container-selinux-2:2.227.0-1.module_el8+804+f131391c h>X  H $CTe~v U]om?A&{I{rO'_qZ&,9ICéV1}jBΜd.KC O֌lV d[m8Fz@XMz&tM8ۚ+(YvLUo-$4vVS{xX+a v.&p]CQ_5N0 + mt mN 1|{Րȳ-NoCs3MW45=t;$σja/O%7s̲nOГEC6GE$x:"ՓtZhւAW#KQ_eC`QR=9쬖.yfO4vXJJ>& WmZ׌ٳuM#m]5ǡ4QbƝ#~h,Kz$)=>CDn)9D=nx ,> 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~v U]P1 t$/]e4Ylx*\۵&O}}A8o/ڑc vL'j̼&^FҥyZ%*Cp3+V5"q ĻcyփBdG<?ZAE-"-)92g[ 36Tť{k͎p-O;FyJ*PrVAM0/:@}'/$䡿GXly#KE$wC'd^25^0)(n'[L~pfo x|6ofo>pIm?msd8 < d '-4m0 X    $  8   P  L/(89:.=d>d@dBdGeHeXIeXeYeZf4[f<\fT]f^g bhdj=ejBfjEljGtj`ujvkk7llllm@mDCcontainer-selinux2.227.01.module_el8+804+f131391cSELinux policies for container runtimesSELinux policy modules for use with container runtimes.e x86-02.stream.rdu2.redhat.com eCentOSCentOSGPLv2builder@centos.orgUnspecifiedhttps://github.com/containers/container-selinuxlinuxnoarch . /etc/selinux/config _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if /usr/sbin/selinuxenabled && [ "${SELINUXTYPE}" = "${_policytype}" ]; then [ -f /var/lib/rpm-state/file_contexts.pre ] || cp -f /etc/selinux/${SELINUXTYPE}/contexts/files/file_contexts /var/lib/rpm-state/file_contexts.pre fi# Install all modules in a single transaction if [ $1 -eq 1 ]; then /usr/sbin/setsebool -P -N virt_use_nfs=1 virt_sandbox_use_all_caps=1 fi export MODULES=""; for x in container; do MODULES+=/usr/share/selinux/packages/$x.pp.bz2; MODULES+=" "; done; /usr/sbin/semodule -n -s targeted -r container 2> /dev/null /usr/sbin/semodule -n -s targeted -d docker 2> /dev/null /usr/sbin/semodule -n -s targeted -d gear 2> /dev/null . /etc/selinux/config _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if [ "${SELINUXTYPE}" = "${_policytype}" ]; then /usr/sbin/semodule -n -s ${_policytype} -X 200 -i $MODULES /usr/sbin/selinuxenabled && /usr/sbin/load_policy || : fi . /etc/selinux/config sed -e "\|container_file_t|h; \${x;s|container_file_t||;{g;t};a\\" -e "container_file_t" -e "}" -i /etc/selinux/${SELINUXTYPE}/contexts/customizable_types > /dev/null 2>&1 matchpathcon -qV /var/lib/containers || restorecon -R /var/lib/containers &> /dev/null || :if [ $1 -eq 0 ]; then . /etc/selinux/config _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if [ $1 -eq 0 ]; then if [ "${SELINUXTYPE}" = "${_policytype}" ]; then /usr/sbin/semodule -n -X 200 -s ${_policytype} -r container docker &> /dev/null || : /usr/sbin/selinuxenabled && /usr/sbin/load_policy || : fi fi fi6fZb0(: BA큤A큤AAA큤A큤A큤e e e e^e e e e e e e e e e e e e e e e 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-selinux-2.227.0-1.module_el8+804+f131391c.src.rpmcontainer-selinuxdocker-engine-selinuxdocker-selinux         /bin/sh/bin/sh/bin/sh/bin/shlibselinux-utilspolicycoreutilsrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)sedselinux-policyselinux-policy-baseselinux-policy-targeted2.5-113.0.4-14.6.0-14.0-15.2-13.14.3-80.el83.14.3-80.el83.14.3-80.el8udica0.2.6-14.14.3eeqe'e ddhd@ddm@dcp@dbdRLdd@d @c @cc_c!@bVbbkb_b<]@b%b@bOb@aar@a@a@a@aaa+@aaa]aQ@aI@aA@a'@a&0a /` @`9@`Ȗ@```q`@`@`N@`@`dd@`Y@`&m`_T_`@_%_%_F@__"_5+@_16_p@_5_X@^n@^Ӝ@^@^^k@]@]B]]@]|@]@]X]W]R@]@\M[[ͻ[[@[[Xf@[L[K7@["X[@[@[[[Z@Z?ZZZ%Z%Z@Z - 2:2.227.0-1Jindrich Novy - 2:2.226.0-1Jindrich Novy - 2:2.224.0-1Jindrich Novy - 2:2.222.0-1Jindrich Novy - 2:2.221.1-1Jindrich Novy - 2:2.221.0-1Jindrich Novy - 2:2.219.0-1Jindrich Novy - 2:2.218.0-1Jindrich Novy - 2:2.215.0-1Jindrich Novy - 2:2.213.0-2Jindrich Novy - 2:2.213.0-1Jindrich Novy - 2:2.211.1-1Jindrich Novy - 2:2.205.0-2Jindrich Novy - 2:2.205.0-1Jindrich Novy - 2:2.199.0-1Jindrich Novy - 2:2.195.1-1Jindrich Novy - 2:2.193.0-1Jindrich Novy - 2:2.191.0-1Jindrich Novy - 2:2.190.0-1Jindrich Novy - 2:2.189.0-1Jindrich Novy - 2:2.188.0-1Jindrich Novy - 2:2.187.0-1Jindrich Novy - 2:2.183.0-1Jindrich Novy - 2:2.181.0-1Jindrich Novy - 2:2.180.0-1Jindrich Novy - 2:2.179.1-1Jindrich Novy - 2:2.178.0-1Jindrich Novy - 2:2.177.0-1Jindrich Novy - 2:2.176.0-1Jindrich Novy - 2:2.174.0-1Jindrich Novy - 2:2.173.2-1Jindrich Novy - 2:2.173.1-2Jindrich Novy - 2:2.173.1-1Jindrich Novy - 2:2.173.0-2Jindrich Novy - 2:2.173.0-1Jindrich Novy - 2:2.172.1-1Jindrich Novy - 2:2.172.0-1Jindrich Novy - 2:2.171.0-1Jindrich Novy - 2:2.170.0-1Jindrich Novy - 2:2.169.0-1Vit Mojzis - 2:2.168.0-2Jindrich Novy - 2:2.168.0-1Jindrich Novy - 2:2.167.0-1Jindrich Novy - 2:2.165.1-2Jindrich Novy - 2:2.164.2-1Jindrich Novy - 2:2.164.1-1Jindrich Novy - 2:2.163.0-2Jindrich Novy - 2:2.163.0-1Jindrich Novy - 2:2.162.2-1Jindrich Novy - 2:2.162.1-1Jindrich Novy - 2:2.162.0-1Jindrich Novy - 2:2.161.1-2Jindrich Novy - 2:2.161.1-1Jindrich Novy - 2:2.160.2-1Jindrich Novy - 2:2.160.1-1Jindrich Novy - 2:2.160.0-1Jindrich Novy - 2:2.159.0-1Jindrich Novy - 2:2.158.0-1Jindrich Novy - 2:2.156.0-1Jindrich Novy - 2:2.155.0-1Jindrich Novy - 2:2.154.0-1Jindrich Novy - 2:2.153.0-1Jindrich Novy - 2:2.152.0-1Jindrich Novy - 2:2.151.0-1Jindrich Novy - 2:2.150.0-1Jindrich Novy - 2:2.145.0-1Jindrich Novy - 2:2.144.0-1Jindrich Novy - 2:2.143.0-1Jindrich Novy - 2:2.142.0-1Jindrich Novy - 2:2.139.0-1Jindrich Novy - 2:2.138.0-1Jindrich Novy - 2:2.137.0-1Jindrich Novy - 2:2.135.0-1Jindrich Novy - 2:2.134.0-1Jindrich Novy - 2:2.132.0-1Jindrich Novy - 2:2.130.0-1Jindrich Novy - 2:2.124.0-1Jindrich Novy - 2:2.123.0-2Jindrich Novy - 2:2.123.0-1Jindrich Novy - 2:2.122.0-1Jindrich Novy - 2:2.119.0-3.gita233788Jindrich Novy - 2:2.119.0-2Jindrich Novy - 2:2.119.0-1Jindrich Novy - 2:2.116-1Jindrich Novy - 2:2.107-2Lokesh Mandvekar - 2:2.107-1Lokesh Mandvekar - 2:2.89-1.git2521d0dLokesh Mandvekar - 2:2.75-1.git99e2cfdLokesh Mandvekar - 2:2.74-1Frantisek Kluknavsky - 2:2.73-3Frantisek Kluknavsky - 2:2.73-2Dan Walsh - 2.69-3Dan Walsh - 2.69-2Dan Walsh - 2.68-1Dan Walsh - 2.67-1Dan Walsh - 2.66-1Dan Walsh - 2.64-1Dan Walsh - 2.62-1Dan Walsh - 2.61-1Dan Walsh - 2.60-1Dan Walsh - 2.58-2Dan Walsh - 2.58-1Dan Walsh - 2.57-1Dan Walsh - 2.56-1Dan Walsh - 2.55-1Dan Walsh - 2.52-1Dan Walsh - 2.51-1Dan Walsh - 2.50-1Dan Walsh - 2.49-1Dan Walsh - 2.48-1Dan Walsh - 2.41-1Dan Walsh - 2.40-1Dan Walsh - 2.39-1Dan Walsh - 2.38-1Dan Walsh - 2.37-1Dan Walsh - 2.36-1Dan Walsh - 2.35-1Dan Walsh - 2.34-1Dan Walsh - 2.33-1Dan Walsh - 2.32-1Dan Walsh - 2.31-1Dan Walsh - 2.29-1Dan Walsh - 2.28-1Dan Walsh - 2.27-1Dan Walsh - 2.24-1Dan Walsh - 2.23-1Dan Walsh - 2.22-1Troy Dawson - 2.21-3Fedora Release Engineering - 2:2.21-2Dan Walsh - 2.21-1Dan Walsh - 2.20-2Dan Walsh - 2.20-1Lokesh Mandvekar - 2:2.19-2.1Dan Walsh - 2:2.19-1Lokesh Mandvekar - 2:2.15-1.1Dan Walsh - 2:2.10-2.1Dan Walsh - 2:2.10-1Lokesh Mandvekar - 2:2.9-4Lokesh Mandvekar - 2:2.9-3Lokesh Mandvekar - 2:2.9-2Lokesh Mandvekar - 2:2.8-2Lokesh Mandvekar - 2:2.7-1Lokesh Mandvekar - 2:2.4-2Dan Walsh - 2:2.4-1Dan Walsh - 2:2.3-1Lokesh Mandvekar - 2:2.2-4Jonathan Lebon - 2:2.2-3Lokesh Mandvekar - 2:2.2-2Lokesh Mandvekar - 2:2.2-1Lokesh Mandvekar - 2:2.0-2Lokesh Mandvekar - 2:2.0-1Lokesh Mandvekar - 2:1.12.4-29- update to https://github.com/containers/container-selinux/releases/tag/v2.227.0 - Related: Jira:RHEL-2110- update to https://github.com/containers/container-selinux/releases/tag/v2.226.0 - remove dependency on policycoreutils-python-utils as it pulls in python - Related: Jira:RHEL-2110- update to https://github.com/containers/container-selinux/releases/tag/v2.224.0 - Related: Jira:RHEL-2110- update to https://github.com/containers/container-selinux/releases/tag/v2.222.0 - Related: Jira:RHEL-2110- update to https://github.com/containers/container-selinux/releases/tag/v2.221.1 - Related: Jira:RHEL-2110- update to https://github.com/containers/container-selinux/releases/tag/v2.221.0 - Related: #2176055- update to https://github.com/containers/container-selinux/releases/tag/v2.219.0 - Related: #2176055- update to https://github.com/containers/container-selinux/releases/tag/v2.218.0 - Related: #2176055- update to https://github.com/containers/container-selinux/releases/tag/v2.215.0 - Related: #2176055- add watch statement removal from container.te - Related: #2176055- update to https://github.com/containers/container-selinux/releases/tag/v2.213.0 - Related: #2176055- update to https://github.com/containers/container-selinux/releases/tag/v2.211.1 - Related: #2176055- use conditionals from https://github.com/containers/container-selinux/blob/main/container-selinux.spec.rpkg - Related: #2176055- update to https://github.com/containers/container-selinux/releases/tag/v2.205.0 - remove user_namespace class, thanks to Lokesh Mandvekar - Related: #2176055- revert back to https://github.com/containers/container-selinux/releases/tag/v2.199.0 (2.200.0 fails to build as it relies on the new selinux-policy which is not there yet) - Related: #2176055- update to https://github.com/containers/container-selinux/releases/tag/v2.195.1 - Related: #2123641- update to https://github.com/containers/container-selinux/releases/tag/v2.193.0 - Related: #2123641- update to https://github.com/containers/container-selinux/releases/tag/v2.191.0 - Related: #2123641- update to https://github.com/containers/container-selinux/releases/tag/v2.190.0 - Related: #2123641- update to https://github.com/containers/container-selinux/releases/tag/v2.189.0 - Related: #2061390- update to https://github.com/containers/container-selinux/releases/tag/v2.188.0 - Related: #2061390- update to https://github.com/containers/container-selinux/releases/tag/v2.187.0 - Related: #2061390- update to https://github.com/containers/container-selinux/releases/tag/v2.183.0 - Related: #2061390- update to https://github.com/containers/container-selinux/releases/tag/v2.181.0 - Related: #2061390- update to https://github.com/containers/container-selinux/releases/tag/v2.180.0 - Related: #2061390- update to https://github.com/containers/container-selinux/releases/tag/v2.179.1 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.178.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.177.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.176.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.174.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.173.2 - Related: #2001445- update minimal selinux_policy dependency - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.173.1 - Related: #2001445- lockdown allow rule was removed - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.173.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.172.1 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.172.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.171.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.170.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.169.0 - Related: #2001445- Start shipping udica templates - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.168.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.167.0 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.165.1 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.164.2 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.164.1 - Related: #1934415- fix the build of 2.163.0 - Resolves: #1957904- update to https://github.com/containers/container-selinux/releases/tag/v2.163.0 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.162.2 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.162.1 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.162.0 - Related: #1934415- do not use lockdown class yet - it is not available in RHEL - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.161.1 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.160.2 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.160.1 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.160.0 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.159.0 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.158.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.156.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.155.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.154.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.153.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.152.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.151.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.150.0 - Related: #1883490- synchronize with stream-container-tools-rhel8 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.144.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.143.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.142.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.139.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.138.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.137.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.135.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.134.0 - Related: #1821193- synchronize containter-tools 8.3.0 with 8.2.1 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.130.0 - don't use macros in changelog - Related: #1821193- update to 2.124.0 - Related: RHELPLAN-25139- implement spec file refactoring by Zdenek Pytela, namely: Change the uninstall command in the %postun section of the specfile to use the %selinux_modules_uninstall macro which uses priority 200. Change the install command in the %post section if the specfile to use the %selinux_modules_install macro. Replace relabel commands with using the %selinux_relabel_pre and %selinux_relabel_post macros. Change formatting so that the lines are vertically aligned in the %postun section. (https://github.com/containers/container-selinux/pull/85) - Related: RHELPLAN-25139- update to 2.123.0 - Related: RHELPLAN-25139- update to 2.122.0 - Related: RHELPLAN-25139- update to master container-selinux - bug 1769469 - Related: RHELPLAN-25139- fix post scriptlet - fail if semodule fails - bug 1729272 - Related: RHELPLAN-25139- update to 2.119.0 - Related: RHELPLAN-25139- update to 2.116 Resolves: #1748519- Use at least selinux policy 3.14.3-9.el8, Resolves: #1728700- Resolves: #1720654 - rebase to v2.107- bump to v2.89- bump to v2.75 - built commit 99e2cfd- Resolves: #1641655 - bump to v2.74 - built commit a62c2db- tweak macro for fedora - applies to rhel8 as well- moved changelog entries: - Define spc_t as a container_domain, so that container_runtime will transition to spc_t even when setup with nosuid. - Allow container_runtimes to setattr on callers fifo_files - Fix restorecon to not error on missing directory- Make sure we pull in the latest selinux-policy- Add map support to container-selinux for RHEL 7.5 - Dontudit attempts to write to kernel_sysctl_t- Add label for /var/lib/origin - Add customizable_file_t to customizable_types- Add policy for container_logreader_t- Allow dnsmasq to dbus chat with spc_t- Allow containers to create all socket classes- Label overlay directories under /var/lib/containers/ correctly- Allow spc_t to load kernel modules from inside of container- Allow containers to list cgroup directories - Transition for unconfined_service_t to container_runtime_t when executing container_runtime_exec_t.- Run restorecon /usr/bin/podman in postinstall- Add labels to allow podman to be run from a systemd unit file- Set the version of SELinux policy required to the latest to fix build issues.- Allow container_runtime_t to transition to spc_t over unlabeled filesAllow iptables to read container state Dontaudit attempts from containers to write to /proc/self Allow spc_t to change attributes on container_runtime_t fifo files- Add better support for writing custom selinux policy for customer container domains.- Allow shell_exec_t as a container_runtime_t entrypoint- Allow bin_t as a container_runtime_t entrypoint- Add support for MLS running container runtimes - Add missing allow rules for running systemd in a container- Update policy to match master branch - Remove typebounds and replace with nnp_transition and nosuid_transition calls- Add support to nnp_transition for container domains - Eliminates need for typebounds.- Allow container_runtime_t to use user ttys - Fixes bounds check for container_t- Allow container runtimes to use interited terminals. This helps satisfy the bounds check of container_t versus container_runtime_t.- Allow container runtimes to mmap container_file_t devices - Add labeling for rhel push plugin- Allow containers to use inherited ttys - Allow ostree to handle labels under /var/lib/containers/ostree- Allow containers to relabelto/from all file types to container_file_t- Allow container to map chr_files labeled container_file_t- Dontaudit container processes getattr on kernel file systems- Allow containers to read /etc/resolv.conf and /etc/hosts if volume - mounted into container.- Make sure users creating content in /var/lib with right labels- Allow the container runtime to dbus chat with dnsmasq - add dontaudit rules for container trying to write to /proc- Add support for lxcd - Add support for labeling of tmpfs storage created within a container.- Allow a container to umount a container_file_t filesystem- Allow container runtimes to work with the netfilter sockets - Allow container_file_t to be an entrypoint for VM's - Allow spc_t domains to transition to svirt_t- Make sure container_runtime_t has all access of container_t- Allow container runtimes to create sockets in tmp dirs- Add additonal support for crio labeling.- Fixup spec file conditionals- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- Allow containers to execmod on container_share_t files.- Relabel runc and crio executables- Allow container processes to getsession- update release tag to isolate from 7.3- Fix mcs transition problem on stdin/stdout/stderr - Add labels for CRI-O - Allow containers to use tunnel sockets- Resolves: #1451289 - rebase to v2.15 - built @origin/RHEL-1.12 commit 583ca40- Make sure we have a late enough version of policycoreutils- Update to the latest container-selinux patch from upstream - Label files under /usr/libexec/lxc as container_runtime_exec_t - Give container_t access to XFRM sockets - Allow spc_t to dbus chat with init system - Allow containers to read cgroup configuration mounted into a container- Resolves: #1425574 - built commit 79a6d70- Resolves: #1420591 - built @origin/RHEL-1.12 commit 8f876c4- built @origin/RHEL-1.12 commit 33cb78b-- built origin/RHEL-1.12 commit 21dd37b- correct version-release in changelog entries- Add typebounds statement for container_t from container_runtime_t - We should only label runc not runc*- Fix labeling on /usr/bin/runc.* - Add sandbox_net_domain access to container.te - Remove containers ability to look at /etc content- use upstream's RHEL-1.12 branch, commit 56c32da for CentOS 7- properly disable docker module in %post- depend on selinux-policy-targeted - relabel docker-latest* files as well- bump to v2.2 - additional labeling for ocid- install policy at level 200 - From: Dan Walsh - Resolves: #1406517 - bump to v2.0 (first upload to Fedora as a standalone package) - include projectatomic/RHEL-1.12 branch commit for building on centos/rhel- new package (separated from docker)/bin/sh/bin/sh/bin/shcontainer-selinuxdocker-selinux 2:2.227.0-1.module_el8+804+f131391c2:2.227.0-1.module_el8+804+f131391c2:2.227.0-1.module_el8+804+f131391c 2:1.12.5-142:1.12.4-28 selinuxcontextscontainer-selinuxREADME.mddevelincludeservicescontainer.ifpackagescontainer.pp.bz2templatesbase_container.cilconfig_container.cilhome_container.cillog_container.cilnet_container.ciltmp_container.ciltty_container.cilvirt_container.cilx_container.cil/usr/share/containers//usr/share/containers/selinux//usr/share/doc//usr/share/doc/container-selinux//usr/share/selinux//usr/share/selinux/devel//usr/share/selinux/devel/include//usr/share/selinux/devel/include/services//usr/share/selinux/packages//usr/share/udica//usr/share/udica/templates/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protectioncpioxz2noarch-redhat-linux-gnudirectoryASCII textSE Linux policy interface source . /etc/selinux/config _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if /usr/sbin/selinuxenabled && [ "${SELINUXTYPE}" = "${_policytype}" ]; then if [ -f /var/lib/rpm-state/file_contexts.pre ]; then /usr/sbin/fixfiles -C /var/lib/rpm-state/file_contexts.pre restore &> /dev/null rm -f /var/lib/rpm-state/file_contexts.pre fi fi #define license tag if not already defined/bin/shutf-866bd5d123b92cd8cb71046ec35fc1bde246ab4acfb97015daee2fc27f8375150container-tools:rhel8:820240105104119:20125149?p7zXZ !#,珄] b2u jӫ`(y/݊E4!?JsX}9>ӉCQüH?d=a'ݿxL9z;F*E67^=$X~GY,1:HWq4O>l-[*)_zo.ba.cx'W֮7NU߇ 1AV~tOd&a=T%3`4w疻"p  : c)6>}viߓuIHLHnҲП.d|8 6pGBx'3kY_z::Z^8*#$Af7l!ARa֚엚 ZQʹ!{W(G(5[ y4gM(q][UGxx{"&#TP/J%yBnd~0? Ikq6\fRh8&eJi,>/1>ՍT\gb 08kjxGR= EV*drL;G}c\iTwhoksʖXE~ G&/e{ o|ÀkL)y+}][21대%!kA+McH VJ y`'bIE!#7@ET6FC0>%2=TE]*Ȝ֛ W - }8O͞l_s׏,3?0M\#`ݓVܻ?X4&X9b}#S7qך7M%R1[$|F==Q@*մuq4ݯȓgv|(yշ&PZtFѨB|0Rq)T&H>T~%{}#'){d/`yxW]i b"s|Rp%AIG%UfOӟm"yu's#,䘩x#JLHbP*a<&DM賂t,+ݒ8,eBSHWnvNa d0>MiA+;!9\@'Ι̂I1 pY{6nV2u|hP+OD7ğN}xxzbSuOܵ6t9FUZ""osA<%<(R \EV9SТ@U_E9\$m/ƨVo!άp.2l@ 43^qa"c쉘 %yȂuƔ}4MO5{>O+^B_8rg !L\} ;XMDwb /&v[G:$QA[jV )(}&+Y^w&f+㡠v't5P0 xw.snܛ&iUynUduL:ST|Tli buK蘴Ђht¬d񆤻\+-+i?3"&^X;ܤ^<%EPq1^O/b[Ge~n~5Z1P42o>S4Rdo1U06f}::&`a;{Y}j%GuF7Nv^h7q\b2;$+fbA "|$9z)ۺo矖IHo!Kʟ1b%|ܘcJRcȾv!Ue} @)ccR|Roh)clv:`nP1 .Ζue&Q}46@  n{x}$:X?XJj+{ꫤ4gb9fq9v~uQUe s uȞ+z⒀xSOd*hGD9I|1W":Q'Qc;V[.qq, 8ʅCzAc4*x 1셜U0u6Đ7Q1iX4 n }INyLqKc׶6h&S=B+]]A%puٟ*Lt/D?L! !f{ Sݻ3#+#n4m/UT?4q0 5!_zqj4/-qƗ `vkY&Q'9%!:ƆQ_No _h .&x!AشV}iB Mbx$1dn'!DP1kGq2C~6RkWwb6se%_Ayjߤ IET{8x(A|g~FCf}#qN;`ݐyf-}v\»&eJ-`B\0ӱj%^& 9]odDdSE./piWDEݸe͟ #ȀnhңR{3@$5+9 IFsoo䈆2Բ"(2Ӑ?o6:ݸZ~ Q'>*R*V|Қ=i#? Ôa٨3'zpUDTt7 mBF)DĺI3#d:,(,]6|mمpy:Z|9cT[Q<;1P2AKF;oE$hRJy`l9 FfN5Z *rb(XjIb( A@$i7}Bi`]Hi''7R6LJUwTP ę \@}˲zh?7ȝ+fE0wjs'ZMCMk9ǤE`5}lh@׾G'''M=[˛O+ n1zԜx_^Xcjoq {e%V{*y߀YY`1-޽=>砇wzdi<P-&@Sé\\7aOf]M),FCqI״BDdEKv6kj2e)'75Bf~5k& *K-5RwMݾp)<&xK!ϩNʹXC&fraY5wew }O 8/]rviol{ =mRy!\]Ą!dÑd"w}ی^.T,KTGkqc܅%@ 7ii,, ZAj- 5yI{@M\I/2^em>Xϕ:C&iHv&ٰ/Bɣrr|Dt',B5('J 8tvb%P<%qBKIVmV5~*s*6}8!C͛yu k=c(ycH{Mk I橌a^g.&Ɂ 2bϭ=Ʌfi7Ʀe =;b..I4F>~7}kC;Xf+ ^z.|<~\X@*X#I=/VWWr~[soA @MM%}<.8W]R>'|97*W3  {ه`H㉡͍~6IT}ާNN$>8mۋ# ȚLn$QG7.B6IWzH#cF sFpm')bm{Z~[=.@clL/< c)RQ2jC S&O TrҤZY8:w|e{?YrBɡ $Uл_v;af"`\ᅢy ATO0ZӃzj_&GhC`7/ፌKY8e+YI&D#I{j}h'gG7oIۀLe IyjT`?/ya|d4su)/ʘڡ͝@Y6Ў|1Pn%7yY)pHa? C^I/BOs)lHwZ Ոeh[.}ϓi>6?`B(jme`5>u.MfS>O218ďOOjP8HxdQVV  BLM.Oy9цO}[YGMB3e  j34J Zu#(uj`I4GyTA;ߕs~2~x``tK,b_8HY ïN7,*,EjUz_'wJ#A(e+MI+7}bʯ>d sl8ȇ+룝Űfc%yٍ$e`W7zO=4/|vߌ!=|?h$_o޾eY.ƷE`@ƺC->W{wUo:GBü?B'IL@v \l<lЭj8ZonX4Y?Q-Dru`g^5,~'-z{W9ZlCն<*uIlӻ?UQ 2 'D;8c^[Cۑ2@T`)a`z9 լvt&OzŎqFyrQ m͑u轅|_pD2iwaHs;ʐmv_fPHnm2{,!6C+Y>2*537xf?IfG;oh~ Z El Y{L;A8KBڪߢP0oLfIK1bRsCl6,6#-oZf+*&.06&ߵRG~op)s0L$!%9~YʽOciv L+SW|>O^NlZXp/NGBN$bk,i"}#\3YSyS&t124 8W> Y:=u]5Nː! i1m0cojP+h| dr}΂jZ@VNӁ;ZB)Vd&:aj-_gN%%L;K~0,͏Lzz&Q{uu ~A6j9PQx}9634З/ZёHyV'5;* dÅoO/ s5%z-a l[d4uu3/-7$.L ?-<(5jʯ(\(N.ɏUh1ֆGEx>3&)c5TPr:Kh:W8fƍ?iO).D˯|]R? Ax˽8q汔-Y8 m̰rq!g*3#}ZBa4 Y kxe񛻖R6%>qXM6e l%&Ij+k;9hc 7L w s,SIv^q{JM_9l?SQpAK;o#r֛HߪɬA7M_U!6?X ̤  D*izNAZYkO KEDe8&3Ï^fh!t2႑&2 .*&D6r`14aXtGAӎg1Qsx.DeS*Ӆ9TuǓi <#ZG _sfMh~PN?Ys蚻ReyPyo[y%IJx=u^>{(kA$p[,/& {nD;kVַ80S_X"au;MU.a( y8R;W*+L|p0+?gXҏ>⊄W@ U\.*$lo?d{iq"5H;?eq/dC'< r2Bl'4’ f`qzTH sRA( i2CCGZ5:t[BbrC%IuUhJ gtDcfKqE}Usaypu0pvJ̃H0C|!d9t`VC{WZb "\q~>Y .{5_㍐CV_ <ɡŖH[Lxk nX$vUU%(&^MNm:5@ ܠ-p8#hZ(,!( F3yqO׎JfZ/5~웦tBFVV" b3Rq $2yA{7]a8_F9H,y,H"XRQMh3[HMN rmT\JsIsI>Z@\M4xHLuSJtV6XB\Fi ?^(K!" W!z$G.x-?ömϢ- c2p:qdeW 5Y Ieskǿ{5aT*綇#-3LI㝜_q:dL;.scX$KB%)6)]N]wu3߷y %t7KR9D妨A>rҷڵL:h&uJݹFA|_Ҥ%_ ʽey1W;gJRpΩ `aOBUǼ1^G4M2/V^lz!\<&@tR!})/q,l"ؒQ晧Sڻ6|NŲ@["p qaV.H"͔F&aS+ah}?N<jwCh[Yɂ0˧^. unZl#&܆k0q6Bb".k`b WzkoO,?_b>y`z@ߎ*X/y\;@ QVnfYU߇sT4 H`'WR\cŭ1Tܔi [m =x@#?I-ܤ:擿SHHf xشE׭=0ګJfǣP.} 4#륡]=]3nC-QB F"x/q4(e7)f@~ 8=&?X1mi}m_bM"qAOVbv1$]MaqjAUz53$p 5#+8EZ_"T#\0L4W I|zI%t$GujO+,4UۿtfTk:zzgA$qO_>xwo[8Ox> [-@(woeQmUְ7eݤv?`T(6'(.TdXO1,E3GNQGw/Q5I SݘTPS-Y}rKbXvt |Sә)_/2[,R%Xv8ET@FtV#nv*0jINu 6z&$(3Soʊ\HP~8wڥz%v M4;D~^gb4EL \%L{"*1OzGR=3aO)eS9V4CSy=BC_`v{t#QwY LVIwp;%{$k7sݒ%vdO)A6Q@HO$4{aYg0(b4b! qZCa| (3m $쳿+ Fwq?ghdD!cy14%ih"^2;Li!SΑ{0ܗ '#*y8S$2/.G'#=X0v5^mDpX\1G8 MMWBK4廯[FKEΎ}C)\|R{ 2*[ W;B^QKvS˒פ}Qȱ[sZ'uPH^]]T9ș8ܴAEmǧ#Pצ4Wi3͈+pѳѯaXETÐThV{$Oxz@& ]:Z2 Z99)"MxyB*'ͥ1h< \6gO9U&beȇ*8q}řx鱥D-c Hl&4π.>rWdx<7_Ig(td0irC1:,s $P(#֦gR̳eI' :J{G3ռ**曺%GF;Xd&ƛUPQ8;I_alF+?|=:#ZP' w%ӄ0vMaʐOFfoN#6`d#9M_ق( ry(zX]`hkhff7smAwfyf9R^l_AᯐATxdb$nի:`S=͎s:+oEo4f!i[ s=Z%-Q)dS /~|]==r}hX9Ы:q`M9MW㜽K^5bviwܑ@. FH#d$@/Ish>aPq>qqR|o//nsw\ޏUUG+3Qv3q}Pe|6Oucit!:SʰDE_dǶR$ ?;kM>qT4{U8/0]E/ 1*h5f:K}F8 Lms!0ϴ|Ab/ }|]ߚ }D(1h%@j^&F@zl,@RDq~,|su<A-.xݰ?ĩhGud+o·|Ӳ5]O5^7¥b0Ttx Nda&o@MUT !g acJb?` W^Wfxq,slj;GORÄW|C(ዂk*PQfvf}c#[x0 S^95OZ\@foYVsQ9)-x4{y|Pax[_To69Ð{.|L V :lg0q$p)g{w֦ VEd3(ɤz㧢{UlMqr=20=P<#Lsd^;,q̡{ZBPqN[R?si!(JZҖ!Ş jhEjrhSH@;^6'g'8ԷHxt R 3dtvt@sM }_ST5zP^ˬ7 )?R~aixZmFs+ -K˺m XVq<~$Kgn6@1 jΐoEk-1d7!a0L}n# B{'Oo:w:1dz1%4M r{3$ ZEط|C-CvjK Z@n~ܫw3J(WADnNkJ!QbK>H;ߜhjʀR&ά~bjVOQgR\K ܡ(;"ōAN$薉Na[򼅵` t7}]98ab$\9;į9Zxȕ.J%-˱#J̊ίkqib$&_ϲ6q⃿-[ӽ(yd+;7&u_?F G{S%~[6w@߮}?(}Բӱd/}+A܁ӵ:g9ي,<johHsEgDE!Kmx6pqV-/RRe2V-C( 2Jc8d6-IDIeGۮԪ2/6 AZb@m/ mjeX)I6sgm!> xo+4uSy:t4#i0"C⎳pGPS+GV҉饈9L4DXx_~cA1vFM Pl:,3(dǯf؜~7[m0a2+'31ިFq-r amsDuюhcQȃ&i'?43aނf U (J 7s 7[ AES@/N ß=&ȷiPF; Ueykken}QBÞ ΀"(2 gqWȺJ=wn84{  Ϙ0E)ުmyN4)GrԻ3n sr~#:uQ zhGVmD_tܷլ?mzTܕ}a_&o]*ßKyGIqI .F!U,)z[Iy݈J ٪ Fo{S 2!C4!y}1)t\" nx2~9>០FpBs3QF]\V< -䑷 xzc9z䯆MUtT&~_xuR-_3H rƮ[ݥ[_.k=axdWE:Ct/9f6 @M҉|@`jSsZXM; ǰyd=1Ff]0q%30V; d5xo\ŷg33f]| ЏH>C)"63[tՂbjdM}(@a,/~ @ҁl/z֪wvZq&J9 EYn ͞W˲:3-Yd׋vM}:t.׷0]K}? \0!m&=a#-avz=-ME?4HOtx%Ww*fxB:!ʍL qGyu~{'t tO t! aj'%+[~K$e=] &us .1>y-/}<'y0\+m<"~^?boGuE/۹U{ט+on0&NU/SI,4F%-cy4om _ +nWZkq{,"CߎzDsu˥]tEB_ۨ0= rh &*-ɻ˷ S)_3#@8S,qJد7(34c4LI]k xЁ鴛utyXeUw6@]hp P.j[&poG6춽kr D`&D7<3@JoBQLi'G[jx9Λ~p3ٴ;A,?Nҭx`~=ga2>g-+/ӣP7hc O)E3s(+dH2{pNi)şN\`ӴXW.s2K/L' X$qiǴ}M%/qYA8%OꖌZޑ,0R̳Kcnn՟.c9bc1o3yf޴^ת7Imxo2!?`Nw!N Q](!ksDŦ`RE^ Tii(#&0c K4p[DϢw;6|h$Sfj"-w;w1GcPFZ{}L2Ǎ" QǎqW<{J_:>@(K%$u٫(h;ķ gxZP)}WVo2\Jzb.E 殖U @&oj#*&l9ԄB8xDL/==i rvI^%cHww ]-H4EX m] Z0;H[>\ $\  Fuφ{J6/`,  ?6>UDReRprcҪ<` )vskxa˓A,}aPxR!&%Ruzy/^g16@-L`K/]/>[uʺH>6rk—2v>JfD ^'@d N ,ro.A%MV%K:RVRYHek-#5^t-^xK,yAqVvR Zq5S,R/Xp3`W;V?hwu%g6 NVDJGPEBPJ^7tĕ&N8IÃK` /Ntŏpf!m|oŠ}̍TyfTl?[cs|2%+ʑ&R()DYp{n{:HM ^LUv :h?4Dedp QIjIȞJ&dlDT eޕrw.ϮFR7O•Υn2_#vF]5>#'7 s=G6{G%}c9 @Wtxӌ_, ez_SdԈgn#HAi>E%9D<*pS,E+'(B>9TZTEvya-6KJ:P6nۛY˃/Ixբ~9%88aplq\.+y,%ۆ(ԎYQϓ _Z{ J~5{`Tk+xKy"h#:J)dMX>l7+"ŭ]QsHǜ\+??,||Ote\n-B¬yn>y+ydk$~KW!P^_³J=a}ޞe)AI_Zk2cOĴ74︦v\Kk^g5̕DD$s900Gv(ǍL쾶FǂEzZ Cy&"v=ʢLAtvEYKo=9O`@qQT[O7=b p9eW}{Pz Dz/rEIQ2Z}= 31ʾ;Myfa4˵:WZMMhyRՄ:P4+8HnKhqt;]KTRg?N =|==~X%ngi˜Sj+FYa;!W>FhPa >/ɏ~xi,-JwG/{C~iIcaѕ,z2.SQvHpȻM'|2b쏖w֢FtKoe8~<{;Eʽqj6 ;U,F M_>fA# }&_@ F||4#Yr^65۶? *9]fbǐ,TX/emON0|W}齮S[Z2z1QDPΠ/q/eGTl{||Ԍ+|k,+Tb:p@~9̏(^?k;6lى[ѫaѯTE1gjj STlMhgjfV j*&K [:.5&q놊hD8JTߋ [|/G?˱v ]u7؝Oq?xOj{A(\!U~ <lw~4;{jj12œdCE  4Tzg>~A3f8v%1iM f۬ȩ* !&nZ+k^|LOZwIm>rc+vY!7e9]@w  њuYS\զǴ#7 S\d~udz~VA&4YwQt)ywRSz,!!"&?"FЖ`7o[*_\.ibgZR[Ni:)k$*b4r}}8h>Ut8OO>1^mC(RkĔxΩ8xѓyHf(:ia,f1;+Z;t 6?Kgj@ب4HǨ \ПEZvEKUJP>=Й׻>V~ ۝C>u?F=8YFZn ruWeϰ‹Cp? *7|Җ裇AXR<2sp:8Gc1Jב^`D uު{BJn׳OoB0 &QU.yKXBp2a *8\3bXn x)i7CEyϡ7oPI*6ԃ/JeA bDES ?9횴*:D RdIa=4+uC &v '%&ɿ✏@KߐAᳺ<s|MNoud*SmFy[l|Ұ@mQƿ,6Su oM!' &TF+-4d5qz{b K:Ǹ;`y+ /b6|11\{1i+T0WG vq O?$O  |0 wKab21r#?vZa<;VmڎG {4IP B=@E$?NB*9WX]| Lg2c%oAkKmsMBôTrŝBwU I;yh`:QVY^Qdha&9tfG3q5ČIe,H5ӗD<p5GRE ,̸[j ^z.cRbh}~u9aP`mWQj?qϭI>W%~qUR.I&藸J.fdyنl^}̚E(J[k>x<-W=1+]S:HanM٢M\)x!(2ŔFZ缯zײnxZO}uG78Ny/ &*'d#յI9kKpDJ>i.xSӿ#Zl"td(8Gݲ0'WlD3D^%_qQ'!k)1 \n*sKvV0^rn2Xb֨ LBrM9Bچ8Oe5%?_tkʊC\^ (RC/6:W_]7@l @Ĺ~#46>2 㮇T/? ^f5\[?M&IQ6(9RNrO=ݫ7˫ ېTiW m#'ITOGp_vw^` ©})5PV,=%tr)cl2y)-߄xp s\|?`ԟä=UIZXprO CKfZx[Ä_є7l`1 ʈYR<]0~: 4H$߭FSIYS<џŊ1JWu͜nXhLY # X>Z_z}D+tFD[MLxLv/p rйo&SH:y4M+A-{kb8ukJGS,\&77eލ6Zj{BKzCJ4vHzY4EIu*;rf-t'-[k,6E.4Aw%>]TčK po)2䐸<6hdY*F$3/4>J @t ,Z06B a=FuO o0Ęi_^KJȍ|JE~%h'K+9h)ԍRv jxGp%Q!*GE:Nsg#Qj!\A0*`-vqG%s砀ӶVN'<XAc<0eE5LT__d/O&z>[qД1vEI}J8%\SI g] "Ar:#=Gq;irw>Ր97+`+ќ>U*'n:~ BXZ}F, )<X3Ů$)wEShP/࿢жq&3d6DdCgN\q6VV8-l-wDK!@pӼUzA /Їq!e6G =Ѡ j޶ N^)V̨*{A@EQ\ct|s$f-ͱcd9'4u.RTR,:IŚs'pr Cd. mWkzpݛF)̊ *t+m φp1E %1 _bto\ .`r,"Q,c<:qɨNaƉUUyk7MPԳdH.¿CgJ `"=K&;r@y?#ܥƔ /S:"MS҈|;0)Qc |Sxdh߳,B*XMW6.k尓ʗ|:G_\_留D4(WK" x.nF" 7\Z|㐔K}̥қ00)\7OD)l8m@(>؋/tE7zg15t˩{#dy6J .u[$t2Ad,降eP^(.Q/ :;ٱJj.lϽGC.].4ٸbbGҹX l>2DPI·.|{Gb@S\uf'p,PQh!:!j#RS1RJw˖{7Cb)^7kC,y#`MDiic|KJN!t^<3FC8ݰBGhmBوÇV?.ZS$.3C宬J#^ˬit7¼(ofTεÁG6j*e=ԍ (AFX %;fTT2Z3FܸzM}\ T)g*T:fPN^`aha.sbKJ z}=ky{iת䡋Qj52k8V,UΣ9S҉~"*ڶ7\ U8lhѯ!NUaXn^ʶ^Pa;W~nГ:Y oqs !X"8$y/;V׎F*!K (Ő:Ϲ:9|{f+_/l\tթ]&ac'6̒Wf#ڐ[TjS_sAYYlpn,OX=Gը:#H"Ǯ[X]%y@f.w= [ ksC#sC e> \G=C\HyLQoͤul\c Qm)N󯎑z'8 u'XBHL0PSHDL{NUJأF;M`G+$>3]I05）5?zD#Yg9Z *F!HGNl_ _+j:쫂ba-صaءB9|HI}cuh~>MVay ܯy:*'/6sv;e5b ͩ3e&ꊑTGӑT-JWZtN-:r76nmq%Ee t-EUӦ}JOcLM@z&Nԛ ZO d/T}0jءfccd$2rx^-j(iG;J$?+&GJgC}ǎՃUI9{#0zqaצؙ;+ sڰkǐn HE!xێ@SL"\qHDL/F]\t=^L3˩R_^CMD^FQ2s 1`@oÿ1S':8$7Q*ƋgT&]ɻ7.6ʘ@fТu?`E"D&d Xs* $`7`kBwo `Wkdzu/L1_6ϕ L?ZXv#]i~eMf驣(L>?Xp2DA]7GT=5 [aBҢ7+.?g fm{7Ucd7 &^pt(j >:*rL[@InYG=]7|耰l}KdO-#l=%r[l5qؓ!xOΤ)xTFKu4\V:` {$5Oo̗L0\ʱ–^ڛ[ʺLL7W'u7emWh|k  ijCUr],KI~ w=HPWuiң}m#NAA U- !2!h 3lŷE*;;Pl[uex)˔Me E>i*q(uU4߻h{ ?McғKO{y)KWC7( Rʮv)sUTFmnt*ʁGB2z5v{' UʢX(Pyf.1by?(I3"պOb#~B Ý)o9I_!Lա]V yܵpB!wÔes_y񣵁pdpY'%gkQ4 ZGLg(1hҥZHΚ~iEۏ6O*ײn@96`r^S\]h[ !伾Ρw1LĤ!=mTXIT˴Ff>>g v1Z/m hh XϤ޲nЈxyreςJ_2hkOXRu-ڛalF1c(*V~}B r T)f)iPUq17*w %;aR~$Ն0ϟg׺Pl:P00F}£kR%wh5)HO}<Ӭp\H\DKBUɟ/8s <$!ŤhYDb 4Yn(z~aZu*T~884iQPG0oPZWNKJ6j/H֟x=z_=u(_uIozXኹzGN,q5#䡡rBqkc=5{F}ܘΧq$^©ccoƊAuԧ(^[ 5vl@ }* _1l޶FSekXS߀DHA4|vzۍ7Ł#7MH3҅sL71Ӆ:zWǐ2rbnmg9qNmFC$t@O n<`/12_Ԁ7yߊ?lVV\Y ;dYȜx-}][#.'c.J8,< aox",kZÐFY Nk1ט {0Ce--DCy5a(Ttt<5Wyv1RɀP']d\0fWQɲ(}oV$&S7#~4\VOZ.zP#ॠun3p;(6\Y!An 4(4hQ1Y`*tYӫc(Ov#bHBZ-al4sϩj5Emu8wA8˞@Rі::ꙜND9V K)amNxRA1ۡ*(' hA , I M/W>؞b/.`bذ/5vXF zK艸)388+5Uej. YfpIMS>9P;r+?&!Л8a4tNӬE| =ިqdbjop>Ѥ; ?:WCJixN;ҵHL/c;è*,TAo,ݞ)Um~8ִPyw_I rɜ!=w/ p"}WUFpgx*"Ʉ yd=yƟQJܴInX,jB٪!uXj9)\r~a o$$՘B}0J> s,"C9.9<Bl+ EoI+Su8a1[&Q9'ⵒD!c}!xe`zbpyVs9YNB~)`C԰\96ѽ5߭6--9E%g1x}:O CђO3dc8SH83$;O|@.G,J`pgw_%jmH,Upab6lt h)7XXnFb\Jp0 :, $G<} ,S\:(^Pw~NN\N;ſzJZ1;{d.GTø&ӵ!18,N/J'j0th}1d zhN%$n/օI0\tlv%i|gvXZ6$ߒ jIxd߂4WDFón((k[9i}%ϜKu#ȂJ=OBTU ."kwUGi:h9=|(] %кAW{^-`K0E4ʎ\CQ#9iWpL5Ji_OHT |@߄!0㋰iI׃:jc qt" ?\cꚡT~MǴ{qP?<)BMx6V?3 {i<сPeu#U3/s# 0eX7ıDr7\Ҝa@hRŭ. O^ݸ05a!R7CJg-hjeQ$J1iqѽHz:tscyTeX8XI"HW}Qć~eB/ 0x4F3X ]ZJߑ_W{Fjy]i, 0uxiQ伖Bz'%Km15i g\*CF/ "FW 3S()#- R\# {&g T9uٱ#ӗtW18[r R@,DaA5\%A5'v8]* Ih9>wuOES9hKZ08Mئ"!ALgOD iʞ /ݔF#uxXS B ΥM1zxK{14&mg:W29>H.$O"1 X`~󡪝5M=Ădg(ltNp& ϵ~$02]%HРN&B֬0-֝V6JPiK4spDnhc[wisE',=-t_\Z:0{HRE%Qbw  f(fL=t_'v!hArkUĬ+%/jW hĉ@PafTI,XRﾈ%IR}B[7&ToVCHԧSn%;vx]HwYJmAfUqDX^BlOVtP+>1ޖD$Z4%N;7J#hnwZ)rIM /ZU_/S|•0%X/q~&jАwcJ8do8ﯛC5dJZnװ]xQsM2=2R~qǹ*MVr®}LsP ylT:^xpGQ &vȆ(Cu/lu>$ eR@Y`g`E>@ډhWE/x H]i 'nVf?mWF"nkhYXJ."J ƅ1m[F++BƺtEG,qq6ŧtIiV?U Jjj[MБ!-`snL*]^8rJq?5W٢A@U(12OHיImDEBI13z&s?8tvBpЛ(oh "Z >|2van62Mcb5Ap,0]8kEySbzWƢ04;C"G J>XUhaz*PD[h-Uـ4G..!BhH:|滈I)=0Z1Rb5V=nלS^Н^e$惆QʨTJ{jO`ȝM ٮ(7#Ű1J^FA?-QINڑ>,A=k(XXIJL0#QQSJٶ kOkp)X?޷эpgܑAWy%pt-C.4m]n.W"#GJ'W (jmJ0+Kv޴|;!Nap 17a[.ڳ+2hP;T|rƪ emD%˂n+ =yd> +o0 ^Oџ8-$כѭPz9G@%k>G&.Se4`@R8W-z3DCq NH9Jۋ@W} > öDKw3')îFn ^z=T*%aֵ~t3$#Seʳ<_~OYxs@>S/lcs͢ $7V ,@KYL|HUdD*6Hk[bkWDLI*=Ni\*A4&\)iPﹲsV^*8еL_7DqMRpij~`6V6:-;j-@g؎-I8otS`f=KXp'3&񰆪G;0MbL94xƒC((7UWPEQ%aSnNbʛ[X5yx;N㣐-4pUj@(B iӣl,sv<@gFsH}oG*Tj3{XtL1pZj:7Dq;]l gb֮ e1mOL\A-iM36=5Kl}S)~eizU&6] 7e?;)9PIQ)h^a [ ݜhRp"Gy^-P—tvn1X ])6ljq#׶KEjli[ s@Ȃ!{qSd8^p.864q-)N93in'nXz|M^?`ԫb#f:= n'Nī j{ezPG?@+:]Z81.(>BZd4HH d+w^`͖!/Eue]pFd.ԺsoD'[3 Ԣ":7(UXVh8"6e !<z0f(яD'׋ۍ/ԓ#z$?%$kuKCPjYS8*pDny% YvU2=dfA0m՘_7]G\ TgY)pĹA;oTVƗidbX ~VՀ:&k'Zj.קޣ*5 DŽoԡlQ[ ErDTwR ]"EE*w YZ