container-selinux-2:2.205.0-3.module_el8+392+60106495 l>\  A(,0HXdTVU]wաU:G.sդBM?ۜH[T7pЈ!F] hxW3/%.83+,yjR1hS.8?:kCQS)?bUNGP;"PvB`iPw27S[k)-䳥@k!p+d.p@v>J:t ⿌}5h-#$Έu|C,9`0#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]dTVU]Qxlf$e V`P3,'d{DtzɧeޘN bbE۪,Wx+~.4"#Ig۝-ʎC7Ό,za~E'א)'Scb4 .X hPBoޏ PB2Z=gc%Rpپ=ބ˴*Nj"EB+Saj °aM:HN@^xQLGb+9̬?:a}2#2H(<'A+UG-S9ơ\g{4ANޖ: 4 4H'Tu8@.!k[lUt4H)-]L,uS7> eQ+(MC`[cq.Q:/Xt G= 43/2 QLt'FrؐzT50ۆGMxⓎ-d5֙GPѠQCߍ(zFwSl@r~$>`Id?dd8 < d '-4m0 X    $  8   P  PP(89:+m=\>\@\&B\.G\PH\I\X]Y]Z]|[]\]]]^_ b`5daeafalatauavbHbd3d<d@dFddCcontainer-selinux2.205.03.module_el8+392+60106495SELinux policies for container runtimesSELinux policy modules for use with container runtimes.dTx86-06.stream.rdu2.redhat.com]CentOSCentOSGPLv2builder@centos.orgUnspecifiedhttps://github.com/containers/container-selinuxlinuxnoarch . /etc/selinux/config _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if /usr/sbin/selinuxenabled && [ "${SELINUXTYPE}" = "${_policytype}" ]; then [ -f /var/lib/rpm-state/file_contexts.pre ] || cp -f /etc/selinux/${SELINUXTYPE}/contexts/files/file_contexts /var/lib/rpm-state/file_contexts.pre fi# Install all modules in a single transaction if [ $1 -eq 1 ]; then /usr/sbin/setsebool -P -N virt_use_nfs=1 virt_sandbox_use_all_caps=1 fi export MODULES=""; for x in container; do MODULES+=/usr/share/selinux/packages/$x.pp.bz2; MODULES+=" "; done; /usr/sbin/semodule -n -s targeted -r container 2> /dev/null /usr/sbin/semodule -n -s targeted -d docker 2> /dev/null /usr/sbin/semodule -n -s targeted -d gear 2> /dev/null . /etc/selinux/config _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if [ "${SELINUXTYPE}" = "${_policytype}" ]; then /usr/sbin/semodule -n -s ${_policytype} -X 200 -i $MODULES /usr/sbin/selinuxenabled && /usr/sbin/load_policy || : fi . /etc/selinux/config sed -e "\|container_file_t|h; \${x;s|container_file_t||;{g;t};a\\" -e "container_file_t" -e "}" -i /etc/selinux/${SELINUXTYPE}/contexts/customizable_types > /dev/null 2>&1 matchpathcon -qV /var/lib/containers || restorecon -R /var/lib/containers &> /dev/null || :if [ $1 -eq 0 ]; then . /etc/selinux/config _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if [ $1 -eq 0 ]; then if [ "${SELINUXTYPE}" = "${_policytype}" ]; then /usr/sbin/semodule -n -X 200 -s ${_policytype} -r container docker &> /dev/null || : /usr/sbin/selinuxenabled && /usr/sbin/load_policy || : fi fi fi6fmb0(: BA큤A큤AAA큤A큤A큤dTdTdTdidTdTdTdT~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-selinux-2.205.0-3.module_el8+392+60106495.src.rpmcontainer-selinuxdocker-engine-selinuxdocker-selinux         /bin/sh/bin/sh/bin/sh/bin/shlibselinux-utilspolicycoreutilspolicycoreutils-python-utilsrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)sedselinux-policyselinux-policy-baseselinux-policy-targeted2.5-113.0.4-14.6.0-14.0-15.2-13.14.3-80.el83.14.3-80.el83.14.3-80.el8udica0.2.6-14.14.3dP@d9@@d@dac_c!@bVbb@b_b; b+9b%bOb@aar@a@a@a@aa+@aaKa]aQ@aI@aA@a'@a&0a /` @`9@`Ȗ@```q`@`@`N@`@`dd@`Y@`&m`_T_`@_%_%_F@__"_5+@_16_p@_5_X@^n@^Ӝ@^@^^k@]@]B]]@]|@]@]X]W]R@]@\M[[ͻ[[@[[Xf@[L[K7@["X[@[@[[[Z@Z?ZZZ%Z%Z@Z - 2:2.205.0-3Jindrich Novy - 2:2.205.0-2Jindrich Novy - 2:2.205.0-1Jindrich Novy - 2:2.199.0-1Jindrich Novy - 2:2.191.0-1Jindrich Novy - 2:2.190.0-1Jindrich Novy - 2:2.189.0-1Jindrich Novy - 2:2.188.0-1Jindrich Novy - 2:2.187.0-1Jindrich Novy - 2:2.183.0-1Jindrich Novy - 2:2.181.0-1Jindrich Novy - 2:2.180.0-1Jindrich Novy - 2:2.179.1-1Jindrich Novy - 2:2.178.0-1Jindrich Novy - 2:2.177.0-1Jindrich Novy - 2:2.176.0-1Jindrich Novy - 2:2.174.0-1Jindrich Novy - 2:2.173.2-1Jindrich Novy - 2:2.173.1-2Jindrich Novy - 2:2.173.1-1Jindrich Novy - 2:2.173.0-1Jindrich Novy - 2:2.172.1-1Jindrich Novy - 2:2.172.0-1Jindrich Novy - 2:2.171.0-1Jindrich Novy - 2:2.170.0-1Jindrich Novy - 2:2.169.0-1Vit Mojzis - 2:2.168.0-2Jindrich Novy - 2:2.168.0-1Jindrich Novy - 2:2.167.0-1Jindrich Novy - 2:2.165.1-2Jindrich Novy - 2:2.164.2-1Jindrich Novy - 2:2.164.1-1Jindrich Novy - 2:2.163.0-2Jindrich Novy - 2:2.163.0-1Jindrich Novy - 2:2.162.2-1Jindrich Novy - 2:2.162.1-1Jindrich Novy - 2:2.162.0-1Jindrich Novy - 2:2.161.1-2Jindrich Novy - 2:2.161.1-1Jindrich Novy - 2:2.160.2-1Jindrich Novy - 2:2.160.1-1Jindrich Novy - 2:2.160.0-1Jindrich Novy - 2:2.159.0-1Jindrich Novy - 2:2.158.0-1Jindrich Novy - 2:2.156.0-1Jindrich Novy - 2:2.155.0-1Jindrich Novy - 2:2.154.0-1Jindrich Novy - 2:2.153.0-1Jindrich Novy - 2:2.152.0-1Jindrich Novy - 2:2.151.0-1Jindrich Novy - 2:2.150.0-1Jindrich Novy - 2:2.145.0-1Jindrich Novy - 2:2.144.0-1Jindrich Novy - 2:2.143.0-1Jindrich Novy - 2:2.142.0-1Jindrich Novy - 2:2.139.0-1Jindrich Novy - 2:2.138.0-1Jindrich Novy - 2:2.137.0-1Jindrich Novy - 2:2.135.0-1Jindrich Novy - 2:2.134.0-1Jindrich Novy - 2:2.132.0-1Jindrich Novy - 2:2.130.0-1Jindrich Novy - 2:2.124.0-1Jindrich Novy - 2:2.123.0-2Jindrich Novy - 2:2.123.0-1Jindrich Novy - 2:2.122.0-1Jindrich Novy - 2:2.119.0-3.gita233788Jindrich Novy - 2:2.119.0-2Jindrich Novy - 2:2.119.0-1Jindrich Novy - 2:2.116-1Jindrich Novy - 2:2.107-2Lokesh Mandvekar - 2:2.107-1Lokesh Mandvekar - 2:2.89-1.git2521d0dLokesh Mandvekar - 2:2.75-1.git99e2cfdLokesh Mandvekar - 2:2.74-1Frantisek Kluknavsky - 2:2.73-3Frantisek Kluknavsky - 2:2.73-2Dan Walsh - 2.69-3Dan Walsh - 2.69-2Dan Walsh - 2.68-1Dan Walsh - 2.67-1Dan Walsh - 2.66-1Dan Walsh - 2.64-1Dan Walsh - 2.62-1Dan Walsh - 2.61-1Dan Walsh - 2.60-1Dan Walsh - 2.58-2Dan Walsh - 2.58-1Dan Walsh - 2.57-1Dan Walsh - 2.56-1Dan Walsh - 2.55-1Dan Walsh - 2.52-1Dan Walsh - 2.51-1Dan Walsh - 2.50-1Dan Walsh - 2.49-1Dan Walsh - 2.48-1Dan Walsh - 2.41-1Dan Walsh - 2.40-1Dan Walsh - 2.39-1Dan Walsh - 2.38-1Dan Walsh - 2.37-1Dan Walsh - 2.36-1Dan Walsh - 2.35-1Dan Walsh - 2.34-1Dan Walsh - 2.33-1Dan Walsh - 2.32-1Dan Walsh - 2.31-1Dan Walsh - 2.29-1Dan Walsh - 2.28-1Dan Walsh - 2.27-1Dan Walsh - 2.24-1Dan Walsh - 2.23-1Dan Walsh - 2.22-1Troy Dawson - 2.21-3Fedora Release Engineering - 2:2.21-2Dan Walsh - 2.21-1Dan Walsh - 2.20-2Dan Walsh - 2.20-1Lokesh Mandvekar - 2:2.19-2.1Dan Walsh - 2:2.19-1Lokesh Mandvekar - 2:2.15-1.1Dan Walsh - 2:2.10-2.1Dan Walsh - 2:2.10-1Lokesh Mandvekar - 2:2.9-4Lokesh Mandvekar - 2:2.9-3Lokesh Mandvekar - 2:2.9-2Lokesh Mandvekar - 2:2.8-2Lokesh Mandvekar - 2:2.7-1Lokesh Mandvekar - 2:2.4-2Dan Walsh - 2:2.4-1Dan Walsh - 2:2.3-1Lokesh Mandvekar - 2:2.2-4Jonathan Lebon - 2:2.2-3Lokesh Mandvekar - 2:2.2-2Lokesh Mandvekar - 2:2.2-1Lokesh Mandvekar - 2:2.0-2Lokesh Mandvekar - 2:2.0-1Lokesh Mandvekar - 2:1.12.4-29- fix build for stable module - Related: #2176055- use conditionals from https://github.com/containers/container-selinux/blob/main/container-selinux.spec.rpkg - Related: #2176055- update to https://github.com/containers/container-selinux/releases/tag/v2.205.0 - remove user_namespace class, thanks to Lokesh Mandvekar - Related: #2176055- revert back to https://github.com/containers/container-selinux/releases/tag/v2.199.0 (2.200.0 fails to build as it relies on the new selinux-policy which is not there yet) - Related: #2176055- update to https://github.com/containers/container-selinux/releases/tag/v2.191.0 - Related: #2129766- update to https://github.com/containers/container-selinux/releases/tag/v2.190.0 - Related: #2123641- update to https://github.com/containers/container-selinux/releases/tag/v2.189.0 - Related: #2061390- update to https://github.com/containers/container-selinux/releases/tag/v2.188.0 - Related: #2061390- update to https://github.com/containers/container-selinux/releases/tag/v2.187.0 - Related: #2061390- update to https://github.com/containers/container-selinux/releases/tag/v2.183.0 - Related: #2061390- update to https://github.com/containers/container-selinux/releases/tag/v2.181.0 - Related: #2061390- update to https://github.com/containers/container-selinux/releases/tag/v2.180.0 - Related: #2061390- update to https://github.com/containers/container-selinux/releases/tag/v2.179.1 - Related: #2061390- update to https://github.com/containers/container-selinux/releases/tag/v2.178.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.177.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.176.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.174.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.173.2 - Related: #2001445- update minimal selinux_policy dependency - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.173.1 - Related: #2001445- lockdown allow rule was removed - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.172.1 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.172.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.171.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.170.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.169.0 - Related: #2001445- Start shipping udica templates - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.168.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.167.0 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.165.1 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.164.2 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.164.1 - Related: #1934415- fix the build of 2.163.0 - Resolves: #1957904- update to https://github.com/containers/container-selinux/releases/tag/v2.163.0 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.162.2 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.162.1 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.162.0 - Related: #1934415- do not use lockdown class yet - it is not available in RHEL - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.161.1 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.160.2 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.160.1 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.160.0 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.159.0 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.158.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.156.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.155.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.154.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.153.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.152.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.151.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.150.0 - Related: #1883490- synchronize with stream-container-tools-rhel8 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.144.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.143.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.142.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.139.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.138.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.137.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.135.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.134.0 - Related: #1821193- synchronize containter-tools 8.3.0 with 8.2.1 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.130.0 - don't use macros in changelog - Related: #1821193- update to 2.124.0 - Related: RHELPLAN-25139- implement spec file refactoring by Zdenek Pytela, namely: Change the uninstall command in the %postun section of the specfile to use the %selinux_modules_uninstall macro which uses priority 200. Change the install command in the %post section if the specfile to use the %selinux_modules_install macro. Replace relabel commands with using the %selinux_relabel_pre and %selinux_relabel_post macros. Change formatting so that the lines are vertically aligned in the %postun section. (https://github.com/containers/container-selinux/pull/85) - Related: RHELPLAN-25139- update to 2.123.0 - Related: RHELPLAN-25139- update to 2.122.0 - Related: RHELPLAN-25139- update to master container-selinux - bug 1769469 - Related: RHELPLAN-25139- fix post scriptlet - fail if semodule fails - bug 1729272 - Related: RHELPLAN-25139- update to 2.119.0 - Related: RHELPLAN-25139- update to 2.116 Resolves: #1748519- Use at least selinux policy 3.14.3-9.el8, Resolves: #1728700- Resolves: #1720654 - rebase to v2.107- bump to v2.89- bump to v2.75 - built commit 99e2cfd- Resolves: #1641655 - bump to v2.74 - built commit a62c2db- tweak macro for fedora - applies to rhel8 as well- moved changelog entries: - Define spc_t as a container_domain, so that container_runtime will transition to spc_t even when setup with nosuid. - Allow container_runtimes to setattr on callers fifo_files - Fix restorecon to not error on missing directory- Make sure we pull in the latest selinux-policy- Add map support to container-selinux for RHEL 7.5 - Dontudit attempts to write to kernel_sysctl_t- Add label for /var/lib/origin - Add customizable_file_t to customizable_types- Add policy for container_logreader_t- Allow dnsmasq to dbus chat with spc_t- Allow containers to create all socket classes- Label overlay directories under /var/lib/containers/ correctly- Allow spc_t to load kernel modules from inside of container- Allow containers to list cgroup directories - Transition for unconfined_service_t to container_runtime_t when executing container_runtime_exec_t.- Run restorecon /usr/bin/podman in postinstall- Add labels to allow podman to be run from a systemd unit file- Set the version of SELinux policy required to the latest to fix build issues.- Allow container_runtime_t to transition to spc_t over unlabeled filesAllow iptables to read container state Dontaudit attempts from containers to write to /proc/self Allow spc_t to change attributes on container_runtime_t fifo files- Add better support for writing custom selinux policy for customer container domains.- Allow shell_exec_t as a container_runtime_t entrypoint- Allow bin_t as a container_runtime_t entrypoint- Add support for MLS running container runtimes - Add missing allow rules for running systemd in a container- Update policy to match master branch - Remove typebounds and replace with nnp_transition and nosuid_transition calls- Add support to nnp_transition for container domains - Eliminates need for typebounds.- Allow container_runtime_t to use user ttys - Fixes bounds check for container_t- Allow container runtimes to use interited terminals. This helps satisfy the bounds check of container_t versus container_runtime_t.- Allow container runtimes to mmap container_file_t devices - Add labeling for rhel push plugin- Allow containers to use inherited ttys - Allow ostree to handle labels under /var/lib/containers/ostree- Allow containers to relabelto/from all file types to container_file_t- Allow container to map chr_files labeled container_file_t- Dontaudit container processes getattr on kernel file systems- Allow containers to read /etc/resolv.conf and /etc/hosts if volume - mounted into container.- Make sure users creating content in /var/lib with right labels- Allow the container runtime to dbus chat with dnsmasq - add dontaudit rules for container trying to write to /proc- Add support for lxcd - Add support for labeling of tmpfs storage created within a container.- Allow a container to umount a container_file_t filesystem- Allow container runtimes to work with the netfilter sockets - Allow container_file_t to be an entrypoint for VM's - Allow spc_t domains to transition to svirt_t- Make sure container_runtime_t has all access of container_t- Allow container runtimes to create sockets in tmp dirs- Add additonal support for crio labeling.- Fixup spec file conditionals- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- Allow containers to execmod on container_share_t files.- Relabel runc and crio executables- Allow container processes to getsession- update release tag to isolate from 7.3- Fix mcs transition problem on stdin/stdout/stderr - Add labels for CRI-O - Allow containers to use tunnel sockets- Resolves: #1451289 - rebase to v2.15 - built @origin/RHEL-1.12 commit 583ca40- Make sure we have a late enough version of policycoreutils- Update to the latest container-selinux patch from upstream - Label files under /usr/libexec/lxc as container_runtime_exec_t - Give container_t access to XFRM sockets - Allow spc_t to dbus chat with init system - Allow containers to read cgroup configuration mounted into a container- Resolves: #1425574 - built commit 79a6d70- Resolves: #1420591 - built @origin/RHEL-1.12 commit 8f876c4- built @origin/RHEL-1.12 commit 33cb78b-- built origin/RHEL-1.12 commit 21dd37b- correct version-release in changelog entries- Add typebounds statement for container_t from container_runtime_t - We should only label runc not runc*- Fix labeling on /usr/bin/runc.* - Add sandbox_net_domain access to container.te - Remove containers ability to look at /etc content- use upstream's RHEL-1.12 branch, commit 56c32da for CentOS 7- properly disable docker module in %post- depend on selinux-policy-targeted - relabel docker-latest* files as well- bump to v2.2 - additional labeling for ocid- install policy at level 200 - From: Dan Walsh - Resolves: #1406517 - bump to v2.0 (first upload to Fedora as a standalone package) - include projectatomic/RHEL-1.12 branch commit for building on centos/rhel- new package (separated from docker)/bin/sh/bin/sh/bin/shcontainer-selinuxdocker-selinux 2:2.205.0-3.module_el8+392+601064952:2.205.0-3.module_el8+392+601064952:2.205.0-3.module_el8+392+60106495 2:1.12.5-142:1.12.4-28 selinuxcontextscontainer-selinuxREADME.mddevelincludeservicescontainer.ifpackagescontainer.pp.bz2templatesbase_container.cilconfig_container.cilhome_container.cillog_container.cilnet_container.ciltmp_container.ciltty_container.cilvirt_container.cilx_container.cil/usr/share/containers//usr/share/containers/selinux//usr/share/doc//usr/share/doc/container-selinux//usr/share/selinux//usr/share/selinux/devel//usr/share/selinux/devel/include//usr/share/selinux/devel/include/services//usr/share/selinux/packages//usr/share/udica//usr/share/udica/templates/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protectioncpioxz2noarch-redhat-linux-gnudirectoryASCII textSE Linux policy interface source . /etc/selinux/config _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if /usr/sbin/selinuxenabled && [ "${SELINUXTYPE}" = "${_policytype}" ]; then if [ -f /var/lib/rpm-state/file_contexts.pre ]; then /usr/sbin/fixfiles -C /var/lib/rpm-state/file_contexts.pre restore &> /dev/null rm -f /var/lib/rpm-state/file_contexts.pre fi fi #define license tag if not already defined/bin/shutf-8e6a7506bae073a7851a0e1f6599ae489cefc2fa4e897716333b30d96a18598bacontainer-tools:4.0:820230505105245:20125149?p7zXZ !#,}] b2u jӫ`(y/*Q\zK;̼flOtP gjVךP[2d(CO%ϑxwYR;)܍˫xUhG10"|GM<@^_4^8t 3%ؿ+":&{QːDBtk Fc¬J!%mVh{L#GTvSɕyH! n/kԛg.uOK,6T r2 ՗%)4f-|s3b% " <ω!H^0z讜->Tѐc@d{m1*bdS44Ubgvt+xV8Lb}m}J "2//=Hj#sT+ Rضra%苢`˲M#C. d` 9N\n'bwi4Ć8IShʲA1Бe*) rPMs~okz#V-)ضnGŝ+%g$W(8gP{b1 ]k\[}[-GSn>F0w]hyF!zPio<0Vyb,8"uoΙ 4`!Qۃjѩ Z*AA6`)`+\;?ϕjvI)1Er5V-팓(aYOg"XTg{sQپjRZ6>6 6G[_)$[&)n{/EpۈgVI=d.ZSObaiꯪ3MtֹQYx<~mIАNy6,?g0ȏkb;sT* TDT>%c c<)gp?1[#r*5ٵreVg+Lݵ4l ! ̾`S t),ӽs;s fbfsv ~tTo}[|b=,wT Ze6[ַXr4Uyg ϫiy0vWdsЭ 2tOlzhk5V ŀ5ag@|^>JS6Z:3lo<!T Q*v-'`i4ٗdYi/s V#"\Xx]ȆQUeOwfAk $'٩_ =IߖP2CK Kw>~/BŃKRÓAR`q} }"9t8D2#:72jԆl~Oc!CU5v>Mίt1\gAðW_ +\9)J+.R7q>aN}p ڔ759 Q,oWnrlF "TjGJ?Du?uJAܲuߨt(o^Z4L?eENmaGJ5Cr`Y&]c0-]:s+<4h+->11VU!c\-;]&חf4uڢcͿj"%s=o1Hp-V$"UF٧澟nXll>ˆ-kmv >COεDNBx/O 7 1tOIRwWQ70POdphncw*Z(I 8$oOiF-xeA<3цdZ(.Ъʮ %Cq 8¹b>'@5]8NFGC\hu,PM:65|ؔd\f?r~%˜rF3Nfې|u,愩"CکFh)^`V60Q 7)|9%<\ysʈ$nZna5;R`0HZ rNš8Z0N̤H5tV,+=JCj"$LiJY]Ҋ[,~D#,4ݜ\u4i݉,MT,o@^",pGt *R!fyg/?[Xn1_h3XݝSJlՌ]$!BU,]7;O"Hr2SPWt\.ľtߨT7_E:w)%W .S^J%NX]m4bI9ݏ뮃A2qm= {U]b.$Y EݣetL([Nn~.UŨH%$`IQ8v(D!HZz-uOa!Lȋ`jS)j B2n2)Vp3lEap9}%pQb6mA'|πsfn.]sByRUW:$)tF66Lړntk_@?2ɵ7c$Ԟ%n-.Eߋb{!}0~2q,՝v e?_݈BiW$K$fj=:$!6dm9l6% .M*B6qʐNo%IOҾIُ0qS/\jxpoQ}d=8_qAo-1giVA+ј~,>\47I .sKOiSq(˝]59P2vj`$)_=ޏ({?܌'4'YnU:`8~̅;Ŗd.G5QF/ sQıJ$amsv_Z&X}nRL,UUz{>*W>D*w,`?@֓z^*;Aܓ/vg|gh+lc=Sh\`_V;auPX e%1謑DOe?>sJNEL0o}^lbU8  p0n?Г},dDxrn's4P Ad#N(:-$=mW%y^UR%FW$hhJ |B%uwCg rEͦs;3ܙ7 6 7\ +3%@nVA$Hs #F|J D' D(ArwL{_QF~Juz xIlHhpcojU$:|jFsnn&#<q-r{|,)grk6J>U/>,2W 4i԰+7 &t5NUˌ6+ǞmnJ}:@5WАih'#qzTBo|VУ1otD^yҫ3]ț;ōbfhW3R(w}m`ӵ-h} {i%"d _{$ 76C +q;w `X:' rѻ# ;U@\A?Vy{C ;Pj!oGkk+\C"qݺiUf:L\H@L`:ve!ӛ@\x {_\ڒAQrlz++2PjŎ-zMT~/E?KnUB?9KDٙWl0/W4"Ptp&5pK!wbD# ۨt,#\pЛ&y)3Ma)XgEÂ-L'W\{v[-L#M,IY{[ 8#;PՁ*<{ᕺvx~/BB`e@u1mg-NiXEK `Ȓ7[ b9!,ߧ/|hTV7.r C:m\sbҐ(|ֳL SJRm?PCdk\EXۦ$aNn/{dr [*|d; <)W=Ӫ|ͶTq:q0$_vat AI B /+s6R^ x!;V]yb0 ]y>02ĝA<+weG* WOBs{]ߧ8'B-`F}I m'T#HDaÒڳ'gS4a~HZoj2HN3+8 P,UphpYߗVFqavnD>ﴳ3c AglE'B\a ;a #o-l%''#j@3RopD$]5Q$k@D@(d]yv SM\n1h7cZ5dd.k c3}*]}߄paJ?u׎tQ[HɧeFkҹoW/D9b @`.yrCA0 vGs{*Y9>)u.YT6>#Z/fVLɡ"1áI>=sRF:.̩zHSZہfNnj&ueIdD\߇ 3 }|Ek | ИȊ6fq#kڠ8=pn`hirU]y67LFiĉvxsVǷYvY=lU)=wVcvip kW.v=^ ^oc8[gkr7qOvqd9 V!a-;i8 µ̖Mz)H#O?7]5)fPovE#I&v>PF6}w~WSWWžA%J, RzSR:c|XGTi2MͿ ^ػN/:p8;9^\w{d8 $?j:Up2t oo`g3u( + *tda#: $'[`FJ#,"fBuRf[†qtJ(-LЯVVF╟-{5o+v+xX *`Y,qq[AsZn*X9umnmC,}B?j |ҋ֐@N`oyMhy}Ӊ<,:fCӹ*;Dn;xu0[zejCm6hN6Eth,Q kg2D2nbY|$LB; |d"h`RRb^pnپͣJuz4!e'>mUDj$5;,\e`˫ mJ |{ oK@eʳ(w9 7Wv8-YݶҤB.B>YdRxbNMOtzX6]՘&E4hGx9On5MS߻e?ў&(/!~*:AnkZ:^JfE"4@WOvx:|%uZ;1R<m t]0$h]gH~itVHαVY|;@?MHfNmk@M$*oT.9X8.Yݑ3qKFe^4m{-C䬊:-w !M!+fY#k"e0'r?5mKh==~J3M\=΃Dꕮ3(tcSyY#+Oƅȝ!?G_mW_*٧d9\Pa Y1gJTI}ZSclvlL郗x(e\d~,'3ީ(j/rڎFQwp+$Is#4][2T0q%iy(2J]zU[CHHw jHZ$ZRnۿɔ`VLAotHk 9l|m8t(;'N& cN2+N҅,p4b!9CvVQ_G =NGVJ vCuqV|p D,Cݜ;֖d>DkýGVd,._vXϕ+mQ랹,2im(ȧϷU(&0Wi(l(hb):շ+Ez*5Iɼ /p:"7EQZEeiƪ"ſ/ ` l ̸V_I؆>j tn]S$]Zŏ@z<dTÈ$GU3[js?%qZgX J~fS ѫLm_:mR7'cFEnK^3r%GS;0vN*"jE~QZ)Pu\jħw@Ri{(905[dW#:lhgqXSOF[OG|t,Fg;Eګ&ҵsKIx$зeNԁu!wq.i|g`SHB|^dP"O Q !d+vf^om#,~ ;0~)h CbL\awCFrHCt%;RO=jUcL { "w>sBPd{h vMQYbmήW 97|=;[f-W ߼ z&z/:L,1BiX0 al1Q$o\ F QŞ%]^^zFR mϐ4`0G|Xu=sل{F~UpBV"վN@_l:]xUP$}ү/sp}@ѳ\M38YXyL U8S.۔ eQ}!7?ӼaHǜR8PfMgH ☨'0Wwpsv1᪸~ON23 4A$1pR4)lJQ=puOy]NmO=K icJiNH .G2K?hC`V(M،-?q[hY CJEVkf5nd1sV0t }:н;ʿ z9w2#]#1m'̝4O@,Xy❽_2$zn m^0Lt?bա&@_R7u^2mwێTiJCKf>5$ğl|=XuVxBlYa2ݮI~HxcEce#0|*אi,r왰c!4 I73[@16]SWVJ%gp3TѪӰc3[bM ռqlD.1Wq@)ēISmc'5 Õ2&.`IN PCa`COslKd3$[ϕtIwJ ՅdCe( -c.=}sghn(/4;Z%BW\f9m @=&ZQk 5[ǼaRDe!/ظߛ}NY^RaNJa9hq]z%#V=env2>Rs7ѵm@˶ H\)N<-B/ ,] gZo]>̼>,x5;xfU7;jxn%oq9,>PMڄ[JI/Jh24\h,Ls AVҨS)7χ_*'/DXhCAQ+OtwHΉHTlmC؅FvȰQ!lOġrb PY,S;L;I}^Et1n 14֚:=>[1R: cZ|7 o4j#s _[1o[L?ewH,Z9?5-2LNo`>㓒ʋ$Ky?H{mi69n"dcM~bd7=@oϟH8fMcoN<acv93G1;pK^S1t5VbɀHe'AC!(+%nmŰ۽~1M)4Izr$Ħ״ P`a(ي8DYm$U`4yuv9:znwfGm '3BGmx `$V Oi~ȵa_N|$ .6±9DL`!Qpr15&&S=I}ǚp)uxdTonM!Ŗ ʭ2A8-SI{$m%v\<|byiJV shf7QmQĤ*fqkL$e6fGن8~>2_z#l*zˊT 2K:|dpu*/5u~K+>4\/Dgfm,Dj>d^d CR(Rs,v*|"g_#)j"B~aӰ,QqI>WV8BliYIN/lOkLg+6LYClLՀDE_d^Bq A'Ro;Ռ%91Z+ bۛXµ=#ls:H(SxʴE)02&m+Y)S!{ޡĂJq>S#%õ }ޣ1;(FlP &WVX법Nן@oZ(esrY ¼P? E'-/6\Aྸ*c/3<y[KIҬb;E,RDJG w;G#nΗD~} Eԏi$f0c3B{Pn]YWV ¤hYBwq`U1N@Ъ;E* xH"7bDmA4,UQŗ[%U%%ѯD!Sq$o 2N kpvnH5ɞQjy1Z̩ZUl\c3܄orF̬Z6s< "M~J{[V2ڳj_7:Š,c}޴@KrR=Vl|Q|G~^O+Zpgl -KmMIJT6-KK,G ARڿ8TyȌ:U&acS^m& ]Ibˁ*6<7܈ oW6|-KCk晳*pM%UΤil+ {ƙye晅bnxMRƒ}[ SWGb;0${)@/[5E:ڱ h7=Yyց t;O>SNFƢU0JݓG&WpMJv5_YQ+A^Fa*Bp@W) (Ì]6!$w ATǸb?lPšG\fG64܆}9 ƞUd~U|pj') nӋ!Yյ@rY(TERa8*=A3ueXy0ɘqMao9wSLzKo:枭 ♓M8?X5y6O\ӦBcQ`Dkʚc*97Ա$ bB[ihFDMy::AR0njc]1`\ l:}QH7%NFdzg/`T [I66/{A, 4#+fL)mT<OGuGpSm.?%)"8YYf?> {meq=:gDhX̏*OR{*Ypj.k3KnPή֤&fAcp)zHJnJ6Gh+v0O 6$jѼ fz̫.=wyUDj@0OF 0uYVj $,'3Zds2B55y5qK"2aVsNvFkXJEs 7V:sƒ)\,J+F'o\FAܩ ؏3B fSқsD/#{BC*>2!7\LFxK^5|m-Gmc-ܽ來_H/^bf;zc:T6{2q\5&ȉ0VG& $e[5+E$+')>Sd Ԃ+VÝ(]ѱ!|ް)PcZϱzv8 Ih}.3MTur(d]ec;u*k9f&@d!բv/t{?(.{'3)h,Ze>j!TNV͈U(""CYSTzCჂsզ%ʎ ]thj}Kq~E`n%B.N߄鄓h8"4} g9g!pD^f(Jyb4HY\[b{%FPnlSpreFo}J()}7 uhugNS]^cas0EA=3"=+Nx5tMbK^ό> A- LujIͷ;4%1rmE UD < U̎_cϊЎ5pN' W+]fƕo(M `[>#(?,dn#>68.N=*u .GnC Nx'zNQ$ksKCeZU6gDߛoU6y{&@MeHhvf׀SuB>bKe 7/?|Y(e/D2QHg(ͳh4_P<>|{f#}J>[[הڹ>\ E{I+3ik RjkN\ YZQ^ slхޘ^->)<؇!wYL'Nss#) ch}2#aGJʶ8`]xMΞoQ}U؋y*?NIzlƫXF?Zr%DC6+ r"_Ȣ˫(wtγZ$>H "a .a״lphZ1m) C TqA9->RZ%Qu0B2%n-lj'*dW גпn~U~Tl2wM݋b^oR0e߾XJ-b_dkWҙ [YxQ T6ߍDכKNJ4#Z\Q(Aϑ͔| w nc<M \S!M{`jE9cNSڥ֝ԴO #rkML#X;4 `J]s; ZvQR$E `+iN-:GHY@l&!X V6Q t@2ȿ1ɊCI e`t Εv y !ȍ>q;!|DBe3x|+uX>V,-\_:F8SyWjhw-gpϽyA֞P U8HOʒ FW-A`> $IRI!B»D' ,[-ή |Z߅eJ1@͞䴓&^pNtJx~g"Om mAm.5Iҽ$:Kw~;d18@pfx0ѦTE:Xx &mi@2VE7q:YOøQ}Plg2ɛ*DD@&]~N !OBF`-wf?eU<%eBDEiMR 9㸞 \פ܇0ܧ<0kݛ4"m |8Akk^D@K:]=(hoXbyXufiISFA*dVȥIwohܶ'K<5N^ľ>0i9QۗE-+Ό+ϊlct[:#E{7#ͼucz*{Ck%@_Cbc6?0 cq5r(%{Ɠ0&m _@Sޠ#! Np(t׷xoC3ZhOC./4 BTsAH U. ̲qkvvu /肺SDxr;Oa M>u9!dw٧;, "VM;$PA+xf_hĂ` p8#'R3qy :M4^lRwHZ,Ʀ~I›+<%hN5p@yh 3AG%Hs+c/ a.Lo+e6l:=zCKv*13r!i\/)Li.Po\m(w9Z:r2 MRUU2DSebjBv {0 LUig ~xU}8*mS 7v֕Y)ViM=GJg?'aDAEb^Y?iG p0EUa"|:kjN-fqgO8I#C>Nݑ{}`E*RRxZU|HTP@ g˪6@Dؾ)ai(i{ߑ470n`_jT=}*fUN ؁ S=HmCKĹݒؘR宐zxkd1u*%%zeCYB|,M&5&fׄ;rh0:gj_CPOhdȉ;i{NN@-  U!_I*XT%sf9N ҙjjOkkӰ)',6tBEa;A[*\SQL{Nu3/0?dyā%F7NN-ƦMKGkf#ڢ!,OW}rw{lԻHKHi1 iMȑ,[ ߛ[s':nȿ#,ߧN XPl9HE5Z5T\28_;Tͪ0yAR lNj} 4g`Ymazr c2{k cZyA{@L.݌QkgToJ[K(RtlkNUŰ2pT+Lbp׏1 D%K!X7[Gs|k#G MQVVԤe(D ꬵ4:~o!esrGAD-nuIҔ*6h&;!')Hy8*a%AxIx'5jRb-z ;XBm%|ik߱Ct'E~F$ 1uDQZtQ<- 4+!!"OoITvZ47,ۮqQ@DcG! ߣ藷 017A7aTm(rJ"D15̝k N]YI$hЛA6c37&k#Sn`B7)<)-E*\ M^<$a8 -5B -^\220B-A쪾Z$Դn7*y@VYLb%h150zy uIn/UU )U̇@`hE$|fLPnG `WC68e(21]T`嗚: :qJ7_/Jl ]9 ])Gf7R=jZW7Z|ژMu3lh=ROl%NVYGx:@9]R^gp6[w,ta)eH=ذ Ev$fUΣ834Z2r>j n*hLѿ0}jFeHn$Cxx03Pf$O&/s9hw?MXsdR҂UxvtSI*B\T^=U &cL)~Pm6!:)\^PAo#V}6X?Ü.E,OPGz䜌i4 56nBD2&*(GJƌзnĴu+ V=<`S-Ql6IbP2zwv:kK %Ԧs*$Ogu}OdE7D0?u׉)SG,' 7x=p$\~2L W=5V' t؄F,'7 pHÎ M;$oռLY&0R2H% n\1iKU! ?n\*Y:)]b'VƁe% *]r|-yԩ<K/T* 7~4hTfJ <:I܈Zpl^v|N{'OIVXEr(K#n2LjK-EIĵNyYXּ2gmk8twHņ)]GU ;(\bG5qEh@ !R.<Tt^D~Kϡ *T>cm@컼;zix&{0I(~mz,\z_;ljυVNW U6 o` א.HUQ ]H'ԔkO;b<[Țe1QAM%MeCU+0nAJ ڇ60L9 0GJT?g3:R[0Z1@ԠLgҌV\0a|]¨[5q@1iܢu^{otWȸMן1="ݏM/?xبϲڎ9Lgf`Sm+Wv@;. ݠ8dB˯4^|Y2ˮ?[~׾>쾩ypH_vܯR,.u~OL˗CiY(^퟽Yw p 7uGq,D(^/9<)Ֆ=Yƌ6Ԍ0E]xQ8zg爘@#շKZڴ djVöwƨLfOUv;%6cFDLw.|2XKɨeOEquG$=^z$Yԩ\Ǧd] αy -RyUFD8~^%߾3ƛɕ_, M 3+um 0nqMebw68]; 73ӰV!K}1vaxuvASNFAC951&q;U\&02K}Qe~FRX~*x#21u=ݢR:RzSR2[b Z2S}Zwgr!\uǼZUX-"ln2+wNe:t1|\@%HʋFyԆ]*XtzqpH7 d^S |%QGX:&ELD^ñU3|n":hUZ 6C\a,ND^Ք$^`@wࢳS]O?tC uAheiS=5βvez^E`5B݋,\F[9h雀ևB^Hq3 aN2gYÎHE|vwGWӕ+qJ=6 > w|vPƞ*)Ayi4&15bxH9gHx/+Tfe{儳[ݣ^5cް{O3ޗBVpjDeD% D?5*7nыrwƐbVIǞ'htxO}o3syx_5*,ֽBrSXF\:Dmzw+ QWpVvrl'njѩBe2@TkZ? H^ARruXc]ݿH/3 ? ߋ_XExR]3{paVGȺbo~d2r} fZŠ8;&mʾCS `cJG +JIQa}οpf Qʷ,ҧ~QCg|_.jrOV)i{/x*"&=WW$*lq+ `@ R)JDGvJX O[JrcUB;zƸ"wF`Y\D~m;@ .xri/cKw#[pdR^V./iC@jo!uGy<{6>fqrU <!(O'EӳIP8°jCզhv2 l}[ ¨8g~~H Idaj2U%w{D]e[u,bfCZ$\с$I7i*(aSah{ZplDT<9CxF<QwrY~ĉEmܜSv4z Ps,mϕcxKvYq'&6(jr1`5vsk}c@;8RVqHqo27xz_OX,ъ6w1@OQF}Kvke!ȓ0(/vjy~6.q(zt;4[K?Z̊Yf aF. sI:sVK 6T&*r01ꑚxTG>Q=ŽMb]B @v-DAK\m߱9F=ABУ7{9K%lC6Ucj1  W@Kڱ*V|*2W([]4{7riڊer R$/%ϑ +K1@_sx5lNfJ/۞`F0TOw8:4%H` BPcS/;vgl1owfD8MvbX9׺ODUC=p0[EF@w!%SF_JO&_MofdF)ԨbdlUh_]=UlwaV?W+,s"k 2XP<@ߌIf1ADIt2kN01Q)F4^7לԂf=϶xm+tw89LD\D}&(Ȭ4OM?TO3"x} }`|wHq4<@N3ޗ !炯0Im$++[ :mZQHAw(B~a6E_'#prcK1e܉=W>w/ ugNbgjvzM20RjhRfD`>lq:wkZJY AxdX#\+_h^YpR1#PEBDOܘi<Ŏ01fЋ ,O 7@^ b hyՇ,fP(;Yu%l`TQpV-ԱEwE@}F\橅j b.kbw4 ԑ,/v<%a[R˼ۍ}<Z|nqDZ2s~KX|0lM{½fQDԓr2B> 'Uos)4H,~Bw[t==nYӓn-0O5)X6 fp$zLU _LĜjZbrfs" gG92 Uxwzz:ԴLH8zt`j{iCZDk͋ (d$>ÿ0<S #l?$WP)2PR0з({ƪ)tiukŃRF5%%{Г}1(imqL{?x6p tqz)!2b)- PՌt[w0NPMgW ӝ$0Һ@;[pj=CFYwwTB6e F F'I`E$K'=ff|kw S}:b__$-U <9>Pɜ*^-br 5P?fGوa08 aa\qL`~Q N}8h$[ZWbSWq݀Tت1V@=٫_0v;07/a/⫬{LzntOokZ;BftqIj&Y55v~2fp^4Nt#XNYpydLq2' 3\ 854,mxї93兂2$vZo%\;M`}8TMAf\9?/dp! DW]'a+'CYה%3 T4%,uZz'v4JSu-R[e40˒ \ز߻ Oʯxcl,gT3 e"%hA p •aYԅJ}L\yDADR|o#¿by$0QuÅ. A7ըAk(wݗj [;.ihlSFoiOlJ RȤmHE!wKT"M{z3OE ē<֠JZub 8.z4RMÍ' ?M̽<2Q7h9TfWCs% ?j>A!ZxR)7镔ο3Xf(a:mR>yxr|`DV1GggyMb#.PL(~ΫE$A=ua 栭&TlקN#uǨRxR2(plǘSnjwӬiSoŐv`& U.A*Y̞-xs(R}(G-!.n\GF#eMF)fY]6A"D/@@F52زm!s5,y>ek_. uy(!#\^~4hƣ WlkK ̌5E&ˌ0SɄ` KhO\r lJyM%7(k7`ذbi!jI]O<({x!m1UvDKA"hk 6vqՇ8 Z~37{ |\!I*2XMYbJ,)NRgh~מ^F$NIJ(} " U`誹y'$H@;mRѶT" K.[jwY *aզaցcd ?XȻ kC \IŢ!HR_zsȚ^w]of7b[u_k ܭ-n$_I ̤qn +,iqp.#M"^[9dj*83VӬčHxߔ溣 ~Ye~AݫB/ ,;zVܽ8݊GRsm"2~h9[A;*QS eQ8t-u [!@MW)-K5I0^Vj pz3+Xn &gɛ 53c(0yآZ+]d$\)tq9?!jyQ$1m:52t)fRVdV**@!ӫy sztQ/\f* 4:W^S.,)|ax8AJBZPU s(Enx\S6y'U cOVsn@wtF:Ś;58X XH;44IV J=mwL7An֯{KVi(HNa}h2?F U5) Jn\U2#>֔E?Dž fJ Z&=1tlNP;i+(a::TIаkNm&C$/ b}ȞLa]KnZ(bX^&"KC{JU-S6t;qe0b& '[&ۊ }]:S\k*Cy "&EXsx ͕HfF*_L- Bsla85ARdqyRi ؤ;yh ۇŎwe1xtj80 {VKL5M $j[d \7ER-.f@0$vUu``Ɤ%ơ5$DC18ylF(Y/ 7 rhs@Y!_#%]Ϭ:BsvBeC``REk})x,njmLn4zl_"H28 IJD®VRT 5AdDB?1Qħµ@]LJC"/MlݔηIHY=5h̷p+%Gx=xJ҉lu:vr'{Tpī-ϱnIa3hWPKTu9yjn$@#UmL[GOq.ΡG Ou|m"sw&?/j֤@3hs"J-H{{0Y?tޅ6waUwmPgj|kC0vo0@9⾁Ո!fb n#iTvћyM_hʞ ?r l&o򬍧u:чnjlBV$Q*[Ttsnk H+,7b#J2m.k,TI'#Vɸ?IRƞ8?25ʒ OK'o 1 j!-O')L\G ɒgjlH .kKczRĤce{2|u t+!ǫ(}+Dr_OUءF|[կi4:n ;jfLg@q6,o]f詴 QzC9"Zj'8]=7eܫn>WG?V|`]isѓ!p~Y͜ K' Kk-rl)s Q?<,wЦ_h2qX NgZ4A>1Y%}se2uޭAY 73;>pQqJӝ{^C ب|H{UELt8/9RMk(SL4Y.9~`^s$8G#&tङ$PDiC M%a9_dr$$Q.ɔCKc2,5F Z2`T~ b%άxu8.mz} njnS2N3X̛͖vrU;BkEͭ [ kWPH ~jDys [r E 7mIdL~-gɣҖbFm(7s]*|V3{:uEh] ֡RmZA({p2Q4^xɡ ⣲?3,֐Q +@GY(T)fnVZ,Gj x8{w.Eqy~%\ Yum>omɒ Ц%6BeA[.X1jej %/Jn~S m-+ V\V[nh +MnpR)rQyF} M92@s;fȹ]Cp ⲋۅB{<e>^BӢ~LZ~X>_+gNEjRXv-&ҍلCWo3!L^V4sӰW (5Vj0E=ﻀo#fm! 4,RZj1eWP qO|1xb):Z4RNGF5gVPt7p ΝZۦ8y:k]:B P Lņ}-"y=xXD0N' LΘ Mh}|2)P|BwWm- )ݝṞhF.u9}wILwY28E՞ӡm!XFnd7ϴ$X9g)1H 9unu6zŖ}N;û}.?dR#@Mp?[GՅԙ*|v"sdMF4:?]`+F-8tS1/LB@zF? 4OTNK5CO6V%RP氂S$ƞi/碅aݪΆiG h,FV@ &Љ7ONpҼZ]GRjafW3в 8E  {PnoF$CʰmHkq <&T5Xˤ~v&o!<K4Q*swtgl)hQg?#t[Û3"04.^~l)+laOW)qHrZKIq Ujq-QF$Wi `_h"Kǽ>+]ٙN`'CL Th )W/@Sm:, jw٭R0мo:с?T/PBltlK'I)~';ѺJĐĀ tq0O]#[:ב/2DԘ*"|_N'9ʇr+Z܉U Ͷ YZ