container-selinux-2:2.130.0-1.module_el8.5.0+1004+c00a74f5 >  A a2-a9a3054cdb740c5627547ec3b31d4f715da4d43228e73148c791a88f12beaca854ac766369c1beff2fc0fa39de5e3ee987404a6fap6,}?,md< @ h #SY`h l p x  ,4L(8M9 M:sMA+ZF+aG+H+I+R+\+]+^+d+e+f++++,8,<Ccontainer-selinux2.130.01.module_el8.5.0+1004+c00a74f5SELinux policies for container runtimesSELinux policy modules for use with container runtimes.a8x86-01.mbox.centos.orgICentOSCentOSGPLv2CentOS Buildsys Unspecifiedcontainer-selinux-fd55ae0.tar.gzhttps://github.com/containers/container-selinuxlinuxnoarchZ:,a8ea8fad2e1ef624a52045a0b6d7a23a24c9c5ef6bdae65696ff1eaaaa5f1c21f700508b197248b2d68078871dac5d662d66423184ec2d19aa13169f6dbfe2dd50d2e5 mockbuildmockbuildmockbuildmockbuild  gitpkgconfig(systemd)rpmlib(CompressedFileNames)rpmlib(FileDigests)selinux-policyselinux-policy-devel3.0.4-14.6.0-13.14.3-9.el83.14.3-9.el84.14.3^k@]@]7@]]@]|@]@]X]W]R@]@\M[[ͻ[[@[[Xf@[L[K7@["X[@[@[[[Z@Z?ZZZ%Z%Z@Z - 2:2.130.0-1Jindrich Novy - 2:2.124.0-1Jindrich Novy - 2:2.123.0-2Jindrich Novy - 2:2.123.0-1Jindrich Novy - 2:2.122.0-1Jindrich Novy - 2:2.119.0-3.gita233788Jindrich Novy - 2:2.119.0-2Jindrich Novy - 2:2.119.0-1Jindrich Novy - 2:2.116-1Jindrich Novy - 2:2.107-2Lokesh Mandvekar - 2:2.107-1Lokesh Mandvekar - 2:2.89-1.git2521d0dLokesh Mandvekar - 2:2.75-1.git99e2cfdLokesh Mandvekar - 2:2.74-1Frantisek Kluknavsky - 2:2.73-3Frantisek Kluknavsky - 2:2.73-2Dan Walsh - 2.69-3Dan Walsh - 2.69-2Dan Walsh - 2.68-1Dan Walsh - 2.67-1Dan Walsh - 2.66-1Dan Walsh - 2.64-1Dan Walsh - 2.62-1Dan Walsh - 2.61-1Dan Walsh - 2.60-1Dan Walsh - 2.58-2Dan Walsh - 2.58-1Dan Walsh - 2.57-1Dan Walsh - 2.56-1Dan Walsh - 2.55-1Dan Walsh - 2.52-1Dan Walsh - 2.51-1Dan Walsh - 2.50-1Dan Walsh - 2.49-1Dan Walsh - 2.48-1Dan Walsh - 2.41-1Dan Walsh - 2.40-1Dan Walsh - 2.39-1Dan Walsh - 2.38-1Dan Walsh - 2.37-1Dan Walsh - 2.36-1Dan Walsh - 2.35-1Dan Walsh - 2.34-1Dan Walsh - 2.33-1Dan Walsh - 2.32-1Dan Walsh - 2.31-1Dan Walsh - 2.29-1Dan Walsh - 2.28-1Dan Walsh - 2.27-1Dan Walsh - 2.24-1Dan Walsh - 2.23-1Dan Walsh - 2.22-1Troy Dawson - 2.21-3Fedora Release Engineering - 2:2.21-2Dan Walsh - 2.21-1Dan Walsh - 2.20-2Dan Walsh - 2.20-1Lokesh Mandvekar - 2:2.19-2.1Dan Walsh - 2:2.19-1Lokesh Mandvekar - 2:2.15-1.1Dan Walsh - 2:2.10-2.1Dan Walsh - 2:2.10-1Lokesh Mandvekar - 2:2.9-4Lokesh Mandvekar - 2:2.9-3Lokesh Mandvekar - 2:2.9-2Lokesh Mandvekar - 2:2.8-2Lokesh Mandvekar - 2:2.7-1Lokesh Mandvekar - 2:2.4-2Dan Walsh - 2:2.4-1Dan Walsh - 2:2.3-1Lokesh Mandvekar - 2:2.2-4Jonathan Lebon - 2:2.2-3Lokesh Mandvekar - 2:2.2-2Lokesh Mandvekar - 2:2.2-1Lokesh Mandvekar - 2:2.0-2Lokesh Mandvekar - 2:2.0-1Lokesh Mandvekar - 2:1.12.4-29- update to https://github.com/containers/container-selinux/releases/tag/v2.130.0 - don't use macros in changelog - Related: #1821193- update to 2.124.0 - Related: RHELPLAN-25139- implement spec file refactoring by Zdenek Pytela, namely: Change the uninstall command in the %postun section of the specfile to use the %selinux_modules_uninstall macro which uses priority 200. Change the install command in the %post section if the specfile to use the %selinux_modules_install macro. Replace relabel commands with using the %selinux_relabel_pre and %selinux_relabel_post macros. Change formatting so that the lines are vertically aligned in the %postun section. (https://github.com/containers/container-selinux/pull/85) - Related: RHELPLAN-25139- update to 2.123.0 - Related: RHELPLAN-25139- update to 2.122.0 - Related: RHELPLAN-25139- update to master container-selinux - bug 1769469 - Related: RHELPLAN-25139- fix post scriptlet - fail if semodule fails - bug 1729272 - Related: RHELPLAN-25139- update to 2.119.0 - Related: RHELPLAN-25139- update to 2.116 Resolves: #1748519- Use at least selinux policy 3.14.3-9.el8, Resolves: #1728700- Resolves: #1720654 - rebase to v2.107- bump to v2.89- bump to v2.75 - built commit 99e2cfd- Resolves: #1641655 - bump to v2.74 - built commit a62c2db- tweak macro for fedora - applies to rhel8 as well- moved changelog entries: - Define spc_t as a container_domain, so that container_runtime will transition to spc_t even when setup with nosuid. - Allow container_runtimes to setattr on callers fifo_files - Fix restorecon to not error on missing directory- Make sure we pull in the latest selinux-policy- Add map support to container-selinux for RHEL 7.5 - Dontudit attempts to write to kernel_sysctl_t- Add label for /var/lib/origin - Add customizable_file_t to customizable_types- Add policy for container_logreader_t- Allow dnsmasq to dbus chat with spc_t- Allow containers to create all socket classes- Label overlay directories under /var/lib/containers/ correctly- Allow spc_t to load kernel modules from inside of container- Allow containers to list cgroup directories - Transition for unconfined_service_t to container_runtime_t when executing container_runtime_exec_t.- Run restorecon /usr/bin/podman in postinstall- Add labels to allow podman to be run from a systemd unit file- Set the version of SELinux policy required to the latest to fix build issues.- Allow container_runtime_t to transition to spc_t over unlabeled filesAllow iptables to read container state Dontaudit attempts from containers to write to /proc/self Allow spc_t to change attributes on container_runtime_t fifo files- Add better support for writing custom selinux policy for customer container domains.- Allow shell_exec_t as a container_runtime_t entrypoint- Allow bin_t as a container_runtime_t entrypoint- Add support for MLS running container runtimes - Add missing allow rules for running systemd in a container- Update policy to match master branch - Remove typebounds and replace with nnp_transition and nosuid_transition calls- Add support to nnp_transition for container domains - Eliminates need for typebounds.- Allow container_runtime_t to use user ttys - Fixes bounds check for container_t- Allow container runtimes to use interited terminals. This helps satisfy the bounds check of container_t versus container_runtime_t.- Allow container runtimes to mmap container_file_t devices - Add labeling for rhel push plugin- Allow containers to use inherited ttys - Allow ostree to handle labels under /var/lib/containers/ostree- Allow containers to relabelto/from all file types to container_file_t- Allow container to map chr_files labeled container_file_t- Dontaudit container processes getattr on kernel file systems- Allow containers to read /etc/resolv.conf and /etc/hosts if volume - mounted into container.- Make sure users creating content in /var/lib with right labels- Allow the container runtime to dbus chat with dnsmasq - add dontaudit rules for container trying to write to /proc- Add support for lxcd - Add support for labeling of tmpfs storage created within a container.- Allow a container to umount a container_file_t filesystem- Allow container runtimes to work with the netfilter sockets - Allow container_file_t to be an entrypoint for VM's - Allow spc_t domains to transition to svirt_t- Make sure container_runtime_t has all access of container_t- Allow container runtimes to create sockets in tmp dirs- Add additonal support for crio labeling.- Fixup spec file conditionals- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- Allow containers to execmod on container_share_t files.- Relabel runc and crio executables- Allow container processes to getsession- update release tag to isolate from 7.3- Fix mcs transition problem on stdin/stdout/stderr - Add labels for CRI-O - Allow containers to use tunnel sockets- Resolves: #1451289 - rebase to v2.15 - built @origin/RHEL-1.12 commit 583ca40- Make sure we have a late enough version of policycoreutils- Update to the latest container-selinux patch from upstream - Label files under /usr/libexec/lxc as container_runtime_exec_t - Give container_t access to XFRM sockets - Allow spc_t to dbus chat with init system - Allow containers to read cgroup configuration mounted into a container- Resolves: #1425574 - built commit 79a6d70- Resolves: #1420591 - built @origin/RHEL-1.12 commit 8f876c4- built @origin/RHEL-1.12 commit 33cb78b-- built origin/RHEL-1.12 commit 21dd37b- correct version-release in changelog entries- Add typebounds statement for container_t from container_runtime_t - We should only label runc not runc*- Fix labeling on /usr/bin/runc.* - Add sandbox_net_domain access to container.te - Remove containers ability to look at /etc content- use upstream's RHEL-1.12 branch, commit 56c32da for CentOS 7- properly disable docker module in %post- depend on selinux-policy-targeted - relabel docker-latest* files as well- bump to v2.2 - additional labeling for ocid- install policy at level 200 - From: Dan Walsh - Resolves: #1406517 - bump to v2.0 (first upload to Fedora as a standalone package) - include projectatomic/RHEL-1.12 branch commit for building on centos/rhel- new package (separated from docker)noarchx86-01.mbox.centos.org 1636513931container-selinux-fd55ae0.tar.gzcontainer-selinux.speccpiogzip9utf-86d225357d515fb53bd8d23b6515a59bf03831ebadec7e2c59cca08e6fd8faab9container-tools:2.0:8050020211110012904:faa19cc5?3(еm۶m۶m۶m۶m۶4]qɤIvvFhcdc0b`cjh v.vNΦ6vf& t.Nt^ Fy[,m=W26oY%)긫k (0C~}yy )֚-rP}wV~%_R_,J3lZCod=~.k-iݻ|i'8?w~:9-B/fBekvz}ދ~h9X|~k{S~{=\42O#Lt5 )|^WY/g=.IӰ1l}N}oa^udIwsv`r49{qt;.>ϻ>c?|>}F`Lʹ`Jz ;MYrn':GZ+޹o_^ʹ7jL`gE dp"'acղgFI>[e4Fa NFuNA{,be.Tjd9wg? S>g9/-,N{ocIbi( ٪aJd9i:9*hٶ ~C$~k166pGJ >343Ef|ekar qx y-v D#1GJ@s54Gj:[N@#@VPAy[0rpGeJf&h~p'|@v/#z \OY8 $puPC)050*a/?ܝHu\ghdHv6I(ƉACl_ȼ mz(U晅\)-Vʾ'#̄'@#1Fu_bbk* l-͘bI 2,YO¯o"%x VpNnI:`+<'ZMLQgO]FpLv }aq V={ ?H%@EĒ rk7@*8D(#>/d i-b%Ⱥb]@D᠖rP7jªj% 7V3BV׆:ՍfCmw#?F38}rGOM_S蠆ÎˠoTpօv+UnXF0sB?| Perͩ5Hg=ma0"e 0-pqZxhRXMtH(I;OBMN>QkgCr64j9[`.MQǞr;q:g}vWS}lE5Wt+@ &rQzxecfLtD؛%ƾ?PR!}BuEOGM2(,sHqz9.MF>'|wUb00* pgmi9*䌪6gKC`eX *ȒL?F 87K%Z簆rYtTzJ ْ>U^zR,ZO } EB]\1.#:5Hu-{U{(w~:REw4g +D0^h㪚"LRqˈ|uԍ* e, Žr^"rr3|r ]!\\J՗S¹7~z()RBCq4d=%bihU1|E 6!^LiH92+S8 ېی5Ŏ7BIaᎻ{j{Y` rD%,D'zq EBx ZQwš:Rn%-~Ϡxh,TeqMqu›=k{I8A %P;tQ?2(7tے5fevĭz 9^;?d V܃T JTG >O; ΢̠dۼD2x( 1YK2+`Ta{6ա){_rI%-SqÀ9 RAB>.(Q$!mO(by"erIColv@sfoK@†H vRtu낶mT J5ˢr$ACϐz(wy *St3 ڛ@7_MT*ŻV'{&G~Ȼ=UNU-}SU=iwE7rq߹eN~PENa{|̔cH`Bm(m.2&2;r඿ z|uN!龜ꣽH'Z]KР+BwpUF(IayY(^"b|f\Nཻ:zzW6 z 8H_yDR 2ZA (1F l~iGnW6Km,M 46D#Ҕ-$ #@/8[j%sPV ͧ8h:U|-0,ⵡ845uH6Vuibipa,cy}?x]l_>Cg~>TTBF4؄OMu rdw*(`/kVaD9k^%j a"1Nr R83.}cKP1_O`ʼ?NFJ@xz6GGXd$CzZQhF*n6RW?4[΋ YşuMuF`P༗qVӰJ{.7ɹ{N‘^[/JGPx勛]LXҌ!h; 7$鈝))cmF<ؗ98e=8k,IߛS\t* OőgdIeB(p-۫)o )g 3'/W(+-^_Y'I^áuϡ c'Drl>F Iќ$ƙ /g1k*.`LJOIVсN : Θvcw1j.0g\Sqz(ڊwt5]|LqtH^G>aH|l^(@nK;@04tKbi8 x~6Īn]1%B@Kh?QZ2 3a_˙+n+ȔA\xJCw( ?b\e7d_Tt?ubaY0Co numw~KC+᳴;BGSқ^vnAPԘ2O?&bKq~ $l}X_|Y݃v̋>W#q#SoaoBcZ"MCx<81e_n }r囷=+p|xA݅7se_<Bø{~ q#?C"qh6 ?8r;;Gɿ.,n<Ëpٔ' s/a_0o'YoaIcaˈqG} ~~ٓ[$B6@"A..sQ[$;k-$}:psz5#ׁ&S@]]KŃ9'cۿG倗n6 I&Gn<p8 [xkbC0/u|pꟸ~XA׿S'3&k۶,kL^a2h Qt_?bݒOqy;ps/<ᗂD%>l.T$؞؃~K9&{v4{c/So)_M$\mNǜZӓw٘` HH MuoomU_,Sw$] [8\|>/ -MÆ~_cCk~?8ciu^ H*uPiMlc?rϸS(fN '5UiOϠ7Ad~G Vӿ+p}>_8$F#КY!)B)P?J`n;mRCl1X, "QXuώxnZAët>* LVW%p& 9,sLңX-;0N>_@h<*E<PA(@ԋȅ%&q}A$.y%07(Z-D|8GEa@ lGMp2H |]P0 ]r+D15toN_épEh;}a t%Ͼץ:hܩweԍkӺo3Go&n,r6*^+^J$ME YoL/ΚPRrT4.t9;jm8$T_B9IbwAK/6":eh/NGEQ8GlԈ]ts%u&1gb*%<P\X D|9[Mq=X*C>f:OzOa(tLN8_憤N~ N-=^uAJ ^ھfN `2On*r%Kءw)i/PZ 0]i&m. DsBM^["sba`YGn_XcQttD 4ps-skꪇ~DA"-h< IP! "lzMyӼcsAxfCoL!B ׾%=*/D3T@iG~eQ"½U 2BDO.e18a,dDy¾S.[.yd)}=^?t/~?nt_`buSiS'ͨxPg;Ԙfl9y?>_zF\" v{kèL~[Ն"Ec:oIEkr___M@]=t<T+(}{y g<+ݵ2I3רΌj֧BxHyꀢ| IB- ps\*uųKsEt_T+NznO1i?2!Z;|N:tMr8ɑ2r9h=K$Vau#|ը!&DTm,˝s(Ng/Պ4,铉qz=AQ)/r-bBi{$x^Nۖɳi5@ԉ%UPE!*l(yX?p7$%,u宊8PS܉ „>@0,p 0齍ZƇ!rud(s LVgu^ZOimN*n N&߱Gm}awKeg{9҅7<0~ n r)& C俰rQ"*+[fDe:|8nT; TcQ~ B\&Ef=(9*<9wrO3 㒙=!=] ''P+;1q1CջDu{GqhH⥞KH.1ScJ} y>Y-)˞ם 20Wof1WW/=L5~z\,||k~Nox'$i:&>lۑ9dyO'F JY{΍cm#4`%]&{Vԓd\xљg(Yi ۤ Tq~qȑb1Ʌm]BdZ_6{h@iS@h؏+ɹE'zdQw3 ZM Z L"J=c;!v3٦`\WӦ\6Vd܀c=6QƯmyoS!|/;}h=4?_e{Dm,B.mEa/N? e'}dլ+83f1"3?.{\~YVwF֐+fL9/ QOo69 IRp1c=MXw@^t6cvll 'uJk .Pj M^tPkք{smbmH}tޚ:ugK7ďZ τ:b-õǡaI+ aȃH7̚,]SE^KbEG͟#h޿I+>t}u̺ߪf̀b]{o$[MH jYc!هVgɏ::o C1(h@ 濐4Em/tðU,q[U<]g}rȼɢބ%Lܷ~כioh>Zt\k_E! U7}flqu,UgJf7tnMU~αSv ˮuYM=`o߄q4 )̭ԁ")LoE*ěW$Np;3wQTVD^L}ߖL"Yn) @&T#vicKVA Yt^`2ˉW$܍xuɈvb% 'my["70nNFybF/P'=#IsYKŒcA`@Je<𓾠?J-ς~d 'ǟY,+ W0-;9JُziGvk$Ɵ/ ?YV voV1!tHkYM'֔ƏV-Lϡxh*iih D0|v+8NeppȜ+ɰlF wV,C3BXMRM=YΟlRȫ^$UU)0H!Vm}h&5$cې&0sgB$Oa-qF2с9"NXi)iUR 9≲J8RյWmmBWq+W̚2fRl~4-*ghOŵZqM5!jD[pָ@-a}&TRjpE& AL!&U`;+2N)5_3)ȍ4:]{r8¨94Ճ$>*ݑžmұ)G͢q\C8@hbM+Fou92jg|yG1{bo`; b;g^~N־-]\pZ) a<9W/Z̃G,95/c/fVNFM4ڐ`5f54EA8=]gywF6e߉[쮋pu~)Qډ/YL:aQE,y_ X%CӰJ%6VԜN6&s3zOfޛ5oM!}rxJ}UKOJUc,qsm6Q~{-DbD1;"oCdZU5,Xo$ڔ+Ouͪo@P[t ۃ1E4{tᐢ^:iw%HaT6r %7X@ޒZH6ĽJWJHvBz6ǭ (*a.$ HBsXg Qg{jp2HIlpW̝)!~ ܒ3EBBv&H1K]DW lR .BªW> +Vq賮aQPPRlz}ոNr-jB.\BzHӈnYl;پ28]tom\a"oݣeaOUklP`r8M9L&~5ߍ(RrB0Ẳkݭ&|Œ{L]Xb_%4#LW|3MF.^ ~9KYyiC>s(*SRb+C83%L/mG@P|r mmꆳCZwUگM^ +҉p sd-&6 W]=!5\w|O`lv 9oaڡMww[N#?8? t [hNOo ×Lg &Tmv(ulwY]VKOd#byץ!cq:DgciϓK<'𩋗fT. &5q $α̗=Z̆Hy`E3܇+̷@phLΎ!zḟaJ@jMY9Q0'BISѢc_Ztϥ*{,ԅ)$;ZR.SOg~NCI~>i yf;,@|SӀi^mBmY \} %ҰY_Dl1d7M.C֤B6G}镎73.]7|,4׍yø!͌ݰCv| o(߰;m^QO GG"mo5UrD_49i ̊4R|u$~F@XibyAzphg%AMa1fk 1OZPI>AFtA(iUCXlf7"TMR b,}^ -@1Ӿ YDOvA2 ] { dN&cЋū:Yo AއߕJm T CT'K꟢Pr\Vq9pGm\r HmP*ա9DirA!^ dNة .dTC&tOUnST<2Yo\?o!I|9Aϔ-`SnC`R546.*`準Jh7+Rφsݫ~ |Kr\xApNݳYJN]&p+)cW"qnЋcT<&:9#c1w3\7Bc VNൔ;Väj"K-YGmv[` jMwDk)fK=x+.?!nֳ/澭h.anKVٲ%z]dKՔPkl+iGP:b_ga%C6:n*|od 3${ ә=rYւiNsL mV5CS*OVrU!*fe͐Z[i7SH޷UO*gW3+&Z]Uo7VCڈ6TmOb64xH_ >u¹d5(yJP~ufvnt=?t:LO…t9 e؄WgS&5w_ @DiiDu%. {dUU"ºK.F@xKJu!jT?%|s !$K-V+ea[qq`#~ΐh"'Rʢ ֌Y[hKCAH#|5@wB|3y'N=td-|7F,kerfѧ#4GQ=bS(5 VU |7o"Qvs3Q=z- aSvGrXjᇳ ]؜f7jbaV"{ Ԍw~2駞5ёw|l}Y,Ѿ"WRk"rQ*.iJOÀ bi nud(sL$ l 7xhj' %`ů¶ rBG@|hzFU™p\]3ry+l̑T_C ĕ7%zs v+ f5XfA/DQ:2M$1c}#S0E鏢rc Kd!P? AF<޳A| NSVQ×AW`S,?zR”֔'ith DZΤF I(tưf{.cO#yͲ5*MSsuʍTxiP!Zƕ>$Im[FSD#G`- Uš۠fF U0iy t;Ah2BK|e7u7z0{E)A9:¸֌A]RL-ꮚUmB ubT \d#rG,Җ 8w -@ 6 02  5{hsq@- +.J.6fGѓ|$P02ˆ/brh;5vSG ˔IcO!Z+mM8~'g(|I[W!?6+q!JE95HvՔ25Z fbJ#^s ;ܗ]R\jV۹R]\VXd= OJy䞊WXLg3sVai/ujSj6 ([GgqPqˊ>taҳ3Dx]P]00f EFDDzo r2h'j'J1㮲 7βYR f+bv+nrs͸-~O!Vfbx!p"HD?~}\Ɓ` v^P3Ks`T (_%qS0{iʞ$%ω#7Ny*!jlAcklo>}ꌗ @ϲ\ѓ8`ʣ.%[l&=uxʊ+Ή9"c/؎nOۑ̸B#S3u svZLz!CB]Ҕ8zzrkC#VNJޭ>-&Xk|M`|RgFm5*n8 6 x~OSFW6تjRYİ* ¨OQw;N0k}2Oݹ*ڳDOB0ڃWc}Ty=ypQ`eXE+`VU90@hM{zّpfff! k%P𦸼4/Qx?iuv׎E$s{ȪPo ,-?5r0{}aM2P^.U-+jSmtn=@I{ |Qݯ%$ղ(DC/Z-t uV=rpJƞqX :sk>/graөUaFX/.]cigӔAT:\U*~T9QQC cG?4-}UIT,1F[~Nteex̳ Ⱦiы\Nبf\Z+8,j4逈Dr  k>խEFGP>kΞa)tJ4Lwj6.qrΌ* W`ԬbV vϤX!}l!nҮ+E|9k`,lPeKn4-=*JE9EG0-h 3tBnQ9_KG=甓~ 0_q.Rbw >",g21l9 1BNWƈe`+c>HFױBۺI^NT$O9sSg5\DtJXo@4heL7N}a9dH步WUf !%`/[rYZyEeW7L$^O g "qI &g/`!$$yY 3.^h|Cv#|N,$FFfNrGiiD=d/},R)Eℬ"Bcy7dn&r^n،mKZˎcz+#kf^g 9UiKٝVGv#y˸zm4f'bƾuh߆}aEvvri@)9Z0g<4 7p[&_)ͳ +e:7qnfcg-"pg^yQýd $I{ǮF95: vx͠v%;vZAVIZtˀtHW[^AݺT&**𴕼6/٪氆EIT ˢ>RF9ЦWGԖt"%5eAqW 볈dugeر֮[FjH⋩hb@dO%[Z⪑>W ShAWM_@wPc ( Y\"-T6hȝpͩx隉3(10zi3zrw~XJEo\V\sIնW,zv2dPE?E!;/\֋ۺ'c&p?UmY64@>]'7uwwg(4.5HAc؃|O7Ju&H:d삏[]tFA[O:Oy:Nwqf|oo4iޅ.;{A`<>ȕXaݻiQ^۾3"*%v>.ؽkվ}wii3i8:/]0ΧȚ]J U,4`ڞo<1;xE۬#׊mW5?5||י7d$X;CKVGD9zjUCs:_QGt ˒#t~85yɠ/!|k|Cer];&E? :Pל!~h/C)4k|/,xʙVָS42_;||s+F2W/8*g6T:m[+M&>Mv[׵||7& t+J |^{^1qOqTaK]oȉ8dĶʍzƻ^|JiwYm_­~vtU׏[\<3+r.}4iW,twl,v} 5聘$̤+sJ,v%*Dg'~G1lΏ.1yREόTn8#t;ǾfoR?f֝ ]OX;|Q֝Õp#rJ9ОaRxwPy5-5}fU#]6i eN p8Zz߃E CӮm.ڸz !MMj_1~K[BH=W!)5}s7oU"f&)k5y\Kb٨L[sܕoUvGNn^xx򡏽6u{o<ͫ_3f>웽XޭS)gSy%cCB_XAO^7b|>lҦ{|3ooHj$Ml[[@yQxGա7@n0۽+fJ0cN}Pyֵ`[U~nU&ήO)ϟDwrgvgg?6BF\_8jv_{BYC|d,LRfTL`ߋ=41Gse vշL:%&MChM+l8ƻJI/|C~\eD=QuM%C?2Jw˳ \t/3iz閥ɥ9,)-=tj~W[yڪĊ{G`&jTt5$)#~){DCy zkX0W%H`O rhHrwM?Z\^1}gOQ2GfLEUk\ô2vewGKי'y88m^Pj,|P|ltZY#yk=qU=)9#7L=n6lŻ*=ls?]Yt)=W~hSˌr:#)SJ #tZљH?mۂHgfG95+f|PGpfoYw$/=Q0|?cw+]t`"ƌZ:/'$ ~Q:s\MEtcv?&ul6T͉ eN)+TF|"wQPmp#eM0U$vy nVȱܫ>=0Fvtpw ,ZQw3Go4֠M=~!ƳjbΨ<A>9Cr-m8j1k[wܩ򻖷zU/W '{bzZ [)Ml=q/|c sl狍GպTj~UJLn+;)봪_8&6漹F?.O!]¦4cWsSB9{Lso*/X|-ME\FW} ]xd:FEꏌCdq3lǒuWJ }E۩3UZq٭2Zmkgw~sj^v#W84ue,q.*;isSBjSCͱ߉ǽ*$}p6Y=f雽wV]<.NPJGE,hdA4>s}ǰf+ۘ<"nvv_d3?frt/b\YWƲ]3(\ͷN~yqdCr=cd/UxMFOT!q?NSۄ7᪷Hɤ IA)/YI;0±g5,~cX/G_Νa:oٗ"WG*t)W$Va]ڳ"/x~ xɃ V/Y~̪B?j+q ,_#o6/c=]I$owszOOM)k&v:X0EhcdLrvBZ򜄷+Y02n}ǻr'mV?٢91͂^9GTӓDU1xcB3i=:$:W]i;1ߦX+)Vs.7~wwξe9Iur/>SQ hxiȑP2w=1Lͮ QޕZU9Rnʰ ^Vݎy2BD%:uEFU܀ߕ6"d1WeOi!~rO9; ifc&-J7X` s9Zr˟0 *Zk߆%~$-gO۩?nP}}ڻcOɁ 7&)}mm镗ӽynf\dCZSyu T^R~hv :B8vrў׭N J89t3ViZ쿾mOa㚸.^Yy)7@yRf2'tK~^oPXRi]izݲ{Be5Tyus<5׊ߚ`vKW_>RJfs6`\ԓ*DC~qa!ez<( t\HpK=>9 Ω|p+:n+R_5m+̿=zQ;ǃ[t20kwa<~˷+7۫NUN>9rvYc"OeT"qESt(t :et8r?I*Yٺ] Zc;m4Ӱ㊿V\x]p>u&HU)Xw`|a##׼wʭ|M!zgl=᥷MbGRŌ%J+W7\E,r϶**t[(nj<ݚ`ۏW~}ǯ+!¹--'NP!g]N峒^io,j!ɷgLqBub$J#UK6W&l1.P߼1bvRJK^z[,Dr,쁕m)[l97~YOPm'8uV_]>)?edTMbn *t`cY-#/W~^ss'.C}!El/V_^y͞\ `[r6N:6O!9G߸TfCk0ynev]QRڣfY$6/jGYz5ǣfbfzm͗MVr6upxG%>UeCu#z4[=:]y%-hUksoB)q|w NFmVl3DCG&e+!39J.)[FS\-[%_Sn"}<3bXoO|rg7{[~dbcea"Bva)/ovpj n5_|}mX+P]ss:wL6ӏ1jx?Ŷy])!B^nus;%ďaU56)tzUm7E$kiBu焽??9EpgҿWM^5oWm1  &j, S>4 `П%S0Aal3QH3x.p8xCRT 3d0p6٘l4H!LS{&@2[Sj&~aT:M"t~> m.c@o'A~xfp8̄|TXēÂ! C( ? 0l(X B0$ aLš 010dʛ7HgYy%>Kf -Z- !_<iuAKHHAZ!ZLyuD@dv`CB>'d*E[C` M@XG`Z]+MW RCa D@F@?j0 l%q9L5d%b Ͱ0rtsqdcbJ``17a64_qF]Dx{8qx Y,2/ԼO 9Ɠ#Qa| 82Jg^;/-EkI[{1 &͎ EOT+6な(: J_}D`#X#}xtYC&Px8qx.ao00)`07ɠH-_4 B@&s f(=ơJށDS'A8D0a⨌80G 0`6 '>*"qN$2I 8|X B }6)`X@a y^!~ y$v4B\.ЧB<GFd'NG|9ܿNC=`SBM=QY/ ]ᑅ5$bk *y0r)7 cx,H'S05P}M S`& !w< Ƿ"ARpBǀ0J0~VO*P_D Or?)'ZCB`X&at։cCK EuGa#8]ox$ĒHpbQE ‚뫆NuiÀpXg" #P vXb"S@>*K H* ̃i@jiz7N@RE暋M^׌=fOB7L_i~: w6 2 l%&B!æې( XA&xP{, ߗfLKCv\7=T: ,-P:,@#kybOCB.VSB$VZ4uTO,C"`L` a@rD~rJSgUTwf=`=zD6e,- @ -l8Z*|A1CAjzH|)6{h#s[ DVDˢvt`:"χ1@r R4 Rv T_(p^?ПYW{n gj10=h챿G E п f(L40015CE$7}}"&ffN N?PH0ď`"҃+fD?c|M_vyr sgjƨJ,) &Fu!:0 lof#G4DtEW&xD "90g䳌աxc#t#%>ML<шHijX\}U_HL{dX@ā47cCԗD*F s!lW'0M `}A0LD;2D:g'bt(aŒM;qx֋ x9hRT!M j$^$O8A~EQ,@FR!@3,2hX@Վ_'#~ ?IU!>`sX >zL*1"EzCfC L`D`䯭h;RNd|\`X0"JM-xLą$dq*[ %(i2Ml J { F.FG3?Nh'jv $qu%a>_@Z(` $gH7( ECV'>QX}(N:x=SAH] `~hë4"Gb=ZDh 70,t,#GV@2P\G;ߛ A?")~v]4,:„%S4OSdUq{Wp h-V:~7F~h[IC<;HCxDFoe0R]@eꭷ9 '.ZRD\ ~SW0Ȃ>t"KH%JwX͖⎊Xhk|@ )eTc=Qhy8`0<6yDڢIȕ:Э$bOOCR{DgOI'Ȗ;$EgH9"p\0#Q#MH.d>$Im1D"9XZ"_D/9ACehBBSA+k3l{1AG1d{&.T "Qd5+AgQ! jc!l?G(@<^ߦbr=RfDKI)TEկGIF)r$V!-zd>Qrddj@%s$^o}N'dPv?] Xi Rs>Z .ZFV$"ȝi8#IOt) e}.q,rpJ~AK (NE]`ѭ9!ZnK;vlLW#?41#Lz 0-~Ff1Pdx@ԉ'd`@R$A%4P1fMXDf`)ReCaf+?֗hm#ݞC J0Tc 7~i s`0%!IPH*W"ȋ%ɀy5I$B;SRh/->ՖI9?`"(N r>%_OFD &ގQד@DYnIm?0%Lo욈1?>a$73KuB 0b4 QoUd<<Lqΐ,!qdR QT:Qt߆ʠU"";7!?C8xc#P!m?P g੸@*8 M#39lX@T>[*9~5ou#EKSs8G)}Vތ({8pc.!m>%>D֦տ~H^xyw>}:=f/8