����ipa-selinux-luna-4.12.2-1.el9����>� M Mv�������� ĉJ4!!�%j�o�Lne)Ip-Bm5 ']g'�\releng@rockylinux.org p-Bm5 ']׳�'�`���N�;���7@-�Nl����ϞVu8�Ԇѷ�\u�9� ȷ��˒23+�׀5��!T_�}�5�E����3�T���Qւ_�J:@ˮ�T샌���vQ��� �M��W̮���ɍ�T+P?'=GF�vl}���Y��S��q����F8 ]˓�+��/��j�����9N��u>��^�kr���)a�0Du�6�]�W=�NF� � �-�J'a�IZ4OA�#C� �r٘8�%��݄ⷰ��C�Q>��a��������k}�� �m�zXn/�h2��-�H!'F���U#�"��S��g�^���Z�M�����S�E�B�L��IĿH�bN�� 9z��ﭞ:��)�I�ގ�JO|�z5)y�&-iz������,=X6Ue5.�����ҎS�.�s6�1.��ۼ� �yjQ�-�@{rnu�R��(yAj#mc][�謀U[��C����w���&�S>�ׅ҃��4S���v �uZ��6�B�x��Z� ������Nץ� Rf`b48da352781d6668f8e38dff0992425d7b402a37a8a5ca2174eeee3473d09850bbc3684e80099bb97d5a0eeb0e094923bea5cfddd�A�Y����Yȑ AY��)>�������>:�?:�d���� � L��������������� 9�E�]�cj�|� � � � � ����, ` f (�8�9,: >7t@7|G7�H7�I7�X7�Y7�\7�]7�^7�b8!d9�e9�f9�l9�t9�u9�v9��9��9��:�:D�:HCipa-selinux-luna4.12.21.el9FreeIPA SELinux policy for Thales Luna HSMsCustom SELinux policy module for Thales Luna HSMsg'�Zpb-67b63646-9cff-4b85-8f07-6543bd5de663-b-i686'�Rocky Linux 9.5Rocky Enterprise Software FoundationGPL-3.0-or-laterRocky Linux Build System (Peridot) Unspecifiedhttp://www.freeipa.org/linuxnoarch if [ -e /etc/selinux/config ]; then . /etc/selinux/config fi _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if [ "${SELINUXTYPE}" = "${_policytype}" ]; then /usr/sbin/semodule -n -s ${_policytype} -X 200 -i /usr/share/selinux/packages/targeted/ipa-luna.pp.bz2 || : /usr/sbin/selinuxenabled && /usr/sbin/load_policy || : fiif [ $1 -eq 0 ]; then if [ -e /etc/selinux/config ]; then . /etc/selinux/config fi _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if [ $1 -eq 0 ]; then if [ "${SELINUXTYPE}" = "${_policytype}" ]; then /usr/sbin/semodule -n -X 200 -s ${_policytype} -r ipa-luna &> /dev/null || : /usr/sbin/selinuxenabled && /usr/sbin/load_policy || : fi fi fi'����g'�sg'ȅ777deb2928033401d83a04347be54f072c21e131e318c2ddd7cfd835ab97b8d8@rootrootrootrootipa-4.12.2-1.el9.src.rpm��������ipa-selinux-luna     /bin/sh/bin/shlibselinux-utilspolicycoreutilspolicycoreutils-python-utilsrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsZstd)selinux-policyselinux-policy-baseselinux-policy-targetedselinux-policy-targeted3.0.4-14.6.0-14.0-15.4.18-138.1.45-3.el938.1.45-3.el94.16.1.3f���f��@f��f���ff��f`S@f_�fW�f0�@f�@e�@eԔ@e�N@e��e��ei��e[J@eH�@e��d� �d��@d�r@d�c��c�&@c���c��@c�#@c��@cW��Florence Blanc-Renaud - 4.12.2-1Florence Blanc-Renaud - 4.12.0-7Florence Blanc-Renaud - 4.12.0-6Florence Blanc-Renaud - 4.12.0-5Julien Rische - 4.12.0-4Florence Blanc-Renaud - 4.12.0-3Florence Blanc-Renaud - 4.12.0-2Florence Blanc-Renaud - 4.12.0-1Florence Blanc-Renaud - 4.11.0-11Florence Blanc-Renaud - 4.11.0-10Florence Blanc-Renaud - 4.11.0-9Florence Blanc-Renaud - 4.11.0-8Florence Blanc-Renaud - 4.11.0-72024 Florence Blanc-Renaud - 4.11.0-6Florence Blanc-Renaud - 4.11.0-5Florence Blanc-Renaud - 4.11.0-4Florence Blanc-Renaud - 4.11.0-3Florence Blanc-Renaud - 4.11.0-2Florence Blanc-Renaud - 4.11.0-1Florence Blanc-Renaud - 4.10.2-4Florence Blanc-Renaud - 4.10.2-3Florence Blanc-Renaud - 4.10.2-2Florence Blanc-Renaud - 4.10.2-1Florence Blanc-Renaud - 4.10.1-6Florence Blanc-Renaud - 4.10.1-5Florence Blanc-Renaud - 4.10.1-4Alexander Bokovoy - 4.10.1-3Florence Blanc-Renaud - 4.10.1-2Florence Blanc-Renaud - 4.10.1-1Rafael Jeffman - 4.10.0-7- Resolves: RHEL-54546 Covscan issues: Resource Leak - Resolves: RHEL-49602 misleading warning for missing ipa-selinux-nfast package on luna hsm h/w - Resolves: RHEL-40359 With unreachable AD, ipa trust returns an internal error- Resolves: RHEL-53500 adtrustinstance only prints issues in check_inst() and does not log them - Resolves: RHEL-52306 Unconditionally add MS-PAC to global config - Resolves: RHEL-52300 RFE - Keep the configured value for the "nsslapd-ignore-time-skew" after a "force-sync" - Resolves: RHEL-52222 ipa-replica/server-install with softhsm needs to check permission/ownership of /var/lib/softhsm/tokens to avoid install failure - Resolves: RHEL-51944 Include latest fixes in python3-ipatests packages - Resolves: RHEL-50804 ipa-migrate -Z with invalid cert options fails with 'ValueError: option error' - Resolves: RHEL-49602 misleading warning for missing ipa-selinux-nfast package on luna hsm h/w - Resolves: RHEL-27856 'Unable to log in as uid=admin-replica.testrealm.test,ou=people,o=ipaca' during replica install- Resolves: RHEL-47292 Include latest fixes in python3-ipatests packages - Resolves: RHEL-47146 Syntax error uninstalling the selinux-luna subpackage - Resolves: RHEL-46009 ipa-migrate with -Z option fails with ValueError: option error - Resolves: RHEL-46003 ipa-migrate -V options fails to display version - Resolves: RHEL-45463 ipa-migrate stage-mode is failing with error: Modifying a mapped attribute in a managed entry is not allowed - Resolves: RHEL-40890 ipa-server-install: token_password_file read in kra.install_check after calling hsm_validator in ca.install_check - Resolves: RHEL-40661 Adjust "ipa config-mod --addattr ipaconfigstring=EnforceLDAPOTP" to allow for non OTP users in some cases- Resolves: RHEL-37285 IPA Web UI not showing replication agreement for non-admin users - Resolves: RHEL-42703 PSKC.xml issues with ipa_otptoken_import.py - Resolves: RHEL-41194 ipa-client rpm post script creates always ssh_config.orig even if nothing needs to be changed - Resolves: RHEL-39477 kdc.crt certificate not getting automatically renewed by certmonger in IPA Hidden replica - Resolves: RHEL-46559 Include latest fixes in python3-ipatests packages - Resolves: RHEL-22188 [RFE] Allow IPA SIDgen task to continue if it finds an entity that SID can't be assigned to- Resolves: RHEL-29928 CVE-2024-3183 freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force - Resolves: RHEL-29691 CVE-2024-2698 freeipa: delegation rules allow a proxy service to impersonate any user to access another target service- Related: RHEL-34809 temporarily revert a commit that depends on newer version of python-jwcrypto- Resolves: RHEL-39950 ipa-client can't be installed because of a missing dependency- Resolves: RHEL-39140 Rebase ipa to the latest 4.12 version for RHEL 9.5 - Resolves: RHEL-34757 The change for preventing deletion of the admin user caused a regression in disable - Resolves: RHEL-30553 Depend on nfsv4-client-utils or nfs-utils - Resolves: RHEL-29762 IPA sidgen fails to create SID for manually set ID for a new range [rhel-9.5.0] - Resolves: RHEL-26261 Fix replica connection check for use with AD administrator - Resolves: RHEL-18062 ipa ca-show NAME --certificate-out=file creates empty file when NAME does not exist - Resolves: RHEL-12149 traceback in ipaserver/dcerpc.py - Resolves: RHEL-4810 [RFE] FreeIPA-to-FreeIPA migration - Resolves: RHEL-4807 [RFE] Support in IPA for HSM boxes- Resolves: RHEL-33645 - Update samba to version 4.20.0- Resolves: RHEL-23377 Enforce OTP for ldap bind (in some scenarios) - Resolves: RHEL-29745 Unable to re-add broken AD trust - NT_STATUS_INVALID_PARAMETER - Resolves: RHEL-30905 Backport latest test fixes in ipa- Resolves: RHEL-28258 vault fails on non-fips client if server is in FIPS mode - Resolves: RHEL-26154 ipa: freeipa: specially crafted HTTP requests potentially lead to DoS or data exposure- Resolves: RHEL-12143 'ipa vault-add is failing with ipa: ERROR: an internal error has occurred in FIPS mode - Resolves: RHEL-25738 ipa-kdb: Cannot determine if PAC generator is available- Resolves: RHEL-25260 tier-1-upstream-dns-locations failed on RHEL8.8 gating - Resolves: RHEL-25738 ipa-kdb: Cannot determine if PAC generator is available - Resolves: RHEL-25815 Backport latest test fixes in python3-ipatests- Resolves: RHEL-23627 IPA stops working if HTTP/... service principal was created before FreeIPA 4.4.0 and never modified - Resolves: RHEL-23625 sidgen plugin does not ignore staged users - Resolves: RHEL-23621 session cookie can't be read - Resolves: RHEL-22372 Gating-DL1 test failure in test_integration/test_dns_locations.py::TestDNSLocations::()::test_ipa_ca_records - Resolves: RHEL-21809 CA less servers are failing to be added in topology segment for domain suffix - Resolves: RHEL-17996 Memory leak in IdM's KDC- Resolves: RHEL-12589 ipa: Invalid CSRF protection - Resolves: RHEL-19748 ipa hbac-test did not report that it hit an arbitrary search limit - Resolves: RHEL-21059 'DogtagCertsConfigCheck' fails, displaying the error message 'Malformed directive: ca.signing.certnickname=caSigningCert cert-pki-ca' - Resolves: RHEL-21804 ipa client 4.10.2 - Failed to obtain host TGT - Resolves: RHEL-21809 CA less servers are failing to be added in topology segment for domain suffix - Resolves: RHEL-21810 ipa-client-install --automount-location does not work - Resolves: RHEL-21811 Handle change in behavior of pki-server ca-config-show in pki 11.5.0 - Resolves: RHEL-21812 Backport latest test fixes in ipa - Resolves: RHEL-21813 krb5kdc fails to start when pkinit and otp auth type is enabled in ipa - Resolves: RHEL-21815 IPA 389ds plugins need to have better logging and tracing - Resolves: RHEL-21937 Make sure a default NetBIOS name is set if not passed in by ADTrust instance constructor- Resolves: RHEL-16985 Handle samba 4.19 changes in samba.security.dom_sid()- Resolves: RHEL-14428 healthcheck reports nsslapd-accesslog-logbuffering is set to 'off'- Resolves: RHEL-14292 Backport latest test fixes in python3-ipatests - Resolves: RHEL-15443 Server install: failure to install with externally signed CA because of timezone issue - Resolves: RHEL-15444 Minimum length parameter in pwpolicy cannot be removed with empty string - Resolves: RHEL-14842 Upstream xmlrpc tests are failing in RHEL9.4- Resolves: RHEL-11652 Rebase ipa to latest 4.11.x version for RHEL 9.4- Resolves: rhbz#2231847 RHEL 8.8 & 9.2 fails to create AD trust with STIG applied - Resolves: rhbz#2232056 Include latest test fixes in python3-ipatests- Resolves: rhbz#2229712 Delete operation protection for admin user - Resolves: rhbz#2227831 Interrupt request processing in ipadb_fill_info3() if connection to 389ds is lost - Resolves: rhbz#2227784 libipa_otp_lasttoken plugin memory leak - Resolves: rhbz#2224570 Improved error messages are needed when attempting to add a non-existing idp to a user - Resolves: rhbz#2230251 Backport latest test fixes to python3-ipatests- Resolves: rhbz#2192969 Better handling of the command line and web UI cert search and/or list features - Resolves: rhbz#2214933 Uninstalling of the IPA server is encountering a failure during the unconfiguration of the CA (Unconfiguring CA) - Resolves: rhbz#2216114 After updating the RHEL from 8.7 to 8.8, IPA services fails to start - Resolves: rhbz#2216549 Upgrade to 4.9.10-6.0.1 fails: attributes are managed by topology plugin - Resolves: rhbz#2216611 Backport latest test fixes in python3-ipatests - Resolves: rhbz#2216872 User authentication failing on OTP validation using multiple tokens, succeeds with password only- Resolves: rhbz#2196426 [Rebase] Rebase ipa to latest 4.10.x release for RHEL 9.3 - Resolves: rhbz#2192969 Better handling of the command line and web UI cert search and/or list features - Resolves: rhbz#2192625 Better catch of the IPA web UI event "IPA Error 4301:CertificateOperationError", and IPA httpd error CertificateOperationError - Resolves: rhbz#2188567 IPA client Kerberos configuration incompatible with java - Resolves: rhbz#2182683 Tolerate absence of PAC ticket signature depending of domain and servers capabilities [rhel-9] - Resolves: rhbz#2180914 Sequence processing failures for group_add using server context - Resolves: rhbz#2165880 Add RBCD support to IPA - Resolves: rhbz#2160399 get_ranges - [file ipa_sidgen_common.c, line 276]: Failed to convert LDAP entry to range struct- Resolves: rhbz#2169632 Backport latest test fixes in python3-ipatests- Resolves: rhbz#2162656 Passwordless (GSSAPI) SSH not working for subdomain - Resolves: rhbz#2166326 Removing the last DNS type for ipa-ca does not work - Resolves: rhbz#2167473 RFE - Add a warning note about possible performance impact of the Auto Member rebuild task - Resolves: rhbz#2168244 requestsearchtimelimit=0 doesn't seems to be work with ipa-acme-manage pruning command- Resolves: rhbz#2161284 'ERROR Could not remove /tmp/tmpbkw6hawo.ipabkp' can be seen prior to 'ipa-client-install' command was successful - Resolves: rhbz#2164403 ipa-trust-add with --range-type=ipa-ad-trust-posix fails while creating an ID range - Resolves: rhbz#2162677 RFE: Implement support for PKI certificate and request pruning - Resolves: rhbz#2167312 - Backport latest test fixes in python3-ipatests- Rebuild against krb5 1.20.1 ABI - Resolves: rhbz#2155425- Resolves: rhbz#2148887 MemberManager with groups fails - Resolves: rhbz#2150335 idm:client is missing dependency on krb5-pkinit- Resolves: rhbz#2141315 [Rebase] Rebase ipa to latest 4.10.x release for RHEL 9.2 - Resolves: rhbz#2094673 ipa-client-install should just use system wide CA store and do not specify TLS_CACERT in ldap.conf - Resolves: rhbz#2117167 After leapp upgrade on ipa-client ipa-server package installation failed. (`REQ_FULL_WITH_MEMBERS` returns object from wrong domain) - Resolves: rhbz#2127833 Password Policy Grace login limit allows invalid maximum value - Resolves: rhbz#2143224 [RFE] add certificate support to ipa-client instead of one time password - Resolves: rhbz#2144736 vault interoperability with older RHEL systems is broken - Resolves: rhbz#2148258 ipa-client-install does not maintain server affinity during installation - Resolves: rhbz#2148379 Add warning for empty targetattr when creating ACI with RBAC - Resolves: rhbz#2148380 OTP token sync always returns OK even with random numbers - Resolves: rhbz#2148381 Deprecated feature idnssoaserial in IdM appears when creating reverse dns zones - Resolves: rhbz#2148382 Introduction of URI records for kerberos breaks location functionality- Resolves: rhbz#2124547 Attempt to log in as "root" user with admin's password in Web UI does not properly fail - Resolves: rhbz#2137555 Attempt to log in as "root" user with admin's password in Web UI does not properly fail [rhel-9.1.0.z]/bin/sh/bin/sh4.12.2-1.el9ipa-luna.pp.bz2ipa-luna/usr/share/selinux/packages/targeted//var/lib/selinux/targeted/active/modules/200/-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m32 -march=i686 -mtune=generic -msse2 -mfpmath=sse -mstackrealign -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protectioncpiozstd19i686-redhat-linux-gnuutf-80cd351b3869ebc1eeaae7bd0e3ac164ed2c0593310ff3efad14bd319fea66c149abf3ad65b9830ba811d514f7c8f132d8ada08ae08a31e251ae670e32862a3ae?��� (�/�h�2�R071081a4016727c87327dd036./usr/share/selinux/packages/targeted/ipa-luna.pp.bz2BZh91AY&SYM^� �Y��7����B����>{���a@��8h�:@B�%M@=@��O�T���ѐ�M�d� �2z25A��� �M4�F4�4bcSCL�ѐ�=A�������5JEQ���4f��2bQ�@~��JQ*22h�Mh i� 44�2 �Q�6�CL� 4 ����hѦ�6��F�='��E< z�4���z�b����f�h�� 4��$D&��j���������0#�шhd4 �z �O�*�O������Ă7J`ؐ66��l��z֢HΠJ%yf��m�� ��T�7�ϝz����wx�DŽA�w i�q�k���i����r��uq��F�5��q���Ȋ:����8�#�<�����T����_�T��om�e����ϼ���|⾯���K��+�����y���E������uz�~�g����w{���� ��y<�o<7���������������_������~���Q�#Q�G�HH�I�J�K�L���M�$������AGIJ��5:z��Uj++k��,l�����[�\�]��^�������ĉ���V�1 (ش(��$d��%QI?ACE2Zt��T�U��Q[]_acegh��M���������W�8Xx������� TNƪ�?���)]��7f���!� ́��-y���li:�9��[�j����:����'թ>(�\�Qt�B!Y�#bBL�g�����v ��! � ��!����4؝�w��.�c7=5�!n ��6�o�|�6 s�� o5�v(U�W�9��+��[k��R#v�t�ٷL�S�<� �T �i$��| ��#,��Dm�S4ѵ���C@x�0_���Ъ+hY\���`_���5�}D �r,���3�wm�� �ȲΜ���f1�p2^ �� ��+�>������=�@A s�4Y�|������.�8HvMh��;4Qs�O�TWaP3ތ�,f�Տ |˚��v;ځ�7P9�Ί׫ �B *h�*M���� �T������n&��T�ɪ�x�\��Q2 �U����KQ(IAS'L���*ڥ�B���� w���%�(`�ئ81sn�=B�,TQ�,�3������ �v�(�c/.Y`t��2"��� 6h��.�n�����>O|�o �h� ��ʚC*�����ɏʛr嶋K� ��ύ:�>Z�0Xw�77b�!Bm��ْd����37&� m�!7�a�m6�M��j����A׮��'�ˁ��|Ɇ��+�SkI�`�ȋlC`҆!� �lCb؆�6"b6" �L2a� �d�&0ɆL�DDE���2���cʝ�#+��N:��` �R�9�`�S�!���>#|� �@f!���ώ�(P}�p �>��ǻ^� �O c��J�Ph����m�p(k8w�SzS|��3e�i6�+�1� a�>�X1�X�o3��/FY��p�=k�����/?F5<��`�Y�X!�HӸ��7��@q��� ��m��C2���� aH ��@e���v����p��g]x� � (�Z�I%pb8z0��~~��3��fx��9fzv��-yye���JcҺ��9��3y�q;�I�6:=�u�s(s�C�)!q���ۨy} C�)"�݀�P9��9 ���/]��F�ek׻w8��I$���$�2I`I ���d̡� 4���@��`�%�LH }�J� b%(���O���������yz{�>�G�����z޳33>ͣdѪs2�TQ�Ǐ:�spD�DI�8jt��b�4t���Ҝ�5U7�Z����}���_�*��5� 0`U^��D��%EJ(�D�TD��g�#��o��3��_�P8�&j�� m�n�n��c���`��m�N�z�$�J��i����s��5;�z�{�W�7��5��X����*^SY�9أ^��^�i�N�7��p�؞*�n'eݶЧv�b@�$���m�)[H ���3 �Ur�ݘ�����l���թJ�Z��9Uy��ɪ�I:�ē� ��Vۺ̳u����m��$�=Ȫ�Hi'[����57��ț��8�>n̎e����HUf$���Q)$�A����`fffe^2�x�=օZ����v�`wm��L��7[�m�@xL���r�fbBdU��Vb@ @ ff���b@�1� r�j����̙�̗���{���w��ഌI��$Z�a���y�2�53L���s�1[�� �^6��mz �.�[9���dn�����D�2��̼��R�=:�al�ūש�wχ�#��#�wu��,�X��,�m��L�8�$z�*��ٛ�&�r���B@z�#��Ix0_�iD����J9J3���V��(,�_,� 07P[i��ME΢�P s��mmh:.���WWN����!��aJ2Z�o=a��֥f�R���J%(�Q��R��h��%)J)�%9�s��ͳ�h���댼q��$C v#�w4 �5u(�~q���W忈�����ヘ��%�c�c�T�5�\s1�Z��0tp�ا^�`�I% �6����X$���_\����B_�`��Y�S�)\��O�����ϕl$4 �>�t:��}F�L��)˻��~t ^t��v���`����f��@�h��Uo�6�V�� f�)Q������տ�� �����}��W`��o�:Yz��yj]`��I���޹Q��X��.cy:���5n� �"�#З���6�n��:�9)$�cr��JP⒕��M S�a��b@�Rı��jt���ݙ<�[.�'��5��Nb�&3q6��<��Tv�\jS}��e^��g+'���ɭ��ԝ�ɮ;|k���uwm�O8 �Jq��2�Řs�hj��^��L�)�|�0��b�V�H��7����/gK���2��a�{����\�R�6jz���r����f�3ՕIb �w^r��h"�l��4��Շ"���!FU����Y��k�*- ��QM� ����iŲhQa ��j�a�hɹ6���V9�cb�e��\g"�>��Z�Q� 3�� �"���U�3-T������y'�q���V���n�K�X���P���χn|��Y� �l:�q�K�����������bc��[wD�?�ԭ(��@�@�ɀ@A�x�D��%P%��_�;�jąɍ�)A���M�g �.7 �"@��=7�S$�V��� ����������ӡΣ��B�`�(!� �6�Ch|N@,R�����H�א�L�%��M�-0J�Y5SL:w5�b#V Hm"[3-A$sZ0� �:�!G��=$���7�1rf��I�hm���L��5���>��P*��m�0LJ�!2�C6��37��G*M��d�3\CV���3���6� ��rYh����cP�D:$Х�� h~����P�H�pCpoK!(p`j��q�0"�a�-C�D�w0l���=�^6�Mf,�ď>`f.�|Pb] ����x���.eq!Ǖ� } �R�M $�c9�5��E�Aq1=��� ,�8"��-��� $V9��Ф"t�h��0B9�I��Z� P�H1�KP҆�R hTD��w io�M��PҰ-;�t(���Ml�8j�����Ϡ`.#�������}�\"v�X`Z�N�Y8:��K,~5�M��ܩ�+��|��z~�>�R�>h��\w���r0�Aj ��� g��W��he��·�ڕ�N�`�zn���V��N�% 7hg��_^��ړ�ů���7֛�U�\��:ic��y�=� I.��F����Q��^�:1���Թ��2�;k���'���FNR�(� �|%Jlrt߁�|1����`��:�1(p�}(��R@�:���fx�Hp�0�Ja$� @�i�q��Ԁ��/�Z�H� �= ��h=v��J��N�4x8�K^2�:��AM)B �@.�ʜ�"JD�� ���P����{�i�����7`���/@��t�d{U�Y�#�ۥ��`���;�L]�3�5٬�n&h��o�}ᾏ�o��>co�̮^u:v���;�y��TU[�cy���ޕ �,�ږH�������Z�����_}R�W�%9w("�{wI�k����#��ꉸ�y�'ȴr�"�N��yϷ���3�;���i��?#Ȟ&�M�L"<��`��i�Dr'�)��m6 6�`q��m&��5����؀[��ⷣ���šHIbL��O�������{�{���T�~�y����'�ZbF��'�)���SzT���yD �:w^�k��6o�Oa��P8����v��r���mWq"�E�E�8���I�#�y�~������%ް�{>G��ޝ;����ý�G����;ө.�����y _{�ޝIw���f#���N���m��{و�6����N��Xw���6&<���zw�RG�#U�<��O�;��������'������`���z�I��{j����|}B�E�u:^�V�ݗ����͵��x�f2��E�rL���*S�Cύ�{��^�wׯQȺ��~�/�Q���OzC�0�9uwN)�R�8l�M*p��G)ަG��������z����@}��G���z����b<�O�������z�����;��w��#�1� m ��y� �6G��8������F���0 hl#ȼhC �'���x(B!� 0�l$$$�1LclB�J��:�% B���U���w�y��eO*�l�WWED�d��{�~�.J�O��둵~���g�����"P�Ԯ:��g�S8���Y[O&�*U���y;����Hi���Ki�@�ay6��!�Fq�� !��<�$ ���i�G�#m�8���@:m��"k�&����:�4�j�D��>��d�^��)�݊�S|ݮ.b�cS̭�Q�������t��2�y9w]���QBԣ��q4ξ�^.��8�p�z��+9�T��ySݘ��T:j�r]ڇ�M�ٜZ��X����蔇�G�Ͷ�a:!�<�!k�� I���3m0��h�mjyC�z��C�4�0�2�Z�8�1U$��#ȹ��+Z�0QA�����G�� wv*r�����&�߶�awx�^ג<�X#ow��Ʋx��v=.�u��x�� ��x�ϫ���<�qW����w�Ô�j�9 �E\���e-XG_/�t�ǭI�k����e�[� D���KD��D����{H��w��qh�ǭɣ^�/sL�<�E�00���!Dz���h���;�z~�<�WsX���ef���bs]��QM�RŲ�Q��R���M�_��ޮ��yu���]s�9 EJ�J�K�ꢜջ�s�����֩�v�9�GW ��"{�,��v6��e`$��ؕ���c`yFV@nݍX n� �9X��M&�ci�c�P&U!6晉39����<���oy������}������D��鷙:�I<���͉��EO)�Z�Al��ɔ��Hr��2����ںY��U�Ƣr5M��j���3Y���7���fZyȺ��Qy�o6��w�9u���<���h ��e�]h0<�#2�Z��{�����ܵ�a|�Fm,5��hc��4�ĘDy��m������0"<�^����w���\�j݂����S�S-(�+_���D�'�Og�=6��X��� �����U.�9r��+��9�q~���M ��'4�ʛ��=d^>$F��hC���ǽ� Y�P��b|�����UP��y�1�S{������$�"<�9���D#�&�Ah�@~G�����&�`���'HM�������X����{{����Y�g'���G��y�n�*������6�{X��My\�ׯ��6nȖٻ�Q��%����@l9�U�'��Up�)��s6bsЖ�f�g�Ⱦ�'9�̮8�ꋣ��&���f-A�G�m�wzyA����p���֐G����X3P��!� -��a�y��0��PݽV 1B0�o�7�ij�lo�8�3Ѯg�D����ɗ~��ˉ�nmf���2L���W �˭o�kZ��c&L�Fjܬ�[�\�4��9� ��LT�S��]%ȩ��t�W>fl���%T���t��B�5�5&��6�WI���.����˓.b���e�Uf�a�jĸ� �P�D�mz��\ w��/����=��2R��ƺ�{5(a�'�i�qd�>2���B CL��!�Jn¤QC�Ʌ���V�*A9�cS� =�$��s13��rț� i.勔�f37a��m�=�L��~��r�u��~:ӶzaN}ԩ��N��n�u�c����]7��e���qsxƻ�<��<��+׏]*ehÁ]ō�� ��4�r�2�su����+��|�6��E7�o�!�w��q`��@@`q^M� ��W.m!!����vb�`�C��T)I�U��gǾ�Z�]g��scm��I�#FԕŤx�E���+F%��hS@@��0�(c����Jq �P$����wd,ś���|�٠ �gD4� �#� ��5F ��f��7� � ���8�S��@9��A� $�d��U g���*`|�&�a� ݧu�;d*�ͺ�A� �� �*��(��(�& f{�>$ֱZԛ��Tإm����D�&d�3��ʖe�#��2��r���1`,0Q�~��ݍ��!,P�A I&�i���[���=_Tʨ8���by @1�R� ��1�c����;� �D�K��`��`��I����f��!C�����YŚY��������IC��d �)��-�j�����8* „��`�g ��!'�Zמ�2\��p J�\����e���,l��ln3q�,S�Gx�/̀�1( 1���s:�&�y>`1��u&L"�d.ʔ��:1 ,�HӒ:%>0%�G ���QDxg�������K< ��r��|g���]��JWbأݸld��B�o5�%���*��3z��D7�ޒB��!#��eP�JZ0�6�J�0L��D�@a4�W��w�[�X�r��,�ݠs�C��>c.� �8q�k��� ��E�`7�]��H�b��0C8IQ� ZQ� �M���kPة�R ��#�Bp�Ꚁm/�r◑D���b����q+����)Ĺ���1+���C�0�ѥ��H\�IugF�X�M�1Д�( ��=�҅a���Fe@D݈�@� ���K�x�1��7S�ǖ>I��VU6� �w�t ��zw(g��S��y�Z�.MPQ�$�V���f��#���ƆR�� "��v@�� �ع+㈝�|?�μa�� i$ːKi"Bf��"%*«� �ȩL��"��a��l�C���� �� `SS�T��T�����P�h�\�(=��t ���~G�&x+�F�/c���&�40�U�p] �\=c��b��^��Ł��Pf�/8`���N@ '�����a���t[�U��� ������L��5h�{bդ�l` e2�U��ڏ�&�����l �6�н��7հ ��H��� �`/zz[�u��X;�a��%0��R��ɺ-��Y&[m��7Moj�)D���tt�����%ׁ@�(3t8nFL����wV�����O��c$�CM�16($̕C���=s@�R�^���9�C!�}� �3!�O�l�X��*Sݚp5R@4@x���݄��}���!�=��������x�)E�l �I2� ���b"c��.�!8�����:a߮���i$^����X��{B0Z1ZlY^`3��v����Ԡ뉡�׌FDS$�Z.�)����1��x� �����8�1�`�(�Ő��Y�©��A�J7��zjZ*.�M�}x:��,�����I���jP jB����$���J�s|ݳ3�r�淭�2�6�m����61 �-hBT4� Px0J�%b�X~��d��Kՙ8wm�n��T��82�&%l@��G II�B �:I'v}�V��x�;���`�BM�N�T���s&�� ��$�#y��@�)���]b��Y �D� "@`�����($B�����i�z�%�� APC��,7����b@�������Q���'E�,E�5�Ab$��8��� �&Q��ؔ� f�9,T̀|�%@� T�f"*��Ձ� �J<@.F�RIEN�BJr�T0"�+�(!)!������ Q�xճL�Tk#5��ryӮpV���U&S2I,A���!�K(m&K�Z�Y������PBz8�' �,���@ `��m6�bn�2���0�԰V��4�tC#R "�<,GW��6&Qv��mdI�}K�@�G�^hI08a�����04 `�$-��+���4 @yI(8��ƒ�i ԙr�yb��7����� ��@UfQc�@͍L���GT9j�����H����hm 3B5��7�Uv��B�r�l��a.Uy��@�ܘ�?g��+6.�w4�'C\uo ;=9 id %"���0� !��;P� I֨R9_�l�$�� �C2Hx�F:�(0�7DD� 0�# F���b}Òd�J�K��� �H���H�J���u� vI,a�8�>]0���ö �:�$��d�f�d��8�12eD�TPBP?���P��� �BhA���ܑN$W��bTRAILER!!!w(@���$�{f� Ib,)߂J�9��,�l8D)�J�pb��S��W-ZP��0�PC��J���TbA2�2#p��p���hrO�Le=��醡�i�2��:f�j��u0{5xH�Z KK�k� �4��6���}����!��6Ƭ*�"`��"����e���?bzM��<�d�,z C��٥2y��B�x�ܪ)�Q�кi.P�B�o�%poHF5�.�?�'���Gu�i*3�Ĕ@IP��5HzI>�����E;t��{`gCףaDA(DbcD <C�q��