container-selinux-2:2.55-1.el7$>I'{G@m>?'?'td  $ L ")?       4 \ |   ( 8 09 0:0>#@#B#G#H$I$<X$DY$PZ$x[$\$]$^%b%d&e&f&l&t&u&v'w'0x'P'pCcontainer-selinux2.551.el7SELinux policies for container runtimesSELinux policy modules for use with container runtimes.Zx86-01.bsys.centos.orgoCentOSGPLv2CentOS BuildSystem Unspecifiedhttps://github.com/projectatomic/container-selinuxlinuxnoarch# Install all modules in a single transaction if [ $1 -eq 1 ]; then /usr/sbin/setsebool -P -N virt_use_nfs=1 virt_sandbox_use_all_caps=1 fi export MODULES=""; for x in container; do MODULES+=/usr/share/selinux/packages/$x.pp.bz2; MODULES+=" "; done; /usr/sbin/semodule -n -s targeted -r container 2> /dev/null /usr/sbin/semodule -n -s targeted -d docker 2> /dev/null /usr/sbin/semodule -n -s targeted -d gear 2> /dev/null /usr/sbin/semodule -n -X 200 -s targeted -i $MODULES > /dev/null if /usr/sbin/selinuxenabled ; then /usr/sbin/load_policy /usr/sbin/restorecon -R /usr/bin/docker* /var/run/containerd.sock /var/run/docker.sock /var/run/docker.pid /etc/docker /var/log/docker /var/log/lxc /var/lock/lxc /usr/lib/systemd/system/docker.service /usr/lib/systemd/system/docker-containerd.service /usr/lib/systemd/system/docker-latest.service /usr/lib/systemd/system/docker-latest-containerd.service /etc/docker /usr/libexec/docker* &> /dev/null || : if [ $1 -eq 1 ]; then restorecon -R /var/lib/docker &> /dev/null || : fi fiif [ $1 -eq 0 ]; then /usr/sbin/semodule -n -r container docker &> /dev/null || : if /usr/sbin/selinuxenabled ; then /usr/sbin/load_policy /usr/sbin/restorecon -R /usr/bin/docker* /var/run/containerd.sock /var/run/docker.sock /var/run/docker.pid /etc/docker /var/log/docker /var/log/lxc /var/lock/lxc /usr/lib/systemd/system/docker.service /usr/lib/systemd/system/docker-containerd.service /usr/lib/systemd/system/docker-latest.service /usr/lib/systemd/system/docker-latest-containerd.service /etc/docker /usr/libexec/docker* &> /dev/null || : fi fi #define license tag if not already defined&>PlA큤AAA큤A큤ZZ=ZZZZ=ZZ093be781f9916163b4f01d3f7edd672d735d3d8347b5aa643cfa3c58057c6d5d97d35871d6dcbbeddc0e5d72140fac6e392d5576c1c630518591023309742ba43e407b3cfd77fbb58ce25a41839c9d399027ce6dd3298e8ae81b054c734011d7rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootcontainer-selinux-2.55-1.el7.src.rpmcontainer-selinuxdocker-engine-selinuxdocker-selinux       /bin/sh/bin/shlibselinux-utilspolicycoreutilspolicycoreutils-pythonrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)selinux-policyselinux-policy-baseselinux-policy-targetedrpmlib(PayloadIsXz)2.5-113.0.4-14.6.0-14.0-13.13.1-1833.13.1-1833.13.1-1835.2-14.11.3ZZ%Z%Z@Z - 2.55-1Dan Walsh - 2.52-1Dan Walsh - 2.51-1Dan Walsh - 2.50-1Dan Walsh - 2.49-1Dan Walsh - 2.48-1Dan Walsh - 2.41-1Dan Walsh - 2.40-1Dan Walsh - 2.39-1Dan Walsh - 2.38-1Dan Walsh - 2.37-1Dan Walsh - 2.36-1Dan Walsh - 2.35-1Dan Walsh - 2.34-1Dan Walsh - 2.33-1Dan Walsh - 2.32-1Dan Walsh - 2.31-1Dan Walsh - 2.29-1Dan Walsh - 2.28-1Dan Walsh - 2.27-1Dan Walsh - 2.24-1Dan Walsh - 2.23-1Dan Walsh - 2.22-1Troy Dawson - 2.21-3Fedora Release Engineering - 2:2.21-2Dan Walsh - 2.21-1Dan Walsh - 2.20-2Dan Walsh - 2.20-1Lokesh Mandvekar - 2:2.19-2.1Dan Walsh - 2:2.19-1Lokesh Mandvekar - 2:2.15-1.1Dan Walsh - 2:2.10-2.1Dan Walsh - 2:2.10-1Lokesh Mandvekar - 2:2.9-4Lokesh Mandvekar - 2:2.9-3Lokesh Mandvekar - 2:2.9-2Lokesh Mandvekar - 2:2.8-2Lokesh Mandvekar - 2:2.7-1Lokesh Mandvekar - 2:2.4-2Dan Walsh - 2:2.4-1Dan Walsh - 2:2.3-1Lokesh Mandvekar - 2:2.2-4Jonathan Lebon - 2:2.2-3Lokesh Mandvekar - 2:2.2-2Lokesh Mandvekar - 2:2.2-1Lokesh Mandvekar - 2:2.0-2Lokesh Mandvekar - 2:2.0-1Lokesh Mandvekar - 2:1.12.4-29Allow iptables to read container state Dontaudit attempts from containers to write to /proc/self Allow spc_t to change attributes on container_runtime_t fifo files- Add better support for writing custom selinux policy for customer container domains.- Allow shell_exec_t as a container_runtime_t entrypoint- Allow bin_t as a container_runtime_t entrypoint- Add support for MLS running container runtimes - Add missing allow rules for running systemd in a container- Update policy to match master branch - Remove typebounds and replace with nnp_transition and nosuid_transition calls- Add support to nnp_transition for container domains - Eliminates need for typebounds.- Allow container_runtime_t to use user ttys - Fixes bounds check for container_t- Allow container runtimes to use interited terminals. This helps satisfy the bounds check of container_t versus container_runtime_t.- Allow container runtimes to mmap container_file_t devices - Add labeling for rhel push plugin- Allow containers to use inherited ttys - Allow ostree to handle labels under /var/lib/containers/ostree- Allow containers to relabelto/from all file types to container_file_t- Allow container to map chr_files labeled container_file_t- Dontaudit container processes getattr on kernel file systems- Allow containers to read /etc/resolv.conf and /etc/hosts if volume - mounted into container.- Make sure users creating content in /var/lib with right labels- Allow the container runtime to dbus chat with dnsmasq - add dontaudit rules for container trying to write to /proc- Add support for lxcd - Add support for labeling of tmpfs storage created within a container.- Allow a container to umount a container_file_t filesystem- Allow container runtimes to work with the netfilter sockets - Allow container_file_t to be an entrypoint for VM's - Allow spc_t domains to transition to svirt_t- Make sure container_runtime_t has all access of container_t- Allow container runtimes to create sockets in tmp dirs- Add additonal support for crio labeling.- Fixup spec file conditionals- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- Allow containers to execmod on container_share_t files.- Relabel runc and crio executables- Allow container processes to getsession- update release tag to isolate from 7.3- Fix mcs transition problem on stdin/stdout/stderr - Add labels for CRI-O - Allow containers to use tunnel sockets- Resolves: #1451289 - rebase to v2.15 - built @origin/RHEL-1.12 commit 583ca40- Make sure we have a late enough version of policycoreutils- Update to the latest container-selinux patch from upstream - Label files under /usr/libexec/lxc as container_runtime_exec_t - Give container_t access to XFRM sockets - Allow spc_t to dbus chat with init system - Allow containers to read cgroup configuration mounted into a container- Resolves: #1425574 - built commit 79a6d70- Resolves: #1420591 - built @origin/RHEL-1.12 commit 8f876c4- built @origin/RHEL-1.12 commit 33cb78b-- built origin/RHEL-1.12 commit 21dd37b- correct version-release in changelog entries- Add typebounds statement for container_t from container_runtime_t - We should only label runc not runc*- Fix labeling on /usr/bin/runc.* - Add sandbox_net_domain access to container.te - Remove containers ability to look at /etc content- use upstream's RHEL-1.12 branch, commit 56c32da for CentOS 7- properly disable docker module in %post- depend on selinux-policy-targeted - relabel docker-latest* files as well- bump to v2.2 - additional labeling for ocid- install policy at level 200 - From: Dan Walsh - Resolves: #1406517 - bump to v2.0 (first upload to Fedora as a standalone package) - include projectatomic/RHEL-1.12 branch commit for building on centos/rhel- new package (separated from docker)/bin/sh/bin/shcontainer-selinuxdocker-selinux2:2.55-1.el72:2.55-1.el72:2.55-1.el7 2:1.12.5-142:1.12.4-28container-selinux-2.55README.mddevelincludeservicescontainer.ifpackagescontainer.pp.bz2/usr/share/doc//usr/share/doc/container-selinux-2.55//usr/share/selinux//usr/share/selinux/devel//usr/share/selinux/devel/include//usr/share/selinux/devel/include/services//usr/share/selinux/packages/-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -m32 -march=x86-64 -mtune=generic -mfpmath=sse -fasynchronous-unwind-tablesdrpmxz2noarch-redhat-linux-gnudirectoryASCII text?7zXZ !#,WS3]"k%xĉNμ5#+mz qwՕ^.Y4jS' N XltfsȦO^! @߳]l1N`FB[4͒Ln@]ɠxGNmgx~TDJ2J%93% Q^"uG z9Z*_GySW_ڻ (H,ȟUb,I%Vx@mOCѝz7s2:&C&A;,\8y.f4 N' sx4Wty E._-V#3ߴ5JJw:"7@C1\B񖌂pk]ߧKLSmfCa&Et=*q~yin=pІ-?笃'a~3n̳C'Y?J[?H qR`i]QTV`_VahP8[xw)Ӻo1T5O"t>l5EbJ8s\{~hL4>2M[{CtU0 *Ml±W or}4 FGb@ Ɍ4v\gn+ 6h yoN*M9Oy@vlFeBZ'+j&#YƂ^{XS~+ۆA_ϸIFf[Ethb7ƆBֻrx }Y@VTÈuQ¬uۛ-jЦcsNcJ ֐/h^"Z R,lװxrY˹y`{71,ebK3_~ GaK87جL錔lQ&nG !aQb 吨%%^ RH"c-{":9CoI%!TCºs}|$ @ڔPZFjjRhEfSYj~!oئlT-c0f̮'V ͯ]pc+0; rBU3:t5c5֘ѹwo0qvxH2Z` D +P@20xS3*mR4Q}A_kP`/C35*m&#{e6N pe,饃I\|\`R8ZX|0O :}\嬶*G΃RTCDrmKz+۝’[Z9' ⎞ `82p T| h*^@cS*&$v]`ۺ~QB6`Qt}"G_ 9k@t [_RrX(mwh@QxoE +ӓ̯.)W]x qjAvp}Jb/(9T爎uDf:Zx!kNq:l>+rȅGӽNJW; u*khԬ'_$ib_^_ 57qF;.A!ntrDB(ܵ MK{+?=,iwb+d'wRzMQ^tшpO'M_OV}ReKWP޴2{toph\vޞ] Fnyo4MBHA[U@<";/?N|[ݵiX;ɷEiys d5GMvmۚ3N] K;˨f{6);b[bF,DoX^5% 2oS:EJh>^|j>(Sjny6J(Xn'HÝj{aaɖb `?֗|ymJDb8۪IADXC9]DmFk}K.m&SNԱS^ոe@0BNsݱy|C ͸yJoN&ۻ!*r~ciE"tH hyqR풫_%GܖYr]oUC^,V qW<!,^`C ILq~k&rBYC==\ NF)C=p8 4Hf@FcX$YwSrY r?LcDU-Sm1?_+^{7-}+ hZ/(-I/V)\) v>ᇱi>M8Ջ쿧Of{q@wneRCNb 17z[}g:d@+,s[{%2[3+Z=.-ٸtUcH& cx0EBp_a[P*^.(CsdG鿆ԓWU2}u\̪LQ_̵W\Nߤ( c.^+QOٓf2vQS :۫4O}֡$h~#b]u~< ;fJ fuv&&ڸ1 u #-S!9qt}Rn.]𺜝Ioc)t?%3_}>Zk^)eHY|*߬fJ^ g`4i*HaW)$O#홓 Gj4.0vYyE6HZ8P3Jh^cer~l]ڤHy-ZE@n:-7neER&QexhE~puiAZ4rX:ǼSJ$"zIM/磺 9&+}`D&ۼ +~fHl=tvH9?G9t?] ]2]8oow`7{>K>}95(k,2WW[JW>Fušoʕ99͑S+^!o9K */@@B&Mb7nO?'2*u\ 8:؛C/ROv(KqS/u v(':SNFwDée'nkx%|чhllˆ[#RdA%d/@!o(Ԩ*uawf]/(H{4w.6:g8mZ(WdF*aJJ&D >&x*/reMγ吟MZa*!t%H?f(x8e9bm B,eQWbahrIYX@7^6)=piB-`6PIy6?ds`pYfƅj^#[[vIrFl;ɇ{b#qbukN}!>]iLOK{¼k ߦsdQ՝J_ܧu ,C֘QkY.s)pӃ' 2㓳7 H-}1NJ& 16{ V|P}L¡E&E ,<(&nZ诿F8PəbIT&ln5O~Ty+ЮTT)$E:$J<6!{KCVc]ٚP@}Z[-"R8g$:<ߙ8[B=SkӘSc@r$4bǐ(c"qx6z}idC/ÄQKp >`ךwϴ_ˉ!T*^V׏;1+}jkU֥mI.%'׈g!IkjPZlɁ٧PcHaFV&Ib$W70fxSJt ~I7,pi#л{CI^zaDMPr7c럻mS5i}2ٞ,ftvkNW#aūo@vctF‹}(h s H{TCb851q_8LMɗreVNA_]%.znncUOR0cuk6GRZ9,V; lK-m H0 b"1f4s2VN}kҹCy s7bgRzй{(=r  Ms~kVF- Yb栔ѝ<9vΤOQA 4?itLxOך?J.Ӑ(zRb&5kNȟ[ͽ]>DK\O˩,P7HL (%G&@`5:lgdZ_vauOoLdfgP6{?-tHS 1b&!cǁ@w^yTu3ŐUR PxAAc  ?^jXkNUQqMzD33q5MK-"]@ELQ!Zϭ Vu*Ŕ{K?ͿށienՀٽhj7E]: MwJxףǮ+`:UFF}S̢ya7fɚ8g5/vZ.3wjpqC;yX_#Hkus~&?-Q7Ẋ70\(uLI&+ubsZ\߹35N.*EԃNjSJAFM#Sm'dW`Ԯo;{:Ť,wUuK0XrosҝR,[6OLr]{QRF]93=,2O~XH&dP1 m5 hE4-z-3XU߼ISx8BPi]x"-ygs@E)5boJ08j`J(PF勛9 !X!&vL%8/"{|_L8u0*]}}GP,`$_sGdR҉)_k-6嬺V7M U=<{lOa*4 W>@3;*T*G-uE^T[|Kڲ9i&P-EE?YrOo#؈v%RFDMg"j2\}p#܃2;/4ξ/N$բ:hٚMњ32ev"NcѯpǍrϾ7D}JF{i!ɭq'~tgf&ח1ݤfP ?e]矃k@{*F +j}edgӼ0|m,nz)5ʉέx&?YР)w/߾Z1ߨe}0ک KBT{Xk{K 5Fklr IDS~Ǻ+b K$FNGCys}F BF:C i"xM~8 fV_R)|Ko&D})uk d4_}W^ґ-ZIRȐ/a9,xN{\bm{ n=&+a6l#ji3FʶKoy^ɑItt }}?*Y79(9DP^f:i%TBTDřH*dl&х~]L5!(ve^`9I>LO& (KBOʊEm[[ bdj,F9Njx*RsgxMA(b_dx;0†  [\jE-PVҬ<( E {w)Eӥ=hkiOpی8i /ANWv.iM]qL}@H)s:g4)ڌ4-͈H|^^qTi$<QG>:{WY(tXC<NPXheQm٪L~k]L>j}\gL#2bH\IP WeŒKb;MU:LJkkSQ ڌ5jx LM\hH!`bݝ$=g"^gWy[5zкvPOsr (!A0HhqQQZQUHc3R̬":h;\p}0Sq!)LɆg_-^K1UxӴ')z%B&[k\1^ -{ɔ)H,|SK [_<ؚ1+~Wu_^n*@d3fR !B?Hdٿ~p3-=3(lr]rw5 ty' 6\' R$1xݏ(oZh6{GݕGhY'oG"ӹNx4Cp"7zx M``3azP7z[O'O_/s1%dx:\;Rrޤ̗ 4E}MNP*Ց9AG̹7- aF!FdyɟTӱDU?vh0~[[qlRV) +3N`uRkIYT FgogMLb.*gju6 ~aN28H9,W^h/H 'ϐڽhdXYr⠽'շV+´ϷO^`?T.xZG]z" (sb\g&ؑѷ>vi:Wzey> "~U4{7N˘q)wsFlErs5o"<!"nl"Bpc,\{2[j1<6WP3"h"" `aָ7עO;ߢ[a4 ٍ7kt;p@h_t\haO(%jV^T*ϩn"צ{27jB>klAq5:/K2QFϏ1f*E]^jMl<T2N? H,j~G;ZwEA|C~#]hhްrq 9mY\Y[krP_pf6/*lHQՈscO6B%tQ5rbFdɴ]iiT=uΊdcE2ѿee9QFvif-:i\&5s0)0z7l.dT2C"Z2=r$b°@p,ǦCGM%@wީF/&ޖhx$}9}# s'Kx}vySa^h ӜQ._&Ol씇V-] xVr4&%Lܼ -E\ӌ殦/K26䮳wr l^MM1۹Jz I=lb:>b\g6y?h:2Lm3(ϣ r)u[+ %E+) N5mצ,ߠi.":v>W(=* |_AADG~К9 2u2OD7ߒ:~1z1aFWȳ7 'B Fy^"ۋ[>?^ui 3z b \w?zqO) bb_WF&7_"UE񒖵h[ TLQO:/Z6L@D?j/x C]`ġ&ɇưkKsK9Psζ7x5lr2Fz&&&O2<)= 5ܛx2| 8=i{L':kR vXDeݰRBTm&f;^ ;:- Qm/.,WVPLؑAm{OqH[ζ4ⱐ~q'܂>Cj%(O(T! X}V,s Z^#nAckaqlTiRuW[Cxv]mף(j&*zV vSVЄz!aP&MB<ljR8=>*Vqߘ) alyVxI0ڦe,0lNfB6r7Th6O;8*)(笓hOj,NW'05YfVM;-d)H*f'{9MZ=zpu(oALc%in{rrIBtlU"AwAWT9%f&GcW`|OoT),ٳ[Duk@7h%U'"v9e rMyeXkxkly:^ ڻUUPDVgw({Z1li"sPR}Rj$jIY H˟l忈l0mfƗyqPP~IJ&ady:ZUj˂/ 次ݤVѓŶ_ ܧg/^$u-c >Kw%,|| -mYU$c |$>'@SjAނ -%Wm,?s8Ԡ'Nz)c]@zwe8.Z'q|\$c$T;y!;K!7V,.U= 1h̛ou"ݥrOE~D to26#Ȯ,H}Y~i k x(+/kfP%sln~ cP 0 JӏAj%VK&LtH_-vN{ř~8e?Xl"6BxM"GS'#B&]ڝ=5|hxSbX;1kA`Zqs,D(o|*H̚d~filT]88t Ig(MOP* &9@b/B?~ws=lF* Yru\tO@HF&@ԯKn@Xػ|h 4B|8 Yk! BbJgOE`@fM泈~ G`ELCЪ.qOZ.gRx)DK]5^٭eVi5_q?ATZޓzË[ >9Y,вr.P*/XƯ>%(И PPNleN~JFRCN{XAѨ ;>{ts9tww6瑱m()ӮE1s/σ`%|f9h ήYiv?oף xZPkȋ!ols<\W! =1Ap]*F9׸$>e#ʷ2 9gP)LmY'?H'JڴJG ɵcyÛ|] gE.js]@!ok xX n8jX>^9fsŒ?>ʻFkytcntU>'$sQ., 9?i'Z;:7͋-~GȎc0aٟm9Ql  37tX"8/'*-GbcHbFNOԪh^.0Z;MVSCFxraKsCk%="&xd= +*׊vX: TANŎ腑Ng!#ؐP|RqRLMwbX]y|vsuIou م~^/*!5nȶ?C.55iDg_UmۉQOigX)a{ 4fu_T'U;hl z?%\}`2udM!4;w,G1CL ,d/҂4+RH 4%"NSN-e8^MVLѼ}m&]2AnRpȰxhiS^{xu$ĪBKOnSfzͷyycPb0 NXC_&torD̤w#Sz/ǹ#TG $f(+QW{M6Y/̾Y<ҶqQ>iM|LU/ W+g*W;Z»_(ӠAҟN`9xό(K oda˿uPj= Nv G+xjZt fjfzYyj#1K}+9x@;.,ݿh**;Vs~hR 4h[ 𡱠Wɍ2{+97{ 0:< Qow:Ğe)-D3*F0>SPzo04.R8jj83\J 5PEu2`%W[UF{i&&-6ث!/2|.Z=^Ҿ7<{;/;(A H~|i1~˂ pK'u}rrv7h@F4$ň5sbX.D9O]׍2/.WHh;Шp+8汅@bO)V3c^js')]E83GowLr1!E&x$VRiy 4ogeF2ļ?uR[T&/|ZCQ5B#uWKr_M :wˌG>9{ n#~Mj 76r2^-4Ie}LT~+&_a&Uf_Q.e05宮 U&7*7'cWC?%C΃?a ӥf1sFK݃(&g`2'Sd@-YHQWWD>j&g ./@ʇWt^^XGˣ뤶y r}  S{ȖР<7iXze"EtymeKӻ#DZIx+ `V9Ի1(A09tCػS8Pc QdG)~YD٠J!M3EnO,FFq!.'Zǃ~b˳f9+j0-Z33DReyB3qul1G.5"y3$%섐Ll6a*)+Yh~]=s.3Hfܜ@Ő1tPZVᅏ_b瞡!eostuTm N8h֛2 )jK[';i)f$eu+7[EQ7vaHfE/rƃR~+!,Pp:B"TW[Xv]Udyp1ioV UjDJ{96S*sT C;S#LԶ~{H#ɳ@!2Rbl"l)=LM>/)\UMR_ބp~XU٦cXiQw9(V31U)By·߲拽u3_%҇X{=+[ebPNV%O}W͸AtQӝSmѳI҇%+/Yu&Kf\醄vcI.!rK_A}0~QƄWZ}h ^dt-o&ܙ[ |pXsoo^';ۓ p6 I$dK7R+$Nf;~uԨYHTi:T{*P1LzfȥZ&![pê]3m0"ɪ317y?.9I5md0:8:&7󌈹u?S#`EHN-=gHU9!z5 Wċ,v9@*W `gfq=A>ިUʧo^{uk1Vܽ'C;@Lk$.8dQG2/.tѦЛ&ߌGFj2}_՞pAƹ~V.E  V Z!ЩGXj$Y[u1;X S? )[/$L_DI70BQ6q;b̹$!SX U$G0Ɋt5W0ܼT`P T4u s=)H W<4jL@G4TΫ"DZgpr?% 2%H.U:=<%d@q@"3WxrPs9PXk> >#Veu$ٌblmg&׿R9ׄ(ѡ^VrFs"2˃Lb 1!#YQO*GU L.67LtR^,C4"b:wM"(ߥ4i!4MîB=}diberڕ=8qC4i$V*vMNe"1jeH[@\nM#碛LnWZԮ罙BEw;0l|dzW+`?)!l|A|rBݕ50kjFqXi:`xB6Wpj0]׳y0hWyY`<9~_2QL&QJ֕îک ,ĹnNӜ0!)M)V"#X nmἹAg~%n svRSҬqu&ځ?k*I ۼmպYyO}Z.s1AP3؏ƺhBaKNDf9LjXӅ6_l%$Au].ڤ DX}=Rss@ɊQ)'VH5,䌖$ &YID:ݵuK |v8F)sqZ=H쑠A/kUדb-D9qn /S*uvׂTIڊ(cLFG-TJ5,NI{yRs>j&o;^ίsƩiVBh8B"Up$#=:6>hѽ@8oՒ> ;O?|תTGٱvݛO@{2 )uκ4{ I>ʺW05ܫA!5RbpUwKDjF~;R>6ry+O;Tgwv19hm y(FBֈM/*j@6:[;2݇}jw"H#.2dbQR_d%];ybk) ΥIW;cж?֏&oI @|a4Ƈ:akŴƺ; a`N7E6XŎGW"TP[`\􎯛aH{#:ĤX)+XrO8`b\ޯ*c{jd0qk{6wI:Tz`|ea5: /^l ]MEbwR5L${VV$NĽEEVk\zoiJO";26 ?aL8A,k{ʬp5Q)TX'ESv3q 9ߕel=oy|qCXE+jt x@_W 9/Fhbё+5r5T\v1g]ͮAWx0iϙ9)],sA.!wڌ<fֲK/~6OO.|غ.=6g6B]ڀ_Τu[ODJ0{vq>IMy++Q t}۞hn+|"! uAU5gm`ӊ%TV^GAK)Tf1'DPEwT_17?F51BrvTQSʇj$3|998-QRAl/c;RBAu\=<+<⮇˒᡽<0_1JӔ]<@mrbmP,7Zzqevfcmzp?t ߻j>oKrtM|{%Rӻ!Δ]ىMSn?@mq,&1 aU4T۟);й8Ǐ@i7(F^MqP6z(sOT=XG-dD' p*?Q 1r&֫)>~y+Âe7zpTԥp&b]u})8B9$L"՘d*,(NM9m[ɳx쫋(3 ʅ 4xj"߱D;wÆ.׵r>(Efp <|2[a1H{ =A9e0LEVjd1"Mȳ,̏8ţ̵QK {meί_QV*+P y`ʒݥ+@ȹm(hW\@n}0z+;VnXOxKX>ZP5S LoVȞ=NnW/WiHxe0oG/"7t#D 6G"j7pKٲ՚俞̢f P9zwN$y&Q}_`H˥Ch]ҩrs>q|mb GѶ|Q J_ GIQ; 4$ЇL|S1T}wHɺ2b'32VES@t+BClzzm^s쟞F-f9YȠ#kI|}R&Ti؊nzd/S#VL%XLQ{'ue%,>mHKt).hPwkvghoôXB7M.NQOB8ۖ!AsB/'