����ipa-selinux-nfast-4.12.2-1.el9����>� M Mv�������� ĉJ4!!�%j�o�Lne)Ip-Bm5 ']g'�^releng@rockylinux.org p-Bm5 ']�qĦ�%�Wd[%�(4o��naVJ�fx�u�6Ϻ��3���/��d���U�xUK«aVF/�C���ݶ�0zb����o���$��h�pe����O��A�Ő>�q3|��|,��U N��������mL&�8�8�Ӱ|OR'����}�6$8��;�����K��*�*�)KP)S}�R4T���lZ���L� �V)8 �x�oC��y`Y�Y�����{��3 ��w� g��� �̅l�T9�Ҍȭ>dN$Χ�3�g|P�*3#?ZGW�v�1Κ�UF� y�����x7���옠�;��u���m�Q[�80Mo��5)�jd�B�c,Dq�A+ɯLQ�WE솾� ױ�K'��%�Q�����S�(3��в=1�v���}E����I��)69ք���J0I���É� 凳�J����C���pe8Ei��Q��.��v��V9�V���v�fk�a�����B[u_�E��!�,�ع3f �D�&ॳqR��*N���&�7bf15a6e461a9f81cf3d5975af5a5202aef85202ce8edc966610c82938570a045b15f5e4ce58656a9797087b9983b4b86d5a2d5eet8�e�3���/ae�*)X>�������>:�?:�d���� !� O�������������� =�I�a�gn��� � � � � ���� 4 h n (�8�94: >7|@7�G7�H7�I7�X7�Y7�\7�]7�^7�b8+d9�e9�f9�l9�t9�u9�v9��:�:�: �:L�:PCipa-selinux-nfast4.12.21.el9FreeIPA SELinux policy for nCipher nfast HSMsCustom SELinux policy module for nCipher nfast HSMsg'�Zpb-67b63646-9cff-4b85-8f07-6543bd5de663-b-i686(2Rocky Linux 9.5Rocky Enterprise Software FoundationGPL-3.0-or-laterRocky Linux Build System (Peridot) Unspecifiedhttp://www.freeipa.org/linuxnoarch if [ -e /etc/selinux/config ]; then . /etc/selinux/config fi _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if [ "${SELINUXTYPE}" = "${_policytype}" ]; then /usr/sbin/semodule -n -s ${_policytype} -X 200 -i /usr/share/selinux/packages/targeted/ipa-nfast.pp.bz2 || : /usr/sbin/selinuxenabled && /usr/sbin/load_policy || : fiif [ $1 -eq 0 ]; then if [ -e /etc/selinux/config ]; then . /etc/selinux/config fi _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if [ $1 -eq 0 ]; then if [ "${SELINUXTYPE}" = "${_policytype}" ]; then /usr/sbin/semodule -n -X 200 -s ${_policytype} -r ipa-nfast &> /dev/null || : /usr/sbin/selinuxenabled && /usr/sbin/load_policy || : fi fi fi(2���g'�rg'ȅ4c4af30060d1619831cb3e78466cda34c5524aa1a408b22a350dac65fa06d612@rootrootrootrootipa-4.12.2-1.el9.src.rpm��������ipa-selinux-nfast     /bin/sh/bin/shlibselinux-utilspolicycoreutilspolicycoreutils-python-utilsrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsZstd)selinux-policyselinux-policy-baseselinux-policy-targetedselinux-policy-targeted3.0.4-14.6.0-14.0-15.4.18-138.1.45-3.el938.1.45-3.el94.16.1.3f���f��@f��f���ff��f`S@f_�fW�f0�@f�@e�@eԔ@e�N@e��e��ei��e[J@eH�@e��d� �d��@d�r@d�c��c�&@c���c��@c�#@c��@cW��Florence Blanc-Renaud - 4.12.2-1Florence Blanc-Renaud - 4.12.0-7Florence Blanc-Renaud - 4.12.0-6Florence Blanc-Renaud - 4.12.0-5Julien Rische - 4.12.0-4Florence Blanc-Renaud - 4.12.0-3Florence Blanc-Renaud - 4.12.0-2Florence Blanc-Renaud - 4.12.0-1Florence Blanc-Renaud - 4.11.0-11Florence Blanc-Renaud - 4.11.0-10Florence Blanc-Renaud - 4.11.0-9Florence Blanc-Renaud - 4.11.0-8Florence Blanc-Renaud - 4.11.0-72024 Florence Blanc-Renaud - 4.11.0-6Florence Blanc-Renaud - 4.11.0-5Florence Blanc-Renaud - 4.11.0-4Florence Blanc-Renaud - 4.11.0-3Florence Blanc-Renaud - 4.11.0-2Florence Blanc-Renaud - 4.11.0-1Florence Blanc-Renaud - 4.10.2-4Florence Blanc-Renaud - 4.10.2-3Florence Blanc-Renaud - 4.10.2-2Florence Blanc-Renaud - 4.10.2-1Florence Blanc-Renaud - 4.10.1-6Florence Blanc-Renaud - 4.10.1-5Florence Blanc-Renaud - 4.10.1-4Alexander Bokovoy - 4.10.1-3Florence Blanc-Renaud - 4.10.1-2Florence Blanc-Renaud - 4.10.1-1Rafael Jeffman - 4.10.0-7- Resolves: RHEL-54546 Covscan issues: Resource Leak - Resolves: RHEL-49602 misleading warning for missing ipa-selinux-nfast package on luna hsm h/w - Resolves: RHEL-40359 With unreachable AD, ipa trust returns an internal error- Resolves: RHEL-53500 adtrustinstance only prints issues in check_inst() and does not log them - Resolves: RHEL-52306 Unconditionally add MS-PAC to global config - Resolves: RHEL-52300 RFE - Keep the configured value for the "nsslapd-ignore-time-skew" after a "force-sync" - Resolves: RHEL-52222 ipa-replica/server-install with softhsm needs to check permission/ownership of /var/lib/softhsm/tokens to avoid install failure - Resolves: RHEL-51944 Include latest fixes in python3-ipatests packages - Resolves: RHEL-50804 ipa-migrate -Z with invalid cert options fails with 'ValueError: option error' - Resolves: RHEL-49602 misleading warning for missing ipa-selinux-nfast package on luna hsm h/w - Resolves: RHEL-27856 'Unable to log in as uid=admin-replica.testrealm.test,ou=people,o=ipaca' during replica install- Resolves: RHEL-47292 Include latest fixes in python3-ipatests packages - Resolves: RHEL-47146 Syntax error uninstalling the selinux-luna subpackage - Resolves: RHEL-46009 ipa-migrate with -Z option fails with ValueError: option error - Resolves: RHEL-46003 ipa-migrate -V options fails to display version - Resolves: RHEL-45463 ipa-migrate stage-mode is failing with error: Modifying a mapped attribute in a managed entry is not allowed - Resolves: RHEL-40890 ipa-server-install: token_password_file read in kra.install_check after calling hsm_validator in ca.install_check - Resolves: RHEL-40661 Adjust "ipa config-mod --addattr ipaconfigstring=EnforceLDAPOTP" to allow for non OTP users in some cases- Resolves: RHEL-37285 IPA Web UI not showing replication agreement for non-admin users - Resolves: RHEL-42703 PSKC.xml issues with ipa_otptoken_import.py - Resolves: RHEL-41194 ipa-client rpm post script creates always ssh_config.orig even if nothing needs to be changed - Resolves: RHEL-39477 kdc.crt certificate not getting automatically renewed by certmonger in IPA Hidden replica - Resolves: RHEL-46559 Include latest fixes in python3-ipatests packages - Resolves: RHEL-22188 [RFE] Allow IPA SIDgen task to continue if it finds an entity that SID can't be assigned to- Resolves: RHEL-29928 CVE-2024-3183 freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force - Resolves: RHEL-29691 CVE-2024-2698 freeipa: delegation rules allow a proxy service to impersonate any user to access another target service- Related: RHEL-34809 temporarily revert a commit that depends on newer version of python-jwcrypto- Resolves: RHEL-39950 ipa-client can't be installed because of a missing dependency- Resolves: RHEL-39140 Rebase ipa to the latest 4.12 version for RHEL 9.5 - Resolves: RHEL-34757 The change for preventing deletion of the admin user caused a regression in disable - Resolves: RHEL-30553 Depend on nfsv4-client-utils or nfs-utils - Resolves: RHEL-29762 IPA sidgen fails to create SID for manually set ID for a new range [rhel-9.5.0] - Resolves: RHEL-26261 Fix replica connection check for use with AD administrator - Resolves: RHEL-18062 ipa ca-show NAME --certificate-out=file creates empty file when NAME does not exist - Resolves: RHEL-12149 traceback in ipaserver/dcerpc.py - Resolves: RHEL-4810 [RFE] FreeIPA-to-FreeIPA migration - Resolves: RHEL-4807 [RFE] Support in IPA for HSM boxes- Resolves: RHEL-33645 - Update samba to version 4.20.0- Resolves: RHEL-23377 Enforce OTP for ldap bind (in some scenarios) - Resolves: RHEL-29745 Unable to re-add broken AD trust - NT_STATUS_INVALID_PARAMETER - Resolves: RHEL-30905 Backport latest test fixes in ipa- Resolves: RHEL-28258 vault fails on non-fips client if server is in FIPS mode - Resolves: RHEL-26154 ipa: freeipa: specially crafted HTTP requests potentially lead to DoS or data exposure- Resolves: RHEL-12143 'ipa vault-add is failing with ipa: ERROR: an internal error has occurred in FIPS mode - Resolves: RHEL-25738 ipa-kdb: Cannot determine if PAC generator is available- Resolves: RHEL-25260 tier-1-upstream-dns-locations failed on RHEL8.8 gating - Resolves: RHEL-25738 ipa-kdb: Cannot determine if PAC generator is available - Resolves: RHEL-25815 Backport latest test fixes in python3-ipatests- Resolves: RHEL-23627 IPA stops working if HTTP/... service principal was created before FreeIPA 4.4.0 and never modified - Resolves: RHEL-23625 sidgen plugin does not ignore staged users - Resolves: RHEL-23621 session cookie can't be read - Resolves: RHEL-22372 Gating-DL1 test failure in test_integration/test_dns_locations.py::TestDNSLocations::()::test_ipa_ca_records - Resolves: RHEL-21809 CA less servers are failing to be added in topology segment for domain suffix - Resolves: RHEL-17996 Memory leak in IdM's KDC- Resolves: RHEL-12589 ipa: Invalid CSRF protection - Resolves: RHEL-19748 ipa hbac-test did not report that it hit an arbitrary search limit - Resolves: RHEL-21059 'DogtagCertsConfigCheck' fails, displaying the error message 'Malformed directive: ca.signing.certnickname=caSigningCert cert-pki-ca' - Resolves: RHEL-21804 ipa client 4.10.2 - Failed to obtain host TGT - Resolves: RHEL-21809 CA less servers are failing to be added in topology segment for domain suffix - Resolves: RHEL-21810 ipa-client-install --automount-location does not work - Resolves: RHEL-21811 Handle change in behavior of pki-server ca-config-show in pki 11.5.0 - Resolves: RHEL-21812 Backport latest test fixes in ipa - Resolves: RHEL-21813 krb5kdc fails to start when pkinit and otp auth type is enabled in ipa - Resolves: RHEL-21815 IPA 389ds plugins need to have better logging and tracing - Resolves: RHEL-21937 Make sure a default NetBIOS name is set if not passed in by ADTrust instance constructor- Resolves: RHEL-16985 Handle samba 4.19 changes in samba.security.dom_sid()- Resolves: RHEL-14428 healthcheck reports nsslapd-accesslog-logbuffering is set to 'off'- Resolves: RHEL-14292 Backport latest test fixes in python3-ipatests - Resolves: RHEL-15443 Server install: failure to install with externally signed CA because of timezone issue - Resolves: RHEL-15444 Minimum length parameter in pwpolicy cannot be removed with empty string - Resolves: RHEL-14842 Upstream xmlrpc tests are failing in RHEL9.4- Resolves: RHEL-11652 Rebase ipa to latest 4.11.x version for RHEL 9.4- Resolves: rhbz#2231847 RHEL 8.8 & 9.2 fails to create AD trust with STIG applied - Resolves: rhbz#2232056 Include latest test fixes in python3-ipatests- Resolves: rhbz#2229712 Delete operation protection for admin user - Resolves: rhbz#2227831 Interrupt request processing in ipadb_fill_info3() if connection to 389ds is lost - Resolves: rhbz#2227784 libipa_otp_lasttoken plugin memory leak - Resolves: rhbz#2224570 Improved error messages are needed when attempting to add a non-existing idp to a user - Resolves: rhbz#2230251 Backport latest test fixes to python3-ipatests- Resolves: rhbz#2192969 Better handling of the command line and web UI cert search and/or list features - Resolves: rhbz#2214933 Uninstalling of the IPA server is encountering a failure during the unconfiguration of the CA (Unconfiguring CA) - Resolves: rhbz#2216114 After updating the RHEL from 8.7 to 8.8, IPA services fails to start - Resolves: rhbz#2216549 Upgrade to 4.9.10-6.0.1 fails: attributes are managed by topology plugin - Resolves: rhbz#2216611 Backport latest test fixes in python3-ipatests - Resolves: rhbz#2216872 User authentication failing on OTP validation using multiple tokens, succeeds with password only- Resolves: rhbz#2196426 [Rebase] Rebase ipa to latest 4.10.x release for RHEL 9.3 - Resolves: rhbz#2192969 Better handling of the command line and web UI cert search and/or list features - Resolves: rhbz#2192625 Better catch of the IPA web UI event "IPA Error 4301:CertificateOperationError", and IPA httpd error CertificateOperationError - Resolves: rhbz#2188567 IPA client Kerberos configuration incompatible with java - Resolves: rhbz#2182683 Tolerate absence of PAC ticket signature depending of domain and servers capabilities [rhel-9] - Resolves: rhbz#2180914 Sequence processing failures for group_add using server context - Resolves: rhbz#2165880 Add RBCD support to IPA - Resolves: rhbz#2160399 get_ranges - [file ipa_sidgen_common.c, line 276]: Failed to convert LDAP entry to range struct- Resolves: rhbz#2169632 Backport latest test fixes in python3-ipatests- Resolves: rhbz#2162656 Passwordless (GSSAPI) SSH not working for subdomain - Resolves: rhbz#2166326 Removing the last DNS type for ipa-ca does not work - Resolves: rhbz#2167473 RFE - Add a warning note about possible performance impact of the Auto Member rebuild task - Resolves: rhbz#2168244 requestsearchtimelimit=0 doesn't seems to be work with ipa-acme-manage pruning command- Resolves: rhbz#2161284 'ERROR Could not remove /tmp/tmpbkw6hawo.ipabkp' can be seen prior to 'ipa-client-install' command was successful - Resolves: rhbz#2164403 ipa-trust-add with --range-type=ipa-ad-trust-posix fails while creating an ID range - Resolves: rhbz#2162677 RFE: Implement support for PKI certificate and request pruning - Resolves: rhbz#2167312 - Backport latest test fixes in python3-ipatests- Rebuild against krb5 1.20.1 ABI - Resolves: rhbz#2155425- Resolves: rhbz#2148887 MemberManager with groups fails - Resolves: rhbz#2150335 idm:client is missing dependency on krb5-pkinit- Resolves: rhbz#2141315 [Rebase] Rebase ipa to latest 4.10.x release for RHEL 9.2 - Resolves: rhbz#2094673 ipa-client-install should just use system wide CA store and do not specify TLS_CACERT in ldap.conf - Resolves: rhbz#2117167 After leapp upgrade on ipa-client ipa-server package installation failed. (`REQ_FULL_WITH_MEMBERS` returns object from wrong domain) - Resolves: rhbz#2127833 Password Policy Grace login limit allows invalid maximum value - Resolves: rhbz#2143224 [RFE] add certificate support to ipa-client instead of one time password - Resolves: rhbz#2144736 vault interoperability with older RHEL systems is broken - Resolves: rhbz#2148258 ipa-client-install does not maintain server affinity during installation - Resolves: rhbz#2148379 Add warning for empty targetattr when creating ACI with RBAC - Resolves: rhbz#2148380 OTP token sync always returns OK even with random numbers - Resolves: rhbz#2148381 Deprecated feature idnssoaserial in IdM appears when creating reverse dns zones - Resolves: rhbz#2148382 Introduction of URI records for kerberos breaks location functionality- Resolves: rhbz#2124547 Attempt to log in as "root" user with admin's password in Web UI does not properly fail - Resolves: rhbz#2137555 Attempt to log in as "root" user with admin's password in Web UI does not properly fail [rhel-9.1.0.z]/bin/sh/bin/sh4.12.2-1.el9ipa-nfast.pp.bz2ipa-nfast/usr/share/selinux/packages/targeted//var/lib/selinux/targeted/active/modules/200/-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m32 -march=i686 -mtune=generic -msse2 -mfpmath=sse -mstackrealign -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protectioncpiozstd19i686-redhat-linux-gnuutf-8ce2a89d999cbcea74d3a26559eb652ca66762eaf288f172f866d5666dd9ff68afa56785080386653b730b60b8ab819992a5a4be889972b1c6c8ca9b60923ff73?��� (�/�h=3�S071081a4016727c87228337./usr/share/selinux/packages/targeted/ipa-nfast.pp.bz2BZh91AY&SYU�j�����7_��d�ݏ��8=��炁ψ>� =������xf����� �6�����S4�=M�L��OHz�I���M!O���h������UP�a����@h��dh4 @b@hh�h� �2�H!�! 4d�Fji����%&��@$R��SF���ѣ@�2z@hhѣA���F@h��@�z�� = h��=L��2d� 4�A��A� ���� "h���2 �1hdi� �#@���d ����*�z�s�}���P�(b�� ll�OV��G/GW�&!�_R<�?FdQ����>)�Q�0�|�����j�3��V`*�УsJ�'��� �p�l�N�1��sY���{����XN/��q��;��r���hq8�����O�x�����������|����X��w�`?_���1�����d{���{���'�o#/AC���tTy�Τ���H�O���1��IS���i��M^�W���� ��ʳg����v��f�u]_����owӻ����=��=��ǟ���9��j7EG�M4:-F���KUSU���55z��^�[���6;*͝f�k����7;����݅����������ET��� ��g�� �w�!@Hu �o����������6Ɠ�S��놶�����GV�@��PY&�Y�q!(A A_e��D6$!��(�.��|�Y�{�fi���"���A�'��+�86��@�[��O���� ����k��P ��� s��W$�ֿ��A$=ۉ��f�4��N$�@�]P�I�$� �۾W4��h� =�Q��f�����t4g�3����Q[B�X��E0,'ɾ�I�Y�����æ���,�ɍ �f1�p5.� �$K@�([T@Y��* %�E���f�ʪ��c����L~Lۗ-�ZX��U[�u8|��:`��|��5F�M��i��m5QE_$��(��6�Oj� }���zZ��6�RJ(����kZֶ��� ��`�~'����|�}��xWN�֓H��",!� �J��6�lCb؉�؈�g|1�N��i�@�Vq �o )��x�-��i��O��/~N�3�|`��Js\@A����8�k��� �5�k�P�P�����8�8w�R����i .͖� q�۸���-|Q�0�&;�M�1����?����g�rt����cQsύ˵�C���v�4�'��=�� (21�z� � v`%z@�;�Y�8�w��  �κ�<@�Qx]k�$��p�^�9��l�~�������P~\��喳۵)�J����r<��y��='�����ց̡ϕ���#dž!�P� C�)"�݀�P9��9 ��З��V� �K�� ƈ�BI$��$��HH�!$�p�o2fD[@BAf$$6�!$�HłH@�I���K�X$�`K!)@�o��vϧ^�Ǐ���������U��v]]�ݰۦd��W��N������'�l�f�Ͳ��>��B���֖�,�� L���y���23�Q�oF� Tni\�����BHC�� P�W�*@�O��E?DLT\[�V�>����ľcfla�����9v��sV�98Sl[Ǐ$�IC0Ǎ5�~����W<�y�O�u��c &meq]N��Wm=�I�0{ǏpӚ���/27�<��誦%]� AH�̶�{J�@\�mYvH6�g�&f�dь%UX�U[�ʼnms,@;�L����������I0H�c�M���3��6�m�`�6D��CI9�m�\w���N�6F�ۻ�����{oDݥ���S7i4�2�m$��.����� �� ���KNէ�Ч�D��(��Վ�V �����bc��Kv"�0AR��u5&�_š�p(J�K�п�xmjąɍ�)A���M�g �.8� a@8�OFc$�D�L��7Y^��?��]x�̭G��2�`�(!� �6�Ch| �0,R�w��3h��HF&q9�Z֗J�Y5SK��P�E��X(hm m��iqfZ�-G%� ���S��q�y� '�Lx�8!�.ZU�V�Z�T�+p ���,�P�@0EmP�UC�l`��XCBm��lM�d6���7��c��. ڮ!�P�E���aH0���Df���C�2!�&�,�SC����2Gq7���6���x Q�E����J5����g���xؘ�'<��������! VPc�O�G�@����E�B7�aH[�a��Jxe4(��]α�4�a� ��.|���с����ax8�^@�c� Ѝ @'L��!�#�!��I�%��B $��,ICJIH0!�]P8i�"X���AV��`Zw�P5GGd���p�D#���F�\F ��/�{�������є�u���-4��oƶi�1���4�����}���ޘ�5K\�=� q�r�8f*�^��PWW�{h��k8�G/����y�'Ȥr�"�.k�Woכ���K��ס��`���6�oa�9� ���G#z�X 6�`q��m&6�`q�Y��)�����*x0'( %��r����{����:y�=���M�gt�������T$�� H��F��]�'|�[�vVe�\��8���{�\w��p�Y�ͨV �5�ͺsU9]����iOm"U�PEr8���Iﺏ��^��=z���%ް�{�F�#'�:w��m��{؍CU���N��������%]�_zu%޶w��F��ӭ���w���{ӽ:�}a��q���j+��ޝI���T�}�ޕM�w��F�}m�����}�u�=��v=b��ב 9W��{Y9��+��.�;yJ���]�wɒ�9�I�q�;��G�,����ȩ��^�Wx�%=��!�G��K�qY�\��� ��ʑ� ��r]bdz��:װ����׷�z�w��j;��W{���>���F��F�;޾���A;��5�h;����{��[V�Q��0m��"5>��w�]�z6���E��m ���U�!�����䧀����{�{��n}�z�緷������m��O�W-�1UT�yUV���'|�)��.jjI��f�D���<\ڏ|��%��rܻ�m �q�֥���Ž�܎%��(��a��ڒ���s�o;V#���a��m���m0�j66��!���m�CI�kQ�`�$L5��mH6�D�E��[`�#Q��i��b��9�4�&sF�׶���I�x�B�fdN�-�2x�j}��嘌�l\�>�����e^�{;��I"ģ�|�i�}ɫ]�q�p�ya�Ts�eqV�;�n:�|&G-V�{uJ��VQ|X��1����O �<�j9��L7�X���i j5i��o0�mb����m 5�KKq!�5��� 9Ć��j8��L��[�f'�0Q�={o�l��/P�3"ws\mU'w��^�-;��ʪ���W���Y@���TW;��Idx��&��ٜ�ΰ*���Kߕ���w�qO�뵙=���Z��!U(���T�%b�:�]K�Et^��^<�C��N;�\ʙ�ki����e�j5I��U��P]�ݠp���Ɛ�cJ�`K1fY�l1��6��R�VY�ʪx0�,@�h�q����g�\��iM6 �i��������£'(BS ��ݿ��(�T��)-���M�1 ��r�1-Ir����!������"�"�k�.T�"�K�������]yk^u��r�*!C�����SF�)"Z��q-ZD�� �0��p�BH�����lV%�NDK��ior��P�������P@J@l4M�D6�L� � ��j'�ňD�!C"!DF 0/���U��>D�����2@��[ ��Q�M�a{܇03-A��I� 9x0)` �e���Q�Z�q�?��K�߶���<�ϴۖ{ܙ��}���u�Î�랗�>ԩ��N��n�u�c�\t�������\���1����+�y��Ǯ�2�_�]ě�nMƥ�c�бL��ר�&��c��`��D��� B w��q`��  .r^M��+�ߕ\����6�ƌqي�$ֱZԞ&9<�� �Q���X޵HA"fhc2}`�R�̽�u^ԮT@�P. E �Q�~��ݍ���B X����M��Ci@��q�z�FUA�eqDA�5�9Kh4jg��1��/o��l\Z��.��3A��&g�����jЄy @כ�c�dig�`P`C ���F.�BSU [P�' spTz� ��,B�kH��ka=�d2�����1(s-����e���,l��ln3q�,S�#�x�s`<�ho|9�Z�T<�0�g�&K�h*�`ʔ��:1 ,�HӒ:%>0%�G�������:�� �������@�B�0�֐�b�&�4���6oR�#@�(�n$�̡�mA d�'9J�3�ޭA|�"��I!W}� ��c��d�-�6�K&UU"A /4�W����79llmn�9�H�tϘ���?Mb�W!��7q��@��lX òX40cI䘀,arVeǐ�T{��{�i��D�68Z�6*]�m�H��М+�M@6��qKȢW��b�������_A��`z�\Y���\�C�/'�KyP���IugF�X�M�1Д�( ��=�iB����#2�"n�E �� ���K�x�1�����l��$�a��*���_շ���!>��N� ��T�Lr�]�Ek������I�����k&F8��ƆR��EO`�@ d@"�cW�:?���:�����s0 �$�D��}���� ��|6"�2H\�p!G�|�kfb�����€0� �}�֤� ���II�Q� �D���lQ�W�P�_��͞*��K�p2��2����،�7��F+H��L,p.J ���o� �3B�I�d�cd���<,<��#y΋{J�[��? �Z<�ɐMP�L80h-�M6��S!��Z*|����z"<=���3n� 0�� V�6� #��.�n;@c�=f���X;�a�xJ `6Ȁ���q ÈbD )��+P�B y��Rx��q0^� �@����3�d����XhZR�["�| %Jlp0!��A&d���;h�� L> �{-s�B&$�2 pfC�t��(�n�mT��i�t�I ����N���5c�]�8�GQ0���p�}8w��.� Q@ L�f�kSH���1 ��N ߭1��3ݗ��]@�4� �ke��0��8K�ZohEօ�����e�2�;�N�[+=�/Jι��x�DdE2IU�蒙����f��#B�87�PgF!�L%��)U��ꚺ�(1�F�)�P�T]����������  BM46�R�`�;RI .AuU���ֶ)����DZ;Z@�m�ۈy�SK�ǐ��!*�� �`��J� ����d��K�2q�ۼ�-Sx�CTpd1LJ؁�18"�����A u�N����\5 (0w��`�BM�N�T����Td���$��=2?��:�,l�����DO��$з�1���rD)p;���n��A��bP�B?Y�_y�[���$������F���:-9 J��Z3^���"I8���?X�be� �561�NƬ>�c8<Ơp���7R��:R�|.a������z$�wF)nm�2�B���׊@ �Ԓ�� @���� �^��M��q�;��m{�o^�wf�!�!y�wf�wc�kV!��"z��L���q-�]Ğlo.y�c�e�rHAH��&&t6 �|]�x�A�� ��4�(�!�4mc��-���B֒�b@0L��$`�($�v�Q��Z�e(� l���ﭵ�&� �d $�LV�����Sę@��`�0J� �kqe��e�ľ�n�nm��6���c� *���V0(c��Z��Kz#/��� �%��B�����QUHFYڅ���cC'W�R��F���)B�~+�U2�C8 ц̫%�6nS��jn�&gl�3X/��6(L� #C�[����lF,q��$n �HD�D#|��ŚH�"�_ 3�{�m� �!U����뼓R�腳c�&�bP� �B雐P<�S2�8�X%Si���tlA�J-X0�$��2�r�J*u� )�)��1�\�A H� �e�n�3>6l���,Ơ�S�O:u� �1�I��$� ��L��&��b�㦘��((�HH�!��G ����� M�� lM�c!�� ��� �Q&�N�a�jAdXG����W ��`��m�L�7海�A�Dp.��������x��B�BA�u��ba��4���@�q�RJ-!���BA��.Y�,T��T#�p#��,�F��X��3cS)�;��-SS8�}۸�� �FHF�7����]�8����*z@� �3P0;��x��b�gf��k����^��4��e`}M��5(w�� I֨R9a� (j�6spU�!��$[��5�$�•��� �H�����K�t��u��Wa}�Ł��Ѕ̄����6��I�H��m�TLcYD�Q(J 0q��DQ4�1cК����H�  � S�bTRAILER!!!y(@��6c� d�P$1+����4J9�'� �o�(�dLd�6#0�΀fa@t�[n��pP�Ҽ�EHّ��}ƚ]~��]P�`�a)��;J���C����T4�p�-�hN��O�����p���Ez�V$ؖ��� 5=1.9$�ԃzE:?�H��V�'� {ڣ���"]�$���*��#�S 17 8�����3��h&��Z������Y�ʅ���u���{�9��0}�ip s�$؁i2w9!@LB�������s����;�[P��B{��ƺa7��� ร�