container-selinux-2:2.130.0-1.module+el8.5.0+770+e2f49861 > 6 6_6 3!pQp)Tξ7]mtZ`bh) ]mtZ`xPL?U!]+a3AX=(S?ږ0FWjthO`YPt5XMV:;V@* HONP۞_\b^R,k_Sny֩C`iQs@y=8 ?N߬]#̉,$ޝ3CcZ*gtƃy4Pn)lAT1< څO>%%"\TI:P"մXvr-Zgk }<;DG;ҧCNftЧR&ǦŞ,#[d# }=L!ї?|x<&IWdd;rsp#|ߘv{PRlcn8^Y$!p;=8x7UlJCR1g~^Yy]P,Tb,ou5jτ[BX8uDq"ѡ{G IG纑,jY;fn>wp6da9d619fc9fc3fde754e5ab1e0cced35397d5a02b4d2fca035cbbcfcbce85e00d0d1124781bace2eb76b23c2a59c4d3902ae7123!pQp)Tξ7]mtZ`bh) ]mtZ`O%U\fvIP /2}@k&;yA_>Zڡ pZ.2fOrhnMiggs{ϺK$ jdZ>zԯJ:io~R 9ȾeO` D-D.IQ?)FUs7JWeTghay :qy'rw] d鍪zq|U͎,H;aR!݇-> T+jFl2Cj1y?l8l)ڨri(nur>̙&"ئfZԂtE$6*@?=m_[7 ZD/R r#:#r|gUDUN"9mȁ%SWHҺ(W-[ ө}g鼟 {I j"4%UB(C;z{5h#zuj(g; 6Ve!IQjހp6,?,d< @ h 4djt|     ,8@X(8M9,M:MA+fF+mG+H+I+R+\+]+^,d,e,f, ,,,,\,`Ccontainer-selinux2.130.01.module+el8.5.0+770+e2f49861SELinux policies for container runtimesSELinux policy modules for use with container runtimes.bh&Cord1-prod-a64build002.svc.aws.rockylinux.orgIKojiRockyGPLv2infrastructure@rockylinux.orgUnspecifiedcontainer-selinux-fd55ae0.tar.gzhttps://github.com/containers/container-selinuxlinuxnoarchZ:,bh%bh%ad2e1ef624a52045a0b6d7a23a24c9c5ef6bdae65696ff1eaaaa5f1c21f700508b197248b2d68078871dac5d662d66423184ec2d19aa13169f6dbfe2dd50d2e5 mockbuildmockbuildmockmock  gitpkgconfig(systemd)rpmlib(CompressedFileNames)rpmlib(FileDigests)selinux-policyselinux-policy-devel3.0.4-14.6.0-13.14.3-9.el83.14.3-9.el84.14.3^k@]@]7@]]@]|@]@]X]W]R@]@\M[[ͻ[[@[[Xf@[L[K7@["X[@[@[[[Z@Z?ZZZ%Z%Z@Z - 2:2.130.0-1Jindrich Novy - 2:2.124.0-1Jindrich Novy - 2:2.123.0-2Jindrich Novy - 2:2.123.0-1Jindrich Novy - 2:2.122.0-1Jindrich Novy - 2:2.119.0-3.gita233788Jindrich Novy - 2:2.119.0-2Jindrich Novy - 2:2.119.0-1Jindrich Novy - 2:2.116-1Jindrich Novy - 2:2.107-2Lokesh Mandvekar - 2:2.107-1Lokesh Mandvekar - 2:2.89-1.git2521d0dLokesh Mandvekar - 2:2.75-1.git99e2cfdLokesh Mandvekar - 2:2.74-1Frantisek Kluknavsky - 2:2.73-3Frantisek Kluknavsky - 2:2.73-2Dan Walsh - 2.69-3Dan Walsh - 2.69-2Dan Walsh - 2.68-1Dan Walsh - 2.67-1Dan Walsh - 2.66-1Dan Walsh - 2.64-1Dan Walsh - 2.62-1Dan Walsh - 2.61-1Dan Walsh - 2.60-1Dan Walsh - 2.58-2Dan Walsh - 2.58-1Dan Walsh - 2.57-1Dan Walsh - 2.56-1Dan Walsh - 2.55-1Dan Walsh - 2.52-1Dan Walsh - 2.51-1Dan Walsh - 2.50-1Dan Walsh - 2.49-1Dan Walsh - 2.48-1Dan Walsh - 2.41-1Dan Walsh - 2.40-1Dan Walsh - 2.39-1Dan Walsh - 2.38-1Dan Walsh - 2.37-1Dan Walsh - 2.36-1Dan Walsh - 2.35-1Dan Walsh - 2.34-1Dan Walsh - 2.33-1Dan Walsh - 2.32-1Dan Walsh - 2.31-1Dan Walsh - 2.29-1Dan Walsh - 2.28-1Dan Walsh - 2.27-1Dan Walsh - 2.24-1Dan Walsh - 2.23-1Dan Walsh - 2.22-1Troy Dawson - 2.21-3Fedora Release Engineering - 2:2.21-2Dan Walsh - 2.21-1Dan Walsh - 2.20-2Dan Walsh - 2.20-1Lokesh Mandvekar - 2:2.19-2.1Dan Walsh - 2:2.19-1Lokesh Mandvekar - 2:2.15-1.1Dan Walsh - 2:2.10-2.1Dan Walsh - 2:2.10-1Lokesh Mandvekar - 2:2.9-4Lokesh Mandvekar - 2:2.9-3Lokesh Mandvekar - 2:2.9-2Lokesh Mandvekar - 2:2.8-2Lokesh Mandvekar - 2:2.7-1Lokesh Mandvekar - 2:2.4-2Dan Walsh - 2:2.4-1Dan Walsh - 2:2.3-1Lokesh Mandvekar - 2:2.2-4Jonathan Lebon - 2:2.2-3Lokesh Mandvekar - 2:2.2-2Lokesh Mandvekar - 2:2.2-1Lokesh Mandvekar - 2:2.0-2Lokesh Mandvekar - 2:2.0-1Lokesh Mandvekar - 2:1.12.4-29- update to https://github.com/containers/container-selinux/releases/tag/v2.130.0 - don't use macros in changelog - Related: #1821193- update to 2.124.0 - Related: RHELPLAN-25139- implement spec file refactoring by Zdenek Pytela, namely: Change the uninstall command in the %postun section of the specfile to use the %selinux_modules_uninstall macro which uses priority 200. Change the install command in the %post section if the specfile to use the %selinux_modules_install macro. Replace relabel commands with using the %selinux_relabel_pre and %selinux_relabel_post macros. Change formatting so that the lines are vertically aligned in the %postun section. (https://github.com/containers/container-selinux/pull/85) - Related: RHELPLAN-25139- update to 2.123.0 - Related: RHELPLAN-25139- update to 2.122.0 - Related: RHELPLAN-25139- update to master container-selinux - bug 1769469 - Related: RHELPLAN-25139- fix post scriptlet - fail if semodule fails - bug 1729272 - Related: RHELPLAN-25139- update to 2.119.0 - Related: RHELPLAN-25139- update to 2.116 Resolves: #1748519- Use at least selinux policy 3.14.3-9.el8, Resolves: #1728700- Resolves: #1720654 - rebase to v2.107- bump to v2.89- bump to v2.75 - built commit 99e2cfd- Resolves: #1641655 - bump to v2.74 - built commit a62c2db- tweak macro for fedora - applies to rhel8 as well- moved changelog entries: - Define spc_t as a container_domain, so that container_runtime will transition to spc_t even when setup with nosuid. - Allow container_runtimes to setattr on callers fifo_files - Fix restorecon to not error on missing directory- Make sure we pull in the latest selinux-policy- Add map support to container-selinux for RHEL 7.5 - Dontudit attempts to write to kernel_sysctl_t- Add label for /var/lib/origin - Add customizable_file_t to customizable_types- Add policy for container_logreader_t- Allow dnsmasq to dbus chat with spc_t- Allow containers to create all socket classes- Label overlay directories under /var/lib/containers/ correctly- Allow spc_t to load kernel modules from inside of container- Allow containers to list cgroup directories - Transition for unconfined_service_t to container_runtime_t when executing container_runtime_exec_t.- Run restorecon /usr/bin/podman in postinstall- Add labels to allow podman to be run from a systemd unit file- Set the version of SELinux policy required to the latest to fix build issues.- Allow container_runtime_t to transition to spc_t over unlabeled filesAllow iptables to read container state Dontaudit attempts from containers to write to /proc/self Allow spc_t to change attributes on container_runtime_t fifo files- Add better support for writing custom selinux policy for customer container domains.- Allow shell_exec_t as a container_runtime_t entrypoint- Allow bin_t as a container_runtime_t entrypoint- Add support for MLS running container runtimes - Add missing allow rules for running systemd in a container- Update policy to match master branch - Remove typebounds and replace with nnp_transition and nosuid_transition calls- Add support to nnp_transition for container domains - Eliminates need for typebounds.- Allow container_runtime_t to use user ttys - Fixes bounds check for container_t- Allow container runtimes to use interited terminals. This helps satisfy the bounds check of container_t versus container_runtime_t.- Allow container runtimes to mmap container_file_t devices - Add labeling for rhel push plugin- Allow containers to use inherited ttys - Allow ostree to handle labels under /var/lib/containers/ostree- Allow containers to relabelto/from all file types to container_file_t- Allow container to map chr_files labeled container_file_t- Dontaudit container processes getattr on kernel file systems- Allow containers to read /etc/resolv.conf and /etc/hosts if volume - mounted into container.- Make sure users creating content in /var/lib with right labels- Allow the container runtime to dbus chat with dnsmasq - add dontaudit rules for container trying to write to /proc- Add support for lxcd - Add support for labeling of tmpfs storage created within a container.- Allow a container to umount a container_file_t filesystem- Allow container runtimes to work with the netfilter sockets - Allow container_file_t to be an entrypoint for VM's - Allow spc_t domains to transition to svirt_t- Make sure container_runtime_t has all access of container_t- Allow container runtimes to create sockets in tmp dirs- Add additonal support for crio labeling.- Fixup spec file conditionals- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- Allow containers to execmod on container_share_t files.- Relabel runc and crio executables- Allow container processes to getsession- update release tag to isolate from 7.3- Fix mcs transition problem on stdin/stdout/stderr - Add labels for CRI-O - Allow containers to use tunnel sockets- Resolves: #1451289 - rebase to v2.15 - built @origin/RHEL-1.12 commit 583ca40- Make sure we have a late enough version of policycoreutils- Update to the latest container-selinux patch from upstream - Label files under /usr/libexec/lxc as container_runtime_exec_t - Give container_t access to XFRM sockets - Allow spc_t to dbus chat with init system - Allow containers to read cgroup configuration mounted into a container- Resolves: #1425574 - built commit 79a6d70- Resolves: #1420591 - built @origin/RHEL-1.12 commit 8f876c4- built @origin/RHEL-1.12 commit 33cb78b-- built origin/RHEL-1.12 commit 21dd37b- correct version-release in changelog entries- Add typebounds statement for container_t from container_runtime_t - We should only label runc not runc*- Fix labeling on /usr/bin/runc.* - Add sandbox_net_domain access to container.te - Remove containers ability to look at /etc content- use upstream's RHEL-1.12 branch, commit 56c32da for CentOS 7- properly disable docker module in %post- depend on selinux-policy-targeted - relabel docker-latest* files as well- bump to v2.2 - additional labeling for ocid- install policy at level 200 - From: Dan Walsh - Resolves: #1406517 - bump to v2.0 (first upload to Fedora as a standalone package) - include projectatomic/RHEL-1.12 branch commit for building on centos/rhel- new package (separated from docker)noarchord1-prod-a64build002.svc.aws.rockylinux.org 1650992707container-selinux-fd55ae0.tar.gzcontainer-selinux.speccpiogzip9utf-8bcddd53f9f1993c3b7ac021b77def1e40e7709ed9e81c974600b1670f1c9a05fcontainer-tools:2.0:8050020220426164243:faa19cc5?3(bk۶m۶m۶m۶m۶md~&]fg헁'9XolLlLf)& /L`lobhigDljciAkfjh@bDg 7ڶbIo?Qe_q| HjE(IQ]][@ L˻noMݰm2˼/,dQa>n#sy^ޯ]oY}ޏM- M6MO}>鼼ɩm}13/C>_^F^ߛ:?皘yd_0Ox߽z>_tLf}a#E?tB˾ zs^t'Kً-q9{}53hfzWTShعhJv;<5_3xjPTH./ R%ofj鸾4S}2=?׹Noߛ}/x;FQ#WkYGf4kFDË^g)=dɚ>z;dJ䤶q)pi㶆E4ɢ+/X.לc@С/|"ڽB9^$Mկݴ@Ã)MU՘qjq &FV _̧~O k" 1p-iū.HK-[6Jp p2R*ƤAȦڹǹAJ3Mk_sSuTW>;4M;<>͵OC}Lh0W1J()^x3jд4 @=bώL?v2/!B!.*PG`@_ Uσ1L^RI1BEފ879(m w 4? |P=3N*9me7 i`ujTD6h0zs cX,sR[$˙^;Q|½9yina9YդkZ2C %g&"jm f5(dr"-?4NKR~ MUwy@m*Og oe<2fQY;[$UpV,)&NGMϦ:GHhͫ>NV(d30 W#5ăj!†@ө;ɵncn rVP4^ Xq@ZHP{1`~P|6p6x4>rsrh6Ӹfr_?: yk RML> <Ғ=r7) Ռ=wiID-cɇjCHnbr):%;A㦌,ӎM:0ޔ`0ޭ3V6D" RZUz?S$D-!S LX˗MLo,CRT ޔp}AN@Ϝ$m!U(:њx'D tvhn⌨D~~g{:@Lj\%%w 8[o4;inȗv@f8fmzh]SWF"Kث Wh,g*{t\n{ӝFn%d=F΂HN)c/`ȗ?gI-x0g]Lg3z_Dtq8|}p+x3 HjKc@@yN@5pVE S'LW</Wc+2P'_{_Vh1Û eT/#:S@U7WTsU,Ap$|%4媸FQgPŰD (t`A)E`4a[28v}\:9b Pgb uG~W}5]lgt۲#<7c%CW iZ m)e+iCdB^"Z@^oC;e 01zHz]i.g)1 )bE-z%VѨ@soqi29ѐ{cTQ)l=kKQW!gT5i_P>[+RUy@tea57dX(:5ˢvWA%Ζĭm\zһ`zg`TK`,B*7IvѩAkIݫE%U#l}sՉp*򽣹'LWRA"&f^ TJ3kiOB$3px."b+z`^2P=7rEWaPҬ[F n%G)tkLa v&gɮC:NKSdWKd+ :gD>zݯ2zA&|*hCo s PA{9O_^ #Ye?*0T PwcU=H¡qK^w`IB}Su2RZVX#<==R"[%ӊD;4RvC*GHv^LJ.\6;l7Ӵ| U J+8grcr ܘSOV@ϧeҍ*?v!7 a-Ü6UdZ)3}oiQ,['D뵉F_r% lK OS7bN$q4/%6To}83XU!Mu`2&gWzLB|pdIЌ?tp,ĿhTw9@咜C9?VeݟqcC@B> E+؀ߺ%4eˤ}@r[ҏ9[Ha3e'VUtK)ZBE՚Y Z怮_q[_AD JS-{XFqm [.!- ;0e ϺAzKpl{3 ^Z<3l` r@T YЙm] v~z &\mO0 ?q>?NL(c rƜxY:>xs Bp<⿷1s^m^3m t(7x$esڽz7w}c^\׿:ѿz0,} -Bnt)rc×+߼%=vW]ەJ.3.C'rɅƅ˼gWGf)/ G)CNǑّ>HvpY\ > _/^\+Φ<8 =^yS_frxi*[ys䰴P:ܽ%Ϝ=6Y3޶PdYwf A LZy_|ہ A \W'BXw/9d[H v"'\57AW[kS~zkLALj:%yjs:՚@"F2Phw~}}l-dz o$)o]]U_P*OQ_?xahigG6 zX Ǒ3~>oOL`hDRIJtoo`U{Ɲߐ]Fn6f htzPx< 0H{z ";W]k;wi 42|5 aNP.MATs#ؑhZ}bs7g!M‚{vs ^TiHMe(*Ć3aa,fxM" nAadP_t BAW1( w@ٍ^E.,1? g&apyS}- Ƈ,Fm$y>* Oa;jAO'Ɨs\!{#u N+GA Æ.y.թDN+nd\}9x3v{e0ߐQZRB4%o*bnzKܧe~ql.qP_Ql;!Y/ANrt ZE~Q) D~p:8(qE}8bFo[D,{0<. dW X-6>%DxGl $)j#BPl1i}ң~ C,cr27$͗uqj'!":7 HS;MyD.M2 u^/ʮ'DTNpԯxpZl,0ӀwbmDC'wS.A^2VsH~H{IҒ`M3iKLm<wi j86b > uȂ8>rd<k'Bm υ3mI[#WW=# iAyfH„ i i`Ko H 췄hc5F5ÖcH 9. -Q}!Ҙ1$Hl4eL?+(]7Q"zp.; 3d!b? 5H=Uì4;m |оr'(gW*<%dɕ0DrӅ\\<3TNɎC vn#Ky *VL@K;LɅLקxH\rtdrs$d)|xIw>67 mSןww ̓ ~x4O)\zxqK|kJ">1lFuǃҟ=4(gˑv@?׻?47 PC[Fe-r6== ,aX@ egh4axG {vi;7ZؙR9W,6MbtxTl5JʉtCxٯqz=9 0h HMeB2==tHwE[`ʀOMv 5|C7H1;ʖu[uW|ё? Zܫ/1M~c/yK*^knp٘~ XA{g8Y鮕H7FufT>C2Sm[HHlahR.]+uBXq skaLEw4l<СoÙ<%Nyat6G]-&2{Y䃮F 1Q 478PGpjcX +>Fq=}VaILԋ ,*H}k"HHs$k v޶|hLN2Nv.R*. VeE2.1!)a(wUǁb丝Nd& aoImG2> q#C/d Wd>{F"2xʝHMnu"Wqpgp2%w>JlK [*=.9 >huknȔ+%L1aH.%(o~ǔQY"0$/qdUK<kf2q4H=-2A}-$ N E(һŏm\(Y$?f 幷PmL.fm^{\[gi^S {ƃak 7!$CVW%=³JnAoOZ񹧳 $fֵV5k{#vyvG=|dhzQjvYSʗ @מHJM|0. /2ixJ7\K{l W9BIyp[ʆo`Xw i_]+ 0{;̨T0\jx/jI=ԣVP' J{a(< EV9+WKJN=ptgg%ig`dzІ="DLΆz((]l)54!DS * ko4N)E_3dPh }؃#dQQCȞcD pqH!#zhmH7q)J4w?e6QBԟ咃҉f֯b+95"`;A׀f \8A\iBJP %  9g>>H~w)бxC],A`GG)Ffd0t%)-out'оHb۪G:CM&~(aRm,H{D"ߠ`گx5X_^,-z1L/rqW3kgo}fI?Z?P2٦sove21\v ju6{&L&όUHan5tIa~t&(Pp ޼r%q#ݙ)c`v"/zfB%w]|dZUT̺vKQ23O; \bװ OϢ,ם^߇p_N8" LnīuHF>[=g-9)}n+ ѿXpcu2þ\5zq:I꥜H_`f @D׀ER*灟Q=oy'c8u<`ѧXYXiyQz~dK;[$1N/Yɲ\~ն_4y A'C^j?4~*0woa*}CVIK@%LS\q*sfC\I5g3ʮnиKBe=HF{T/m!DtwlQ'ڂj {D`0y RW # /5Yd |6$ݙ\qDq_N6IAn䡴`%^żsc͟w>F[{U|c6` O 8mF G1a'i}洁h\k13ɛF-Imsy(0!0$Աړ1PFE&!$QP,hKO9 o]=ᑏzS6Ǡ.ei~[s10SVܶ8ȲG:maj5ϭD+ ൓ϙA<.,dI)stJYmW-͔fQ|~"@hZ0zˑiU;;c{K=tءVlЌ9sµn₌l/JI1̹xb>B`m~{1#rr 4zhцlvv0Q!- i':˻3ڰ)N4bw]k[㽈MY&N|yd kL%*r`ɋѸd.aU(ְt4{6̨u|k KƳ _`TZzrU2<3ݏ]_glQn=@&$mGXyP%bvH^aR|۵%Ѧ pX_q| ޘmV}Cڢk)1ߣ3 *I+D2 $_lW`m(B!VRjC'GBг9nFU1Hs!1N@*H?ܘp(>cv<#sO/(TaDFJbKbL <)#4A^ʟ""Z@g">MXp1VեLewNH%]Cu”*gujW+Oo'PhMuҳw$0GFtbNdKl:/ 't. {]`,ha2wnD<>H Xn חC`/ וp]^a2kGc(HwvD 33g><URKhJϒρ֎$@OWjSȟN:YRzrˁ@>jϐ[hDjҭ T!2}m%M UR pNU8Xmt&j@0{52t 菄)z y IBU *xlrB-1ᶙvqVw7׵TjFYz6^c^;{t—U v2]_Mſs^D}1QAxlVOp7XF"T6wܱ2&UCq_n:ZWnpؒSPk#ZkM7[I[q!@ш 1uv}1m&Gv s^ʖ]/%[Xkf[I;H1> .ZuqS&SpYN&k,鐐JLCmu*4TM$diɕRyڵׯ Qq4+ktк7~J;Ez"}z?W>I^6N֒mzӼF!j{S FI u #FнVb#p6sg}*Tϐ.)&T:2ꀝ_($OK#+pI#箪]b u0=ڇl#_RDUKQc(kn& !\Ҁm\)s ۊ.8ߞv{ o=%pG9'`-M\TMfBſ^r0D B}"b;p;%kA廹6b\-,3C>},g4&p=ڏBo6TjGt戭X0yqk9 ;ZBU?]6۽Q c9koHf,sH?0Ŀeb*]1S UqITzTu Ocx@u&Cf%i'xdxd3&ٿC;VL0=i()+~e{VN:*,(F3,e΄$[ac:/'!,)ԛS[֘4'elN62zp $Ii%Y/_%r)Hä'pU瑲:z<EyVzs0tҲ[\Xfovf0k0uDN r}_Xٔlk;9@A0lL_ݺY -{ Q?Ɔ(qE˨엁,߯J86PyJeOM슖LԵUCΕW ²x = dxRʃ$Te¯= Nx!S"DVd4YPG T.'>>8U7GK^V ֖-!D jꂑ)\DL5g((/2&=E| ]F;Q>Qw}T w>ΒJ4[={e]q;/mmU|b9ʹZ7 q܄A&a:6g߶jYj@Ij/ ̀ٳL UX'7,}NywhSqQ` 2'^f{S6aXSg4_2_FlU窅S%p.r`3-$D0ӝUVD\vNp}vt ~ڎdu]#h螃+xP_2`׳ȝ蒦ѣ%_IԵ=V mD[sBwR]Z:q=4gMwPwYB]'_cϸLIei?? aYhؗ崷ٵ}vZϗ"Է7F,[^A2um@~7ʅMr* y):'"SzCSE+3f v, ˤȱ%C2o-uRo5K,{ݒʓ,:(%)d D%}bN8]Hz6)?{3&&^ϛT" lOUuBI?]sb!125s–w=JK#!c G^_[fA%xN)'dWλ!|V&p[61pf4o _Zv[?X38Uϱ~XL[?>(X0">,[sn7^>6mլC X6 -KJMт 9+5JnUX(;׹-s3>'n,]>í{" }%4fhPU$qLOR;v5ʩQfgë] n+iit rJjǥ^Fڪݗ ֥2WQ}Q~ V505-j5M :HXU:6ʁ6:¦.) B"NXE&Dwo?+Îv=T2T#Um(G^_LF"{*BWɟ5j jEj"Dhk@YQ?lq%D@L/lN[NL|tG ]!L0)&BGª13146g@YDuEֿ^H9yZOd%eբfk VܚҢB,EDYd"QBHR"[`f=oXj;ÛSZ5mɸ̘72Ƭ9 ;,KOM-cEwqTв]A5Y@T<}6*?[>D5Wv%" }ŏmDycoQd>\̾`yʸs7눫]n^2݊Z([,{o~ ]P퀳iMxοȵ| Gi4a˄G]on;iȢIѳMp@(4WiYe_C-9|z|57_Z6K̬K;-Ҡ]5٣]DMNs{Ɯ| CAM IWV_.V\u[0*}Kܷ5oc\M-tfR9 U[+\ӺsOܬY槛v,NHBAq<.xy{-èW9!WU]s6mM<2Zo v/ߣs]PbT5ҭyO6Pd[Oacu-]xe'1]iMn9}˻q *b"#f{,YG2Mk{/ÇMrg wӆL[#:[) Z>Wf9H}?Xį ΕLXK|^7YĆۗ4ݶ9=x)!r >yN}Iuu dڛ6:^Q_&+o#/k?d/'z)?-'9&EBm]ќJ2o\4UPkQIY^WؿtΝ5ZWŧg$T<^Lc%e;I$){gy4jU^vdNȱv:A< EYw#\[tXB?&y}y({~~͛'#4#ˇvW>w0暚??<ƃV_Ƹly2S;omմБ <W\>U-Uۍ-O,q ڼmvXe[>/Xmxzikԥs>My(|BWA- Zu}up/bp-*S:/{&iY]g/Ϛ\>7GMm2|-jSݍZes&L9,`'! wZ7J/qΧS̨\6GvˆaF1{ ( 5Ε5g;-7#OaQ:s׊t2lYjcBiZ)K銟lcEP+X͏I& 5uOxڅOx75&I?V˧0~X-y ]}O[+QetӅFauίĈ8j;;RJgzGLZ{8зd13nsuy \x6np]=l.OcSaa9Mwcþy-LJC)~7an'D}ҬQf޽eaS5yǝ?g4c<.V?gtn]?qMw5N>R UDR~ [qsAU{ғҳ+FKuޫ;ob_hSEp(ݛ{RvFl|w;QvW"q>'/>RJrr:F1Yw K=C?(tq=INf_(8Lw!.e,?M ̙NJ~Mm{U^h`y+>tdo-w~$P8y~]^}3o6Ίךz侫Je9>SJ땷WGfW>Ϫݬ=6/o32~k} LQ%v1+;rr&ڋ4Hk\?e^[})X7(^lnu)̧?)op8W~Q5J.UOcF^91\sφ76UPz {Y3Ǟn3<3/dM5cǙ1&+9jF+Z[+s^mbΖ,_Ą-`~~&K_BKr꺺Ђ S-?;i݃wjJݨaUnGڃr wSRGD_8+.dV%7oNmƨHrЧc/aՈYF.\mqaqs^}x9,9}z3ԡaYe=mSR ?!gk-36`Y )&( ,<]KL-WKGܽgG#NcxM[%T,r{d5Vz]"9I]2o@ֶWݟi:sHnꨙX5\䲄qwWq,ǎ?޷3~NaҔ9A[Wotnн%e+f46fXnFjG25q̷/|)#mtoiB mx'B7# ;µ ZlWhk䐮mo(*r]q]+00Xٯ~sg^R{Hm>{NŨ[v8_q!cZ*4=PU{}`>1ZZ]*eꁐ(;FXBgcu8AGs8awJMs5uaZY noŪjE~=f712GFg/fT78BQ}3cز'Y9Sm^}{@glGqavGQۗTptzӗ< pb*n;.ZQ_UlWs6S9W5P.A.E'GiNEx375k̘a-mz~ryX⛌Eߵe+\)T8{Þ8/Z);n&+܏CsqNUGV?iʱđ{,|.Yٍ*gn3U2b{be,W=_{U"Jү/;ٷ.jGq +%!J+""&'OVspMׄr[Nj6槜ֺ-%E= W.K_:Q_p~RJJ+^Y.DRAF= b_XG1OL~8ٻIq>n\bGw٢-{ <U:Ss4}e֤)2wcUE;uBͺOnQi0[K8u ;aj7&ODs_;" =^[h -5rO>ڡnCf೑|}l ZQU۶N>c[ J򺶏f}1{"L#mllUۘ;8Q-ͺ0cJΖf[\_6Ys%B9SS'.}\ޏw9il^8LY.uPZ`oxrbke+<'eY?;:1Ӹn(m/;ԖnsTW(SponD˯;ʮhe6[hwJEGʍVx1 VHCF,ͰvLzx]O==x,gFZ }2,YZ5K[o=} CvzͶbg2S/Ϙ>LMZ1Wn&v&`Z}&y}!ut4ulVbSGV|JV-t1f:!:-(+L;EVVB9o}YZ$kY?|=gW븖sn.vFs޻C>,&/jʮ,~aԫ~nSd">N5OgK%P"#kjfqs55Q[ɍ uwS'UU-_3nse^~C҆>uj˚}x7s!٢xfNWY9[F{wnɘwOߪ-Sft+Do$ΐ%IΑmvj(ml|46oAm78y- Ux ײ)_MX=:5eTY|:{eDx3'\}[JԕaT&W,xt:fMSIvn\m΄J.ϴs4f=9@ḭa7~wX8\] oo;se+ ͓hf/Пntʎ$n=Υzmo~ {pSEח*|Aӧ}y2Kܱ=3)i^}U4BYhUEWMUDjT _&BfB4"%qT/ AF `Ԡ~s19  \)>Ѕ,u< d!?M6$F&Fz>&D &hlO$S|:'ТZh?A0΁CxS0߲BH˃}AP I63a2` q`! 4ȇaA: q0/& bǢ`. <_XӺo84!Fa^ cY0GD(O>X"Yd@Am̦AR5![A18Bx("!6 3jh%/4Ճ4!>=Ɓ`|GŰ6qA UU3TA>()V4:D3UREa3D@/F@j 6|@nI\A a X=],4`l*"bY%xhM!FaK91n@0B 6jlHqyT߽̣0ǎ[DKa!&uy!I!9t7xg0||̢i!){*!K a?,]38W r5xt5B@B,`#^nz/0 Z\_ݏI qā|-*  &G Fƣ02BC >0#u)].pE[р|_N4OLE"hʠa\(|Xv22T0}4_* %c8 o! 3Geā9L /<W`z9o8\9QX H#\Y(a tPK ΃aa &x] Iwrha\,e #KUy L#D# 4/ 'VNstz224ם C}> ]ᑅ%bk *y0r)7 cx,H#S0_}  S`& \t=dgd'$DI,/2d&&H<2OR'@j0C ,`a D_:C [D S8Ae@D%s=p=&ԛ O8֠=X&.:>m|5aH:#Q~Ā RXIJ7Co ު#DW `MV=DΞK<. C!3$`1LA pt.Y@ ^$t2ARBAH:[?:/gJik*6yao3wq? 0!6~EDP+[E5@ld,\ &pKLCḭ"M%Q2Ux7M yNX2/B 39Yl<oA-{1tș 5P:,@#KybKBB.VSB$VҚ4uTO=,B"` aa@rLD~rJSr[`YTwz&='`=zD6e,- }@ -lZ,|̆c<ZX- h !6{h#u[ DVDˢvt@:"χ1@r<7;bu 'qҋeP?㋠ZcYJ:9` {⤄'$V YL) */8/qZO{5P7ႈ36g{DD4 H[zĿ E@O M&""r>.DB#C}Cy H'G(Cf0G~7_D1P~;\P3 5CA%Ij#}cBm U'3#^E2/Dc#<^W{}O@\ 3gY`PzYHhatБs JrڿdlK@Lh@$4 b5,xqV߯md Z&R}md~f0)$&1"q$P`h`&ߗ8ِH%(ya.D0M|`=>cBOW/┈TآvCrH De `Xr'/Rz4 %K% 䞠FqXsG W2!Z la$!4ò9|!TmLN`P- q ;DPUaO y<:ࣉWD(Pyd6FdN D^Eq$,jkhniW% j=@ҺJ{!SF1  墍e edO!#,?! 1_fq6B(< 5IH a0`0)BR'2dPp2 :QQ ӿ XkF crF4 =Rw9|Vg!/Q j(lH9 ܒIE Ds"=`(AGt7A1*B“ ׳RC1{rOo Ȣ er44(S(4)Nz4}Ud D<dR:=CmF)˓ >Roו:p pLEB!=? e`F7`R!'p@3GJZbdPQ& fT ^JIl4P@ʭGj5i?R|B`5z@& oQ:()ݴѝbp(""cP@hFl#([")$Tg<У#]A"<$2V0S}W>0%" 8( HQߤ{U莸?W9*c1^d$hGR cS+ESTO-JWT:ZTG.tpH i[&esIR!`K {@&2{},/c0˖`1HC@=!;=O5O06z* FH';Xw1* )@4Xt(WB H @"]hg{0hG$%/]_ѮƒES?xfj* U?*n 88NxJoP'ƈo7 ?`+""|H~G|(o= F ȷ,qT@]44B_v@䐇vqFC)zl;8L! F[`1({"$@B_TIrrLE t؎;"6AvoPqy i9ds{Ï`N,~\AT.Kr!^AU4T+( Q3ꅎAuC%+ 刢Q<m%lXh8-.` VR@ձ42!#MLQdA%T$ɤV_"V+c>_l0P=?Fܔ2x*nKF(EI';$EgH9"p\ ßQ#HNd>$Ii1D"9XZ}D2^Wr4ˀ%QфVg>zc /ol0x.$M8t i #h[D&>ʗ9`0P 6`yyM%-u)"쎖R7GI1r$Z!-zd>Qrd`G%{s$^oN'dPv/] Xi Rs>Z .ZFV$"ȝn8#IOt) g.q,ssJ}Q}>?@QqXԜGF-ӎ@l13kpDgF&dCQ1׏wS6162KS :#c$*& W6H9EJl=LՌ|EǺ-xH;P"Bg}1}=pF$d"i IJy3KD00z݉t:@H`gI DODO9!{:{RO0ckyy>%_wFD &ގQ8;R4( \!^ۛ=`"#K!o욈1?>a$/$B$z\{Ӧ\"?|M"A`fsgKvJ!Jg10Pg:{}J<;e7!?C8xCP/!-P gસ@*8 M#39lX@mT>[*9ĺإ9|ң~V ({8pcÁ.!->%>D֦տ~P$o