container-selinux-2:2.219.0-1.module_el8+487+8e42a277 l>\  H $(GXd4 U]c%O0WMH=bXfo|0DRfQ_H$O{uœtbzR :<|SGh)x/BC ;Ļo\UDq;,TJ!̢~8xwmRH(٬;m+jhtR/&Dg/[zZ]5;f[ۡ;;]a^<Ʀgn̫GP@Г{8J.3B8l=|zeTKSyV"Lݓ4KGY %(A$r:cm_c!g$P߮/?VzG0UԎ+RhroߝՐlpw-K.B<%AuvM8:QjBL#~Eتnj%X?m8~@wp^9H2׻ǾcwAwTe ѽAfxwN^87m@05ebbbb7761d1b37515257be532a124a291475a2ab3cd838174ed4bdc43e868ea3f3f9321e86f4759d8bae44160d0375463a640f60302047c435bb50067306502300782f73657dc2a0fe5af205678f24a7f03c0190718052f216c96d052e05dab99ce695f240d2b82a14c253dad07592b4d023100c52e89529b0268abbb27515c3196e3a442fc8fdab0e0b3998861d6cb9828dd4eaf81cb524f3b4f2879a94a67875cafb40302047c435bb500683066023100a76624b545fde310de1cf3222cc40ab2f6e55428cce33407f25e9f82624f265be5ffd13e9c8a5493e6c576003b64588d023100efe8d6f72a6d2d82b98de234fb7fc2bacd8e30e7d23486eea03b761245fd1b50fa8e2f0dbed240ba27ddcb91e390e4790302047c435bb50067306502300782f73657dc2a0fe5af205678f24a7f03c0190718052f216c96d052e05dab99ce695f240d2b82a14c253dad07592b4d023100c52e89529b0268abbb27515c3196e3a442fc8fdab0e0b3998861d6cb9828dd4eaf81cb524f3b4f2879a94a67875cafb40302047c435bb500663064023000b71ae54c5b5b72eb35e3203b50d543f7fb07068529387a3ae88fc2a8fac2c67d525b49e6fe8f32484eba009294aab70230343ece1129028b2a258020dc93d677e36c0f6951fb0a4c099f8bc2b04ab9c751e779d528374edc4035b25d908359d15c0302047c435bb50067306502300782f73657dc2a0fe5af205678f24a7f03c0190718052f216c96d052e05dab99ce695f240d2b82a14c253dad07592b4d023100c52e89529b0268abbb27515c3196e3a442fc8fdab0e0b3998861d6cb9828dd4eaf81cb524f3b4f2879a94a67875cafb40302047c435bb50067306502300782f73657dc2a0fe5af205678f24a7f03c0190718052f216c96d052e05dab99ce695f240d2b82a14c253dad07592b4d023100c52e89529b0268abbb27515c3196e3a442fc8fdab0e0b3998861d6cb9828dd4eaf81cb524f3b4f2879a94a67875cafb40302047c435bb50067306502300782f73657dc2a0fe5af205678f24a7f03c0190718052f216c96d052e05dab99ce695f240d2b82a14c253dad07592b4d023100c52e89529b0268abbb27515c3196e3a442fc8fdab0e0b3998861d6cb9828dd4eaf81cb524f3b4f2879a94a67875cafb40302047c435bb5006630640230082614358d6d1c787d533c09a4ecbed88b4600adeeeb08ee352e2518a01cf0d3fe653ff568890391cc8bac6bb7e56c72023032e7cf73e1087bffcd921dcd1aac36296cc54075d927e09e23f3477047af83408fc776c83f063c296d83e0b29b0a07d90302047c435bb50067306502300782f73657dc2a0fe5af205678f24a7f03c0190718052f216c96d052e05dab99ce695f240d2b82a14c253dad07592b4d023100c52e89529b0268abbb27515c3196e3a442fc8fdab0e0b3998861d6cb9828dd4eaf81cb524f3b4f2879a94a67875cafb40302047c435bb5006730650231009c8eee1c108afda6154d648b7d96d9d59d6e3a8d6e82d686e883824d4feb7dc762daa1cb6817a0ad4e545767f667f8ab02307c38e1de229a1b09e04770253e556fa99c72ffe242e1e75682637ee2efa754a4e3f028095ed85e5b619c9d681751411a0302047c435bb50067306502300782f73657dc2a0fe5af205678f24a7f03c0190718052f216c96d052e05dab99ce695f240d2b82a14c253dad07592b4d023100c52e89529b0268abbb27515c3196e3a442fc8fdab0e0b3998861d6cb9828dd4eaf81cb524f3b4f2879a94a67875cafb40302047c435bb5006630640230735b3c1ad46879653efdd6294549fc0635c41a92b7bd3cbcfeeba672ac1cb92104901470dfe07c367ea2b334eb19a2ff02300700e28ece5af789a31e9c14f6a85928f852a199afdf6b10b3c3515575ecac7ed44a3afa7af1c05b46ebf93f306e3e2d0302047c435bb50067306502302c0598bce4123cec75dbff7b6751c7f6be0454e4e3f66a51ad6e62c06304e325a49ce7b0f0361ce04c499eca3791fab2023100fc4637135cb491dbdb17956eb4e3a6b79300e4eee33cd75948b6d88b40cb7848332778580a36744fba1a92ce02a7928b0302047c435bb500673065023100c92787b1d7ba85d176b7246c4da96b7f193bef63482e5f354d095b6cf7740acd6f00ba93ec6713c3ef2b1845a70c017d02300c72f67529f1faa3555d1eecfc46ea9ac5a0acf070c3175ce16117f4147dab9812c97a9c5e69251c6a3008ddb76e4ec40302047c435bb50066306402304e0e9df058f7c05422d3c97426dda0b31aa272a20ee30a4555e9c6566a5302498da338444b7b3882849ddbda31aa4b4a02306bff10fc321e92345c044a8d51b4f40f0302e43c4dc523f5adee780ef8a36acc699389fe48169522160c2acd964a14540302047c435bb5006830660231009e0567e730c941759a14b65f5489fd7774e1c32ce6b3b0f1faa888f521514adc8433cc52614bf884692c02d5c65ee47b023100984f07f6706e7a12fd38fd86c689e861a5d77aea34c3988a57689ad6d25fd7ec2dc20146a33d304ce23ef1302c7c7bb60302047c435bb5006730650230379412bc58a4890520bb65c6bbf78e049fbcb5221a540e850ee1a8ca90c8be50d1800802f9959519811f9ee15b9bc481023100e9e8123d4ae8614f71d87b5593a50a2edb20411e3c57f53bc937a7428906a30f54676171fedb2c899ab4e8d5c5dfb53d0302047c435bb5006730650231009c79f853e3898638e80228f4f2f10656170d3f4ce6528a26f36ca85517ee42610640a7c45a26546e26c7aef86467634b02303d5264ba0ab38a8fe394e0a96182d9a3bcdeab194152d88ce209a4ab9fac2e851d19c90f61901808d715ad61c03256cc0302047c435bb500683066023100c894068076bbef1c4155a03316ccab83bf4f5bc053babfaac4c5174d5847188ef43d8e53b94c6074906d1c928e4a4c410231008e448bab72ab79f38ca2cd7ed5a7a862d79f754373046fbbe7542933839e50fff77e9887965ea5a038522319104be6e00302047c435bb5006830660231009cbab271e8280565265f804c5e8a048c719334ab3fecd01d511d3a20c90f66e90470ffeac2db4c5f65f7eba5f3781594023100cd6f77b7e3c9dda3e0a9a03721048a1ebaeeb700de643ac91315b46ed85fc497c51bd193d2cd19fde1aad2216a842166od4 U] A$&*Q|z״Ҳ}G6=39wXY(eϰ_^)ëia>ȣ#@c-Gt;Pse?,D`kG^4;B9b] 4\"}Ў c{~S6AXGgP݄/D?+?kDQcm%*d=5̲+7z UO%2Y& pk*\a(6t㑔'\zA>5|sfMUDqvĬi7? NV=jܒ @bK^Ъ̬WmĈLfvYX#"=7{~%3:'wWbڠ ]Bj՚C"Tu)0y:ށ!uksNG]?rι7oIL% H'. ruۭ031"^ѷ aJI?`#eaeklzd>`Ii?id8 < d +18q4 \    (  <   T  TT(89 :- =`>`@aBa Ga0HaIaXaYaZb\[bd\b|]b^c bedfTefYff\lf^tfxufvggOii iiiXi\Ccontainer-selinux2.219.01.module_el8+487+8e42a277SELinux policies for container runtimesSELinux policy modules for use with container runtimes.dcppc64le-03.stream.rdu2.redhat.com CentOSCentOSGPLv2builder@centos.orgUnspecifiedhttps://github.com/containers/container-selinuxlinuxnoarch . /etc/selinux/config _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if /usr/sbin/selinuxenabled && [ "${SELINUXTYPE}" = "${_policytype}" ]; then [ -f /var/lib/rpm-state/file_contexts.pre ] || cp -f /etc/selinux/${SELINUXTYPE}/contexts/files/file_contexts /var/lib/rpm-state/file_contexts.pre fi# Install all modules in a single transaction if [ $1 -eq 1 ]; then /usr/sbin/setsebool -P -N virt_use_nfs=1 virt_sandbox_use_all_caps=1 fi export MODULES=""; for x in container; do MODULES+=/usr/share/selinux/packages/$x.pp.bz2; MODULES+=" "; done; /usr/sbin/semodule -n -s targeted -r container 2> /dev/null /usr/sbin/semodule -n -s targeted -d docker 2> /dev/null /usr/sbin/semodule -n -s targeted -d gear 2> /dev/null . /etc/selinux/config _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if [ "${SELINUXTYPE}" = "${_policytype}" ]; then /usr/sbin/semodule -n -s ${_policytype} -X 200 -i $MODULES /usr/sbin/selinuxenabled && /usr/sbin/load_policy || : fi . /etc/selinux/config sed -e "\|container_file_t|h; \${x;s|container_file_t||;{g;t};a\\" -e "container_file_t" -e "}" -i /etc/selinux/${SELINUXTYPE}/contexts/customizable_types > /dev/null 2>&1 matchpathcon -qV /var/lib/containers || restorecon -R /var/lib/containers &> /dev/null || :if [ $1 -eq 0 ]; then . /etc/selinux/config _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if [ $1 -eq 0 ]; then if [ "${SELINUXTYPE}" = "${_policytype}" ]; then /usr/sbin/semodule -n -X 200 -s ${_policytype} -r container docker &> /dev/null || : /usr/sbin/selinuxenabled && /usr/sbin/load_policy || : fi fi fi6fb0(: BA큤A큤AAA큤A큤A큤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-selinux-2.219.0-1.module_el8+487+8e42a277.src.rpmcontainer-selinuxdocker-engine-selinuxdocker-selinux         /bin/sh/bin/sh/bin/sh/bin/shlibselinux-utilspolicycoreutilspolicycoreutils-python-utilsrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)sedselinux-policyselinux-policy-baseselinux-policy-targeted2.5-113.0.4-14.6.0-14.0-15.2-13.14.3-80.el83.14.3-80.el83.14.3-80.el8udica0.2.6-14.14.3d@ddm@dcp@dbdRLdd@d @c @cc_c!@bVbbkb_b<]@b%b@bOb@aar@a@a@a@aaa+@aaa]aQ@aI@aA@a'@a&0a /` @`9@`Ȗ@```q`@`@`N@`@`dd@`Y@`&m`_T_`@_%_%_F@__"_5+@_16_p@_5_X@^n@^Ӝ@^@^^k@]@]B]]@]|@]@]X]W]R@]@\M[[ͻ[[@[[Xf@[L[K7@["X[@[@[[[Z@Z?ZZZ%Z%Z@Z - 2:2.219.0-1Jindrich Novy - 2:2.218.0-1Jindrich Novy - 2:2.215.0-1Jindrich Novy - 2:2.213.0-2Jindrich Novy - 2:2.213.0-1Jindrich Novy - 2:2.211.1-1Jindrich Novy - 2:2.205.0-2Jindrich Novy - 2:2.205.0-1Jindrich Novy - 2:2.199.0-1Jindrich Novy - 2:2.195.1-1Jindrich Novy - 2:2.193.0-1Jindrich Novy - 2:2.191.0-1Jindrich Novy - 2:2.190.0-1Jindrich Novy - 2:2.189.0-1Jindrich Novy - 2:2.188.0-1Jindrich Novy - 2:2.187.0-1Jindrich Novy - 2:2.183.0-1Jindrich Novy - 2:2.181.0-1Jindrich Novy - 2:2.180.0-1Jindrich Novy - 2:2.179.1-1Jindrich Novy - 2:2.178.0-1Jindrich Novy - 2:2.177.0-1Jindrich Novy - 2:2.176.0-1Jindrich Novy - 2:2.174.0-1Jindrich Novy - 2:2.173.2-1Jindrich Novy - 2:2.173.1-2Jindrich Novy - 2:2.173.1-1Jindrich Novy - 2:2.173.0-2Jindrich Novy - 2:2.173.0-1Jindrich Novy - 2:2.172.1-1Jindrich Novy - 2:2.172.0-1Jindrich Novy - 2:2.171.0-1Jindrich Novy - 2:2.170.0-1Jindrich Novy - 2:2.169.0-1Vit Mojzis - 2:2.168.0-2Jindrich Novy - 2:2.168.0-1Jindrich Novy - 2:2.167.0-1Jindrich Novy - 2:2.165.1-2Jindrich Novy - 2:2.164.2-1Jindrich Novy - 2:2.164.1-1Jindrich Novy - 2:2.163.0-2Jindrich Novy - 2:2.163.0-1Jindrich Novy - 2:2.162.2-1Jindrich Novy - 2:2.162.1-1Jindrich Novy - 2:2.162.0-1Jindrich Novy - 2:2.161.1-2Jindrich Novy - 2:2.161.1-1Jindrich Novy - 2:2.160.2-1Jindrich Novy - 2:2.160.1-1Jindrich Novy - 2:2.160.0-1Jindrich Novy - 2:2.159.0-1Jindrich Novy - 2:2.158.0-1Jindrich Novy - 2:2.156.0-1Jindrich Novy - 2:2.155.0-1Jindrich Novy - 2:2.154.0-1Jindrich Novy - 2:2.153.0-1Jindrich Novy - 2:2.152.0-1Jindrich Novy - 2:2.151.0-1Jindrich Novy - 2:2.150.0-1Jindrich Novy - 2:2.145.0-1Jindrich Novy - 2:2.144.0-1Jindrich Novy - 2:2.143.0-1Jindrich Novy - 2:2.142.0-1Jindrich Novy - 2:2.139.0-1Jindrich Novy - 2:2.138.0-1Jindrich Novy - 2:2.137.0-1Jindrich Novy - 2:2.135.0-1Jindrich Novy - 2:2.134.0-1Jindrich Novy - 2:2.132.0-1Jindrich Novy - 2:2.130.0-1Jindrich Novy - 2:2.124.0-1Jindrich Novy - 2:2.123.0-2Jindrich Novy - 2:2.123.0-1Jindrich Novy - 2:2.122.0-1Jindrich Novy - 2:2.119.0-3.gita233788Jindrich Novy - 2:2.119.0-2Jindrich Novy - 2:2.119.0-1Jindrich Novy - 2:2.116-1Jindrich Novy - 2:2.107-2Lokesh Mandvekar - 2:2.107-1Lokesh Mandvekar - 2:2.89-1.git2521d0dLokesh Mandvekar - 2:2.75-1.git99e2cfdLokesh Mandvekar - 2:2.74-1Frantisek Kluknavsky - 2:2.73-3Frantisek Kluknavsky - 2:2.73-2Dan Walsh - 2.69-3Dan Walsh - 2.69-2Dan Walsh - 2.68-1Dan Walsh - 2.67-1Dan Walsh - 2.66-1Dan Walsh - 2.64-1Dan Walsh - 2.62-1Dan Walsh - 2.61-1Dan Walsh - 2.60-1Dan Walsh - 2.58-2Dan Walsh - 2.58-1Dan Walsh - 2.57-1Dan Walsh - 2.56-1Dan Walsh - 2.55-1Dan Walsh - 2.52-1Dan Walsh - 2.51-1Dan Walsh - 2.50-1Dan Walsh - 2.49-1Dan Walsh - 2.48-1Dan Walsh - 2.41-1Dan Walsh - 2.40-1Dan Walsh - 2.39-1Dan Walsh - 2.38-1Dan Walsh - 2.37-1Dan Walsh - 2.36-1Dan Walsh - 2.35-1Dan Walsh - 2.34-1Dan Walsh - 2.33-1Dan Walsh - 2.32-1Dan Walsh - 2.31-1Dan Walsh - 2.29-1Dan Walsh - 2.28-1Dan Walsh - 2.27-1Dan Walsh - 2.24-1Dan Walsh - 2.23-1Dan Walsh - 2.22-1Troy Dawson - 2.21-3Fedora Release Engineering - 2:2.21-2Dan Walsh - 2.21-1Dan Walsh - 2.20-2Dan Walsh - 2.20-1Lokesh Mandvekar - 2:2.19-2.1Dan Walsh - 2:2.19-1Lokesh Mandvekar - 2:2.15-1.1Dan Walsh - 2:2.10-2.1Dan Walsh - 2:2.10-1Lokesh Mandvekar - 2:2.9-4Lokesh Mandvekar - 2:2.9-3Lokesh Mandvekar - 2:2.9-2Lokesh Mandvekar - 2:2.8-2Lokesh Mandvekar - 2:2.7-1Lokesh Mandvekar - 2:2.4-2Dan Walsh - 2:2.4-1Dan Walsh - 2:2.3-1Lokesh Mandvekar - 2:2.2-4Jonathan Lebon - 2:2.2-3Lokesh Mandvekar - 2:2.2-2Lokesh Mandvekar - 2:2.2-1Lokesh Mandvekar - 2:2.0-2Lokesh Mandvekar - 2:2.0-1Lokesh Mandvekar - 2:1.12.4-29- update to https://github.com/containers/container-selinux/releases/tag/v2.219.0 - Related: #2176055- update to https://github.com/containers/container-selinux/releases/tag/v2.218.0 - Related: #2176055- update to https://github.com/containers/container-selinux/releases/tag/v2.215.0 - Related: #2176055- add watch statement removal from container.te - Related: #2176055- update to https://github.com/containers/container-selinux/releases/tag/v2.213.0 - Related: #2176055- update to https://github.com/containers/container-selinux/releases/tag/v2.211.1 - Related: #2176055- use conditionals from https://github.com/containers/container-selinux/blob/main/container-selinux.spec.rpkg - Related: #2176055- update to https://github.com/containers/container-selinux/releases/tag/v2.205.0 - remove user_namespace class, thanks to Lokesh Mandvekar - Related: #2176055- revert back to https://github.com/containers/container-selinux/releases/tag/v2.199.0 (2.200.0 fails to build as it relies on the new selinux-policy which is not there yet) - Related: #2176055- update to https://github.com/containers/container-selinux/releases/tag/v2.195.1 - Related: #2123641- update to https://github.com/containers/container-selinux/releases/tag/v2.193.0 - Related: #2123641- update to https://github.com/containers/container-selinux/releases/tag/v2.191.0 - Related: #2123641- update to https://github.com/containers/container-selinux/releases/tag/v2.190.0 - Related: #2123641- update to https://github.com/containers/container-selinux/releases/tag/v2.189.0 - Related: #2061390- update to https://github.com/containers/container-selinux/releases/tag/v2.188.0 - Related: #2061390- update to https://github.com/containers/container-selinux/releases/tag/v2.187.0 - Related: #2061390- update to https://github.com/containers/container-selinux/releases/tag/v2.183.0 - Related: #2061390- update to https://github.com/containers/container-selinux/releases/tag/v2.181.0 - Related: #2061390- update to https://github.com/containers/container-selinux/releases/tag/v2.180.0 - Related: #2061390- update to https://github.com/containers/container-selinux/releases/tag/v2.179.1 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.178.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.177.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.176.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.174.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.173.2 - Related: #2001445- update minimal selinux_policy dependency - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.173.1 - Related: #2001445- lockdown allow rule was removed - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.173.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.172.1 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.172.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.171.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.170.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.169.0 - Related: #2001445- Start shipping udica templates - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.168.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.167.0 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.165.1 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.164.2 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.164.1 - Related: #1934415- fix the build of 2.163.0 - Resolves: #1957904- update to https://github.com/containers/container-selinux/releases/tag/v2.163.0 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.162.2 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.162.1 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.162.0 - Related: #1934415- do not use lockdown class yet - it is not available in RHEL - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.161.1 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.160.2 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.160.1 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.160.0 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.159.0 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.158.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.156.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.155.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.154.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.153.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.152.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.151.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.150.0 - Related: #1883490- synchronize with stream-container-tools-rhel8 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.144.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.143.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.142.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.139.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.138.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.137.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.135.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.134.0 - Related: #1821193- synchronize containter-tools 8.3.0 with 8.2.1 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.130.0 - don't use macros in changelog - Related: #1821193- update to 2.124.0 - Related: RHELPLAN-25139- implement spec file refactoring by Zdenek Pytela, namely: Change the uninstall command in the %postun section of the specfile to use the %selinux_modules_uninstall macro which uses priority 200. Change the install command in the %post section if the specfile to use the %selinux_modules_install macro. Replace relabel commands with using the %selinux_relabel_pre and %selinux_relabel_post macros. Change formatting so that the lines are vertically aligned in the %postun section. (https://github.com/containers/container-selinux/pull/85) - Related: RHELPLAN-25139- update to 2.123.0 - Related: RHELPLAN-25139- update to 2.122.0 - Related: RHELPLAN-25139- update to master container-selinux - bug 1769469 - Related: RHELPLAN-25139- fix post scriptlet - fail if semodule fails - bug 1729272 - Related: RHELPLAN-25139- update to 2.119.0 - Related: RHELPLAN-25139- update to 2.116 Resolves: #1748519- Use at least selinux policy 3.14.3-9.el8, Resolves: #1728700- Resolves: #1720654 - rebase to v2.107- bump to v2.89- bump to v2.75 - built commit 99e2cfd- Resolves: #1641655 - bump to v2.74 - built commit a62c2db- tweak macro for fedora - applies to rhel8 as well- moved changelog entries: - Define spc_t as a container_domain, so that container_runtime will transition to spc_t even when setup with nosuid. - Allow container_runtimes to setattr on callers fifo_files - Fix restorecon to not error on missing directory- Make sure we pull in the latest selinux-policy- Add map support to container-selinux for RHEL 7.5 - Dontudit attempts to write to kernel_sysctl_t- Add label for /var/lib/origin - Add customizable_file_t to customizable_types- Add policy for container_logreader_t- Allow dnsmasq to dbus chat with spc_t- Allow containers to create all socket classes- Label overlay directories under /var/lib/containers/ correctly- Allow spc_t to load kernel modules from inside of container- Allow containers to list cgroup directories - Transition for unconfined_service_t to container_runtime_t when executing container_runtime_exec_t.- Run restorecon /usr/bin/podman in postinstall- Add labels to allow podman to be run from a systemd unit file- Set the version of SELinux policy required to the latest to fix build issues.- Allow container_runtime_t to transition to spc_t over unlabeled filesAllow iptables to read container state Dontaudit attempts from containers to write to /proc/self Allow spc_t to change attributes on container_runtime_t fifo files- Add better support for writing custom selinux policy for customer container domains.- Allow shell_exec_t as a container_runtime_t entrypoint- Allow bin_t as a container_runtime_t entrypoint- Add support for MLS running container runtimes - Add missing allow rules for running systemd in a container- Update policy to match master branch - Remove typebounds and replace with nnp_transition and nosuid_transition calls- Add support to nnp_transition for container domains - Eliminates need for typebounds.- Allow container_runtime_t to use user ttys - Fixes bounds check for container_t- Allow container runtimes to use interited terminals. This helps satisfy the bounds check of container_t versus container_runtime_t.- Allow container runtimes to mmap container_file_t devices - Add labeling for rhel push plugin- Allow containers to use inherited ttys - Allow ostree to handle labels under /var/lib/containers/ostree- Allow containers to relabelto/from all file types to container_file_t- Allow container to map chr_files labeled container_file_t- Dontaudit container processes getattr on kernel file systems- Allow containers to read /etc/resolv.conf and /etc/hosts if volume - mounted into container.- Make sure users creating content in /var/lib with right labels- Allow the container runtime to dbus chat with dnsmasq - add dontaudit rules for container trying to write to /proc- Add support for lxcd - Add support for labeling of tmpfs storage created within a container.- Allow a container to umount a container_file_t filesystem- Allow container runtimes to work with the netfilter sockets - Allow container_file_t to be an entrypoint for VM's - Allow spc_t domains to transition to svirt_t- Make sure container_runtime_t has all access of container_t- Allow container runtimes to create sockets in tmp dirs- Add additonal support for crio labeling.- Fixup spec file conditionals- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- Allow containers to execmod on container_share_t files.- Relabel runc and crio executables- Allow container processes to getsession- update release tag to isolate from 7.3- Fix mcs transition problem on stdin/stdout/stderr - Add labels for CRI-O - Allow containers to use tunnel sockets- Resolves: #1451289 - rebase to v2.15 - built @origin/RHEL-1.12 commit 583ca40- Make sure we have a late enough version of policycoreutils- Update to the latest container-selinux patch from upstream - Label files under /usr/libexec/lxc as container_runtime_exec_t - Give container_t access to XFRM sockets - Allow spc_t to dbus chat with init system - Allow containers to read cgroup configuration mounted into a container- Resolves: #1425574 - built commit 79a6d70- Resolves: #1420591 - built @origin/RHEL-1.12 commit 8f876c4- built @origin/RHEL-1.12 commit 33cb78b-- built origin/RHEL-1.12 commit 21dd37b- correct version-release in changelog entries- Add typebounds statement for container_t from container_runtime_t - We should only label runc not runc*- Fix labeling on /usr/bin/runc.* - Add sandbox_net_domain access to container.te - Remove containers ability to look at /etc content- use upstream's RHEL-1.12 branch, commit 56c32da for CentOS 7- properly disable docker module in %post- depend on selinux-policy-targeted - relabel docker-latest* files as well- bump to v2.2 - additional labeling for ocid- install policy at level 200 - From: Dan Walsh - Resolves: #1406517 - bump to v2.0 (first upload to Fedora as a standalone package) - include projectatomic/RHEL-1.12 branch commit for building on centos/rhel- new package (separated from docker)/bin/sh/bin/sh/bin/shcontainer-selinuxdocker-selinux 2:2.219.0-1.module_el8+487+8e42a2772:2.219.0-1.module_el8+487+8e42a2772:2.219.0-1.module_el8+487+8e42a277 2:1.12.5-142:1.12.4-28 selinuxcontextscontainer-selinuxREADME.mddevelincludeservicescontainer.ifpackagescontainer.pp.bz2templatesbase_container.cilconfig_container.cilhome_container.cillog_container.cilnet_container.ciltmp_container.ciltty_container.cilvirt_container.cilx_container.cil/usr/share/containers//usr/share/containers/selinux//usr/share/doc//usr/share/doc/container-selinux//usr/share/selinux//usr/share/selinux/devel//usr/share/selinux/devel/include//usr/share/selinux/devel/include/services//usr/share/selinux/packages//usr/share/udica//usr/share/udica/templates/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mcpu=power8 -mtune=power8 -funwind-tables -fstack-clash-protectioncpioxz2noarch-redhat-linux-gnudirectoryASCII textSE Linux policy interface source . /etc/selinux/config _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if /usr/sbin/selinuxenabled && [ "${SELINUXTYPE}" = "${_policytype}" ]; then if [ -f /var/lib/rpm-state/file_contexts.pre ]; then /usr/sbin/fixfiles -C /var/lib/rpm-state/file_contexts.pre restore &> /dev/null rm -f /var/lib/rpm-state/file_contexts.pre fi fi #define license tag if not already defined/bin/shutf-8e80e28bf874bb298c92bb1f0a02d46290f6256bbd4f8a80357d1c3a3fa0dbf69container-tools:rhel8:820230703102418:20125149?p7zXZ !#,c] b2u jӫ`(y/<3ZfjJ#أ-h˥DFadẂ]9Eol·ާP'L-hAb RHch<62QUo*r=)xюGvrm ⬿$zŵ9̢P4S+dqDl4Fhwax{B [c12Oܫ.r؀f[;Nƈ]vИd٬/E^ĴVԃ^;V6(/|^nP}VKC("Ek-GJ}e=,B:G>nԍV~WK.\z97^$v݅+sŇo947yPλ{zN-=A{Oea{.r;~Of1O8m_N7z\DNr)򙡼X#AYηd`=p@2TCAGC$zer TsIR3FxM זŗ,k*%F1mveB<]`@lxZC-NNEG߳Ia;OZUA{[{L UȢG<4gȅX*+j/5O50hzŧ&6y%THh;lh>X8/ynGp'(Tn8u3fUo]sx-~Hkר™ Mg2'Ã2EaIn!>6w)ͬ&{Xĝza$~K\:h昔T,I0¼D_|)Dž{lHwGw)MQLh|xZlq":Fp|{?)hk0d s?.Wɹy#0U!@;OQf2?Kp[zWReqG"t-ǗT iw4⪴MV4B:}Qaэ֤z,$ˈikLWEX38̹_+>a60whR|_΀(U<UɫjWZŶ[b༒I̴1{GF@gN{Fe:wT>YNZF5[oDߛ9G3t@>+4w0#.8EFpYWRDg\(9>ݹpŻ ڊ8D3H IH%-[x"WGu]jFoX x;T"2%Acˮh-L]A|7܏/$8㤛DYٴ7  =I ` V!i,W%E<9[Oa1Dny U,%ssRƇA!ڪHLpg_(YOw(h#^ bOh5VG02+BsTNV&5AXJG2G#R4 Uip`RӅpY1c`?UgtBVVA437{ݐ(lڃ\ ot]eD^푊³T^"iQ 3@%OA)˷HA:FXVtײUIpw44b,6 mR_ڤWfnaVto4r W%wv9nԗMۅǩʗAiF̧?t^VS9!Pr>gB}n?8h u&V'X!L(A`~%|m=V+AڕaCR&|q[^A෬Yf!ҨXm}q:P,Yz(I1*9Uz3?e^c %@(t$L̙[J/vpm9?ɥ2_Y\6e N]k:BG67-۹:EH}s4\W?VܭAg^e(ɫsNF 2m֟OQsxZ,VAnW:Y'xZjq ;33šGyĹ[Aюʡg* X6CwmսR F ; P?cA\u:`gӕ0>i:85:3b/2{­ WT6W׏X=WJ2yeXEս4Q3w>,&%eRwx S&pcY(ǽ3Y~Q(ƲW^m*S[6B\@ Z fF}'9)0en:{%S|)ċ?]Be\U\WS-OF2gJyl<w+TJذhCI c rIOsIZX3SfBHvBKO0E̐:l:-q©DN%,-lS#/-vտD.'lKUůν)qݻXsԮUr=T"j<7!N4>0@_<_d?8Kidx .)jՕs7_JՍᒱE~Pp\khڐQ"ep3^KS[cBVimx ľ6)u-}sm N\-up jG!)fnrhY{,:)zչ8#,"a' ڨbqG _.w4E*<,?0sB'^p~@ +<Qt ~]J=tfJD>cq1~l/RC8JJ/녏3 Q XhL#8$*e G>-s.? ۊl Dk&zv AihBW|">DG]޹=a`juJR5CGqv9$QS0G(4[T:?lм@dBˉd0<:V@^~  ߄ˎk[L-ĴkYTv+9p1.^/~/0PUзWSr0E BQ1imGEVR-,!pu PkohNBVY$ ^!|iTP;u@QF' 0rrց (`?$J$diO%t"*KbdcK&MnmA%ڒ ǯlt_NM!K,˕*?vG?/wă2u6< 4^iQgԟ'w2dwzo T&R@aRcWi]o3ڹ 64 <,URQu)tGg% gUb Ƶ^EhHn_tz^*ErۺY9Y,.H3 ys #y`dux䞝m(=¹Oצ֧TSRkUI{`1pq.$@0|PWЫ`+`NQ>;:^o>h~G0޽ns2,F>bn,6l_5nP5n&2BɭOeR^N HTf5+*:CX\ݝy30QF/n_vZrM `Uk XR{}PCPT .ZKgezY_25۝~bHx2~ j'r&/G|NsKTf[PͷKBѷb ߌK#a(g {chWPl(ݥ(Hd9[=ݭ;YH͓O3NrLc2`Te.bC2nWhC1O!y1P^»Y WsfRj6)#;&ƿ0O2JL"s;Tkðct$s.6^:޵/qR0YX5ST[ YT_!ҁ䇾ww ?a2=RkVMe>񃧻A 0;oyӽ k,LIF N۹hΝ7vgDeY C#XPEH-Eўl*}/_A^/e]Q47nj a!,g8g>2z jX'U80J%7`9)kLJ g [:u/$p,"2]#,ֲ?Sb:'^gmx8c0*mQ%\op$Zv=q,zƭ}u`mpw%Ӑ\e SZ Snv7 T\iZPC2޶pOsxm!C[?qr>fIq1iX}KNyrz;]dNepFD7.t>dn,D2ը]CB$b쐦%п}&VZ"=l)&rL壢AEUw+Qq[G_<0qBFLb~8 ,P"arjmL]B'AC(/z2CY]&L`rs`#b|f,fWM@-LB'h'$ЬC )(̡YO.pWph:VLG@s(_#/*ގw cmP3NeMU35LøECZ87L>:O|& Ÿ1AaCǵ\ 6i۸ Ƣ> ۄ75*+Ybf5ƒɯ4ֳ#4J-$Ղ&?+ JkHQ̼.w 9\EY-jU> -uEkwbA)pwqj*ۂ H}OĘ~ȴ]иHrg@~]rH1/Ih40z,h"4oAEgr+`xf;2u=_&QJS5AX~t#B qU".5J-?qt59V~چESRQG#Q~oc2Yp'&OkF|b\ lhM &KG=|oT{8kfhpU%3tܱD%d2dGf a`tgәMDV|2A()vjF"o8ryxXb.D 9K!ilPn\%Ls'VH:24*-d%Qf?DR|~ @v]9e?^~Efw{woū#Ҕ߄z@k G OrhҪɹSGR):)6Q#I q*sHRƛH?9-ސia]֖( )8 ~#=uVّ_ɶ/>s҆s2Ǐ=biŸ>[Qpc4nR sH󲟶N~8h"N~CȒk6?O|䱦^iTEN=[ $Bg^ coҍMd=.'QK)3LE5[j|d0S0HlIyI нBVfeR8n gZ}r>c^O?Va$XDŽ!0E $d@A>EE!J/ʡ mҌUγϵ6e[%A'#gJpldW(K+co(z4gTV`Og1*&& "L ,o-GA>,[Nv ? J*>we=3 0}P,`nU{?K)$##7u)R\= E$Pn\ysJ0e{iTC>:gRY#vç"=r'Dzc6P 4nzXCHXl<2[E >-x5V}wm7*_|h0cLr?n.HR-2mC3J PW*0rJ,{x=/;cuKA!qHsndk`vWU V1ЇfÓrT=FJ6$ YO]2>]Z) O\<&p-l&|u w"iJx!R4$=(meFܖX\c".> y|3L$gRl|jS-H`ɻ Mۻ,PF0"/b3 r& ˸!stzَVq(b^y8nkIU$ aUfvU!P/e}BHU9k2ϫ{in S6GvPtWORUNFA|O*, `$2Fn0ςMrW2K6.qg4( H֣ E(|l {j"^3̢{y{nGZ7fH{ԸʖҖtJiPPQu`hl a} F-Ц=ϽȵK~;:IRV%5p25# S=l  Yz+NiT$!x7[pdl28b%P5;ɼiZRĸhaXPI_ ȝ(=?hA@F 鱗͓vNb7r&XȤ !$0eq)2 $duuG ɰz'>uǡo CǼ~i/3 tasx.|OFޔ.JpH螔kv*ͪi {y>CEK nϔEKAGgٹa;6E~G뻹ű* y8 Ԝ\|A*++u`bSFh[(joo,8Љ퇀p4T-3f 뙠C\B]D:ݳJ7g+-Ņ{Y٭-"v,܎3Q}Vy"l#^d(֒O<8#No$$X*]yAL&SV,WG+n2F%i~Ġ?zdC[cLmMėhGZ|Ѥ8?&F5J.Nłu/_@o31IZ7$$vnOßm[bɫsECiͤ 8"_@6)Vg#{љ|ה&6ڢy2}|9."(zBzAvy'2&{E|4՘SPE-McD=kKAdД 2%6 wo0˹@D̊ CQu IL .Ut#AC?@,%~~&ÊQBpp:xe)=~aaR`ȪnŸ:nBP.y;. 7:0s9P;F?S}(w8tgcMZZQ)Kty+UJ{S]&].NQuJMyM0suT ɲC;Q-@Sd)uq7ttn%˝ UbSBl} 5d CC4uR͠Z8 ]RrVʴGڤeƲt, qW6/%I0i\i2=zﰝ[^o:rkC|[Veb?cw"> p9K)]/\Rqhy:vYk/` zj3+dwi膆3 8/c)pdkj:ܭ#PLo&g'׫BSb& "9A&y;N<=0բ@ϼC{4A»{a_miYǮB' l#~h#$~rEV f#v!8wQaDd^y3^-mpUp\Lt(?:r q{B=[n=%8z >K{#Cce{)Ys=ƅ((F(&h)ly$HѝO17 a>{+̨a5s|tUES>xMh155 7HlF$ۧOo}AUc|pl3 M 5[xKOTp- *_ +{YUþ7{@2 wR?h6$LoQ*o*֥NW7@!Go|l%3X%^kECۯ?8-9S*d4@>iyPV:P"W/:q^\W4&[u oAx9 D6ELWel}(_kb'aK#V'pa*ѝ0D,3*?:w؁J703FuXc(U?>K>!.XGQ`Ծm( .LwJ{6ςN3Ԩ,@'<>(EifL4|8o0ymJ%;pQCecA5U= nG+IZ]sWwf,xj>I4r,pPz~Cr_;. cv׼怤PuEs_u[YqGYӠ%H HL/%h\ZX7n7)OB6fq!,ʽd.';CgzO:s;op`yT/H_aW7S= g6;oyjzݩ8^e\Gz8i)\)m\GpxijG>(! Ś| AXUP [&Jk5*?  k!{5(o +Jfce 6lʃؤ*7шMqt6B.:V -ǽywpN뮴ND`ߙ/I֢!V56MOM;٤"KyQWu kvMˆUO Ymı|F\YrjkHS]97٢e -Jt Щ];&5ۀ̥ 3tBk0p;R9IE=KyNnqL (vLb+2 t׶ć@ωDG1 %˛)7gIn PMAwtKtSw|arMҪhuU$S'ξ{}ybcO_&ׄ>I,cVST _-]@&v675 NHDs;Vt`=m!² X=rAj;fW D_w/dѐЗw& !3kn hßձX .B JGVz2k 0P8H >sjųW-Î:{n;*&A@HQ H,*Jzcb5O/+<>u.KtX%?ݡf7Zsq:vb s)R37JŽ %ʌhgjKCaEK 4@?D>>ܮiM1ckmATxv'[7PgNC? ||f{* ))4k.b[3og7FSJV-{涤 Z2\h |<ЅA,{[4e" kI}(? ٮ9KĦdLǵK 2ϣ?*lGpՑMbDxS3JCRW u>ڵv8xupxYR<޾ _wt@7R#lEk pe) $mgj̭m>2`&Oe4` J`Ba,i\jΫ.T(IiMۑ+K=#tlj2jpq*k B/[ټ@-`I2bi#ŅK;wF>#{KD {p`eDXrI5u0vZC?6t#ӏ"H5xSpem=998Cͻz-c 3Oj`5t 仡˯:yK!8BP<| + &ڃNujYAjQ2 3+ ޓ1iX DR`X5:EYs/ü"ZoL"o|ǿ :N/ud$1Mz8QK8[B&n}sDc vm3|m9uF5g*=aۇ&Hh)?`옭  Z[wFc\Mn3Hƍ(UG,`g2G9S%~!G | bTDZDpS   xtKF{jUl͘`rv,dgEm<&4-J#C[S`O17m5&s"`ѡ+GkT} ' "`Hhq\"WhҔ4P21ؑH g=Hj/=v>&;s KtL21򯅳q)|-]:IJXz|eCL{ԗW2M] !p?y|<"-:F yX=W+:Вf3yf3ȗU? 1+io! 47Z>\=.87Z261;!8pd zS6 n}#L6WdMkk $R٪V{a)A+p$`G%U)e<;:.|Im6@i|u U(MN6ɜTV6'yʻy{D;f*s ƛ|CU'C+(9@7ZΘ&?3ddx׽auʾGd$Ҁ)%Җ7KisH5)9w 6,$l}2 6y8 Ӊ2ef z1ss9bu[@F@3QQ1 =E_Y_1@iW Qi]r4$3_ڿ~l,;*ЯY.ؓgG1(=pa3f3ͭяn~q}=bAaga5>i<]>`2D2"kL Z $3T{H)洝j##IGbEXkJe]Dv(\?gcE]!mA܏Ȅn.^3R |!NDl#&O#U\5^utHY?}zz܌`dHBV֚:D9AY,[!O-%Cw~SBXxA«sԚFDZ02dKFWG04&[=܄ma@߸DOt,}I%C/:vه MV,Laj ĭ l4BqDQPhGLP:ocG%Aa[*/tСwճ&Aյ0=5PG)Y%kVl/4˯"G!nMlXT?G߼9F|1pح_7%{ב 5=fS%EdW](lM;'vW3:6ɄnP@[!|O!qW".޵9BK5*L*zv&`nGrs?om0n}EX -_\6X%6FNeS:yrYgp FDJw|0&2 tA2 -[U[% V%|o}*Ί]KIU h v<SFۈ?|Y'sQ\d0\?5\4BG4a$jUX|@=VƊsXg@vuVib٣_?JgeP[,?e8W= T5U3KpSFwZe7odY- >WEKA41Z*ͩBY/(f4;vb7-).yaxSwan̦&]>Y`&*&9x o^\VY[ TM=KcuڴR: e859^B@.Lf.1c7YB)A]SeX edRc(kNMG!VB՗23ѷ*wƀ)M<'wWv-bfDG$&:-m4i` AUz40&zb $Iq"ygl,`+` "mBN{UcNqVH]WXs|]k>HɅ4dY>'  @~'(AHQ#,!" @<+>wEOk(V^A?|*%K/*$HbqW[a߲FiCn OTK&4N‡ڳE4gv/RJ/vaN7?3̻56:lvrlNs}$^ǵI+lkDbفevJ<3%<|~A$$–"6L8y͕I,(b+oQY-WbT RU tt1T?ܚ-ȼi5̽q6Z-ސ'fBU1Q6?#uI zWY$݀IrQ|fsa&Ȯ߱a8O |d~{х8m]{PIiv$;xdTm1bO5~9J^1OmrUַIj2}Z:-{bSMر9ũrפ!/niU<ۛ5@H1}kƯ- w+m>SϮ{:p8E%(V{%0[dP9-J ]IܢkI΀׸K9H,51V6 O9we;SϾzK|&H1tz>a>[|*G{9!?6r[J޷(c;QMvY\뒹i]i2&w}Y zSN9mgզ&;PZ޶1ߞߛN627+eCGR EnKPA}Uf8Lw U@|dSIQ%stdI28 gMX{O1bj)5Hj{/PUS,߼Pi[_ "LޅOO˙+氛ID>A&ȏlg*@N*خl1 DrBGK, -y9\kY<\,O3ۖDayTOqh4b/¬_m# vUXCʎSʟgᲙbqFM1}߷vY 'ߴ`@ Uh{HFF1ȣ koV&TKpt fp1Sr`Û16tYN0lo:vzM ЗM]KjKhX$M+̘_vv!9akvLBPe՘ZAhDgN}_U=Vq<7Njnǔ˻yҌ7;Ig\.[@7ovY$c\ENH/[G'Fq'd? Vcg kE_ BtkBi|9T D^j遹se;}kTES\/$cEX-Wi0Ɏ͒vRNIqn gzqI&(+a:GEoдbwtѐp`2,廝#"EEs5!?I*39Pϓɩmd6֕yno%`5?o܇۪Z 1b+UU۶ Yސ:֋±x0_gl]m/Rm$avGت]3k2kCy 2XzSo WUEzSo8 |f>H(9_$ &nID|+[`ŐjGoE x{, p@(X ~z+"hR)W<#8ω#=m";r qGrX2R:-$U ~,2is  {!IYAOࢆ=y 4 qlV+}Tr?l,aѺ{8|50 4ߡěL; ӎ+7 =%`) "H_]~]1$!5>oAx 穠|W?BVu- x(|Dn%Pč.Ѽמ7!^" Xߴǒ>4愊[۷*MxY]02ltH[!p KČdnkK<6˫)kbSMAqKch%D ~5f ~s8ߏצ\OpXC@!12@g\ y?4aDz&/D.3sL?@Ev+spY,]5[QeO,;wgA.e! (+*T|@~}ݐrzS]WgK̤v+>GE]G^4lmq0BϴH >pRٱSB5$)5,oKm}8>W'(6jCUo~;??;V`ץL@ٴ&sxE^C/p1k3;Xon p ;[1 [:e]-&,9_-e?1vs xv@2m jTF{@ⳗrj' zc 4/ud/s?zc  I.w|H6"D>~EU=7W? M 󓵑zR*8% TgdWJK8'h!c? DcbI#jT?UGMk ) 5)_2B~J1Gh!@Kbl Ipq xw:˄Q*N{i7lsʅ# eI1c%c!bUOKB M7\XG҈3:Q+&LnB&%ßH~~lj6vt[C `Y$'jL_:dNBPDzd ywJmppGe֜ q 7ٟPquEz3 MVYcrSJLj1~DZ8i[|u}$_=="Iv'TIѣrٔPˑj6r=AH/VACA#C2>cZԭcT7auER3\{æqu-ؘ{Pv/5u?'/zb'(JőQ7&\i]vQr_w󲧦Q=v|I ʓ7h}P #2\PFHg86(EXȕRXbkOkS8a@_9~B*;ThԿh3uuK. 1oNKվނB*欷B7N{lp]+:4S-%r>bH'@6dsc1˾h8{Tɩ 򹿺U$P`=!N= B%H {$OOLbjB8)rD 1}`'eY.xf%?@K~=ۜoY.ךPfZpexv6 1q4M'n^r`pq]hIӛ9jᔔ. g \]b0X<@P4*,~V&q*éMΧxiJS0SA2Js]WFɤv/ ӁZ9@Ӎe<2S@JA[刑eaUXx{U,W_j뿝%E`64l̛NP6"t.8Ժ=˔Z5C! ޫ=2!kI#xO"w<\m 9 ,8 j _E|'6wajI9WL"@RcRե V_>FТqg*BaSZ(Է[K9(;cل-0SI>^T}惌l)!.%bfŲR_v+|c'YuXp+ *1tщF-,xRP',RhNd n>N٣'DŽDM?OXm6p mNc\I$Ni_wԑ|Zf 4H>Cu Q~!r/;^M1NhkIؚjs,h@ $(|35!@̽.QLLhΘI@ qe~n7i#Rul呎\w'>I3\tEs[ ޛsp+Rg!?iyح97:-c=@jDKm՟Z U[j?ݣ&`T%y3LX« o ƣ'Ig3Dۚ ̇Vܰ2jXUǨ^2`5&c>>KSEܷ2-IsK^@?(Zadv$.!\P(Qv#իn#5L6՞s-J$mh$J xcyC0c9b]HgG1Q19.ߐvKIh|֩u/,@Dy諅twoǷmd-$e])nxֳ';̷9,ev`/py5$ӅMT2F ]nA]y?*NPLJ~Lu<NMBQ̇ӵ ::(݅} RD#+M=!xU A85X Q>%M߰;a!i&l1rC* vՋ]ؾ9֨#!q!pnSI{BJch򦹽}fU|U.m0X9@CЌav^菳͈!Tn9v ;Oe%afϋǻ%vQ˧H +[B ]jTlB{.[AT@O-~8mW M/̇rމm$lLh(fY{r-SeKQGJ}Q2'(+Vꉆ6NZ"fzE|_Ġ#T'kݗ6m*WE˞J> L)-|Uc8}L5W!j{XiY0~ MKF jJr>Jp\[J-?,՞Iq  SG䩸w%hC9;Yn!,H%bZNpP@m@yRxP}'L\H*IB6Xn R-nzwUwam>l"l%a=>Z9IrLw Ua4Sш*c'u__)x :,,)`8Ki۞,zki4p_h%`/Z>Lz_ (&v`/R9h Eل§jVNƧ՛pcJܕEv.Boj=|-`EBAQ"tT! R6إsSC~c< __>]Kc0:֝7~k\ AؽR{AWV*DC# nz `2Z_VS,_ PbvAhSJHHEt=eFEz[)vyU( ߞ6 tPp'e}J3ڠj@!X-njtAl(q$hPe2T:c'c&hHvGcB^{=Ҩ]V"~]\pRnP)'^,(Ϡ[ñH1ϣ4]kqBeվ"r՗N3,OMf~v>^N"\7l}ŕ395gS m&ݑ!@@.R*n8že_6%SUi(ZZO}I0 "`i4&yr+`P[jGӺ@A@*.ڷ R(rTR'g,x *"sc;Fǽ7NjRȃCI6&փzX%W?>?ƐDCLh{lO/V\@gqBann6@N~f1D.Ic"ilܒihD#+L3ʥߝab]^H/ ,*s-EC\olϔzI Ue|KI҇WSOj;- sh\Tq{\M+WJmI# $>C{ɋ#_݆OC+u hBY+LT՟{fROL-Z~>j̍n1 {njO6ÕDZa7St.#uM)ʟdvdU"QPL(x뙎]\edq&ݭ>&Jh{ ?7fG< A{0e CЩL4g@| >N 'jhÖa g?Sʱ\k 鹁V M"!ݽ d9F+S: uy ƄbK63t`1heʡNOUMPudFb߯+ّQSE=줲wUhl\#Fibs+xt*d&C& $} s*'Pei:"q}j 3yD'*fj/(#أ'oQfI -,&ÓD X|afH(x-K,lU?1h6yᷕ. 0֤Z-85*eq.cbhem΋ޯ`j"Dw˵ͬdqdd[UrqU.k2=?&| qͿb|vKgEdycw[

i}2c FLGYwUe 22lAn:~bt}ͨd,؅ngf%^9zSҵhZRPR6.hWω],nm0c=~AN&vQ2VR&5ܩJ6?| rb"q҈7.Or P:PZ;G5bY8"jB75KuZYn/xwQދ6@-2.IP7AG b9L*o/Zrx5%|H2oK鴅9/pJ$uWbJmW;X&Dgz/M"/9oc1-ьoY!Y/a(֖y=glLok^'[IiœZ+s,aRƁ:l4&sRǩteLiv) KS⺏Ѹ׬LxzLYj=3,Oy^:ivΑSk: ?ر MAŎIܙZ:NosV> '* c2Fҙ;f>M>{:Y)]ɢ2ZpVAt8\3]Dz LC X-%PoYjĶ/K*d c׉u6*9,4pWZ4m4ZA/T:O˘C'l[_Y|M@ wbP/4qҐLe#,_3(]k-vvꈌjHhx뢹a$. 3](<0 -/IyV^rҔ_ u՝5'bo/+"Z&1)u"JշCOjfCJl WTC$^&A }kE>n]p#hi\$FزTMt(=*~x@ nk[nOsmLFp ?8hnCf!P Pwp="@l`AtmŬ8aאFDb1 IPRFwe]{YP*ϔg]jFe\ q| y#K&ġ@*ú\|]/dz6xC Grvct-܁-退QԦ !ex $nyNR::@.0>+2%MZOnhLE U wow I&xzGO?wZ|W%{NU('QȮ2Nr+&XbT?QΰMkt}${3͙c=[OӅKO! L.kP$2_vBA>-!-&\2h8ƹ>x=HK,- <_R/ 4j.~OA%4NC UYɶǾV#L֣u<-'#켁.LiVm+< a^7FB> qEUZVym=8&5D6\EӬyRڗF3B nū/v-I 8w‚aF5 5gdFT:UZBB,w R,\gqU5k5#KG^(Ǘ dߴ%a8F2jw/@hQHAL.[3kX|᭴Uy|ж')eB[H0Lkzx ^]"L_oWm@ǧG!`IRtq ,.ƠݱNj2+=m\V*JЮ$ڔgDq4oKF ]˵2LLJ iƴ#4k&ˆ}:spWLP| e&p =+W^ 0Py%X7(?l^2t(TcFAehl  cM=tWLOpK[{lS6,V%;lUF4r(tR5ݣ)]6 ܗk L4O9B*=RJd,׉z#B!g_a:,e9-=T$-A.|X@3h `aZ$ћjRϖۏ[!ů!ĄG\"UN6Qo8ﴓ{#BEl -+7Pf~E+ fňf6.3^O`WsukJ=V]݊Kb4koci>*'ĥ$1BO4{.APcƌؕ`! )eN[t\+,Cf%$feWE5 q"( W`Z6a?fs*H)Uio 4\^-# dq(֫[]5zܛ#8 `᧭R4`ufײow\ ;^/5'v:v{^~9yZAP*XmqW=1hq)4."5Qԡ{~*)T@#_Htᙦi1N 4ǫucaG$x&lm]T<+o"S`v@zZoNaQ#܍&Q]Tazq{};  082r~̏"6`D;R{& 0C w ӘA.CO3,dHz!TKr6yAt/mSB:;w#N ZYWǻJc{XVlc}&`:a ?:gcY O7'MRtʓ)߬ǭlW7'Gt2?31S]!a%ADlYǬQ%VlvZUiK;[A9n8CT~}ʷ#D7G"]lJvyjh ]78LZwd3)9Ǽ F6g\u$=g H0uFb{ǬϵadW q4wT報Q~(^aĴwЛ{&kntp$4x/2zM=8'W1T^':8B P3YFr\b=)n 0[c)Al1GMr}RӲn|+eny9K?|Am2\>{p]- Vm 4(Ƕ7VvPGU[Ln~DV.-8VYCΦdkun$2 P^"IP׸:x0̟<A͍0 דs}\#$8)MRȪd|k^m.މ8N0DHQ~6fNj?S(AJ99VީDS{BFc=sY$[,C4%3UX5s5ߍQdnA U034a > xs &gf ąq <_d9yy`Lؠ:2KsW [|.zUMjKӭxeHr\Ciݻ逸l 7Bwyg>`ׂ?i 9'́D˶&e jEsU:QBSP_%kys0V uWq dcމjo$<4C|^as6œQqM*eQ奇D`jgE Nn |ab'$P9lBа\qWΕة=$YGQXN1NZ)0t^ Ph|{*sj7T˥,` ;5Ӷx^/9W䉓vO,Ga۬="@[;M!fؖGNKVDd5W=avI$$6`\=#וF3zqcj \Ey5atD e)0 {. zF 10'7R5}{Hi,B|'26`apioxzHQUner:\z~i\L?MCkc*>% 4X(f8 d|Fe/%KXTݙ gy#M]AG[0.#ApᔅCbZسP!"Of\joEi>/=mLĊq݄.Bly _DB䪾8O$RUʜ*fH F=}6urڇgHL  Nvv2$*b~+JQc"1c`eoE[vݵuG덜Yr)evfyE<t~܇ZD.;k!aUyyZzϞOSRpRNvl}/vC!AH}+a~n cDE2؇@c܊ݯX}aM.9~zR6;fp}4A6Y.Mn[+cth 'BRN@^ɊUӲ #Qw tUk9+թ2Cf7gQ릒J&>7Հhv6fS:~d?VA?/ qțL/ˊ;s)bW@Y/ _~sF膨)%#iQk!Wp\U+`Ze+,y_DZs1t=%쇙݆݋x/1]-&;A!V3Pql|S(DfD\kfo;vRiiS-Ҳvt J S&ws5+˨-=]_/_zdyNL dǷ̙x ݰ0Q o .&o #XRMAPq6`%5FXXS}i4 i?,a.զT?]zud,V1of uPVpw^АYkNJ+pU.%b_4U# UJK 2E/)z’pԓ7,U+^^`4K 3V t6AFQrdT9HBtj]/~i^D/ ӻ!Ӂ]u bgY;5;=H_1q5Ęм##)m°gbܷ)Ld:-GmcLOU:ɮ_3 Kp9\/h~} Y kb-l)>;RARحB>J|C0,,UVjU `6A`N=?O$З2kKjN}usO|(. Jk{S,j'Q(dW4M6!EÈZ gSlf'zV#沃 ]9`FR8ͩpxuWa~|kK,~l. hf7D@ VӢc gEs%v]ϸ=|޸fҔaS_x >xa69cgJa*i]sO ./ @ǝ]Xuilȍ_u!vЀ-9*ߺ:݉aI _sEji=긃>.SNo#w@$ӺDFffh؈jL+*I:3B]ٳ$ 0܈Lɩ/)N܂v*jo)f_--a#Z畴+Lְ%R- ;OANAօ D^p+G? /`ĔHOZ ;mjt^ *Pϳ q#||#]rVV xb&^$vNظ`_.W{"VYUg!=scuP, SJTv9[LNěKQ WQR"{LEH72osŦw`%%,O0&l>u$t z/'=qߦ$ǼvbQy|f/߮Kǃw[ì @`|̌lj%A$D04:㮄z]u2;5 R7VD&TaU/PT]GVoA|y˿r}[o'A<9Eu)}N$i +df8񷕶BQ?E?)V͉Utɋy4E6lD7$#9=В3`^&#]שjiA'HAoDQY94&}=9npL7&xKB0)q9nh$`؜Lwiv6hTA`uܻׅ@#k}v^Y2p A[P&X~\He?U2گ]Q`eňLkSpZ*8XˠW4Ca}/i-N&KA.Ye-򾲪-LJkq;,b$8,LG/'N6 )FAqvھ$g !݋B9|JG=U'zH!UV /)sl&z6~BW  KpveIARm մl X[txuG&̉y|BTIVoؖ5/U)|9?05t+Ti.3|kdWv2Qz{LN'B rаX^kN9x 0yǸUuǛL}@S)KVذܯ90#L09pc¯w7t0^Og-E(Pb @U]E\]bNa"V61b`BD+ "UӮ=zK2CNyǾOs,uWDl4a*c$%-C o YZ