container-selinux-2:2.224.0-1.module_el8+712+4cd1bd69 l>\  H$(GXe8 U]7%9cq!™f#T%Os;o+ŋw 2ݦ*NN< YK\*Bp0!#򨎝ni+st0\ciDZW) $)NIdR4 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 U]vaF`z=t4HG,=0`z&&Z܋孱񭥐ʉN͝) 4 9U\337wn: hY3Xe; Bij~%WLlPb}l,ȓ lP;2[ɚQssDVf?Wp쑝S Am\hG:)\RI0lP#ނ-Ly8h}"Q E1 øW3h(߮w O4o01<ר"X4iѽ>pIl?kd8 < d +18q4 \    (  <   T  TT(89:-=cj>cr@czBcGcHcIdDXdXYddZd[d\d]e@^f[ bgdhehfhlhthui<viikwkkkkkCcontainer-selinux2.224.01.module_el8+712+4cd1bd69SELinux policies for container runtimesSELinux policy modules for use with container runtimes.e,ppc64le-01.stream.rdu2.redhat.com CCentOSCentOSGPLv2builder@centos.orgUnspecifiedhttps://github.com/containers/container-selinuxlinuxnoarch . /etc/selinux/config _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if /usr/sbin/selinuxenabled && [ "${SELINUXTYPE}" = "${_policytype}" ]; then [ -f /var/lib/rpm-state/file_contexts.pre ] || cp -f /etc/selinux/${SELINUXTYPE}/contexts/files/file_contexts /var/lib/rpm-state/file_contexts.pre fi# Install all modules in a single transaction if [ $1 -eq 1 ]; then /usr/sbin/setsebool -P -N virt_use_nfs=1 virt_sandbox_use_all_caps=1 fi export MODULES=""; for x in container; do MODULES+=/usr/share/selinux/packages/$x.pp.bz2; MODULES+=" "; done; /usr/sbin/semodule -n -s targeted -r container 2> /dev/null /usr/sbin/semodule -n -s targeted -d docker 2> /dev/null /usr/sbin/semodule -n -s targeted -d gear 2> /dev/null . /etc/selinux/config _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if [ "${SELINUXTYPE}" = "${_policytype}" ]; then /usr/sbin/semodule -n -s ${_policytype} -X 200 -i $MODULES /usr/sbin/selinuxenabled && /usr/sbin/load_policy || : fi . /etc/selinux/config sed -e "\|container_file_t|h; \${x;s|container_file_t||;{g;t};a\\" -e "container_file_t" -e "}" -i /etc/selinux/${SELINUXTYPE}/contexts/customizable_types > /dev/null 2>&1 matchpathcon -qV /var/lib/containers || restorecon -R /var/lib/containers &> /dev/null || :if [ $1 -eq 0 ]; then . /etc/selinux/config _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if [ $1 -eq 0 ]; then if [ "${SELINUXTYPE}" = "${_policytype}" ]; then /usr/sbin/semodule -n -X 200 -s ${_policytype} -r container docker &> /dev/null || : /usr/sbin/selinuxenabled && /usr/sbin/load_policy || : fi fi fi6f8b0(: BA큤A큤AAA큤A큤A큤e,e,e,e&e,e,e,e,e,e,e,e,e,e,e,e,e,e,e,e,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-selinux-2.224.0-1.module_el8+712+4cd1bd69.src.rpmcontainer-selinuxdocker-engine-selinuxdocker-selinux         /bin/sh/bin/sh/bin/sh/bin/shlibselinux-utilspolicycoreutilspolicycoreutils-python-utilsrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)sedselinux-policyselinux-policy-baseselinux-policy-targeted2.5-113.0.4-14.6.0-14.0-15.2-13.14.3-80.el83.14.3-80.el83.14.3-80.el8udica0.2.6-14.14.3e'e ddhd@ddm@dcp@dbdRLdd@d @c @cc_c!@bVbbkb_b<]@b%b@bOb@aar@a@a@a@aaa+@aaa]aQ@aI@aA@a'@a&0a /` @`9@`Ȗ@```q`@`@`N@`@`dd@`Y@`&m`_T_`@_%_%_F@__"_5+@_16_p@_5_X@^n@^Ӝ@^@^^k@]@]B]]@]|@]@]X]W]R@]@\M[[ͻ[[@[[Xf@[L[K7@["X[@[@[[[Z@Z?ZZZ%Z%Z@Z - 2:2.224.0-1Jindrich Novy - 2:2.222.0-1Jindrich Novy - 2:2.221.1-1Jindrich Novy - 2:2.221.0-1Jindrich Novy - 2:2.219.0-1Jindrich Novy - 2:2.218.0-1Jindrich Novy - 2:2.215.0-1Jindrich Novy - 2:2.213.0-2Jindrich Novy - 2:2.213.0-1Jindrich Novy - 2:2.211.1-1Jindrich Novy - 2:2.205.0-2Jindrich Novy - 2:2.205.0-1Jindrich Novy - 2:2.199.0-1Jindrich Novy - 2:2.195.1-1Jindrich Novy - 2:2.193.0-1Jindrich Novy - 2:2.191.0-1Jindrich Novy - 2:2.190.0-1Jindrich Novy - 2:2.189.0-1Jindrich Novy - 2:2.188.0-1Jindrich Novy - 2:2.187.0-1Jindrich Novy - 2:2.183.0-1Jindrich Novy - 2:2.181.0-1Jindrich Novy - 2:2.180.0-1Jindrich Novy - 2:2.179.1-1Jindrich Novy - 2:2.178.0-1Jindrich Novy - 2:2.177.0-1Jindrich Novy - 2:2.176.0-1Jindrich Novy - 2:2.174.0-1Jindrich Novy - 2:2.173.2-1Jindrich Novy - 2:2.173.1-2Jindrich Novy - 2:2.173.1-1Jindrich Novy - 2:2.173.0-2Jindrich Novy - 2:2.173.0-1Jindrich Novy - 2:2.172.1-1Jindrich Novy - 2:2.172.0-1Jindrich Novy - 2:2.171.0-1Jindrich Novy - 2:2.170.0-1Jindrich Novy - 2:2.169.0-1Vit Mojzis - 2:2.168.0-2Jindrich Novy - 2:2.168.0-1Jindrich Novy - 2:2.167.0-1Jindrich Novy - 2:2.165.1-2Jindrich Novy - 2:2.164.2-1Jindrich Novy - 2:2.164.1-1Jindrich Novy - 2:2.163.0-2Jindrich Novy - 2:2.163.0-1Jindrich Novy - 2:2.162.2-1Jindrich Novy - 2:2.162.1-1Jindrich Novy - 2:2.162.0-1Jindrich Novy - 2:2.161.1-2Jindrich Novy - 2:2.161.1-1Jindrich Novy - 2:2.160.2-1Jindrich Novy - 2:2.160.1-1Jindrich Novy - 2:2.160.0-1Jindrich Novy - 2:2.159.0-1Jindrich Novy - 2:2.158.0-1Jindrich Novy - 2:2.156.0-1Jindrich Novy - 2:2.155.0-1Jindrich Novy - 2:2.154.0-1Jindrich Novy - 2:2.153.0-1Jindrich Novy - 2:2.152.0-1Jindrich Novy - 2:2.151.0-1Jindrich Novy - 2:2.150.0-1Jindrich Novy - 2:2.145.0-1Jindrich Novy - 2:2.144.0-1Jindrich Novy - 2:2.143.0-1Jindrich Novy - 2:2.142.0-1Jindrich Novy - 2:2.139.0-1Jindrich Novy - 2:2.138.0-1Jindrich Novy - 2:2.137.0-1Jindrich Novy - 2:2.135.0-1Jindrich Novy - 2:2.134.0-1Jindrich Novy - 2:2.132.0-1Jindrich Novy - 2:2.130.0-1Jindrich Novy - 2:2.124.0-1Jindrich Novy - 2:2.123.0-2Jindrich Novy - 2:2.123.0-1Jindrich Novy - 2:2.122.0-1Jindrich Novy - 2:2.119.0-3.gita233788Jindrich Novy - 2:2.119.0-2Jindrich Novy - 2:2.119.0-1Jindrich Novy - 2:2.116-1Jindrich Novy - 2:2.107-2Lokesh Mandvekar - 2:2.107-1Lokesh Mandvekar - 2:2.89-1.git2521d0dLokesh Mandvekar - 2:2.75-1.git99e2cfdLokesh Mandvekar - 2:2.74-1Frantisek Kluknavsky - 2:2.73-3Frantisek Kluknavsky - 2:2.73-2Dan Walsh - 2.69-3Dan Walsh - 2.69-2Dan Walsh - 2.68-1Dan Walsh - 2.67-1Dan Walsh - 2.66-1Dan Walsh - 2.64-1Dan Walsh - 2.62-1Dan Walsh - 2.61-1Dan Walsh - 2.60-1Dan Walsh - 2.58-2Dan Walsh - 2.58-1Dan Walsh - 2.57-1Dan Walsh - 2.56-1Dan Walsh - 2.55-1Dan Walsh - 2.52-1Dan Walsh - 2.51-1Dan Walsh - 2.50-1Dan Walsh - 2.49-1Dan Walsh - 2.48-1Dan Walsh - 2.41-1Dan Walsh - 2.40-1Dan Walsh - 2.39-1Dan Walsh - 2.38-1Dan Walsh - 2.37-1Dan Walsh - 2.36-1Dan Walsh - 2.35-1Dan Walsh - 2.34-1Dan Walsh - 2.33-1Dan Walsh - 2.32-1Dan Walsh - 2.31-1Dan Walsh - 2.29-1Dan Walsh - 2.28-1Dan Walsh - 2.27-1Dan Walsh - 2.24-1Dan Walsh - 2.23-1Dan Walsh - 2.22-1Troy Dawson - 2.21-3Fedora Release Engineering - 2:2.21-2Dan Walsh - 2.21-1Dan Walsh - 2.20-2Dan Walsh - 2.20-1Lokesh Mandvekar - 2:2.19-2.1Dan Walsh - 2:2.19-1Lokesh Mandvekar - 2:2.15-1.1Dan Walsh - 2:2.10-2.1Dan Walsh - 2:2.10-1Lokesh Mandvekar - 2:2.9-4Lokesh Mandvekar - 2:2.9-3Lokesh Mandvekar - 2:2.9-2Lokesh Mandvekar - 2:2.8-2Lokesh Mandvekar - 2:2.7-1Lokesh Mandvekar - 2:2.4-2Dan Walsh - 2:2.4-1Dan Walsh - 2:2.3-1Lokesh Mandvekar - 2:2.2-4Jonathan Lebon - 2:2.2-3Lokesh Mandvekar - 2:2.2-2Lokesh Mandvekar - 2:2.2-1Lokesh Mandvekar - 2:2.0-2Lokesh Mandvekar - 2:2.0-1Lokesh Mandvekar - 2:1.12.4-29- update to https://github.com/containers/container-selinux/releases/tag/v2.224.0 - Related: Jira:RHEL-2110- update to https://github.com/containers/container-selinux/releases/tag/v2.222.0 - Related: Jira:RHEL-2110- update to https://github.com/containers/container-selinux/releases/tag/v2.221.1 - Related: Jira:RHEL-2110- update to https://github.com/containers/container-selinux/releases/tag/v2.221.0 - Related: #2176055- update to https://github.com/containers/container-selinux/releases/tag/v2.219.0 - Related: #2176055- update to https://github.com/containers/container-selinux/releases/tag/v2.218.0 - Related: #2176055- update to https://github.com/containers/container-selinux/releases/tag/v2.215.0 - Related: #2176055- add watch statement removal from container.te - Related: #2176055- update to https://github.com/containers/container-selinux/releases/tag/v2.213.0 - Related: #2176055- update to https://github.com/containers/container-selinux/releases/tag/v2.211.1 - Related: #2176055- use conditionals from https://github.com/containers/container-selinux/blob/main/container-selinux.spec.rpkg - Related: #2176055- update to https://github.com/containers/container-selinux/releases/tag/v2.205.0 - remove user_namespace class, thanks to Lokesh Mandvekar - Related: #2176055- revert back to https://github.com/containers/container-selinux/releases/tag/v2.199.0 (2.200.0 fails to build as it relies on the new selinux-policy which is not there yet) - Related: #2176055- update to https://github.com/containers/container-selinux/releases/tag/v2.195.1 - Related: #2123641- update to https://github.com/containers/container-selinux/releases/tag/v2.193.0 - Related: #2123641- update to https://github.com/containers/container-selinux/releases/tag/v2.191.0 - Related: #2123641- update to https://github.com/containers/container-selinux/releases/tag/v2.190.0 - Related: #2123641- update to https://github.com/containers/container-selinux/releases/tag/v2.189.0 - Related: #2061390- update to https://github.com/containers/container-selinux/releases/tag/v2.188.0 - Related: #2061390- update to https://github.com/containers/container-selinux/releases/tag/v2.187.0 - Related: #2061390- update to https://github.com/containers/container-selinux/releases/tag/v2.183.0 - Related: #2061390- update to https://github.com/containers/container-selinux/releases/tag/v2.181.0 - Related: #2061390- update to https://github.com/containers/container-selinux/releases/tag/v2.180.0 - Related: #2061390- update to https://github.com/containers/container-selinux/releases/tag/v2.179.1 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.178.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.177.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.176.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.174.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.173.2 - Related: #2001445- update minimal selinux_policy dependency - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.173.1 - Related: #2001445- lockdown allow rule was removed - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.173.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.172.1 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.172.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.171.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.170.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.169.0 - Related: #2001445- Start shipping udica templates - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.168.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.167.0 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.165.1 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.164.2 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.164.1 - Related: #1934415- fix the build of 2.163.0 - Resolves: #1957904- update to https://github.com/containers/container-selinux/releases/tag/v2.163.0 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.162.2 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.162.1 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.162.0 - Related: #1934415- do not use lockdown class yet - it is not available in RHEL - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.161.1 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.160.2 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.160.1 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.160.0 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.159.0 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.158.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.156.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.155.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.154.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.153.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.152.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.151.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.150.0 - Related: #1883490- synchronize with stream-container-tools-rhel8 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.144.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.143.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.142.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.139.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.138.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.137.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.135.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.134.0 - Related: #1821193- synchronize containter-tools 8.3.0 with 8.2.1 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.130.0 - don't use macros in changelog - Related: #1821193- update to 2.124.0 - Related: RHELPLAN-25139- implement spec file refactoring by Zdenek Pytela, namely: Change the uninstall command in the %postun section of the specfile to use the %selinux_modules_uninstall macro which uses priority 200. Change the install command in the %post section if the specfile to use the %selinux_modules_install macro. Replace relabel commands with using the %selinux_relabel_pre and %selinux_relabel_post macros. Change formatting so that the lines are vertically aligned in the %postun section. (https://github.com/containers/container-selinux/pull/85) - Related: RHELPLAN-25139- update to 2.123.0 - Related: RHELPLAN-25139- update to 2.122.0 - Related: RHELPLAN-25139- update to master container-selinux - bug 1769469 - Related: RHELPLAN-25139- fix post scriptlet - fail if semodule fails - bug 1729272 - Related: RHELPLAN-25139- update to 2.119.0 - Related: RHELPLAN-25139- update to 2.116 Resolves: #1748519- Use at least selinux policy 3.14.3-9.el8, Resolves: #1728700- Resolves: #1720654 - rebase to v2.107- bump to v2.89- bump to v2.75 - built commit 99e2cfd- Resolves: #1641655 - bump to v2.74 - built commit a62c2db- tweak macro for fedora - applies to rhel8 as well- moved changelog entries: - Define spc_t as a container_domain, so that container_runtime will transition to spc_t even when setup with nosuid. - Allow container_runtimes to setattr on callers fifo_files - Fix restorecon to not error on missing directory- Make sure we pull in the latest selinux-policy- Add map support to container-selinux for RHEL 7.5 - Dontudit attempts to write to kernel_sysctl_t- Add label for /var/lib/origin - Add customizable_file_t to customizable_types- Add policy for container_logreader_t- Allow dnsmasq to dbus chat with spc_t- Allow containers to create all socket classes- Label overlay directories under /var/lib/containers/ correctly- Allow spc_t to load kernel modules from inside of container- Allow containers to list cgroup directories - Transition for unconfined_service_t to container_runtime_t when executing container_runtime_exec_t.- Run restorecon /usr/bin/podman in postinstall- Add labels to allow podman to be run from a systemd unit file- Set the version of SELinux policy required to the latest to fix build issues.- Allow container_runtime_t to transition to spc_t over unlabeled filesAllow iptables to read container state Dontaudit attempts from containers to write to /proc/self Allow spc_t to change attributes on container_runtime_t fifo files- Add better support for writing custom selinux policy for customer container domains.- Allow shell_exec_t as a container_runtime_t entrypoint- Allow bin_t as a container_runtime_t entrypoint- Add support for MLS running container runtimes - Add missing allow rules for running systemd in a container- Update policy to match master branch - Remove typebounds and replace with nnp_transition and nosuid_transition calls- Add support to nnp_transition for container domains - Eliminates need for typebounds.- Allow container_runtime_t to use user ttys - Fixes bounds check for container_t- Allow container runtimes to use interited terminals. This helps satisfy the bounds check of container_t versus container_runtime_t.- Allow container runtimes to mmap container_file_t devices - Add labeling for rhel push plugin- Allow containers to use inherited ttys - Allow ostree to handle labels under /var/lib/containers/ostree- Allow containers to relabelto/from all file types to container_file_t- Allow container to map chr_files labeled container_file_t- Dontaudit container processes getattr on kernel file systems- Allow containers to read /etc/resolv.conf and /etc/hosts if volume - mounted into container.- Make sure users creating content in /var/lib with right labels- Allow the container runtime to dbus chat with dnsmasq - add dontaudit rules for container trying to write to /proc- Add support for lxcd - Add support for labeling of tmpfs storage created within a container.- Allow a container to umount a container_file_t filesystem- Allow container runtimes to work with the netfilter sockets - Allow container_file_t to be an entrypoint for VM's - Allow spc_t domains to transition to svirt_t- Make sure container_runtime_t has all access of container_t- Allow container runtimes to create sockets in tmp dirs- Add additonal support for crio labeling.- Fixup spec file conditionals- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- Allow containers to execmod on container_share_t files.- Relabel runc and crio executables- Allow container processes to getsession- update release tag to isolate from 7.3- Fix mcs transition problem on stdin/stdout/stderr - Add labels for CRI-O - Allow containers to use tunnel sockets- Resolves: #1451289 - rebase to v2.15 - built @origin/RHEL-1.12 commit 583ca40- Make sure we have a late enough version of policycoreutils- Update to the latest container-selinux patch from upstream - Label files under /usr/libexec/lxc as container_runtime_exec_t - Give container_t access to XFRM sockets - Allow spc_t to dbus chat with init system - Allow containers to read cgroup configuration mounted into a container- Resolves: #1425574 - built commit 79a6d70- Resolves: #1420591 - built @origin/RHEL-1.12 commit 8f876c4- built @origin/RHEL-1.12 commit 33cb78b-- built origin/RHEL-1.12 commit 21dd37b- correct version-release in changelog entries- Add typebounds statement for container_t from container_runtime_t - We should only label runc not runc*- Fix labeling on /usr/bin/runc.* - Add sandbox_net_domain access to container.te - Remove containers ability to look at /etc content- use upstream's RHEL-1.12 branch, commit 56c32da for CentOS 7- properly disable docker module in %post- depend on selinux-policy-targeted - relabel docker-latest* files as well- bump to v2.2 - additional labeling for ocid- install policy at level 200 - From: Dan Walsh - Resolves: #1406517 - bump to v2.0 (first upload to Fedora as a standalone package) - include projectatomic/RHEL-1.12 branch commit for building on centos/rhel- new package (separated from docker)/bin/sh/bin/sh/bin/shcontainer-selinuxdocker-selinux 2:2.224.0-1.module_el8+712+4cd1bd692:2.224.0-1.module_el8+712+4cd1bd692:2.224.0-1.module_el8+712+4cd1bd69 2:1.12.5-142:1.12.4-28 selinuxcontextscontainer-selinuxREADME.mddevelincludeservicescontainer.ifpackagescontainer.pp.bz2templatesbase_container.cilconfig_container.cilhome_container.cillog_container.cilnet_container.ciltmp_container.ciltty_container.cilvirt_container.cilx_container.cil/usr/share/containers//usr/share/containers/selinux//usr/share/doc//usr/share/doc/container-selinux//usr/share/selinux//usr/share/selinux/devel//usr/share/selinux/devel/include//usr/share/selinux/devel/include/services//usr/share/selinux/packages//usr/share/udica//usr/share/udica/templates/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mcpu=power8 -mtune=power8 -funwind-tables -fstack-clash-protectioncpioxz2noarch-redhat-linux-gnudirectoryASCII textSE Linux policy interface source . /etc/selinux/config _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if /usr/sbin/selinuxenabled && [ "${SELINUXTYPE}" = "${_policytype}" ]; then if [ -f /var/lib/rpm-state/file_contexts.pre ]; then /usr/sbin/fixfiles -C /var/lib/rpm-state/file_contexts.pre restore &> /dev/null rm -f /var/lib/rpm-state/file_contexts.pre fi fi #define license tag if not already defined/bin/shutf-86136cd38a0af5e0b844ade4aaec1069d2ba01ad22e8d7d8f797b2a3b174313bbcontainer-tools:rhel8:820231016065943:20125149?p7zXZ !#,Ï<] b2u jӫ`(y/4ǎ8_G{=Ӎeb!i{'FF[mu@č) NW)ΑKHU;fP#`UWl rܛAL&bke #Tg'23X:k=[d{-RǤl^(F|pVXl!|alpvvݷp?Z%ZuV9%4ts5O!}쁞A<?N tR!@PbuMpG]xSG /X­J/QzPScM!(D_ka/^_t&0GSQ3Rf?>8NS70 j,6g V?HG.u>I<@itS#0FWi(q#+dy;|s  o~7 {`d~ t04Ş9!Œ+v%8!G\X#Ի~" \w[]qE2Yvti>卧Þ ҿEE|>fI߬#9_.'(- d8\uy5Sm[BT]TwM ?|۴q7i Du:C8e88WadSȸ-IiVpl3npah͖ uAQv~+‡J@0H.2jlo;xmp;Vh+!jI4{z隲_jU[FlrJ<,JSQ;[›qFd:Mx2tm˿ǟ!w+ؓ ÎϪF' jWRi"JO͋)|̟/˕Z?t  i{c|~~2*T|6*s=t<ƍmzβhu qhs ^u$[ w!ƫ?4v%ڈي/فChBo 6^F0y٦CP_,fQ\n\x\p2JsYk1ߴ} dGA@jКW[dW*&|3s cU:b?N2dpuC2޲h }i;WH`Ci't #3O_?VXl)tTqܴ,fN^@f*&_=싽{f ˗spj"DYnzz͹Sͧ'%3[WL \?t틽HeSk{\G'K_B̼zv悺0e|֬Jrd]& :7~TAr)ჸ8$WgoeVXDŽ̗z Z VLՖRt_HM) W^P%{;8Y x/+>L)f*yuA Bɾ7ݜn?fхM| 6LtS=q>uܳ|"$zM uAqzH^VRL錉)~̌+5uZSEmwq|ѻim?u -ڼS;c~fNڧ=ւsTT6Q+wJta8p-*J<$=ujԠ,4s:q㦛qbYKkr(xaFUK}ݴhJk(u2\0+[ؠȁd+ -FXS!Y5u\()2l8Qyf$ 4YY.șQ.IK|XU[0$'0uc䭬0c0WNjdc 5 a ˓G{=*U"}yޅhWױY 6q GI hAsXOHN!)D#OxⲾ4T,sedSe4\twR1]Anf =+kE8`$Xl.>_ O{FTC:əb^?kC3>, g{/>mu,  B4U?Mn*gQ6klH(H\Zp؂%Gp'6L躙#${鍻xM+oNTi"ۭC *$nhQ= YD^ծVtMc~@:+qYuZmwfR'T@Kc.e*#B6t0mZ{X*-#&"[0I%nc$([k{I5'|jEv l{dL0ŗr3}Bvl'Av6ﬞo,m3 բl՘1ۆr[JŨw!ԀJ() LdS9TxR_mW.,on\ЧuH LK[KZugQlxtc,l0sٲ&e޿XRǡs zGGhO30K+]` rGnՃKm#%u `]Lr;_mM ioXIqdwhm$PS19< QRۍI̻B4*z Т WVLsymD-'mo/Hh(8}1|`pEr@+*ځ{ S?!qfFk-;+Jz }yB`+2|T]/B k4#xmgG)V)ib<79ٱhć"aZŒ]b1QϪd6dVfm<1Z`*#8J]G~E0r ~%D0`3Zq'('G,%ٹ.ZCaF-clhz#u0B 5ӬK`COvcs,39 ݃E@o@4Fäi=;(>^lE 4|X,`mＣ>_ѝ@(O?ŷ7ۭjKؚb-W(ݟl+M46Xk(>~o67^W!EsO 4~23[V_Z;NxweױonZnT ^MF3\P1("i> 9UXn3 c<+1C MmޞBaJcbXt4 t/Vl JEw,vjJ8Kڬ^ 'V^/}|Pm?%iw}(L,DM]IѥV hg8K0J) w.r]:C(B_$+vhUKNc/x2W.NP<_+5CSA])~O=R /Ni])3,\"l-{J%BͱfJ9:X%?!VL)`>tO{Rʓ/׺'fwŰٱ8xӺLf'aaK9oͅm5qbt WTHv~зL?eS,~\ i "-bԐ !fB^od ,  ":㊗,g1 e0j>52BH4E^eQHYJJTp+- F:[r_O|+嬄e1kaq2|,08]fnd9ukNUX  f^+O Kو8ĮKly.eՕ<pD{(B>nw&4l 7_2zFFOWS,'sWAl-=N>~#X@x~o{q7 ;/e:rh[+FM(8 VQw,~NV"T@öZ16xqۺCUA?0FTQj+cVШH J)[0';ՄT5]ٝh˲$(/͟:+Te,Y/;hmOoRRGc"`FkE-µ .qw,Bu6E>CBJ0들N o欠ʋf[Tݏb0-J+m>%v1‰ikAN \Bn;z1չ7}g zeb~<f I7ݫ<^sỀモ }=/,6b-4:&yFmA@tdD HQ 9>OQ tyFDP^HT9"k.PWa Tɓ&3Rg]@,0S`hkYj}~Н2XOf >H*vg86t&L9/AGCde?׼*Lvܺ'15=Y,8űn\-wo*`\0f0Pl +2*J r8$ӔA@1{c@6:  4}*!~M grE{x{4Ptt_6v`2|bsҏ9isi5({KCJij UX[5tqCIYB97~ S/[Uߪ+\\tϫlq6VE'Z"Ͼh5n"gP`y.Xg֡f/8z-AD6LB*/D/͔C| aKmh@iͪVJ rǨ/ބ]x`r@tEs#Z9 ᬖ/8 PǍ?7Knظ 8vt4Ok#p .֯z6iStY\ =2̷SXFZpSe|J'K6(KK N]Ia %pt mѕM3/|jkܰ%w 2 b_Y-eRxP=*)Pr~kRbc]甸Qs|OUӴC6 `Aҭax QZf|F'˿ =XOȀf_=;P<44~!-4C@j ErkS`ٵ[g4-!ʃEr\Zrbܘ]9g00WYu%6ClZP]Z4,|jsclj.2 19`- [j)~7iLG$7{hf׬znAR6h T&(4(Ja qj(CRCf:ڈ?dt 1+RhYX8p蚯!iNdCϷ'VC }f݉Kk 2AiG=w,v.Ik]S݇QwuxǶPe;uLqoG(_evaE$PRqevӐn腽>Gkw<_Ӹ*\J3Qx)P[0*NLaqd\y`4vN٨Qc)i'QSm"mM7qh}m3`K6 tN*_ev YUC$|\_,)ՃPXvJ003u2[=;.FCQNaݾxUUVEG 8TǓ&L !Թ;}#mP[v\QadM^N,(z~F_N Zr7‰  d.3ɅJn }țfu jV-29P0U'I` zNTW.H@dEt oz fik%8+ѸE,}hjQ5h{J,'cxN Ʒ!UI5ޒnFKfJz4T΋b{-.ٗab*͍8{KGE+;kA3';/U# ^;\CSŕx;h]qn֪5 ~P̣uK`i"ZrO.t6}9J佘H0\S/5&gfgV@+pspT6v[b&|l~(SUD\آX nyuD}uUBȁ膻+-Nnt 'Ĵ=vzmB?Ϣ]ơhWt~EHE=-?Ra`q8 Y NhVqEy_V#xlpx2!:\vQa"C˱kklRJ)wI@pz&?DZ36 _<γ?D&X @4iOPZkixD u"#z&$t_B,GK]꽭_zşgB(`tw5Ҫ1)C |YSҝ-9 BvnZ{*xp c]W:5z^ŶcX츨KꥉisRpk:)nߥ hIJ4t98uSߕ2Q;k%r.,¯q7ERdH)'sɘRƤa:,ӽLplwus~7",5*@hS *.d[]i`kWKw-2#EXG?]~3Ո?9c0dϺ ҈Pj۩lO4r 0R.ZĶT<ˡ qqC'rY(r#YJ{zI_5L7vPX$m~ϽuxO1lŌ(&JmGDl+q5] d\96skf){sgxjfavX.}[*gz+GkɠMx@!̆F-qKPlnxO0:9HIx LETKjvjsNwx? AF~h#Eg32pNIV/q(OV߇:*/#h8ӦS&l),rp,nXJF'b;9v7h?/˷+B \Ntl `5fAqX|ZىX|g B$!`©N9ܴէeF38FΚ42 }/A0J$Z{pYNR *_FhOLrJ^:5VM't2ɩY/(?5"r6 .H#4V/ޫ?3w_?AlZR6 j"]*,*/K3ɤ]4HaQƿ"vJ 4ޖ[F\iEOe@ֲТ{>y L)Ęxa2m1J8rw knqk%20{?߅|+$tAOtJ R@v$ ]Ȯ;˷Uo)H/FlS;PvLY|XWynF|px~_o/_@mQԁW YczY9#}wi9m6c$jrb0$ W#$O^%ѓŅa*#7S7A^m6/b\@ggv{MnLƄRSo! !v(6s=!Y x]+pI'Q!bt6\OKb_0/?HI-\RI$W2AEMYw >#y|;%s%=M1wX ճ) 2)Y>jHQ-*S!/<bOPjn0.R® A i pم<hN#E;bk/{d @]F#[Gzs9XN5ݴ-U.OJ xK4eD;gMWtW!_Rx/'bޤc+H?ԆE,9@w[zK}ıxH GID5Xܮ X/_RB>gjWA=f On/GKRtQ:GϞH( %~ G3ĿrFC؇{Ac7^ {0NzLJJ6K֡ToQ5~֫9baz7M˝H[)ol!f.ʲIw]8pu_SUepL ւoE@qbM|uMZFf{%[إx\A–*(nm-}RF^Ԁ.zǾ_3.;smER;J"dkhR0=?06i_>ȖOn'^:p^[Lc 3@͸}_Wˣa۱5<I$LڱJ|2ݙ>]I7}ˑ Rdlj<rq5ѯ ؗmdrf˪9%Xz!K+' rrV9Sck13(B,Z^܎~tb6>im{k.-' GD^PDvd_vB|[Bq+S4NmyIXzraz̳-vб5h߄amӿES@smhڔ޻BL*>@ʕR絻X|k &0.)!AWA`eId"i=n)pt#,8'FӖp pIg`qPS=c_!N-@7 "V\H6x=Dmd{Wu1/퉮9A%Iu|<pd#DB'#t$ccA\u"'0%rΡazŤ׃MEi3%b*uM6O0C</WMC]b+PV.48}"u]N-5^9RZCV  ?9P6R˺LBe3(qyIkTck-2niyuD~if`g,uӓ0t{` ]]<<'"V =r1lfZaٔ Յ706]KМSa`MFtu]dL#Iy}l*Է%utͲQ]O;n]Z*ru{÷ceJZK 558q5Q d.++[T[&tm;+v5t8BIܾ:6uRz0eɴFFcaz .t䁱'b}=g0$[Dң|Te)͂eoW۪X] 8d^7wOg~.Kչ _l;J{:JGwH`:IS(؊`j $kyq)8^PVrM}!%Ccz₟#nmM3<9 U+ e^Ek Nmy-k.: 綴2z)R`?ed|\8M?y2W3z!i&%úi,{M0/q'a]-8csVq%ERΔSF=DSЃ֐uQa8/t0>X=sP:2;ڱgUCI3H# qyY;Jyp+n{KE\!f Yѐ ڃu)ܹ#:UݵŪ7[c˖nW?/45I@mC7֜pZFtM%`) **v=V |{ROZt#lji=(MfH!QbV=q@x 8?ݩzoyLOۢV>3324pűEE1Կ5" oC s%Kys`N#i# wd I [oZL T=b%sCj%4 F\"ቕOIԢ8u:<7mnkt3E:u @1ܔtN1$RzGtrN:-CA*Ziؙi,xy(4|b"Up)==ao}By9ked `QeyHпHZS:ڔŬEMiwa+4oCkQ^1?R~\HMcm*2X碮xKYtOКEY ™'1M7SnWQ!lP$"Arkq\@4^A -rsx6V,M4"'lmUS phL ]_ТNY'xeC4s<- rw? H&4..CXѓGFu /)@ 7J"V '!sԄⰱ+~S+t'*d am@#gVGre'!$JflP§PsӕNV+W{Ǐw` 1mj!p\b;ǥmꁥT /v&Gy(r6@մm4$-nNiyom2\Ŷ؟ VqheعQ%nY/Yw&mlZ~?o˴ueCeD+dl7,LSC3eV<,o,N5l?sQ2,@NכE*fU ;lK-D:t-]6u5dtTd\)NYk^E7N|KJT1@݁DǏm%sY@ᖏ2a7[sǭ,_p`6NFфXqG ɐCUXoT"&>\-"P*8@[ .U~b8VsvyA)C PDm1-t[Nk6S-fƕ{V\TiZ"(Vep-j@] /06@K k+ UGT$KJNC)zzҵM)Nث50$0/AsNȣji7A?6vEĨMr #I#f~LUb,i@B,h -=AhkcdVMq2٪%~Z>L'̬|NoKJ,(|׳rSP%9*ol%*$&BF9iS! e8"Wvc\91tT$uf䢔=(! ivKĤ7Njvv%:Xe4s ԦW4:2Iģb0IܖO L{˵gv+3?Ae.ntlũ^^dyJZQTb#=_&E _ie@ c(U6?~SïIZG$J.A_3O cFL(絜FhS#g+ Q#02 uod}s3v˺ prG,3ڑX Mel.pd:iX_Ӥ{%z|)7Ncx?NmH~IQtem*'T¡Fn1XR'U"(;m gB``+@Qz1" )>hŸ"q@ɲPi jGb2!Sk`#)khPnȂR#pNy)gP9]O>#:19}FaȒnqt÷O2S؏RhD%N zac/)\@ P^Y2zv9Eu):/5h8ۙ_vKHx$agTB2kt>Ȗ*m_}aRڼhB\Zpj,[(iPndSZ)K Ih5φ IN9U'OZN:>Nnsua@Q @U,@Ӱu4{M~MK jm&u"JgSEMcmpJS<>^o^fFj[\YbGZbdL\ݵ@e>?D[Jiul.u?~3r1sSFu JdɶY  C$q̽7swdRDܵs5PGI&L@2t1)ģߝ >Wft ըS6Dbbc38hIc;kǵx,zNEC]:NOdAa,!Lc;#ܧ!li!u`Gq]15W pf@? )=W&f-#o5B9$$ƅ|SJnus[إ t ߯2hR"@L잜>/VOrGZz 8oϋ,?O2Tw Wv.1ᑗ"B:ޠ {> v|4$y*J)KL> (V,!V |5d6WJz1<+Gb(U'g?t/K'yeuȾLP߱HFT!?.w>' 9~Kӹ6%E*y*wP ͕_+1#a(ʤuzU(z&hBxwCHte6mr99B3O3^[4AWK읒rAv^gs2zvRcbֽ?ӨFRx"K/' '9R:Z:z#F ݶ;w ! SdޭoT(l*  7ҼKxs(A+b0\ˣ+\Fa_\-^  D$KfҮFһ BDŽ4>:^l0G׿nǮENp*s9͌k{#,]Y,HR~ovNP{u@pV|a.41v/ٸ9J*GyPho$gLhI2:3Ζ`ʛk0OjZ.u6OnmlP'(ԯ6_C ye-8ٯun7O+qe&kխl&(F__pz֦7j'H0#|t*+EV2G{(>,banfyfcdB~w(|;|sCK/;ZT΅7k8S}jPo֚rJhhO?I-$*u'_w2+͔- 񕢐?: u-J{ V 2Ѷ);>ЧD'x< *P\.ݖ(1x,9I^\{!~#oo#]q= Irmzɯ"@0'fxЃ|-jHf6 p+Cҏ%&/8v:wM m6o6ＸޞQSFf%Xbk+v0POiiDݘ YO:f#|ҺG֡x fw+Mėkf$=RvErќCRЇ]7EKM_}0NHp߿yZ;@`w_-U1B7A~|I IG 9v4/y!+mb[0ոoL3=?HNY2`&x՛/g4zcROǁ|V,Dq_tj-3J#QP O 9e`+Ne,`, O"H$.Q&< b-[;ff7=@@*K4NG+5pdb8+="dyݺ*lYYve>m ,{Toh]p6a68(QP}~nljeئy".-ذ ZAɳSwh#?ґ DEq^rsZW_(f\mKlלqo!AHIY 'rũ|E3-{H ~尗F+)VcZ4))P{C<2&d&Y+A~ `tgzaܣ_" \a: ,nNPeY7<#[n\H`=D¦7 ßѐErz`9K&OjlVF7q/突%2 W W-wh WvX#g%=4G9H1-:4DaMz*^_7\ d5f4V56f _3tmŖ'usD*-Vcq~.+0 3Gp)3ppPX})X9,?ݨG/sS}*E.gRiқ)^wιO9#K)-p(TscAstGHji\93;qI J*ۓ<PN9"[n4_ǬaޙʥԞ#z8T<.ſܴϒ$7D'.^Qr[FT:qz apHcxӱf}2P=ylm?YgfA{鰚0PJn}u3gdFb̪>{H*ge|yiL̎{#j/֨tBYc˙ M" l{eJ٠eTh6~L⶗{od.mgUP{7 tÇn2ᢼDh|u|L{$x1pfC\xW^!2sJMh.XecAIney4Bu忚-1+-2[gm-2#K@ղ4yyj /PIS!{U \wC1i8dѰuҦj:<_& Ul\N:pSy>l@rMx?3ګ b ݘөWSҔw7_K+?T.a!@R5r/m$ޒ ‚gyFLP/ [9Q:5qi>S@fj"|֙xYUfg '=A3bMW?6R)4ZBO/GJIC=;`X,Sc}5Y=15L,;T9nf9/0SW!gOB4$_x&z9$=5,Âΐgi5:3)A4WB&: !^ݒHאs\QEYYd ͨ;Gz3[6*J ._ ~|Fm׮"u)U@"mG[ʛ8fH]eZ;獲Lo,sW [+z>޼><SȌFQB&|xuC/H::7P|3Jv5&b%)|l#nL{BLXjao|H˯%6VJ:tڕs)Xa}7W|oe3W@rkV*]h#ݒy֖.ZM 0!& FW㠡6/yPN}_Q&cB ar Pm5oMn\u?`sqWڒh}͢]ٕEV >f@L[U#L|, K|0 xGS_j+.xk _"0]+25qmF7ݕM#Waiw5 U Waf5pQ*\:m$(dv'yWӧسo-z| E&&ƪ oZ]*vvk:D\9߅SWR{'cك_0B)#wiD~wLϷKRܪFaޗVjs:-dc%JIZ!cKQα5< Әr]1eUh&| ~e\w=\x:Zj ^bVoS ws zljI Z6[ؙ/5oɔdžR bִ n-?RB|Fg?!c^g\Cs#h5!z!Lxtj{q2OG@[('dHX#%lȍ)~^$%|mdn˕aZ40U :aV99bq"Z@U,@$`$̀}vIVd%\R^aOA(IB֨:/s6}t0tzԙeYby޽ԲzΔ%BM8^Wʁp\@\~6;L% ;jwqZ@oZ(*.!9$djZcnihȌNHG0͐k;`?|0oތ ]]̉I;b.[hKxe>h[a2 Yt'% N2e^`ieTHHVuO,Ӽj]4<|a Un^Ӳ"ޙ|V(eR5֘7A\UG BͷΕFpz`{|3ɦ@Qu؃bQe;C(y;_nڞ[‹;q[9ͬC !֩]v_kĝ$5[Љ|Yץ}FRmde|!NLd؋҉+,NRU!+78ÙjwtH~Sќo-m)Ƒ#֟yUJ`@BW}QXfi40|*"Ik%oTK}f\KfqQ|N+2_ݔRnr3M6#AA{$pJ(Y 4C%J58ck]ֺӒ!l 8!:l4@p_qטrH&9ܒ]8>O@s5h^gyRY`PuEHd` -"svxe]2 ¤۝h _.Sb\p;T+q7Saț =c^uů/jFcЗ7F&ݛipyo!|-nHX\>m:߿EA)ݕHFCLS<&^M~-o]k9ӑ%Ri\j2P ְ\  `m-L6QljViWti#&]볨,vpD2̖?l#! kQNlK?[1[e'# 7Ъ\n (J4o Ð6.Ә4\B0Z6ZlL^RE Z6R`o*O@31UWcN"A3oX59˘ Ě7QNens=H`n4^ډ%縫A kf$ŮZp>%t "U!18wqlL3.& g܀ |Con{ -0NhDg8nyD4dnkE )oWaDMBD&'3^9k[T"#5bIa81}#b6uOwEɘ"#vgC8M`vw9G+hb 8mgZEpchO p)ӞqKj[ W][>~ yў;4†=BƱqo7ȂIt oNŽule|rv_Cd瘩NƶjL5 ㆯ|u\0[F\@y[{w] JFtsDuZ&/)T Ɋ¡MX"!!<dŗLZx-woI 03Aʌq?6+4#zO85r 3!:uwP̰wv?~GG)Ĭ^O\+vZg`Z\E0ҝ IG tQMc@ p{s1$xZ$^[srQy`զD>.U+Zbz_`/36S]][T \t,zI4{379sEv%QBLEFx2hߒ=mi<H:zS%[U2vd`~-eL1`n s TE=Yf_-IqKK31u8 G"y/K?CZ ц8\]Ldi#e4ᱞ5촩B:+ 0ȏHtU;̋srNۺSV91>XAX`463E@3,~&OWL$ 1͝ CxfXgIɽZI#%@_f[c\>oU}ꤴ)|L 1"#C4@iIw7  cz4#|pePbbCzVz> z?+#ǧ!\f|wRo=] qxCK?*:85B[ؒLNx*$]{J|yАK\ȧVgyVo(ŀUHj1h` |)yA~?п9˶~c(bO(Vη1ɩ`qC{j0W Wl6j6U9'ld[Gq <љĿu$1Wvb,n`Xh ?g~"Cgc^/;8jɰfZ*m\!y2Uc8>DO>܋ȯ(hPa0~[5mҘ4CRGݡ=eBu`$ɍ~3Fb2}aGyޒ~o[*(!i3f;צJ}n>u'8(BNoVcĄs2bs1Bk6Q8yrXkM>l].B4tzL`dj9-KKj[2ox.a57Jxn/"S-vz'JLfyI@;gE#w$bF#:cĕdDK/Nm6~_ Сvh A  X'0?*$چii=}fw4XAŌPR8'8C߫;h+fi'Z)]!ߓj)#kK j=~7$lVpQGu||"XݜوfsJ{wP42[s;MʀFٷpF4WO_KeMK67ٛM^ 3&L^KW3E(1@tz`/+g88ZD|^/d} + U؊aq$z^b:u3z ͮ ^vپ^"̎xRXS'Aޓ!ۅOpݫ $qVM)5 ⵶U@j0h 飛Oȭ\F 6.cY,@o+`lzTb]|}Q80 VhdAlMؑ_ףAFņ-D:]-xl96D'/Z!f//၀t>ay[aLyS+^zƀNLrRޅV$3mIOsP?NwRo:M RI)%:!_]dz4핬 зh7O}xؓWX8rH|xrI`XX\26B ͿLN:馻(fT kܱS ~y 8=_.m,Q,,:ߪeݩ>^veջX7@yMBƦiI6*[joc̜궒=ϓf;SUcNuA'S4[g۔RRax~'Q[%Rz9GE(EPbj2? r>QUviVh}>sxV{cQZ^ z)2 ZnzWZS~ڐm2pt'13l_Ycc/9`ra"wl"υS?hBKܣqKد)jD2> M H誋[ᦔnJaߙTuՃkҜ4 +ֹw#ѽ>0'TW/O39I6z;VfT )$LUjJJũ&T՞FBJ$LU{z>RVI{4iLy[3ꏦ$(:d:C 3l|W\0 d([SR5nK [K Lq?67;BUݧw&9 ٢.h [_\ۼkRkYqQ'%AoXyk@F]y.z8}3a$=h9F.ȉhӖG T7\"9zA/E\?NCiE8hc$P'9dE7iB9޻6a_."Wo4VK&[ѹ&;3T `XI94qOu㓑Tba'RLE+_73&eyI*~f'Й3A Ci& }5!2'?F6~;|0qZ2h!~`*RKMfx5Τ\ <cϱssfBGʠliB– bmM9_-_OasP7e6FґaGiItYH!гJaoS]0hբBw?+}ݗ:z-p4Cʿ1NYqx~O={A{5jx ހō7=dR8}0UxǤ[T/b< N: 2U[ы=1Oڲ=J&F#wd$KALכ6ӆO],K8H7 Ƕb$m[Dc`>)w,LAՐěf8:1ן[jU\йkEp8jxa <"Q4i ?{~T TӺ~]f3A)2Ɓ|u;h㣀HYt?aҜL l~SAb'px\1@WN/P\3@Gkތcklȕh)Z RRU_L#K~~KVGK:pmR#bPFp`l4t'#[ #Z烧zA=g2Dy&đv6{-_+UO@ x=XYOLNa{/ڷK!8}?Fs=;.u(c/:EV_(=x췏yQz|纐<'5[EXVxp)%|)H 2#K'7LDwzLy7SO J2&zy9BQ +=LtF}AaA1d[D~`!OR撓<6/`5F/o|3=JVUS'bUnW~sUZԴrS>HaL{cROӕ5M'CF c#h`;^K66En /d"gir1KlI%M%|DkނAqR_ `DeF*|DEoI"b?8c`{yǪMNW !(^9LpU0u܁qگ ascH™̛2&]"cHk\#}0L][{A'LeXN>)Cl {WCO^kZT!o{cae4ujp>'7o:WLLA J@/k>RPJW lD`_SR\bzS_|r{IzH&sQe K^u;W_qPB:M +NɎX)5 c<(69ZC^=SٝTrN|-GPV>- ƄB*(&Tsudˁ/y^$P$ pX@Qa*9+n`Yvs!)%V&UC"@GRTXBѷIĉtzj{=|..ɾo 9zuFPDÅH밝/]n 5 ]׵^ he˙ǧ54Hn:^qy{u镕O56G(W)$@"M|:Mgr"heRi}ݘ7]n9dΔ hLLGdbra| )O^[ ðDʏTaj^ڍ),DܛfY}D<%$ѧwV65*;GoVJ<6>߽[`-%ih9 Ox|8AA׊$ĭ YZ