container-selinux-2:2.42-1.gitad8f0f7.el7$>u{Z&偰b>?!?!d, 0 X (.5W       0 X      ( ;8 D&9 &:-&>P@XB`GHIXYZ [(\@]`^b d!%e!*f!-l!/t!Hu!hv!w!x!!Ccontainer-selinux2.421.gitad8f0f7.el7SELinux policies for container runtimesSELinux policy modules for use with container runtimes.Z_x86-01.bsys.centos.org\CentOSGPLv2CentOS BuildSystem Unspecifiedhttps://github.com/projectatomic/container-selinuxlinuxnoarch# Install all modules in a single transaction if [ $1 -eq 1 ]; then /usr/sbin/setsebool -P -N virt_use_nfs=1 virt_sandbox_use_all_caps=1 fi export MODULES=""; for x in container; do MODULES+=/usr/share/selinux/packages/$x.pp.bz2; MODULES+=" "; done; /usr/sbin/semodule -n -s targeted -r container 2> /dev/null /usr/sbin/semodule -n -s targeted -d docker 2> /dev/null /usr/sbin/semodule -n -s targeted -d gear 2> /dev/null /usr/sbin/semodule -n -X 200 -s targeted -i $MODULES > /dev/null if /usr/sbin/selinuxenabled ; then /usr/sbin/load_policy /usr/sbin/restorecon -R /usr/bin/docker* /var/run/containerd.sock /var/run/docker.sock /var/run/docker.pid /etc/docker /var/log/docker /var/log/lxc /var/lock/lxc /usr/lib/systemd/system/docker.service /usr/lib/systemd/system/docker-containerd.service /usr/lib/systemd/system/docker-latest.service /usr/lib/systemd/system/docker-latest-containerd.service /etc/docker /usr/libexec/docker* /etc/docker &> /dev/null || : if [ $1 -eq 1 ]; then restorecon -R /var/lib/docker &> /dev/null || : fi fiif [ $1 -eq 0 ]; then /usr/sbin/semodule -n -r container docker &> /dev/null || : if /usr/sbin/selinuxenabled ; then /usr/sbin/load_policy /usr/sbin/restorecon -R /usr/bin/docker* /var/run/containerd.sock /var/run/docker.sock /var/run/docker.pid /etc/docker /var/log/docker /var/log/lxc /var/lock/lxc /usr/lib/systemd/system/docker.service /usr/lib/systemd/system/docker-containerd.service /usr/lib/systemd/system/docker-latest.service /usr/lib/systemd/system/docker-latest-containerd.service /etc/docker /usr/libexec/docker* /etc/docker &> /dev/null || : fi fi #define license tag if not already defined&;0NA큤AAA큤A큤Z_Z&Z_Z_Z_Z&Z_Z_093be781f9916163b4f01d3f7edd672d735d3d8347b5aa643cfa3c58057c6d5dfc6217a38cd557adbe6ba5b7e219411cf816d86ad270db71fed1fc1d348517d122ca58993af5c40363e65191aa1fc69ac77f39dad1144ab5a13fd562b24748b6rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootcontainer-selinux-2.42-1.gitad8f0f7.el7.src.rpmcontainer-selinuxdocker-engine-selinuxdocker-selinux       /bin/sh/bin/shlibselinux-utilspolicycoreutilspolicycoreutils-pythonrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)selinux-policyselinux-policy-baseselinux-policy-targetedrpmlib(PayloadIsXz)2.5-113.0.4-14.6.0-14.0-13.13.1-393.13.1-393.13.1-395.2-14.11.3ZZ`@ZTZS]@ZP@Z/ZOZZY@Y|YYdYA@YYoIYcl@Y[@YA%@YA%@Y6@X@XO@X+X@XX@XXX@X~@Xv@XtXp@XoXoXoXWDan Walsh - 2.42-1Dan Walsh - 2.41-1Dan Walsh - 2.40-1Dan Walsh - 2.39-1Dan Walsh - 2.38-1Dan Walsh - 2.37-1Dan Walsh - 2.36-1Dan Walsh - 2.33-1Dan Walsh - 2.32-1Dan Walsh - 2.31-1Dan Walsh - 2:2.30-2.git7f2de1aDan Walsh - 2:2.30-1.git7f2de1aDan Walsh - 2:2.28-1.git85ce147Lokesh Mandvekar - 2:2.24-1.gitaeff029Lokesh Mandvekar - 2:2.21-2.gitba103acLokesh Mandvekar - 2:2.21-1Lokesh Mandvekar - 2:2.20-2Frantisek Kluknavsky - 2:2.20-1.1Lokesh Mandvekar - 2:2.19-2.1Dan Walsh - 2:2.19-1Lokesh Mandvekar - 2:2.15-1.1Dan Walsh - 2:2.10-2.1Dan Walsh - 2:2.10-1Lokesh Mandvekar - 2:2.9-4Lokesh Mandvekar - 2:2.9-3Lokesh Mandvekar - 2:2.9-2Lokesh Mandvekar - 2:2.8-2Lokesh Mandvekar - 2:2.7-1Lokesh Mandvekar - 2:2.4-2Dan Walsh - 2:2.4-1Dan Walsh - 2:2.3-1Lokesh Mandvekar - 2:2.2-4Jonathan Lebon - 2:2.2-3Lokesh Mandvekar - 2:2.2-2Lokesh Mandvekar - 2:2.2-1Lokesh Mandvekar - 2:2.0-2Lokesh Mandvekar - 2:2.0-1Lokesh Mandvekar - 2:1.12.4-29- Remove typebounds access rules- Add typebounds calls for container_runtime_t on spc_t and svirt_lxc_net_t- Allow container_runtime_t to use user ttys - Fixes bounds check for container_t- Allow container runtimes to use interited terminals. This helps satisfy the bounds check of container_t versus container_runtime_t.- Allow container runtimes to mmap container_file_t devices - Add labeling for rhel push plugin- Allow containers to use inherited ttys - Allow ostree to handle labels under /var/lib/containers/ostree- Allow containers to relabelto/from all file types to container_file_t - Allow container to map chr_files labeled container_file_t- Allow containers to read /etc/resolv.conf and /etc/hosts if volume - mounted into container.- Make sure users creating content in /var/lib with right labels- Allow the container runtime to dbus chat with dnsmasq - add dontaudit rules for container trying to write to /proc- Relabel /etc/docker directory- bump to v2.30 - Allow containers to create files on tmpfs file systems - Dontaudit containers attempts to write to /proc- bump to v2.28- bump to v2.24- Resolves: #1469792 - built @origin/RHEL-1.12 commit ba103ac- Resolves: #1469661 - bump to v2.21 - built commit 333854a- Resolves: #1463549 - built commit 532fa20- rebase- update release tag to isolate from 7.3- Fix mcs transition problem on stdin/stdout/stderr - Add labels for CRI-O - Allow containers to use tunnel sockets- Resolves: #1451289 - rebase to v2.15 - built @origin/RHEL-1.12 commit 583ca40- Make sure we have a late enough version of policycoreutils- Update to the latest container-selinux patch from upstream - Label files under /usr/libexec/lxc as container_runtime_exec_t - Give container_t access to XFRM sockets - Allow spc_t to dbus chat with init system - Allow containers to read cgroup configuration mounted into a container- Resolves: #1425574 - built commit 79a6d70- Resolves: #1420591 - built @origin/RHEL-1.12 commit 8f876c4- built @origin/RHEL-1.12 commit 33cb78b-- built origin/RHEL-1.12 commit 21dd37b- correct version-release in changelog entries- Add typebounds statement for container_t from container_runtime_t - We should only label runc not runc*- Fix labeling on /usr/bin/runc.* - Add sandbox_net_domain access to container.te - Remove containers ability to look at /etc content- use upstream's RHEL-1.12 branch, commit 56c32da for CentOS 7- properly disable docker module in %post- depend on selinux-policy-targeted - relabel docker-latest* files as well- bump to v2.2 - additional labeling for ocid- install policy at level 200 - From: Dan Walsh - Resolves: #1406517 - bump to v2.0 (first upload to Fedora as a standalone package) - include projectatomic/RHEL-1.12 branch commit for building on centos/rhel- new package (separated from docker)/bin/sh/bin/shcontainer-selinuxdocker-selinux2:2.42-1.gitad8f0f7.el72:2.42-1.gitad8f0f7.el72:2.42-1.gitad8f0f7.el7 2:1.12.5-142:1.12.4-28container-selinux-2.42README.mddevelincludeservicescontainer.ifpackagescontainer.pp.bz2/usr/share/doc//usr/share/doc/container-selinux-2.42//usr/share/selinux//usr/share/selinux/devel//usr/share/selinux/devel/include//usr/share/selinux/devel/include/services//usr/share/selinux/packages/-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -m64 -mtune=genericdrpmxz2noarch-redhat-linux-gnudirectoryASCII text?7zXZ !#,RxO]"k%xĉNμ5#+mz qtQs Os9gGAٷjp2tBjzTC ka%5JItgyx\!"%$4+SkӏQg4Rhi*EP˜p ݏ"mLoΊOj?@TE4izA;;߿6L8qYLXJ˱bHr{^.rPPcԯܔ3\z7m( lT@Tq?S ɷD!u׿Gi q :Y@+3Gv۔?6g/l[N5Q (A0wF]l+_ _ ؖ ^G<0Ǵ$%I38!ډ+kNr\欟 dLtuoTl$Aswdo^I8uv#:=PjڀZt +$IBZ52F cF j炚+FKc_ [ӧRNNz;mpgR$u؃ou.^d s(t(xo4t _:~$/yLodG@֤r{J*;l`@GN;>֤!O%2j9fr@K&٢? #ꓵuU؈FZѶ1$3蠖^멯ʽbUeΌL92r{& MVO>s9:`[) ǿdt`]$$j%0>Z*7 5?d {k%;:ŝ7[)o퉫R-(Me5: ~+\m_.xߘ~h-B`q9{Dmp2,s Ԕ4]~iOlU{H>?4|K̕Q<` aqG謏7;7mFÉ0~mU@LsV%xh[=d.T>F\P{gt[boPdH,OP4;.q`5}~wBGXVvS1,6:% >A!8^ F9y6OCi/v&~1Q[w4 [Stlc'LYF}Icm\i<# tW!gR׷vQZn>I8 ]lrcs7z}\hmXy W]ٟ\a:ANQy K Cbe-BvAROJ);lBO$bAH;JZ)lEEQqFL*S2;qUHMApn,Czk,|XG9egȣ A.uկ4Vx0atI۲= zrXZ_1xR܈6_œ9  l= /BN /vE }eqn2gDZ#_G>ԋ2ToOP+kL%g'_Cs@9Yp(y_xOw4{V8ar=K]4>LJ+U_٭ \kWAyƥ>&MgM$vɱ>ES 6L Vb:NЃc)Bс{rؠX}bmaJ5U D^fS1 :".D7{W#3'h\b `kM'C?_~ǥXNg\+Rg ɒJnY>VqxݾQ=itl_m3 vEv|7CZ4i.7Qf;va]G`ɧM:ݱt*:K~.o,SG-Rh9L/1V%n[qIEΡ{ui,F8v}xnpC$@̹~ Rf(`CHN9L D{1}Srv<7_[Hdd벀DݔaD i-R>:wN۠񃬒#p{1Q.(DF9n!#]C Tc1^sUvKpMF$mN vi,ژ >&` [9ǂ Vtb %Ua2j0TY'+Õl }6h{^[!UϷaȻaM[ ؋ӯsxwkSՙk}l?5p']M#Ϋ$!uYN sDJЭ:MJDt*I ct%m\&f\(?D/lb9\`tҭWh`՜GXu2lMBmyɠ V#g x+49WXSw;hWpoIkb$3{86%Ziڏ%Y~(U,Pz= p.V޽CgѴ2=;{;~m Lr)i@'jI蟢MNJ$?Hx9qdyW\cnu7,#q2Xt~Z\Pݔs~pRw}]gk@Á`3SfOQ:+- ƫ,pbFOf8qOڷRb:Uɋ?uA8pelA /WYDJG 0M^KcI,K2J91~莥Nj^<y`M5Y,C̝ǂY0M^4רݴe_9Ul.wP;S77}ÖY%tC6ɤяsB( 1'aGq IـLi'lap8JKlXk&OĠP"Ԝ{【PIfltH92JdhK|3tI@3 #( KGbd&Q!Kwbf߅e.8-R~sr@^d"ɹ*^ )X; xtg4? R~+Zܶ vb;bDEU wqN̷]s:~A@z1SRУ] '΢̑5Y~{f/ER/>t Pi{d%&}7{Y߳M ˟ʁBj%w9\^<^Jew% cCNxCIpsbVC;pvQr=(&ct&O}Fŋ# ۽qa%K8gֳOh*z."]+7T (ڃ,ęa55q+Ɛ:;Tp&X.ʰGl#Aԙcx=Ug 'EĒkpu>Ss5?boy4>?(ҋLfuT8$ԾrHs]{'q y#\^2~!O Cߟx8|] z*΄-eM' /5h(FzEJRveJNWʫ5ʼnQfe*\+׉} ᙪ7arUTZy֨gpEk[v1i)%A\ >֌@e)6QvjmS{U# SѦQp KO#wXZI6b v:Nӵ"Jy\$VKȞ ;#RKX|}6םP[ПkAܨdSܝZE$$i`j7k*I죻Lಮq:.41NҴ<`cU\?bQg&Tע"XMW1lLX9_IeU-bc-ƛv:ť=ߏLrg,DPRJ%:l@e!ۚ"MyDM44^ FCE fq6uٓ~-ư,yq!YJ%u%vz̴]Uu >'4̮W|/jaiv̘' a[S Ȇ줞h09#wj V)`y]<:m:qZcE#ӝi#I$70TM{s\n pXIwWsY7Q^ҸRSm3gR{cNj\kt 5<FZPO6\;`0؆!`ӂ3iU{jI~](S>3ML~~8m-$F|فٻ2PG2%vB h] [%D' vE9$v'cܻuBOHU+w]fv˦%Y/DbuІdG_ǟ41WK5tt宰 k^Ѧ9VAKQSGPN;CHw%"<ć̤]uS2!0Øo΅5\VgXjtz)Mvs&2k࠿Zma .Oo~ՒrV#Æ':"AS4#)PӆȅY\=}. !œ`x`uneQ`P)>ЙĘ RbQoF8 V QNDh ;ry' ,-bW kag]>DSp!>aF. (MkX1S&lƅQ%@kyugb/o[Av6Wicu9Mrd67EUW_|e0=%dתEZ6L#-QLq>Ōr+)"BдƼBܠ5?%wIW$UwȐ|oN1UBU 饓8o ]o~SmUo*ԑ643uh>iQ{Df XXXoq15 $GbnԹ{kAq(ՏBOo56y3X=7:. PV ʥ' n>;^?( cXٜp MOTlHݢ)7.%urV+OmfU&{ʽoMLK<m@]?p\ &wf' `],v_iؘ̱L=TYzdm壣mrp>nk(QV I +2!7Ī۩VBx!f&U wEpM^:)+sO{ݵjR}g.w[֯\tj@S~܍5)/-' 4iUxK\ِ0Hܸ~z-Nm:pJ˪ .T%vŗPXׅBpA2nwa3^U2sy/z)i;(,a(YU(b!qM2eLH@PgW{ >;SGco+injvnlq?<@n)噦DՍL8]%`S-r=TOuMogcY&܍aF|ts'/xox94p`}5pM CS|ĵ}A(~{B6.RKa"`$96L/Ңxgt"jT,cK-3=4cOa0p ? ()>٬ 1)~  a_ƋF2 \n!`WX-ޏaOM#J;r[O%Q5zkd ˌI n4s1G栔d^|*pgt\ubyȳkn>夲@ 4xŧeyQ_tFݬ.0TEeGEyZu^54L|LH$G\vćvdru&HM q?I)v C> m~u#K2~֪aC!ӕTUh3Isqwg'^\qx/ehvj)Nl샅-R*J &ʣ/Baŗ~X=GZ[OXy$[x[Q;Kf?jÇfJV l::v?,`N;'DiiL?s$:]Z3wn?#]0 my4TJ_*JYD D,7^鲼e"e IPnFvnUHJf: i]]3KxTZ}kqP\a[ )iPM`JH\K&曺@ \] NkWUHڄпP47ްo  ҍ(,IF8QұO 1^|3rx^Q,7g0.Xc"I1l.gomTڃ&jTC^ur6M@WDϐHꌲyZ=mX_PvAt(pO!tš@ }ٕQB h3zaL}<n͡@3µGŀJ =&vW1.fD& N[s7KSxsKJS:Gb?Ӊhxwq,lP.WNGy{yAWa`ɃR3Gg Eg/rHp3fJOgo;GBpa5Ӎ+JP T2rm7M@ڇPLS^iC=X%zhZҒ_ |’%?CnwY\gO̴M EsjGfrZwD(D`g8IeN{7ă);d -E^U7. R`Yl:@tUmsL8"/5n1]nRʾdp_O^aUbV.d7GװEv.ǂ@wb NiYf^5x/ڳ 顃B mE./XؑPY?;Pjv,f`}ӸbG1;1O9蛍'I*0CF]}ncщRBSJCv5j2=.az=lvU~{侀p-؝o-{J{lg "1DvCu& ?Urs(K[RY9 |kS~lc s&q~:R!7fPweߩQ<@!tV q yQ՞\{ [ l8j]_*HBAxubiYŁ+U#q*;6El!IۙƚPfЀЎ%דDrK"폿ѐDwqnU9+X8d= b)B0Ot(AaHYG >rC/$BT[?Ov<>4࿷ݦKwžvʄ*_F QW L]Zј|KlC7x%+N`jK$A2ڊPXs8# uB٨]C* OӵjA]%,1m[͸q-4/)I ra95R !߇| pTWWjV+V$YNKPλH9(: ڊTH%Q.ulWoF]/vs\p"K`J+j8]F%ݎo]DϷ}SUEN3"\V OF튖"nGk?S_b65P$m'c&E6Q*&$ֳswpa{%c (vp jNttQ7)}9cx"ZZϢSf*`6 }Gri&\3K^2Oҫݿ܅dJ됥sr C=`Jm[,,. tPx>f˕:y$S^>oOVJ :H](B'S_,gTM-8HցU(Ayqx$Xԕ} Ϲi5Tnrr! Ɵ<2z u!a|$5ХbrD'6b{vHb5GVo] n*m!Qj,^,3]'4o >! m0izӸwNvf Fٕ=#8PL۩F8Ot;v.D=@*h/ 9\8GeU\IwjInTapyId%]Bȹ=(=¯19~;/9$8e* 1`VeU`,Z$zHB賢#UpjwDL,`O(奄IFhF) ,zEg〴BťKJz٠' }K HיUw>[|o8Na;Olm`.4+(W/ Yx06FU䌳tn;bF9oW;\M{)h참o\5ߧS:an̬-W]C1xQʂ47V|pwqfx/'~PH&{Yf4*rlKsRs[fd CS̯yl̂R@6zf j+#O W-?pV7~bP? %D= ɷ `Ұf(1;.䘮'ϒ&)e@svF#f/ NP=,)vqW*KNe \IuURjWy)qEӌ3wՍB:GTu*w`:-?dacXQ7Ϥ NkNyDzma-ob3cR >6i_fm3={_Mwɪm-{ jUy+FG|U~`m[a)zK)l/`=|Zx<%(֢.-f#>ijU p}@4@LވsLs+ts.:K&nUvE>'Z -VGF2+ !  {t8QHKJdZU )a|&1dI&/D5|j^(sq&璆IP/h/X@/9-6ޮgM9>d OoĺU:g!>HS6~'5}ԤyKTPߍkWvPc xC\6 Iuqrk!L,@zfgQgQYHX[fV;U[RDđAsH,0=Z`NB0ޅ>3E,EkͲpfv7T:jHNѯB:p)ȣw8d7#|elD M{pw;TWbyK P"Xr6ý늛ಯ 7G;>48䥑 ={amzܽk*fT 6:,&ФށWFIRvpD2Z F: Aa*39JGY,ãJftyJM1?3yv9J-dA Ckdpq)< $‰my_$*xeX1Q:0kCKmoŠWl`@aQG(@Mvi ,VEO]x=Z3rG>qd\?*6a0fZYd /O pw!ާIN8V+6U%4k;gO7c}> 8OUf,1=gplB:w8w,‰I7!yÊ~c LXp[E~3Z鼱STʢLB+ydGB|?hr(6?H`aǣ@ZcI:\P:2 ya a4Pay{ i=SeN]~KKR~UiKP zȸ, 8}mW7cXvCHgX T>zlb=,0s;4oRB;l[VpG5/h.vdEZ4}7S#(mY rk͍`%V冧3Z |D*ȕ.\ăH= gB4DFmқv˦!MKP[d9~ƔŬJj{r/..\ЁVAO| kt1pX6n{AaiO6ۖyH L$ cdw;tAY=/;.̵.jet7M"*fUJ΢p,gu&W L&p?}ı_'n:( '0~&u===ēhm?ݦgR. =XhT uwdko]yPcUEVD@Ǖ`6+`Zc8_NH&mUQ-EͱvӰA|s7~Buw ~@TR / WgK6tQp?=47n[}"˴X,YHߍ|^Jc Ə} ( ۪5?r{_SVm5uq;l_>y-'˜N_Q"m~#aWڃaۛ%3`%( /8T6eaa+m#duZ7;Py[ž`dFB $uE`dA`o?j‰2z?ԧ0eaVHq5lc@W/7/ijd*I^Mٍ K2' h!,8Ggu7{mo}wD1n#Z{ry_ȯr0ώ.L xcCƋ,@i x$vs ;y-J ͒f1Τx}80!KjLCGR>\*H&wڧmw9z/uʹ۩B}eV-v=Q7r^"퉲TU#{$,f~:UQYbo^D rHtORqgu,94W8)QoTw0{T frQYO4 mǻ>3@Jk#dV7$e^Y~HxzZa")*)Yj WWڤ _kSS؀xyFT&,E!ix;tf\<J Y פCfDUi<]`D|T6yE8̓Iw5:kiqXQr4Rca%Wgѳ50|P2bj-naEN%BfVhҶ *;(x<Whp׸n ;9E!JSo~p}ES5!/yy2R7E7MJ@R̥fO.a!(ds&n}-p"WoaH[m-I>s?jXmdu "Ib`1,3 Vx!+D9H ?F؁M3NJs CgӘޯ(6ȲEtM!ސ5DtNfQϕPطo5[m=C^J)vf s)`s ^MbֿLr"ӰD&Ϧq{-xzpHb{ٯvNSJHK+n(`M\V4¦`}/߷cCl^O1_fsQׅw$>$). 㑾>=(d% >O4B:kf1% y/me^}$έkd*i@:eZw nO߸*\l̦݁רj]j =9Qzk"=[@=ʂ;f.w"ɜ5CYƥ<`?̙wwBQDn8n"Cx0! 0Lҝwj٨]WF^},FG^95-&Qaqmz:ە"~B"TV_`8='^sYaO·xTb9jq=?C1vst0i*yxt#TxؔI>(O=G&u3I:Jf(rl \ mgϼXHF ~cmg hPOP4ٌ8~(;to}㲻ɇP]'΍ćyHCZނ c}&uBeB\s(}$cc1M+8Oq] 3^IMOHcic׬S4 R}Gmt" P%'mZAxQ""8$׈&9P\k.+ ǗWIlPhTs&  aKN(h=Vv2áhyj#ԁʞ*HuJ`U5,Z0l;XwF6n{g=?Ğ!]{JE7]~F>4} K"~]7DUc\iE4thE2U|qkIlcrnhd+[IEu>qZvX=u--=l$)U.YX0vK^(eEl$ڱ"ldUK4yy(1ԠtL|Hf$'Pc\*n?}D @QR ~(·?C K`0f6Xj~ 6؂6)D#kXL)=%R!To3W'sYIS-0(_,>>tF(O4̴ f  0cN 8bi?B*^Puנ` Iʆqܭ,VL_Z"4=Vj^u66m#KxD6I9n]o}w*WJw6{hR>ث ~[{!m5eexxԊӔ]lk^Bu\DH[ڳl-2lm\`׷22wCFuǐ6S$>MAlO)3'q]s&B${bCj)uA"X+lU65˶4Wq2QE ޓӻWk-瀦E %d!SJ| 4 \v[a8 y68ٙSb$<^8{ᨧcQ@ѳӆ H-AxQ^x]9:a)0}Z>~qM&\ƈӆ^3->s<.j#\OU_hS)::qRfvt} J±YH'ٴ >j{³imG+*,jkO񋨢&?mhIlۯ 7 e h\T_:Uk,}4W5 I""z3і#zRV-64xj?yڎ!aBmnRXX..% O_yb\s)!&3mkg6 ^Yi"_`4ys1}q8"-@-D>~DgoϽ=$hm1M!ߊVYh=he>iBXi -jI'y5t2%4XCj #re27!1NyP v7E,{)RWF]lY,O*O\ּVn:8:ɈKKq~1aM~DM-myxmŝh^Ƒ[O'Pd,UR'Y7TvaI7h0z2# Akezne"Э@{FbXshӿǤRv*$+{!jІ 8gM;]U*:"Dfb!toYL=zC"[l 7NeyD=O/X%=Fʵ{ߕ)ֱJ*t)|I(o pJ|ޓVTOE̢!Ӧť)pTc2 g*լ89qyE&eo8MrpP$+eD'͕Y* hwPl&\gL(6I@r_쾬\|i.rsZ- ":s~HȿۍdJ3"m\7ޠ|] Z(C?sxtkQ~|c1- y@1ޚӘsSqc8<X#;b;#݁^p2|~j"٨cw(Eޒ+_s)a*g2!)މ_ތ!>k) $%U5L%d߹Q/VfAF%uڭ<<iC^d^P`)L8mY4Dfjӡj,N:m9+hSQ8XXĭ!H^kWbHMC)ѳ\sq@=1YY*5`&YhKzO-V)=lCO?8r| ('^y٥=×DgЇn q+>B[Ӳ ۋP]g޷:x6qm:V1~`iV(XP#ͼ]>p3Y >X6/nG|c DHЋ&x[,7(oI_#3j]6 Kxȿf2/y߅$bshy藒yX,U?#Qs悺!i;8zđ+ÖYwۜ\vT/$qƶ\qQ fҎb 2`mmZ}UPn0E'[bETClbO1~nqPdV x .Gщ4ֺ@'u\&Xkڣ<"u({_Ne`&c |;UMZĶ YZ