trafficserver-selinux-9.1.3-3.el8 > 6 6_6 3!y덏%!E/֡c !E/֡!QM[Q7SrocG37/k%; 1 eWkEP q|Ur`)@/e?kLnj:iM),과| &-v]W_dLn#~Q7$Ak~F:,dJwLH~(w8(D%M] ]T敜0IgQjkoJrZjM%ic= =ϸ$TkNelnD>|;%55A3<1" Tn~i h1vqľku~C#'f ~<:Հ/sۀVp@G?Gd $ Ahl ]14@ F L X    , 8 P  ( 8 d9 td:d=D>D@D!GD,HD8IDDXDHYDL\DX]Dd^DbEdFFeFKfFNlFPtFluFxvFG0G4GaGgGCtrafficserver-selinux9.1.33.el8trafficserver SELinux policyTrafficserver SELinux policy modulec~ buildvm-a64-15.iad2.fedoraproject.org8Fedora ProjectFedora ProjectASL 2.0Fedora ProjectUnspecifiedhttps://trafficserver.apache.org/linuxnoarch . /etc/selinux/config _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if /usr/sbin/selinuxenabled && [ "${SELINUXTYPE}" = "${_policytype}" ]; then [ -f /var/lib/rpm-state/file_contexts.pre ] || cp -f /etc/selinux/${SELINUXTYPE}/contexts/files/file_contexts /var/lib/rpm-state/file_contexts.pre fi . /etc/selinux/config _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if [ "${SELINUXTYPE}" = "${_policytype}" ]; then /usr/sbin/semodule -n -s ${_policytype} -X 200 -i /usr/share/selinux/packages/targeted/trafficserver.pp.bz2 /usr/sbin/selinuxenabled && /usr/sbin/load_policy || : fi . /etc/selinux/config _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if /usr/sbin/selinuxenabled && [ "${SELINUXTYPE}" = "${_policytype}" ]; then if [ -f /var/lib/rpm-state/file_contexts.pre ]; then /usr/sbin/fixfiles -C /var/lib/rpm-state/file_contexts.pre restore &> /dev/null rm -f /var/lib/rpm-state/file_contexts.pre fi fiif [ $1 -eq 0 ]; then . /etc/selinux/config _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if [ $1 -eq 0 ]; then if [ "${SELINUXTYPE}" = "${_policytype}" ]; then /usr/sbin/semodule -n -X 200 -s ${_policytype} -r trafficserver &> /dev/null || : /usr/sbin/selinuxenabled && /usr/sbin/load_policy || : fi fi . /etc/selinux/config _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if /usr/sbin/selinuxenabled && [ "${SELINUXTYPE}" = "${_policytype}" ]; then if [ -f /var/lib/rpm-state/file_contexts.pre ]; then /usr/sbin/fixfiles -C /var/lib/rpm-state/file_contexts.pre restore &> /dev/null rm -f /var/lib/rpm-state/file_contexts.pre fi fi fi .rco c~c~af9ca27482c005c42ce6de7033f0d4063321e0e5f2ec9348af8904f9ceb08df8db7f9cb52aa72b7d413adb948920290ca3a828326c125a51166bdb535ba76fff@rootrootrootrootrootroottrafficserver-9.1.3-3.el8.src.rpmtrafficserver-selinux     /bin/sh/bin/sh/bin/shlibselinux-utilspolicycoreutilspolicycoreutils-python-utilsrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)selinux-policyselinux-policy-baseselinux-policy-targetedselinux-policy-targeted3.0.4-14.6.0-14.0-15.2-13.14.3-95.el8_6.43.14.3-95.el8_6.44.14.3cc*b@bb&b=b|bs@bobf@b]RbN@aya8` @` @]{]{\sZ@ZY+@Y@X,J@X,J@WSW@W>@W3W1@W WX@V@Vm@Vl@Vl@VVV<@Vj@Vj@Vj@U@U@UD@T,@SSϣSi@SP@S}S|@S`S[SFR 9.1.3-2Jered Floyd 9.1.3-2Jered Floyd 9.1.3-1Jered Floyd 9.1.2-9Jered Floyd 9.1.2-8Jered Floyd 9.1.2-7Jered Floyd 9.1.2-6Jered Floyd 9.1.2-5Jered Floyd 9.1.2-4Jered Floyd 9.1.2-3Jered Floyd 9.1.2-2Jered Floyd 9.1.2-1Hiroaki Nakamura 9.1.1-1Hiroaki Nakamura 9.1.0-1Hiroaki Nakamura 9.0.2-1Hiroaki Nakamura 8.1.2-1Hiroaki Nakamura 8.0.5-1Hiroaki Nakamura 7.1.8-1Hiroaki Nakamura 7.1.6-1Hiroaki Nakamura 7.1.3-1Hiroaki Nakamura 7.1.2-1Hiroaki Nakamura 7.1.1-1Hiroaki Nakamura 7.1.0-1Hiroaki Nakamura 7.0.0-2Hiroaki Nakamura 7.0.0-1Hiroaki Nakamura 6.2.0-2Hiroaki Nakamura 6.2.0-1Hiroaki Nakamura 6.1.1-10Hiroaki Nakamura 6.1.1-9Hiroaki Nakamura 6.1.1-8Hiroaki Nakamura 6.1.1-7Hiroaki Nakamura 6.1.1-6Hiroaki Nakamura 6.1.1-5Hiroaki Nakamura 6.1.1-4Hiroaki Nakamura 6.1.1-3Hiroaki Nakamura 6.1.1-2Hiroaki Nakamura 6.1.1-1Hiroaki Nakamura 6.1.0-1Hiroaki Nakamura 6.0.0-3Hiroaki Nakamura 6.0.0-2Hiroaki Nakamura 6.0.0-1Hiroaki Nakamura 5.3.0-2Peter Robinson 5.3.0-1Fedora Release Engineering - 5.0.1-4Kalev Lember - 5.0.1-3Petr Machata - 5.0.1-2Fedora Release Engineering - 5.0.1-1Jan-Frode Myklebust - 5.0.1-0Jan-Frode Myklebust - 5.0.0-0Fedora Release Engineering - 4.2.1-5Petr Machata - 4.2.1-4Jaroslav Škarvada - 4.2.1-3Jan-Frode Myklebust - 4.2.1-2Jan-Frode Myklebust - 4.2.1-rc1Jan-Frode Myklebust - 4.2.0-0Jan-Frode Myklebust - 4.1.2-0Jan-Frode Myklebust - 4.1.2-rc0Jan-Frode Myklebust - 4.0.2-5Jan-Frode Myklebust - 4.0.2-3Ralf Corsépius - 4.0.2-3Jan-Frode Myklebust - 4.0.2-2Jan-Frode Myklebust - 4.0.1-1Jan-Frode Myklebust - 3.2.5-3Jan-Frode Myklebust - 3.2.5-2Jan-Frode Myklebust - 3.2.5-1Jan-Frode Myklebust - 3.2.4-3Jan-Frode Myklebust - 3.2.4-1Jan-Frode Myklebust - 3.2.3-1Václav Pavlín - 3.2.0-6Jan-Frode Myklebust - 3.2.0-5Fedora Release Engineering - 3.2.0-3Jan-Frode Myklebust - 3.2.0-2Jan-Frode Myklebust - 3.2.0-1Jan-Frode Myklebust - 3.0.5-1Jan-Frode Myklebust - 3.0.4-5 - 3.0.4-4Dan Horák - 3.0.4-3 - 3.0.4-2 - 3.0.4-1 - 3.0.3-6 - 3.0.3-5 - 3.0.3-3 - 3.0.3-2 - 3.0.3-1 - 3.0.3-0 - 3.0.2-0 - 3.0.1-0 - 3.0.0-6 - 3.0.0-5 - 3.0.0-4 - 3.0.0-3 - 3.0.0-2 - 2.1.8-2 - 2.1.8-1 - 2.1.7-3 - 2.1.7-2 - 2.1.7-1 - 2.1.6-2 - 2.1.6-1 - 2.1.4- FTI on EL8 due to lack of libbrotli pkg; use RPM autodeps instead- Update dependencies to enable brotli compression (RHBZ#2125520)- Update to 9.1.3, resolves CVE-2022-25763, CVE-2022-31779, CVE-2021-37150, CVE-2022-28129, CVE-2022-31780 - Resolve glibc 2.36 (f37) header incompatibility that caused FTBFS RHBZ#2112282- Don't try to use Crypto Policies on RHEL 7- Cherry-pick OpenSSL 3 compatibility required for RHEL 9 - Switch to OpenSSL 3 on f36+ - Include automake in BuildRequires- Exclude s390x architecture -- not supported upstream- Further changes based on package review; perl dependencies, paths- Changes based on spec review; change "RedHat" capitalization, and add link to upstream file layout discussion- Changes based on spec review- Allow self:process setsched, requested on EL8- Set SELinux policy to be more restrictive on privileged UDP ports- Initial revision - Adapt to modern rpm conventions - Add draft SELinux policy - Don't run as root, just claim CAP_NET_BIND_SERVICE for privileged ports - Merge and cleanup of upstream .spec file along with Copr version maintained by Hiroaki Nakamura , based on long-ophaned package. ChangeLog included below for reference.- Update to 9.1.1- Update to 9.1.0 - Disable mime-sanity-check which is usable only in debug build- Update to 9.0.2 - Use yaml-cpp vendored in lib/yamlcpp- Update to 8.1.2- Update to 8.0.5 LTS release- Update to 7.1.8 LTS release- Update to 7.1.6 LTS release - Return stale cache with s-maxage only if cache_required_headers is 99- Update to 7.1.3 LTS release- Update to 7.1.2 LTS release- Update to 7.1.1 LTS release- Update to 7.1.0 LTS release- Remove expat-devel from build dependencies- Update to 7.0.0 LTS release- Return stale cache even if the origin server response has "Cache-Control: s-maxage" header.- Update to 6.2.0 LTS release- Add patch to add new value to proxy.config.http.cache.required_headers to require s-maxage for contents to be cached. - Remove patch to concatenate multiple header values of the same name in TSLua.- Fix bug in patch to concatenate multiple header values of the same name in TSLua.- Concatenate multiple header values of the same name in TSLua.- Remove patch to add proxy.config.http.cache.ignore_expires and proxy.config.http.cache.ignore_server_cc_max_age.- Apply patch to add proxy.config.http.cache.ignore_expires and proxy.config.http.cache.ignore_server_cc_max_age.- Disable patch to enable unix domain socket.- Apply patch to enable unix domain socket.- Enable luajit- Set prefix to /opt/trafficserver and use relative directories- Update to 6.1.1 LTS release- Update to 6.1.0 LTS release- Build experimental plugins- Just use configure --disable-luajit without a patch or deleting files- Update to 6.0.0 LTS release- Add patch to cache_insepector to split multiline URLs correctly- Update to 5.3.0 LTS release - Build on aarch64 and power64 - Split perl bindings to sub package - Cleanup and modernise spec- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- Rebuilt for GCC 5 C++11 ABI change- Rebuild for boost 1.57.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild- Fix CVE-2014-3525- New major version.- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild- Rebuild for boost 1.55.0- Rebuilt for https://fedoraproject.org/wiki/Changes/f21tcl86- Bump release tag. RC1 became final.- Update to 4.2.1-RC1- Update to 4.2.0- Bump to final. No change from rc0. - What's new: https://cwiki.apache.org/confluence/display/TS/What%27s+new+in+v4.1.x- Update to 4.1.2-rc0.- Buildrequire hwloc-devel, since it supposedly gives tremendous positive performance impact to use hwlock to optimize scaling and number of threads and alignment for actual hardware we're running on.- Rebuild for picking up ECC/ECDHE/EC/ECDSA/elliptic curves which are now enabled in OpenSSL.- Add BR: systemd for systemd.macros (RHBZ #1018080).- Update to 4.0.2, which fixes the following bugs: [TS-2144] - traffic_server crashes when clearing cache [TS-2173] - cache total hit/miss stats broken in version 4.0.1 [TS-2174] - traffic_shell/traffic_line miss some stats value [TS-2191] - when http_info enabled, the http_sm may be deleted but a event associated it not cancelled. [TS-2207] - Centos5 out of tree perl build fails [TS-2217] - remove the option to turn off body factory - setting it to 0 will result in empty responses - Automatically verify GPG signature during RPM prep. - Build requires boost-devel.- Update to 4.0.1. What's new in v4.0.0: https://cwiki.apache.org/confluence/display/TS/What%27s+new+in+v4.0.0 - Upgrade instructions from earlier versions: https://cwiki.apache.org/confluence/display/TS/Upgrading+to+v4.0 Important notes: proxy.config.remap.use_remap_processor has been removed, use the proxy.config.remap.num_remap_threads instead. Default proxy.config.cache.ram_cache.size has been increased by a magnitude. Support for pre v3.2 port configuration directives has been removed. The following records.config parameters should be removed: CONFIG proxy.config.bandwidth_mgmt.filename STRING "" CONFIG proxy.config.admin.autoconf.wpad_filename STRING "" CONFIG proxy.config.username.cache.enabled INT 0 CONFIG proxy.config.username.cache.filename STRING "" CONFIG proxy.config.username.cache.size INT 0 CONFIG proxy.config.username.cache.storage_path STRING "" CONFIG proxy.config.username.cache.storage_size INT 0 CONFIG proxy.config.http.wuts_enabled INT 0 CONFIG proxy.config.http.log_spider_codes INT 0 CONFIG proxy.config.http.accept_encoding_filter_enabled INT 0 CONFIG proxy.config.http.accept_encoding_filter.filename STRING "" CONFIG proxy.config.net.throttle_enabled INT 0 CONFIG proxy.config.net.accept_throttle INT 0 CONFIG proxy.config.cluster.num_of_cluster_connections INT 0 CONFIG proxy.config.cache.url_hash_method INT 0 CONFIG proxy.config.plugin.extensions_dir STRING "" CONFIG proxy.local.http.parent_proxy.disable_connect_tunneling INT 0 CONFIG proxy.config.remap.use_remap_processor INT 0- bz#994224 Use rpm configure macro, instead of calling configure directly.- bz#994224 Pass RPM_OPT_FLAGS as environment variables to configure, instead of overriding on make commandline. Thanks Dimitry Andric!- Update to v3.2.5 which fixes the following bugs: [TS-1923] Fix memory issue caused by resolve_logfield_string() [TS-1918] SSL hangs after origin handshake. [TS-1483] Manager uses hardcoded FD limit causing restarts forever on traffic_server. [TS-1784] Fix FreeBSD block calculation (both RAW and directory) [TS-1905] TS hangs (dead lock) on HTTPS POST/PROPFIND requests. [TS-1785, TS-1904] Fixes to make it build with gcc-4.8.x. [TS-1903] Remove JEMALLOC_P use, it seems to have been deprecated. [TS-1902] Remove iconv as dependency. [TS-1900] Detect and link libhwloc on Ubuntu. [TS-1470] Fix cache sizes > 16TB (part 2 - Don't reset the cache after restart)- Harden build with PIE flags, ref bz#955127.- Update to 3.2.4 release candiate- Update to v3.2.3. Remove patches no longer needed.- Scriptlets replaced with new systemd macros (#851462)- Add patch for TS-1392, to fix problem with SNI fallback.- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- Remove duplicate man-pages.- Update to v3.2.0- Remove trafficserver-gcc47.patch since it's fixed upstream, TS-1116. - Join trafficserver-condrestart.patch into trafficserver-init_scripts.patch, and clean out not needed junk.- Add hardened build.- Add patch for gcc-4.7 build issues.- switch to ExclusiveArch- Create /var/run/trafficserver using tmpfiles.d on f15+.- Update to new upstream release, v3.0.4. - remove trafficserver-cluster_interface_linux.patch since this was fixed upstream, TS-845.- Remove pidfile from systemd service file. This is a type=simple service, so pidfile shouldn't be needed.- Add systemd support. - Drop init.d-script on systemd-systems.- change default proxy.config.proxy_name to FIXME.example.com instead of the name of the buildhost - configure proxy.config.ssl.server.cert.path and proxy.config.ssl.server.private_key.path to point to the standard /etc/pki/ locations.- exclude ppc/ppc64 since build there fails, TS-1131.- Removed mixed use of spaces and tabs in specfile.- Update to v3.0.3- Update to v3.0.2 - Fix conderestart in initscript, TS-885.- Update to v3.0.1 - Remove uninstall-hook from trafficserver_make_install.patch, removed in v3.0.1.- Note FIXME's on top. - Remove .la and static libs. - mktemp'd buildroot. - include license- Rename patches to start with trafficserver-. - Remove odd version macro. - Clean up mixed-use-of-spaces-and-tabs.- Use dedicated user/group ats/ats. - Restart on upgrades.- update man pages, sugest from Jan-Frode Myklebust - patch records.config to fix the crashing with cluster iface is noexist - cleanup spec file- bump to version 3.0.0 stable release - cleanup the spec file and patches- fix tcl linking- bump to 2.1.8 - comment out wccp- enable wccp and fixed compile warning - never depends on sqlite and db4, add libz and xz-libs - fix libary permission, do post ldconfig updates- patch traffic_shell fix- bump to v2.1.7 - fix centos5 building - drop duplicated patches- fix gcc 4.6 building - split into -devel package for devel libs - fix init scripts for rpmlint requirement - fix install scripts to build in mock, without root privileges- bump to 2.1.6 unstable - replace config layout name as Fedora- initial release for public - original spec file is from neomanontheway@gmail.com/bin/sh/bin/sh/bin/sh9.1.3-3.el8trafficserver.iftrafficserver.pp.bz2trafficserver/usr/share/selinux/devel/include/distributed//usr/share/selinux/packages/targeted//var/lib/selinux/targeted/active/modules/200/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protectioncpioxz2aarch64-redhat-linux-gnuASCII textcannot open `/builddir/build/BUILDROOT/trafficserver-9.1.3-3.el8.aarch64/var/lib/selinux/targeted/active/modules/200/trafficserver' (No such file or directory)https://bugz.fedoraproject.org/trafficserverutf-85cda2e92355d7fd3e2f18c7a749048ec2f7d71efa8dcf038e32f838818ad05f7?7zXZ !#,:,] b2u Q{LUMNh |4b:.}ʍӝ{R1 HʱL,)FKMKuFobؽ%Q<uyĀ%CJ~p* 7I(z*hfN\LAHk 1v0'/ l fQB7Hx+ k9Ҳv#|]q-o^9p}F_oV'UYc\z; =t.ۄbknJM_z) )ۺf|  KH'dr&ztWacY.%(<]uCu^ =&}K^\A {+0Jca^>K3<5C*'R_]\C?*y 'Dʯ}Q,LzoPKj`O3]SƳ?Wm I`>*u;l.@+d0ωjeJ,'j#qǰ%?3D72eЁC+G\A0@HL׹W?c2w4͉ ˙A;Dؓ״F{*ci:d 66 zR[-ZsYXqrg" PUl+`K !Y/z?Je4l}֐ $LQPe5vg D›Ed ]VRnbQ+D B~~+ukXΗS&OX3.u:,V|R!p봙$K~A};"(3dTEs8_waL.`;<@ZfTY1tn ypynb.&mFAUM7RrVT-_}xPȠv4E0 "^^V_+czN&ƒh# soSO,=~\GV68OIⰸtHDMvgL%ˎS7Vey\8ϟPN he:Jhdq.Y8A\0%"ejqxwlr|~.t7JVy!{g W S:c9{tҨTɮ6<[>T1+!#Bei$=&+(֑AW @)Ǚە?/H,wW~JݟC>p~|SμS&YVv\D 6_a BS,YJ:{ 2 @۞8K b.܊P4(zN6G`M$ӄ&vt':AkmyВڔ֖P/*,u2֢M_ZJ'lxQڞOPl\Iל!F8y$Et)BV}#˔bQvAyX_Z3Z XzFa|c"ߔaԬJMnMۦl(! D~왰gv.)vo>' 2Vx2!zii_b o1^^.<"kxe,zޭ`zkq~Ms{Pr0%4Ƿ#}#΋X$Z8_'9^9^[4- m`%?ĦT/VTg͏RF.%[y<\=*q,^Se;кФa#ȵYC6M~a}Uȓ =B/(s"r1J2~ٴ1m(uJWnLvCA6BnyXr|If%]c=r)d⍮w/f_H%ɐqng%F#5%0ڿ8eH`9C% ݁5@h<&-} JJoxR%^0>o`BH XR,۩5/Fj۫bI Qw $~^HOדMQ *4Bw*/Z 1m̾A{c 5u)ģ wD^`-ұ_ؑ K WtЏ@]e椲μ". O\=*I ϯT[+ &i:v~Hu׆e7Hak~ e86j*l6&߶Fjf al ךzv:`F4n{unN~m#-ebTQIAA(45WCϋb_?/(Szt*? C73Eif?"hǝݧt16(BAۀu1ã{9l>gy/}~q(ȬywJQsۯdF9FA5Q]`Ѽ*N,ߐ2xv$Jь++['RD2OeNl0y=KlٳUs|̙z4 G1}m9PxhB?(KzV|Bb?wCn2:=nCi(BK{F2䨣6qU R$]4~ٜ|ӥ{7w@ҫbeMJ>V_+@A'sOtïrK244-h=A|Kdep$$MCw],갯b7K"  GGEBG(cQr|$3y>.m?O맻 \hˆk^k GAy GJ2"fFL0>]w}UV%36`E^1W"y$;&MjYe!pwfVO#5hM(Ӎ?NQ%g3KIP9 q VyE9*8бb%k^]|WMO-KPDXmJ.wAXx\4YWT]0j2mA="XXB% hJ_g]wy|yw?So"x6Ek[i _bŨ* v96:7GH@ OV~%cILm>nufO B3Cj83=,z'B=]Ψ[8 ' dq1@vs)t >k&켎ľ$~;Po)WC'RI@֩Qf$6 M[ƘНw墠yC_vXzDOjx `i 1Z 152I:»qUؽn[MW LQֆ#Kc0` ܚrHwwMz_e4:mb|OArq? 4_ؽiN2ӞR`bGn5ꉲrMZ}2Xp2K9g:ł6:<:q0Q װLK~mG2}G'JZg)PrbߘxI&D}&8)L4$UVƝ:m3yMf?<5.Ϛlۏ7>wuT_"/2 iAPwX؏4fmL'g(Z&H/՘  xBS`G5GYNgQ7<лEv^,j .!h]Lf#lgǂFې{lk>ޡ`r?e2nT[v&ϛٳ78+9~<]}ȼ2L+|k7;WKz_b>!Xum nDIVR6yדeDOYqD{q?նllZ,uJ(4ȋ)@JvϨEPH Z8:ൽNTk]$Qu|l,žBZ!x$Sgv-O{> ='W% iHx&Kl\5Lf=}@WdDkHdyM#?[QBד:|& ٗ>3m\8c瞣|2ު.Aufp!^pR׿1\ ! a iظ\2'_x:E "+gR@HX*Y@|*9*2 hHԵNJ8 3ĘfeU5y&˕LFcI4$x嶓 u+O9"[X ``<.YI૮槢3B9!X*"N}lO`w{pL'X?wαzP04`L͜Y&MJE(95qXStXV2OlIæX[Q ARdBRFU}\)@ 01^ `s~^XSxT tn4mTבKqS77t߂AffO*uq6K j ,$ a=vA=7xT9|DAz$l|t@[ї8m(!F"|tNxI4"ܒ[q >I ؃ xPTNe -SW 80A[}Fq"K1ns;t@L>T WV@x8jGUbf8yK`u=r5 U߽X8?=3ڽ>/r;\ zTV&o }%|i~[\S&: HDp?$`7iCv\/R Vdg6c$ |1 s#BVPSZ`2!KY-W|tdR(i`7?`aUi0&AtC c-PsN*zxcnX,12Ĝ@Jz-%Zڀk ѤahN+Ἥؚ|#9䏖)|$,UF~9Gqnڢ 4G#i:"t}0|i͵rfUFDBV|eȊC+ 5}6U7{DM];4{{qd:rEW899dt`Tx%_mqP*' d z(I ,%$} R8#wKm;K5#\`^` s0,S-tv0DƮ@۩_G>WYMpbi0mcZb21Ń#DDsMA~YIN&.Q?2ƆMɮLyilo%q@t<uybѾKTFbOYNj'X D[}Tv(WlF^#-qg(|*'}C D27ytyDf`S2B|Rzk95sowX 2-u`%XBR"$YcZՌdhxmK%v! Wt>_[\!8(;`npwR_:SO5)<R@=/0vq!Wde׈gۭYǘYcS- sSUǸhU,pdˇ^z(4/3"j4+hRT.^I38-,\VKmʣ@L>0X^UGkEBj'?7<9@ 'S|Y`]q5̹+/~al4xږ[w7%ȏUDL3tf}Q.ؤJԢ3R 3Π;6?jٙRViK.[RӶTtk&io#q!{CwWZf#VϠ /Hnʵ He?HߪGhOT9@gŸɇթguwvN,QV_>$֦i=V3 {*:&O>I9c{c})Xxӣ>RMr*y{l3dHBB 7 Q8($?4$pawF8[{b>wxؤԨ$&rgޘeC"HĽ^Sji% Fe%-{6h5N{+.<9Ĵ\7G Ϯ_pO+a#o`u4Kl|pmIA2+,ЦLSE#AEڇ |3_e E5d'DBe'tLL z֎y֬gT Ƀf q@(uؐm*1BP !\j5BI?vѰy]|-.r'˦cxݭq(Kmo+i IUWvy3cE$] :P{:-U윟CV^CyyeUn%%jK}^{QJ69(ߓ7V pzڍۯkw 혌ñdPE:=4-.BcEH Bm,&#^W 9NtR/<%߀ POu>y96͵W.b&d.bwZ0)S8XK=7{bzkQf)SޤK|ڮ~ eX\\叚̈ۺE ޯ`~C# qňŋY9N&)n& ZT\յxkQ.:ev(pU1=s]CQH#T\$`'S\C#z`#>@=NyusFD"\7<&\ ƛmLg*$#G\=ߊٛn gcv৊J~9 eraҾW+HΧlxzo!ED)1|e TJ BҟǃvSkN< IIoD֟S*>.*mu<]HCj+L`G,+̯{İ,M:  >\!>4Jh2h%*7&U|=g WNߟHIM j9Lڙ`FBZ0fl>(3%{eV \#U)JUNy!Dys=.5Ofs Sy?,=y?ٞ"dy~ѠzY[k;ܪ{dG`Ǯ/8fmk:Um 2En}x+CFЂ*^Y+#[`pgߣb5'?(܁ҔV󰬴q_G" 45KV&R9ӎ?̫ J4y2FPZmdhDЙM/eiUX,#įJEȅcJG + _KewMI!.i!Z>c~V9 Qt mgrnԌt#11EP\ fj 鳠>;c;(cJ |S͍]~MWg4˛qJnM%ralG/$d(h+֝ T0:w˚Bbt\YvT 9٦' }ToZ |b%Hp1hZ2]C(m)HOڀϭ>u*EVkCrgU,}۽RmhqPe+aTS75xK:Nʣa}NHok$W󷥶oMEQFj 5w#:NIpǨBRa!< ~g&lɩ<zaMd8/PU3Ku`g5?$#tf*PݞCq@Õ쁜idy5kDmo1SŪJD$beWV̏)~?V;}Zj_lETQ@+k{l$֐ yx  vTk^DHȍ F}vјfJ!B߯εsHX`J!EqPn}: e6*)*UH&0 >;FUS,E:2th{0O-ɼava^Z& l;)FfExb.V}1Ը6Z\i@&*Eb}WNBJ ?e&H8V9h0P6"GMcDB5vI6BPΫR`i.^=<>l(gS‚.p%g8>֣k) jhN6d" FK 6a'33V~\`QE6xc^J7K"|  ]YB'1 7