!`ˢ$' Z.(=ţFf uLyb@j- * A1?kA]. LLzz?(8#(qԇIGp@ hٞrtC9c  r̶qR` HV>Py)&W=B*ƒD ' t%eIE@0Gs, q H/ D"C(.6G`f`sgS|  =%@8 Y;<C8(K2п 쎢@Apy )qp .*1@W6C x WR8蓯idJ!0-xNCO 0P$8̩(P,yz$s$@z5뉑( 'Pg_{oNZ$pxƃL >?>"9:a%g,ؖߘEg.D] J~vLGBrq@^Svʌŝr0q$@l J $ uP8CRGr $ߟ &Pؕ PN^C#cee<60;\z?3ͱpz ȠLQƤi_Ͽ(/P0!<_rʼȈ͘ꀟ[bv@EcQU 18б# K8)ό;`g>!Rd #eAw5>`Aw18gnmKCs7H:"8f[Ƞz%q?{4BcI3Rmd،βX#ιNAC9۫;)6;2md6ZB:nyΓdg顉,`8,}/3V#{q'xA؛!9j.-XFYY Bd _П  (i-D x@} A @NV @ l0C<@&=މ$QL.QD;''W9 P,J@~h>;u3`?'O?U.(>d0:X#z|` vzJ=eN{9olCىҚi "9b~7cac0M@JpW:?tM# FrZAda'8u1c8P'8apyy哆A=B}G"'LAqv NS܅b!堈9N? 'ap*2Q ̗4dE (*k^#@8A4'=e'/?Bü3MUaù"!> 6H+z8 .Lk?sE8%q~3`lEé0 YI98Ha`-I g) !ZUP=ι2A!nT1n+)˚)^RBBg&b|F-Bψ)O?c0;?-qXH3<޶3}x, ~ AG7ƑJK~~Ξ JAfM\`2ed/K$4f`9{uA1d1Bpeuɥ#j0%ЏC.1QtC`[?_b0cHChK|jPiW πjh΁:D [! @꜁$ i\FsvWAZRhX=\,@vfi9U`O$6#%1' RPSA4z}0Ƀ!@gXfk`C$`񔅻 ֌ POn c ,d9EVong&N??ph4/eöRn,$r} %d:В n0tq P"X"T.h@§`K^&(lO\CŴ߃2#@+M{Cp;%3c ~h![A Z9 &#C!c@]d2 |[(b]Cnn`Ԑ)04~ M @J4G2H_Yg"\L/<-BU-ԙ. KSxVlr_I`*]DȐxWAG#ѳyo?08ϧ38tC<4/YBUkݠ`M3. r'GuJ`/@Y%F#"hDl։ 2/S`ʌ/tc7F, @" IOv(4x;rF-~Z} jį?dz\pr':!`NGxѴQ-ЅAFЎ+&F#JSCφF4n#hŽ$7TSPڴ8|A\Zxle$=2 ~tI,ϼ*pcQGIV53J{D(?,O.xG0'E[,HxJA Ei%J t CEӦE=sۣK?ܴѡԅ-!+x LFD/] +Kf@d{zK|)a$"`>N@/N/iW/E&3Ir9$| :zᚏq"yw  7'?'<~yIYcf%mMv pcZֿ|H^hrFxY*!@a/q&H19kLQkW?.%+J%,Mz!\,уK Jr(EWv `s63oV'\P@VO:,,pByq -t)G v&@j,+UGvb=1٣kfYP!Z‚Pt LJB$wQC9r2,#!~^D*%-2EYI (:}e!&$'TrXtaҊ 'dzF;8-tXtşViY_cYpkAhgc-Z=bp0I.*x,j-օ%8arsd>uXnM4fn&Uvb%𳕽ʏr}k(>gE7hL#hNG 2d^eG9(@n@\y@D \1+ F !?2m3;K.<]Bsї^3s,l 6K]_oJAS(zqE/l\|,mxe3x? ‖B3LOLQhS`I' 3rJ[Τ`Fx[h* eYKfTpYQZ]f=`x͢H1DVgY5W/_~w?~PT9˻pqH8;퇥=.${x֦aol޳&EF\;.&}V`Y|h}zQxɩɆ=v0NX܇hr-%?iHM;K:rbҹv7l:}Q[|KMzCMFUu`aڰ~{èL菢;3%+ov4 ==u;16࢏SXt}jSmFc}H`puxNUMN ~ٟ0ݿgKt|ݻK;:;{P=6]qartA@Qo~hG U)6Q|%ko= qQTIiξaVdoẇz=Mm"$L(GQ!E#3?JuͣPiM/Z_FL5]LNklSS348|Scbk|{@ʘWԷl^&Ş=7RRڂuGGN*m61U|5vl ǟ5H[x)#$mRH~٘s&vLwq3#  VB޵1MY/T$O[ DP`|, PHTP\[&1[rt-=!C8nklƲ8Af]]Vv9@t-=)ɷ^D^-6hȜ UԖ|R{Pe2`ƷgZ]K[K`ɺ$E(ԓW܇x\> Gdž3BMCgJ7^Ԟ盍^x@71VPJ84rɇ].) zlÕOR` + md6szZ1>wO{J"|OVkK[ ^u,1a,]wgwɛo|&˳buAu&}OD:>tϞgbo[bݪ[]3d˝[-vpaNx gjuX\J7BMt>f2ɖ~rʟXGoxV(98tZcҜt?v8w= =E|xiy[?$)y{£9} $b{sOKL!Sa 9 OHlslTD;~׸SA.(b|C~ɓTxpZJV[r"_Z=s{Éu |箔 lڈ-fivAQؽVkR6obG n:~{U;4x.v0?}BZðvny= W~vW.;ǷY4cDz!S'w2#՗[ Lmpnz򵤻&<{O='Rsuk0TUb?FZz}I;:Vj7!)OlتCS+'*zqIKG96#~!t{3>M>.ۣ`#[tRd| 8k"|k2ŽgS:vV%b/6N~}a9vLΓuer̿(wG3'Z rx3"p*[ȕ}m8V[aCg:_珧ڞr?qq꒾CAkJr/Zrv}O@Gw]؋<𻖈Iiq'AO>M>o%N OfS'{O]x=V^{%DleX:;h]3- f cUe;XOk}[҇܎txd]oh{ E=_ ktfչ[zFRa |E 93 G?]\qՁCGjTf8: ƵcS.8Gpfs kwŝ:5{fwD66)9S&Ž~ i{{V''?`ƅ߰6CTNJ{Ooνg ;FN~Ybym>Q5ñHq5jNN5X{ۚM z Jc׎ Fng m;_hX si*SA)t*SfNzĥV<)bimj-`nh:C h}o谽ݼy)aD YS԰=no!Ӽ^gk_[J wq7/\)w{ˈe~:~f? \̽-rf;zc-^ wo=%յc7"㍍6iT\η@uפH}Ta UdzQ$1_8 xkYǶK)C.Ќǯ_3c:Ƕr]]ae*B.ᶠn)/ #4>l퇥=[ N~Sr130v?sVW/ Q#1v=O6f\/Gvdtt%7#V ɭ8L͕r]O ?KΞUvͽrVsKFOWo|YK2cי=31M=Fl[|͕e`ow(8"-ʫUU=LdT%55mlb'YᅝT{N^q=fn׀>-)yM-W}$͵}' z}q/XbCo"1zr~lj=4ݧoz7uJ*7ݥo~+5@>]_}-Sl&+^NLţYS`1FvkFW đ-A/>n$뛾u~4ܟqnUx:2@#)ġor0?Sz1`RֲG{9LWzKp󠜻w7૥Y%WEB wiuE <ز2HUR[6iIO21}'+_)h~`R;xAx_Ě5fm@;+{q;kdۯ8Uί[k4+Kٔ,n:zV%"%!vZ;-Mð~mn'Xҷ {g N[#۲Ixqhϗ܎yYjйLv|izܡukbT>/}Kj5d0,QnaC^MZU@_9s| {`$}5Ԛ Ļm T7ޕiBNL:/B0h8g+8c-)P 9X:Gq"o\JMxjWSqm dQ:k˖9v\zE:!.$J'ͧr_•&~H`2`vdu!zxteXòq P=C'kj˹*PuM/bwr <ϺLJr;5!qw)^=^P'X^Iq/7p,ن/}lsh}8i4u o7sJLjiQuGݿM;Lu28wH~.2t_*N'1SǨFEӧE=!{`}QeA&*kz_۱v-O>\7^q}(:G[KO|&rLNޠ.۳ְ+OV/Yxuz+ڥ:fAp|~~^l ױo<|2,vؤe;"FdFT^"Ez?ߦDRM([7 +j-}}*CL{:B}i}Ø Rqcz'z/}~F1]C%&-71C$ߝtd8dO^G8.S.Ac ?:WrVj?hhGƷ0OYk]uu Q>)#1ήԎJxo(;a!'AG?l^gXM5om |>jxݤ`A{. ROwШ|01"D|/`mq2ge6_>FM`SwB'ߧMUÑܳ :7;/H&m kм/Qa>~۵rQfcx&h%ecXo{PC7[thf ~?&](G+vtaԾ fmzr0W,kUߛ72s 8^ZBxTҬA85 ՄpYI.S'c9;?}BIwZ[PyMsLYN,n&qJsV[ۤG&ob wս/ 敷M*{uSZ%9K-{8ybxEktYomA|95e 8])ۃ1"YkQ{sY~0|=K]NNW+LN_ ܈b=|z'y}_.niyCiC[/a<ݗ8ZrXHIzLjM*83ŷlwJp QUIrtct֔H//lztΡ@ygrpyvhc7ozm Ա '6:YWN]GpV3zk]S6TK:F+$_e=oW-ӎ[xs)[x6× V*5Y'j9 fqMrO:x;l.,gzu3A=Cjn9JaGuUXHo|ӖepO&V)ndvh4c[®(ݕ%+\bfb[綡dRɾT7Y]!%Mf^TB䜉d!ãl b}rܻr"=sU}RZjW{" | ^1٢"V=*bɰy2 ks F}\]`+&)BeۧK_@ZL(Xg~?stؾiԪzWVF]ϮcigxYy7NsL+qQJwana SZw> jS-ښAĜ}^,uRweǾܰK.d{!swig*c/D`5|[tPyVIτPsKO_X>FDBtGdĺ.zЫsn۾+$]awTG}pc(f᤹c5o˯/#Oi`xrAlCNGO؎&,g%Y&pW \d"^Clυl˞ͻ]G͵u%UYr=/i)kݓW[4$Eyij,$4NLa_qw1N/vMTݗ ::[B+g?}@2EIp3SqR_[!Nwb%J ^6J>^٠p6Ӹ)V3oEE2 ߗq)]xC`.{SMhҊҍEG"-,]RZ {ޞ:vc:NU !_ 'Dno p:~sj _%N\+.lu3rw1|z 'E&s< J-b~onm-pfJ9gj]9+{qyÇ7*" ngBFO4ga|ú(dJ^a]D ټ+ڻs~G\W6Z/2WrѰöD]GEv]'}GKn_f}Ҏ* &NSm9lbk> Tt9vBW ^^KI8hW;GBn2/Av7q&4Hic޳fbu3Z߻ceB2+p}y}K'Zu c^:k)lzq╄O'W왗z]%_qS͞ljڥCBݴp8*;~ER4J[į6q@E.1XH8TJųbWkcre+_n~Pa-޴ 9_f1) mZAf+L9.5C^`&[*BTmL7PO(:A$c8޽4I[>]%hU 891Po8έO.]os}wS(GSwǻէo2:zp<qش3:N RDn2z椐?qF\9ƚu3a(2K,<*PBpa\{#i#0_<քtfHU"gKA+'tB.|6:ƻq?J$ʗt#O<d]/'qVB&OpFKOI hzז,sQ ;&C{h|=[UAȔ4\/Q1Ww'¤eK$ѐ *chX^-"1gUmK@+@HpkXW3iH~8@!y-a  gm;B''Ýri0A_\wzP<3Wq¯k'xTS3|W>]\~4հ'8OQ)LlPm-}vݭ#V#yqsz?&ԚȾ~Ygwp1~>練#Fӂth,eycV-\e,̝;gN]=Cn9 r?'צr38ܪy=!OM4?Vp.!O>r<̼n(EHH%>zß{DBFpf#gpߴ6RMZM=PZ"!&cǸHGYG.7/-4O-qU1GD|#ƹS3#KlE;2p#_QY8!O~uI2AiOk,y&< %^IcJĈŏ(o3$ NMN{Lcy!"(V\,MZ㔶pFW|qܝFlc$I~֋12Q0(GgLD şO`$iחEhėyY#)\8ǜAv$#<RtRpSㅳfyQ <ns'OB[8KA!q h #=DӀ+ؚ_J BnZI_?l2!T;^ f>Fk>-RTK_A8J3"R &} d2,1O$5cv=Ì0E[V I EC6jcIw\ Jt‰-W/%_Qa4{ޥh ûNb.O|y* ERԀ%%_FJQMy <5ij'8A|gԮviyI*.;칣@=1+RiTvO0RQ[aHuYS(99C1LC;Ђ{=815段;4 @2D)Eqe8RI<3Ba*nBHĒ)Ҕ?"STXSV{XRU8\ɞ%r\UȥJqto y`Ue !uݬ)2=RLmrr;bMM+U08`7paW5HT@ƿM88mf4w"GN&cgǵ$c_d@l!7z^{W=bG0w="+ 9gYwr= _g4# -sGۢ7K.p5]83u-,!x:",C?ѕ)8pʕCDWamF+*mϰO1&N}GnVul'"գ>UY0S?۝HiYPR6~ ?oxߨo&1Agć"Խu&MPU) {nN,C4K$_Dr> ܳmbm}*Rcd?: 5Obd}en5sb{3n9VPFܾKT^s&ɝ$|Ehj.'Fܷjڷ2^fiy\LدQokVUVk@-2@x yLY>/29[b6j[sCF-At&IIq.@},,_pGDm 57V<LjیE7v3YVS C^>ĥ:APc̣!XP3C,  udMUR;kPpSp*Rh IX' x|v1V9rԂ?d6\G&NME:?WԜ?SVkJKein#eCNQJwe,_.Wu/L^R`z$f@qvJ#yxG7JZ9N;5&qePny؋&A4F?iʦE. s]d92'm^<|ҵo&Y!kimd6sȰq8vFjMƟBD?,2Ys~U}~XO͈sƫ+r)\fxn^C.G۸a1Dp4@l.BlC{]\ 5WWJ_\n+Lț~W7W'(R`c# cfɵ䏩jU+$;_1SޚDvl򂤾U3i-?C+/!$Tֵiskc$؇fm/\˙.{u )%VDβ5zKtonXfQ 0|OSc|-(| S Z /bPYIsrJA)@*-KbLP msn6?qY\> ټQ6q +Y&ӄc')Z`6]fxĿ,a,IJshA$RZxi?`ȧ)ruGaSI- WJ] j ͗<` t%&+]wa4lr-?ւcR׼:i`  [sDEI,;G$3懯%qN% jז\-"l(4W۷b병`Qoctnie-A(wUhOЫteQ\s`NcMbqQi< 9&\$?DhMOpI*,)*XNڏR.ǩF欃ϥr7o*Uv_d vz#~t$95p&1C$P)3,)P#˘:_d?8Z SKc!\PՕ`_PlF^K02mвN (~/-1M^qP r^ ʢUw?ydx{5*]9UQS/FkO1,BK0K ,K&;7XOe:gѹNw80ޫW^Hxڿ(U>#f.Y؍S zkA5Pi/1: Î蟺Z&՞x]DY>Xrٛc G¨|P Gs #acR%,6]p~] %_G }Q^BšT;F;RKVrȂn)i7@%5xIlț/ @Z8* y=9\!_$Z˜KФIH,B (XQO ؁w!qJ,kʒZc(@"0bJr խҁ(q$7;QC\d5:ULgX7>eKW+\N5]TRRm,HV/鉺`5u! w 9F+ w$Ej$k/=Z[.|Sr9A*-F qjhUز-c+W`:ec̘5깊;|Y@T}bIDE'1 y/ef7I4H&fp tA`Qt<bdG2A!+Ypo s+Vj0s޺v]HZf0R| </k!liA_[{;K|"Ch}@z!^ Oh`P#6= BgO\g|nV\?@"}%zV_R-vj( q Qr22zsUǂQ,)ʥLd]K-[#4Éёb0qE|F%2BýL&kDt>4h oS 7\VJ4f41D4 cY>B)6GSrJ8F6ݘ(؞ׅ2I||2}&l""pj:%lű7;~vǟ6lQ'7d6!ӣHrfAJ9È53Ŏ"(k/YyXtΓsf+k&^lHf{4 ue`i†^uIE|[ N-Z1!xH\^K͵C:Sf,e4[䧔 jX +y3(yB!tIn*t ?4.|_^u|(?1KuF|#1x ^?BߏPkKj]VYgyT5_9RUCQvɟj'3B'0C>,jK -يpJ~e:xͥݟ_꟏+łQi" (1$<Гl_{=#=?K/]G_C&ė؎%Aku> sa7;nPI29L} \pfO+wdh./f;!寗j$-(ot?$_ǔnKe)LciA9SޑnR)Dk p&4h!&I8 0Cjw4Ŕs^ ۪ghy'ԓr)lE}qIKZoÈPTA?XK,Zvzk ̳i3!<)/;=" & V= O5GkŽ;'Z( HUb#gGP4|-`Gd!_"9?5mWqb^O1 ,+{$ @ʌ'Hd)pO*UPwϬSޥOX`~T)=xPYWS&Üy_l/q`TPI`~ f"`aC A%K3s:\QpG5W.4C.PPC= ntVÔ@K 7CᤏdMHe @'-YǗUv)a*}~X) +8_ `H97 rO/ؗBߚ/p {9 L;"Ee-?h.śR9(?n"voZw?A'~=A-J Zp5y1X߹CVakq5M_~ݰUNT%5DC%[PH-\5.Zx|iY9-/:4ۂ0h5IWyD -N0+{1OWrM/'c|-rcl-M3&ʺG-vņm^|j3blȎ㷍B N*/!2_lY8bzSdhIR*mMש~VkD,9Ŋ* l#>|RPzʠ^O8eS %k3( xay>tCPS/[*I9{7B6a[_H_*3)OxX>SNxKA-&|aw'VPZ :d=E䮖,A|MwࡃɣmI(߱F7&y˗dWC!U! Eu< 4Uzw"W399D9=1L/<0"ӿmuaAGK=^oCQq7XW0n#q0?鑸~0c.zDg*@Q="W``\Q "Lў'BEFy$  ܡ1"-mKC e7i~ !tZoU\xG"Zz߶w^ue_QK'I~+I4چ:φ=Q\*TMsjzT Mt{HQ-"%U6715ۓ{D ~&r S/YIlugk)i$ 7"E >F5njuVV*@ߊ!w: ;ޔv ʒ%)AxCkNTxtM[>$ɘ ݲ,`1= ]L(gS&ׅ<Մ[ i?z!e(OY2ɗit-:jh?#(c`M| s7LL$I,_r"pc2ו& IK.g ﾱ`>rk?lQ}m|D~(рP:Wlk4![عL+Hck8I-u. !9#XY⩺aXc_\C۔g7r"sTԼ@YUo]('`H^qɾ!g1djqM0q&jz3KrB &`T},3ܿYqUÚ_ӗzނ%Kq:YV8 Sz c[Ȃj4n m_7據 OBQ$#'6yJ"QQѕKUNL:ϝ˥3ay}C iBS@XtSޔM g~T|5CLiMt 1aC-Sf[E/FafoB%VCC'4ܶʿUVyھX_&#QXpC'c%"UM["z_Zܐ Di&*# Aq"Xu ~p" @98OVU=pT4:Q}?PnGg@ŵz9a,9лYXX ȹwijF&t/T;/0;[uƏ0fo{ᯅgg37MG5>u^"LY9ް_i[B\c7g␆)QӅάFgq݃sV+i.e}}dg<5nD~5?-cYaJJ4{\2~MIP%%yXlɼ WkX{sσBϚN{>Λԙk3qG;Ws{Bc_ȫPBvӷӐְT];#wr]t b`-1]f9C4 " V렄.S*"bߡ!Y^q_;Luȸ8ccRj߃s{к/3q]H(J|I߉6G6k[i:ֆw<9bqf Em;+# tЮ3f!,@lZǙsRvSk /.in紖}m*H/OL&;J5' 2 a=5zhK@hD|Pz7};p×ߩɞH:ЬuO:IraL4AAEN 2l.M"zǾ hL+6'ѻ Rl1lV3r[8wne Zd|Y. $O$?]]Ϸ \!#<0iag^41zq=[@)dMlw=.$'1hrYv1QzO7MGֹ ͥkα[hFڣ#:DQ @8i^ ous HD|`ӓ .io&OI" F *b/f P-b:G5'mzRƉh4Cs%w6MG/(lm×*((@Ӯuy:KtZX"9RRX80ܳ#'WIc]9l!5\󇙤d{n0#{.17>j'$s!,Q{l!ўw# 7 xGtsx5"n)Iq(q 5\ QxɧqtZU T\)!2y"[h[Z'|'BQQV]c:͡=/P a]î꺂"ɭVi7iM*:nd|:{[w%@Wܰ.`Q7ڒ\ COǕc GY h̀TN? L"m{쾥0pubѬZJ•ᵹǓ3'ucwjM C<-gmYl!ɣBir9t0-> "4XiZc_=2suY ;uֱK9Aa{IBLOe.|2rw(jm  sM%Krgv-WyH]TC­x ,$̢a&m`'n>>|6eW*AK I-Ќ6s*:VK1*6Kԉg>5rk$y zN~,|&QiGY؆h>:.0Ҕ;BȜ5A良L aLM 8eN6Z2^APGpVBFnƅ1χ*N )OVy {"pd<RFQ'ډ8iF+f9"FƝ& IX'q4aܶ |fSSQ*uYL~츳bF͹ECJɐT a%SI*K+5gq9\!t]Pθ t:Ӡ:'ŭw?w`( dr#F+TQ_R5WEVVg%Uvd"ڂp>_#׊;.fI,{c}p|4|~+.xW/Z] UWͦ}5*6|oеorA~8wafA 3cs;'~ {$( C{@հ-iZG"zmZG8 XT6Y#T 6Myʶ ]IdhAШ]͞]dQA4hPn' WQ<|w\:0<)X'vL;KR맟Mqa(VyEo5c/+ 0"$j?@هuUOf7%,=T?QQW"%%o7