container-selinux-2:2.218.0-1.module_el8+454+d7ef4b8d `>P  H;Ldy U][ fGdK 1r x\N##u* J эoE;QjCx],m`B4֭ {H?W98om)JMg¬7>ҐEˊsFSoo^? {Ib~I!XbFtvYs^ 5{᨟Z9J|JݯH)$R#0NeY#A  J,*{dz`Eby NAL1;OT Y[Lxez7DX\ΏAP{&}G#؃˅|Ʈ/@X#EMb\ԷJA5ϥe;Dʡwf(Xҕ'`2W1 ࿎IG)uIVMҴmҪh~%+0r+>Yј*,nv@087mH !ػܗ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 U]@,^u6oVzX<|34Bya>c UsQ̰400ZMXFy9 `Ag;@14!Ҏ9$~W1\Nʔu~Yٮ|\@J@S#eɢ@޻GK (מ^kR t8eqV=>`Ii7?i'd8 < d '-4m0 X    $  8   P  PP(89:,=`W>`_@`gB`oG`H`Ia0XaDYaPZa[a\a]b,^cG bdudeeefeletfufdvffhhhhhhCcontainer-selinux2.218.01.module_el8+454+d7ef4b8dSELinux policies for container runtimesSELinux policy modules for use with container runtimes.du}x86-02.stream.rdu2.redhat.com CentOSCentOSGPLv2builder@centos.orgUnspecifiedhttps://github.com/containers/container-selinuxlinuxnoarch . /etc/selinux/config _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if /usr/sbin/selinuxenabled && [ "${SELINUXTYPE}" = "${_policytype}" ]; then [ -f /var/lib/rpm-state/file_contexts.pre ] || cp -f /etc/selinux/${SELINUXTYPE}/contexts/files/file_contexts /var/lib/rpm-state/file_contexts.pre fi# Install all modules in a single transaction if [ $1 -eq 1 ]; then /usr/sbin/setsebool -P -N virt_use_nfs=1 virt_sandbox_use_all_caps=1 fi export MODULES=""; for x in container; do MODULES+=/usr/share/selinux/packages/$x.pp.bz2; MODULES+=" "; done; /usr/sbin/semodule -n -s targeted -r container 2> /dev/null /usr/sbin/semodule -n -s targeted -d docker 2> /dev/null /usr/sbin/semodule -n -s targeted -d gear 2> /dev/null . /etc/selinux/config _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if [ "${SELINUXTYPE}" = "${_policytype}" ]; then /usr/sbin/semodule -n -s ${_policytype} -X 200 -i $MODULES /usr/sbin/selinuxenabled && /usr/sbin/load_policy || : fi . /etc/selinux/config sed -e "\|container_file_t|h; \${x;s|container_file_t||;{g;t};a\\" -e "container_file_t" -e "}" -i /etc/selinux/${SELINUXTYPE}/contexts/customizable_types > /dev/null 2>&1 matchpathcon -qV /var/lib/containers || restorecon -R /var/lib/containers &> /dev/null || :if [ $1 -eq 0 ]; then . /etc/selinux/config _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if [ $1 -eq 0 ]; then if [ "${SELINUXTYPE}" = "${_policytype}" ]; then /usr/sbin/semodule -n -X 200 -s ${_policytype} -r container docker &> /dev/null || : /usr/sbin/selinuxenabled && /usr/sbin/load_policy || : fi fi fi6fwb0(: BA큤A큤AAA큤A큤A큤du}du}du}dOtdu}du}du}du|du}du}du}du}du}du}du}du}du}du}du}du}8c04ac861d425e9947eb5bc06c3125d682dc981f6327e789ebe1c4eba0d856fcb9a1b93e1a14f1d91ec6a108bf3cf9764d0fb80c329caa5bef1f4cfd37561d61cacfaa469a4420b71230b5f5a08399b921d1aa3ce43fd1b5c64be1bf5b3fc19b6b705e585c4adeff979b651674d9eb8a3ee498336d7398f9faf2077f2661983ec95d8badacc674ace0d2fed4fbee4d28d2a92799b23fd5cc30cfb444ee8896b71724330eae556d61248fca0b0920b1de3697d8cd42bf56da8d062a4265ed1b9f2aaad24c9578fa9575445ab4c5208b80b1226e49174e20bb2609de935466b9ba9eb7fd75efad4068dc1e00d43c6176477d13f5c759c1986174a340cb07b822119af286e5e19e15cffaaf7b29c745c800ef94c03d90ee90e0e8e18edc2ebf8f01280274d7f1512ce4677f123f310d300672d6872c3e1f3f13144cd5a03e85ba4b0a6fa6a05496c83b67185cb54805263c502181507d1ae899909090caf986d623dd478baf01b7ef0daf441b7cd616c79ea77eb8e9d2725976b9edeec3991e3d5f67de3bb8fb85b4531702c64fa11b1fbf1746cbd844560f2f680b862915f25d69rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootcontainer-selinux-2.218.0-1.module_el8+454+d7ef4b8d.src.rpmcontainer-selinuxdocker-engine-selinuxdocker-selinux         /bin/sh/bin/sh/bin/sh/bin/shlibselinux-utilspolicycoreutilspolicycoreutils-python-utilsrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)sedselinux-policyselinux-policy-baseselinux-policy-targeted2.5-113.0.4-14.6.0-14.0-15.2-13.14.3-80.el83.14.3-80.el83.14.3-80.el8udica0.2.6-14.14.3ddm@dcp@dbdRLdd@d @c @cc_c!@bVbbkb_b<]@b%b@bOb@aar@a@a@a@aaa+@aaa]aQ@aI@aA@a'@a&0a /` @`9@`Ȗ@```q`@`@`N@`@`dd@`Y@`&m`_T_`@_%_%_F@__"_5+@_16_p@_5_X@^n@^Ӝ@^@^^k@]@]B]]@]|@]@]X]W]R@]@\M[[ͻ[[@[[Xf@[L[K7@["X[@[@[[[Z@Z?ZZZ%Z%Z@Z - 2:2.218.0-1Jindrich Novy - 2:2.215.0-1Jindrich Novy - 2:2.213.0-2Jindrich Novy - 2:2.213.0-1Jindrich Novy - 2:2.211.1-1Jindrich Novy - 2:2.205.0-2Jindrich Novy - 2:2.205.0-1Jindrich Novy - 2:2.199.0-1Jindrich Novy - 2:2.195.1-1Jindrich Novy - 2:2.193.0-1Jindrich Novy - 2:2.191.0-1Jindrich Novy - 2:2.190.0-1Jindrich Novy - 2:2.189.0-1Jindrich Novy - 2:2.188.0-1Jindrich Novy - 2:2.187.0-1Jindrich Novy - 2:2.183.0-1Jindrich Novy - 2:2.181.0-1Jindrich Novy - 2:2.180.0-1Jindrich Novy - 2:2.179.1-1Jindrich Novy - 2:2.178.0-1Jindrich Novy - 2:2.177.0-1Jindrich Novy - 2:2.176.0-1Jindrich Novy - 2:2.174.0-1Jindrich Novy - 2:2.173.2-1Jindrich Novy - 2:2.173.1-2Jindrich Novy - 2:2.173.1-1Jindrich Novy - 2:2.173.0-2Jindrich Novy - 2:2.173.0-1Jindrich Novy - 2:2.172.1-1Jindrich Novy - 2:2.172.0-1Jindrich Novy - 2:2.171.0-1Jindrich Novy - 2:2.170.0-1Jindrich Novy - 2:2.169.0-1Vit Mojzis - 2:2.168.0-2Jindrich Novy - 2:2.168.0-1Jindrich Novy - 2:2.167.0-1Jindrich Novy - 2:2.165.1-2Jindrich Novy - 2:2.164.2-1Jindrich Novy - 2:2.164.1-1Jindrich Novy - 2:2.163.0-2Jindrich Novy - 2:2.163.0-1Jindrich Novy - 2:2.162.2-1Jindrich Novy - 2:2.162.1-1Jindrich Novy - 2:2.162.0-1Jindrich Novy - 2:2.161.1-2Jindrich Novy - 2:2.161.1-1Jindrich Novy - 2:2.160.2-1Jindrich Novy - 2:2.160.1-1Jindrich Novy - 2:2.160.0-1Jindrich Novy - 2:2.159.0-1Jindrich Novy - 2:2.158.0-1Jindrich Novy - 2:2.156.0-1Jindrich Novy - 2:2.155.0-1Jindrich Novy - 2:2.154.0-1Jindrich Novy - 2:2.153.0-1Jindrich Novy - 2:2.152.0-1Jindrich Novy - 2:2.151.0-1Jindrich Novy - 2:2.150.0-1Jindrich Novy - 2:2.145.0-1Jindrich Novy - 2:2.144.0-1Jindrich Novy - 2:2.143.0-1Jindrich Novy - 2:2.142.0-1Jindrich Novy - 2:2.139.0-1Jindrich Novy - 2:2.138.0-1Jindrich Novy - 2:2.137.0-1Jindrich Novy - 2:2.135.0-1Jindrich Novy - 2:2.134.0-1Jindrich Novy - 2:2.132.0-1Jindrich Novy - 2:2.130.0-1Jindrich Novy - 2:2.124.0-1Jindrich Novy - 2:2.123.0-2Jindrich Novy - 2:2.123.0-1Jindrich Novy - 2:2.122.0-1Jindrich Novy - 2:2.119.0-3.gita233788Jindrich Novy - 2:2.119.0-2Jindrich Novy - 2:2.119.0-1Jindrich Novy - 2:2.116-1Jindrich Novy - 2:2.107-2Lokesh Mandvekar - 2:2.107-1Lokesh Mandvekar - 2:2.89-1.git2521d0dLokesh Mandvekar - 2:2.75-1.git99e2cfdLokesh Mandvekar - 2:2.74-1Frantisek Kluknavsky - 2:2.73-3Frantisek Kluknavsky - 2:2.73-2Dan Walsh - 2.69-3Dan Walsh - 2.69-2Dan Walsh - 2.68-1Dan Walsh - 2.67-1Dan Walsh - 2.66-1Dan Walsh - 2.64-1Dan Walsh - 2.62-1Dan Walsh - 2.61-1Dan Walsh - 2.60-1Dan Walsh - 2.58-2Dan Walsh - 2.58-1Dan Walsh - 2.57-1Dan Walsh - 2.56-1Dan Walsh - 2.55-1Dan Walsh - 2.52-1Dan Walsh - 2.51-1Dan Walsh - 2.50-1Dan Walsh - 2.49-1Dan Walsh - 2.48-1Dan Walsh - 2.41-1Dan Walsh - 2.40-1Dan Walsh - 2.39-1Dan Walsh - 2.38-1Dan Walsh - 2.37-1Dan Walsh - 2.36-1Dan Walsh - 2.35-1Dan Walsh - 2.34-1Dan Walsh - 2.33-1Dan Walsh - 2.32-1Dan Walsh - 2.31-1Dan Walsh - 2.29-1Dan Walsh - 2.28-1Dan Walsh - 2.27-1Dan Walsh - 2.24-1Dan Walsh - 2.23-1Dan Walsh - 2.22-1Troy Dawson - 2.21-3Fedora Release Engineering - 2:2.21-2Dan Walsh - 2.21-1Dan Walsh - 2.20-2Dan Walsh - 2.20-1Lokesh Mandvekar - 2:2.19-2.1Dan Walsh - 2:2.19-1Lokesh Mandvekar - 2:2.15-1.1Dan Walsh - 2:2.10-2.1Dan Walsh - 2:2.10-1Lokesh Mandvekar - 2:2.9-4Lokesh Mandvekar - 2:2.9-3Lokesh Mandvekar - 2:2.9-2Lokesh Mandvekar - 2:2.8-2Lokesh Mandvekar - 2:2.7-1Lokesh Mandvekar - 2:2.4-2Dan Walsh - 2:2.4-1Dan Walsh - 2:2.3-1Lokesh Mandvekar - 2:2.2-4Jonathan Lebon - 2:2.2-3Lokesh Mandvekar - 2:2.2-2Lokesh Mandvekar - 2:2.2-1Lokesh Mandvekar - 2:2.0-2Lokesh Mandvekar - 2:2.0-1Lokesh Mandvekar - 2:1.12.4-29- update to https://github.com/containers/container-selinux/releases/tag/v2.218.0 - Related: #2176055- update to https://github.com/containers/container-selinux/releases/tag/v2.215.0 - Related: #2176055- add watch statement removal from container.te - Related: #2176055- update to https://github.com/containers/container-selinux/releases/tag/v2.213.0 - Related: #2176055- update to https://github.com/containers/container-selinux/releases/tag/v2.211.1 - Related: #2176055- use conditionals from https://github.com/containers/container-selinux/blob/main/container-selinux.spec.rpkg - Related: #2176055- update to https://github.com/containers/container-selinux/releases/tag/v2.205.0 - remove user_namespace class, thanks to Lokesh Mandvekar - Related: #2176055- revert back to https://github.com/containers/container-selinux/releases/tag/v2.199.0 (2.200.0 fails to build as it relies on the new selinux-policy which is not there yet) - Related: #2176055- update to https://github.com/containers/container-selinux/releases/tag/v2.195.1 - Related: #2123641- update to https://github.com/containers/container-selinux/releases/tag/v2.193.0 - Related: #2123641- update to https://github.com/containers/container-selinux/releases/tag/v2.191.0 - Related: #2123641- update to https://github.com/containers/container-selinux/releases/tag/v2.190.0 - Related: #2123641- update to https://github.com/containers/container-selinux/releases/tag/v2.189.0 - Related: #2061390- update to https://github.com/containers/container-selinux/releases/tag/v2.188.0 - Related: #2061390- update to https://github.com/containers/container-selinux/releases/tag/v2.187.0 - Related: #2061390- update to https://github.com/containers/container-selinux/releases/tag/v2.183.0 - Related: #2061390- update to https://github.com/containers/container-selinux/releases/tag/v2.181.0 - Related: #2061390- update to https://github.com/containers/container-selinux/releases/tag/v2.180.0 - Related: #2061390- update to https://github.com/containers/container-selinux/releases/tag/v2.179.1 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.178.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.177.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.176.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.174.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.173.2 - Related: #2001445- update minimal selinux_policy dependency - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.173.1 - Related: #2001445- lockdown allow rule was removed - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.173.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.172.1 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.172.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.171.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.170.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.169.0 - Related: #2001445- Start shipping udica templates - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.168.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.167.0 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.165.1 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.164.2 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.164.1 - Related: #1934415- fix the build of 2.163.0 - Resolves: #1957904- update to https://github.com/containers/container-selinux/releases/tag/v2.163.0 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.162.2 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.162.1 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.162.0 - Related: #1934415- do not use lockdown class yet - it is not available in RHEL - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.161.1 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.160.2 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.160.1 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.160.0 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.159.0 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.158.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.156.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.155.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.154.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.153.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.152.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.151.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.150.0 - Related: #1883490- synchronize with stream-container-tools-rhel8 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.144.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.143.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.142.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.139.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.138.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.137.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.135.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.134.0 - Related: #1821193- synchronize containter-tools 8.3.0 with 8.2.1 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.130.0 - don't use macros in changelog - Related: #1821193- update to 2.124.0 - Related: RHELPLAN-25139- implement spec file refactoring by Zdenek Pytela, namely: Change the uninstall command in the %postun section of the specfile to use the %selinux_modules_uninstall macro which uses priority 200. Change the install command in the %post section if the specfile to use the %selinux_modules_install macro. Replace relabel commands with using the %selinux_relabel_pre and %selinux_relabel_post macros. Change formatting so that the lines are vertically aligned in the %postun section. (https://github.com/containers/container-selinux/pull/85) - Related: RHELPLAN-25139- update to 2.123.0 - Related: RHELPLAN-25139- update to 2.122.0 - Related: RHELPLAN-25139- update to master container-selinux - bug 1769469 - Related: RHELPLAN-25139- fix post scriptlet - fail if semodule fails - bug 1729272 - Related: RHELPLAN-25139- update to 2.119.0 - Related: RHELPLAN-25139- update to 2.116 Resolves: #1748519- Use at least selinux policy 3.14.3-9.el8, Resolves: #1728700- Resolves: #1720654 - rebase to v2.107- bump to v2.89- bump to v2.75 - built commit 99e2cfd- Resolves: #1641655 - bump to v2.74 - built commit a62c2db- tweak macro for fedora - applies to rhel8 as well- moved changelog entries: - Define spc_t as a container_domain, so that container_runtime will transition to spc_t even when setup with nosuid. - Allow container_runtimes to setattr on callers fifo_files - Fix restorecon to not error on missing directory- Make sure we pull in the latest selinux-policy- Add map support to container-selinux for RHEL 7.5 - Dontudit attempts to write to kernel_sysctl_t- Add label for /var/lib/origin - Add customizable_file_t to customizable_types- Add policy for container_logreader_t- Allow dnsmasq to dbus chat with spc_t- Allow containers to create all socket classes- Label overlay directories under /var/lib/containers/ correctly- Allow spc_t to load kernel modules from inside of container- Allow containers to list cgroup directories - Transition for unconfined_service_t to container_runtime_t when executing container_runtime_exec_t.- Run restorecon /usr/bin/podman in postinstall- Add labels to allow podman to be run from a systemd unit file- Set the version of SELinux policy required to the latest to fix build issues.- Allow container_runtime_t to transition to spc_t over unlabeled filesAllow iptables to read container state Dontaudit attempts from containers to write to /proc/self Allow spc_t to change attributes on container_runtime_t fifo files- Add better support for writing custom selinux policy for customer container domains.- Allow shell_exec_t as a container_runtime_t entrypoint- Allow bin_t as a container_runtime_t entrypoint- Add support for MLS running container runtimes - Add missing allow rules for running systemd in a container- Update policy to match master branch - Remove typebounds and replace with nnp_transition and nosuid_transition calls- Add support to nnp_transition for container domains - Eliminates need for typebounds.- Allow container_runtime_t to use user ttys - Fixes bounds check for container_t- Allow container runtimes to use interited terminals. This helps satisfy the bounds check of container_t versus container_runtime_t.- Allow container runtimes to mmap container_file_t devices - Add labeling for rhel push plugin- Allow containers to use inherited ttys - Allow ostree to handle labels under /var/lib/containers/ostree- Allow containers to relabelto/from all file types to container_file_t- Allow container to map chr_files labeled container_file_t- Dontaudit container processes getattr on kernel file systems- Allow containers to read /etc/resolv.conf and /etc/hosts if volume - mounted into container.- Make sure users creating content in /var/lib with right labels- Allow the container runtime to dbus chat with dnsmasq - add dontaudit rules for container trying to write to /proc- Add support for lxcd - Add support for labeling of tmpfs storage created within a container.- Allow a container to umount a container_file_t filesystem- Allow container runtimes to work with the netfilter sockets - Allow container_file_t to be an entrypoint for VM's - Allow spc_t domains to transition to svirt_t- Make sure container_runtime_t has all access of container_t- Allow container runtimes to create sockets in tmp dirs- Add additonal support for crio labeling.- Fixup spec file conditionals- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- Allow containers to execmod on container_share_t files.- Relabel runc and crio executables- Allow container processes to getsession- update release tag to isolate from 7.3- Fix mcs transition problem on stdin/stdout/stderr - Add labels for CRI-O - Allow containers to use tunnel sockets- Resolves: #1451289 - rebase to v2.15 - built @origin/RHEL-1.12 commit 583ca40- Make sure we have a late enough version of policycoreutils- Update to the latest container-selinux patch from upstream - Label files under /usr/libexec/lxc as container_runtime_exec_t - Give container_t access to XFRM sockets - Allow spc_t to dbus chat with init system - Allow containers to read cgroup configuration mounted into a container- Resolves: #1425574 - built commit 79a6d70- Resolves: #1420591 - built @origin/RHEL-1.12 commit 8f876c4- built @origin/RHEL-1.12 commit 33cb78b-- built origin/RHEL-1.12 commit 21dd37b- correct version-release in changelog entries- Add typebounds statement for container_t from container_runtime_t - We should only label runc not runc*- Fix labeling on /usr/bin/runc.* - Add sandbox_net_domain access to container.te - Remove containers ability to look at /etc content- use upstream's RHEL-1.12 branch, commit 56c32da for CentOS 7- properly disable docker module in %post- depend on selinux-policy-targeted - relabel docker-latest* files as well- bump to v2.2 - additional labeling for ocid- install policy at level 200 - From: Dan Walsh - Resolves: #1406517 - bump to v2.0 (first upload to Fedora as a standalone package) - include projectatomic/RHEL-1.12 branch commit for building on centos/rhel- new package (separated from docker)/bin/sh/bin/sh/bin/shcontainer-selinuxdocker-selinux 2:2.218.0-1.module_el8+454+d7ef4b8d2:2.218.0-1.module_el8+454+d7ef4b8d2:2.218.0-1.module_el8+454+d7ef4b8d 2:1.12.5-142:1.12.4-28 selinuxcontextscontainer-selinuxREADME.mddevelincludeservicescontainer.ifpackagescontainer.pp.bz2templatesbase_container.cilconfig_container.cilhome_container.cillog_container.cilnet_container.ciltmp_container.ciltty_container.cilvirt_container.cilx_container.cil/usr/share/containers//usr/share/containers/selinux//usr/share/doc//usr/share/doc/container-selinux//usr/share/selinux//usr/share/selinux/devel//usr/share/selinux/devel/include//usr/share/selinux/devel/include/services//usr/share/selinux/packages//usr/share/udica//usr/share/udica/templates/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m32 -march=x86-64 -mtune=generic -mfpmath=sse -mstackrealign -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protectioncpioxz2noarch-redhat-linux-gnudirectoryASCII textSE Linux policy interface source . /etc/selinux/config _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if /usr/sbin/selinuxenabled && [ "${SELINUXTYPE}" = "${_policytype}" ]; then if [ -f /var/lib/rpm-state/file_contexts.pre ]; then /usr/sbin/fixfiles -C /var/lib/rpm-state/file_contexts.pre restore &> /dev/null rm -f /var/lib/rpm-state/file_contexts.pre fi fi #define license tag if not already defined/bin/shutf-899df60a92c011e12cd1ae918523db2d5a870a8190b8d0d5ea0e326718ce0ee65container-tools:rhel8:820230614072949:20125149?p7zXZ !#,] b2u jӫ`(y/,s rn5UnEI3zPM5>we=1d^UEM+=j)H|sl\bC15Qlv41⑝os ;El%-trP H0w )|^]D.N۩5mH-TTnd6FDn6;WG2Od䃡[q맆!{ۆ(|8 qV8}}F zNg2XyF5LZ LOӷ1ЊBJM$^8ʹ$ B% 8vM'!ihُ8σ3BY!L|Y٣Б%@u)ؽjM_ МF-\augRBzmӐAm, YA]1rpwkGѠQl&8 T!77 =+ vLïYhe ap*8"*: ev k]s$šyUg5'e9iǜٳެY#E&x#(ݾF֯$a0N>"*&`x#;A3TF! H $||!ق14ѺrO_ `21QpE=]NABB +{WH$]zzٜ+1Z2É+e': 0˘nD#>ɸ~ ߂ͮ z]vy HOءy3}Ej.,&fy:\mFqߝK鷻.DuwZ2cH)D8Z[gta볠y./3ñKjj*Z[m5yR+-A-c-VI5,'ghM1pxcs`uiÔ,Sdm~blb@BFZ@OpVAniJtGAY `/e sz X%A)n\ˇtŦH?.pBS^-aI?"P|@*:qN,f>Yd_Y@mfY 8Ɂ]%C,\R9\'Dp1pL8 'ݺfɻni9G}PIiEg:SyuY%, r cb]B;Q?E 2- W4 BMVxIT6nA"@Ga٭s #~#ϨFTZ 1aR*&\~lX8&;9!/9K3i2K)oWT>gi-A1YzӬAn)J5ea3aމ#|2gLg~Y'%$ lvY[״r L"d {脼CWϰhh Zy>xfS^4)Eo몭LqKH?{ ZīT<&.<ɚ&cCK O+J(4B`D<Ԫ eXIY;@+nxHpE02&Lzܐ BQ=O$jb_k7U:%"&nM-Ƅ>g۵lUXД8F.]ʣZ_U^$9Ć*.mmޣ֭b3={YFEPIKr(`ClmAٍd9[ teO)4rp9#ltGH[lo¾ZʛP]p~"MlΛaNjgWkfDH;duT` n@`W,*&Q6 <}4v&Ff&J#*A\MXSuN:`FoVBx!b@^^ovVpjP 633hĘSѾw[ ӕTB mnϰuxv{SW(wWsUqNຯ&ؑX`w :q[''\6TtHw,v+"{]oRћlھ'<3vÅJܓok/WMӓОP =V0j2iqfU\JZ "$o7GEcS2"(nxjxQ$ z4ц\KWRNӵL Q \xYHj.9/'@YBtZGd,Ή%2/}j},G/hW T/j<A 5qw[sQFtیzYD3TƬ8wu-]QEl}kro*V3kGy` gsox_xE NsPFfxuYQBtC@4,#K S|."*mOq[ Fe5j߼{*_HTJrMUKG;_`r jFw 7e2;ِoKxc@I [ __̣ +a܆"e* ͤnS447ąÛnZ$lo+.`7vk $&+-x=D c:%!V=qѓ0ޭAezX%?np۲p\{2Q`4P \vJ?uw?` TGI'sQY7B-pdg-)'RϠ g8|Z-M'轕(xbvpSFpX濦;5ld[|W-xuw8UIo9Ƈ/nu-^՞DKjʅgSPk{,A褝Y$ U"3Іcی5E"K)i2zS' K 44**v`N !4\X0M2qyWTm,폔1ܒF8ݎ Pz:dQY Df4A 2KWSăZ:x"G (#JgHy;ťh2iTuBheBdž%ކnjGߖń_bEAn)=O"LԕFf ̂BER)EHBcؖ 5UpXͫ yɥ?~4 Rg'+ZTet0 E2S >0)]W98S٘`YE%$le]nEc`h"W芨jJ\Dnw7)^-5]uUp 2~3u0pLUmnLy |mbt? K(0(ģ_*.Cefbpbɔ̝ТJ\W p"9C}Υo6_)LnP'3Ec2_*s 0lз^%\ ΋t*j2LTh*xJņMi)%qpH8\P[K7g UǵvXJmQpGBF^SzwodReynlzQ u\88DWTfxx7㇯wq) lAo\?g8ZNQ,!W$[^`T/Jk*zxwﮔ-VT@QMv~sO]e`S,P7J>kΙED$dLh*_茾Lul>yt|Sϸ<;4)d.@N@{4)i@]s}L[rJ?n,E{,B6T@5(*Vdm(趌Ҏ 9(7yn\RŹ"qRg"AW. .?T( M"&~*Lۦ_׈9K^%Ө>K'='IZc]9#oȜ)yt9 4QbB=Wā@ʞzМb!Ee}`G ?x릖~pdczgV4!'X*M^)qlj13RA5i?<2m(g!fԊ *wl~v ,TVpӦzk! ciaS||ώ@7޼JNS,5b" : rG XI4.}t߿6̟/ʴEP:12=xu0g~r%v>H3s8K ,++ZfKM{zJݝtS%s MZi` fcϚ? } ΐi  f%Y\Ĝ.bC7#mVOs[yY[/ N .Ga32[QDŪ[*N>&tөpF;QZf%q:͉™%.Y+wYk>x܊`ZM̖ p] ɳeb "}ew嶲.ڕ,cBJY*!Qm]qpϭ}Zd]tx V&ϦB3=[~Sl/  i</BC\iXs+lG3 ɵ"޺oUNHuS(p ðMеB!1\7<à0vvn.7`#1T`Y%ƒlYXWuPΒSG9-5{تԗL {Pdq\x0?rhT0~d"`4gSZ:5ٿ#m Y7nDpe\Ѯpy!* #ʠ;|{+Lȿ:Ups1eϭh)=+e݉@L?!3}y|J*@^SzZA͘80D^fgzg(25`l~r ($EvY(YMROYFIP*I3pbZ!#^N  K[Z㝣 ?p6ZJH}@K+. l$OȌT.<6D*=( PaR^jӢqɝ=k7f9G#Q/H0Oj7,\TN.u\ KYaHĀf@c#T:<쇢͘jNr_3UcVAEy ,] ]MF֘5#bQ!ñ$0q?ӨR6 ?ȁP"VdTq:-'=9>tSr*]Z/X;kmXevp'h!f/KHx2u}>v*n(EǥžLɬYOr {3rJ. Z4m+\t$‰,W| 貋/rϾD+4kؠetB5jYٱ`][K7֘voĜlj3r${kB%TˍN 2A`Vрu0x"W#?1FƿThO a#^;-oiU/Sc)5Sr}ypISw,;lqw@w'ײT=~=U|ܒ ֶk"Fʆ12i>Qnߥ[QBL4BO5fnD89Yv4, ]z[; LÅYd6M\1Go9j!A9@eCa\uSF鰿9W0ָۍ8~55/YƬ( 1y}OdC+/ogQ?y,![^]8V6&Rt?: ɶ{/jZn_5|Si3&E0b' nl[O]ȸU' $J.)*v];,ϡ0;ߔ*zwXqcs:'w//z#u@d{RCrtHOv &׫=|r+-sT4{kWS?xف4~OfI\&;+ Î^N o*{U8 $V^Ṵ,NE@lUJ);t_6qvf/Ŝ7 Ěh FP_-ONK5U . *ٝER(h'8wb"Jy:ξ'sy)JiZh-\*¸S;9ќ11HZ%Usҗ73/|CFo<n4zTt3ao"'pRo"R9o"b9铚}'2v޺PS6&^ΤL SeK p`*qz˸yWRkt: Sh&T&H6SG)$-j90[MaBJ@p)5ڶjB'Y~h.uzn@/PI*£tHAzBWk0][U\ Nach'BJ(ذ>lA B}>>y(>0yH5fī֑3R ƒ({C;MCiZEr._*Fxm$wˋ~8R+03X}gdL8D$ ցiy|dz .!OG࿐Mz0M+vxNd$v 6rs' X]KSs nD}"v]jP\@V1H"q ˗.M$ 4#7 r9lHf}dSDh%q$9F5͗#`m2diθ0b =%(NVxVNT&ӭXČۑmEDZv-Q7tU1%=X75jj(Z6pY%RߩL^v)^N_:ε %b)WQC#J<@B@@$L?%!W6 ^wc<_R&; ^b@g6CM)._#_H@ܢ9"/۟ Ktndlxl8.ZH=c֍"wOLplY7Rufk!f0scE酱36u/imƗ-\TbO;L'?p9t=:joCYmW;, |˝фʹJuNNG8mߞ$WYRf)T;ṯ~72*ݢRΐD-ۮZ] ~NU4Vx=LymVjFORRu\8*>J|u[:3Q`ʐ2ʞ|4H$ Y/ Ha#6Nl_iVΉ}e޾92͙Q$'nЁ.f8m/b6*Բ$uIvk8 sn݊=g'@6DSt~YHJth^oϺ7Tq+0\p7Ij̥8ʵ,ggB(X_%`L\4:,ڪ/iX}4Ix%q{fZi3S`dbrBj[kke%J/qthmW ^.pC@߹<$> vz*噸c h,AbS d*Z`.Exkզ+͒Үfgj/q{N0^s_FC!ƩqG7R#tO_:vZ(Imd+#T Vv8Ql's{lySn qV̘ꧺC>&);}q3ߏ[2˸ #>y:&!&`*%I T,x[KJnA"]HX?mV4MCx]%Ϸ1,Fq.:QmK_*}DYCqC^DjPy3<`&!:aĺ C=0U2\:*tWAɨR7mMdE$n<"n)%Jndҙ 8.fdF-"v *NsLd)|GIEk=2$QԴȱG "lyE=%3*f8GpZ;)ҎC4d>kVv'>,N]MjW- ~`}*݄5&*p5ףDuhY8?٘<#C uO9" ?HD{SJTС&0VeEflbU>=}0|DxztCM-GiufW@o. %-gC=k П۷b6]%H}.RF9>ݦV G:uyĐ snzRReGC\Z+I*l:lIj cB{4V4KcBK[CZ[; XU,:s3045ʊm|ņSQy!!F|o̶ Ea ˫zhJPX?" K{´CT '@~4MUM.Z |(& 2Mg27j(W's8{'u)U0d:/\2ptE Ll5*8,~ F'5أ5ށq,{Lqg.D-UB:CO5wg"'FVlr:+zu<ۈΡTWOȨ MK6@I`x?>BG.=#?Cv s53D5|VMĬq:YQ=vM +[V̊.2,k@ou^?GSmڙ'IrܕL9D/۪圵IO d` 2z]܈ 񐗁-? _#~K4"M}_+z= Efn3ǤeqKg ,-cevQS [yQlI0xUxul r4~>7bH*AM@&@ԃZV9p5!M;zb۪4 `Q&K͒σ֕m\q9|k7aҞ6 v/[.] }XX LԄT0;sܑN;|"$.3u|,mvXonc$u1ϱKsYV4/;͢}\r-;,Z}bZ+]N|JgH#_}hTrGJ^VW!GK`˰oGCq;rdv35YN$WNb=OT`PY^șr KSt  dV&\+lAqT0>AcQ*[k|:9rsixׂVWI=LQߥ,vȺ=> (]=UΊڌl֭ Ϫ?Ǜ}eNhֆ$Ƞ|I7*+‡b /ߪSH!`w՛C @w)i>OZpz${r滢RI$}pc( (@W86VD͎i^u sM5:UuA҈ <ݷZpy$#U*>}DJ"yT᳃`Y؏loȦR>R);,7_zL$8&WB? {fS?^]9x{Kp<㡥y=)#ݢHCGgד1~V̆ZߟY>OMsbky_2=ka7`p/CP]9vq{dcٿ ^? cЦ.D7}-Knr_B )@Ⱥy]R.Z{Wï ̬6$!pij&6*)f]>حPnl{zF![ј%Col&k>x# AKA{e>n5Gq4yYډtWvw-=m ȹBx62!6.5`"pLK#@сpOBѪ HKQa+2>}Z y!eT傓90ԹcneYeע=pC1hrֽl6/p @=>GD^}6_g+w'MZ>QY5Uc8ŏ'iƂ^ p9Q 7[Y}ED&ϰCe6(nō9 H6%2?YZ/;[Hx|r?W4etCRV,KiO|?h0Gw"=eubaTLٳFnZRhJaLSł .VF>ڌ5'kuQ8pat} whF=LMmԅv@{b65V l%?_UE*=v5ĢתuvMHp۲=bO M#+48?po F84htw䔧gMH tcWPsAU$z}oiGK^p7ꅵ-ő-R_%Cq+Gr?z|t/Sky moUoUEA2=H`n&E=&xO[4mnQ?C1yz {CјJkCŭH+ZϞĪ|RdAq`%!;^e#}W-%r!@>,=Lцшe%Z1 ,aLm"#6ԥ[=(%5v'_ĽT6w8bN/N˜T}t]wa8D$`5niL#-ī|}A 6#x)2#|d@mfv/U -2lٜأl`9L q6et fOA ޥycS+ e100:Eaf*.AR.նZ s+H} ďln<+'bܲ]"Ȱ%S@fqNʚwۢ=hfpFMXnHJea'N3&v!*u{naUǪ^MsC!s)BH^3E2=$*k9(Ҍ#$/F)4C|d&,"MU s b,1g0XQh`nDG8^yՉLJe4i;huMTҼ{wJJ>y,R#8z]t&_Qf&;bGAeV$mjl|73E#5*-ٺ&7,󣻥u@1X!^J$At΅wԥ|AQC i!B=RH⸑K}ňԊ{Ɛs ⻙QVmY3C=kw@aG- $ E U%6^^ FML+qyS[}i3YcFe y`vx0XN|/ MP"+QBK ;<_o<ꔷͤ * g6 ~ZȲ,y(ej2ee@>Dž'ItǥM& P*EI9L[B|&Ae$wS]/Ӎb%1cr=eX`7.O*x\4ATmI.:m'sψ=2aXU\~4pT=_,CC`C6-nڧ-UC{Xe#k4D$-C'ܙW )FqzΪh3;e)y O管X"̂.nws&T"EFҨ%k-ZAU,FFK Q~Zu,)(eA7 Gԣ,\QMb_ux5>j>PĬs k.BwY{ҤHd[Z`;;0dq!q:I:@y 4uۓ+P4jW<ǿޣE0H@Q[>ɽ :}!RM#UQ`~W%r|̳ߋv]%O uPy2,KQco_]+[%ʽץ *Bi|_,߀b>sW%"V Su!TarGfe3IVA@]DX:Z% RU~EԬk:=s56b9dd/6FGhP"BQL)>oz$JbU t*?x3փs_1⺯^D NH/@nQGMg,*ݾϴv.HU}z&`$2^Yɭ*b "%i/ΣyQHwJ"76oE~{$A,T:gGA ;1F&{b!'&>l~]v4FwlynS|V}`էzI'ζ&#32{YqrNPEę'[Zfg1!5Z9aR#߬r<ǶknlcE/XcY(/с뮨79@4O)/2. fKkC{JHARyJ~SX(N4 "@ΐY1Nϟ! {YF8 -*n~TFR+ ki Vz5]*r%dGܿD怭kM4a#=hV~ok :1,{%'d*,vkYkPG\iٱaOoo r[O :+x{ⷁbiRvy'VҦ\=gDx]~-b`Д8u,FC6[$p bM4\`5 jduwvI,;PpSH<N!VqTìe3J'j|1Z+ 8?=j#=H6 X1{}grLd%{ L xC 4M9j(BoaqU.Kǵ&89 \+ D l,Aq K4-EUEa@P1olxDomqYwT"Gmp]Dz\ڒA+q'I~|(2)Ӽ33ra;":3zG{M) rƃHAHx"\.%@SAPE{ݵ!YW Xb0r6y \ $-co4w5*dmv[]_րrA"du <-bh&AkȹӅXjwD|Sq`\4ˆF/1Tlr^܃p7!y?´dlW3 NWKy9HC<*` j]Fxrc2@q+k?m\U^8jBx֫Ӎ{H((Fl6?KܰGQWkcLh(QJb 5{!ĢJw ?26箶,NTXA4Us6d!tn)g?/FԳ:̤vT X%#+| oIs/)17;Nc:7L6B(gk X?ؗ-FZİPqҊL9彟Tzgߟw!㷎.CB~;a.1>m\Pŝg)"sJ/(yڬ)c[ DgI1⚖W49Cg.q;/?VeVZd~_tEZ0Rfl ZKX>y'F9 `K/eڅv uPpXfBm cp_֣1xBK|&ۛQFbw`Wo,.BԞ{<|7x[|yEg?CfЄذNOP o {dk`ޠލƵ^8Nq0;P&r))L9k .'xJ1ZisCU1MX k=Li*&)lŨ;`W~IB8&,~LS\0CU1$B!Z5aEitfoB_]. V3TT2pc领&ra#u3l I *G>mI8[1;|%V BjmN2V'@"XTT餫#OG@Ļ [5U-Ns0M(>9Ѱ;Cvm*bYF~sH>7nCf{X(JuE CKrV0zb*r ɽ/M/h1fe * o=r{33čz2Z[Ǯ":8ljYĶA'ϿYbS2 bh=?N*W, Z2wOh56$YXZb"'ʱ7rF#p tjR*]%v[*? a>V'Щj8-nw!r184a;Prvib }Hc8J5~ !W@hD֙DHd80Xo[>"ޝwe>?%.2ES@XͤjߢZRw^+(!z򭪳+ybb $$d{[UqG?358!diGۯBx^98PMC> N|[f.皪 9`ŏogZ9 uG2=Q_ː!i$x tD} UL35/}Qk9t&ǥTj*]蒸owh-uNC@YH2leY!Z,YW%cC%S=n*_>/傇6b€TUž@vBS <%޺A9Nq +X#"P:UlD&-̞@2єO^Ck?ݮ:u$ueRI~x WÊ0{W[-̀P KQm^tˑM(Gŀ؏L+#mlՖb=(:m,nDt|@`V&\vNe{' w*PپksN*9c┌"~@۟Bm+|27E2қ(R,(h{(AdvNhbmfWUmpG+9ZBn|BGOOc["Ѿ)*2}" b:0Ԛm HA$ԫ' -1=Yfqk?ڭYt3ɰwfPj9A4{Ny "@D4cfJVF{Ԋ| XJGn_㩳:S9%nߣ1(G%n*xOO5zL8yԷ'$/6oO-_E ?/g:1j1= Z J),$w ; wD~$CoRK(.)U}b {h-`;q1vh CxfR3S\o5B"a9_kGSvm5 Rdj};';y9BkEuXTSqm|4ܶ%YkppD[yNPyYU-U'!|8V_"nH\jd^!|LQM|1G#yG5NH3ap㽯_w7Sy;]1l1\Dqqt TtU֔C>6%y !X ޠB0oWVʴWa,QD&m9/&wO;hbuKW)ϵ`9+m`^,'g  {gM[b O_&zemqFǶSJwizbYv:jhO*@ӽQh%ND6E=ѱsܿ҇XHyAl (B-l^vF,QӪ-jz\ NX۽ZzqjzN\~huicIc [+Ǩ^ZC VyCap`q`#,fڮ'GkB-E7¸tA}زY^ ܂O3x{Tut^ 6TX f01R!.4 L- ԏA+<zc &2Hu|!ͥ%օ2v0%]:Aw C\GUS+%pXo| 4:Bh<}ӽ<@fsPwXqp=.2H=qM` *ղce_D_ 0WPPkY6NM7#[fHcj\]rp9w&g]&,YfkBF) uU 69=u1̨\ *9HAcvY. "4"1 eȰ}0A=b? 5'cg3賞@7Y\{QEq!+Є%Gy+j2!^8+-݅d:]GΞUI}9ypUDy~ďgŵ]TD);sRU=i7o$-3ϭh%lx{%c=ݴfqt"7 ѯgriV;C=}*կ? Sykۃɠ}("J#:]4&ԍה*w,j%ZMIHv,MQW7 H WAiWb2:+017IDh.=]aLc總G` 14=W*ļC2P9:+Uzӆ˽R06:[s&jvd_-'J1q-yNi*'9(c/G#Y9;36)i\@x$֧"iE< "0=GFu;;b8Xh>5 \z??pTD&zr~'n〗O]Ȥ&BF EE2X=xz4jhy::9]j|wZޘ$yǯ(n̔Q%ᮊn-:uM4!7&~BBi?.yXU ? )N'YUH!҉'g4 Yѝ֤'g Nuž@tSkx|WUS=miF.y!~oY0Rd t6iF`Y%8jy[oÑӬiv6Ngqp竩_E7+0b&&R^Iٵ-nyx ud;aFD_+`Ĝp2}uڤ-L("Npslj[Nh e3tJ^ @$cl*| hIJGBpBrHVZO^/gy8w$PD6NV᭢xB$~o]\c,XR]mT q ^_Ǖ4HoZ(T^ak.#~Ha=ɋYM'^-`~$*+Gn:GxA}d J,,Xj7i 1eχI ųb(as IXzg@hfkP=pj0h 8Rܭ;c!WWavx %va:85F`ѯfUFl/Ý$i]RGNu/:K!At+\=_8qeret_'%=iq7N'P,?)5h]}w[zT|+6A:WIAH}B,m EBѺ PeIJZA*[2y?̏ߐ[r3n411A6,)`K'8a0,*]!QyjZ3R؊N՞DHuz)L;'(UygM_ :XRJlk8Tj tpDF%=fo ?V6z.[D,4+}>[y>7{{^%>T4RoC:DEA15}*\`uT&&[ށw&ɉ4-"G|F0f]ӶH*}8r/﬛j|-KߣZ28r?bV&B@r͌36WF "ٱZ*mͽO%E [/I3Mk{.>v7PY5cWJt+CQKLP1NgS^}f QJ_/nj(,)t$f H3g] L %E ԗw횬ͫTK!9 9 ~Q|]9|f*}wTB( Cj *K1=PRfEb㲮}"dCsH_\WgQ+XD뜐R?\"zL7(:ϭad;Q04I\ΖJޡ´Shf<=3{I;`ge]ai".K` o&ŹB|N߁:LWcSa*h4L}:Dt%Q>Ear]YHMF5 j3B j8%p>zM#d3H +RӅߢo'tO\hy FO'N:M/xz~C{-.<C20cܐF?zoƠg x3gzeԫK2ᡧYO-A,`ޫ<ތ(-LH{?FNO6#2# _'ńk_"tHRTeH,'%l%3TLhVbz%i~nW%:ܪ(j|ڦ&#Ləm~A )DpSem_> Es*US4Uv><ϟ!bVv<߉xCo"<&h?(˺gg(&8"Pv7>VŽc&c֭SٜVGf` |u>ئ' @\"3E'T-74wW"t ϽbPǫf\p/p3^Z66֨1kZM u*lCG*6EF_g_mR=_ :~TDԋ=o/mMnr۳y58 pۢ$|73"Wi*G~CVZ,E'fִlvxR&n_|(uNSܗCÎ#<<"&y)6 1?BFqz&99;K-͆uyćPG#B %aySI1-Nܾhusbp⭉1RkrDu}<>C܄0>`gŽ֢ұbD^ޚMΘ3C-(2xjü2g}i=D7ʜSO+ k&,H؜@ ȤV6`fX o5 =_*J,UT'uηS=Tp{#E3g[}B؃S?^}EͺWh@P3qJ܆ziHlokۡ匄 g 5u2*N}~{tEh;nyܭd[ߎnkF@̥~e"3uA~a,P1u8YGjwIoo>"1,|tiDДޮkyG1̜w%،ˑzi/Q df*OCksD<Aa.I.~%Gp9|j˅pJU&٦ 3侙^-Tۿ]܎xN qCg-NH;Hc@Jy7>.WkVp5BюR_FgPVjGHTI)-1M^>2HUpesZ;+{G%у Tq\v(w%0OM^7DQ8Ek?U8CD>ϸ\{9~KyY.`#bßCA JQ5"h7Aou_779#tM 98f FAK՘Suz¬w;Egة#-3UN}/=ڱ3 ־H^dmeR&"Z31^a`Ml K`[#%`SB DDP'H:./&qmq6x`@|2[QB^zimue} \IP^T60G]'Eod['+~o>jO+xd5KƷFJF; ȫTFFlXf-A`{OfG/Mt* 5:ys3*cM"m8`vv鶻){vpB&M.*J;$8jibag zk7sϛVb.sp=~?e!v'G%Qq#ǯ{C:MRe+>1ꞓ0ᾼW =JPxF_MKu {KN3G@* J[X+#6^@3^MZΧc6TAC&wh»}4ot/֬ebvҠ&2SB=wơ|8s#h@,P7#23J^2'dAU pݪ iɟkhNG$ZJ$%7$̗i˚wE /':(iJKuAxLeJYH3I?o]Ѱ;\׮wg{s 膄1APe=`o够Xy̛d6td|T6aְ?W=L酎@mi5Fdv KaT?ꋽbY?|tMk#Ƞ׎mw)6{+5tazݛU'n BԥZ8) }‪y)6UnDp|6qOjjb^vYWdu/NdFFlfi*-YzPqʼab&X_- rc~br/_swkJdmiZJFjpr&IQU;۶H>10#;!1ͿmUo{{DHeԄ/˖dBG! ({,<HՒ$F`\=z]__!.N.@>\%Q,цOWOȽMʡi ӫ1$s4}nh YjOkyE-Ttx28]ezwtGw8"񬀭Ƀvtmu!j-Dn38W L*_o yf\g8܁9, $˗5ye:(y 1}OCELImc.cЦ.@eG_ o|d7WymX:*y0ZRV6$r^f"S( 2BC^ Noi$NJ؛QiXsmV[-yb+PۋhT|_7yXM-VvJ8zUOM@@(Sl XH"I(]PB7\%pRqcćO.cNX0L"[ma7R$=rnX/I@PJ"-z~O0  $v9]v&5Ԧ}05եgd%j*pz6󶥺2Qq ;*{XB8zHFd_ l\s>BEg*KRg/)`,׺_wz ~B?x-@)j/ NёTW j[׾)SoB/UkQyBbi&IugRs/w%A$;~"DZ(SV96C!ё[5ߒm ([C]-@xy>ݱXJK2q5ˠѲ_yP6LXdSSg?fUʹ[t֮EFURvI.aixnAe`r-Sc#‡7!WȈ"Uzeؐws~vH5L<1Ez^IzϱCIWY*&*u QOt}!y=R+ IG/p/yf^)h, #2A}L g\PaQ2+j 8i;ܠU\DmCu#X" { 3J&\B^th9.Qti-47lwT8y%rljNvYscvł$'6\}t:2M̽hWd[Ry?woNlwQ3Y(mLMH"I_Zn5i E̿mJe]1Q8D?Sw|D0uܔB~7+aCJu:*!zh*q~]#!]p\M?mz O5j ]4e.X,F|Ps˔81h/&#|γyrQ:. [uӏ˨ӇЦTzüJ׌c|}Avvշ>b{Š >_9VgBCFN&c5հ NVLt)`Kv4gď͚_RNgr/>vFMwOf^[m5+-*o] :LzDz\: c]+ʃzC9w%a,@@7@Jmm}̄5v= aA! {t* l.XF=Dr\~pEw19' TVr -Hߔ|"lޕ <.^+QB> Dn:@9~h )XQ7uE)PJ1nِ] @3@ʁg@X=iΖ eܾ} S~OG ="XhDiC[{E2['FI^+Fо>8ϯ7eJ!TcUh_U!frr4yz %k9| \z9-LCT.8dݳhQ{xBHMWj/,"I>X "KVt*T jG=7"{S iL,*,}ƙK^*(tƙ Þ_ImWya'TadiJ+jiϿm`dRw (`2".N-4 ^^ZɖDEܫZl@x.v1/_|b~D [ tw.k^ɜYq*wH6 흧S3t͙:T{|E%%׻fşZfݒ !g<rJQCDcJyݘG۬$ŷ/,W@/GIj0(3$}HRge^ 1 oZK.xׅv*Y r_[_xv~5$M^ QRv*]UIbA0 Ϩ'e0'łuH*$[$*| ;Μ&(.:AV" UA B7_YL-1n;WW\6dbO?Ė|uŒ aLҘ( urL {ơɚ|1FRYk.CB{8EŶUIo y%mF6W[Il[83%9R\zuMO$H JP&,?)Xc`k{NH!lBNw C6|<,9sҢ̒J/ pOQAw$3J9xpݪ~T)^R|mvavJRT xq^=A N e5Q9(sced ;RYj]-YSI,mϒT +'30QΓ'^Ɇ6q:Esl~Q.TN(-ձ@>^IKVBn'_Lկ۳0 T]+KR~0s5]P z]Tu‘wf*Ս#O"rh8y~G9MT:8P, b)HҰqSME\iA R##j{[Lg He5+.6ͽj yLö%[-X[ɣ^gvCHƥ&_2v8 2h/]uQ];41+CEҾdDka19׫_*39re/L׆^a md>u!y&ӂYuA3r[8/ 2Bdsz6Jɼbާd+y٣U"j YZ