container-selinux-2:2.229.0-2.module_el8+847+7863d4e6 d>T  H ?Peí U]"ux9,iFG03?%(NkugȘ0]@Oy{BGLGs2PK_-lk}fPSH| ,.3%~ַ*YzY#,TD;MPYbϙ^3Xywp;ǟC3IqߥllS!O31[ y/ogEeFNߡV^%m͆-G028 wV>( egD*Ŕ$rewK#tyEhڗQ/Aj_"u_cC5S77-u j/Hd89jǫwsSţ)x QFJb@EvR=~"tlVcGFȫ-|=- t#x @W㾛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í U]cnڍF ZA?ȡz -ǙwLy(g{I INL=΁p<-_@ҙYVfe$Gr5MglF73ځ[F4?ߕSTC+SPP| 3&R"M$+QK@2Vl){kbU rN厽FXPzPi8 nH9,j㿇1U =(.|؍]yΊ6liYyOxۦ3c@b2>F*8^KtN,P`{,hfQJ{ʤ79GUM%O4lяqMXU חj՝kT" \Kbg]Squ> 4 g:hZ{/{Eg{K `CneS/bZo= 0xjyzþE#ѯFNzisJQpIo?od8 < d '-4m0 X    $  8   P  L/(89:.=g.>g6@g>BgFGghHgIhXhYh(Zh[h\h]i^j bkMdlelfllltlumvm`moKoToXo^ooCcontainer-selinux2.229.02.module_el8+847+7863d4e6SELinux policies for container runtimesSELinux policy modules for use with container runtimes.eHx86-03.stream.rdu2.redhat.com CentOSCentOSGPLv2builder@centos.orgUnspecifiedhttps://github.com/containers/container-selinuxlinuxnoarch . /etc/selinux/config _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if /usr/sbin/selinuxenabled && [ "${SELINUXTYPE}" = "${_policytype}" ]; then [ -f /var/lib/rpm-state/file_contexts.pre ] || cp -f /etc/selinux/${SELINUXTYPE}/contexts/files/file_contexts /var/lib/rpm-state/file_contexts.pre fi# Install all modules in a single transaction if [ $1 -eq 1 ]; then /usr/sbin/setsebool -P -N virt_use_nfs=1 virt_sandbox_use_all_caps=1 fi export MODULES=""; for x in container; do MODULES+=/usr/share/selinux/packages/$x.pp.bz2; MODULES+=" "; done; /usr/sbin/semodule -n -s targeted -r container 2> /dev/null /usr/sbin/semodule -n -s targeted -d docker 2> /dev/null /usr/sbin/semodule -n -s targeted -d gear 2> /dev/null . /etc/selinux/config _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if [ "${SELINUXTYPE}" = "${_policytype}" ]; then /usr/sbin/semodule -n -s ${_policytype} -X 200 -i $MODULES /usr/sbin/selinuxenabled && /usr/sbin/load_policy || : fi . /etc/selinux/config sed -e "\|container_file_t|h; \${x;s|container_file_t||;{g;t};a\\" -e "container_file_t" -e "}" -i /etc/selinux/${SELINUXTYPE}/contexts/customizable_types > /dev/null 2>&1 matchpathcon -qV /var/lib/containers || restorecon -R /var/lib/containers &> /dev/null || :if [ $1 -eq 0 ]; then . /etc/selinux/config _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if [ $1 -eq 0 ]; then if [ "${SELINUXTYPE}" = "${_policytype}" ]; then /usr/sbin/semodule -n -X 200 -s ${_policytype} -r container docker &> /dev/null || : /usr/sbin/selinuxenabled && /usr/sbin/load_policy || : fi fi fi6f{b0(: BA큤A큤AAA큤A큤A큤eHeHeHedeHeHeHeGeHeHeHeHeHeHeHeHeHeHeHeH8c04ac861d425e9947eb5bc06c3125d682dc981f6327e789ebe1c4eba0d856fc7fae14152b8ba0da99d2e5a4f0ae0560d8d5286b63a573231284445a99e8c24a9e4227f868d83af4473931cee518f866ed22abf972db1ca104c674038475bdcf1f577dcb5732849d952a0d91d14dfa5b9cdbdf109dd8afea7b2d227782eda420c95d8badacc674ace0d2fed4fbee4d28d2a92799b23fd5cc30cfb444ee8896b71724330eae556d61248fca0b0920b1de3697d8cd42bf56da8d062a4265ed1b9f2aaad24c9578fa9575445ab4c5208b80b1226e49174e20bb2609de935466b9ba9eb7fd75efad4068dc1e00d43c6176477d13f5c759c1986174a340cb07b822119af286e5e19e15cffaaf7b29c745c800ef94c03d90ee90e0e8e18edc2ebf8f01280274d7f1512ce4677f123f310d300672d6872c3e1f3f13144cd5a03e85ba4b0a6fa6a05496c83b67185cb54805263c502181507d1ae899909090caf986d623dd478baf01b7ef0daf441b7cd616c79ea77eb8e9d2725976b9edeec3991e3d5f67de3bb8fb85b4531702c64fa11b1fbf1746cbd844560f2f680b862915f25d69rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootcontainer-selinux-2.229.0-2.module_el8+847+7863d4e6.src.rpmcontainer-selinuxdocker-engine-selinuxdocker-selinux         /bin/sh/bin/sh/bin/sh/bin/shlibselinux-utilspolicycoreutilsrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)sedselinux-policyselinux-policy-baseselinux-policy-targeted2.5-113.0.4-14.6.0-14.0-15.2-13.14.3-80.el83.14.3-80.el83.14.3-80.el8udica0.2.6-14.14.3e@e@ed@e@eeqe'e ddhd@ddm@dcp@dbdRLdd@d @c @cc_c!@bVbbkb_b<]@b%b@bOb@aar@a@a@a@aaa+@aaa]aQ@aI@aA@a'@a&0a /` @`9@`Ȗ@```q`@`@`N@`@`dd@`Y@`&m`_T_`@_%_%_F@__"_5+@_16_p@_5_X@^n@^Ӝ@^@^^k@]@]B]]@]|@]@]X]W]R@]@\M[[ͻ[[@[[Xf@[L[K7@["X[@[@[[[Z@Z?ZZZ%Z%Z@Z - 2:2.229.0-2Jindrich Novy - 2:2.229.0-1Jindrich Novy - 2:2.228.1-1Jindrich Novy - 2:2.228.0-1Jindrich Novy - 2:2.227.0-1Jindrich Novy - 2:2.226.0-1Jindrich Novy - 2:2.224.0-1Jindrich Novy - 2:2.222.0-1Jindrich Novy - 2:2.221.1-1Jindrich Novy - 2:2.221.0-1Jindrich Novy - 2:2.219.0-1Jindrich Novy - 2:2.218.0-1Jindrich Novy - 2:2.215.0-1Jindrich Novy - 2:2.213.0-2Jindrich Novy - 2:2.213.0-1Jindrich Novy - 2:2.211.1-1Jindrich Novy - 2:2.205.0-2Jindrich Novy - 2:2.205.0-1Jindrich Novy - 2:2.199.0-1Jindrich Novy - 2:2.195.1-1Jindrich Novy - 2:2.193.0-1Jindrich Novy - 2:2.191.0-1Jindrich Novy - 2:2.190.0-1Jindrich Novy - 2:2.189.0-1Jindrich Novy - 2:2.188.0-1Jindrich Novy - 2:2.187.0-1Jindrich Novy - 2:2.183.0-1Jindrich Novy - 2:2.181.0-1Jindrich Novy - 2:2.180.0-1Jindrich Novy - 2:2.179.1-1Jindrich Novy - 2:2.178.0-1Jindrich Novy - 2:2.177.0-1Jindrich Novy - 2:2.176.0-1Jindrich Novy - 2:2.174.0-1Jindrich Novy - 2:2.173.2-1Jindrich Novy - 2:2.173.1-2Jindrich Novy - 2:2.173.1-1Jindrich Novy - 2:2.173.0-2Jindrich Novy - 2:2.173.0-1Jindrich Novy - 2:2.172.1-1Jindrich Novy - 2:2.172.0-1Jindrich Novy - 2:2.171.0-1Jindrich Novy - 2:2.170.0-1Jindrich Novy - 2:2.169.0-1Vit Mojzis - 2:2.168.0-2Jindrich Novy - 2:2.168.0-1Jindrich Novy - 2:2.167.0-1Jindrich Novy - 2:2.165.1-2Jindrich Novy - 2:2.164.2-1Jindrich Novy - 2:2.164.1-1Jindrich Novy - 2:2.163.0-2Jindrich Novy - 2:2.163.0-1Jindrich Novy - 2:2.162.2-1Jindrich Novy - 2:2.162.1-1Jindrich Novy - 2:2.162.0-1Jindrich Novy - 2:2.161.1-2Jindrich Novy - 2:2.161.1-1Jindrich Novy - 2:2.160.2-1Jindrich Novy - 2:2.160.1-1Jindrich Novy - 2:2.160.0-1Jindrich Novy - 2:2.159.0-1Jindrich Novy - 2:2.158.0-1Jindrich Novy - 2:2.156.0-1Jindrich Novy - 2:2.155.0-1Jindrich Novy - 2:2.154.0-1Jindrich Novy - 2:2.153.0-1Jindrich Novy - 2:2.152.0-1Jindrich Novy - 2:2.151.0-1Jindrich Novy - 2:2.150.0-1Jindrich Novy - 2:2.145.0-1Jindrich Novy - 2:2.144.0-1Jindrich Novy - 2:2.143.0-1Jindrich Novy - 2:2.142.0-1Jindrich Novy - 2:2.139.0-1Jindrich Novy - 2:2.138.0-1Jindrich Novy - 2:2.137.0-1Jindrich Novy - 2:2.135.0-1Jindrich Novy - 2:2.134.0-1Jindrich Novy - 2:2.132.0-1Jindrich Novy - 2:2.130.0-1Jindrich Novy - 2:2.124.0-1Jindrich Novy - 2:2.123.0-2Jindrich Novy - 2:2.123.0-1Jindrich Novy - 2:2.122.0-1Jindrich Novy - 2:2.119.0-3.gita233788Jindrich Novy - 2:2.119.0-2Jindrich Novy - 2:2.119.0-1Jindrich Novy - 2:2.116-1Jindrich Novy - 2:2.107-2Lokesh Mandvekar - 2:2.107-1Lokesh Mandvekar - 2:2.89-1.git2521d0dLokesh Mandvekar - 2:2.75-1.git99e2cfdLokesh Mandvekar - 2:2.74-1Frantisek Kluknavsky - 2:2.73-3Frantisek Kluknavsky - 2:2.73-2Dan Walsh - 2.69-3Dan Walsh - 2.69-2Dan Walsh - 2.68-1Dan Walsh - 2.67-1Dan Walsh - 2.66-1Dan Walsh - 2.64-1Dan Walsh - 2.62-1Dan Walsh - 2.61-1Dan Walsh - 2.60-1Dan Walsh - 2.58-2Dan Walsh - 2.58-1Dan Walsh - 2.57-1Dan Walsh - 2.56-1Dan Walsh - 2.55-1Dan Walsh - 2.52-1Dan Walsh - 2.51-1Dan Walsh - 2.50-1Dan Walsh - 2.49-1Dan Walsh - 2.48-1Dan Walsh - 2.41-1Dan Walsh - 2.40-1Dan Walsh - 2.39-1Dan Walsh - 2.38-1Dan Walsh - 2.37-1Dan Walsh - 2.36-1Dan Walsh - 2.35-1Dan Walsh - 2.34-1Dan Walsh - 2.33-1Dan Walsh - 2.32-1Dan Walsh - 2.31-1Dan Walsh - 2.29-1Dan Walsh - 2.28-1Dan Walsh - 2.27-1Dan Walsh - 2.24-1Dan Walsh - 2.23-1Dan Walsh - 2.22-1Troy Dawson - 2.21-3Fedora Release Engineering - 2:2.21-2Dan Walsh - 2.21-1Dan Walsh - 2.20-2Dan Walsh - 2.20-1Lokesh Mandvekar - 2:2.19-2.1Dan Walsh - 2:2.19-1Lokesh Mandvekar - 2:2.15-1.1Dan Walsh - 2:2.10-2.1Dan Walsh - 2:2.10-1Lokesh Mandvekar - 2:2.9-4Lokesh Mandvekar - 2:2.9-3Lokesh Mandvekar - 2:2.9-2Lokesh Mandvekar - 2:2.8-2Lokesh Mandvekar - 2:2.7-1Lokesh Mandvekar - 2:2.4-2Dan Walsh - 2:2.4-1Dan Walsh - 2:2.3-1Lokesh Mandvekar - 2:2.2-4Jonathan Lebon - 2:2.2-3Lokesh Mandvekar - 2:2.2-2Lokesh Mandvekar - 2:2.2-1Lokesh Mandvekar - 2:2.0-2Lokesh Mandvekar - 2:2.0-1Lokesh Mandvekar - 2:1.12.4-29- remove watch statements properly for RHEL8 and lower - Related: Jira:RHEL-2110- update to https://github.com/containers/container-selinux/releases/tag/v2.229.0 - Related: Jira:RHEL-2110- update to https://github.com/containers/container-selinux/releases/tag/v2.228.1 - Related: Jira:RHEL-2110- update to https://github.com/containers/container-selinux/releases/tag/v2.228.0 - Related: Jira:RHEL-2110- update to https://github.com/containers/container-selinux/releases/tag/v2.227.0 - Related: Jira:RHEL-2110- update to https://github.com/containers/container-selinux/releases/tag/v2.226.0 - remove dependency on policycoreutils-python-utils as it pulls in python - Related: Jira:RHEL-2110- update to https://github.com/containers/container-selinux/releases/tag/v2.224.0 - Related: Jira:RHEL-2110- update to https://github.com/containers/container-selinux/releases/tag/v2.222.0 - Related: Jira:RHEL-2110- update to https://github.com/containers/container-selinux/releases/tag/v2.221.1 - Related: Jira:RHEL-2110- update to https://github.com/containers/container-selinux/releases/tag/v2.221.0 - Related: #2176055- update to https://github.com/containers/container-selinux/releases/tag/v2.219.0 - Related: #2176055- update to https://github.com/containers/container-selinux/releases/tag/v2.218.0 - Related: #2176055- update to https://github.com/containers/container-selinux/releases/tag/v2.215.0 - Related: #2176055- add watch statement removal from container.te - Related: #2176055- update to https://github.com/containers/container-selinux/releases/tag/v2.213.0 - Related: #2176055- update to https://github.com/containers/container-selinux/releases/tag/v2.211.1 - Related: #2176055- use conditionals from https://github.com/containers/container-selinux/blob/main/container-selinux.spec.rpkg - Related: #2176055- update to https://github.com/containers/container-selinux/releases/tag/v2.205.0 - remove user_namespace class, thanks to Lokesh Mandvekar - Related: #2176055- revert back to https://github.com/containers/container-selinux/releases/tag/v2.199.0 (2.200.0 fails to build as it relies on the new selinux-policy which is not there yet) - Related: #2176055- update to https://github.com/containers/container-selinux/releases/tag/v2.195.1 - Related: #2123641- update to https://github.com/containers/container-selinux/releases/tag/v2.193.0 - Related: #2123641- update to https://github.com/containers/container-selinux/releases/tag/v2.191.0 - Related: #2123641- update to https://github.com/containers/container-selinux/releases/tag/v2.190.0 - Related: #2123641- update to https://github.com/containers/container-selinux/releases/tag/v2.189.0 - Related: #2061390- update to https://github.com/containers/container-selinux/releases/tag/v2.188.0 - Related: #2061390- update to https://github.com/containers/container-selinux/releases/tag/v2.187.0 - Related: #2061390- update to https://github.com/containers/container-selinux/releases/tag/v2.183.0 - Related: #2061390- update to https://github.com/containers/container-selinux/releases/tag/v2.181.0 - Related: #2061390- update to https://github.com/containers/container-selinux/releases/tag/v2.180.0 - Related: #2061390- update to https://github.com/containers/container-selinux/releases/tag/v2.179.1 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.178.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.177.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.176.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.174.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.173.2 - Related: #2001445- update minimal selinux_policy dependency - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.173.1 - Related: #2001445- lockdown allow rule was removed - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.173.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.172.1 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.172.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.171.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.170.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.169.0 - Related: #2001445- Start shipping udica templates - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.168.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.167.0 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.165.1 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.164.2 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.164.1 - Related: #1934415- fix the build of 2.163.0 - Resolves: #1957904- update to https://github.com/containers/container-selinux/releases/tag/v2.163.0 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.162.2 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.162.1 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.162.0 - Related: #1934415- do not use lockdown class yet - it is not available in RHEL - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.161.1 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.160.2 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.160.1 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.160.0 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.159.0 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.158.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.156.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.155.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.154.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.153.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.152.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.151.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.150.0 - Related: #1883490- synchronize with stream-container-tools-rhel8 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.144.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.143.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.142.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.139.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.138.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.137.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.135.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.134.0 - Related: #1821193- synchronize containter-tools 8.3.0 with 8.2.1 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.130.0 - don't use macros in changelog - Related: #1821193- update to 2.124.0 - Related: RHELPLAN-25139- implement spec file refactoring by Zdenek Pytela, namely: Change the uninstall command in the %postun section of the specfile to use the %selinux_modules_uninstall macro which uses priority 200. Change the install command in the %post section if the specfile to use the %selinux_modules_install macro. Replace relabel commands with using the %selinux_relabel_pre and %selinux_relabel_post macros. Change formatting so that the lines are vertically aligned in the %postun section. (https://github.com/containers/container-selinux/pull/85) - Related: RHELPLAN-25139- update to 2.123.0 - Related: RHELPLAN-25139- update to 2.122.0 - Related: RHELPLAN-25139- update to master container-selinux - bug 1769469 - Related: RHELPLAN-25139- fix post scriptlet - fail if semodule fails - bug 1729272 - Related: RHELPLAN-25139- update to 2.119.0 - Related: RHELPLAN-25139- update to 2.116 Resolves: #1748519- Use at least selinux policy 3.14.3-9.el8, Resolves: #1728700- Resolves: #1720654 - rebase to v2.107- bump to v2.89- bump to v2.75 - built commit 99e2cfd- Resolves: #1641655 - bump to v2.74 - built commit a62c2db- tweak macro for fedora - applies to rhel8 as well- moved changelog entries: - Define spc_t as a container_domain, so that container_runtime will transition to spc_t even when setup with nosuid. - Allow container_runtimes to setattr on callers fifo_files - Fix restorecon to not error on missing directory- Make sure we pull in the latest selinux-policy- Add map support to container-selinux for RHEL 7.5 - Dontudit attempts to write to kernel_sysctl_t- Add label for /var/lib/origin - Add customizable_file_t to customizable_types- Add policy for container_logreader_t- Allow dnsmasq to dbus chat with spc_t- Allow containers to create all socket classes- Label overlay directories under /var/lib/containers/ correctly- Allow spc_t to load kernel modules from inside of container- Allow containers to list cgroup directories - Transition for unconfined_service_t to container_runtime_t when executing container_runtime_exec_t.- Run restorecon /usr/bin/podman in postinstall- Add labels to allow podman to be run from a systemd unit file- Set the version of SELinux policy required to the latest to fix build issues.- Allow container_runtime_t to transition to spc_t over unlabeled filesAllow iptables to read container state Dontaudit attempts from containers to write to /proc/self Allow spc_t to change attributes on container_runtime_t fifo files- Add better support for writing custom selinux policy for customer container domains.- Allow shell_exec_t as a container_runtime_t entrypoint- Allow bin_t as a container_runtime_t entrypoint- Add support for MLS running container runtimes - Add missing allow rules for running systemd in a container- Update policy to match master branch - Remove typebounds and replace with nnp_transition and nosuid_transition calls- Add support to nnp_transition for container domains - Eliminates need for typebounds.- Allow container_runtime_t to use user ttys - Fixes bounds check for container_t- Allow container runtimes to use interited terminals. This helps satisfy the bounds check of container_t versus container_runtime_t.- Allow container runtimes to mmap container_file_t devices - Add labeling for rhel push plugin- Allow containers to use inherited ttys - Allow ostree to handle labels under /var/lib/containers/ostree- Allow containers to relabelto/from all file types to container_file_t- Allow container to map chr_files labeled container_file_t- Dontaudit container processes getattr on kernel file systems- Allow containers to read /etc/resolv.conf and /etc/hosts if volume - mounted into container.- Make sure users creating content in /var/lib with right labels- Allow the container runtime to dbus chat with dnsmasq - add dontaudit rules for container trying to write to /proc- Add support for lxcd - Add support for labeling of tmpfs storage created within a container.- Allow a container to umount a container_file_t filesystem- Allow container runtimes to work with the netfilter sockets - Allow container_file_t to be an entrypoint for VM's - Allow spc_t domains to transition to svirt_t- Make sure container_runtime_t has all access of container_t- Allow container runtimes to create sockets in tmp dirs- Add additonal support for crio labeling.- Fixup spec file conditionals- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- Allow containers to execmod on container_share_t files.- Relabel runc and crio executables- Allow container processes to getsession- update release tag to isolate from 7.3- Fix mcs transition problem on stdin/stdout/stderr - Add labels for CRI-O - Allow containers to use tunnel sockets- Resolves: #1451289 - rebase to v2.15 - built @origin/RHEL-1.12 commit 583ca40- Make sure we have a late enough version of policycoreutils- Update to the latest container-selinux patch from upstream - Label files under /usr/libexec/lxc as container_runtime_exec_t - Give container_t access to XFRM sockets - Allow spc_t to dbus chat with init system - Allow containers to read cgroup configuration mounted into a container- Resolves: #1425574 - built commit 79a6d70- Resolves: #1420591 - built @origin/RHEL-1.12 commit 8f876c4- built @origin/RHEL-1.12 commit 33cb78b-- built origin/RHEL-1.12 commit 21dd37b- correct version-release in changelog entries- Add typebounds statement for container_t from container_runtime_t - We should only label runc not runc*- Fix labeling on /usr/bin/runc.* - Add sandbox_net_domain access to container.te - Remove containers ability to look at /etc content- use upstream's RHEL-1.12 branch, commit 56c32da for CentOS 7- properly disable docker module in %post- depend on selinux-policy-targeted - relabel docker-latest* files as well- bump to v2.2 - additional labeling for ocid- install policy at level 200 - From: Dan Walsh - Resolves: #1406517 - bump to v2.0 (first upload to Fedora as a standalone package) - include projectatomic/RHEL-1.12 branch commit for building on centos/rhel- new package (separated from docker)/bin/sh/bin/sh/bin/shcontainer-selinuxdocker-selinux 2:2.229.0-2.module_el8+847+7863d4e62:2.229.0-2.module_el8+847+7863d4e62:2.229.0-2.module_el8+847+7863d4e6 2:1.12.5-142:1.12.4-28 selinuxcontextscontainer-selinuxREADME.mddevelincludeservicescontainer.ifpackagescontainer.pp.bz2templatesbase_container.cilconfig_container.cilhome_container.cillog_container.cilnet_container.ciltmp_container.ciltty_container.cilvirt_container.cilx_container.cil/usr/share/containers//usr/share/containers/selinux//usr/share/doc//usr/share/doc/container-selinux//usr/share/selinux//usr/share/selinux/devel//usr/share/selinux/devel/include//usr/share/selinux/devel/include/services//usr/share/selinux/packages//usr/share/udica//usr/share/udica/templates/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protectioncpioxz2noarch-redhat-linux-gnudirectoryASCII textSE Linux policy interface source . /etc/selinux/config _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if /usr/sbin/selinuxenabled && [ "${SELINUXTYPE}" = "${_policytype}" ]; then if [ -f /var/lib/rpm-state/file_contexts.pre ]; then /usr/sbin/fixfiles -C /var/lib/rpm-state/file_contexts.pre restore &> /dev/null rm -f /var/lib/rpm-state/file_contexts.pre fi fi #define license tag if not already defined/bin/shutf-8aa4ae1d4a73c45bc9ff2cb2363694da46873b47bea6121df5452ae0fd885999ccontainer-tools:rhel8:820240123170629:20125149?p7zXZ !#,] b2u jӫ`(y/<ES*m=y? `HO (63MQ m< E-!ͦ*.3M EVA@I'RDwZifUA^Ð!AI:,h,H3O4GNd?rq#j^XsE9g$ӱ׎.Q2zcETӝMu-|8R!f1َ J˨5^;ۚo#'WYb#ys Пp>SEIc&76Af)$ |Oʘ!o^-- m(@z&8g>\Ulnׂӻ`ӓM'81gx50ʨϣ]gl@\b?B5!V7YHB,ऒ(_ɷ:Hoiou|;H"T;i' b/m&[e-N,Ǧ֒8cJ_%X-+_gn5CͲ3fDvjfȜϷRBW)J\8&y76aqaהM[]h1AyQ$MeC Yp"弒ߣϻ@L[m@I5 YPkewہ4?EmE Ar O\cuyM$R`D'^'6PҺ/l6R\nbNBr$}9^뉗YP^z3ʨۇiӺ16Y䋫H-bBW9QIQFJ%,u@ }܄Ұ ?a#|n@c<U hU^Y?uuT?;܏8LPWP8,#4Clyyp!®L(j-]R 46 :# {(%hij.%@*n$Ϡ gstD|`VϡoCB6+{hBU\bJ [Zz (x%WQfOܭ_h-q`~,>T뢈 H03R£yPOb:1eM>L;pyg렅JԘ}!AcrP-7'c†Xj{pweOCD!QIݢ:^Aq_U MU5kI\+/<;/콬KL*5%Mseqz G2PϿS~P i9oi^lGU>hKF~sH*kLN ]@pA[jAb龙5b}3_-M֖x'_ޅ W aUNCI4ϔ0@uK$5P ł k]z$~뒑LY%k003#QO(M/^av؂[gi P87b ZA9ә)/7X7`RC?8'!=HJai77Eka1FoeXevL A1z~~7(?"\* 'IN>e8"Zfߍ4}MPxnjD=iL"̀htV T!8E x^9(z=}$yFxuֺ1 "MʐDxa>|N #1BkVٶ=doS011(Ogr69dep{sviƺ9@a Z)~8\ hf/1} :^OP/>%8/a6`:rPFtPO?"NsyISP9 epP \# ?XAʍ 9r/8.}łFk7|9ǃ5;wrńxov yI#*i"EۣڗR6 >kS8E7&3ܙگ͍/tmD -V}9{\fN+Nns?祿RSgߨ~ɦ3>A]TòVX~&LOj U[̓w}oF}q}n?k:B=xW_/lWMItlL^Yese"Ћ~A/gsxDZVG#c,D ؛s fi1+.\w8ϙ@cJtbAp -X&!:RH8iGX7>OYf7*E&T$"dDm`Cܓ(:1N5J'X/chG2[&1މh2?tw`D8c?TafZH0daZ Ҟ逳CGճ ֺU:ڱKBvKGa%M _ޗƉj1 7IM Beu{wR+oK0Eۃ1PMms:0CQ^K%lkJ}蟬Ge$m%!sOii_z L`NY{`:.ASɴPZC igzeG'&E6ao[TvI&;sDh$lH@F5*Hk>Ѐ3 gi Z檢>M322nWKui)X0~Z<0=; !!uk$BqiR _09bOYީVôS|E%weޑJ6]ja猉l̼c7(p)Ɖό"KW#@,\1UEѭL̤18YӪ]rѸ\ QŹj,,L^K 6.RaأO}*w7ZXb͍w:kw`ϖiάN'j:aBckD۸ƦbLLvV(kՇg|.t] 0t/nVm"ML%9GݝtlB貣٧lX-'uoNXh>@[ۑIsҏ hH No҂4\Meg,鬐p3V49pIr n8*yWྐ{=o|O u2 :SY!E#}VǬ(2!ey\fd3̈́=lA'vFekGP,J[4"D;ehSxt=y+MYi7C9hPh)!h,D5$;q[>/5"QihyP.>@k_8@"h7LۇCphWl*8Sj YwgJvrou4[k}e` l<,;\,/ҴiHy1ęsI)rf_[:bEݴy#e}M|aɖc<sŬ0IVKaI=[We->|vH׵h/D1<ԟ̈[-!X5|Gl/bK;և~)/r%R~5oN*wZ eCY LQ/Y]]Uz+JDrqpTrJg-[l {PߩPȈ%CLkgZ>M+le;~:yw^rSnJhWaKB@)kOǝ*ޟ#"HgQc%*>{Qpe͍c߼_]f ""+la6T =<6Ѡ=a@aT𿭵V4 _\*W|AM)6J( \jۃ 6I2= ;^50muHK~ÑNo釳iazBN|k6QmWkRI!K#'^0I$︘!$VYho_KP/Q\4kST{6fb+g/{:H%Y #lUUtʖJ5!hD-l'{KeP7?3 =_j99iG[B(%|!,r\rkZzt0w;N2V3&fD1npǙU1/TZ-迠wz.wxBF_cOa| >ۖ6DExXddPOZIeekHȋԪl.ёZTICO^@ٸkP̛JAt4ɲ[SRR-)[h.2Xj6&47ċ{q2C1WS\<8dq428xRCowcR>ExM'b,vx#/~U=-/$4 1!> +O ]ϯG Nk 'Q 5&{W~)rV6Er>?Kk b]QJ)Co>"}XE<3A. %M١&O66q<&Jπ< 7 2դF%aX{=jI\7jjApD( w]@h Cj{r꤄[AM!Pқ|= b]Ol6i^+#q&gnXOꇶ 1^7)7 7?&|q DpYT# mreȠ/}@U$Wof$!h~m^&Rh.whIyk0(GоJ'O)Ct[^R.c@X7 ^fa ,Y~AFR`!a(m}0"i`@+Aʨxw]ۚ)߽{UKW! !Nw6| Jr"?j/Spq"#|zӯU*xbU_y\ecUFջmOeF}y`Rw.A&𭑚d#熌 &i}V> 4$uǗmOUZUğ~6Cĸy=SpmTЮcD6 V}Jp;bK̞:ʊО)cP)e+"23[Yq)pӅ-(5)?$@wYg83 o VOnaѼŅtƁ)⻡pH E a:bqM`\њIݷIJK\t O7SiJ]fӍ #!M]M/BKodQ uSw ix)Azh +0m!\k'efɝ͌k:ګ˥{;w}ٯKbyخ(~j$g'zZw?, ^Vq#N@N.\DfԊgBն1X7.}f0ŝ,!F)w=^t77RO+ CGzy:}cd gTiR.ya.5idEX@ ِ _"p]2S%51J xnY85&k9-'Gz$"*FܨXХ_d/<*{f f$>vR47pvh6eô6%X'm+QNiAH ڪ9ӗ; qEcQ+܋إO uɳks+G1s<}AczAO(U^b@y*ѽ9X;IuX6)GIsVvB7= !r^4' 2  Q꼤9# tsHZD~OMLn1Kg-a+GRD"v/!=5\ҨK&-ֲczEZ h@ET*8*=#!DZ`~9ҏD ob;,Ĵ8bPn2&Q .#y<i/3 ǛRN)?a'0 @`p3q-$}9NSKIe6vL#S1[ο>,T+ Ã_HwI֚KtTl)"3ނG|"L=Q}-0i27JM`6p*KUl#Ci(cd w"LMׇ29bԡ!Ox SX FcϮ}vbtpmV:XEd _LPFN)~GZ'':B&&ΥG XH|#YD 0 WΝxԇ Rs ᖋTmDId‚կ)G8 _ ny>`w-_NN79!Ud^d"ȇ z w&p'`wJjědz5ݘysZk(  J4{oTDUC-f (,NvT hM[[V8Y #PyK"OQk) ưreOewı3i.l틒%йȠ¤&m,'ĔTJQy}ڳ(3/,WF94f [L27$@#n$g\}m ť2RЯo'ɇk eL6-ԓ7\J6wgsVL{,jF D?C/]b>as4#UQ!zG׉RXTo m$<+Y1gr љΟh Ȅ٬^;-ʒzp*rei!|A(_nrL9yoyI wHB)rDz*K Ϸu-di`3*ېc[<E/Fn W =dXzkĩV\%mi"qGadL{~ͪpݻD%=h(}+cl0Vu轅bP~o2( WaY aM307 g.tGS@U\5*)d_8.ճYsBx=O#.1F5Ip'jRHcsj3+0X @4Zj_]U8XT%v%4$.s U ]k ?iaQV1b*}xjG0Eoya?U/oƗ?}PsjW]?f_$1 _tٻΙ~=UWCg0GED9_1x$I+ G:"]Pţ{OB*f%,qϲ.4L/`.pi ,?KRP箕TugJerD}1>?8aV5iR9Dz jѪ{=^{V؎9>9 >)'1RIg~jI7q5tDLn6Tuɛi~EFtJ"o뭅8õv1?`u.6r/"|"g1똛vL" xGP[Si-T93_cARy ^B?KrSB&eo(iJB(o/Nʡߘ곔vVH%|ZBR+샡k_}n2zbt,W>DxK| h{sLU fMT"O}[} L- ҘX F*FjafMII'HN%œe]ogf)GÄ [JoH~%mj@D Rԣ&-@Čn10ܯ eUlN 4ٞ' ah 5 ,Aަ~Ш+GS],yd,Ǟ@UGw7ni/9W8F&yJp~7TdEVD8XdF[a"z󣙄 wb:d%br'k[/ZEsiOۼj'eX2b(1d NՂgn u½sEel,cJrN~[^N<GbanYwt)DBt4q:H w};(P #s0VK͓aJ~j[fmvsh?;33vv'\ÈZqk <)BǼry:;qUF_*TՑG,9o*U96ᗎi5U WS5+ o`#E]BwA2=' 3մ1c  XZe//1V1?MߚG֝yց>۞QQKXy%Gϵ*c"\>#N 94y 0' qߞ.ڞEn_v7<yN1J]`|:]MȲ"_YX`h5%MI#ywa[x?~Q-09p-{«IwH3U4!Ջb?Cdp%ZOJa8-glЀ۠"ݱ} hSP#6 5f0J{S>獪pGУgi8pME7S]ɯ _7(v̵p}-Z=-?l8a,ӺPZ7kVLF.4 @6H:- |"dH\ I-#7`TU,6bʾ!E ՗ SEnS'5bPaߪpXj"!* 05u[Z Uye^jvdo2ek̀w-|ĂbD@ őnRyy1KT ה[cN1?IC>/#NIKf>wGO.saY@fsyLc4zZxYN:Ģմ]+L#\A .FsQٗӪ<[͋,;$̦כ`se'߱ <5u^u?24 ~E~d odtT_b͗ĔbO1m"%"5y?mʝHąUlR'H6d js1=%?%d]͌"X8:n%$v&FẀVg(X¯78IVl⤂UrۆUDF95FBƗ*j/XB\93 -^0zMvovI3|vk;%tϰBm%c gp{81˒ 2TWuWFGDNck| xx>1.>G/a;{Nvk#otF*gi3Km<+}PNW 9`=yS8r*(f\NaռCy\#%[. %7Vl';-;#"J 3S$X:j"%/4=UF6f"%0IROQ:2s{ O{%VC8+{]ȬÝV^0E֭co7sNXwg'ѱz_cEE4J<.7vC_V,Au+Éj{ Қ2ގ4#6DX`qamִSz{Y0B,*jߝf/}bQfbLϠjIv*G(RexmVΫ̋m oGԯF$_$O.\zկt*--m=ʑW&lqD>!ZMc4tldXOh<14jSLG"1-'(f1B|mU/`!7q5먼b;E<`E'K$+6FG;M'{2t #Bieg*}7K H#br ]?NJ`KRcBIGRdc8gʧD[X0IA#cۡkY)Uu=E"0)VG%5%qQB 媸ڲ0ϽeޓZHu1(h HB;YKX@Vלxњw$ϩ1vJ3,,V)TQ6y{e mK޵p1+Te:AIsr2t;5xs*AEq):b]כ>Ҥ{G}5B|5;7:~ L܏ ޠ T;|d* 8f@9&7IN}z:ݾ p@D cMvb~8V4)R  vXG$+u@0da!4Jn/!FKquuAP3Pl6imzU6cdqz(r'Ċ#e8; lJ 3vTsUxy<3h_x.`i(Ƀk?P5bMW(9p:7D$P.ꨃ^ly2'e1v>4j}XR@b+NZumU`)Vlb[]\ZBhmFwC-GouQ7su)COp-VbpukooYvIkCrOo%02Pg% #ТlV``LY2 P$] 1u_+UM;Fw]KmL"9Zc 2UqK<][u q{GCG^yY5z$WSkW"W~Vp::ʑGp=Gمd,3Y\F>VQCmmwS]__L^1.$cFF):@sg;C1i)&fڀTEa ?ڑ$CRAZ>N`ҦQqg^L\릃gv!´ETK'E'C;x_i_ܞU=ʶ<.5m˾8E+/ t x8yM#:UV 㮑^hL(D~0YfP9 ge$#qj,$FI0,piE{Y}\-n7,`9F 80J $ o{MJe 2+fi`I8)B6+|l+oCLYPj#H\)I9'-ôX[\j}l7xs:#sI=ă=깊 xmhS}vRS6cfH&Z:t QeS2M^:\LQ4`뭆ST&OUy^݀I}25.ՋUo:yR 5"$y-D O yQSl3k|4іAY̤ ѻ)B~{ ~Uy,9(օ@}2Bt_(phQvʜb;xe޺)h#ݤ;AQR֒=joluLsw ĉ?(W$.UTr*Z:ge:f9!USŃ<ՑMrY/v>(](uO8+KŻC軠Ud3gh85ULnʰ"5>jҵ >*(ISAuoA;mq[z}Db-NPРdG֔'=?xV!B7)6^Λ" ʌ$|J;ՆfR`9E@:U> cWtG<fٛ[-N;,(v ))gKk ?n0$=I!88 eF81 ƾiH-ŕo}:m[9I\?>X5f7yg՜{+qb~:Zcqŕ2[YӨJ*^+@÷AX ;kecl:AƸnǼڒA%oU'(J2]0*PAI̞JɼC&k+̈Pdi :" xh.p8ky+d@)MVRrsgy~3vCxWDvK9$|V2'i["=X~$4-=aC&YjFy\3iʍ[V5rP O` NCP[&Um ar .M@č[/hi?1MFl& fPaռk{ohwA|=:/8erq߷U0=|喇SBM )djV5 Rgz:3sYBwI 1Ibh+V*W͍_;q=ZIi7<ޞSBsbWy$AN b&ߏD,7 5 &[R*T)l)Ek,-)7E:d oz  37Zf{(Nۨ~Y7Z3=cxUl5Q毗;cGbC{!NXJMlko~х8G6'Q('D8_Z#$4%m-or?3#רy`üOx!-u1I]8ŎSpY_(%!>/W* yUfL΀tY>"@iSnvd6\~ip՟R:MmbelPG̬B%]ȳdwNf<β>oRYN=߻A]NMM7=yzb/\jXE\0-VNp7DDCC7d3 'e@k*Ͱu*5OF;~ &`'m*Sepy}\ؘn/[f;Z… Cr\ P OSARemj'yx#*kM\bKbQcOG̓FK,2b%g7t~"Zmma*v`&t~CWcV,PxaV pN c5M%uxn-hiwHS4UcZUif#&&qWvĒ]&v?\J6X9R@\+H(m.2B)/.vEim)lec dTFr1lZ:mpN$)prdZ(Iō]XXB&mW i D"W( A:jq17|*Z7 iG[O&>oM:/tFu *2,k4$%Ga䡠=ہ=nÛj&څOܜ^9m\7(`W@l]:"͒5n[ah<2Hɐ!c(7E/Qz:V-AB4D(彁3]z^"!hns::ڤ,0"T4us@^r'$rh3ʅ v@&y%o0CE洛5$ZHlqȗ)VOmW?1z ,A4N^&GX8WaM5[h Ԃ ƓUٕ@_!T x_nkƥ>-k 9o PNGE3\9As9AŸ<~O%;cd*sVxHHbR IsDda)ƶ\6ަZŬf*+拐#vW@ϸRmN)|>_{ۼL+9afLlp|[NYQ kԕ6"BĶ>FT`^+nKfMLM,;cs4N/d1(0ؒpig<{E+e 2>ǔFa;\eJl-_b񲵉yh0[TE\Zfk^?խ>z]; c?` #.35j&+G(\=Q VsIyt􄠯?Mo`V@\^MC-`u+ ˑfO i4/h * *v*Bڛ0-pv8ÑQ62mmy#ηǶ4eY\lh#jI GH9zz97 gi^$JLrF8#\q|H&$ D/gK6  c6 &*E-YA/&m_?G’t$ xfy _vSX[RiQ`t~o'Nrd Wz׾a}&b3+SȌcA0Yr(k?#sc^ ͜@ ϶ y(۰STsJR,?myavfq`0FDX_2`y9RRrhLT.繨^Fpip/82J{پ(z("\j)2|1!*k٢!G:c',CCZ| Kb+FOS ~pi_i`,X7\ei7Q}cSxw}P4;/gOkuct!v]<]}(ud5qv*c&̷0Lr=gfTPN%q x 2v{b!P7K-²ս+ĥBx^Y*F\r.0u ?o u􁁰U U>c+\Tѕ&6*hKZpc:ko23 %4@Xv2Nj fR\IW7mڨAS@\w`ʼn]-ߔ~?wb/dPLbnbׂ']F+G=+CWew}7@7m> ƞ7%& yE_Ɋ7ayN!i] %+^tlTثlzK<\Nc˜ZէaUb|uѡ1A5ʥ16ojTFKˍ:D@>_ Y(S"\=HYj`hl,*_hD<$gl)qX&_ϮMK!oD/׊Н.F ᬛٍ)cc o fD7X[<+XtC婏aVu`Z7Џ&& S$s:cugkiL&I`}Y]$ݝqLeP_hsbuQ6L)Z\[x70 P^,8?֚2Ů?:q V־oq)5YCzzg3\܈%'Lh?aя ^z(vk.ÀwȵUyx G$e@ޗ2y h[2Z=:+:d\ 3E $r؃Eo_-;x6G N0.q%7;^iX7[$YD.Lf(@J4gCu$p}!s E -f̛EOz')PY iٞnp.5I-s }zTG7]Ȥi4XcUDr&QvoЙkܘz$\QKL4X-iC7ZbHq mXlNRkL2/hkލȋ=R{eҥT-~QfqeUa� 魊)W&J/K\v8*Gϩpe&f/M T_ek= {C}4snH~DPvZ`$ 6#v\tI =1DBɭ B_ -|BMrk>(:N$r?E5ڜ5N*lj)MO4#+Bap E8ިޠa9UK^nSRo o4Djp·H"-9y?eE08r#:k:Z'iS}ICR8Ky|OxzJAV=[n>K wI[E,8RWbgEZ!0*#xʩ1-C pbt~VKi[4tLwvg=؊o~4 }X T哴g!9H/@LzBePѻg/v@&:J(Jx[t#2eʘ0=)j;jy/q u*7y(iAeKkO,}nV:5s^2O7s*,WH'gb5byTfvq$CSAeuB +(K1G_+m]Qp:ט`ʧ8~,w3sFz`h~zL"rvM-;!I9C~6}ߥRݍ԰`$8< Z!뎲4Tݻ Q5 1NoUfsLJB(t'[ɓPO!I1S״>$.RF<7YiQ 3`J<*亸yV]Plo|$'s^ ʳґ"QVw1N9rJ{kCܧ7ι 0K0|KPU*| Hp%YEFO*N)"xrr~& ZR'*!EOoOeU:x4_Bk6{7h MɸQ.-t[.gpķ,uD&R5J0 z;Үf{W߼Xv7*%pM8,|LtVI&[%1's^iwÆpNJƊ@KE0FTᬩk`|r)tWAeʛ1q,hpQ>"@I5{n<gm+ 2ڶq偑Cw G }[V݁A4W w b 4eڕXa|p!dov|ba"[@V,]@xιNա%mZsHjҨV .2sy(dǫ89B&I Q,q0uR$A=YOVsU>B$$d; QYe D.7-1Q2%n4 ;YsG k& ~60ck):%hPټ47﹖s+צn0)ZirOIm;wNcim'=)Hۢ<3;'Tpθ${k2#{M6\TBLT#r(-4S]̛-,o~B_`fN7,Y 2 }kGWeZ;-E:j+yLMݽ?8j} u(n)+aCtY6F?D_uI$,HѸdߵl@rzE"\63NI8|GA理~V}o}4PE@7"4`O"G\!mޱQߘj{Ԏ@e?p.Lt*:r7EQpu)8}.$Ya4Ԭ |i'`Ӛycߕaĩ$Wn ^-Q YA㏱zmpTia\\*Df9WꎈI@Zre Tw ʙ "3 b`7+!,ud@ :XM<qa J˜x yR-:e45_SY d4,|YqLKu91D0bW@ʿ2ibQi;қǦDY?U4 (P]`J]6ԵBXtU[ qEGe=W 7E%;gO@3vq{ژ fJ6-XSNor0CG,{.ɱ[j!fW2:n|{;\mf;j<F83_!Մ$wX6?:U A̾U4K]cܷJ@rtx'cL%ƸaWqhUjZƝ{ yi[  IqݧHAĉw h`("Пk á܆qa$(C1'Wꂼ5&r>˦{:НcO,T x1}@C#7P+ai3`t@[vkkhSݩapnˆK3Ѥϑ.D~}G:$hw7 KOې*w  Qva(Jb$LRz&ɺ%KA#g["U)}Bk@',d`XY!__3 Q#w@(ny{3h%))IGL>WZUUSAv,*ćl.R/h8*dRk[C~|j G:~LPi[nQ=Ჴ/+ $75Aiyns-Cta<#l m587/)+mF6j!qzgڅ Tg SF5"2kIcʖSz [Z[(dciEd@yl) <%тJGPym]aD- wL_V^@}8IǯUr-1rR7jj8?2GtIcV"g9am$>ct=VB76L}_3`\_fxSMNǙ9'wʽYBxUPkWU1 F~ ӜGW3&;Rƈ|#|%DZ@P ŽS] ({֛t$VWm;pօ 4O3&U9}<HI X%))y`eȂ|8=uUf 7Eg;lOSMo*6;s @bnϾ'=Z螁91 Tm WMRҽIHρH9 d;#51m·" l3l-E2{R A#D rgAǝGVJnN&/;L<9;Q7Ԡ==ǽEuQNNsFfYm$3he} K)+RQ/{'":c!UTw8mbz_J2!S#pFq<(v~rT4b(? 43HS`F[yS+$I#Vc##VLu=Wޱu]cLTާ^Pj̸@ad^{I|if!b'MZCĮȲb^zC{Re9`Ի*MK[o{IQ9epA99`f~XGj{5R%$x,'Xj :TSIHfFnD5Q{ZzD%LݹDPqUt9/cEnk [(afm +kI!"dt G̛";īdGoԦwf`RdA+\r1ndKU;b0(GCμl@t̘{M00:Fڄ=>ey-.Uлa3\_4[Pcl{!XUYq R``^+ R @/@ @|  Vd,f ɄځfA44YR-M7y5`=%4q0bN[}B* obw׬*1iRnROrQ A=|v7I^hp"\cIܴ\~ .X*L 0}KvTNۖl9 KJ/@hڷi-G,@Y%di26G'F>p5kŒ'XIçE4v<h]ӀFk4͂ו, Xd# ?^mZ2AaTvq5']+x19X;u:)yO-gϸ PCf/vsKru;dۦ=]/u<{'qŝ^vn, y5LIlΌrsOGE.;K ڄ)n8+wTwt?Fvy@  ?Y+|^f-`vQ^k[R9T] Ԅ `KQ&44'rb<mWPpaS!dv50\?߽_8X9 !Su3 %=?9n1F_ޚUMYZD!bԋ͛Oc6Ә^A ^~<( Cl~a'kW)ҸXEкW7^'2s]*)TQleaЎCy$nfso[Y(DuA_H30&%~H$Շx:D^~sݡ;ݜ}rf$7i3'o?@@g Id\̫0kǓ}Ƚ˓|%cLt)RAZg[995LJV"28xOkS4^w%C[ WZ*0tHJʳƘIKOm"|/,*@%+p~K FbI5lZ=ONcgxe*{Q nؖ<ٺR[FE|̶>GgYs:d #yPіMfY.ƾID韐,1#Մ D`j c3ԙ5! H RDMLR,wNǘ^lwJQ][˽TKˡh9!k_ݙ 聭X l?nhpRQLo|ʒ<&8~'4kq@ϻz 9h!9^QֻNK07n+уpe+?A{Rv D,P!?,Tk"+/33πW"i@@C>ә%w5阖2*c$dg^6绾nѓ^Ye]WhCKt=,tBR!$X!:r=V9C ̫Mԡ~{.$trs5 Bn\ Al+uY͏p P 69٧ c3ךT5[y u)v mS9uҩX)hD0>B1L2FQ|7)OvMZGI,bd^;n0PCR+Q8SÅDHǢ>5j7b|~C%<dmX?<1_Kmɖ3a-GyOiT,1`VOl-TN3^Qaio6}M' 4xlG91#0A&cKl*ԋ !],K&LjZf(&^1*m6ƔzQѧ.Nk.H'`txxEG0&ax:UlaPD lβ5˅&HƓsX sfNE\h+~k%w3o}eKkѧv:u="E x)뱳XopS;X ~r8ZŨ<ᅆ0M^>ww1 7ŐSN/|VIb'/( jrwUa/~="ZT3'p hD[Q⿖)IYIh/q/bd.NrwCMAkMGڱQܬTUΓeIIKQ+$owƢTB.ۛvεPswmp>ab۬F.%~8^DalijDcsރ Hpߩq0'HQO?^y0*[:+8Z,$3)Ӹ@4ę $FyD"P|氺g9kҸ,(MSdlMq ~c;#*KZ2,`\m{0;ZP;+ Qa2Â&%7@^C}".Cp/i:sb6[Qu/_bHHuDGZ`"=EV:yFgZ\0o<+O١OU}Iu!u\<*CmQW3YS;&Q*&zBŏmJϞ@sj"֋v<7],QuCB}ǀ$|rbA}ݐL# ɥV\r;Jt;) du!qPuߍ&wJ7V;i`eٜ;Eay>_u@ (^hGk"Vw@^x Ű.[ ЕJiIZXk{zlk*%1ЗͬB:/xY1͋ i ߕ3s4?MplaN}6<23qbP. MnXnD= !d_BT4E_os!Ci6C|s Rx;ŅvMb\?p%#6FXM.}z "O@YC{l,z-6y=*|]3C|A<꒸N&E}%Y"8*2^٤8fn<\ #+QXoK@Z9=.qqEyriϸf@wũ!ڸ?ڜ;4f59"=MNZ^O^L)}62*yޡB߿ݹ]TxGg&7`q ٴׂ{hepYNus*Om sKR M~: xq#bx.*f:~)eBf*܇J`,X_ϋsz|kxV̝{M޵ hFZ;TלR"9)t'kG ࣗ `iF.+T{dpzٟ?%&ٛ!db;(1mQ}6t/.4u{n+N>ܹET=1kvE_ih"e=sOܓ-Gԉ.]Zzu02`o+wfSEoJ]TuRx-ЂuM2ڿW[9F;oEWiw |6M@w<.VdAu߀':G帲!{Ӎ0aG'퀎$xf׃>*=tPyK.H?a2#OB#|_Bu5ʇ+u;J6h _d6 i`e| -Em+%/c'7}M03]m :`u*Wu0U@lͱʨ+iǰujgЩLGt_XLSGNT F'to֤wQsT )%X汓r|%|~}O0pAdTN!)&^{}~UblS@5lTsR_Wbf b =]O6Fk #Rsr^NVcm{':P3^?ao7x9P,W0­̗# xęw! <|?N*9'Ku6Bڍ0\:[LaدH=QCcCYU_: quZvHz;6j{T݂RuT)->gݸ=`QYɏ aql ؘ(pz'3kmy޽lM(ی,B2/ ݊ms=ij L++_.G Q8m]6^Rb yDEY\.?+0P-54iR̼Εqf)UR+9nSӏ7Rp2^ ԁ,ۅm,xc=bRk3mW&[?ϙ%Da]D']1bdB%/8RoKsxZ =v63ȍ`zjD[u/i>=T^XmbEcϧӡ/W~SvÑ@ԌJX#UcV}5fw&j}""1AkxיhcR7Fc*z@M*8ZԁӦ]?MzNT]'Xƴ2練뉼PLߍ0};RXJR&1]Qa @|Ds0LL 9R0=1!mwIy5h Pp F-LK+3XQRt,r2M%Q3ƻY +%FipRk Ww Bd.E?Uk}nߖf0aXE@z&@P6v1g&av SjY hP*,e? lOAr߲qQ+X4+x 'l8.% 'д;~}U+20A2#vʔҹ<!T'%<&6&dбM.}rOxY Z䄟ܒwhzנȔL/l.w!=R\0~m/fxK05:) @Yb34mseQrȳ̊ܓLL;IkoD%vVKfl 8T'4lO4KO~dq {!l\ΦKmшhRAyM̆KƐ-\ʄAuB iC-./}xz%/NPA]~ـquȴlKxQwE!EkFcDvwm>7z1,2GRa+}  v4r0vQ~{oױ{i4l؛Dg4e}$9AH. p`*{S6=N񱏷H+R@bMggPsTDs,u)i;oz=lɥ4^LBޏ]^! 5{ B .tnqҹLM`Bp$bֻ1'9g{pON]K `w^V=N=5p#.猪/fLУ ;wT{|rBq{ l,/`"P92Cq bKH$]!ɥ޽ Ē{ J<ƿEje'1b^E&Pj$yiD1!^x? Gz~?@ KJc|2Wn s`)J;s d,$*2R]ZRz,4H}.oN{=0em47dlu׊*ǤAu Yx`C5ްaOtx"Uu):zﵮ+Ml,ɪuFUz9*LO3&/歾OBW Ek R(l5uC KAY2%tbдlj8;0ĄdW e$CL{H=nϰ~vcD(Dj̓pՌ5ޑP߭"Zo"!XcKţLAx JVMhIuh5ȷw˪0_LȮIJrN_$\/yh#%rZy5!s`Euh%ݥ'Fd2vJf:1qșS"xc~B_M\'} vfr]X+O\U‘^(DgT0-9WC:mLv:<*hX>R,Y^q%dx9WaЋZ0̳&%>J ,dU:LSf7FG -E㺷yD.9D9r7#]ٶ3Bk; 'VI||l!t<2$Ok6Md t-r%n9 )c=CFBj&{*3GFtQ#!tCII9 Q/K+/}vѠEedg(AC;D|GuTheBSmڇ)c[8|9d$Ϗ;V(}ߟ`kh[=iM?#6e6$pxœ̑IEk9Ȇ({1(6n$| 9\u ᔙZ<6Z8/>W#Z'ZkLQvz2\ BnrrI͒:[;?=:}*{,^ _Pts7qj3l jܠ/NTev-3pAd ? -52jm/8,j)k#֩s2;\p[RGjX4-~"*HʸaŊp5oߛvCU~G4 FwG0 5kvvA?VVȉ͈+D(5-B5~@j"%PE UAh<@cE6|9NWV)!r+8DXғQ'N'6w^-Ah BpEMyޞ\hKϻ#Cؖj^ M2﷩?\F!";$ed=2BF54DG_{pN=1rw-'|}?U^mq2"c 8&]gPȒ YZ