container-selinux-2:2.68-1.el7$>Dx2ӞVlВ>?-?-xd  $ L ")+          0 X     ( ?8 H;9 4;:;>*@* B*G*8H*XI*xX*Y*Z*[*\*]*^+Sb,"d,e,f,l,t,u,v-w-4x-T-tCcontainer-selinux2.681.el7SELinux policies for container runtimesSELinux policy modules for use with container runtimes.[|#x86-01.bsys.centos.orgCentOSGPLv2CentOS BuildSystem Unspecifiedhttps://github.com/projectatomic/container-selinuxlinuxnoarch# Install all modules in a single transaction if [ $1 -eq 1 ]; then /usr/sbin/setsebool -P -N virt_use_nfs=1 virt_sandbox_use_all_caps=1 fi export MODULES=""; for x in container; do MODULES+=/usr/share/selinux/packages/$x.pp.bz2; MODULES+=" "; done; /usr/sbin/semodule -n -s targeted -r container 2> /dev/null /usr/sbin/semodule -n -s targeted -d docker 2> /dev/null /usr/sbin/semodule -n -s targeted -d gear 2> /dev/null /usr/sbin/semodule -n -X 200 -s targeted -i $MODULES > /dev/null if /usr/sbin/selinuxenabled ; then /usr/sbin/load_policy /usr/sbin/restorecon -R /usr/bin/*podman* /usr/bin/*runc* /usr/bin/*crio /usr/bin/docker* /var/run/containerd.sock /var/run/docker.sock /var/run/docker.pid /etc/docker /etc/crio /var/log/docker /var/log/lxc /var/lock/lxc /usr/lib/systemd/system/docker.service /usr/lib/systemd/system/docker-containerd.service /usr/lib/systemd/system/docker-latest.service /usr/lib/systemd/system/docker-latest-containerd.service /etc/docker /usr/libexec/docker* &> /dev/null || : if [ $1 -eq 1 ]; then restorecon -R /var/lib/docker &> /dev/null || : fi fi . /etc/selinux/config sed -e "\|container_file_t|h; \${x;s|container_file_t||;{g;t};a\\" -e "container_file_t" -e "}" -i /etc/selinux/${SELINUXTYPE}/contexts/customizable_typesif [ $1 -eq 0 ]; then /usr/sbin/semodule -n -r container docker &> /dev/null || : if /usr/sbin/selinuxenabled ; then /usr/sbin/load_policy /usr/sbin/restorecon -R /usr/bin/*podman* /usr/bin/*runc* /usr/bin/*crio /usr/bin/docker* /var/run/containerd.sock /var/run/docker.sock /var/run/docker.pid /etc/docker /etc/crio /var/log/docker /var/log/lxc /var/lock/lxc /usr/lib/systemd/system/docker.service /usr/lib/systemd/system/docker-containerd.service /usr/lib/systemd/system/docker-latest.service /usr/lib/systemd/system/docker-latest-containerd.service /etc/docker /usr/libexec/docker* &> /dev/null || : fi fi #define license tag if not already defined&?R|A큤AAA큤A큤[|#[L[|#[|#[|#[L[|#[|#093be781f9916163b4f01d3f7edd672d735d3d8347b5aa643cfa3c58057c6d5d37e0c13396ddc379999bf51551c20564f0e280300a625f2a691ef2e11a37595ef82d3ea6281deddef1cf257723cd963de762d45831f34a25e2c20c46e41b9f8arootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootcontainer-selinux-2.68-1.el7.src.rpmcontainer-selinuxdocker-engine-selinuxdocker-selinux        /bin/sh/bin/shlibselinux-utilspolicycoreutilspolicycoreutils-pythonrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)sedselinux-policyselinux-policy-baseselinux-policy-targetedrpmlib(PayloadIsXz)2.5-113.0.4-14.6.0-14.0-13.13.1-1923.13.1-1923.13.1-1925.2-14.11.3[L[K7@["X[@[@[[[Z@Z?ZZZ%Z%Z@Z - 2.68-1Dan Walsh - 2.67-1Dan Walsh - 2.66-1Dan Walsh - 2.64-1Dan Walsh - 2.62-1Dan Walsh - 2.61-1Dan Walsh - 2.60-1Dan Walsh - 2.58-2Dan Walsh - 2.58-1Dan Walsh - 2.57-1Dan Walsh - 2.56-1Dan Walsh - 2.55-1Dan Walsh - 2.52-1Dan Walsh - 2.51-1Dan Walsh - 2.50-1Dan Walsh - 2.49-1Dan Walsh - 2.48-1Dan Walsh - 2.41-1Dan Walsh - 2.40-1Dan Walsh - 2.39-1Dan Walsh - 2.38-1Dan Walsh - 2.37-1Dan Walsh - 2.36-1Dan Walsh - 2.35-1Dan Walsh - 2.34-1Dan Walsh - 2.33-1Dan Walsh - 2.32-1Dan Walsh - 2.31-1Dan Walsh - 2.29-1Dan Walsh - 2.28-1Dan Walsh - 2.27-1Dan Walsh - 2.24-1Dan Walsh - 2.23-1Dan Walsh - 2.22-1Troy Dawson - 2.21-3Fedora Release Engineering - 2:2.21-2Dan Walsh - 2.21-1Dan Walsh - 2.20-2Dan Walsh - 2.20-1Lokesh Mandvekar - 2:2.19-2.1Dan Walsh - 2:2.19-1Lokesh Mandvekar - 2:2.15-1.1Dan Walsh - 2:2.10-2.1Dan Walsh - 2:2.10-1Lokesh Mandvekar - 2:2.9-4Lokesh Mandvekar - 2:2.9-3Lokesh Mandvekar - 2:2.9-2Lokesh Mandvekar - 2:2.8-2Lokesh Mandvekar - 2:2.7-1Lokesh Mandvekar - 2:2.4-2Dan Walsh - 2:2.4-1Dan Walsh - 2:2.3-1Lokesh Mandvekar - 2:2.2-4Jonathan Lebon - 2:2.2-3Lokesh Mandvekar - 2:2.2-2Lokesh Mandvekar - 2:2.2-1Lokesh Mandvekar - 2:2.0-2Lokesh Mandvekar - 2:2.0-1Lokesh Mandvekar - 2:1.12.4-29- Add label for /var/lib/origin - Add customizable_file_t to customizable_types- Add policy for container_logreader_t- Allow dnsmasq to dbus chat with spc_t- Allow containers to create all socket classes- Label overlay directories under /var/lib/containers/ correctly- Allow spc_t to load kernel modules from inside of container- Allow containers to list cgroup directories - Transition for unconfined_service_t to container_runtime_t when executing container_runtime_exec_t.- Run restorecon /usr/bin/podman in postinstall- Add labels to allow podman to be run from a systemd unit file- Set the version of SELinux policy required to the latest to fix build issues.- Allow container_runtime_t to transition to spc_t over unlabeled filesAllow iptables to read container state Dontaudit attempts from containers to write to /proc/self Allow spc_t to change attributes on container_runtime_t fifo files- Add better support for writing custom selinux policy for customer container domains.- Allow shell_exec_t as a container_runtime_t entrypoint- Allow bin_t as a container_runtime_t entrypoint- Add support for MLS running container runtimes - Add missing allow rules for running systemd in a container- Update policy to match master branch - Remove typebounds and replace with nnp_transition and nosuid_transition calls- Add support to nnp_transition for container domains - Eliminates need for typebounds.- Allow container_runtime_t to use user ttys - Fixes bounds check for container_t- Allow container runtimes to use interited terminals. This helps satisfy the bounds check of container_t versus container_runtime_t.- Allow container runtimes to mmap container_file_t devices - Add labeling for rhel push plugin- Allow containers to use inherited ttys - Allow ostree to handle labels under /var/lib/containers/ostree- Allow containers to relabelto/from all file types to container_file_t- Allow container to map chr_files labeled container_file_t- Dontaudit container processes getattr on kernel file systems- Allow containers to read /etc/resolv.conf and /etc/hosts if volume - mounted into container.- Make sure users creating content in /var/lib with right labels- Allow the container runtime to dbus chat with dnsmasq - add dontaudit rules for container trying to write to /proc- Add support for lxcd - Add support for labeling of tmpfs storage created within a container.- Allow a container to umount a container_file_t filesystem- Allow container runtimes to work with the netfilter sockets - Allow container_file_t to be an entrypoint for VM's - Allow spc_t domains to transition to svirt_t- Make sure container_runtime_t has all access of container_t- Allow container runtimes to create sockets in tmp dirs- Add additonal support for crio labeling.- Fixup spec file conditionals- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- Allow containers to execmod on container_share_t files.- Relabel runc and crio executables- Allow container processes to getsession- update release tag to isolate from 7.3- Fix mcs transition problem on stdin/stdout/stderr - Add labels for CRI-O - Allow containers to use tunnel sockets- Resolves: #1451289 - rebase to v2.15 - built @origin/RHEL-1.12 commit 583ca40- Make sure we have a late enough version of policycoreutils- Update to the latest container-selinux patch from upstream - Label files under /usr/libexec/lxc as container_runtime_exec_t - Give container_t access to XFRM sockets - Allow spc_t to dbus chat with init system - Allow containers to read cgroup configuration mounted into a container- Resolves: #1425574 - built commit 79a6d70- Resolves: #1420591 - built @origin/RHEL-1.12 commit 8f876c4- built @origin/RHEL-1.12 commit 33cb78b-- built origin/RHEL-1.12 commit 21dd37b- correct version-release in changelog entries- Add typebounds statement for container_t from container_runtime_t - We should only label runc not runc*- Fix labeling on /usr/bin/runc.* - Add sandbox_net_domain access to container.te - Remove containers ability to look at /etc content- use upstream's RHEL-1.12 branch, commit 56c32da for CentOS 7- properly disable docker module in %post- depend on selinux-policy-targeted - relabel docker-latest* files as well- bump to v2.2 - additional labeling for ocid- install policy at level 200 - From: Dan Walsh - Resolves: #1406517 - bump to v2.0 (first upload to Fedora as a standalone package) - include projectatomic/RHEL-1.12 branch commit for building on centos/rhel- new package (separated from docker)/bin/sh/bin/shcontainer-selinuxdocker-selinux2:2.68-1.el72:2.68-1.el72:2.68-1.el7 2:1.12.5-142:1.12.4-28container-selinux-2.68README.mddevelincludeservicescontainer.ifpackagescontainer.pp.bz2/usr/share/doc//usr/share/doc/container-selinux-2.68//usr/share/selinux//usr/share/selinux/devel//usr/share/selinux/devel/include//usr/share/selinux/devel/include/services//usr/share/selinux/packages/-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -m64 -mtune=genericdrpmxz2noarch-redhat-linux-gnudirectoryASCII text?7zXZ !#,YbT]"k%xĉNμ5#+mz qwՕ^.Y4jS' N XltfsȦNm ǧږI䀿ϫ9>4USS#8C%Uc"]ÌjxiA8 k ŵ< ""3Ek qGT,T<,_-8,zu e54I*pj4MazVuLAn.!&NM.COzbP7 l_l iϦvJ`yajVo4Ȳ&e㇔nh#Ug_AGJy)Ѣ Ph)bkΐxgx>=sl kCZ2[9f1I$ѫJH lz/gH_GZ  @.Lj&%ܽ &,+tَ 9~UmHCc `#r5A 4"2:..#Q})ir!"vbeCJqk>|Hn+ ^ ik\ H{ Fx{>m {rq-Onjjj5m M$hZ"PNj.~L &ɇ-8fL=,>صPS*Eqۄ@-m Wx4B@7ytz$Od?cO}g=*[~g7t^)sG] S* Ogtآ+F22[˄|X 3Yg'^NB&kw%kSCc.L h_|kn[bN5gҴX %|+a>֛Ks6/IbxC/Xv̑ʉw!>}CW hٴ)ģak0 ~ ƑZKL}j4qYGΨdM[,Kߧ)0' fNGuDB\F)[*|10N}J|*  RYV715j)?zU"|/؀\/ha(> N.m{ZZwOW4,{w$0CGF$XʧO$]$j`[@J^ԄtSʷq;vMT<*U|$W2Kj.x:X]GUWZ_Cbؿdb@'XN#{*&G+J> E xD _\PqWݒ dBA Ndm"\f2Иc#ͭna'6IT5]<Vef{*A*›اyS!t\w/G1W9=59O%IRH~1'rq'bDnd{L"DZKlQ Zgcwƍwn9^gu濩[v$005[siNCك`oL-jZֈי\.Ē\:O~^u&~G`A11:(;RZ{@sW6/XtO&q} yi) 7S0C:&up:\Se,MJ26"+gUb6=k`8w\L*'7ozJ@尿E0錔uӓ˴`& hǬ-bwIs=!_LuōrePHApG™d:KPbq}n ԝt8k{^P;^Nr!4n_2 -J\u# knSka\^lkڌ<;:~q~ HU8__?HfxnE9ʦ1]0ѝ1:ҚKv,v_+Iʯ8|BMfP!SB[6w<|b{׸o_o2|,]@?] =j9>x<ల [1=pΡ4 s",{B{^E6/KID62hSID W5e?Uyk%jPc #tBL G6(7A_$%{ .رk9vn.+>*nA:b6F BOܵi#IA!p:H,GW橵x[g(uwRl J2KE`oapUшkB[V'p픐@> H5#C6Le [[4w6gmn0Ѷ`; CCP}d>jW-hN2,&PBE K0$lTr-^Q j?^|‡Pn"eQ/'9 8l]BhO¹O u T w7vI*o_0 "Km}M / hx"YmU_n9~kzS垬*!ɱQd5 }{(!a/r&7F# S0Ψ]6@t=*Kuq$=.J}ws: %0wڙk*t;MՒecF@QN|)dvꌚ'v"XuufUWuq%՚b(`-]b3rukĐ3~nЫQ/Ȓw(Q,OgMȷZPc{(Hl:a+,X4@6gO'@לkkIĆ5XԺ[m:S2}4B_9 ɀ̘ӯPۃǼȏùU"b=С.wE|OFBR/81޻B$03f;RZ)Tjldd6+wrRgt"׍|zΣ .AxR7n~E@ j|?b+Tff؞p:Wo\EPvE.ZsecPbq&=ŘX#[#mߍ%,\L ٌN'~\n3ok-[%d-X&.亝ncF9`goz0A+w̷XANgVHgSgL+sCB)>\F_EQdG6"+:9v7C0^=\oF^tS΋T1At+, #m2^Н2qV\#dH'dâurE9s87}K٤zBs.4A=9aR>$OS QN冷ag1ؼ;Sv4[W,X =l,k2L`$24j"+>׺O䒃=E;I]+7y=͢swCFz>ؾ.,e۠g1n^9U|Sꀱ[ =Ta"Gxs6h|f$ё9j0 hn& '!QP=chL5,hݨF8mP+*kKXnJJT2^z0) b342OI852`DM C!X)sg̍?#nGܒJJ&!AFE'-ïAPќ;[$TZGu F-E8U{^ FT4֣ B3- *V"o܍jq wo.#(;d+J[]IёVq3[$9CEOjZ"r 3gns=&6Us{&׻ѵ8J\-j:Ik4˺\LBg)`ChG6*UA!ASTmEgwuZqͽayP41Um:*fp?Kag9`h{ⶈvY,[#r.iI6H`v™$ܿN9%Z.?x9md}rAŇKs"#1EPy;U A;W^Tz@>~tŀ. p.B%MdbMA"UʑHLlD\f .z:#\()asd̂P?='prh^1EzEX4k\v/yEDɹd|u#*FKjvKiVLxP˱i !ĻM]>Я&L&V>J[z H47t2|9]O@݋4Z4tgH%٤RӓuB ZhX"SF[vA̭G|snX ԋdFZ^<Ϥ qth 0v$85M5E:sg[NDE\<,XBsI(mxG};UZ[ %C(Zt.lixqw"vswUWY9#%peR'n]:)pة\e*NE]8(IF rc-f/@>{^7 q%iNiSKd 7D39^J.rEB24Y|QB-TÕ߬EJ_Gs ]% jmqtԽ>?[t܊xs M(r ZI㐶9S1 ' XU4-͘qhZ>K̛p՞㈋c"`JNqߐiBcn_UM6;vy!w"nq PbGs-|qȐ" eG%%sQ`ٰPXe"i7:mN/jf"A-RU i+<3:y0NfG7R>|0.$q$+zqb|]/q\Tbk6=ӛj{fЙN;ס~5א,v@n'uqe~k F 1)v=L6r z VG"qlF?_\TAC,،U (l:Ptq& [ve A L~9Ӻ]b]rIaJ<'ԨKK9~kRfwuwۘEwjX8 V4DڍJbQ5?- ivDeigXhI&#]DL_!OapXu@Rd{.N^-ilG0ŜWLJht§L=b#Kǥl5 fH|w q-n0Mf׬~soW~5aPq<#^! IffyXK6FupA`,ȴ$&~J&O[K~w|)+R|2B^41]5˩az\QiVff]8K_+(|ӂ\TN]vZ-,#K@ hy=K]#e YUޅ'O? 7+lmQ8F +4ݹ/Y2R />"gu'qJ|h%<;Lt`_EsOdJءzx6Eb:Ś@U2V7H_ z{|I l}qoGJ*SÜwkh2pki.Mcl2EC9;҇Hp[S4w*2l DPx`!Dg,yI cCkh|.[Ieq zڡhg5EE yaB|}ef$w:8ՋM٭l( p'PSR Au_pCvuTO{'62ۜBi{h5(.fo9Da=7ffh(&cCyw8[.hC09BELX~ثESXoSsOʣ0p|pHފ)) aںA$yΜeGw.pɀ1r`-Q O#a.K؟.QuS7G(Gȩ/5L!gM)|oԞY9[G@>IǨV,֑iNAdU^d؊̟mP[imѳEY \eO@;Q|rlT-50nPuW"1EmG'DE+bv='S 9*pbFAW[~Y4 qH 4*א,Fmt{5 1cw@AX +B\MHM-Y z3XbU[(Ikf|fLJ_Q!~~p75$v:Lwk?_3.rTbML~2jGnCܵ?i6"r-c 5%+̞hթh>t#GA{bG6|XsVf\ iČ:?~)5`хRoZyKn'Q꒘j z 1{ pb$ާ ӧ#٨\ɝSCy[ D 1yS!f ic*g٭9߸˗>lIL/;c cдHKy!OGPUtG!n7@o`Gi|AOܘ@&>hZs/ 汽QMٱ1u7\?8nn4V*.]8[‡yJ-H%UZͣ{Ȍвz9?R͢UEbdO pŤ`%b kgBeeQR&e#3M&kzK\N#AHp/sǵgͿ '} {V_ ?Y2A f}{h_u_ʲCvnTL}kֵaV|ڬ"G3W@~68u>%j5?݄E=% lI\g~&f> æt{87_h (!W}z&aa-[/D ohY];it`>Y8'h,À{UM:(O ˌ^aGMbl;o'+1$hKh hĀ0c|Ǝ*>]53ݫX]`ZӺ@bۊQ*a:`&L1Cy9`(Tk90^r;FzJVc *46/e780C\mwㆆ ; &)r ,P,UF#Fz3 n0ͤ# \BW;aim-'\VkYdz;B5cv;ԭdv F-QQgC6xg5} a")9C~(AJkUToqk #_Y7t8j MD|5bO}_ nNmPU?|xJ[6[aͺw* 4Vq݅_StkО˷)1J?׿GFLk76%'27@(G۳w}ۏ5R:Ps` du7AG^pkږ4w f+6si"58vJ7)YR[ںQ9;t_?c58uH<_4⇻-ɹd;End|,0re&DJJ qKX/LN0`[n3̙2a,lW:*o0~*ԇJݻnJ4OI/_~*J,N~CF  ^eI㍜\ęZ(K3͐rMz <$.;0k|"GӲwFNNRM>g~R+[QF)/l1g:I'v=t{4Ap6X؝eBHQJgq ~D:ږB!nD•a}xQ&`nTw/'߶:,"SkfcܣDM͐G&r[ lK41C[ :!z5@`)KE =/fe %(nN7߶/@SO{ FHH%suay\Z^w^!kMeI4L'B $2^gBlї)YԷ&ҟTs?}~>̧c,؞d.0|냫}_V|(b(=*ld#Olo8P@7ԓ{MX\[>p_'Cҫ)!0`8 `%m8ZJɞ2dNqCcD?-))$9(D3lގU|EvwvFk̗޸1j|y%S5{r<'Ҏe2EttER*&@M@<(]xGhvO \qз[*-H h_!1)JT˽Lrfo"ɓb{5/Iu(]u U|̝_uKG\~dX47_k[2e1qE:~'Y B" _<)/%5rڈr QE3|jN?1oxʻ6nTQB"ۉ?g[6,ߧ\!qF6Dv[M=/ǔGP7U~Yϳ[!(*FK ra*6oZx$|f-s7](j0kz ֢G0k;n|.DL3ꩽi?P?)!&G7η ߅ mxE\:O)49b!3%6xƖ2阄jEžHləxܢs4Ctq,~#="wNhL7ة4x_ަ{ܝחuo%AWV0?I 2 TAxV BBIQn!ѕ,njl4f. {^"pǗ})<}3CĐ.I]U)~-qÉQqF_f!qAbj0}lrb}TQ6|?0OK璚tYv]7QeNm"0׳ 1H|.%xϽ2O__p‚x捊u8|ya^m12O5F(ג.s+,}V_Y>_$"6Iq!ni$(Tή%^?u3 b8d! @}:{ccVQU"Sk(T}0CX=nCP97EPu%2ʌbzruc9<V+u fCзT3ۍ#uM(*t X/R_^o,;['SM&]O}Ƿ&&HYaxLS@UM${ÝΗ7"RMZ7Ԕ.U>W>"*4Y(i )"z2%#y#11g!{b[&(V+tdy| l8 6g"ϞGG*4~0uQ{ȶYN[&hXb.0ms ,+s!+.d]s*@Bܪ'-PKG;j c5ᓣ7kᒺlܰTDsBElA[Ȝfu=1/5^<.^{c@Ы~)6G֋`E.e3 P OCffEؓK/NwZ"[KJ-iGQ{o `78t#;¬VS&-vG\']"o'Rcs%^J+~x #̓@5iQruΐ61mOɦV8h/-VntK u!<a{vr/L5.UD5|kP| ]i gBAyJcIdP&tUc6ɕo*d7ʮ%G XO;Ɖm!*bUdb77@XűXЯ%y9}m 6Xz]IAʋ|:b s‘/T*Gy̩/W|<"[W} jF')pNwdfq?ZsqZ?#YoHn2 #ŸVIfYxLo|_wÜڬ!ӊv1cYA9 ,?VVO?h~~a1/>RH2BA t^8;K>?3,|r3H u_Co٥ė#gV# msl[pVzHV>MBT %q;j3j^RFOuoe3!t_0$"K0 v{gj7| a.hgyå06QZKkJԡĮo\TZ?=Ӯ){ffTO_nnAD%As,=e#y%35tI_lU0fgQ>0ъ#a+*Cs@@K;qO;4zN]6MM0 gσ9usoAeS=+/J/oba-ָy3Y}ԡ7\ 1E]hlb b8ԫi?ItM.He=8Jˆ9<^ˣClBo$/xR~Ne穿4{|qM!wJGgUrٳD'{ ZhUDIxʢ5Ͱѡu`Xjߦ6]'6Qu&V iI/x D'~R.vKJu$>|g `US ? _+d>/Y9p&]PBE~>|X._)cGj"CVME&wxW0 pq`nEʃ04ѳ|aqNl} MN524u f! u&p?!^d+줚qGe_BCׄ7Hw*@TR?j_.44~U=Oq6\z\8-%]H ;0f͹GdOJZW'XhE > ɱb'VRa>;u4u*6 0Eq3M:::cL ]W<|>v GC`5Mi2STVm2Y6%L<.N r 4k;xtI(&O[[m;d2٥B{ꭼUr\Ѷ,FuRs<Aitb%P3~~FWͬV#N  ;P7o[{O闆zEOeh .{#-P.]${->◳E@Wp k mU\iVUO, d^n0` d)[le> <[Af*uT\0մ-rD_Z;黤b|1gӤx'u9&ͣKKilex`}Vd*φI5 <4[$eSWyƧƬҳJ<ºF ] ,tn!S2K+\?$Rwf2 `"N;쌴O" 2̈c(}[QczQ_>?ʤ8 iU{eD=IPyBekA&̵¬hY<V'Nw}MҎ¨Uyƹ*b5zۉMd-N,m)|

^<؈ZD0Wļ/$3A&X:i- >S2}.[ l=,׭U#C;juSkx qځ'lAv,-yT g@% KoQK[ܢ4zY^ gCuA'{mq$/3H)]/?MaoDHygμ]B\˟h#d=p K[aT%sO>fjY#rDv(s_hvduc^ Dw,Z' &Ĺ*+]GkO.RZk~dx"Y cɆ^,̟v!ѓx阞Xlu@㸜qL_{:>ELFM_Uo{S0ER`KV<-^Qjfư6J{}K`|g ICk29=Wr6 @HίR["R' mͧs%T!~!/KCӐLV/>h|OsFi)x|Ȟ_#J#b&-R^f.deN 4r7'΍›y;QP=$_仰K0Mp,", Z~k@}yܣƍ'b(ǖpFQKIVa@Rŷf~z+ %Z0/b%S|鎛, Xz{v_`]9];|Ks fxIK$ ɢT,9LYs$c?up EPapJVn(]fYBf:߆]24a^$~ʚ9z|3I˥sB|Zu*'Rb s!DӲro=l[B :SH#M-tqbM$߳b]1qؠQ=X3_O (j$((XR׮]&^.Lmy7C ?"3l+>Z|ec֤!i 6.p2TwL:lEcJ+W⒨G&չ3~+/g<5SZL\^͐?s`.v Tq,N@I/T LoC"_8/=,b`a&#!k}ZPɀ5eNR|V>E+3|_G~FlL_&}KH dJ"R oub<`E]ٓ-R12Vgjn-6 #[fjXNNRb9XF=?2G:Z-*ҷ"$LV)mӬl4 {%QeQWqNa5}-S9챌;!Л0 O`;wkZ2֨e5ECs4p;5^]tk^s['w6jGpѸ0 Oۙ/WY09>FX^VjxG\{tLQ/-mIeU90a܍˭$럯|P7XX$bq9ߛ\2HkOAE\@fG`ʁr ]>T^[ TDL<0 GFۼm(NTU. l%M hd1"$@ @O"'Z#EDMfoVZv'NqxJː MYBǡ \~޽TV"glQhs:kUYZqzP?gR̖aef6a%v*YYW=}|}p#C]i:,`|Vc¿4+#M|#P`^pjs7Dc@i.w#T (`:,@WV}@h=HH|ʳW9 WFeݜ=tU&'-%/B~D!ty:-jB8YN]yBɒBzg.#%p_༃Ș4N߄+>`aŊ_(3~ѽkҫJqu/ 2YERc맦NzXx@c@ @.SLd܈R`ޟి&DfG+[kGX N <7L hou %r qJ."r'9~^uWK-, , * 'V$e{IX=ܺAtiXdycpWy9W!4.)bhn:4,Vnx3hݥݵ[eYO./ʑj7glvaf m22Kb>[ƊA}\^47`B NՙQ o}q=q? 켹\>8u+Xeb՛"Fя2mAS)|@MrzM^<0gx*P7(W ;rs<'oX5`rP_Tᢒ?Ƥao~ .ȭ|X2S[Eŧ8@Ex,Qc/1Ҧ01AL("yn6QӔ˖F btɢMZ/[/s@w!vJ3ך`",##}v_>_6}`~NɵNw1X5sIvs`m=Ln[2Pg{ *qc&ͼ`0 ?>8TD.!"ݺW*Y 6 :6z%.Kلu,CIպz9]jH Ǵpt1IJ q=JV:y iG(Nf6傽 hū؟zd^Xy e#P&m++6e%|~^ i૫|w5c8` ®D΃ƳGpZ f gR_\4rv8e> h(gasȒ 9j(5!ݗyC;+aPL=3i(+FSVXOɼ >UC&]O1k.x8Uz[p7+Qq %q.AZ/` mKx?F QxԌ A5ݾF}:qfkHpFFm u6څ MRdKsm?߳dy}^vr*be|ϩDt^ma+Eh< zoF&(͊ZƁ:ʣ-tm$ 0wx1;:AmNEΖt. y/ޖ(&ݡYȠ&邐srk=M؜ BdE grU?(^xNK6l:z(iAj솮KkYICAteb{vZT%0òc51ܨތĀ26aeϢNGTDxp۫bSwUuU|.ЖvbEwZ4sǖ(Ktk=&w]Ay]_[K# )&ah*"p癶~$°_kUwi)ٓCc&j!^>Pw̺gr bܶY0oZjP&cgX{%H-y5i,Y 5Ѡ&nJ6&~ q@ё:PҊ^-STZbS GIICc5eV+7v˂ &wΟ>-'̕@L|[wo?w1r} NNUhN {Ht&_tT{RJ".`xu@HKT@]|vK5=8.s{W&mZ5,yq-|BwgX5gQ{^91TB 4 kg*_=fp9sԩ s]\`zvwS0fՐ DMa=sIABs= SJ끮"jY3~EM*lbdλSnpz}7@`Pgm&lQCMWSάxdz1%\ז}8oȤ YZ