container-selinux-2:2.164.2-1.module_el8.5.0+890+6b136101 >  A aU][8.uRC4*eg4R kjz f{>6&gpk7T'.Í/0Z7@ bʗBƬ`޼{{ KQˉ=z2^nB(oQ:]΍}dտh'pG$ t|]֠ɸ+QOQdћT2?BmmUg@UB5m ySM\Q3KJgH }Kp 0[cgΫe{%nm'39m.C/@͗Z|ĻJ;1:?p%} 8rY].:p'TyjԬwqe!ݹ^ՁnNAy*NE0Qfiv)ѨQG[c:<cN{Dȧ S[{'(6z KOk2]7®F^e) U'lc^٭|0x`VYf927cd79355ce3dcdac102396e436c4dbf9bc80f4e71bd9157731c1d4435cb1aeb5a96915671dc6149720fbbdcc741c48f39f026aU]8't(a+ߺ٫:#בK!WD0Z~Z0%tt։<)˽Y'(L$=YkPL1 KL8$[ØN-5tV `ao`^<"]e2,mYaA 7qU? _S{ W5f~me"4R\/͎!FIJF[>BdnQ1ާLkh.^yVrA_[CI͝.cם,A=DlT 5dQ<J>ľא,79%pH!/Z:`; Xf3kԏڗ2}.+v)wƌL".8|˶QqTO"Gh b݈'V48 馅.Պc"o= ڼWo[&LM\'@vxACw^Hy}?_ȶg6+1k䂐\<5֤A27~L>pFM?Md< @ h 28?x   (  <  d   n   x     D  l   ( 18 8l9 l:!l=F>F@FBFGF HG IG4 XG@YGLZG[G\G ]H ^Hw bIwdJeJfJlJtJ uK vK<KM:MDMHMNMMCcontainer-selinux2.164.21.module_el8.5.0+890+6b136101SELinux policies for container runtimesSELinux policy modules for use with container runtimes.aAx86-01.mbox.centos.orgCentOSCentOSGPLv2CentOS Buildsys Unspecifiedhttps://github.com/containers/container-selinuxlinuxnoarch . /etc/selinux/config _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if /usr/sbin/selinuxenabled && [ "${SELINUXTYPE}" = "${_policytype}" ]; then [ -f /var/lib/rpm-state/file_contexts.pre ] || cp -f /etc/selinux/${SELINUXTYPE}/contexts/files/file_contexts /var/lib/rpm-state/file_contexts.pre fi# Install all modules in a single transaction if [ $1 -eq 1 ]; then /usr/sbin/setsebool -P -N virt_use_nfs=1 virt_sandbox_use_all_caps=1 fi export MODULES=""; for x in container; do MODULES+=/usr/share/selinux/packages/$x.pp.bz2; MODULES+=" "; done; /usr/sbin/semodule -n -s targeted -r container 2> /dev/null /usr/sbin/semodule -n -s targeted -d docker 2> /dev/null /usr/sbin/semodule -n -s targeted -d gear 2> /dev/null . /etc/selinux/config _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if [ "${SELINUXTYPE}" = "${_policytype}" ]; then /usr/sbin/semodule -n -s ${_policytype} -X 200 -i $MODULES /usr/sbin/selinuxenabled && /usr/sbin/load_policy || : fi . /etc/selinux/config sed -e "\|container_file_t|h; \${x;s|container_file_t||;{g;t};a\\" -e "container_file_t" -e "}" -i /etc/selinux/${SELINUXTYPE}/contexts/customizable_types > /dev/null 2>&1 matchpathcon -qV /var/lib/containers || restorecon -R /var/lib/containers &> /dev/null || :if [ $1 -eq 0 ]; then . /etc/selinux/config _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if [ $1 -eq 0 ]; then if [ "${SELINUXTYPE}" = "${_policytype}" ]; then /usr/sbin/semodule -n -X 200 -s ${_policytype} -r container docker &> /dev/null || : /usr/sbin/selinuxenabled && /usr/sbin/load_policy || : fi fi fi6)R_c1A큤A큤AAA큤A큤aAaAaAa(aAaAaAa(aAaA8c04ac861d425e9947eb5bc06c3125d682dc981f6327e789ebe1c4eba0d856fc0389dab4c8de315b75e65f20f4e606a015aac29056e561d6f7cb6aa588f431a9e194e1fd0b409d85b63543f76708a9035dca5d5e802b7f61527156b8fae903dff46ddeb8e067b9a26ff78835ee75a32291954d7295ad7b7a1ed85bc975d4ad35rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootcontainer-selinux-2.164.2-1.module_el8.5.0+890+6b136101.src.rpmcontainer-selinuxdocker-engine-selinuxdocker-selinux         /bin/sh/bin/sh/bin/sh/bin/shlibselinux-utilspolicycoreutilspolicycoreutils-python-utilsrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)sedselinux-policyselinux-policy-baseselinux-policy-targeted2.5-113.0.4-14.6.0-14.0-15.2-13.14.3-9.el83.14.3-9.el83.14.3-9.el84.14.3a /` @`9@`Ȗ@```q`@`@`N@`@`dd@`Y@`&m`_T_`@_%_%_F@__"_5+@_16_p@_5_X@^n@^Ӝ@^@^^k@]@]B]]@]|@]@]X]W]R@]@\M[[ͻ[[@[[Xf@[L[K7@["X[@[@[[[Z@Z?ZZZ%Z%Z@Z - 2:2.164.2-1Jindrich Novy - 2:2.164.1-1Jindrich Novy - 2:2.163.0-2Jindrich Novy - 2:2.163.0-1Jindrich Novy - 2:2.162.2-1Jindrich Novy - 2:2.162.1-1Jindrich Novy - 2:2.162.0-1Jindrich Novy - 2:2.161.1-2Jindrich Novy - 2:2.161.1-1Jindrich Novy - 2:2.160.2-1Jindrich Novy - 2:2.160.1-1Jindrich Novy - 2:2.160.0-1Jindrich Novy - 2:2.159.0-1Jindrich Novy - 2:2.158.0-1Jindrich Novy - 2:2.156.0-1Jindrich Novy - 2:2.155.0-1Jindrich Novy - 2:2.154.0-1Jindrich Novy - 2:2.153.0-1Jindrich Novy - 2:2.152.0-1Jindrich Novy - 2:2.151.0-1Jindrich Novy - 2:2.150.0-1Jindrich Novy - 2:2.145.0-1Jindrich Novy - 2:2.144.0-1Jindrich Novy - 2:2.143.0-1Jindrich Novy - 2:2.142.0-1Jindrich Novy - 2:2.139.0-1Jindrich Novy - 2:2.138.0-1Jindrich Novy - 2:2.137.0-1Jindrich Novy - 2:2.135.0-1Jindrich Novy - 2:2.134.0-1Jindrich Novy - 2:2.132.0-1Jindrich Novy - 2:2.130.0-1Jindrich Novy - 2:2.124.0-1Jindrich Novy - 2:2.123.0-2Jindrich Novy - 2:2.123.0-1Jindrich Novy - 2:2.122.0-1Jindrich Novy - 2:2.119.0-3.gita233788Jindrich Novy - 2:2.119.0-2Jindrich Novy - 2:2.119.0-1Jindrich Novy - 2:2.116-1Jindrich Novy - 2:2.107-2Lokesh Mandvekar - 2:2.107-1Lokesh Mandvekar - 2:2.89-1.git2521d0dLokesh Mandvekar - 2:2.75-1.git99e2cfdLokesh Mandvekar - 2:2.74-1Frantisek Kluknavsky - 2:2.73-3Frantisek Kluknavsky - 2:2.73-2Dan Walsh - 2.69-3Dan Walsh - 2.69-2Dan Walsh - 2.68-1Dan Walsh - 2.67-1Dan Walsh - 2.66-1Dan Walsh - 2.64-1Dan Walsh - 2.62-1Dan Walsh - 2.61-1Dan Walsh - 2.60-1Dan Walsh - 2.58-2Dan Walsh - 2.58-1Dan Walsh - 2.57-1Dan Walsh - 2.56-1Dan Walsh - 2.55-1Dan Walsh - 2.52-1Dan Walsh - 2.51-1Dan Walsh - 2.50-1Dan Walsh - 2.49-1Dan Walsh - 2.48-1Dan Walsh - 2.41-1Dan Walsh - 2.40-1Dan Walsh - 2.39-1Dan Walsh - 2.38-1Dan Walsh - 2.37-1Dan Walsh - 2.36-1Dan Walsh - 2.35-1Dan Walsh - 2.34-1Dan Walsh - 2.33-1Dan Walsh - 2.32-1Dan Walsh - 2.31-1Dan Walsh - 2.29-1Dan Walsh - 2.28-1Dan Walsh - 2.27-1Dan Walsh - 2.24-1Dan Walsh - 2.23-1Dan Walsh - 2.22-1Troy Dawson - 2.21-3Fedora Release Engineering - 2:2.21-2Dan Walsh - 2.21-1Dan Walsh - 2.20-2Dan Walsh - 2.20-1Lokesh Mandvekar - 2:2.19-2.1Dan Walsh - 2:2.19-1Lokesh Mandvekar - 2:2.15-1.1Dan Walsh - 2:2.10-2.1Dan Walsh - 2:2.10-1Lokesh Mandvekar - 2:2.9-4Lokesh Mandvekar - 2:2.9-3Lokesh Mandvekar - 2:2.9-2Lokesh Mandvekar - 2:2.8-2Lokesh Mandvekar - 2:2.7-1Lokesh Mandvekar - 2:2.4-2Dan Walsh - 2:2.4-1Dan Walsh - 2:2.3-1Lokesh Mandvekar - 2:2.2-4Jonathan Lebon - 2:2.2-3Lokesh Mandvekar - 2:2.2-2Lokesh Mandvekar - 2:2.2-1Lokesh Mandvekar - 2:2.0-2Lokesh Mandvekar - 2:2.0-1Lokesh Mandvekar - 2:1.12.4-29- update to https://github.com/containers/container-selinux/releases/tag/v2.164.2 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.164.1 - Related: #1934415- fix the build of 2.163.0 - Resolves: #1957904- update to https://github.com/containers/container-selinux/releases/tag/v2.163.0 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.162.2 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.162.1 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.162.0 - Related: #1934415- do not use lockdown class yet - it is not available in RHEL - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.161.1 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.160.2 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.160.1 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.160.0 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.159.0 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.158.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.156.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.155.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.154.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.153.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.152.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.151.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.150.0 - Related: #1883490- synchronize with stream-container-tools-rhel8 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.144.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.143.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.142.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.139.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.138.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.137.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.135.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.134.0 - Related: #1821193- synchronize containter-tools 8.3.0 with 8.2.1 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.130.0 - don't use macros in changelog - Related: #1821193- update to 2.124.0 - Related: RHELPLAN-25139- implement spec file refactoring by Zdenek Pytela, namely: Change the uninstall command in the %postun section of the specfile to use the %selinux_modules_uninstall macro which uses priority 200. Change the install command in the %post section if the specfile to use the %selinux_modules_install macro. Replace relabel commands with using the %selinux_relabel_pre and %selinux_relabel_post macros. Change formatting so that the lines are vertically aligned in the %postun section. (https://github.com/containers/container-selinux/pull/85) - Related: RHELPLAN-25139- update to 2.123.0 - Related: RHELPLAN-25139- update to 2.122.0 - Related: RHELPLAN-25139- update to master container-selinux - bug 1769469 - Related: RHELPLAN-25139- fix post scriptlet - fail if semodule fails - bug 1729272 - Related: RHELPLAN-25139- update to 2.119.0 - Related: RHELPLAN-25139- update to 2.116 Resolves: #1748519- Use at least selinux policy 3.14.3-9.el8, Resolves: #1728700- Resolves: #1720654 - rebase to v2.107- bump to v2.89- bump to v2.75 - built commit 99e2cfd- Resolves: #1641655 - bump to v2.74 - built commit a62c2db- tweak macro for fedora - applies to rhel8 as well- moved changelog entries: - Define spc_t as a container_domain, so that container_runtime will transition to spc_t even when setup with nosuid. - Allow container_runtimes to setattr on callers fifo_files - Fix restorecon to not error on missing directory- Make sure we pull in the latest selinux-policy- Add map support to container-selinux for RHEL 7.5 - Dontudit attempts to write to kernel_sysctl_t- Add label for /var/lib/origin - Add customizable_file_t to customizable_types- Add policy for container_logreader_t- Allow dnsmasq to dbus chat with spc_t- Allow containers to create all socket classes- Label overlay directories under /var/lib/containers/ correctly- Allow spc_t to load kernel modules from inside of container- Allow containers to list cgroup directories - Transition for unconfined_service_t to container_runtime_t when executing container_runtime_exec_t.- Run restorecon /usr/bin/podman in postinstall- Add labels to allow podman to be run from a systemd unit file- Set the version of SELinux policy required to the latest to fix build issues.- Allow container_runtime_t to transition to spc_t over unlabeled filesAllow iptables to read container state Dontaudit attempts from containers to write to /proc/self Allow spc_t to change attributes on container_runtime_t fifo files- Add better support for writing custom selinux policy for customer container domains.- Allow shell_exec_t as a container_runtime_t entrypoint- Allow bin_t as a container_runtime_t entrypoint- Add support for MLS running container runtimes - Add missing allow rules for running systemd in a container- Update policy to match master branch - Remove typebounds and replace with nnp_transition and nosuid_transition calls- Add support to nnp_transition for container domains - Eliminates need for typebounds.- Allow container_runtime_t to use user ttys - Fixes bounds check for container_t- Allow container runtimes to use interited terminals. This helps satisfy the bounds check of container_t versus container_runtime_t.- Allow container runtimes to mmap container_file_t devices - Add labeling for rhel push plugin- Allow containers to use inherited ttys - Allow ostree to handle labels under /var/lib/containers/ostree- Allow containers to relabelto/from all file types to container_file_t- Allow container to map chr_files labeled container_file_t- Dontaudit container processes getattr on kernel file systems- Allow containers to read /etc/resolv.conf and /etc/hosts if volume - mounted into container.- Make sure users creating content in /var/lib with right labels- Allow the container runtime to dbus chat with dnsmasq - add dontaudit rules for container trying to write to /proc- Add support for lxcd - Add support for labeling of tmpfs storage created within a container.- Allow a container to umount a container_file_t filesystem- Allow container runtimes to work with the netfilter sockets - Allow container_file_t to be an entrypoint for VM's - Allow spc_t domains to transition to svirt_t- Make sure container_runtime_t has all access of container_t- Allow container runtimes to create sockets in tmp dirs- Add additonal support for crio labeling.- Fixup spec file conditionals- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- Allow containers to execmod on container_share_t files.- Relabel runc and crio executables- Allow container processes to getsession- update release tag to isolate from 7.3- Fix mcs transition problem on stdin/stdout/stderr - Add labels for CRI-O - Allow containers to use tunnel sockets- Resolves: #1451289 - rebase to v2.15 - built @origin/RHEL-1.12 commit 583ca40- Make sure we have a late enough version of policycoreutils- Update to the latest container-selinux patch from upstream - Label files under /usr/libexec/lxc as container_runtime_exec_t - Give container_t access to XFRM sockets - Allow spc_t to dbus chat with init system - Allow containers to read cgroup configuration mounted into a container- Resolves: #1425574 - built commit 79a6d70- Resolves: #1420591 - built @origin/RHEL-1.12 commit 8f876c4- built @origin/RHEL-1.12 commit 33cb78b-- built origin/RHEL-1.12 commit 21dd37b- correct version-release in changelog entries- Add typebounds statement for container_t from container_runtime_t - We should only label runc not runc*- Fix labeling on /usr/bin/runc.* - Add sandbox_net_domain access to container.te - Remove containers ability to look at /etc content- use upstream's RHEL-1.12 branch, commit 56c32da for CentOS 7- properly disable docker module in %post- depend on selinux-policy-targeted - relabel docker-latest* files as well- bump to v2.2 - additional labeling for ocid- install policy at level 200 - From: Dan Walsh - Resolves: #1406517 - bump to v2.0 (first upload to Fedora as a standalone package) - include projectatomic/RHEL-1.12 branch commit for building on centos/rhel- new package (separated from docker)/bin/sh/bin/sh/bin/shcontainer-selinuxdocker-selinux 2:2.164.2-1.module_el8.5.0+890+6b1361012:2.164.2-1.module_el8.5.0+890+6b1361012:2.164.2-1.module_el8.5.0+890+6b136101 2:1.12.5-142:1.12.4-28selinuxcontextscontainer-selinuxREADME.mddevelincludeservicescontainer.ifpackagescontainer.pp.bz2/usr/share/containers//usr/share/containers/selinux//usr/share/doc//usr/share/doc/container-selinux//usr/share/selinux//usr/share/selinux/devel//usr/share/selinux/devel/include//usr/share/selinux/devel/include/services//usr/share/selinux/packages/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protectioncpioxz2noarch-redhat-linux-gnudirectoryASCII textUTF-8 Unicode textSE Linux policy interface source . /etc/selinux/config _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if /usr/sbin/selinuxenabled && [ "${SELINUXTYPE}" = "${_policytype}" ]; then if [ -f /var/lib/rpm-state/file_contexts.pre ]; then /usr/sbin/fixfiles -C /var/lib/rpm-state/file_contexts.pre restore &> /dev/null rm -f /var/lib/rpm-state/file_contexts.pre fi fi #define license tag if not already defined/bin/shutf-8b3c112f1440d25e18696d2bbd9db5cdbaa5a872601a3a4f79024c31a3853b89acontainer-tools:rhel8:8050020210818220607:faa19cc5?7zXZ !#,KmP] b2u jӫ`(y-`eg-xAeu84`e;kfYMQ|Š(BX0KsVKijCq8+fJqԺ6ЌMP=eP7D%C n w8N* z+m' r1s y>+M/X1D2J1~y"[hZY7[ʲ82qܻ.tsluѐ>UREk0&Ur8HZ}ДM_4"~tdn([ovxkO4$ꏣSʒtGac$HPE ' #4фy:ǧo >)έ-~#  ᛤuM)?-YtcL;4QF.B"(|,z*}{QZ[:򭿆X;5z /bƞZq=fQ$qn$SITh7IR#xyqΥb9 #y< RkkyK}#jD8 }-'=r;Z\mu-vSnu3'y~тRp:ezJPs(g4b_Gٿϰ?2{y%bITr d}Z~x]{&j_޼6sQk sz2B5SRB`)&+Yт݁+* ,iͳnNxl&t@Qk!B%"NuMfSKמ6]?^7n4tR)UU& ^:bNH#guVVsEۻ(Eg׻< w`.2*鞯! ?qj MEWDr] H $mbR_{ٮ=~^nL9(g( &qe;a ʶhAu !}`ѡ %a *F..,P].& #fIj{Ӑ{%7J<Q Ş%@#:S^ۛ,kemՎRokmΙj.N-ndoW7`}K՚ ^G;mRg4.T4()ܩQ4@_m锗!c2dj(u<goJIhv˸T9G]ݺZ ~[簄UЬH02.KT }ib,5lCzbxf3PH~AMWd5v{)gN;qRH]s?eݢ8da3Ԭ"@͙"YthչϷ*A}U/xg#Haz?#&:䇣fMՏoN6/N*Q~o9 <,}^w)S?㊔YuTB @CW@N;&-x*GdhYG\yBRp aJdG@}8k#Qa#4#7Gd&u"{򕭇W#kQrrt /"[r[ ) `zpD?t׌!F6l+M޻[c(@sR8#2/ _L?B`Z5|Þ?$eM7larr'وSwZAH)CKc=CI.J;@W| r;n1e!&b@g9;F`]\„ےg\ `0`{غz70Gh CD=v+a BP P+fsǺ͸Kda}-a!կNcOJg,k2l#vl4j4}#d5-drB7=t"&j͇MS SJeQ>4jDlR-$L9yf\}w ~G`;b4#3iH|nʟW.Ƴ v!_]`ѯิDGd]k112I]PV{HdŔѓ#=4<.L]>"m[pI`aW$m ?**^W-1=w+Ѭ6z[ г4'ߨ ɫQe^|zUmݦ8lbo>N)3Sm5>HMBJ"|C뼎 ]f|%ΟU9}aWbͼ|wCW"Z\<sP…ɷޏŧXw 2ޜ*KVsNt|/vq/ Pxʀ\Ls%\S:woNL05K\{HK1iNrBߴ7 ,г%΂vɞKEcVο8euB ?!d9LUuY"H)] ׽KVǹEOn\se7*x@_!/tIT3\w$wGV"WAU^;$ؒf!13`n>DzAAdN׏p`Zm%D!wM A,m٬ nr0;Øٓ~2vP|)ILO`Ah4gUv} kڷw}B⩖|NҕQιAS<(M0M\Ws0DŽ~rF2s-DUUgoP&v(/^ރ^3qpc)ߑ}AkmBG=ǂC;_Xwӻh|g {w8Q} F\v'(l֗n\ ;%i1#|#_$͡wu쇉 ifO-K/ 7ďkf YTAh7Lxg }ϚD~K)Hj!qi;J: b- 1_Aj,BB Y_Y4rjDŽ4E@l\! t)4_UƗeȕv{/;A=+02UBJYNlMj(`P+XMf]lo=ءw֟m^G&Dq6 (:46skۯ%ڙ7`R)P{' CmWYcv&H !%AۋD:@8S!ݗ=&75U~Sf9!&`&Kd×dS;H״ Q_NTf1i͂>Rn DUp+?ndN >Ɔ:Z7mz~lRbGdʐw,:[-V&)YglPpzXPb3&Ohb2isZ"cʒl6$?(Rm *Nāg;C %}j@+2f%X$ǑnPUCU@}Q)l&G0 J +؛L*(  2<[0CcXK;E3e(UZX!$}̳RtВIx630Ӣ85փmk#3Л9= Qa]AaX& $[f tTPX0 9_bb"*$f^s2Ô4]b=us; FV )$NB #Ռ!z8~mSn FH\6Uz\+o, m`]e/mB< uLz]b[zfDU VEs d׍@i4|h$8 taVj_m˘d[ n13 :=I_gs$>jA/$ܯgSh W+VZ&XԬQKVx^Qt5 ^ZƣSThj5I-;68 wÞ:5yIt'R+`W),T-p'";T@#(eV۶#5jL6:\DYwzS]DŽi_%tS^Stg: "?N#lx2_ nA+ P`"TPaP lYR]-tX7ʏksO,kN <@-N69VK|lp\ЅLZ2o*="ci?|*K#cҴg PW`o 톅P\rtSO._,ioHa}@v&S d/\1h3]].S߬Cj<Atj;|y.^nV6g[LxWQ? dޕ4L:5ڒC:?DO/Qi I"!5M8$;n\qt v򠏭P^)`D{?~Ƹn&ј{Iq%> J@ce`@WR @MH t\ pΊyΥ爊?Ei`k 2:dCXmqⵡ9x tP*gLyȌD|pf ̭(„1(z|x슫j_uZOO{6ewWCꉘ8˾@(zKMEK@[g?<1s'O-`066s#EMY|#{IѢ -?e*r hIZfn㍲̵&Em*n`ר\[qȈ3y#?w*4C2p- ' D\qϳV"Fug:8<?>bSx‹-%osx0Q֍R0Ķz%!&~ad8LAt糖"|p^ARX77M'x5`L#&)YolGos®ϊͫ1ՁNF\t*VYaKSI"t'^Vw)jgjD!K Y4t(r^65;ޮ? ! jԌ IPz[?I55q`=g. ^`g= *XϠDn^"<?sI4JJް(eS|vhEˍm::fb ˁ'GtqRLL8*mP!wE,\.3`xxY{C16B/4)94zR(YhgbB rС\M=JsZu%9R?~fSR=1Pv) dW$Z~rڅic?4X$(ʺ=䲌t!+V(ItD0UO X ~sHfi@\|ii0.0BV=)6Zc8==@ A&]|ѫ8a2`qS,Ht;DؼҙBݜKJ] kmgRi ܟ6MOl0_4V%hJ, Hwj}vp'a׼f)',р"e$RiVy^ >#U:\|Q/b&*LI0Ѥ_a? ?vOh n-2YEF\_JˌW"[ԟ&hn"Lz lf#+u:=ѐc @ޞv S{BTvO@Ĭǝ(c<4*<ƒؾ[}@4P`k\9&AXޱՐA#tu^A:.:&0 c멸•VlR0.C;&wgϋV8E7vYe*x~h?M/.40fN|ÐQqq9#Y,b]|9ocCUwx!mCClwo2\t GZ{ië]}~dAĆ1}V;P=DGF>4ˠC3q<}J凘bBЁu2u`b#oeTn-pMBI(IB> TD5jZ |*t_[KcW:ËEH:R氙cFӯ2`N 8jbNR1?ӗ[l`V5qn tܸTgo7^@g+;m]+МݟOw='q8.qvѢPrK%c$@?bK`d a[JJFc"  mݹs|ݽݍ7 N'74ajXWC^3x\Uy}̸@ E4Ȱ@N`E1€;:$#h©pi#4<4A~Qu>*|-|a!8[ $3H]}Uŵ9ۨ&e_+FIiohD1Mխ 0)Q)CdAOi9Մp$5>Uv8^j+4^K4_ޟ@ZV*! ~ȸkAh9e2 BOPA2I1L2S)I$)~dzaCF6V'=}O5Ma=קUpy,-_s:C{FVȂ?X\TSV_fԭjmlQܬ&QTs#G̑kr=!p}72|.g>v읦c0E% hosjB=^S}$f1BHڂVֵPr^XH]& S:t5To4HԍPvhvdD)mIxA% y-`.sN$75rs'09\&^ (i, |!E=>l۪wjLP=dBL{=ar2礏Ń̴3&O?_8,ݘ$+_{G{"˅Da$V< AXܻ?ίi?Tr Q:G>Z׊xO+"2p*i`|bѠ"RJߑ[b+ )%L&ByZ yhj#<~gš_ /ao1 ؞fimkGQ3sG!fcmBҴ|mɿ C]W)&'aӣ/n̕=:F=8QGOӛҐ(6!tߗ@n] 0W_$l6˺ȟ$ecSc*4ibLCD !*T) wKeVV5`7+HͻvxG)Gy< b)envQi62DD꜆'*oO0,鎸d"#k>;-,ܕZ觬-L"-F9K.~8($~cz}f2H<o>MOhPmtS5r}҈!:Q%O dxJ-:)ŠlVAݧ9 %${0Xcoa<>e/;NH2)y TyB^bކ(Tw`,,VQ: [c;ld!i0lUQ2Eg^"J>m':}dHJ7g|4`HJEv9yVe "O.ކ;l*/Ca+O5K-ZIL,n1&4u,_o}QV5FU3 [ڝC}1&i@/L'=WufCP9: :z~0sD autc!ww Hs0D>$g^>>%!64!!|rώgm%t)>?Ua?"ܨOaEu`h1Ě-5 M&kq|uqXE.#9lqD!Y*MA&~;,ڣ/Zh)[8s !؍{䑻b5r{Hza<%ljYR #&| t~Bh[ܞgn)`=("FUAzHk S6cen(`2!TAdJpV`# >&ϭ㕟`Ҏ><&b cež\:4 튨YޤL{J̞b$WTBTw73oQ|sP]fMSk16nAxzD:L/K a{4< vIUȨ (r#|hw|0C%{->bۆyk ^&Tʑ0^hcqwY V ~FI0}xbR°7wSP}B_6ݖcS3UC%ϊ#kav~|Y[\$HrPJgq% Ӽ&y Mɹ0nBTq/LAoɹ! #l:=#@DK Xޗ/k^Sh``c?O<%0􄺓Ng`I䒶g/԰oy%i>{ݥ͘z|ӠVQEY#LԻ:QҨ)y |pwQiKX$|,- ~L-6meIXG /SM ЪhP}1oI8>); %wJ=# P}kkTi/?BQx8D`Η\\wͫ0 QG|w"2qI.ye[6[>gsZ`9B\هM"A4=o,Dԗ2&™Zj;ĐIorM'bjVsUV y2Jo>VypXS y؆"EY;n[,!% 5V:UMTmu dm\7>lL%Uۿ'8,݁{2u.<  4z 7^hp0!+ޮIfBuG!7$?_Ї%BŊnV ґy{uXee qkd,Gr#_U3<3M`(!Pk3YAl"oTC&Ӫ΀jgJl1zQGEoWcŒde׎lW)#R͟TV8l62N8fO$Zol#:gB@S\xĒW؄aŰ|xGbZҲj*in(0e=0HXaf-7B=x{ەB(/~xI >oE,YvcWgK/-JJGp` dsP^ؙF/>&/>-7]WgZT =)d+|җGmK Cxh"y,=Ӵ\>4$pnJ4CLCr=EM˛YkYFj﬑Ĭ+=.-F̬%2y7)<\b,-ԓP3ልkVJ P϶Co$6"  aKvt(v65]Q+Ra>J7$uqv]2C9J,2k3sqO Փqz 5V]^6D"?{bes*ИeՃΘlEujb^]"QY 6꟯k׼SU 9 L,Cl{w T*鲘>#HRX+2LRh"Qǒ dJM&$doOBݻzx8 99HI!a=3ѳaO. *cF-Lt~8k|3x~uإ/zWji9cJ&N.f-d`⨯g#N$#BRQW !WV>l63t\BU xcW]V7Ѷgɓ,yL\~㨆r}>τ:m?Ϭ3&o7c [ Bڔ!-c(_r:Bchȹk$\iЗbZ9MV2b:[ 3ʱuÀݺ!Qs BC;l==ˋ ‘Muk|%C5}@.3l VCn6 4voRwoiSJ>aX{.TݑojI6´1ZNd] VZ&'Sv~o~_!cT?,+<,=w{%e*C! TCڱ)0/cPj, ..+=XYukpqzMJ1Y7ּt[2W*r^[ykexk,ׯ-}] كDAfۙ7M+ݓ\}Y߳cw.dlҿz 4(H%7?c-o U$}!cKeCUMov`Q/#> -P!AV*#C#/%",,42`H^pѦYOZoeɕBf1 EQ Ut\hƼ<p70q \(@' siπmJd=Y J=E?;d$ݞ7% ^:f[AyqtQ˅qܺ- 3LFGY'G!L4mtŴEb{~Ww=94գs(?CBD{֬0TwlX5%y\BD@k%u7st2Fhu_xV\)r)>', L8ռ0"з[Gq]!ި5LsoX /(`J  l?h~{z:'%'+ M͂ MYZJvDŽ; _zzzzU|QGƷ@pԯW#$8 u8.?>(a'$YRrD$gd/c$vhqX'2ozB u :8z$ٛH@2]SƗ>%Kᯛ <&3Wq9(̹vD`LAV '[B-sPFٸ[Qpz2q){1Fi"+0sJuBeo_Υ3t2Ӥ.@#FI9 t7{ݷ >$`( cLjJn/})gnHS6 r*#M*^D[oƵjyJk]8ƭqF[ũ51-qL×^~ Ɇ;>{y-t[ g%E[ѓ*}KRTh葁jw`uNaϹ^s/\ϺkgcN gXׂ?.9 G|?T|.C7u^M,4Y$Vu>"ky_-c6ڗ'h@cGl8dP,igܰfjYRx9)<$GҬ8gyNP1SgDьrfV-`8:UP}(څDx4r`%܍0%]VYAĭzn!NG}:F?ѝXCͦǑtի Ƥ}C+6δN`; Ӛ圳OcEs7}Lx(* F/ w<o( ݴ莻Q^Z_Sۊ?x1!ڍ14Qbižǩ, ,]h=,띕+r_!Rl2o;xhqfsF5q =zs+>(ہf6gx:i#$҉5hU9A; EeMiu֖]&tEVLka-j?nupeC29SFCBh7}׼)Bb!,3xUwlW7H Pʪn?oH5Y%CpS Dfe~1+ QƇk" ~L_DkA!fkNoVGI2W[?֖B,X ̚dT5#a2+V){ӦZ1(x-;x&C?b42I6GN3bA;+}C=^T[E;jO%A cc0U ьaPG4C,Ʃ(޺UJakP4 dW~  ̒q_L ]%꫐vF"9w߰ZC{Q4 JzoɃ'$O`xS!sOuX,NRfa#Ԓx!snbwCgmJ/ !C!LQPeϮbYH-=?Z$hϳXDZèuaܘd!G7a[Ώ :X @j-ЎX<. dm݀#`E9SvC]MhpKaGnؔ<<4Qr%rNKp6ү!3 q-R%0LYD3ә#LX'ze^9u fX'Gw/D_BB/.V@y޺YY4[G͒7v*=gVw0rH)aYkVf^Jw6 NE{|u;A40ۧ]hl®C}ɴN[fv Ѓg:-\(t89[qt1M/KU+_Z@27lG":oR%),^V5hTkMJ]q| #K#Ogh1hĮL?k>l-iIfFFV_֝~]̆RdFSdOӹFF#EzQsXtl-`;h7niw}NU!4X\NBx |Duq\g_nwj xB!#3Sd1?>TƟG[!Ԧ km=-9 *ӸC ZVw0۪PS4oB _c \ݏW*۲λ&"PgR&vT v!Kӛ zwŔ*| i !h&7VCr.Fi ZUF\0y]@f07򒜘zΕ&t.ݫ=*$jԞ(ǹOG^fw{‰ٿ@ '7و,B 9 ' l4@AG@$Eދ夵t]S(zw #83gc-~aK"a`PXr'!?*@XS~:c J.C$kesۖ^й6  5M;-U$l 2: *Ʃ,eaFoYN飥_c5΢xLc>_~ .!}|,x&2~+Z(j>Жl?Ddݞe9F͞PMyxVLI%+;LzE.MmyN!:swBl<, )wgWdbS) ( eeي*+Z럪-LH3卺K@[ՉRn@VÇ8B3ډYQB[ FBJ$f,ɪls >\cX4KzI1~5تFө Q5»Qc8zXf 4ʧQڹHR\v28pG-EgrʴƮHA4·/^rɃ~+w,u2'=z,32+ZিQVo fm#vP9'R=IĤYm_z/ <@`BHQڒu %#r"FkX-T1Ԑ*5{0b! !(R_4+ ) 5YL}jPv&zTzo"E;~7+ZƨWܖ׮m\ jHz vCC/:J?LSx)FyLBR,D1 Nlx0TQz1k4{R6[FGG3.∑;e5nյ9$ Ok㱶*PE)D x̹"bkBG|FFfWDƕ1&1%RUBe_ɽXu T$`؄ GDJvνb[Z7%>Up/Z _3ثLR]dAmS}Z?<:ECg [HU5 m B6CHfҡ'tnPK&i7H1J!U8Wi~.X\)[ډyc{El5:I}kwqO%br mvVl=_oI,)R6.ܐuovO7_$Xr/LIӈ]VK󒓂GV\$ .ݙRDfު9mB ҁÉn~ޚSޮ^J{L2ܚוES2dm[*O^k#[u'QZ1`PKŃ@(c>Ȣk*[ƆZ:@U{@ЖT8"+Zh3:KT1 &w)rg`n4c9Z_ u0 u"1+5' "O0FiEe IL+fq(E!t}-6G<>CUrAYgJNd7/]$!M{5uꝧ3)o-%v&gCdrǍk.i\TD|OκQ84,vHЁh e'2\Y&]GOfDڑP\ksHZ5@]Q}kUiָ1,'ç$%x՚@M~p Nm`+!)x!fLۍ#)!l3(?TJi/4 _FiO'T`mE|_w4DJ]f Oo!g Waֿz!S#AF"\}ٯ#dVOf&퐸eε@~ GmhCdtQfACFHn._[I_)F&ny:S0aqT-gt+'ͻ/Yϱ ;5^L>C~&!ʕNq 6ލ|ꑅK:=|YTV[ fzߠGKd}7{hCM|š$DEg} sؚ'Ҹ;kT)TA?+itXg,@CcJ2b֝b 0SCѯ&?X=8Ԝ{2zmVmrE~S{ppnjϲ{_};B} }բ^6D0f*6HDoEuuw .ضkKI 1f j-KjYRȃ2 -J䮋FqS)<2n\1z%: iig5/7,|$Q`_6?ɒ}FZ|GN$\ d{8OB.jחKpipTuN<8iLOy–vC ~ ]M9pnuy(PDR,c@9Jc;ġ}ՉǺBA¨7C͂57}0wb;•A5I"S'ȜjEFlfyK)rж "B:9 `dZ}~F2J-Pg;¬kџ{k"SGm -)-p\^4!ֶb\Zp@& Nqy:< 臕LaoX\$+зZ] =>3Jaa6cXC'F|o9 sO9%*(hU&.(79_to>ښvmZ Dļ^P c;a ; 7R2%J XqYPL6P\7їk5d:@4j˲iަԩ)+ -Gڦ&U~AU j[K?/- ncfVZVx+.D!qȽz ŵW`Y ]$Q[yK\7JT W}'O'1УAW\,̝Xn+uʠ05㾴E)i }ktT3G1jt7o]LSZݦRwd k~eFȖA斛G'2|^5K-rgQӇvv"eM$[3 17$T0,b%_yJ&AiV=%5"/"SyP /)L^PPw)|tp uҠ-\WRXp~Wdb# dc-,T#\#^崺t;Ptfq B2dʃҦH*3t9m>x3⫣OxOš*Vk醄l?2ЯrAΑ[ťlS#7+t4vV{{gBC|g\ ZA܍IgΈCHhw(d7>֦yiROEJ qJ2@M3ݧJ5}UQ/Ú^'vz'9B&PګENe"SESdޗsn=7Dp6iׄ䟌1]!,K#\Dz1=yMAWPr I7|64ߤΦBkꁑGgS}"h!MaVԚmۙSzUQX֤:Wb|Q? =<Āfx 8FQn;Ԭk>K{[O&1~[>-?;Kws~`tN>JUNDِpXzژf=-uY/["Z>z#nM~}/R2E7l-yg5/ny` [E8qp?HvC`w={hT0Lo\^NmdX)mvL/HMcRJ&lwy zS\(;*5-W ڢ{;سy[=aSڷP9V*ZaeBǓ~ pҫ!84yz*;yL|$E4[{hhRdK }6Ś@jGq@{l/,4hiKz<]pQvoLAEwŜ _@uԨjp2vI/4w@{l|q.{Z. *CiFvj;h[$JUz~QI{1BCK,3 eՊX̺ϒlAIqt\(y>Hi.wD;ME)5`EOώ0 pōx(Nck+U_.Unצ*W8_Rm:wLJe3#$-x8.:['VJ]]^AwRT$>WX쮍͈plz`ᒬH,לIϪ0^R(60 t3/6WI/?hJ՟;AnˠVբ n58=AHwHZRy+\>ּUF0򄫭SdYMKc8le 0&{"{Aghڿə,rx f%ܟ"ׯށeB'M/fƴyQ(<׸M Y:[ t9fkg+p8j>`oUϙНׄd(yʶDR5Nc$Ʋ*5ArF̽w@ל~KȾJzw]n҃bl]mBd8 eCT@T4Հ|1_LS Sƒ2L+9+RN %CflU #͆ <17b\1+[Ekބ>"i 7䡸y6,b{=F/x[^J`p'5!kErZ`-`l wjl0J&yZs0qYMm{)l<omydY+(4>o"( ڭaUkVЂE3imڛmXÔ j~='8Zc>cjٲ !5Z2%bsپF46cqfL$-%1O8~:VlFk1XV(C„$9Sl A8N&}jdcls2Me#*ߵ]ji l`iAv@qǨw,R<̊a= YZ