container-selinux-2:2.178.0-1.module_el8.6.0+1108+b13568aa >  A b1U]dn2_J g~{DC^[U8LAYw03ﬦUN{3O5Qߙ]ZRxr4=wCA(]a`aHEXGc"a3ooC\9RƘ1<^pI\?\d< @ h 28?x< d    0  D   \  (dd(8}9}:(}=S>S@SBSGT HTpITXTYTZU\[Ud\U|]U^V bXdYeeYjfYmlYotYuYvZ(Z_\\\ \&\h\lCcontainer-selinux2.178.01.module_el8.6.0+1108+b13568aaSELinux policies for container runtimesSELinux policy modules for use with container runtimes.b0\x86-01.mbox.centos.orgCentOSCentOSGPLv2CentOS Buildsys Unspecifiedhttps://github.com/containers/container-selinuxlinuxnoarch . /etc/selinux/config _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if /usr/sbin/selinuxenabled && [ "${SELINUXTYPE}" = "${_policytype}" ]; then [ -f /var/lib/rpm-state/file_contexts.pre ] || cp -f /etc/selinux/${SELINUXTYPE}/contexts/files/file_contexts /var/lib/rpm-state/file_contexts.pre fi# Install all modules in a single transaction if [ $1 -eq 1 ]; then /usr/sbin/setsebool -P -N virt_use_nfs=1 virt_sandbox_use_all_caps=1 fi export MODULES=""; for x in container; do MODULES+=/usr/share/selinux/packages/$x.pp.bz2; MODULES+=" "; done; /usr/sbin/semodule -n -s targeted -r container 2> /dev/null /usr/sbin/semodule -n -s targeted -d docker 2> /dev/null /usr/sbin/semodule -n -s targeted -d gear 2> /dev/null . /etc/selinux/config _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if [ "${SELINUXTYPE}" = "${_policytype}" ]; then /usr/sbin/semodule -n -s ${_policytype} -X 200 -i $MODULES /usr/sbin/selinuxenabled && /usr/sbin/load_policy || : fi . /etc/selinux/config sed -e "\|container_file_t|h; \${x;s|container_file_t||;{g;t};a\\" -e "container_file_t" -e "}" -i /etc/selinux/${SELINUXTYPE}/contexts/customizable_types > /dev/null 2>&1 matchpathcon -qV /var/lib/containers || restorecon -R /var/lib/containers &> /dev/null || :if [ $1 -eq 0 ]; then . /etc/selinux/config _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if [ $1 -eq 0 ]; then if [ "${SELINUXTYPE}" = "${_policytype}" ]; then /usr/sbin/semodule -n -X 200 -s ${_policytype} -r container docker &> /dev/null || : /usr/sbin/selinuxenabled && /usr/sbin/load_policy || : fi fi fi6Rcb0(: BA큤A큤AAA큤A큤A큤b0[b0[b0\b0b0[b0[b0[b0b0[b0[b0[b0[b0[b0[b0[b0[b0[b0[b0[b0[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-selinux-2.178.0-1.module_el8.6.0+1108+b13568aa.src.rpmcontainer-selinuxdocker-engine-selinuxdocker-selinux         /bin/sh/bin/sh/bin/sh/bin/shlibselinux-utilspolicycoreutilspolicycoreutils-python-utilsrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)sedselinux-policyselinux-policy-baseselinux-policy-targeted2.5-113.0.4-14.6.0-14.0-15.2-13.14.3-80.el83.14.3-80.el83.14.3-80.el8udica0.2.6-14.14.3bOb@aar@a@a@a@aa+@aaKa]aQ@aI@aA@a'@a&0a /` @`9@`Ȗ@```q`@`@`N@`@`dd@`Y@`&m`_T_`@_%_%_F@__"_5+@_16_p@_5_X@^n@^Ӝ@^@^^k@]@]B]]@]|@]@]X]W]R@]@\M[[ͻ[[@[[Xf@[L[K7@["X[@[@[[[Z@Z?ZZZ%Z%Z@Z - 2:2.178.0-1Jindrich Novy - 2:2.177.0-1Jindrich Novy - 2:2.176.0-1Jindrich Novy - 2:2.174.0-1Jindrich Novy - 2:2.173.2-1Jindrich Novy - 2:2.173.1-2Jindrich Novy - 2:2.173.1-1Jindrich Novy - 2:2.173.0-1Jindrich Novy - 2:2.172.1-1Jindrich Novy - 2:2.172.0-1Jindrich Novy - 2:2.171.0-1Jindrich Novy - 2:2.170.0-1Jindrich Novy - 2:2.169.0-1Vit Mojzis - 2:2.168.0-2Jindrich Novy - 2:2.168.0-1Jindrich Novy - 2:2.167.0-1Jindrich Novy - 2:2.165.1-2Jindrich Novy - 2:2.164.2-1Jindrich Novy - 2:2.164.1-1Jindrich Novy - 2:2.163.0-2Jindrich Novy - 2:2.163.0-1Jindrich Novy - 2:2.162.2-1Jindrich Novy - 2:2.162.1-1Jindrich Novy - 2:2.162.0-1Jindrich Novy - 2:2.161.1-2Jindrich Novy - 2:2.161.1-1Jindrich Novy - 2:2.160.2-1Jindrich Novy - 2:2.160.1-1Jindrich Novy - 2:2.160.0-1Jindrich Novy - 2:2.159.0-1Jindrich Novy - 2:2.158.0-1Jindrich Novy - 2:2.156.0-1Jindrich Novy - 2:2.155.0-1Jindrich Novy - 2:2.154.0-1Jindrich Novy - 2:2.153.0-1Jindrich Novy - 2:2.152.0-1Jindrich Novy - 2:2.151.0-1Jindrich Novy - 2:2.150.0-1Jindrich Novy - 2:2.145.0-1Jindrich Novy - 2:2.144.0-1Jindrich Novy - 2:2.143.0-1Jindrich Novy - 2:2.142.0-1Jindrich Novy - 2:2.139.0-1Jindrich Novy - 2:2.138.0-1Jindrich Novy - 2:2.137.0-1Jindrich Novy - 2:2.135.0-1Jindrich Novy - 2:2.134.0-1Jindrich Novy - 2:2.132.0-1Jindrich Novy - 2:2.130.0-1Jindrich Novy - 2:2.124.0-1Jindrich Novy - 2:2.123.0-2Jindrich Novy - 2:2.123.0-1Jindrich Novy - 2:2.122.0-1Jindrich Novy - 2:2.119.0-3.gita233788Jindrich Novy - 2:2.119.0-2Jindrich Novy - 2:2.119.0-1Jindrich Novy - 2:2.116-1Jindrich Novy - 2:2.107-2Lokesh Mandvekar - 2:2.107-1Lokesh Mandvekar - 2:2.89-1.git2521d0dLokesh Mandvekar - 2:2.75-1.git99e2cfdLokesh Mandvekar - 2:2.74-1Frantisek Kluknavsky - 2:2.73-3Frantisek Kluknavsky - 2:2.73-2Dan Walsh - 2.69-3Dan Walsh - 2.69-2Dan Walsh - 2.68-1Dan Walsh - 2.67-1Dan Walsh - 2.66-1Dan Walsh - 2.64-1Dan Walsh - 2.62-1Dan Walsh - 2.61-1Dan Walsh - 2.60-1Dan Walsh - 2.58-2Dan Walsh - 2.58-1Dan Walsh - 2.57-1Dan Walsh - 2.56-1Dan Walsh - 2.55-1Dan Walsh - 2.52-1Dan Walsh - 2.51-1Dan Walsh - 2.50-1Dan Walsh - 2.49-1Dan Walsh - 2.48-1Dan Walsh - 2.41-1Dan Walsh - 2.40-1Dan Walsh - 2.39-1Dan Walsh - 2.38-1Dan Walsh - 2.37-1Dan Walsh - 2.36-1Dan Walsh - 2.35-1Dan Walsh - 2.34-1Dan Walsh - 2.33-1Dan Walsh - 2.32-1Dan Walsh - 2.31-1Dan Walsh - 2.29-1Dan Walsh - 2.28-1Dan Walsh - 2.27-1Dan Walsh - 2.24-1Dan Walsh - 2.23-1Dan Walsh - 2.22-1Troy Dawson - 2.21-3Fedora Release Engineering - 2:2.21-2Dan Walsh - 2.21-1Dan Walsh - 2.20-2Dan Walsh - 2.20-1Lokesh Mandvekar - 2:2.19-2.1Dan Walsh - 2:2.19-1Lokesh Mandvekar - 2:2.15-1.1Dan Walsh - 2:2.10-2.1Dan Walsh - 2:2.10-1Lokesh Mandvekar - 2:2.9-4Lokesh Mandvekar - 2:2.9-3Lokesh Mandvekar - 2:2.9-2Lokesh Mandvekar - 2:2.8-2Lokesh Mandvekar - 2:2.7-1Lokesh Mandvekar - 2:2.4-2Dan Walsh - 2:2.4-1Dan Walsh - 2:2.3-1Lokesh Mandvekar - 2:2.2-4Jonathan Lebon - 2:2.2-3Lokesh Mandvekar - 2:2.2-2Lokesh Mandvekar - 2:2.2-1Lokesh Mandvekar - 2:2.0-2Lokesh Mandvekar - 2:2.0-1Lokesh Mandvekar - 2:1.12.4-29- update to https://github.com/containers/container-selinux/releases/tag/v2.178.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.177.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.176.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.174.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.173.2 - Related: #2001445- update minimal selinux_policy dependency - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.173.1 - Related: #2001445- lockdown allow rule was removed - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.172.1 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.172.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.171.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.170.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.169.0 - Related: #2001445- Start shipping udica templates - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.168.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.167.0 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.165.1 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.164.2 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.164.1 - Related: #1934415- fix the build of 2.163.0 - Resolves: #1957904- update to https://github.com/containers/container-selinux/releases/tag/v2.163.0 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.162.2 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.162.1 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.162.0 - Related: #1934415- do not use lockdown class yet - it is not available in RHEL - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.161.1 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.160.2 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.160.1 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.160.0 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.159.0 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.158.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.156.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.155.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.154.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.153.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.152.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.151.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.150.0 - Related: #1883490- synchronize with stream-container-tools-rhel8 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.144.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.143.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.142.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.139.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.138.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.137.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.135.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.134.0 - Related: #1821193- synchronize containter-tools 8.3.0 with 8.2.1 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.130.0 - don't use macros in changelog - Related: #1821193- update to 2.124.0 - Related: RHELPLAN-25139- implement spec file refactoring by Zdenek Pytela, namely: Change the uninstall command in the %postun section of the specfile to use the %selinux_modules_uninstall macro which uses priority 200. Change the install command in the %post section if the specfile to use the %selinux_modules_install macro. Replace relabel commands with using the %selinux_relabel_pre and %selinux_relabel_post macros. Change formatting so that the lines are vertically aligned in the %postun section. (https://github.com/containers/container-selinux/pull/85) - Related: RHELPLAN-25139- update to 2.123.0 - Related: RHELPLAN-25139- update to 2.122.0 - Related: RHELPLAN-25139- update to master container-selinux - bug 1769469 - Related: RHELPLAN-25139- fix post scriptlet - fail if semodule fails - bug 1729272 - Related: RHELPLAN-25139- update to 2.119.0 - Related: RHELPLAN-25139- update to 2.116 Resolves: #1748519- Use at least selinux policy 3.14.3-9.el8, Resolves: #1728700- Resolves: #1720654 - rebase to v2.107- bump to v2.89- bump to v2.75 - built commit 99e2cfd- Resolves: #1641655 - bump to v2.74 - built commit a62c2db- tweak macro for fedora - applies to rhel8 as well- moved changelog entries: - Define spc_t as a container_domain, so that container_runtime will transition to spc_t even when setup with nosuid. - Allow container_runtimes to setattr on callers fifo_files - Fix restorecon to not error on missing directory- Make sure we pull in the latest selinux-policy- Add map support to container-selinux for RHEL 7.5 - Dontudit attempts to write to kernel_sysctl_t- Add label for /var/lib/origin - Add customizable_file_t to customizable_types- Add policy for container_logreader_t- Allow dnsmasq to dbus chat with spc_t- Allow containers to create all socket classes- Label overlay directories under /var/lib/containers/ correctly- Allow spc_t to load kernel modules from inside of container- Allow containers to list cgroup directories - Transition for unconfined_service_t to container_runtime_t when executing container_runtime_exec_t.- Run restorecon /usr/bin/podman in postinstall- Add labels to allow podman to be run from a systemd unit file- Set the version of SELinux policy required to the latest to fix build issues.- Allow container_runtime_t to transition to spc_t over unlabeled filesAllow iptables to read container state Dontaudit attempts from containers to write to /proc/self Allow spc_t to change attributes on container_runtime_t fifo files- Add better support for writing custom selinux policy for customer container domains.- Allow shell_exec_t as a container_runtime_t entrypoint- Allow bin_t as a container_runtime_t entrypoint- Add support for MLS running container runtimes - Add missing allow rules for running systemd in a container- Update policy to match master branch - Remove typebounds and replace with nnp_transition and nosuid_transition calls- Add support to nnp_transition for container domains - Eliminates need for typebounds.- Allow container_runtime_t to use user ttys - Fixes bounds check for container_t- Allow container runtimes to use interited terminals. This helps satisfy the bounds check of container_t versus container_runtime_t.- Allow container runtimes to mmap container_file_t devices - Add labeling for rhel push plugin- Allow containers to use inherited ttys - Allow ostree to handle labels under /var/lib/containers/ostree- Allow containers to relabelto/from all file types to container_file_t- Allow container to map chr_files labeled container_file_t- Dontaudit container processes getattr on kernel file systems- Allow containers to read /etc/resolv.conf and /etc/hosts if volume - mounted into container.- Make sure users creating content in /var/lib with right labels- Allow the container runtime to dbus chat with dnsmasq - add dontaudit rules for container trying to write to /proc- Add support for lxcd - Add support for labeling of tmpfs storage created within a container.- Allow a container to umount a container_file_t filesystem- Allow container runtimes to work with the netfilter sockets - Allow container_file_t to be an entrypoint for VM's - Allow spc_t domains to transition to svirt_t- Make sure container_runtime_t has all access of container_t- Allow container runtimes to create sockets in tmp dirs- Add additonal support for crio labeling.- Fixup spec file conditionals- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- Allow containers to execmod on container_share_t files.- Relabel runc and crio executables- Allow container processes to getsession- update release tag to isolate from 7.3- Fix mcs transition problem on stdin/stdout/stderr - Add labels for CRI-O - Allow containers to use tunnel sockets- Resolves: #1451289 - rebase to v2.15 - built @origin/RHEL-1.12 commit 583ca40- Make sure we have a late enough version of policycoreutils- Update to the latest container-selinux patch from upstream - Label files under /usr/libexec/lxc as container_runtime_exec_t - Give container_t access to XFRM sockets - Allow spc_t to dbus chat with init system - Allow containers to read cgroup configuration mounted into a container- Resolves: #1425574 - built commit 79a6d70- Resolves: #1420591 - built @origin/RHEL-1.12 commit 8f876c4- built @origin/RHEL-1.12 commit 33cb78b-- built origin/RHEL-1.12 commit 21dd37b- correct version-release in changelog entries- Add typebounds statement for container_t from container_runtime_t - We should only label runc not runc*- Fix labeling on /usr/bin/runc.* - Add sandbox_net_domain access to container.te - Remove containers ability to look at /etc content- use upstream's RHEL-1.12 branch, commit 56c32da for CentOS 7- properly disable docker module in %post- depend on selinux-policy-targeted - relabel docker-latest* files as well- bump to v2.2 - additional labeling for ocid- install policy at level 200 - From: Dan Walsh - Resolves: #1406517 - bump to v2.0 (first upload to Fedora as a standalone package) - include projectatomic/RHEL-1.12 branch commit for building on centos/rhel- new package (separated from docker)/bin/sh/bin/sh/bin/shcontainer-selinuxdocker-selinux 2:2.178.0-1.module_el8.6.0+1108+b13568aa2:2.178.0-1.module_el8.6.0+1108+b13568aa2:2.178.0-1.module_el8.6.0+1108+b13568aa 2:1.12.5-142:1.12.4-28 selinuxcontextscontainer-selinuxREADME.mddevelincludeservicescontainer.ifpackagescontainer.pp.bz2templatesbase_container.cilconfig_container.cilhome_container.cillog_container.cilnet_container.ciltmp_container.ciltty_container.cilvirt_container.cilx_container.cil/usr/share/containers//usr/share/containers/selinux//usr/share/doc//usr/share/doc/container-selinux//usr/share/selinux//usr/share/selinux/devel//usr/share/selinux/devel/include//usr/share/selinux/devel/include/services//usr/share/selinux/packages//usr/share/udica//usr/share/udica/templates/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protectioncpioxz2noarch-redhat-linux-gnudirectoryASCII textSE Linux policy interface source . /etc/selinux/config _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if /usr/sbin/selinuxenabled && [ "${SELINUXTYPE}" = "${_policytype}" ]; then if [ -f /var/lib/rpm-state/file_contexts.pre ]; then /usr/sbin/fixfiles -C /var/lib/rpm-state/file_contexts.pre restore &> /dev/null rm -f /var/lib/rpm-state/file_contexts.pre fi fi #define license tag if not already defined/bin/shutf-849fc9b2dbb3afd99bed6e280fd8702bda44f63f465c4c38e62e05c626e91f1c7container-tools:4.0:8060020220315184858:2e213529?p7zXZ !#,_p] b2u jӫ`(y-dbjq;fϕ . SǴ\+"@ TWS\p5geLb$5ty8@,Mm҇.2+uW>SF?aP251؛VEaXfdQ].~Z%qw"Խƽ z>hu]l]a˨ӨEHƬIӪta*)/d=DvAp$^6[W*M WKm 鳼 3s-7h,0bRLe"{8i:M%RV"2p)ԧV\~[S,Hޱ,?T\](9\Šا-I! , y<0A;eHg<ҝ^j/~vCVlu"$o a.G™M^]W=db1f >X0NUlTzqTZ{O'1A4ØSh@`t &xFyOapı5dF3bjٛ>)++U "OsQrQH]~, \V/FI}⒐l!aXDž%ų쓀PF5[]ws@'W^3y4>Hr}ꕛ~z 7E %6 Eߊq?5z9RK3jWD@6S!ٵu%q4IoRdZYV8$s\m\7_w=ܮ &S1/YWh낾A>/ W9q3~{\R (vҼ$u2b#)#:ZNNysnD˥ +rHWy Y:Gj%A45)E/#> փܭ1#N>}EKa ɇȏ5 uJ|->Dr# Jf \3-aWG;?fma0jŰzr XBp5U[?8Ox̥x/D (fduxE!\f|f CdRoGeX2ȏu21_c1Z#PwT/$7x ^k= t%LK/G S *h~\9o0k{w"D}#8i15#m7}jzqX?/ѝ{\d!n|Fa2&}b\e*M]@1n* W>i\D0fbp=[c y Q ?ӵg[KYTjr#|˹f z|}DF -Lo)N*s1=U&>`=) ]G ~3"q攷>ri$yN ̮MR Ҟ]*Cv9D{(^ۀXAG=-<g>|>5VM̈GCS-`ɍm-b)=)RJE?M#i̯RWxv3M B_[}6v1sJ|yj*0^("X-\ @i\@#&\߫3`idנpdo犻Qùԥf?n=\?tOff)RO a.m-RXsVXly&Gkpi"aNi[oBA$)> ˞VmR_܀5 Tyoxs Vu4lb<QSd68;-2{ژIΫΧv2 7Wapßȋ x%5=ğ'7Zb1[Զ2kV1iUDe.Aƿ$:g;ǁV%f Ջ%ߋ*2$D3lcx!Wxe8J%{UfnPSD[= g8xqh{LWw, |%.Dc(h9E'eXTf<(U>'`G[|)qR-t j{x?]0ixE&~J-i+UÓmvZQAd gۤҟ]鮭61qy>JuUC'X5;D; j˫2 x3>)mf`%kG*řL6eum%{f3gz7yJ x8 12d\H3#A6 Э(rj ;@b,`],pvQ`ty_V|$ŖM*H뉖E$7Ɨ;z@V1 XTO| SVv{1R+!ǕGaB"?30qM$cJc"׌d6sE=#\@9-{nhT|#:|$uwK 2>:zilmYhUR+LT3G*~(j4Ĉ1]-xs^\^Oc [;SO  gdU~W/:*W.h m J☈$t&!VnB !tWD'p9ڇISc-qr ('5`} .}3ͧd0eS ߚ!>sqʦnUt|.L@aE= L$b m*&z-2m/Y4J0 $Ot xqn3 p*<ڈpG*!KM!?8.Q 7MM&C3'M/eE{83jƛ_ i&l1(F(+jly=Px 9+ʠcq+6܅ .;jh2›`>NSc g&a|CflVoh_xM%kQ% 3M]ԌVE?Z\+t聯㙑ڌσWaqU-[LL\h)VrZ+ aAoOo%58goR48SzȤ-/਒JadIluLp)6$-ݯY2<gRx'".R&fo ! Z$,}v]9n2wu$h>2{$WzսGgYbi%x^ףM|œJlSNܽҔT/B? nP&thE7IBSϘ97cHGv]E2XhboUDZ--?q_G;Z2Ǟ8j%hCw.[b`Kvٵ{!+8N\\Oxz*)4y9nNoD$7IC&y]K>Gvj%~F΁R&LfKvMQ#Ok(,f'kˡ~7"~zxf8 G ӕgm^8$Yc "6&O \˶ѦlW~EXx+awPLÜIŬ9͗UjEmMW` ߘl|O? ^C[ %;?),2LQl+ :B{}=*W/;.v>TϚG\ʐ7åzˠ"04Xk(U;o8~0=!"5Ucҧ]dZ?Vb<;T NQ P7$!+Ie fn]Լý}@yqaQAp_ aCY2 ;|9a%Utm4ʩ[V@[$R~i>@UEp؆ kQ#i66kܯ%BK."h_<5AZ5n-d߂:$OewHsZs#/6HJ_T0ƹ~'6fCl="YL@%"q[/ B=XeA} q,a񢞓HƁVYa=3o'Un/*$N[N8w[WԯaQp4n_KeYOu yI6\r@\#EU/™]p?b dBsA2/nc !'7Fv4ֲw 6YI FM8@NM*@&?[/K4l8M+x#xCHFj*Sv0ZI4YUg&RV>luV鼧#p9B$[9iȪ[ਹ og:X-7tc1FKs` V7WV5(NYQ9; &s]Eh#)R OuxOR:NJ4ˤghp "nTQ%Y/ӉDLG!gRi$.j]}[k@.Qp94+ LOS8rZ3 镾LxwUj@6go~0z)З_C8gMttuY@gO;]5B ͨ90+ zb^ :ա4X3f0m P dPleV\)Dil9be6+j޷LD[A ;\5quAkE6X@}jJ_hsS3 Dv-J|O?₏='E7mb["5Ak|/zT > ټjt &fn<>xMpg.oc{j]6ܕK|Q2_آVuY*Q Kcj El9 eP<\Lٗ%{nmaM5bkUi[梚PT\+ }*>1I2V4">@us[8+&}tΒpaU.ݛ{1fQBa ?FUY"JG_+)6SɚDA)^ss󅛕PQC9)ɴ$P 3_ȝkC31U=gZ1ReZNZ Z3Ğ0laய'ib^=JW8<`~;4@afExJhtFiWK#)M:ίI^w!5${DJKb@t08JC`t=V~آ%Ԩd(sl)] wBr;ϐ}+񠻫.iW譋!xk8X–[.A?*\3><3S.yR͖]UٓLAr+7JN|K~}:^PYj 7̚B`BAB_Y{3a*oE:E9fv(KC;h2ҒwoќO_[Ҍ4'=fiTtc Z9v"W,B{eu9şwΞ(kn54o,^ 6ER5;{{/L|E:rqmROdL=&=ƨ0~j҅wPqrByڿ.V׍3kRŠ~x!@ !$*26D9 /{*heߵSf,15zSvPtFl=3p[h މ8q;5qo'"v A}Gw`N0֘.=<2ùH_ҥ"10ʹi6!Fexnj tPsl4m$s,zvܷFA\ƅǙ9,͟!}Wy|ō92]߷ܪ{Qz9!VNGpEAт m*R%_a+Ҭ)'A'$ ^T亭ScvHVI>$)N4O;گA\ʇQEⅫ|=+6SU[;疕ChjZ#ͧfc~09>9hj@]]g I2 y$5G)A{%.:٘N>*~-u[vb3aL<#K)eWpIZ4%2"6EmpC&Ƒ4-+<ڡ[&~9^dDsͣ޴Ȱqmkp`ɋQV |߱a9$ܪV8MT%PP()nGt&SVHS'{ w: a|*ns9cVWJٟC57܌7/6veJOEﵼ]B!B-q!u*s=UAC֢tsH9|m&s5S1nRY}NHh!} *_S9&cɘnspQ"fwhufKTm3X$[(TPedlѲP{U1M?KAjI$ ), F!4!hd`ME5^$Эx_8Vˤ՗hY75uoﱨCl!I1Hb,RIZ5T%dZ3k[ߎ@Ȕӣ1 nHȢX=Dr*\i>WO~xg[HO;+s2oz&ʺk7ހgKW ٩q5cGBp}'OzFwۚX¦ .4 oL*9PC:7fBіwl.yj }0cq#Tuᩀd~W~aIL,`zafVH}=2Fm 59?2nlWyehz=Ekqx& .!6jh[01[;MR!ZF nd+PVEy^'% ; s@%l},^f:QdNGRVHuoP\I+`C(ibW導pSՔ ;2|iڰ@1RٙP+Z3-{K,SY a."XV5 c=MH6*+iJ_z?W܍?UL2{Jm IW#j:GrNʈ!YrlɛHhc-&Qo9qG9x/+R/mo,kRz۵U \۰rn* d(S' 5AV{<{2>:4i@lO{FtUԜD"酜"k/?bZ!5{;ɞZCН`o%\j1+9øXM8Z.ؙ_{!;n9[1(&D=Qi$w~.NX>w)UjF!O',waU6XuТq*iqHϯO7趲FUAM'$N8K4*FDB|>"a0Eқ?(y*4 G[jgcLrn!ڢq<)JQcp[VEƌ&NCWQ h6_|<`zr@f!6Xτݡ>9))L'2W4鴵F~{-*c#NMCX&‰9y(W5 Z'vnf#0QϙS3"[S!TQ ۻj~E\,z/ysEKdY(.t"v4ouk&)+Yze;d\coI YN }N(۱|!r+ G%֤(U4װ[rS]ĿaLà!s 8ՓRfJ(NI@ |RAߩQƅSZMgˀF 4X;V+Ljn|_*[+bxQzqmaV/?wBzO_eP^߳P9)-rP#j7̐>wiXF'TIu#VRO3|K)dp&L\ΰfW)&QП>q4o`i1ZiyY}0VH]q>]8{` fhJ__?\*FBΓxE:Â-`6dn?DʼAot̀!3.}U2'DzKXTH ml)$-.`- ./ƺy#_(ׯ~h>0wr# GNj|5dg?^y ]l-mDUJfPri#lX5J.?Lᱮ%˕405RwULHP'u8joײ$?cL7}tf-zu6sjwK(#ov\+կ'k1sAC* d^ _z(|y#|+ L?#hYx J]?%\6'+ܲue'5!h ǖ]M H(F7TMEK;_ l >ŧ) ܓ/OU% ХN/P͘BF 8_eL_}TyrmlKn PR,(+bY:{JbrH<7V#taK??R8Su}G䊦v'ک{N.&5gb }N+`46-:fK20ldȚBzz x&*m*z~Ovޝ[󶋩2't"]|ks۰ٟiT+1(?z`ie `}:w4,*k{IeoJ&1ivLNc(􁂡yYvkYa˞犸,MtUÀCS[ K4C6;o <c YWfE w`+m$rm52GT-حןg~v@Fohem>vM=jQef6Td fNsRzD2C]x} Oqż0S!=x _~9_"́0:ʩ g2cC5g\Z$|%Yd*c`s6t򽧉= 5)z%EӀ@+@1&}a=O &WWMIdڳgT;6V.9?VnuD/97fwjވS/e纛.7{eto.bܠb,tYvzz c^"Z'{_}:D8Ig f~]2 ι2]y$=&|<;'zxD\J8UYH ~#rMI[)W,YefiD$eij _6}-V2k?FP|r_vE9Fy%r/EԤ,dӳ H1GA%d]iaLT3sǤ"h,SOPt_k\ӡtY}&hM1gOh@E<6|O2/D6x\ Pԁ|Ii&Jtxp0uKj>>+ᾀ朕O׊Yp9;;}=B8k7zEB~j\0VB#/ו~Ky q?6' 8 wv0][pCJI/g]$aq1]UֺC+ǯXwm%g~]rh86(8aDtU)uRzXtƸRj2Vola"~Qeur%=cѳ w'K™ׁEE,5$@:{Y-ԝ`aJb9_ZkIzɌQۆCz cTUς7pCL>Jg8J8S,A^pDGכڹʰ(/jSi^#k*l%paZzaQr5*º[y퓦PS ȱL[0d9*g`Ğ_ jY1I\fYsys>|}&k+!>p{o$,2yB=I ņqᓋw'.j|c*&^ף [| 0 ~d̃f `D1XaK?ЏJNqpEX>%d!:(3d( V^5 jXoI 7L\AL_O'MJNJ=CۮGЁѾAU9K,Ue7IynqMO8M(Գy;yOMO|\&Ic$SAKɶ2Nf؁`gڥ4 fS;O熤y]ro+TeZ[ €}m),.ټÁ15rufޙCՔ0!C1P,յgP;~éL1.\&[Q+V |35ֈRjPUט yf=[ <3>u;k{v0Z„Av^Zph竣zl|HQݲXDT]4j]ý*Bӄj!+rV?7Pw3Z$B캺3-lsTw͊;.4w|r&dIrي=7u W=y6D;kMy-ZK4,uG3Hk9W0kQZiǒ~m2: *uR2NIh cIj =}N22ߢYB!1;`һYSk $|%=H5ؒv?S#|J:IZK`{aAxrpRkѻdzS;P3Yrct}yQzkȦsRs&WgF._pe' YQj!P&cy !@|@ ~߿e{ʸZff~gkܷwIeD;mb)Y*e۾Td9Vdl!+~I7֣ 30>zQV_s"W/Dc"ۗ/z*;QUg+GϠum*~P&s \c~ZW d_~Ct480-xJ+.fovnI44y6/E\L\C-3 3oFGyP3CwFSPE6Ep T啲(9\@Ex^emNytvg7au!g$JD̩m$\Ts?z: H{,''Zfp?W,dt/`^جI\{&*rw` N0yK"ꢄ;m0B]cvrghz_ϣ5W0i->TO_(L}ziMC!^Z ֳ`=V~ݧhsWR_e.j3Ow% th=8c0nyThMn[إM 8ȴF?s!4>o`Crf' tMHK#]w&Wr.#ͺFк3kqdEY7nd>7|~ȶ  VX)6:lъ*C4,MNxXalRAhr]tJ_R5<#w8޼C.2Z.SM->x[x2фfi0X " -R d3vڠ]ԞNT퉉kQkPH3$LM=}˞k*e x}*(0|~)g~R8{zd' O`JL)Jei:=@F_Q3>`)P`Ra"'xWOB\9d;x-;>9Lۡ%Yz$o`r8Cb |:!sIi\M1ˡ \"E/5ʹ>c/Q.k%eK|G^v#TJ\ 1.b2@|Ջ>!JI#2[aޫ _=ڣ.;a#'J)`?Wа9 4˧ci+T,{R\~Gew`BD)oXh*kҕe0v FU^q\Hb1mr-O'8.˃ZyΛnsPK͊]]j5_4rts!K)c5Ͳ4HVslH߻zBb]>:"^: \";`1Ӫ8`xYAe`6|uWrcG# DO?lʜkVM'|B[^U7K2U_z$yNvUNl)*32F=uI ƿ"v3`h7g2`Fu{&5h*%>.ԁXsTyLh ~*A,)?#;B'Ìm ))>ѣ7RV17>GϚp'Nsu~xvHrkVUۜRشQv61͚&34 ݋Z. 7tNs^[]r`{$Qzj?qawh ծrNh("/Cyp6' s 4DYm}b&w+JN@\gy-7`Ț ͗`R-P z) %MhDrVo2,{laIfiIav ] j"D'>yM\eL! QxMO~~Nu c[ç-'wZ;)*Hb tRԿջIŇ + w}渁2y{x6B/u 0whL峇ӭݛ8Z_{ z/b7 SNq3Q(RXA^%v æPa?X2KW!G0 38vB5 noi8[qY0-柶r6_F)]%?ؗOt]DL\KѨta\wϨdͨ#'25Wi~Ka(S ,+#R 3:b^Dt:µŀN/,uy-dmۘ&Qڦ|SEsws*nlH b`198&b 胂|wwU ")N냱TҩCnl>ǖI& qpܰ, j!_ ^0˸ r-N+2)=98&4y&Ko~=PٻK# gu6d㟦D9#Р2yO&RXVV?kez |0gT*t9>*_?Jȕ OXx0?DVq[ΧVgsX*Mh`m+)V@_Eη?1AIǃgm^$,m%-"R9<}(lmmq,IBհF,Ȧ8޴!]cn?dҦGd45ƕw0Ru1 x<qlgJ[r*@wg|I 8Dڣh.J(&7t%ƭ\/x%bC&D/PrQ|3<h'E 든=̮3Ȼ)Q?e{t,GI1 8!}] d xd߹}D_urZiXz7ېTZ,9?¯3Yt VݩS$+ Ѕ oȸz)`ŲR4mQ˗ DRc_ufAL8$p kY(7H0-kE&\==4X0f۫Øר, =S=k[rZ[р> jQ1ӁMe&6h.Cɝ68'횅#(lɗUTMRG7uc~]K'@g |(Qh1 juXqE=-|Z&B 3\p-oFw嗲"X@.[e>u Zԣŀ 6PDz+[~!ORpPj \'M|Ϳ΅9ۇj)2sx1VTG@Us+*WJBi%ɡ~sj{>G~ðe.+3Y f[=cPZ|N2m|Ĉ@<$b}ʧs̹Q|,1P>-sȁq|,-# YN?m0 ]SV-0"00I2l+^a'8nԷRS5W_ k dv#m+HeGT*P 7GK ilH3͏: _"5.Qu5џokfyf۔+ =A(UvN0?.~Sn/N~u:ZLӑHȏf걌vcE3ع%1=NۿOi,,DL{;#vH׏˨UFSDe G}l%7pF" H4-hm !-)+, JHB.xm˛Y֊p1 sXqa}ݐR'Co]1ӅeS$DVynހA&|<0$(/rUdϥ{ϸ*w.'ːwFw"G=rn|_CVۂ7_ߕ(EKnDoKDm۶rf> {>L Sz\QTjd'̹:S v);IkN(SMxrAsu/('AR!Cu#B=Ga`Ɇz3)ZJjNW2h^ ٧z XI*Ӟ,&*ʣu:+ef0zW31<T}5B=szQR3Yknd3rQ_@\+51}WWew*ԓS;mFYfZ+;D~_^@#gʄa>^oaUH a hsMDHoǵckQ6YaZC DtDk^AngxȶPj<ϓiH 𑱂6z:p>H$_xښ2^kd2iyl2.=`g˞n&8(܆ 0ƿh:Y0¨4ڏ}X凰)U!.$+_He_\Ŋuav#yӽۏE}{]EmL8'h^N݃wpsWf6ȥM Ҟ9 l5a`ZǺ~|LfZQ5:傌 cpXLS‡M,TRϖqR[CyCԍN<0'Q̪c*.LgߑeʑBL\ߞ +B=FN$k佮q'i=> ?H+Vy^ |Z6H~8zaN" w7N}`Qh+K[?.|/9/F?E) Đ}@ /5!WG[-:Ti,]g#teҌ7c%)&@DX]FDDbg t"K܍ID J=X<>7uGաKuZ3vv֣a,W/}B1CQ+1@Keilj0kȍ1*_/,D ld}‚W 6)YvP5(<wp2*;1aAAф{xq:1m9"gq7&@od1J&j4dChD/>Cfns-Lء?=Ra3,K6z|ȒBHz}bs .WH*ӫ9,Gҷ/"_+" H XW8MsRK"Ec)i~1uv<&Ǐ+N-,0;.j'ϖI T> #S=N\pf];ߡhhc4(/΍$@:uV(_NvJ!6/2i auR :{#r+Qw8gKԩpS\]ٿ uOPb,W" d93dhݍ@&NF |%kyK+4Q|Мi%(-j09uTjmC[M^hu-hyiJ1Ol|*ߣ ܓJĜCKMb>Z-4N+D ;&EEcvx`x% X~m>.@Q #r1t;#mB+[wD@FVc{sNc͵jyCyEfkMa)DL_G^8E]'rO4AɌh!?Oj a7})m`<愾DC°?$oWh`A> W Za^`>]&֞`^+a̓A&/P}LD%Ҋ N: P'm+#ĸ41:-䯨C]_y.T`ՂpO`NS 1R A!x؋zt>ȔӜi*IAzH*/rW]=e;:Uh7-s^IQd0ZYb;=TsA_^LN% #84SM#&]^괆]pG ?֨{OOiqW*!( -7Zh,@ *Ux˻!4zDF{HH*DkkO )T4&V213g`4(wPz`_JHxVDi@fI::cN b"GPtͪ;HZn(* "w-LӘ.ӡ aF'Xdl=LQb~KbPʐԨJƆtxHMj} >ޯZęA_,f"b);b_͒:!5q}?hK!fImk1MtI1 afϏ-Ck= Ye)& 7ߝPisPy`v >a_.R Nhme@ ݾ%m5R;.@h~ū?~D tjC鄖.RmQe؊![Gi6Ч5˹1$\epv&I`Z]=d ]Vs-qzP4cG2x2k?J=m}78a$ \Hc>MYuq{+}L?wZłLIa}CɞhPý˦:",cz_1Ut_CHP9piG('-+JZYfjmtx&'bgC kYnء %b ݳ%# i.uw\~k @;rIa }:RrR/06}d:vXySbK$f!JtetmSE6 _ȯ&Zx{&CŤЩ™>ЇΨ(j T&a}v6ЉIc#Up5(p-n駃ƓY'4[m Ȁl+W =/3̚~ž{HYI1 HFi}WΈ m{uFo}f!h4yUW}^o^sjbEgb}C39e!ci(5iLpah>v[1uGuT8 gQ<.M CRP[ʀ`Ɣx'Z}[s9phMdqn$%2Io,!{9_m0s<$bd.e*n<<8lb DBV2j>GT{"w g-^`G՟eٶ K7U)ئ6KfK/e(j B\OpR5hg۾(4QgkQs9Dwg(Kxc`!WNB4}9=b-Gutz jKz"&%D;N"JZ &gEr.]ݙd /^%3EE6@iQ*JQo@g6 KǗƩ8eMFl%\m /@;OU^t [9.n+ם,ć6鎑>Hؓ=:[hϒ>FX\fpz)PLN֞#{T*k\"Vs ;4lv[*I;5b`\:o *wRF-Zx6U}]]P^I_[6DM?5z!Otet&Z75