container-selinux-2:2.205.0-3.module_el8+392+60106495 >  ADHLdtx<dTVU] ^+Mc7i,Zt\@7BUNRQfd_2nZ-C\8]}b#7|9vh&8wMG}p {}QkVGNUA [ܓɜ4VZ؝qu47,ژA~mPGDsK|= [Bs! F)f(8;\[5|Zy9Tfm)wE@S&54NCq @USxc9$ KHH.2S@?:ֱ wP6P1?P!d8 < d 7=DL P T \  ((89:uAOFO%GOPHOXIO`ROd\Oh]Op^OdOeOfOOOOOOCcontainer-selinux2.205.03.module_el8+392+60106495SELinux policies for container runtimesSELinux policy modules for use with container runtimes.dTox86-06.stream.rdu2.redhat.com,CentOSCentOSGPLv2builder@centos.orgUnspecifiedv2.205.0.tar.gzhttps://github.com/containers/container-selinuxlinuxnoarchdFn恤dTId2cf8aa5769aca3fa11596b6c62ffce81f01853c95e50e909d74d197fcf3429b43b90501cd684091791749ad93bcd580ee483bcc4d0468ff24796968852f05023 mockbuildmockbuildmockmock  gitpkgconfig(systemd)rpmlib(CompressedFileNames)rpmlib(FileDigests)selinux-policyselinux-policy-devel3.0.4-14.6.0-13.14.3-80.el83.14.3-80.el84.14.3dP@d9@@d@dac_c!@bVbb@b_b; b+9b%bOb@aar@a@a@a@aa+@aaKa]aQ@aI@aA@a'@a&0a /` @`9@`Ȗ@```q`@`@`N@`@`dd@`Y@`&m`_T_`@_%_%_F@__"_5+@_16_p@_5_X@^n@^Ӝ@^@^^k@]@]B]]@]|@]@]X]W]R@]@\M[[ͻ[[@[[Xf@[L[K7@["X[@[@[[[Z@Z?ZZZ%Z%Z@Z - 2:2.205.0-3Jindrich Novy - 2:2.205.0-2Jindrich Novy - 2:2.205.0-1Jindrich Novy - 2:2.199.0-1Jindrich Novy - 2:2.191.0-1Jindrich Novy - 2:2.190.0-1Jindrich Novy - 2:2.189.0-1Jindrich Novy - 2:2.188.0-1Jindrich Novy - 2:2.187.0-1Jindrich Novy - 2:2.183.0-1Jindrich Novy - 2:2.181.0-1Jindrich Novy - 2:2.180.0-1Jindrich Novy - 2:2.179.1-1Jindrich Novy - 2:2.178.0-1Jindrich Novy - 2:2.177.0-1Jindrich Novy - 2:2.176.0-1Jindrich Novy - 2:2.174.0-1Jindrich Novy - 2:2.173.2-1Jindrich Novy - 2:2.173.1-2Jindrich Novy - 2:2.173.1-1Jindrich Novy - 2:2.173.0-1Jindrich Novy - 2:2.172.1-1Jindrich Novy - 2:2.172.0-1Jindrich Novy - 2:2.171.0-1Jindrich Novy - 2:2.170.0-1Jindrich Novy - 2:2.169.0-1Vit Mojzis - 2:2.168.0-2Jindrich Novy - 2:2.168.0-1Jindrich Novy - 2:2.167.0-1Jindrich Novy - 2:2.165.1-2Jindrich Novy - 2:2.164.2-1Jindrich Novy - 2:2.164.1-1Jindrich Novy - 2:2.163.0-2Jindrich Novy - 2:2.163.0-1Jindrich Novy - 2:2.162.2-1Jindrich Novy - 2:2.162.1-1Jindrich Novy - 2:2.162.0-1Jindrich Novy - 2:2.161.1-2Jindrich Novy - 2:2.161.1-1Jindrich Novy - 2:2.160.2-1Jindrich Novy - 2:2.160.1-1Jindrich Novy - 2:2.160.0-1Jindrich Novy - 2:2.159.0-1Jindrich Novy - 2:2.158.0-1Jindrich Novy - 2:2.156.0-1Jindrich Novy - 2:2.155.0-1Jindrich Novy - 2:2.154.0-1Jindrich Novy - 2:2.153.0-1Jindrich Novy - 2:2.152.0-1Jindrich Novy - 2:2.151.0-1Jindrich Novy - 2:2.150.0-1Jindrich Novy - 2:2.145.0-1Jindrich Novy - 2:2.144.0-1Jindrich Novy - 2:2.143.0-1Jindrich Novy - 2:2.142.0-1Jindrich Novy - 2:2.139.0-1Jindrich Novy - 2:2.138.0-1Jindrich Novy - 2:2.137.0-1Jindrich Novy - 2:2.135.0-1Jindrich Novy - 2:2.134.0-1Jindrich Novy - 2:2.132.0-1Jindrich Novy - 2:2.130.0-1Jindrich Novy - 2:2.124.0-1Jindrich Novy - 2:2.123.0-2Jindrich Novy - 2:2.123.0-1Jindrich Novy - 2:2.122.0-1Jindrich Novy - 2:2.119.0-3.gita233788Jindrich Novy - 2:2.119.0-2Jindrich Novy - 2:2.119.0-1Jindrich Novy - 2:2.116-1Jindrich Novy - 2:2.107-2Lokesh Mandvekar - 2:2.107-1Lokesh Mandvekar - 2:2.89-1.git2521d0dLokesh Mandvekar - 2:2.75-1.git99e2cfdLokesh Mandvekar - 2:2.74-1Frantisek Kluknavsky - 2:2.73-3Frantisek Kluknavsky - 2:2.73-2Dan Walsh - 2.69-3Dan Walsh - 2.69-2Dan Walsh - 2.68-1Dan Walsh - 2.67-1Dan Walsh - 2.66-1Dan Walsh - 2.64-1Dan Walsh - 2.62-1Dan Walsh - 2.61-1Dan Walsh - 2.60-1Dan Walsh - 2.58-2Dan Walsh - 2.58-1Dan Walsh - 2.57-1Dan Walsh - 2.56-1Dan Walsh - 2.55-1Dan Walsh - 2.52-1Dan Walsh - 2.51-1Dan Walsh - 2.50-1Dan Walsh - 2.49-1Dan Walsh - 2.48-1Dan Walsh - 2.41-1Dan Walsh - 2.40-1Dan Walsh - 2.39-1Dan Walsh - 2.38-1Dan Walsh - 2.37-1Dan Walsh - 2.36-1Dan Walsh - 2.35-1Dan Walsh - 2.34-1Dan Walsh - 2.33-1Dan Walsh - 2.32-1Dan Walsh - 2.31-1Dan Walsh - 2.29-1Dan Walsh - 2.28-1Dan Walsh - 2.27-1Dan Walsh - 2.24-1Dan Walsh - 2.23-1Dan Walsh - 2.22-1Troy Dawson - 2.21-3Fedora Release Engineering - 2:2.21-2Dan Walsh - 2.21-1Dan Walsh - 2.20-2Dan Walsh - 2.20-1Lokesh Mandvekar - 2:2.19-2.1Dan Walsh - 2:2.19-1Lokesh Mandvekar - 2:2.15-1.1Dan Walsh - 2:2.10-2.1Dan Walsh - 2:2.10-1Lokesh Mandvekar - 2:2.9-4Lokesh Mandvekar - 2:2.9-3Lokesh Mandvekar - 2:2.9-2Lokesh Mandvekar - 2:2.8-2Lokesh Mandvekar - 2:2.7-1Lokesh Mandvekar - 2:2.4-2Dan Walsh - 2:2.4-1Dan Walsh - 2:2.3-1Lokesh Mandvekar - 2:2.2-4Jonathan Lebon - 2:2.2-3Lokesh Mandvekar - 2:2.2-2Lokesh Mandvekar - 2:2.2-1Lokesh Mandvekar - 2:2.0-2Lokesh Mandvekar - 2:2.0-1Lokesh Mandvekar - 2:1.12.4-29- fix build for stable module - Related: #2176055- use conditionals from https://github.com/containers/container-selinux/blob/main/container-selinux.spec.rpkg - Related: #2176055- update to https://github.com/containers/container-selinux/releases/tag/v2.205.0 - remove user_namespace class, thanks to Lokesh Mandvekar - Related: #2176055- revert back to https://github.com/containers/container-selinux/releases/tag/v2.199.0 (2.200.0 fails to build as it relies on the new selinux-policy which is not there yet) - Related: #2176055- update to https://github.com/containers/container-selinux/releases/tag/v2.191.0 - Related: #2129766- update to https://github.com/containers/container-selinux/releases/tag/v2.190.0 - Related: #2123641- update to https://github.com/containers/container-selinux/releases/tag/v2.189.0 - Related: #2061390- update to https://github.com/containers/container-selinux/releases/tag/v2.188.0 - Related: #2061390- update to https://github.com/containers/container-selinux/releases/tag/v2.187.0 - Related: #2061390- update to https://github.com/containers/container-selinux/releases/tag/v2.183.0 - Related: #2061390- update to https://github.com/containers/container-selinux/releases/tag/v2.181.0 - Related: #2061390- update to https://github.com/containers/container-selinux/releases/tag/v2.180.0 - Related: #2061390- update to https://github.com/containers/container-selinux/releases/tag/v2.179.1 - Related: #2061390- update to https://github.com/containers/container-selinux/releases/tag/v2.178.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.177.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.176.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.174.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.173.2 - Related: #2001445- update minimal selinux_policy dependency - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.173.1 - Related: #2001445- lockdown allow rule was removed - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.172.1 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.172.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.171.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.170.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.169.0 - Related: #2001445- Start shipping udica templates - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.168.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.167.0 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.165.1 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.164.2 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.164.1 - Related: #1934415- fix the build of 2.163.0 - Resolves: #1957904- update to https://github.com/containers/container-selinux/releases/tag/v2.163.0 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.162.2 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.162.1 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.162.0 - Related: #1934415- do not use lockdown class yet - it is not available in RHEL - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.161.1 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.160.2 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.160.1 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.160.0 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.159.0 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.158.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.156.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.155.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.154.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.153.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.152.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.151.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.150.0 - Related: #1883490- synchronize with stream-container-tools-rhel8 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.144.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.143.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.142.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.139.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.138.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.137.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.135.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.134.0 - Related: #1821193- synchronize containter-tools 8.3.0 with 8.2.1 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.130.0 - don't use macros in changelog - Related: #1821193- update to 2.124.0 - Related: RHELPLAN-25139- implement spec file refactoring by Zdenek Pytela, namely: Change the uninstall command in the %postun section of the specfile to use the %selinux_modules_uninstall macro which uses priority 200. Change the install command in the %post section if the specfile to use the %selinux_modules_install macro. Replace relabel commands with using the %selinux_relabel_pre and %selinux_relabel_post macros. Change formatting so that the lines are vertically aligned in the %postun section. (https://github.com/containers/container-selinux/pull/85) - Related: RHELPLAN-25139- update to 2.123.0 - Related: RHELPLAN-25139- update to 2.122.0 - Related: RHELPLAN-25139- update to master container-selinux - bug 1769469 - Related: RHELPLAN-25139- fix post scriptlet - fail if semodule fails - bug 1729272 - Related: RHELPLAN-25139- update to 2.119.0 - Related: RHELPLAN-25139- update to 2.116 Resolves: #1748519- Use at least selinux policy 3.14.3-9.el8, Resolves: #1728700- Resolves: #1720654 - rebase to v2.107- bump to v2.89- bump to v2.75 - built commit 99e2cfd- Resolves: #1641655 - bump to v2.74 - built commit a62c2db- tweak macro for fedora - applies to rhel8 as well- moved changelog entries: - Define spc_t as a container_domain, so that container_runtime will transition to spc_t even when setup with nosuid. - Allow container_runtimes to setattr on callers fifo_files - Fix restorecon to not error on missing directory- Make sure we pull in the latest selinux-policy- Add map support to container-selinux for RHEL 7.5 - Dontudit attempts to write to kernel_sysctl_t- Add label for /var/lib/origin - Add customizable_file_t to customizable_types- Add policy for container_logreader_t- Allow dnsmasq to dbus chat with spc_t- Allow containers to create all socket classes- Label overlay directories under /var/lib/containers/ correctly- Allow spc_t to load kernel modules from inside of container- Allow containers to list cgroup directories - Transition for unconfined_service_t to container_runtime_t when executing container_runtime_exec_t.- Run restorecon /usr/bin/podman in postinstall- Add labels to allow podman to be run from a systemd unit file- Set the version of SELinux policy required to the latest to fix build issues.- Allow container_runtime_t to transition to spc_t over unlabeled filesAllow iptables to read container state Dontaudit attempts from containers to write to /proc/self Allow spc_t to change attributes on container_runtime_t fifo files- Add better support for writing custom selinux policy for customer container domains.- Allow shell_exec_t as a container_runtime_t entrypoint- Allow bin_t as a container_runtime_t entrypoint- Add support for MLS running container runtimes - Add missing allow rules for running systemd in a container- Update policy to match master branch - Remove typebounds and replace with nnp_transition and nosuid_transition calls- Add support to nnp_transition for container domains - Eliminates need for typebounds.- Allow container_runtime_t to use user ttys - Fixes bounds check for container_t- Allow container runtimes to use interited terminals. This helps satisfy the bounds check of container_t versus container_runtime_t.- Allow container runtimes to mmap container_file_t devices - Add labeling for rhel push plugin- Allow containers to use inherited ttys - Allow ostree to handle labels under /var/lib/containers/ostree- Allow containers to relabelto/from all file types to container_file_t- Allow container to map chr_files labeled container_file_t- Dontaudit container processes getattr on kernel file systems- Allow containers to read /etc/resolv.conf and /etc/hosts if volume - mounted into container.- Make sure users creating content in /var/lib with right labels- Allow the container runtime to dbus chat with dnsmasq - add dontaudit rules for container trying to write to /proc- Add support for lxcd - Add support for labeling of tmpfs storage created within a container.- Allow a container to umount a container_file_t filesystem- Allow container runtimes to work with the netfilter sockets - Allow container_file_t to be an entrypoint for VM's - Allow spc_t domains to transition to svirt_t- Make sure container_runtime_t has all access of container_t- Allow container runtimes to create sockets in tmp dirs- Add additonal support for crio labeling.- Fixup spec file conditionals- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- Allow containers to execmod on container_share_t files.- Relabel runc and crio executables- Allow container processes to getsession- update release tag to isolate from 7.3- Fix mcs transition problem on stdin/stdout/stderr - Add labels for CRI-O - Allow containers to use tunnel sockets- Resolves: #1451289 - rebase to v2.15 - built @origin/RHEL-1.12 commit 583ca40- Make sure we have a late enough version of policycoreutils- Update to the latest container-selinux patch from upstream - Label files under /usr/libexec/lxc as container_runtime_exec_t - Give container_t access to XFRM sockets - Allow spc_t to dbus chat with init system - Allow containers to read cgroup configuration mounted into a container- Resolves: #1425574 - built commit 79a6d70- Resolves: #1420591 - built @origin/RHEL-1.12 commit 8f876c4- built @origin/RHEL-1.12 commit 33cb78b-- built origin/RHEL-1.12 commit 21dd37b- correct version-release in changelog entries- Add typebounds statement for container_t from container_runtime_t - We should only label runc not runc*- Fix labeling on /usr/bin/runc.* - Add sandbox_net_domain access to container.te - Remove containers ability to look at /etc content- use upstream's RHEL-1.12 branch, commit 56c32da for CentOS 7- properly disable docker module in %post- depend on selinux-policy-targeted - relabel docker-latest* files as well- bump to v2.2 - additional labeling for ocid- install policy at level 200 - From: Dan Walsh - Resolves: #1406517 - bump to v2.0 (first upload to Fedora as a standalone package) - include projectatomic/RHEL-1.12 branch commit for building on centos/rhel- new package (separated from docker)noarchx86-06.stream.rdu2.redhat.com 1683286895container-selinux.specv2.205.0.tar.gzcpiogzip9utf-8a0bffca43a14e00a8d1800d811936cf38a4bc9f97cf98841d7a8276b4f1b4655container-tools:4.0:820230505105245:20125149?] #`L 12`ЩyH&``ʊEeu"cD&a\5aHs/I xE WUX3&_,姇Si<G,M=<ۭM5"cCwwGS|4qg(t"  džD`p=()W'NSʏ)(l X} 8" |ASpTMP-~|Dvs:]d>T+̡+0Ȁ?R8`dyF{. NJM i x%9[,q* u߄N!TYé 9'\ w:DS/T=Nf'/D'(GYĩp*'dוY]OXg_wu gQ>Q5N?2?QAQ?;ʮtNgpp'N$8UN?ͺ?B)+"8> N8؞OĻ\hd#b|4 gq"Y<cI^DDQʈ3?M=tVp*&@!`@!lD"ο0'0 ݿǩ5?d@>!@iF dڞάa@rLuœ<5S,BiҦS.0$Ҧ ;?!SuT J΢5TS߻?L淋) Gje = Dr1?BT*J2=E@ktAe@ICY@8%OD X 8h!U`ZB, *)T|ۀdV]ўh<Z'a֛L 5-uq3`lTcO"fٝ%տjE!nT1nD+̔ᠬES!jG s0f_qڠi μ_ʟ0LH R忀W",`u7/T'T{:d_㜮0SeZ>D+D2Ri]aD"P꿝Ufv`[*hF#o8, 9qЉE}V 1 q2rS/D}yW ц?ᜮ/TQw0Rf(XCYj_KKsrV +B60uE0O(l>K"J3Rxw4B-8@FCP0Mvȟgt6%>`ioTlδ+kwxw2#f(8g4Fx'.,sY0p;G n@ͫwL FA 9cxbY`nYާ<8|g  Akn+dFe;tf]c: Jw0B`@Sh;p! xp.w+êRȟ@`z*ѲBKz=ʊHeeh*`3qWƌ(5 5y( btС2T7c4.g]O373%r+~AM R5 *Bc*w@03~yX<,#: 0M⇵ rSk֦ڿED`6 ';ٹ\بF2!1?R~hQ`ӯƌDJR' TUasH N 4u+FD{Rqvc+QaAD4 @y3 G OPF^hSL0 @SȐqJ8@Y'$w6 8*8 f3`ߏ]xFD*Tm??qh8N tag3ɑqdEf Y'}hBڸ㩐#ρ|m H5 D-6 1d iHDq8Mx&@:ϕ^KVe"8cX, ,d(#ОP/б4^@7D+06OHuYf:X HF$"QDSx'% s98- `sj,s &Ϲzm t>!X"<*TPh̺3"”Y2άSk 瀁3 TXP`#1L2ByG#f Ĭ!30Z ey80;9- x 0dxc'B,XޑyqN:1dq8 J~~̑:dMe2TD&a4f`9}z}V1dBpe$y0 c+4ƱY#FJalpt]¸ eɁf2PJ`y~%V?#E(K &AoVldfx8 H@ˈ;8KЫGAu)ФU.F uE*3' މNctG@o?3`IXDwItlmڗ bC?>C 39fLE1Ix"m5c}S>dz3SPs̅E؇g\2ph@w̺jP˶Ra3I$@>x 3wT %ЁU0tq""X0+LpHvxS0ĥ^`6'.!\s/b1ʈwA]73$.?>vh>z8n&l`zB{r8 r@Uu%Syh saluv0 t>tƮ8{s\Y?^WrϠ*Aj Hld ޙ!GH_i2f" \Lf,BM<-QBU-TfyFRb)@ U QBJW*l:qAY0F1gf0C`LA 4a8ؐ)2@˝$:=aw\d4?cD3EdQشd_4- 4Ϯt2b7V@" e@;4fzrg,9@?svYD'xcz]BW@.סC!< f=g,r1wS :33_en{[4 NZ ͘5(?E8p5U9Ld̈)6 Z^o?ݧa-q/Gvhտ=X[ԉ7}q)(YYHuY|E]-z( *A yZJcu6MpG{üo7c DN Hk wNvaS㟮g=jQUasԇ;il{g-6+F? 6uS֔q;]2!laW?%3ӧMcS V犯ؔcUB't{M0_|}ڕc7/^~JǝϢ_L |yEb []{k[#|ދ]mV۶_۳z]S,lUo+R}MZZ no?9ٍ G9ݴ0=h)c_VV%),:cnխn6]L{^c4E3H+;jr`xjӦ# Ǟ^<&aa Ubg|=?nڷ;(pa= ]hm&Fr@qv~mޞ%F'g?=kz<ͽ7쓮|3yI7쀛>yRw^(~Rv͑MQS?hTUDqwm kmluzG>jzS{sЋt+ :o&.t,c'`{+yZeIOhiW,?yGG"VTWO"qVD^y h&r>D=UhBypoRjnvqrwл>Y.+xwy qt[}Yͨ ~Rj|<i޷i;5]z`6OV T+v8`U׵H>u磭&o{oybhh+y~-mS_('e#/hTo5C^":UJZ9B2oJWz5|ӟݳg>`#l&࣏rt, ,nȣ%CSSg?p5}u G&-ynz)A.SF oi ߗ~ZGw۔ƅAC=OU]Iz6X Y}6PHuյ/jx!3vT&Bt.9cGB "m؝;"wgKLrhʚ")%jO]0Ѥxk*˚&$o&ےI5Gjgx-/2ԩ[q%zlȂkv9Ua\5/zOvR:}npra+ubhݛu~K6 Qz!p^,Jm\l̿i-\;fɜPqS\. rGڪca*o=w{d׎{,H^پ:`ђ/1FKs[r:n/DZyʲN讛59=դK[yM$ள-|A{nSY~!@XH^s+.cϢ-3'UJ.,>Q=tK9z[ZE7yJe$Ew[1;ǬTg̾̋GW^Jk6oսd=8kĥK֒yWĆB=쫰ɒ5M/(Hwi4j\zE 5^}z(fd/U~M/>K𒇛,ݲ{͚[ tnX׬b90qW1J`}MD1uƔo7c }tOUHfxcƛRDccmV' fFh.koij7١F`pcZ{Wҫ'M޾mz~5 =+/d1YTt21zKRegJ㭛<^Irnݺ1vӐ'ŷhAz0 &gĕIoyrvK7*jwo`yIs;TzqmtkHеr?rs2gL~"9| ߱6<ҎW)ּlWT2(f_>z?W7ӣMlQ/e8ݱ; qJwRS?p,[=!^'13Z{cS;Ie ˪j.9"'uSN,rDrcv/hYEtRy[CM5#Ήj VU?rJH&(YDyf7_V$3+SP~sDP28V"Ȇ9OHxhg/ÂB{EkrVTdOrFUϰ&Njm$CFOL]87]^hy nFKD ۧtYV'ؼPo|URb/`kY79b l];zFL°Fxƻ]$D7;Rׄ -[y-Ԥ8|@WBVA.`߼_On\ ĔPeѡGCnJ3"@W{Dqt/cդ6c%捻9X)筍O,Wٲ֓ =Ѣ}6葍~r븸KΏ|04qm]@R y1l:kCkr>&DoN }5я,ѭ-.'}_jϕJbӔ5+uԚԗVx+b7xbYËh'/6VY']՞{ߓ*znT6$W$kA̷ܯGvypr!@!G~nǾ++ZV}Ѵ4c`+Yrpw ΋9gSlOm+6/٪u̵6V)@ro>@|kWd2k?"m9f&ؚK[Sv|SG# lJ2^_`J-ؾ2wɊ Nj2oԄpb CӬ̣g+찋0Vqg{u޵c5;[޿0Qӽ1+W'/A@x?wG3'%k xW`b6Wl~+jksd1ynmOXW5E3ܮ]T9u!J2X0'X\*}+C7o9KĴ9 n1 =x{z@ح>Yr-5*P5TBy.ŧO 9rezcX.7o,~Vԝ%Z8${MFS|at/9!߄j۴3)h\/G8M:nyOY,4I MN/썳7|Z6zh]7 egtu_+7=vpJ>to[gut7]t"^Sϭ_cSZ>}uL28V#u?虿d#Ken Y~(jEyb07_K6:xMq7wNKGWT. ۺKWkPf7a×{KHV"9E^'b#>QZr)TbRK8}~/[g!ܧ{ fu,)w?+Fb5gxʵϖ-]ZiBF=Z2CXWEv/[e+ӫ?/~ub"NZ9:<߶&p8o#ƌFVUR oޱ] f f;%yFHtIaꤹF@Ud4n떊TnUnǑ,EӥZZmmX9}\؀y+b@T0 K{Gw]K_$iЈK. R ʹ&IH^oޮِn-.|~Ihk d.-ѕkMT4 Z2~g YҁƖ늞B}WTOg==XtFe뒩 ᷛ{`l kVw {cQש#.2H:A NM'nQLzc~cc f]׻8^Kb JWtDWՓ 7[еsmU B …2n?}A(-ː`:Hj9;%f=k #.0xd+OحVr6 H;nWr&nݯ<`pU.-=&.؇WLh <\w\|yBi;F}kׂ'+a*wm0Zbiy _\߸l:ѹʪ|ecraIc kϝƚgP9fw~ŖPyjl3G=?nR!/Y zbީNڸg_U}#m1-j޾f%K- s9d80oLcD #z'4/ۡ#`&a{P~zk4#q/ jSj*xjEˌƊYs~|k׋G'jWioޱ@;+|ϡ{*s@3A|^PnHń:A=SbLy v\HNʳ0uڪϳkũ |07^Lm-P~3 fqġ;} {[*<j>T3]s4)( *O^eP*/_z%W]v;TZHтS{8 >k]Qޝ?2)t`Eď:B :cV܋3Z/?XU䷐Ը&˻OcI7mYx-O/g { 6 6a|i(:&KlGLm: :eͦ^eEܷEр5?`U_v`x&n2qs;]f//3܈8RzEGOԈforӷUhIEk2n)P2u.|yMT#܁d^=Ƿs}qh,$ ?Z!‘]aO%wѶ6(e \gq[\TN$G"jOMp 4~Rx$Džr1'4$Ϻ~=OOMO#z4*֟qYvkɯ xNGׇ#p. 7_Os͔X!•4DǶ(a b]{(s iE|ѐrǦmtN_!#*RyԹB5;ަJjM+|SGA jQZqI̚/VϣD%gX&gjc?8P}ǐ~*gzlL0s|7cVlRl*/H`8fz= WEt$ 3nABӒV)HГk j BrGw%[S]Cqu/x>>=Pu'Mu7GȯVMG~Nkn˱\j\.F,3#ICsG2cmV$nnL/pT0x<>ύSG>* G W%N/k.r{5f8qBT!WjNPU{t#sZ'sY%qwΌ?haaycDPB%+=|ܱ9ggT:_ީiTowW>GwOWXVht0<}{./rʂ8m4uv(t0" 3mm6zSؽ7=\pzui+vSA w_%ʄewS%Rd;뵊BgKIv+r<_%}+X˅k+ĽvJLu 4T;rǣT N6vlvZ#r;*6y?#p*?*0 W$Wn uW=RFG}<]57tNS zJ\ U3H;o~iZ7^PhB' QneQCzފ*oҮ^]^h0A RPVVՃG{\9tbғ:đD ]˶3(,_Q2>&w< Ry/}[?PT~ۣ^fzC[~fn ijt!Ɉތf殪wq޿Wʹאrj[xoxPdN+_#:y;x7VHNBpw|3mx~|WRᓄuO!D?r]hۃۉA@4Z]YŦ:H%|*k;f>T> ,9|&})%'uy}>uoC>.3zv}S/zIV<+g&W ݡ&\;x-Owu"ޭD~l;9UB*M'P76hW}ظɇ=| EȕH^YKy+oXͳ{|Ⰽ6fޡU&$̋tR&Rďkpf=M_i;qQߞBaӍ:^{SЃwO~Kl]wp䅶Q2!v'ְ̄?O\W/hL,ր[{ղ4y=J^Fֆqqoo}5{}m[Q_P'{Αtp\T&O=?. WG,tɷչܱZHKZe#MoVOd}8kǬU!Un6T =#bI ^zz% '$x*h S  ̼}}_塺,pw1 xA>CQBdTlL7pѰ[}$˾--% }rYpSu!-.-i%=:Sߛw!ۥ_Gȧz\=?=268m4mDc+ӕt-)ܱ)K+nU Ѽ󯥫qkMNzEi%U?c"e2Qu|zr픃doQk;,+.9h=1H¸,J.zmp+7i!_-ʜt2ee3v|ElQ4 zd-Uq(i%wqd_py62[nb^5t,Q(ETCƽs lPվl][YpZyL nŜ! bP\;%cy]B7*pbnk&ӵCi'4Z*e~I+(MJLK=<"UM;gՊ}k9|Ó7/4Lɷp8r4V(9.;zEu_^K#o{V?=UiwWχ_%t^:mYI8uQzjEw&LVY蜀kwη&T䬘i\v^ņwKi Â|Q\M7sۊ$7\:[t 7NC쩚;h }ܛk}~v뵻v dJ+O]nm% J5{#K|i΀Uy{sKENN%~@_UXuO|455`?Lh "WwIgp8NEFz'{6 g܏m?lݷLvffHe OK}MW;y9m Ox\jS*!qG3_nӳ/B>K<#.z`A 8lգu[Nj-7! lT!.g\Q6"9hS~u Ay_6z*񩋪4w v0knڐ]J<<K{LD6.I[m*Qr65EN_֡շLy[qabz k 3?ţ?>[I[P!;Q.g򤝌aCc&U;D^]:cah Bf[tt[Zmp;x[l%P{3u^pg b0QͩjGj}jFrwŲ+PٱRU/+}񲲦^꾋}GݙT)}q]e._1aݴ ƣ'= /^fxMƝ3|EiJcXK̗Gn]ߝg');56]%}3b(*+sk7gs}=Y֦NqlZ+@weuҾ6HLoIoS"kJcR1cw7ϸ׫-tYػ,^Xj9bJ=}J^v5bJ5o__n"5o}ؗ,]V޼7P<|l :sY}[](z;N9r=\Pl$j|/ftDw!e!p)McpZstF\U4Z]qDvŭ [7båmJ=Jr}eܲ{כLY.m._vtO٣eiWm[}4" 3Vtm-H7"oJٛ e(,nߐ;uYUsr#q L&ݒa- &mU[qzBḣ!Ͽ>G>j!9o渐7Li0̚>w:J^{ta)Xx=5K%VX;k!-~tM^SZ޳ĆSqfWԧť%ݖhLyMu.lrg/=ftα$%tX,gA SehޗQ8Gҭrwa.$W%i(t{BܰZqٟbDi׏'aJ#nWŌ#]bI+[Ά DmxX~DybI^ =_ |/$Q~goJH56~끋!s5'?*n$g炒E+'7Oȼx1df|GT&ivWv9RnOT<$s/YLz>9qJu)r_Z4wd_Y.-?njMu'RN>]]K{=!a"c|$UvNΚm;ض &Irbv2m։m[6'vi_ׯ~6S5\.Ziy<Knkv(:rcR fO0ASOd[xX{mLb6MZjV &o/,5J̊_O ow^mя<jO?ygi=UMv ލhp匴^3 র3GVY|0N/LMUg`DfeuYf VmOytrQb9"_ _4O/ᏝA`7 &=-ffnat[d8?/eJ 0'&;CA*E(pHy?_30)xzYSN4=!8Y:%ed$?G j+=*F[8r}ieվZ@ݗ״@kv vFm TaΪQvUB&Q2q9ԶV= Km3O8MjU@% ZX@s\@-A.wCI1y s媰İM-1P{̳[$;nufoE/IÌ5k] @oǬΰ/ X8.tw1(~F!)Yj$Z~rVJ <I *RiƂ(Vašoku4.*Hw9_c|R7|j]eIX!EN㤿fءH/a6s[C!Fٸ @S2J7SFG MHxJd1[цq,q-v)Äa?5 Nm]bZ]4# \M߈ުGoUMbn1^Ғ%,lG.bDSc[KO.ԣwu#0bO?$]󣥀&)ģ'-!$LRg(jYC>KnNNϻ`@̍ݎ! sBJro m b3' {GV,P\S[NPl,iKnv@.[BsFڄF J5klJ#:kf#) 0kwayNwNS8WgC?qg*0oP'/32\5HϥQ{cSm[BKh[ҎY<-5n)) AHbؘ./1TW/8g">in4C1V[_Ybc,J.j) R{&R)dċйOWՙN ͋rkvq=t{\ l%"V=JRm&gɕ* WTd0=got5 R,dT=# & 8ޤCҹϘ,mpj0eQh%8%&Rds~Q<@K{7Ix^Tƞ)AѰǘK$_/޸y%5L5ͺ&D2'dSug:6SWN{ovQm1rĜX9inzIP& 5=hwT k7J)AM~*Teb'dA'ceuh!Ӓ:6l *vj6_7xUГhh)3xhw$Lje)m3ETL0H;1V;%wP9s 2dTBxIVX`m{&)hx10gӟN$y@ggckNB W CVD|2BjY 5u% KbZGWL5D&|p|֓TΚlQFrl+P^`N8u]11nD(JnMߣ& o=TT|zjui4w;,5J= w ΰy /43kL'lQͪPc"r t=FׄnV4}8)xi]JhA]:MAd>,*#G-뉣91GЫވ9yE;*5]r%BpP\f@AS{Ƕ, I{Qpu >OD@zWq9( _if^i ?C $/'ABO2Z>LޞK[蕟\z4zyBفbWBa>ٻ2]/TR:xoZ#SJ- rgVo0aNLrǺxzxdJP/_~+G+rA sL1 l !l^Cc|Q%U[eh1*,yNrw1k嫔p>innq&1Dž !-Ov؏C 4 gP(GJ¤!}+xo?$gxtrhn?c!'BC>ǬvvGܤM[勥<{e)ͣ"ѾF.PIJ|wAIo[QP+hhsEXba1agȐMhYwo|f{?֘TIl^i!^gdHQS3>bNJ/9;1([1ngH6{ZGF\q2=Ɵ&u-QmtH\7E%rz}a6cb\[-z#9tt1ަ$#ŝFv]5 ??EA47'j,AʺMO8ޗ42#ZV ٬B`Zq˲bf#3Q)sШ 33/FvUNwUHEmC O?O& ă<}fԠ $X, RXNT o+޴m]I$Q0îu1Vؤ?!~i^@YW?)oHrfT ZƬU_ >m|i&t0Cs8ٽxnvF3Sy ,Z-U#fNL tӦ¸9JY?]o\+ַ8s&]M'&{PdDW0gN4J%= b9Av`^A=L1fc ^|Pn9%Or+:/1k9;iDf-y>Y\uߩq*Bڍض۴')Z ߛn8{oL.%MYvCɩp2c-? 7\2Jn$yd鬣 Eft,sМ2nՙ/~xF8PɁJxTFn%Ze 2!;ƅeinov)V)n Z.ğIbV?L"pIƿ99Qa%f4de׈#jEUFK7S_'և/Bj 4vyDz}]DO\4mEhKJeEm#iՕnd:֏m jdI>Ld^cN\+xf[YTX-L0b ^֗aIǹM&0O.` 3N|524dZ8CP> UIԒ>ՈDg|Ѣ*)@? s*="=pꭍuĀ H/ۃ;-tcnz).³i1T: 41i?gA8(3|ЈGXusFH jT:i2{{ZLNEϳ5 ?vbX;m3SHZH hB~drcbxN$kXR^v*DzϿ=Yy uu$JY4E r*• N VaE5+89/{Cotd\Aݼ>U3m$|J'xGC,ץ{iiJH:)ƅ^Tjju wyZNaMr5j9F+T>Z>fvw3!4Pnb%|fBʹb猥zu;TfԞqf3`Xs]NLsPFK.c1kL:=5 Go%(gZ x)al+w: ,G=(Q+jdpEGhJ|7T7e )yA#s,!y!Relr [V1-FGm.1R3۞syix ݟu͗P  Pw{FG~a? ̌s_",pF}Z* ?6NPKܣ.[HR_p]7/?'CkX }%}?#r 8r`ǟ3n1 Fr }9BvUT:=9c2iټRGjwz)={g&._&w"rnMŁI胉U#"߱ 7YOsk In3n|0jpec{e+>e!Tofj3e5\sndOJԵZP[fO$,ȿW+5} 4e$Q%-;D,~r~P؉c \P{Zd, z}&OU9/UgI36^[WJ)_u*կ2༧ OO3$<+JfDko:_>cPs֭[Xwkz$|nNZ `fypUAtDZhC[pV6ߵlVUY9feYx[܅uejde GS߃/{gz\Sc1>OwKZ'΅g|I 3+/yB"1!V+TF8K+sa hY4r Uj"%g:!%D0K"sZdBja(Otƈ#*Q<)tSG0$NI㤼('\Zkm70PbYm6 VVoqp{Iy.oY|{ixfQls9hZtt'satÒX,B"<=,lqq5dh * ZKM4vnan$Zt=1L7ɫI$ϩ4vzPOs<ES ZB4 Q$#M;zJUK%D1Gp4]1H=uWfҡ:|QJ~`Gty=$BOѥAUu({?e1RW*"Ի`]AP,t3_FF#}.TO?Ր}ܷu{ !D FdJLLY?f {:=qٳ ĥ4,zVߴ`F1JsCr#LJ'o6n]\X2y84kͧ)XldӳZ9.'VڔxY Sr.E1ܒ 'M[rN0 f< J TKαQuÉU x|Vسl,WRoeJDHO"r'h_;R?*Ĩ2o@TS{ N$wz 9\ըFԎ|^˜% {q6nCv/Wɪ;T82PZGP׉]CUr.N"/iQX#H_M8-( )\sN@ɩݤ : OzyحO=s+.-\ 9 |jG lx FVjuV_x ݢ=W`{KZX"#c\r\ m*8+Ru _ =@YkGLw+o^`owLqiˏĊ;(84b5# #N.T#J9$ĄkL~n^qSɻ'qtfH[) [J$c!tKEbzZ]AKŘF+ PRGfJubv[{Psex("iMms 5v0iv6x /8%ʓ)>2pc+֋S<vQx fJ7Ia%~jg\cT:mW_꙯!/z:vQBJ.Ͷxbe3cZBblc_gÒ~fMgAU,,=r:Dk|YwXxKgp +ބymzϴ0ީ$SE)$fU ?Kik.~BtvOWfy GW8bl 'v <$OTˮ+G(T7cj9! UnS^"ln&ʅG\%'0 c ESfJ<_:`AY3b<6Ό=e  TvYO*+V=˵E[:c!7ᤸG ۥ"F|ֲMm ~ 3_mB5ţ h؃ xWӰ)k쑹lD)9T6ldh iUioB`|5d0QIt*űN?yȺJo.ts_gPnx3SnB_ơRSJaѲF=&K!) sc.,wM6 `E iLidڄݷ& 564\Su!go+T5`\#~ԂT9 r5U[SPg?ҀGA;g5444Y~@VtmHb}.M&|&1=8RgPeM{?C2]ZiB֍qfTUQ珲tH!pxՍeϕ06k,v+,6-3nU:$,+PTSXz%(vvIRj#{_Q(?*e_*Oʒ8I`L"U(1hS,-cp'mQ/)"&Q8'H86vThj~9ry29:ɁHtJWvg)PZG㰒4h`bnXi YB֠dj2l*nZN4̮ }_f o4@Bx 3'TژL0XKk֌ah6eHPg]-Z8_jc$[ + c^]B#?_| dIi2&vԠUKy[4é!"Na{cIoLcƢV%eEmxfFJk!ԩN)*$};&z83)ʚHVVh8-QZcp*ۨ| e-^^gZſXx6…%Ж=@gt(v#ﱕc'i]z[3=܄έe_y[iLu$+yּ߂JUծ$?'%=h4F&e#GJڭ+VX5^ Ǫ.H܎% $hGoǸ.)Ubl. `+|t)3m)cw.~4#._^ZqM^mη[4xrߚ/<ҧ/1ZcWx|K*rD^]Ԧo$/ȱ(;$|BM=^i *%ʉ< qCh`ߴ_zw^؜NG̟=$dx~&n0䯴,~e)@rvy[7BnDj8cGH8v;7CzJNUDCX?*[ǎ5Y4*Q 2ӌs׮U|̻[IY.yͣ&4uC߳߱D T:}L'8# \Fr)WBdeD0øni.GG3WTȰ:1&{  YYIll A|LI>v 6 "Wiys,s\8$LU}*@)W Ev3N t<8ïi֑L PypBo t@UڏYxc.yh}ƃRp3OΣ塇mf-=2h\Aj4JLf)Fw>zDHؗp+&qr v?b4И⹷悙+^ ⻔t̳` ֬Rz(c`i&7X' CR49% R|la0WD+i2bbi?p~,fciSXZcz~H oxȐH3.bP5es 4dLE4A RN[JYϚ yA5>P"՛4[v̈́7; A$iq:C63\ +|L2/t'ǗVs\cӟ SC.5 xjv5-kޠ> sҔORL4 aCP-fr5$@`G4X\)xrr1 LTMupN+o[BuOr2ԉ̯ ?59䑷ha `<uEnn0<ɢ{ U+J|qQOHмɴŽA@TSi q6,k8ٙz3P? ݭ92hD N,{.lwp6":v²F?m+&"^4/iZ:pղYvӼ/S'uNE|}k3W&[ějGl،uN 5؀š^Q!zqu1𢴪'ENv$G/@e܅uNk Qv+#.7KI0cK}Bs㶒' /M箽7zal~ߞ3˸C=pUݽzm0?7=w/x_vWaj3$cɢbY] |VF~$nGlTIǘ9t%q@׼yvq=;aղ rDb5B<݆RS |չ 8{2*lyZSswe:hn=r  cUDg8&ɟ1޼lfX3bCY^qA ΙaXˀb/awAG^,z 7 [`=TgaX]@Dل;:ڱ𳢉\T wdiE:42t>nDGW5cqBKX'Yձ aO/W?f flaꃐ9ufص!z2ʮYKZvwT̄|ˈ !oQ6}@o"nOgo`5E &J)h.g &;ZkIxX= Ed,Z=16+Rbd1$Ɏ$6PE<6xC{Flr16g%H/NiBB5]®OK$j7>]yB)^/ B|t.}'r gOmiĞK~?"&gC _I^zh~1"  ]`U߶F~ch8iJ.mMo,؛8ٯ9K.np'cdCGֆr8$*d66)msS~ y}ƾ| hZ%'a0ت"^,?6t:GT'_ cܨ,@|R$L~֬T AO &nx_hfqH3j?ZJz<0¨mGu jږ1 {Њu1=hG4'\6,t8 Nmv!Q3uǥL|GMRO~f57B˺~x:dȺG)IWL}7H[t6}|lmb7Oו,v'm7Ѷkcg*jI^G)R!Xޭҙ{]N(j*:lK~Dj"(毠3'ɪ9(ٖȇ* c QPKh k ؅W (D/W4U&';N/?N-A!ؓJ{d7}і?ݙC3J3O$/ks<8ª i| 1ҏ_xruԆzxCq J_X&/#J̸eϹjYu->[b G(z&g&N\sK1}6j"-3۸h}.K*D3!KfqNp6q&^1m--Ieݿpmc$Y'Cj^Hnz8d̶B1P qТ7q$ÌH[Fc49/jbccFt 0kʏ42*V9e>z.- ^&6a0 }a=;@@o)J`~$|1_|ԅ뵥cSŖ[yi[f8m" 1((nuJ=!{3ˁq\ `YYyw ̣oP!uL0𘮌ɦaÝ^) ^|+E?D ui+g} } 赩s0Vu*rɕWgvkb[) #b| n`շz0J%~w[׭;,c.&:K}GHdjvH[G6 +hGRe^Um-M>x.`!]]Isn퐛 T {1ژƦMnaAI7AHh)U$h'y)Z5"#,>9+ŝ2Rk|u`FD5FچI࣍P{ML$)fkNoBmx3uU9D/kG}UVٜ  05bU0|6k\'z8]gYʷpħ)lg܇o;mݚ̛Ԕpn o>C>CyjtD֙CR~(ُ\r^2n7`/9LryrI O[fЄN#6MQϙ\ JEvOVV~I{)xW,c_ .:^MGi >+Dr_Uj ~8roCכX_`DJ=3#m,ܖ=qtXe_ }k+0c{FjNPTG|`MH?ٌ_yӹy,ZAE诗ѭ< *acOVte|k2DuOkʨ}P|1J2G~][0pB  kO'gfMf^EQǂVZлΘrlo2oo'Һ2q)`++jX/8{2mЧEaV8ՌJHܧ|T]X`ePH~#e5&SOv4!G6hjc^oaD}n(6toYnFxME"u]۪>NJY#{f;( ͽph_): #3%9M{%tk}I{ηݘ_Cm4+{=2[]j[I \$^i7ըej+,WO;BHjO 'lP(lH\+`J|gCMZBswN綯c!=nWt? NG^{|W̚1;߷##:a<`v @N5kaR^ĜB||۽ҷ(Pfyw9Tl2u1^ ]>$4r8 |LHSPaxm*ZwBaAVۉ>9B C.z.\ߤ {OtDZ7a<|R|t?i y[W?wVe!F>B {S2H3zՎl$._Op[oz nC58cl?* `TJS%}n2ޓ~cycދy +]= na,$m>/ Qmo%#<<#=eȖAܾ,JbSI{)W{?ҽ5LOuheIar >͓9 B; h-G+RyźX \r灻5?`2xSJLdqP9[wTŖr2*끻;1#yrhQz@}o-JS {wm޸v|n?[ߖoR~  ]Kz4޴