container-selinux-2:2.170.0-1.module_el8.6.0+954+963caf36 >  A ap?U]?x$*,qDPdT˟e|=t'tzb'GO[D; ̣1{u9 TѹEƿ-iTK}v"uD?FO[EGu/i"45KV č.:j0'?>Vqj39>NcwvӴܾTeݲYD (cD`JboיSo0/^!Ê| < Q1fOwC>@J9"]bMe3R5k45OX~3wp Arn+%͵i]vW+? 59 ,=CjlZNN^n#}L=8r1;f[)xc_ӋSw'h#~csL5+^dx%ЪoV/apaY}mlh)BağsȄ<!ȦŴM ͠*硂'!+֫62fabd5e258e36e7fa1c31595b72736b4120415e7b6d0b15b1fdd97ceb1bf74b6458297d21b51611a536130790a6a569dac9b63bap?U]C!%Vj,XK|)[hLHxb+vM#r%%g$åq/稧:mYfuOEYD8ءl?q`̍ >7B |^ M9)}oTH%CW)bm/F`\<|ϒDI*ɧ-q7aDm'p6p4[lW+GbY[瓯C{D2kdGpv\X4BXiAa$W3|j"“ԨHp̋lzs=x&K/9VkN<=[qu`k25\c+q4.di<f}tsǓ0waY]Z:uw#2d`X,YQK?:ٛ:[RH@Z!Z!wUXf*Ym2.voMxMNYC}z\3>pIV?Vd< @ h 28?x< d    0  D   \  $``(8r9r:&r=M>M@MBMGMHN0INXNYNZO[O \O8]O^P bQdSKeSPfSSlSUtSpuSvTTGUVVVVPVTCcontainer-selinux2.170.01.module_el8.6.0+954+963caf36SELinux policies for container runtimesSELinux policy modules for use with container runtimes.an9x86-01.mbox.centos.orgُCentOSCentOSGPLv2CentOS Buildsys Unspecifiedhttps://github.com/containers/container-selinuxlinuxnoarch . /etc/selinux/config _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if /usr/sbin/selinuxenabled && [ "${SELINUXTYPE}" = "${_policytype}" ]; then [ -f /var/lib/rpm-state/file_contexts.pre ] || cp -f /etc/selinux/${SELINUXTYPE}/contexts/files/file_contexts /var/lib/rpm-state/file_contexts.pre fi# Install all modules in a single transaction if [ $1 -eq 1 ]; then /usr/sbin/setsebool -P -N virt_use_nfs=1 virt_sandbox_use_all_caps=1 fi export MODULES=""; for x in container; do MODULES+=/usr/share/selinux/packages/$x.pp.bz2; MODULES+=" "; done; /usr/sbin/semodule -n -s targeted -r container 2> /dev/null /usr/sbin/semodule -n -s targeted -d docker 2> /dev/null /usr/sbin/semodule -n -s targeted -d gear 2> /dev/null . /etc/selinux/config _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if [ "${SELINUXTYPE}" = "${_policytype}" ]; then /usr/sbin/semodule -n -s ${_policytype} -X 200 -i $MODULES /usr/sbin/selinuxenabled && /usr/sbin/load_policy || : fi . /etc/selinux/config sed -e "\|container_file_t|h; \${x;s|container_file_t||;{g;t};a\\" -e "container_file_t" -e "}" -i /etc/selinux/${SELINUXTYPE}/contexts/customizable_types > /dev/null 2>&1 matchpathcon -qV /var/lib/containers || restorecon -R /var/lib/containers &> /dev/null || :if [ $1 -eq 0 ]; then . /etc/selinux/config _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if [ $1 -eq 0 ]; then if [ "${SELINUXTYPE}" = "${_policytype}" ]; then /usr/sbin/semodule -n -X 200 -s ${_policytype} -r container docker &> /dev/null || : /usr/sbin/selinuxenabled && /usr/sbin/load_policy || : fi fi fi6Rbb0(: BA큤A큤AAA큤A큤A큤an9an9an9a\Oan9an9an9a\Oan9an9an9an9an9an9an9an9an9an9an9an98c04ac861d425e9947eb5bc06c3125d682dc981f6327e789ebe1c4eba0d856fcb9a1b93e1a14f1d91ec6a108bf3cf9764d0fb80c329caa5bef1f4cfd37561d614dce6af8d6b1b649d30bf5666e4513933948397b3df5f008711cc4365d831f28946303ac3201124e210de4a33982aad4a667f31f4b36c61d45bb63b69744135ec95d8badacc674ace0d2fed4fbee4d28d2a92799b23fd5cc30cfb444ee8896b71724330eae556d61248fca0b0920b1de3697d8cd42bf56da8d062a4265ed1b9f2aaad24c9578fa9575445ab4c5208b80b1226e49174e20bb2609de935466b9ba9eb7fd75efad4068dc1e00d43c6176477d13f5c759c1986174a340cb07b822119af286e5e19e15cffaaf7b29c745c800ef94c03d90ee90e0e8e18edc2ebf8f01280274d7f1512ce4677f123f310d300672d6872c3e1f3f13144cd5a03e85ba4b0a6fa6a05496c83b67185cb54805263c502181507d1ae899909090caf986d623dd478baf01b7ef0daf441b7cd616c79ea77eb8e9d2725976b9edeec3991e3d5f67de3bb8fb85b4531702c64fa11b1fbf1746cbd844560f2f680b862915f25d69rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootcontainer-selinux-2.170.0-1.module_el8.6.0+954+963caf36.src.rpmcontainer-selinuxdocker-engine-selinuxdocker-selinux         /bin/sh/bin/sh/bin/sh/bin/shlibselinux-utilspolicycoreutilspolicycoreutils-python-utilsrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)sedselinux-policyselinux-policy-baseselinux-policy-targeted2.5-113.0.4-14.6.0-14.0-15.2-13.14.3-9.el83.14.3-9.el83.14.3-9.el8udica0.2.6-14.14.3a]aQ@aI@aA@a'@a&0a /` @`9@`Ȗ@```q`@`@`N@`@`dd@`Y@`&m`_T_`@_%_%_F@__"_5+@_16_p@_5_X@^n@^Ӝ@^@^^k@]@]B]]@]|@]@]X]W]R@]@\M[[ͻ[[@[[Xf@[L[K7@["X[@[@[[[Z@Z?ZZZ%Z%Z@Z - 2:2.170.0-1Jindrich Novy - 2:2.169.0-1Vit Mojzis - 2:2.168.0-2Jindrich Novy - 2:2.168.0-1Jindrich Novy - 2:2.167.0-1Jindrich Novy - 2:2.165.1-2Jindrich Novy - 2:2.164.2-1Jindrich Novy - 2:2.164.1-1Jindrich Novy - 2:2.163.0-2Jindrich Novy - 2:2.163.0-1Jindrich Novy - 2:2.162.2-1Jindrich Novy - 2:2.162.1-1Jindrich Novy - 2:2.162.0-1Jindrich Novy - 2:2.161.1-2Jindrich Novy - 2:2.161.1-1Jindrich Novy - 2:2.160.2-1Jindrich Novy - 2:2.160.1-1Jindrich Novy - 2:2.160.0-1Jindrich Novy - 2:2.159.0-1Jindrich Novy - 2:2.158.0-1Jindrich Novy - 2:2.156.0-1Jindrich Novy - 2:2.155.0-1Jindrich Novy - 2:2.154.0-1Jindrich Novy - 2:2.153.0-1Jindrich Novy - 2:2.152.0-1Jindrich Novy - 2:2.151.0-1Jindrich Novy - 2:2.150.0-1Jindrich Novy - 2:2.145.0-1Jindrich Novy - 2:2.144.0-1Jindrich Novy - 2:2.143.0-1Jindrich Novy - 2:2.142.0-1Jindrich Novy - 2:2.139.0-1Jindrich Novy - 2:2.138.0-1Jindrich Novy - 2:2.137.0-1Jindrich Novy - 2:2.135.0-1Jindrich Novy - 2:2.134.0-1Jindrich Novy - 2:2.132.0-1Jindrich Novy - 2:2.130.0-1Jindrich Novy - 2:2.124.0-1Jindrich Novy - 2:2.123.0-2Jindrich Novy - 2:2.123.0-1Jindrich Novy - 2:2.122.0-1Jindrich Novy - 2:2.119.0-3.gita233788Jindrich Novy - 2:2.119.0-2Jindrich Novy - 2:2.119.0-1Jindrich Novy - 2:2.116-1Jindrich Novy - 2:2.107-2Lokesh Mandvekar - 2:2.107-1Lokesh Mandvekar - 2:2.89-1.git2521d0dLokesh Mandvekar - 2:2.75-1.git99e2cfdLokesh Mandvekar - 2:2.74-1Frantisek Kluknavsky - 2:2.73-3Frantisek Kluknavsky - 2:2.73-2Dan Walsh - 2.69-3Dan Walsh - 2.69-2Dan Walsh - 2.68-1Dan Walsh - 2.67-1Dan Walsh - 2.66-1Dan Walsh - 2.64-1Dan Walsh - 2.62-1Dan Walsh - 2.61-1Dan Walsh - 2.60-1Dan Walsh - 2.58-2Dan Walsh - 2.58-1Dan Walsh - 2.57-1Dan Walsh - 2.56-1Dan Walsh - 2.55-1Dan Walsh - 2.52-1Dan Walsh - 2.51-1Dan Walsh - 2.50-1Dan Walsh - 2.49-1Dan Walsh - 2.48-1Dan Walsh - 2.41-1Dan Walsh - 2.40-1Dan Walsh - 2.39-1Dan Walsh - 2.38-1Dan Walsh - 2.37-1Dan Walsh - 2.36-1Dan Walsh - 2.35-1Dan Walsh - 2.34-1Dan Walsh - 2.33-1Dan Walsh - 2.32-1Dan Walsh - 2.31-1Dan Walsh - 2.29-1Dan Walsh - 2.28-1Dan Walsh - 2.27-1Dan Walsh - 2.24-1Dan Walsh - 2.23-1Dan Walsh - 2.22-1Troy Dawson - 2.21-3Fedora Release Engineering - 2:2.21-2Dan Walsh - 2.21-1Dan Walsh - 2.20-2Dan Walsh - 2.20-1Lokesh Mandvekar - 2:2.19-2.1Dan Walsh - 2:2.19-1Lokesh Mandvekar - 2:2.15-1.1Dan Walsh - 2:2.10-2.1Dan Walsh - 2:2.10-1Lokesh Mandvekar - 2:2.9-4Lokesh Mandvekar - 2:2.9-3Lokesh Mandvekar - 2:2.9-2Lokesh Mandvekar - 2:2.8-2Lokesh Mandvekar - 2:2.7-1Lokesh Mandvekar - 2:2.4-2Dan Walsh - 2:2.4-1Dan Walsh - 2:2.3-1Lokesh Mandvekar - 2:2.2-4Jonathan Lebon - 2:2.2-3Lokesh Mandvekar - 2:2.2-2Lokesh Mandvekar - 2:2.2-1Lokesh Mandvekar - 2:2.0-2Lokesh Mandvekar - 2:2.0-1Lokesh Mandvekar - 2:1.12.4-29- update to https://github.com/containers/container-selinux/releases/tag/v2.170.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.169.0 - Related: #2001445- Start shipping udica templates - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.168.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.167.0 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.165.1 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.164.2 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.164.1 - Related: #1934415- fix the build of 2.163.0 - Resolves: #1957904- update to https://github.com/containers/container-selinux/releases/tag/v2.163.0 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.162.2 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.162.1 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.162.0 - Related: #1934415- do not use lockdown class yet - it is not available in RHEL - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.161.1 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.160.2 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.160.1 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.160.0 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.159.0 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.158.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.156.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.155.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.154.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.153.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.152.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.151.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.150.0 - Related: #1883490- synchronize with stream-container-tools-rhel8 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.144.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.143.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.142.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.139.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.138.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.137.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.135.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.134.0 - Related: #1821193- synchronize containter-tools 8.3.0 with 8.2.1 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.130.0 - don't use macros in changelog - Related: #1821193- update to 2.124.0 - Related: RHELPLAN-25139- implement spec file refactoring by Zdenek Pytela, namely: Change the uninstall command in the %postun section of the specfile to use the %selinux_modules_uninstall macro which uses priority 200. Change the install command in the %post section if the specfile to use the %selinux_modules_install macro. Replace relabel commands with using the %selinux_relabel_pre and %selinux_relabel_post macros. Change formatting so that the lines are vertically aligned in the %postun section. (https://github.com/containers/container-selinux/pull/85) - Related: RHELPLAN-25139- update to 2.123.0 - Related: RHELPLAN-25139- update to 2.122.0 - Related: RHELPLAN-25139- update to master container-selinux - bug 1769469 - Related: RHELPLAN-25139- fix post scriptlet - fail if semodule fails - bug 1729272 - Related: RHELPLAN-25139- update to 2.119.0 - Related: RHELPLAN-25139- update to 2.116 Resolves: #1748519- Use at least selinux policy 3.14.3-9.el8, Resolves: #1728700- Resolves: #1720654 - rebase to v2.107- bump to v2.89- bump to v2.75 - built commit 99e2cfd- Resolves: #1641655 - bump to v2.74 - built commit a62c2db- tweak macro for fedora - applies to rhel8 as well- moved changelog entries: - Define spc_t as a container_domain, so that container_runtime will transition to spc_t even when setup with nosuid. - Allow container_runtimes to setattr on callers fifo_files - Fix restorecon to not error on missing directory- Make sure we pull in the latest selinux-policy- Add map support to container-selinux for RHEL 7.5 - Dontudit attempts to write to kernel_sysctl_t- Add label for /var/lib/origin - Add customizable_file_t to customizable_types- Add policy for container_logreader_t- Allow dnsmasq to dbus chat with spc_t- Allow containers to create all socket classes- Label overlay directories under /var/lib/containers/ correctly- Allow spc_t to load kernel modules from inside of container- Allow containers to list cgroup directories - Transition for unconfined_service_t to container_runtime_t when executing container_runtime_exec_t.- Run restorecon /usr/bin/podman in postinstall- Add labels to allow podman to be run from a systemd unit file- Set the version of SELinux policy required to the latest to fix build issues.- Allow container_runtime_t to transition to spc_t over unlabeled filesAllow iptables to read container state Dontaudit attempts from containers to write to /proc/self Allow spc_t to change attributes on container_runtime_t fifo files- Add better support for writing custom selinux policy for customer container domains.- Allow shell_exec_t as a container_runtime_t entrypoint- Allow bin_t as a container_runtime_t entrypoint- Add support for MLS running container runtimes - Add missing allow rules for running systemd in a container- Update policy to match master branch - Remove typebounds and replace with nnp_transition and nosuid_transition calls- Add support to nnp_transition for container domains - Eliminates need for typebounds.- Allow container_runtime_t to use user ttys - Fixes bounds check for container_t- Allow container runtimes to use interited terminals. This helps satisfy the bounds check of container_t versus container_runtime_t.- Allow container runtimes to mmap container_file_t devices - Add labeling for rhel push plugin- Allow containers to use inherited ttys - Allow ostree to handle labels under /var/lib/containers/ostree- Allow containers to relabelto/from all file types to container_file_t- Allow container to map chr_files labeled container_file_t- Dontaudit container processes getattr on kernel file systems- Allow containers to read /etc/resolv.conf and /etc/hosts if volume - mounted into container.- Make sure users creating content in /var/lib with right labels- Allow the container runtime to dbus chat with dnsmasq - add dontaudit rules for container trying to write to /proc- Add support for lxcd - Add support for labeling of tmpfs storage created within a container.- Allow a container to umount a container_file_t filesystem- Allow container runtimes to work with the netfilter sockets - Allow container_file_t to be an entrypoint for VM's - Allow spc_t domains to transition to svirt_t- Make sure container_runtime_t has all access of container_t- Allow container runtimes to create sockets in tmp dirs- Add additonal support for crio labeling.- Fixup spec file conditionals- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- Allow containers to execmod on container_share_t files.- Relabel runc and crio executables- Allow container processes to getsession- update release tag to isolate from 7.3- Fix mcs transition problem on stdin/stdout/stderr - Add labels for CRI-O - Allow containers to use tunnel sockets- Resolves: #1451289 - rebase to v2.15 - built @origin/RHEL-1.12 commit 583ca40- Make sure we have a late enough version of policycoreutils- Update to the latest container-selinux patch from upstream - Label files under /usr/libexec/lxc as container_runtime_exec_t - Give container_t access to XFRM sockets - Allow spc_t to dbus chat with init system - Allow containers to read cgroup configuration mounted into a container- Resolves: #1425574 - built commit 79a6d70- Resolves: #1420591 - built @origin/RHEL-1.12 commit 8f876c4- built @origin/RHEL-1.12 commit 33cb78b-- built origin/RHEL-1.12 commit 21dd37b- correct version-release in changelog entries- Add typebounds statement for container_t from container_runtime_t - We should only label runc not runc*- Fix labeling on /usr/bin/runc.* - Add sandbox_net_domain access to container.te - Remove containers ability to look at /etc content- use upstream's RHEL-1.12 branch, commit 56c32da for CentOS 7- properly disable docker module in %post- depend on selinux-policy-targeted - relabel docker-latest* files as well- bump to v2.2 - additional labeling for ocid- install policy at level 200 - From: Dan Walsh - Resolves: #1406517 - bump to v2.0 (first upload to Fedora as a standalone package) - include projectatomic/RHEL-1.12 branch commit for building on centos/rhel- new package (separated from docker)/bin/sh/bin/sh/bin/shcontainer-selinuxdocker-selinux 2:2.170.0-1.module_el8.6.0+954+963caf362:2.170.0-1.module_el8.6.0+954+963caf362:2.170.0-1.module_el8.6.0+954+963caf36 2:1.12.5-142:1.12.4-28 selinuxcontextscontainer-selinuxREADME.mddevelincludeservicescontainer.ifpackagescontainer.pp.bz2templatesbase_container.cilconfig_container.cilhome_container.cillog_container.cilnet_container.ciltmp_container.ciltty_container.cilvirt_container.cilx_container.cil/usr/share/containers//usr/share/containers/selinux//usr/share/doc//usr/share/doc/container-selinux//usr/share/selinux//usr/share/selinux/devel//usr/share/selinux/devel/include//usr/share/selinux/devel/include/services//usr/share/selinux/packages//usr/share/udica//usr/share/udica/templates/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m32 -march=x86-64 -mtune=generic -mfpmath=sse -mstackrealign -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protectioncpioxz2noarch-redhat-linux-gnudirectoryASCII textSE Linux policy interface source . /etc/selinux/config _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if /usr/sbin/selinuxenabled && [ "${SELINUXTYPE}" = "${_policytype}" ]; then if [ -f /var/lib/rpm-state/file_contexts.pre ]; then /usr/sbin/fixfiles -C /var/lib/rpm-state/file_contexts.pre restore &> /dev/null rm -f /var/lib/rpm-state/file_contexts.pre fi fi #define license tag if not already defined/bin/shutf-8864c127fe2676f6995a4c0c9d88c779c7fa44b25f46786695c05f5fc461088adcontainer-tools:rhel8:8060020211019153644:2e213529?p7zXZ !#,p] b2u jӫ`(yզXrp>!meR3Պ ZM T 2'v8`M sh;t ;Y]i%Vu6I]d贼v2,@'\ؾ M[A+'?814OՓP1=8&(ï|6䵸qG<jznun$odH;*JA6TD17\IBWɋO7')F Ybq <$g(F6o7L,EZW(ƼGހd'KtL\m~N jP:W7 C=)~ߩ8н 0yt{[*%oB4\pTio^LSݨȍq vRS$ 'pЙ795[ݏ3`g;;h)v>5@!&س30IM&gLK #=k-=OTH>Ĝ>li㖖<|b*Pl.z%j|.铻k&pk5zVLsm5:KLUiV*@dke9K(*~t 8C4LƂ'ݮ;d+hIeh(_*<`"o9?y]! ^e!P W9V/29GN #^C/Y3Iybl2;{,"Imjv SK KuU)%Y>xMXY'Fۘ =wΜ=Sݩ}]L:$wRU=ٸ=fEA$\ u?{ Fje.2!m͛!xR rH?bcӣanXcmksJrGvXe* .mh b{$/\E’HY,f}bg"ەI{>m (U{zԚ#Q&7qgo+)TWߘGY!C4-CP\o*h"H aͨ>51qOz̊h\&E`>/Gܪ5EFGkP*ȑa@L̂1,%+0>80/wF2n!78vjkJͰOi!Zd<@!v ,yAAeXuD$3}}R !gc'ex.lYXW+2xcm:n?Re٤۳Zbjs9F c_%?lD,,En*VAPzzvp9ńOQ' ~;89݁fZNr-jNle KZS#b=a{֒{ )JosZŌUdE4P5hsYԹpfĦ_ϸ8tHDJo`{ 9z28aTnzT~< yǥxX4Wp&En1ɭt]ElNS$8D՘7e)H_>iel„`>|ï>_wG$`;Jvo¹XaH&l.Sqv<w;2W%~Ռ+V6$,.nhyaׅ1ڊݙT#Xw({R+,ߒa=ezY\9L/D|VF`Zn[8>Gz2@3HbgqumIpJT+B,:2WF? m£*0-TҟR["$_ø;% m_ ;+Dɷ0g+K7hWsBm -/=wVWʶMKLE\rM Oޑ((LTN7",6ɮ?~y2%C Ļdd/[JexV=hb.D)K߂8 k tD [4+.਀b OgnP,ʀ] :O\~&7Kr- 0wBW՛gϝ3i'XMziqS Kbԍ xR~>tƾY'TBpG?˦ )7;r6U#5E )<);4M}($џŽHW*2J>Io ArmLT0]*a/spr6Gy^0> 9N Uq9e޴P[lLk )*yPQ[w;>vG.)KFPc9Gg`n\zX&px.1'󜽀R?=G$sU6iz~`RDhې?8Ϗ˱#D_#K3dl d!wUx%\NEEe?½NǗ 3A/ k4?i^>B6^ ek}"= Q vնӑp(tH bvPNQ!{UE? eFLSOˤ<2~MhDTy)3"@vi-jX=n{u}:--+HޠO1Fu:t/ J徎y Pm ''ciϕO@؏d:OlJn\SNl5_ / d[7,bxZk rB\ 0aU /Jv\8+ p2gM kߴo`W ?t(U \;2+\ ew7ެ 9բ|ӊ&E):Lu=Xz崔XX%7=ԍG=y?_` hAPG BaY?Gq8)qw)2h?9\!Q0wU1P˞-Ů=E- y[i-|i _Ș`= f8e~=/t2,[r3WoA;3oP0ř)? \kB%olqM];YSZ'G.ύ-Lw4˧p yI};g˔ i>Cӊp%ҁUm5:)D`.Gmij 颬+Ж^)J{ޗ Nl̵ lĹ K*"T;s[L9޻1.?"/H6ZJIZR̮` n2V>s{LbٔґM/uwۯuY{h6aq?Ki^z,I1uwㄲيTZ%ꩻ BA f}? ;{8[-_h 9ϗ»J(I3sSLKL/XUcBAE%eo!kՑ`لKAETB9#SuIUCa@{G.tij?ώ@WiLd !!?Oύ'GK"(gĀzn-Wkmk]q֮f-kՇz(Lz}DN\%XE>Z*3j޴+Fm +YOhHorB0/Z!9 ^`mXaáP B;Z̊dzՊ`!lGc(k_4ioL9mA,H\07ML8Ii,}#?-N1:;s XswUգ,PZMEԃ=O E.fG.W1vֻjVZrz1^qg$"jo3^B078{uU8\p NDEߊh%w;6gF>=\l}t@pfL'4sO3$|0SUL"Qj텷4y=[UNv>3|^{9=d"dhPW^t+iYw#ЀLY)DYh\_<9f2("Q=[]B[DAHbǙ<hb R.4^@-4~ח"@r7#0ą 6d\z=m`Fp.RP;Ӆ䪀 2) ?b O3> y፰ rJyAp)qJ.3AIc&wV'0ŝPO8@Kh\O@.Ot#k5oY #n])FUGS"l)΀w zE/G@|YL zqB)"JF{7`67ت\sG"Gf(K%%BG'ǩ&HNS Y6X#EmP/.I,V7Iu:pH#]n! b7E`xALr5kbFxUArԬ5 jC/3X4; ̬lx(gv"㳧=z"9)v/N텬X7 Ly ө :R3w_ۗJ|XKYNyJL6$CpoSN]}=0ZVEU=?Kuk,ytd51M7r9lnm;`'/%JZ7h4 M)Kyn[!u#6׷+|n5)K%_֮Z]a.N̕+g蛄x6Iř䲽j FX|v}1#s٨u}1.a&l N4+=RPYKg;o|!< nve{ '{Q*$\HJq "Oဎ NH 1`cJ&Al㨙w4 ;PX`~3x|Fsy7T:PU;O 1O<."H:8:V2xJo}&u[['Q+%Z$V{a.sʁe^ӠC_,*$ @]!x.ՏAQ?cdOO%cuAK`Ǟ¦7݅xM*Z,ʻXSeW-ェ)cN09ۍo*|!9dY{4dH9gux>(IZ9qMOTG}g//O.J9ZiNwu&gY{'!}gDj~YgRӖRTk ]ԡ씗eld/Y"WK;kžnu쨇.y%_ឞo~0B:5j`Ud<Uki3l˟k?F7hOPKԁf*~1tLI*_>77+ƓE/Ϝ K.fk)eatw/- :pe9pnGxnOn"4xOPA!ԧZZ/LėlcҭSux;4xh;4sZ-I1۵ чvSXDyw30aFOqhk{UeXXԛNQץ!Q]X5^v2g#h0w]'*o^DZ ze՞JL=y{{Dbtl&s&t"a4@{.M+T)1/ӣh(@AO3tD}ؕC<wLì hYL-2oz5WR80ZyynjImw@MdM4ns lQ<3M?zucT%``2<_X$U;X9G9OYHiqpg<S/H\DO=ÒT^>O =62avA8V]B&+֠8:W"Ђt`4HF=t$h7n4Ӡ[c4D)u3pfu8CF5`u t)C <$Dʦ@HSeޢGq*JEd.i>VHX&nqIMsY1Wǒ{Yp]3?{YcTz(,#۶=AYrT%yGSul}䝺ӜD6@F-&UwsPݎL8ړe}l7rAݚ_7nZOTQsV/_+5[՟~/yPCʞ&I t$uGXRgqj.[6yH.+Z:N騈 2bέbCHC Glc≵tEJŗJZ`x֦,87>̬măޗ} ?GlOʍ>dt~9Z0nW.Tm%'g};MXj2I?C&Sw% A/J墡.ןEF]Y}xx'B/n:ㆣ/}ڐSKLGn Roq[各K%\`<r{@2&Eo-Gʕ Kz#sM<Rˬ,E󉹒9"f$j ,t-\ѱ7]dOB'"P:TViz5$OM(>R'5quB?h kixZ{rQfTP8B*=2=S:|:QY>64Դ^ )H#nt*'u|>@ L!&n*w;#Vcyk,n9d1:p BM2A``kWJ3c4qoLŻaX>ʜ@:0H2FJM$E&6ig'FYzr`!JZ}*nwdwhfPW% Ȇ&=R20EAq *Bѳ":вvn9X!l@yJ*WLmbĭdfFq vh<{ؿ <) I'Me~ێ۾1^5ξpgR"6Gld"`8<!q.ݷ}IiπԯKFf~VPkuY ڭnf.?;sg/lWdِ0}QAF5A%ۺ-YzF=V0v@?eZnCEK }jHj}ybEQI %9e)ZR&EWCKh R*hBt**@'=q5)St3t i_2<Ȱ)9 vxyԻĻD7KI}7xH-7^\˻Xu=w*)Ttga|uYxE4}<IO92̃F2`_ SMݤ8)-P A~A@B?;-g4n*gN}uR%ԁ\XRx$WOEuN<a&8N 6YGvݴv(X.3xur2qawWֿH#WZwp ~8Qȅ-ےSf:m-'Z?/ES |YS/S@А0ٰv#~3p&3{\ % a!> nj;{@7MZU,6ɧ˙Lsϼp"D[_TےP9S-wͭzP}rcOf.J`T|=]NTj,0ʱ f|iL:s ۧVEe[WUR wpvi9K TcOW=뇊"8x.V~ ?1bWi݂S > ~5’.0rl&0W`[7vCR$ i\,oQyqG}l:(6 nRse @*sGˍH5䒋o Ϳ5`̪ǏƂgCxB+Qar!""[{@]yW9.YECSIabJTqn.gmSVpKN\0r 'G֟u]'@@o >X1C;=0'DzFm< nmѮ4ə> pdhg޽|F @!( I(i`h'<6P&KlVY %B}|Cx o'}5 > c0,qUOimyg2[f~?>Jk^Q#+!=uX+M&zd艰P%[7\]I$9r6U޻ڠtl9\E+Nַ+?ͻ_Qwڳ %X$`h%XH:Z%gW(lt2VYcicHKߙD @eM{hJVdD?ȹTpc(FFVXƠwHQo͟'N"M6"L=9K<2'?/S#0[G}EMP+|hzg1ɴ{}~O~Yk$8PG~~DϢ @b <7pN3C6n% np'qBfȃL==>qh/SFS8VsщJcZOW~y\ c$ɑnME&ܫCD\M"ji~@U1ӆKD獮{ ܌ y߼oeJKl')2M0kMY_YNORpoKE Jm~>3˙+juUU?&! Kh[{ ":먋ԃ0"#,O4K\anj@c!L^ X4jYu炙!vG5vͶz8U<=$~ 3oe]= ^ؚmۨpdړj%fpn~[ys.K ;tawax%b*&pJ0%v}[ Tyuƍ{:P<kZ˅qA%NF,p%_oƼ^{L6ap$(*sf3_ 13G8΃_hNL|-Dn JU ^<2=}5,~cZVk.;G(,.Iъ(uW*Y[@!CH,hMSd|9J^;uT,ICzYâfH EL|LPRT s۲Ͷ G V.Z쇎[^2mZPF?aobkw`=UQѰ;Λ#ĊT`Ŝߠ> `$kkOO׶ŤBCXsBe)=Q;j%{.Q/L8iQ?5s~NQ^˜9D(s߫ޞ+^i4YPɂ_ؽ7Czddl_yt8vɹH V^ˌVӷ \AW"0dX?,ŋQIXE8i q^ ӞRFt쵚ыJg4gftKunzro+SoC=`!~&9ŹFA`klZ ]uG'`j[;:!O*M^ ?R\̄(f6*Eʬ8ǮV Njib  ިPiSgd0Y8bhǗb9%PQӯ3" )?vv- 18(N@+6@m턮7J8ư^/"ۧy+N@l59tT@'1VzQ W+ W9ʕlq֭m ~6HJsc42C @~BxtФ?؉{2F|CCp>Ţu(C)\0EAΈ"XBwG(˅6#B\04DM9\3{&,?5ӵq/@EQmh🰖;ā/w0oY:{Mo&m $ A؂]@zJI/J:+2L !2sM v&'K$qlWkK@ΡwL0B"*  sYwp}2ac<6!VQhKWfR [ElEu0a +`Ef/xp􆖮-H,2垕$m_sV)%FM-\^}L*6Ж( UD}e͘ܠMA3@ds?=OzԏIh\ŋLL%|"hfKӉʆv]{B݋/154KX~V64FphKœ4i/g?Džs_k>k'5{e{׀6f-4sqrڗ. υ;&k(4q>9H *HyѥR<q3F88=RVҪB>WH?aD @%gqxy*UGA(H;TZV ʒWgZ8mXϮGv]ΩxwE_w |APc%"v/'Rq.&?_domIݙ]O8$4%O |m dFbgt;""\D v=Y fͦe&c2--WJv&hW[n(5k`z-0TdfNg1םK]ȣ} x`{981uFj.XM91uKY+544?av*I҈"{M؄S>,]%wW("H r1褵\{Un/:]l3?<]ؑy%O w`E`?IQ*26,k4'bxRK}e+m\.V 1_Mt|WD<jb@T̒o12<3Mf:_`zwm1 LcRY{j8,›n)'**4,Lcc[um5W"0aP<(; g!(]"LcfG; W|=K]^хyj];kduopo $gJ>3p7ɠJlRZ˭s0Vv2Ać(mk힧֍|aBEc -vIޮ}8+#lrarcwtr'D:o/ krrW4q{uꄛO"Nb e$-~ >LRH'?q,| .6r{[=PT@7|B΁yy'y0rWQ65 q0:?["N&L; 7Hs@96jTs^JԩQSzCI- =PzK ;]LH7;tסBFcgHyԅ=[\r h-ʼn=-RI*s)HQ,Ɔr>x}D^5۳pBxO϶,{cU!qb/"l:m`y{$14-i:oCL[~*Q؏K&8{ uءݰkPto Qw _14w ^ׯhJӑlL:{RęF=*pd2V<|>FMʣqQ{%Ya"!Y"qBܡ$s7bn4OŬUtݕXY 8!~M@x#jx%$NAi3ƤZ>ހS5wPP ti yN{m,A!l$?2HD#xoҫOw4.:v-L Ɉ rB O Eej|s6!hi EOڨ. pڠBolOZ.]XvMp2GAYn46 c(3Zִ1*\.3_)|dJfLOTrLohB4TWUnF#n}^v]R)|UHfꅉ-1ghGsC0'VI!s罙ZԮmRr8Q؏V&DT y।]ҰG*X,GHRITJP-Su$FH-Iu`_4ʼn]|:gY{*KVL"`;t57J}6X`#34HgxGbId7ʸ30/__v%fﾴ KؼDY2 xL6]0^cvInn w6FkS2L}@MZ 9d;92B;K % S,˅?glMCDx4y]]x$8ҌwM^+zjjlb|wtՁzC,6j#aH3ma%Da74*s]Ӂca¯ `Ք4G;C639KT1+zvKN+4_gJ/]u2? r6Zڗ6;p >+Ђ+υ4C B-4:JA;=kA@0D5F6rYt7zЕ)5DMהU 'ɘ~;]ia+\g3L+`4Ar}#ۆFQeKkuֶS9EiofA4|u?z:PƃcŹ#z%˰o/ol9j.S 6J.S09Ϗ:ң۩2 F@\߆P{F^tb%ɜg;V>WN)e*?Ѫ]"z}GysIGPY"0ϡ!-|,hNynCc{WJ8/&ј2V Lo`J% CՑ?o)Ѱ\ыsK(\XAZijnhhPzEȜuVq{5ٵޘ=rrA@z+*Fo(!E~~S/>^͠"4pC$쩢?u.#3"MI!*KQ%[X)uY>l6SĩW&wGWZWZa#RO*>C&w_m@mykRIk ?jn{PΨR#("iM^b>p&uPl3rz=.k?hU/Q=<6$]lBߵuX*?qPߥJaIyNkR+j-DR8.b/D|]1I甾ivD."%(Uth@ bP?qOit:k踸<[fQR_orǠɋ `:XPGW<ZQQ[%Jќ)]12/ZKVP9"Thۢ7ƃ-¤]6F"=&kah Q']}6S|1PIA}O@{I56lS^Kz@ewC!>P ty#넟Lz.lrp뻼Fd"\M^/M;~`gE!K,V`+n44 1=*m,QJАmtv{Vi;+tϓ^r[I? qX!ǣBX. Qȍ#_$E%WQa<50vVo`3@Ph6A "RO (mnո-6[D\A9B3o5qz:TJtL@ ԄД$9Ks~gL;^2,9{ -V$}BAAspMȒi~ߺ]k .UDz/$[Wş~(H mhR4KpbKxT/XF-%9 jH_@MWS-u!+u8Nc|צ虾PBDX>wޡm}u~OZd^ ;B[s?񉓥MO =k !O-/9D.o sc3ƚ{4۠R1Z:"Fd[@˄c;_EhRFi #/E3Y-!2NbRY?F\u R& <]j}M$d4_p DLm5 i$0',s!Wh"k#6B A`{Gʭ&rO$,w:ҠcuMUDTqƎ}ﺼ _V >J9άZ!_Ć-/ 9#=:&EMc0[5>]|C$MrHԨNkdCI5|djuL2xHfU 06SAY"({˕Z t@j H%u9\mz,AwDp:4-2&g\5IesK3?ȠaZ&Ykfa8&`x0K >w_؍cKa$j>CL'6쮬updUiԵzj3W.p/ ut$,=] ⿝v pVڃ L,$+'U BҮ2柘"ukb9;Fm?U(Mb0^,{28hR3(5ͺc. q>2AVWyfg79@XL%Ś,eW1/tUϙSX npiBO.4H#PoaSIÒ -ӱ=w+8hFnΒ1i[@LbexԁT&bCZ eH?b2,l#HKu'` c!~]V(%: y[--o r&8bI^!\ -(~73=n.1VJEֈzLyQ)rWsdRDT2a iY{!{leu@rKCD&R :=_~!x${t{imU!śe)4PFFu<, ==0hӾ!H8 >O}_5z6vkkt2 Y<xi'/&uJݚ^cl~ wg(Pi]UslႩU`\ bwp)1LE 'P AW"z PyѕK `@B&Ԁ v/[X/W&4.vu(FX&$i ԊS٠|cQaOFŋI٨oد{5&: j~Ywޖm\ܒ =!y+3wq`={H)˄gy[(1AR KDQ~@1n,WEvyԫAűε9,kCrSBIY773K0I:+Thc۞?@a/|x$4*|L|tt0TN&NQ iBI2N s]\!tboW_X5%=tYY'Fik&8doF''hIȐ~ h݅:!@,C:"LB+⿌3o5j}>lM{-s]S :HƋ=&]~T !{ fݰ|LǑ*adEqLƝqNi\0(Fܰa2iujÈ Qs$Ur=9+j'g"*z^r uFenUM~U|ao*;Ǡ$q=qvܾ40[8[ r\8tW5_we8~*Ey6d^мd#)v ͈KI.Ên^-*/ݔ6d6];(}q#'$!R4z7C2`-LYa7l4] m&k9{ ?e_3&>a3zo*^}[u.&\zyV`կ߮NiRu>OWZ("s:EwpƮ&606-Y&Uk5bxv/@ ѻ'NIwzJЫ !ml j|l%i9Df@X{ l˥PTb;29Ϥf!Ky8w4H Iۗ .g'Xw>Õs"HM edG˙BK,9N{#V\1^64Ơe-(q"O) (uGwy~'5Ws#y8 >ѐ&K`ƌ!Gys̳~0)? U](`qϷy7uo<]q6-`D{Y/p`,^见f l* ^7q- Ta3!r,W%L<d PHP1< oM5upo',u[.+:ր٨{6l*^x'3>ٵYz]7#0v~g}CQo>كR.-쪗Dnkgց.h9M`<ˬB|Fbbk~mY6' moTv+pGd}0 M7?)K-)}#nU @ K΅":z-ץ`[]'A8Dnsq.DݮQ=e5*nJBa( c'~ Mmb`3QbW ݵ|!/W?5WG)> .m ]d/e"(+}+YjHS҅ |Y_R'z5r~e(Z?>\@Cm@sfÖK{{O e|Gm,k2IG|sXZU7XOu!(vRv _s(hUܭō<}5&] _8sᓂ߉t~:*ry>oSwhڳĝ jw4Zp"=Ǹp:+W0a}@Nz2,S:5*^S2%j <᯽HC2U)KC͊^NrٿR:fzS <|6}kAO?Uó= Ok§} `ރq ~%lݢӼu[At^M[A tc3»,i"\Ѱ*1bV {o{Sׁx|>\pNE"o̮&' SV ^_:^5Dz6Wzܝ ݵl1ug49|!2mև`L@ 9e%>,:;ݰ|{(_}l37dU]b.؃? Z SdWx ~N[\ 8ma6@6=A"P/_2v C֓:s]6(7mS)UY>Ɗ\$ jt \?}BY%b^+.RX{03H-`p4wlLz,MxyheX9?< |-􏆓IT3EP4viQRxMl* }kJgý<$[<>[W֫| ѥwmu6e4! 'gߊA5T@"ٛ ,~10d߬_qvY:!m pXU}U6[^ޱ%941␙Ls\4F[g<+-;`\<ڣ)]-RUpׄNU Z㎙JCyBO:?Ó.L{=:MH4NUw5;\~29*X<6\ o*WJpw GчV`DaVUl]pu@0:l c L3 %J|=@M]tuc@/&0ЕE/~OHE T2LTlBp/VCX;/"Y3O %$ڳ `b\Yp ~ȊnW݉1+Z6|g'Hr"y-Fp"Q5Y T*DU]v9JmN;%g8oyB, ړOk{Ɲ/@ԃLo>@Gah `: Zv:p=bF tAٿZ5H?w5d(ճzcZʵx-0BoX,yn^H- O% D d?(=/K N5RP2 D"ﴋznhJg\kWϼrbz#!;"fLm8ގE SPĆ_!X[ Hp.kޢpAb_LpKVRgs`+)Y-ou#yl 8-0cs(%|n[!}|֑r Mdeݴa ՞˄@Sa3(V49 Ҋ򧧀Ֆܵ:G@WW| _J~'WH#[@a4:VN}M~U."r) B@a 1mCA 4uC^/L1B mL//daֹB TL2~9VR>,9axMGpONn Åa˻ @c}>o1$cd;]4B т0%ۙ򐂓;gLS5w-.4"qy2]̬I  ,nY }PW]+MP%ckͲؕLDj\5E*)^yf47)r,)RNd<{?j'g|vC^B6K"б&Sg>ʥ9 )Yc`P8|{H:KzQB3!IYٍv:qF[̄AL6QOR:IK{S7;G/dOТ!2S@,/K@=?pG̹p#֊ W$,=/a'7 ؍=C |L1Y4S$+.*$O *b}S YZ