container-selinux-2:2.55-1.el7$>H_ W25¢m>?'?'td  $ L ")?       4 \ |   ( 8 09 0:0>#@#B#G#H$I$<X$DY$PZ$x[$\$]$^%b%d&e&f&l&t&u&v'w'0x'P'pCcontainer-selinux2.551.el7SELinux policies for container runtimesSELinux policy modules for use with container runtimes.Zx86-01.bsys.centos.orgoCentOSGPLv2CentOS BuildSystem Unspecifiedhttps://github.com/projectatomic/container-selinuxlinuxnoarch# Install all modules in a single transaction if [ $1 -eq 1 ]; then /usr/sbin/setsebool -P -N virt_use_nfs=1 virt_sandbox_use_all_caps=1 fi export MODULES=""; for x in container; do MODULES+=/usr/share/selinux/packages/$x.pp.bz2; MODULES+=" "; done; /usr/sbin/semodule -n -s targeted -r container 2> /dev/null /usr/sbin/semodule -n -s targeted -d docker 2> /dev/null /usr/sbin/semodule -n -s targeted -d gear 2> /dev/null /usr/sbin/semodule -n -X 200 -s targeted -i $MODULES > /dev/null if /usr/sbin/selinuxenabled ; then /usr/sbin/load_policy /usr/sbin/restorecon -R /usr/bin/docker* /var/run/containerd.sock /var/run/docker.sock /var/run/docker.pid /etc/docker /var/log/docker /var/log/lxc /var/lock/lxc /usr/lib/systemd/system/docker.service /usr/lib/systemd/system/docker-containerd.service /usr/lib/systemd/system/docker-latest.service /usr/lib/systemd/system/docker-latest-containerd.service /etc/docker /usr/libexec/docker* &> /dev/null || : if [ $1 -eq 1 ]; then restorecon -R /var/lib/docker &> /dev/null || : fi fiif [ $1 -eq 0 ]; then /usr/sbin/semodule -n -r container docker &> /dev/null || : if /usr/sbin/selinuxenabled ; then /usr/sbin/load_policy /usr/sbin/restorecon -R /usr/bin/docker* /var/run/containerd.sock /var/run/docker.sock /var/run/docker.pid /etc/docker /var/log/docker /var/log/lxc /var/lock/lxc /usr/lib/systemd/system/docker.service /usr/lib/systemd/system/docker-containerd.service /usr/lib/systemd/system/docker-latest.service /usr/lib/systemd/system/docker-latest-containerd.service /etc/docker /usr/libexec/docker* &> /dev/null || : fi fi #define license tag if not already defined&>PlA큤AAA큤A큤ZZ=ZZZZ=ZZ093be781f9916163b4f01d3f7edd672d735d3d8347b5aa643cfa3c58057c6d5d97d35871d6dcbbeddc0e5d72140fac6e392d5576c1c630518591023309742ba43e407b3cfd77fbb58ce25a41839c9d399027ce6dd3298e8ae81b054c734011d7rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootcontainer-selinux-2.55-1.el7.src.rpmcontainer-selinuxdocker-engine-selinuxdocker-selinux       /bin/sh/bin/shlibselinux-utilspolicycoreutilspolicycoreutils-pythonrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)selinux-policyselinux-policy-baseselinux-policy-targetedrpmlib(PayloadIsXz)2.5-113.0.4-14.6.0-14.0-13.13.1-1833.13.1-1833.13.1-1835.2-14.11.3ZZ%Z%Z@Z - 2.55-1Dan Walsh - 2.52-1Dan Walsh - 2.51-1Dan Walsh - 2.50-1Dan Walsh - 2.49-1Dan Walsh - 2.48-1Dan Walsh - 2.41-1Dan Walsh - 2.40-1Dan Walsh - 2.39-1Dan Walsh - 2.38-1Dan Walsh - 2.37-1Dan Walsh - 2.36-1Dan Walsh - 2.35-1Dan Walsh - 2.34-1Dan Walsh - 2.33-1Dan Walsh - 2.32-1Dan Walsh - 2.31-1Dan Walsh - 2.29-1Dan Walsh - 2.28-1Dan Walsh - 2.27-1Dan Walsh - 2.24-1Dan Walsh - 2.23-1Dan Walsh - 2.22-1Troy Dawson - 2.21-3Fedora Release Engineering - 2:2.21-2Dan Walsh - 2.21-1Dan Walsh - 2.20-2Dan Walsh - 2.20-1Lokesh Mandvekar - 2:2.19-2.1Dan Walsh - 2:2.19-1Lokesh Mandvekar - 2:2.15-1.1Dan Walsh - 2:2.10-2.1Dan Walsh - 2:2.10-1Lokesh Mandvekar - 2:2.9-4Lokesh Mandvekar - 2:2.9-3Lokesh Mandvekar - 2:2.9-2Lokesh Mandvekar - 2:2.8-2Lokesh Mandvekar - 2:2.7-1Lokesh Mandvekar - 2:2.4-2Dan Walsh - 2:2.4-1Dan Walsh - 2:2.3-1Lokesh Mandvekar - 2:2.2-4Jonathan Lebon - 2:2.2-3Lokesh Mandvekar - 2:2.2-2Lokesh Mandvekar - 2:2.2-1Lokesh Mandvekar - 2:2.0-2Lokesh Mandvekar - 2:2.0-1Lokesh Mandvekar - 2:1.12.4-29Allow iptables to read container state Dontaudit attempts from containers to write to /proc/self Allow spc_t to change attributes on container_runtime_t fifo files- Add better support for writing custom selinux policy for customer container domains.- Allow shell_exec_t as a container_runtime_t entrypoint- Allow bin_t as a container_runtime_t entrypoint- Add support for MLS running container runtimes - Add missing allow rules for running systemd in a container- Update policy to match master branch - Remove typebounds and replace with nnp_transition and nosuid_transition calls- Add support to nnp_transition for container domains - Eliminates need for typebounds.- Allow container_runtime_t to use user ttys - Fixes bounds check for container_t- Allow container runtimes to use interited terminals. This helps satisfy the bounds check of container_t versus container_runtime_t.- Allow container runtimes to mmap container_file_t devices - Add labeling for rhel push plugin- Allow containers to use inherited ttys - Allow ostree to handle labels under /var/lib/containers/ostree- Allow containers to relabelto/from all file types to container_file_t- Allow container to map chr_files labeled container_file_t- Dontaudit container processes getattr on kernel file systems- Allow containers to read /etc/resolv.conf and /etc/hosts if volume - mounted into container.- Make sure users creating content in /var/lib with right labels- Allow the container runtime to dbus chat with dnsmasq - add dontaudit rules for container trying to write to /proc- Add support for lxcd - Add support for labeling of tmpfs storage created within a container.- Allow a container to umount a container_file_t filesystem- Allow container runtimes to work with the netfilter sockets - Allow container_file_t to be an entrypoint for VM's - Allow spc_t domains to transition to svirt_t- Make sure container_runtime_t has all access of container_t- Allow container runtimes to create sockets in tmp dirs- Add additonal support for crio labeling.- Fixup spec file conditionals- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- Allow containers to execmod on container_share_t files.- Relabel runc and crio executables- Allow container processes to getsession- update release tag to isolate from 7.3- Fix mcs transition problem on stdin/stdout/stderr - Add labels for CRI-O - Allow containers to use tunnel sockets- Resolves: #1451289 - rebase to v2.15 - built @origin/RHEL-1.12 commit 583ca40- Make sure we have a late enough version of policycoreutils- Update to the latest container-selinux patch from upstream - Label files under /usr/libexec/lxc as container_runtime_exec_t - Give container_t access to XFRM sockets - Allow spc_t to dbus chat with init system - Allow containers to read cgroup configuration mounted into a container- Resolves: #1425574 - built commit 79a6d70- Resolves: #1420591 - built @origin/RHEL-1.12 commit 8f876c4- built @origin/RHEL-1.12 commit 33cb78b-- built origin/RHEL-1.12 commit 21dd37b- correct version-release in changelog entries- Add typebounds statement for container_t from container_runtime_t - We should only label runc not runc*- Fix labeling on /usr/bin/runc.* - Add sandbox_net_domain access to container.te - Remove containers ability to look at /etc content- use upstream's RHEL-1.12 branch, commit 56c32da for CentOS 7- properly disable docker module in %post- depend on selinux-policy-targeted - relabel docker-latest* files as well- bump to v2.2 - additional labeling for ocid- install policy at level 200 - From: Dan Walsh - Resolves: #1406517 - bump to v2.0 (first upload to Fedora as a standalone package) - include projectatomic/RHEL-1.12 branch commit for building on centos/rhel- new package (separated from docker)/bin/sh/bin/shcontainer-selinuxdocker-selinux2:2.55-1.el72:2.55-1.el72:2.55-1.el7 2:1.12.5-142:1.12.4-28container-selinux-2.55README.mddevelincludeservicescontainer.ifpackagescontainer.pp.bz2/usr/share/doc//usr/share/doc/container-selinux-2.55//usr/share/selinux//usr/share/selinux/devel//usr/share/selinux/devel/include//usr/share/selinux/devel/include/services//usr/share/selinux/packages/-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -m32 -march=x86-64 -mtune=generic -mfpmath=sse -fasynchronous-unwind-tablesdrpmxz2noarch-redhat-linux-gnudirectoryASCII text?7zXZ !#,XSk]"k%xĉNμ5#+mz qs'Rt`% _qtxmDǹ|>G#1u4?s~[-􃌛gL͜Ubb}D( "(e> !%AH?L\.3l|gؖR`0aҢCZ{0Yo . ?ySC06_hM![W3*J(!XTYwjW'x.C.nnNٲ$F6/j [:_PՆ?oQTMDJ^/p0aJ_*uUq{\Eʚܭ'KʢйA8+lAzw7 է%l&Tߡ15\|EAQ7%!b3';#cM 5zeSȔ~ܭPAWMnG  ӆy4YnR$JQh 0<*&`t"Gt)lNN=ˇ,Wo=ie/ںԍ1fCq h<~}!*5FT#Hm=MDrrʟ$m SGsyǘR'EYA`2^p؟&X ߵa (JEvT:i ,MG/"' , /4xHIio :dT#NÚ w/8z4cphE&*y&F^J]FM6@A' 9^KvOPzv:1-Mؖʱ4.5nTŊ:ITtYվM]n/Rt[qF޽[9GeOssv&Oc˅-e9FKX_ N6He0>؋b5_{aAOi.B ʮT|&e'= nk2iTƋym=gѰ8xFMHBDuaT|[+j>#R_Pd;T[&6+2X]~jCXQ勔 L#~:Ohbܼ851t-3МLC)',SV=L'T9LI QcV,3zDs`^sz^S+\d"G80trn7e 3|-sE.~g\`0Ge{zZa +ie1a=稔JbΡfL_ eD-y>iSo G'NDU|`U<*}*zȃd֕ZC(r)}8bID0 y≄7)4"2FC0p pZm[8~%#,kުiZRCo؀2;KpXkیPIpir8=U2 !N{2:(ds3 QCWt$civr ^guO{57kK9e>4E~ M 0]@ 68PA d *V;h:ӇzWfBg/ỳ| CwnnߒU}g *<򭊂MmIwtYvm C΅44E11 Ӥ}%izp^pz/i/ ?27 bhXI%Xr3mdwp^[m~kzh۶m'E=PBrrFb~8 ~#C2B` 0O`+LK4)}7C?"w s(E;d#~ i&:]ޛ9u iL<2j*Fj=O߀yƟXLT:qql3 n-5+gR+#4 -(7I\CFh7t͈!IKxk j9#>!v? Zwe"~1u` i??!v={*.IM1~ 4G.x1ӝtTW #מx'߄E;%,.*`q/n#V:ܪK>?F)0N\!DH>]!KeC<YŨ qH3V|uoEsgls=RJQprMHvP;]3k%۴uWnDe\³y&?b,G4.X ȣS-ת˖d ?4f?]%d9a\C8uʕ ]'o)%utsV'UZWs#APgO}8-$,G _ ,CѫBV0*c’VzJ$6lx&$xGVM Uݚ'L,I-}d3fRX<&3iZa0_e?06)Hɾӈ '':96͉z\7s8'3F 3 b\GsaBLs -$.=G`j Ǿ}鑔O9Eq?ia\.L`>مɁ-,6=hz\6|)YyYHopf%N~9~&5 2YѺT{E.$+{_g"(PL8 Y{dG=4?2hcu?=Ct.(.: >Mjq88P#lۺ`UTْ7h` __0~?7N@1QZ'啑`GЪbhB"  E :ЏT֐Ԝ܅>ؿEsJԬm@< Qqg}H'Kl%2ڕ w<_zS )@pD3DKrʽZF:; Ю@ #y 2i_?Bn;V`l7pL)l9SP,J׃ϷDRɭ%$5Z%e>{2 :IEQ7!ay "n]ݳuO] l_MPlu *%Y2?m?A`X],taBl{,B)5Rzb`ik]]&Y SBN .dH7 L>_rA8#e,:<$'c+ORa3/ًNyO3ޱaZat rcݙ)UXWڰK4M(Ν$?g֍ai!=i'4&J'uti5$=FȊ%<ʝB"=[gw*[(4k<Ӕ{֌=+ԻtR?ax^+r=.CMh=b>ţGil+E89t&pji3fKAâl-K W_Ws򫶡R]S y& TTyմ1MjƐ1l=g,k͉.p\<.@ in4oǡGvЧdgvl }lBi`*exyiRk4Y)LJY-BA  L<_&mg:~a (NpdoNI3BYDLyH\ W$֢Z~MJi KNbMp ư>.u. 'o9pR؉S xr`\,[SwCyKY69as+*h, yaP$#Aе2tf{,r 2l;3`.^K-z΄-DIOB+hC"҅c[2H,P `P)ڞ)bkg^PyZ3O0zr qjglvC|݊ogf:K8sXrJb/nKITP)PaCӀ`ٖ^MIѕPg+ \~8rv^ {øf?UVG%ES+mW?IabU.MmA _%툖|Th%K(`<81'Ǐ5DR fG m]K֌|<k%`1#w#ANW*|F3wL~> :Lt6zNopYjEg-2U2&Xۨ762 5+'CF zA u;gNs6cy'wY%P}9uzֳx!0O!k̍|ﳵ]Gz_W0+ |T]g;h{W8ռ+Mx'F[ɭ@եuN!cYЛ)[^ΥA{ALѯ멿VYBHMsmC%n -)È1+^RЃܸ$茗<FxUB Vm쑐zwZPۏ0b$tn\)h$Wx7|/&oLR ਖ਼x߷K]1ζ(A5i% J7VuG{ҏXٖiuNѯAAT}b9eLu۴}c7k E6- u،SL cD'%#dnU|nFTՃyPӺYL"(6f+=~CZ)Ql1W@ZoYk"KjW~d^QgO K'g!\xWT* Hp H[,|S2J6ݾnlv!K6>Qp Զ Lԏ'OZgdp>!c\ CB am@R1r>{Djw1vSteLM0K@PpzL5OV8{S8?mi0obA8}mbN_ij+#\7x߫ & ,X|U'EaRv0Ɣ{Wa AgO: @;  PC6tID4A^פo~AJQycU|E<iQ߁lצA究-V [-Mn6I}gkP`Jҳԛ ^ESMpow Q;  g>BkGJ{`E_]1Ue63V_ވaWI_ Lfb#|D-*k'5qIP'L\j'cz< b[r'6Q`KM懬\@]8m> ̍O\W5&b=cRW[B95PÙYc,4Hٛܳ>)h'oY}y !a$k#\$wN[V? Α~h+_*#\AIO\=e\YZ[(Zƣ-x-~Dxّ;mlqԮUJSO` q-ʀv_!BêkbX=beGKRDŽ[w컅02VK}8创|32l^[`u$1;Bi")SeeP6.dH92Ꮨu!dY)CZǓOx8'\<@@EUv*-ψ+C C%0+P6$# t"Z9Tט"ƇGt_NMӰý^9gs-gKΣxLt Ԗ\$4񃮞' NNI]PQs! XPcypU[hM"HoX;=#püoO8Zoᣎ4;L[gŀCU_Iْ້)t=fuxHKfթHG to0v Kѿ Kqg4cMc@ A*4`^VƝӇ@۬߇=ƼɬF$*xY⣆N 2m/Gv#[e;*9r2}^t6ho^hrk+#?'c DYU\.7OF꘎Van ڏn$ _? Il7O+j൨ uC33b#5ӑ^ZglZq%|-`?ql4-e0#)3p%^L~$*_ 3m &6u/#Dsށr]Ðܔ9U6V?*>]Fi @9pp#xajW]X/VW z[8ۉQ]d@ G\xjEZsѸۄJf0yN\Qq}/dEln5f ޼Vȥp]/ѽ![N6^wkiOl1}HAMydf/M4?aRaEbP\t⌾mC YsDO?㟠L2eG3nfY`31;``KDa m՟qB'޼Jl&Ƙ"q2%  a+U;˱ͅ~lD1z6i[_dU2:9@v5L83g38m!aOJYZ8E$ Uuxɨ^dCh)u3ԩ%lOxNW(0ztW8dISW 䨱l*h;v)Rf\G ڢ5}xݵXD e2jxZ6S9ic(2>~?*qzi9R@^vv=;~{*q,(}(M9.yؗVWު;2Kar84:~ϖyivGiv7Ff٫ס (k[*(5w8&0CkE(:N{so.ҟRIq Ń*njp=IG^gL|v˵NKJcA(<;3vc,#NRIt&Uկ ZQlp#e6$kXthjV׸VTb @ZN*UtIXt"sd< s-wCycU=6nO,1~{0;L(圄Nuw}h[ NǺ%oj2WjHNsm^\-@"ͻ\ˬE-`r]\$7`pP:e9 m_dW+RÝΥ]8R{ΗDUhݶR76d{/=\E=bR%a|0ap:od. њEũʍݲW +8ӧFWz [ś0aЭƝI^T%dƂ}H/4y[K]ۆ)x jF;p=M02 }yR }m|=3>7P0ƃ_!LzT@*xvȳ{<& ̭WaXp & 4f"1h ~qRv%8״2sG^j= dS踖229{Wޓ:E\=DLNk%V!f:g`li4jV沭H0P -+X}cm> j# ZWS6-q|Lkc`u{~#P*T&wN B?<QgaSh1p16j|&[!:"jLt™% #" ϝQ6[2\.qv5B0jmpӼ&G9dYGh aO#)._v\3Wk2Ӷc2OUC}59.o_9Y^v/r;Y&BJM-.]~;`>^?7Cӭ M3T#˖(w/c _ =Ƕ)+bڮcj#:UkS,'F#? -b5R`/PrST9=GҴgUD͢HZo֯O; j8"N"8Fb+QnhuͭU9|HGbu d Q߱0Nl']Gt@>:! m4_a!)uy| 4YB͐ėU};:B@"xEpI)tֲXʊSv-h+_rm Ԗ6S"+~t|2ζ/HOsfPIx۷ S D7wvAH]#eQz7t謾Akݧl'i#2--{Rt}` ֪$*谜ePQ{ 91hc@\߇z~3ǷxJEǛ9:+W. +;zj;ޅ-C jA.3S:'l^EExOjT#UKtiW]b)lr[8e3Tn/^>n D!GWN.Lj|HAe0B}S$eHS) ˞F;TqB" x `jHDzM#N1fAAdw~BrqGfPV`oya?p Ud8TL( ^yd[gL+G` NDwBJcz8L}=)!RZw͚KRY|0z>3L5jT+[,,xMNN=$S.j\k2,y#4:7 6ʶ[d&wǥmu4%~J9IFDֽDS|`7^PDk%gZc6DM7l摃^"޾5*\^۾ulN5ߐp9޴~L]kAͣ,ILl[e-ͽt@RfB~,\HB"%GHc CL ;3$'1$h%,FI$V=frcߏ Mud^Qc[~=iWlDȖՄĎԠ"@ @VTKd#w) "U1p[)>FXq7Hi^qvkM]wȋ5hk̺%lpkJ &Y ~|=ih^/kgɘa+OQڤy-LgǓϏ$+<3z+OMã]}q{+KHfR|t+tB-(GJ]aڟE [+eJ}u*g8&Nb=Y-Xн e=nCgQHrح #v!kVɛ?ފop྘|D0 #8 F*ژ$vA= Zя}hprf-Ӈ/1 ;zj3}==8|Z'Tu_8l/ LQ64&ZqNM!p ( j;y_3H* BNlsf)Y{TI8ձfkn+kqu?;F,iC#\>b$wXuNFwcM"B> )ל!Sb"Fڍ'A4A6␨xW^ϻ2^r 4Ûs f߹*29]-qWвl8_@6#QIbï|dDЪ|,7_pn]N8:0gW! EL驧-"|vۜF@ 7r+YqH\.8H;6 ‘diVe.Eh*FjXOg>I^.e$lSCYUi)IvL?699 ņتU;Z*ֳ'FefX>YܢW Cяpę v˛k2j^+9)us)V5eFMf Q>[\Wξ A@qCFʳzs)fbZc-Jmcۖ(=x q_}Cvjp*yfO)D:S=$Hr rVM{لOcgmDdOcMC/.%@WQnwIt L#~TtZX4Wӻt=@h*ŌSD@;wd,/>e߮Dc:7zu;FKq}mr>MZpQXHIXvhN盆|uPG뛓8>ILQI[$N?8П}bОd/Ynd: Ȃg2ޭc4h\l'ؑijvg..)hm2:|$t"#ۦ%J[Z<+pNͱ:()Ba3˦]hئ%ܶ;Ho"բWzYy8wHSqEq"˼ z0讘)΍rI"p.U *!A? ]*_~-E6L[Q'rr7*=ckTW~y*T8>}LKh_X,bG @sKֽwTX @s/&a,%mqh-&7@.o'PVZ(tzmKR.59D}J:{ORܟ(kV+%=95L:s j9o3RNTVȩ_)E^ⓚ 'qgmҮQ} ZK2v>PalQZ \ѽJRSc6K퀕V~jvz%iscu ȇMR( 'E? vYCkpK88 Gu&.b 4l9w#H}:%C,꫖nk_e|xlpz?OC>P:t#21qD5o}ٶ-xk&%"NDێH}REmz@ACZA#i(JB("rӼsP\5^-\倬07Rڪmt%fcdI{KP@DDakў3 u|o8ڏ\-uAjG`V@#8{ \ѣ+#23Vm%S Pxsx.-Q|o2i^SRcY[ЪOepJW]&gv2Ǭ#-At |ɚbbqSEu@!i'W=Ԝ֒{d'_ =6g7 \RCZh"5DQd8QWGuu@.(s#EA.F(GfЅ\_5c}B9oLM ٫LP/`fac-'i .=v"kPCFFHVTZ/)Og1BϨ$;Y 1MMrC M_o.΂^}9r>;lNBe/J;{=CdTa5U%KOY:(Z) P1V(?~LQ6ָs+Kl<;%+4٨ f1)0wN\["$|-(wzerяU.g hd0u[4ڳ`nb#%ǂMIc7b`E[p`BGՁ`ΒDrVAe=7&C08Y6)UE4NIg%6'W_!d.,Ö&J.Ib% [=0H囧^|?'%(\Cg_:l>3N{kr ^FMo65-eOQW9YҞ͎SW+Iӯ2`̾v/RxHO s| \ TgQFy[qR3C}&QS85<ܛؿKdo>r({]3B1şwғ\6滵R[ ]Ʀ|VVX&5<;܁W+6PwVAy- ]?W+R!`ht\Z\ɒU)!:BA}L8y2:Omћ!Mţ)ty `mp&+L{n{jfI @} dp1D Fa`e+l)ꝰrٓ m.h=3sOѫd%+;Bpex8V[}L`nc35Dۑ_?yLۇf/ؘG;AsH{GqH %v\QLH;Iv,H;ݟ7  ٻz p/"(>nflTFόIA?8ωjC{#l|f)^+B^teڣ9@irHN/bթϧ$ɚF`rgh8xW&2g ىpؖY:&QiV"B](4f>G d?:sk"4i͓)t3-u#zeX@km F,+AR1r%{f8FnvKB9Uεk_G8Ij3I3^n(u > *fOy<)c*b%ɓst M\u`CtxDQ= EI,HE2r?wL-7{?"!SCIDb4H?ݿc~qL?.kmϒ8;:޺2nΌIfl5@e _XTv!3ŐF&ߣ<sJ%dVF,&g;|ptO+ tNt[#A:t2\;P.p-(\}` TК)0 jX;B(/W@[FLB,N}~q 6Mr\/ n2(W8z֦hɿ"aڹx W0{+@(_v1. kD ;t?mv1Eg tphHU<<z  ؇O4rôh˳_ksAhBb1{ |XEcgTV吧gJbͽgWՄya|pİ7m8<|Qfa {M 6BziVe2ŋ._ "@J zq(T]S=xN<٬*o-~ A6t8b8@{Բw}xA$czuCD(VFyU"΢>遢m.,KyM%|?.]Wt]+mX.vcZNɕ.T~u8#}un1,IM 7WmJ"ωegСZJ[]dǑ;v>NRJ]=FEI/W}6bu_A5QV<%i^-k|ȝ|U,r)>lR$|Ww^m' 8NYS;SrX6-/TDmj3KUEaHwaI MʰQ%)I}m`#ӈ,1 p_$T+ 18/zc<4 bڠqC^j餿"3Ⱦ.SRGFLZ%|c#njaK5,*(maСM{zU"I#K-odḧ2Psu&+ 3H&r1y/V.Lp~*~ÎS.脬.;XbfV- !ѤCEE4!n:'o|~ϯu73cأ4dהE7:rEߖg_yϲ7AyZ(h${~ކ`l1 ]`#}+~~n`آHA涕 O&{rŽ"| L0 ܤpp';Dz] Uә~v0\J),uǜjA^vŏRl 4;~eRFnʍJ꬗UT+Sx"/S]Фp}@G0ܢvF{hLh2`RrUjAʪR ϿDx|$w+淲d}WPu2ǐΡӫc@l L/!UGl݁UC0\w k\z)e1Kkxu"K`qƁMFgங)W,ACq)S8< O9O|FVrl HKM0olc?6h1SSun.{pE Ks / y ꏪg-E`Y+S aݼYSk[e X+1ON8_wOdŁNxl| C˓$_NkpfWFV!HazTR}N,_ϸ1}8'%{)Jj efh+l(/EGȲ}ͲbTH,kԴkcR'ǏA'%<[]Gd^q} MRv7{<<7 aNQ{G6*`5>y!%Kf:[}ߚelF&|dbP|{BPNocb@,fw8d_//ᄺmY`{}sG$'T)RPrK7Iz~h(iǤ$UB;MN+W_-$K_z5_X#fSk1 a~Hu;dP*U ܤ~f޹](\RcA@"(wĕr>ۖx$^zLo< Zgpu -Rmg iDm᳈؎V9+:].{ r15 Jy՝j@iƢ|G%z|H h_=60Qoh q,`=?oZdߋԶsV.õ6Jw9/py23ΎKaGe۞Lb`U63fYV$?΋gaXθ䂡 S 75܈%gǜݐcch>}rn<2D|b]6:}B8a ?C·.yW7".a!,F`SEq*LԆ,h1X*2P$Qnj}6KRK: $^V1z0! Ocu-ڢ%lxj`\q$ֶ'Vʠf Y 3SR[vrU`*N0G1lñRxyL9jHcl-mUabs㥷1B.dﵿ7ŞzWͰf.ozJ0FR`](11?q F.M6Luڜ/DMUHsn;S D{pD%R$˶?vLTB*D$:Ls @;*Ig77z_ޒ_YItB4O8oFg1ՙvCG,_{N o k k"t$<tz;fъ忏 WD3$;JiiGcXQBP9pN m>̾cDWޓ\ M;g&"{;S:  RRnOIp%).?q"[ѵC(rGs~ՔoȘl6!"c4*W 铢<ۃeΣH`b퀷`OI,MX- {aׄ]8 b ]b8Yaی^CdE n3v潈Z"xlIxiks :2GA N#m/H!D'*'U*-Ϙ)yWi<MRF<]fJv HzOQa@>#  YZ