container-selinux-2:2.55-1.el7$>~6]X7{F#1 R>?'?'td  $ L ")?       4 \ |   ( 8 09 0:0>#@#B#G#H$I$<X$DY$PZ$x[$\$]$^%b%d&e&f&l&t&u&v'w'0x'P'pCcontainer-selinux2.551.el7SELinux policies for container runtimesSELinux policy modules for use with container runtimes.Zx86-01.bsys.centos.orgoCentOSGPLv2CentOS BuildSystem Unspecifiedhttps://github.com/projectatomic/container-selinuxlinuxnoarch# Install all modules in a single transaction if [ $1 -eq 1 ]; then /usr/sbin/setsebool -P -N virt_use_nfs=1 virt_sandbox_use_all_caps=1 fi export MODULES=""; for x in container; do MODULES+=/usr/share/selinux/packages/$x.pp.bz2; MODULES+=" "; done; /usr/sbin/semodule -n -s targeted -r container 2> /dev/null /usr/sbin/semodule -n -s targeted -d docker 2> /dev/null /usr/sbin/semodule -n -s targeted -d gear 2> /dev/null /usr/sbin/semodule -n -X 200 -s targeted -i $MODULES > /dev/null if /usr/sbin/selinuxenabled ; then /usr/sbin/load_policy /usr/sbin/restorecon -R /usr/bin/docker* /var/run/containerd.sock /var/run/docker.sock /var/run/docker.pid /etc/docker /var/log/docker /var/log/lxc /var/lock/lxc /usr/lib/systemd/system/docker.service /usr/lib/systemd/system/docker-containerd.service /usr/lib/systemd/system/docker-latest.service /usr/lib/systemd/system/docker-latest-containerd.service /etc/docker /usr/libexec/docker* &> /dev/null || : if [ $1 -eq 1 ]; then restorecon -R /var/lib/docker &> /dev/null || : fi fiif [ $1 -eq 0 ]; then /usr/sbin/semodule -n -r container docker &> /dev/null || : if /usr/sbin/selinuxenabled ; then /usr/sbin/load_policy /usr/sbin/restorecon -R /usr/bin/docker* /var/run/containerd.sock /var/run/docker.sock /var/run/docker.pid /etc/docker /var/log/docker /var/log/lxc /var/lock/lxc /usr/lib/systemd/system/docker.service /usr/lib/systemd/system/docker-containerd.service /usr/lib/systemd/system/docker-latest.service /usr/lib/systemd/system/docker-latest-containerd.service /etc/docker /usr/libexec/docker* &> /dev/null || : fi fi #define license tag if not already defined&>PlA큤AAA큤A큤ZZ=ZZZZ=ZZ093be781f9916163b4f01d3f7edd672d735d3d8347b5aa643cfa3c58057c6d5d97d35871d6dcbbeddc0e5d72140fac6e392d5576c1c630518591023309742ba43e407b3cfd77fbb58ce25a41839c9d399027ce6dd3298e8ae81b054c734011d7rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootcontainer-selinux-2.55-1.el7.src.rpmcontainer-selinuxdocker-engine-selinuxdocker-selinux       /bin/sh/bin/shlibselinux-utilspolicycoreutilspolicycoreutils-pythonrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)selinux-policyselinux-policy-baseselinux-policy-targetedrpmlib(PayloadIsXz)2.5-113.0.4-14.6.0-14.0-13.13.1-1833.13.1-1833.13.1-1835.2-14.11.3ZZ%Z%Z@Z - 2.55-1Dan Walsh - 2.52-1Dan Walsh - 2.51-1Dan Walsh - 2.50-1Dan Walsh - 2.49-1Dan Walsh - 2.48-1Dan Walsh - 2.41-1Dan Walsh - 2.40-1Dan Walsh - 2.39-1Dan Walsh - 2.38-1Dan Walsh - 2.37-1Dan Walsh - 2.36-1Dan Walsh - 2.35-1Dan Walsh - 2.34-1Dan Walsh - 2.33-1Dan Walsh - 2.32-1Dan Walsh - 2.31-1Dan Walsh - 2.29-1Dan Walsh - 2.28-1Dan Walsh - 2.27-1Dan Walsh - 2.24-1Dan Walsh - 2.23-1Dan Walsh - 2.22-1Troy Dawson - 2.21-3Fedora Release Engineering - 2:2.21-2Dan Walsh - 2.21-1Dan Walsh - 2.20-2Dan Walsh - 2.20-1Lokesh Mandvekar - 2:2.19-2.1Dan Walsh - 2:2.19-1Lokesh Mandvekar - 2:2.15-1.1Dan Walsh - 2:2.10-2.1Dan Walsh - 2:2.10-1Lokesh Mandvekar - 2:2.9-4Lokesh Mandvekar - 2:2.9-3Lokesh Mandvekar - 2:2.9-2Lokesh Mandvekar - 2:2.8-2Lokesh Mandvekar - 2:2.7-1Lokesh Mandvekar - 2:2.4-2Dan Walsh - 2:2.4-1Dan Walsh - 2:2.3-1Lokesh Mandvekar - 2:2.2-4Jonathan Lebon - 2:2.2-3Lokesh Mandvekar - 2:2.2-2Lokesh Mandvekar - 2:2.2-1Lokesh Mandvekar - 2:2.0-2Lokesh Mandvekar - 2:2.0-1Lokesh Mandvekar - 2:1.12.4-29Allow iptables to read container state Dontaudit attempts from containers to write to /proc/self Allow spc_t to change attributes on container_runtime_t fifo files- Add better support for writing custom selinux policy for customer container domains.- Allow shell_exec_t as a container_runtime_t entrypoint- Allow bin_t as a container_runtime_t entrypoint- Add support for MLS running container runtimes - Add missing allow rules for running systemd in a container- Update policy to match master branch - Remove typebounds and replace with nnp_transition and nosuid_transition calls- Add support to nnp_transition for container domains - Eliminates need for typebounds.- Allow container_runtime_t to use user ttys - Fixes bounds check for container_t- Allow container runtimes to use interited terminals. This helps satisfy the bounds check of container_t versus container_runtime_t.- Allow container runtimes to mmap container_file_t devices - Add labeling for rhel push plugin- Allow containers to use inherited ttys - Allow ostree to handle labels under /var/lib/containers/ostree- Allow containers to relabelto/from all file types to container_file_t- Allow container to map chr_files labeled container_file_t- Dontaudit container processes getattr on kernel file systems- Allow containers to read /etc/resolv.conf and /etc/hosts if volume - mounted into container.- Make sure users creating content in /var/lib with right labels- Allow the container runtime to dbus chat with dnsmasq - add dontaudit rules for container trying to write to /proc- Add support for lxcd - Add support for labeling of tmpfs storage created within a container.- Allow a container to umount a container_file_t filesystem- Allow container runtimes to work with the netfilter sockets - Allow container_file_t to be an entrypoint for VM's - Allow spc_t domains to transition to svirt_t- Make sure container_runtime_t has all access of container_t- Allow container runtimes to create sockets in tmp dirs- Add additonal support for crio labeling.- Fixup spec file conditionals- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- Allow containers to execmod on container_share_t files.- Relabel runc and crio executables- Allow container processes to getsession- update release tag to isolate from 7.3- Fix mcs transition problem on stdin/stdout/stderr - Add labels for CRI-O - Allow containers to use tunnel sockets- Resolves: #1451289 - rebase to v2.15 - built @origin/RHEL-1.12 commit 583ca40- Make sure we have a late enough version of policycoreutils- Update to the latest container-selinux patch from upstream - Label files under /usr/libexec/lxc as container_runtime_exec_t - Give container_t access to XFRM sockets - Allow spc_t to dbus chat with init system - Allow containers to read cgroup configuration mounted into a container- Resolves: #1425574 - built commit 79a6d70- Resolves: #1420591 - built @origin/RHEL-1.12 commit 8f876c4- built @origin/RHEL-1.12 commit 33cb78b-- built origin/RHEL-1.12 commit 21dd37b- correct version-release in changelog entries- Add typebounds statement for container_t from container_runtime_t - We should only label runc not runc*- Fix labeling on /usr/bin/runc.* - Add sandbox_net_domain access to container.te - Remove containers ability to look at /etc content- use upstream's RHEL-1.12 branch, commit 56c32da for CentOS 7- properly disable docker module in %post- depend on selinux-policy-targeted - relabel docker-latest* files as well- bump to v2.2 - additional labeling for ocid- install policy at level 200 - From: Dan Walsh - Resolves: #1406517 - bump to v2.0 (first upload to Fedora as a standalone package) - include projectatomic/RHEL-1.12 branch commit for building on centos/rhel- new package (separated from docker)/bin/sh/bin/shcontainer-selinuxdocker-selinux2:2.55-1.el72:2.55-1.el72:2.55-1.el7 2:1.12.5-142:1.12.4-28container-selinux-2.55README.mddevelincludeservicescontainer.ifpackagescontainer.pp.bz2/usr/share/doc//usr/share/doc/container-selinux-2.55//usr/share/selinux//usr/share/selinux/devel//usr/share/selinux/devel/include//usr/share/selinux/devel/include/services//usr/share/selinux/packages/-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -m32 -march=x86-64 -mtune=generic -mfpmath=sse -fasynchronous-unwind-tablesdrpmxz2noarch-redhat-linux-gnudirectoryASCII text?7zXZ !#,XR]"k%xĉNμ5#+mz qtQs Os9gGAٷjp2tBjzTC ka*]& ,53 o]>'Mz]x›~ _$9=mUux?3b!DŘig =T1:h+7d!¶{ l pZ-AQ3ĜӪ}I |%N+RK@S]_C~\4B<>]ҢB[&n)ie5ve]91*Y4,eʅց|x_ׇ d+ԧQrr֟wk wوG\kV*(rt+ŭbeͣ+J~7U0~f2b9rͰٖlG=&bo1߳13"|j2Ϫ W e+=1wܗ@y wҖVT,з i>d25)dnNJ-:I8ҵԜbt^&D_1Hb\L’q~H@$h.CukzgRc8hOIG6cCB_Ưlyg0w#gFA%Q5;&/eoޡCbz=<y4"e1ǚ9֋u*61{nϴУlVX[(`Eޢ>lY,J1$7*[&;a%.>caR]/ٰ&RJz]غ@;-鬇2XHʌ⌝,f4sˏv!ي5 ^tiiX^V!AD ϴ'm3d6b!$lá^%<D S34ӅsC#vF)⠖SN# c s2#v;{ޡfm/^C#rB-8?^V ;L,':yf;Ҿ8<(]ڈqb)?G.IAEؾ"xYv/VBBeaRjFIpEB%1ֿq:%,βyn=`(L,Q2&jcvki bg03NZ,_Yz+x~ tSݡg <HW57$`ڐ܊ӌPe]ޭ 7Zw}G|A$6Zޒ+vψ?9B~ĸr.͒ӷ ?Evϱ) 8r)nf(U7.0pB)ɤ g72BJaMBTXrwuǾI+ΫZݢ7io98pZ4*K9maY#CŬ#ervI"lUcCgKRo*<5GZ[bhxߓDqʐXe9Z15t} FGB>hcz__7EYyM9R+])x܄hLȷft@vmv5! V`~OQfpWDm<]*9vKw~E2g#{kQX ]IXlѵ?*7.&H_╯UhNJ3oj~P&]N쑉Abh߀g#֓y wJ!Ca֫eX0z~ձqQ]S'מ%|Ws+6Y_\TF \8ISw[wf=Nݮ/$cԲ9 .هut8Z ޲6c(nofo*a@3^IÌn| pY~c#mZ_8 ^\o/l 9pIƞ_2C`,娼NkF[ERwX(ZX.w}KUl,|XYo`>ID?gјʇp  d]K9u)IV?8  YDGA7rj>[I ewRF]0sL|tnMi1rx2qhw߼ހn.jvӲ|/ 4oQؼD Eѭv%bX ٜNg Eh#Cp)U9lBh 8]蓹>Glt~1gxZIr~ xD+_DWd /L=dl/;+qJ dY`&`  K<*^ОU=`jσ–A,xkku{Qf)y`gak_fwf"Q}eJus9u?s2nn1XȒWfQəY Z./{ey)m)pa@|+fwq.a?poΔlCN;,9lvi<7Mxfb˪J;a}~)QjY7 갛/uqaET">iPV8Ũ6f~p50}>(//Ih 6ʫO" {Js(U!>@h]Zɀ8^T_Pg~\2L9s3u8wv|`f_@%4:L~Snm"Nt@$ ݢ"Lr*Ŏ R.:l)63S ]į\іD,uX~nW8HDJ'hCШW r>Eⓘ]*~aTr9JwBױt$,XF>F?)Z?4jK:@M(/$?R@c&k&BE:_qD؞nX6r'"Q1_kT ᛀPy ^ՠd-#8'@*ee-k0+4"NE>ǷQ}?Do#{7#괹`&3#gv$*k>oa%Q s"4^6;S}ƠTTe#'Tqn'hJbC{Oܒ~bah ׀bȮ6k%T)kYa=o9OJd2B~]ş7,gI 8t\B{T2'Ff?yj_ӂsYʫ):}!/R7I]v]|k*L( Ö{C"B~'n=aǵDvL,%)MHh0#tǛ'ݘI"!b'EGgt7"k\^L=*{s6ƝYL!Ԋv"R 3%TݮdY`ـ u9߅x*:K}!/Gؚ#,h-g{n"rGmysuA88{.TGJ;so稴Pfo]pz琰&3N>J $̎dr \3eicGh! ~;'\{vOIVַ`~h* cO=J.F.9;y%"ϔ4nѷ8$Rft2qdgi0Mdq8rT4&j^ŶO8@̀5O#ܩ١]@64lfۘ凞 ~ _M3R2i]٥Q M$[T;(h4g: o 4JYVNm1S0RNe00g} ]OqџQmSn70R*%c)ؾ$Q;XKRͯ6:Zs-}󖆔 B{"2)^TѼ4)]*-뙊+%2ZT!m-Ȥ𩮴ch>?/lU$RF#1P 6~KML4h;OS2vT L?*D>)^9<wr?-Em1d82΁։b'xձa CuծY>\7j s[ysP ftZ9S~o˯*"ٵ[hDEpaoXINμ 35-PgCsHچ j\2Kp1^طꅈUH1^&F "pM*cJ61WEK,qFP%)weIR(_YrP:=icQhƒBmFXӬ-| 4d'm\B4鷩Ү Wڥ4=tMa 6Z/žœO&Jcuidpݼ `Y@6hq7r8؟̥n|+'ӠeU=L+l,%^fvG|}q]@Oүr5\'~ӍA+D- _Dg@6c{8CW$j ۖ%(2x F|̏2 B E˦쵞Š*2V9F*u[=׫ǘ +$kx@b ⑝HQ!6:dQŽڿ¿_-?ٚ|S(#|ҭCj ;Dگ74xcp - 7 \TMT}:,m>43+j|zW%bx ZiKSN}lQP<uݓ㽄keZB 9 }t%<\rtIg/)AR;jQ54Mڬީt|_|lͳ)xmG>%AΉ[t4"Wl+`P_X̤]]6'A-,fvgr} /)(G7 /,Áid 1J> Zc>mZvW J`5iIIHzt'ӾA/u6gʁ8W7TAԾBGV'-1Gѿdi"PwL\d z(RtVjcw-So;}"ᲃ<]YF?{Wqxnz{~wH=o)<G# S<7n<~R=8Kڑ SKX4&~6uт Q>JV7vnhn,1pf&kf$3(]xQxeBhrR0xIN8yk0 l'pJ-/xNmd԰vhǦ"0Ha#W%b!)\(jGPk]XϤ&g)!YOA _1jG 2?^1Eҫj3 h:D5O}8qRu!jxz`[bTZ)Yx5GgY&S%[ NnXewQ3\&;>JY's7 Ӕn;0Crb&G.Iyӟz !4?B}.̰g+MArZ-G=J/ ="nǽa9ʤ#5#HڍP [R݁RaPʅWR->m|Vd@Vdć-,;0$> ˢJ`,5%H\S):==*p+1dY>"Qll,oOqAdr_%o0!7|c%BWCZ]6 wBMvSV y"lI|gfcs(7: D.Z|"FlեiL)Ȉc$jXnH ڭa 86ժ0;NwU5fs']B`שnn$ӣV)^\t}Zl+iarPW0}ܾ뺉21F3J վz e$(6},NCc3{cc,,9!9me:Bx)$gH%]`^+1Jl_RE޹/BA$a ^)3 O[\G(ejzdh@dyE x_}q.¸+HsBObK=Kx=^W$mx@d|U5^Y䀋}WtNZ'ݩӓar&DzoAgG9"ǡzcsuuNVE kO/Iz|~]cxPa 54 '8)O^v O@OUj~q:_.tƞږa™HݿfD0R:Ƥ9[1muenMڱ]0\'oBFcHGk4߸Wvk4b<甃f pRJtsHTEYWkcjQxؖ,qSdbťՄ$9hʩ8&,.^a(?nCV#Zw1Y,">"$Kkd8֭TG؍W;Pzb;S̾TovXo 6T\LR·yڏln;A!D'AS_(AQ!P*izWq&44^GE^=.*FU(݅ǴbɔCJ[\YӈJ*ɘ&sL䭟"NG.r КxS`mpx> 9+h^+E)fT G)U!H74~Phؤp"C] m1j5߶G!F4%֭޺Y4g)"165YOE8PM]o5cU˘rwO |70cteK5MryT3HM2[0CJ_I}TbspjR嗎V; =-,f\sY P|j H=K 'I;$ צl%,"\GR-z]wtB q s >#Jf2 b6y,XuJ꺩_0P%w֧g&ϠO OJr}%oH/]nQVv"HݞZ CMUS \ .r>Hl@bLtֱ-']RDBE?jb6RUle]t'}6Ì/A_=hVnGg€X"T aSg92{Gs-Q$$LS8T]lEgRݢvϪ-mu:"D~LdH ,Jҽ)-/''_1%EPpR$EKzY&4[[ʑ8"A,*h$81%VCLX%6 ?]i~C olMr[O.l &ZM|ʂn7*౫CBSd/# !H<=~- YI+;cujC\-%XeA?gFK꫼ȥQw Sz#㻧hع赁DBh=cDnSv sQOr> ag&G^v'G#F,w0ǵS/'1&`$q}jlsz3 D0܄}&c]ΰ__[ Qr ƱËǴ ?*6>&@Y*h6B| $X: i[Z(٥/,7s]((X2tXOzɷ#\LJ *L_+Ho$U7Rg^ O AXT?eQCgw׹="3y$4*NdsGf)w`ބa)~<~<=xFN7Ny7m;o-( g8٘\<$ﷹ5C*SDYe!l `3m{T \T;(EvUl'1~( <SjTOtٖkiem%+xe2mCXU,-j@EvR6^֨lvcЅ|dϐCi&Ler fhfމqlC+Olbz DM-$C~OqjlVƏTy$d\jv9|5+iTQO9!e(7 R}@#w蟏t2nrA2-^YA1LN줐K5 T4)gyV_ [ Z#J|I2l&z΢?'ZJ0>-U76d"9wF"Nעv'Uц(8 &|r,%P/:&[PNnMdSk5l&Pҋ(8VEmmy%5Qm-\uU k8m Ya(ଢ- e _tKAw7Q$*BzU@8MJx ݀oӱsߴ桡0g&gҚc"8E,?u X!YǮU :4QP\PYGD/_pj ` m] bT`p93^+dL\Mla׮Ók&`BFLBAI#G?Q?SGyO=ޱ$4$ψDu~[@JSX碇%'4`DvP CXZh-lXٓZ(*-[y+ S˿kE1R=] !<^0S=2 :9~ӑOEŵd֕.ؑ6dk|}PBCaМ] 27Y˩X,qlڝ_S 98zC54`Whgwtf3<ϣv|$ʐL'Q-}Z>f̎] ; G))e[_Ts|V7iTц0VW04bVs,e,TmL> n#Jؖ$5dY*'3edҏXhDc' S00"!T`<Y݋v%2ʎ ҝv94NS T)LrjnͳЦוŜCcr~p;Ol"@`B6`IG, 泙T2lbc+EZDr+~-ҵvo 0b$֫[RyuY;@@ep &jJx'v%mƋJpb%otE7J V7o&bʶAyRcr[%N19JsYGK_Pox&ѱuJPof;eM2@ôo-> ٨iT3 g+`jC:ziA &g5́m/#_(ZpqQ'rEhn3Aq"'f0Icګud\^DW3phXd;K1Gs(GyD51u&O;V뛏dkr%ڜ 2&XA!"ީ0*/Ǫ3#*^*X,ZLA'%E&o"loi=sO( z3l +oH5-7PUb(.I޷u2wzFZ0dX̃iT[PK9 sAF.PX׬)1bnXO0u"'{Z tW$~G'0A)Bk,(i&Z 9o\Q9F4d4٣r\f,-s &z2UAi G YCm$Aеkx~],UcR;f7OϠCq)ov8 1e<WC5!7 7}NDlZ+LvHPݜCӞhV%+ҭy?b`s1hb90-ngx#H!lpvgX|}=x #{s&QQeܯfhr]R4kHJ?ljލrhWpW"ًd6,k Dr'g *m0 -]Hr~/MH#?,ɼǣRC^<0Bц5.8"0gGB1ßP n3ޏ*@\>[%fݖR3үA`SnY5} %AٿΚ$!58 _E007M9XbfA\-ffK7~aǦ:{Ʒ&k#eEAؼp$j]Oͻ 4p{QNa[VolD t.rVWzq8;#ӕ^s̋Q+4u=}Y['뽋"TVJ L7){xRP` M $0Du#3F.47>$4WI)x!$y?Ϳ3.&d8H҄1+ WBS\|}b[!Apt $_`h_IG!GU7[EVkA9{uKF2/>Io\ 2ܑuW3&q+b!?ev}! 9צ쵬q3-r !-Y2+>  r&|r=K՗'4,R/ֹG t~8W 9U5+̞Jo>.6Hd6s3Ots[!^/3pvb> ;hꌡ)~RnlR<643˰pWa27ȣ1\]"$3Mf$zZj':p$_[dxTݓ\a*LQȀYCZH3l#<>mUXX?cA'{fQIfD2T5y Per% :\Ou$Xm NH=XlhX' =M4"^}ో`DHKpҀ琀:_&W m Jd{aع6'̥l"n+9WwG;{~,4<4w@ʻng(T,8ͩ*jF;YsɲUq.m.t1\TjF:يa >tDZؕL('՞ф8ov8s樌m+}geߞ)$⮟%{bC%[d&ax VgBc ]"HW!)T @0y?Ev?]C-]-2kc,vzhOPoN5hEځQ^q:uuXi.JOu7='-ZC^$!B `ON[@[^O-_y\|[ϳ|T/igZa!RΗZ$z':Ww{$UM=S\|n`$($*!(F8cbj u8~kmk`lz&SэpE(K$ABlf^Ur'h@I OXB uMl $+Ihίe^C4䒪IW8%8-cϿt{/ld,cLwգ^Pje =qQ_,7E ;bx[8̄HZG(26292v~ a! NThPc.:O@7a*@Lk9*;rDĞӠ']\uV @dǪ%l#-Ѭ{(wfŠBQZgr(5MjDYSK9<#lag-? Bơv"*VX)x'M|!/beu\RM7/Yodk+纚[ZS\gx4ꠇ9E%i,؅`ńI6=K(XJ=9^3fߍ /h[[=Dix) W7t_W6#@NDۅ%~hUUm?$|@9+c[T C,iG}8; +d;*\[BKh{훁348fb"#JDHEU6C=V^WWS XƟKir "pډN &KOS^ dA<$"~`tG88jZ^Ql#>mSW%H?龜d8gl3gUY~X)7Y^\WaHl\^>~l.fOv2S4fkػ R$8C g]/ߺH-h=W  m S{1 2,ܵT׀m VvO̻qV7'-2@i9xjŧL=-ʴAPG!PI"]aŽ"Kƺذ0$q4%vyffȘY3 |>1/j^>;Q]xd30.ޞ\ 3aD0# co#EO>GL&H t↧=WO;jl)jpQ&3H䶮fM"yKf`XR uqO*,'rD %kU&fPϧQyro*-@2%+ϚSIswP Wa32}ΣJi@BQN>=.(rY z!~= )e2FQ*'by)Ѣ*ji' Uj3YC$RTYDq \mDZjGoU3 HOM=_VW^17A \wc#{^ 1t>ki*AV5߆I4 NJǼnwۣ'>xe=`DRG8FufLi#<*/wC@!k=YLҾ^v@ hoQ.}|58%-Șs'd*y} |M} %"M;8TNSP3Gg~Y o3@a]-.tYUXzv(Ӂ\_n0Hd˗nd%ێvl#v 1hY{ pHڢ&( }hzE\0+(]o̸XYA*`97Yh2qֿʳ 'NxXNIL[zPj-Δ `+nP$n/c(릣oBD!)$b~ԀHH{j樣2b?, ۥL (S?z[vQ;6;PMꁨ_@< \-Dcɵ bīP>k5_]ffU 32 썠 p$D2&kDKbE,^8lp2HVh壱]GK)9Rm)$^M¤T!OHFrѬ>* Tbw{hE^jN&wck(@~:<:x e3i8r\)IM$j_A^`:Q‟$AOHHbuRBʟDt'@T`q/'N F=\ T$Bwok*IX\BgD0~0-"T GҶ}nk*-<эehc5xϋ!(f:v,~4UQP{.f۫.G -r/N8-2*t̋v1}D5U?dn#JNF5lwenU!Zw=)Aଲтjz2+^]%FM-sZ{:ߏ|K}-:?p䐾EgޅbmN(OM ~^M\ڬ[GvM/ ǵUxӬl?YemR>j6$9 C,#l.y&Ge"L 3 ߇9@_e2_9Zy+:GbѤЍRSg  `:p_G'Q"E`V0qɆyfs>+ᨺ@AVU|ׯ9P}5B":5%clf#LvqV]Ra@:PiSP@HjQ/ ]訄iއS릑` ?I!r#^k`yc?.cAU<GHDrER%E^xS$ᄺPɯd,W rJKFf$Q {V\X@2ˀ( YZ