container-selinux-2:2.42-1.gitad8f0f7.el7$>u(+UhD].Z8>?!?!d, 0 X (.5W       0 X      ( ;8 D&9 &:-&>P@XB`GHIXYZ [(\@]`^b d!%e!*f!-l!/t!Hu!hv!w!x!!Ccontainer-selinux2.421.gitad8f0f7.el7SELinux policies for container runtimesSELinux policy modules for use with container runtimes.Z_x86-01.bsys.centos.org\CentOSGPLv2CentOS BuildSystem Unspecifiedhttps://github.com/projectatomic/container-selinuxlinuxnoarch# Install all modules in a single transaction if [ $1 -eq 1 ]; then /usr/sbin/setsebool -P -N virt_use_nfs=1 virt_sandbox_use_all_caps=1 fi export MODULES=""; for x in container; do MODULES+=/usr/share/selinux/packages/$x.pp.bz2; MODULES+=" "; done; /usr/sbin/semodule -n -s targeted -r container 2> /dev/null /usr/sbin/semodule -n -s targeted -d docker 2> /dev/null /usr/sbin/semodule -n -s targeted -d gear 2> /dev/null /usr/sbin/semodule -n -X 200 -s targeted -i $MODULES > /dev/null if /usr/sbin/selinuxenabled ; then /usr/sbin/load_policy /usr/sbin/restorecon -R /usr/bin/docker* /var/run/containerd.sock /var/run/docker.sock /var/run/docker.pid /etc/docker /var/log/docker /var/log/lxc /var/lock/lxc /usr/lib/systemd/system/docker.service /usr/lib/systemd/system/docker-containerd.service /usr/lib/systemd/system/docker-latest.service /usr/lib/systemd/system/docker-latest-containerd.service /etc/docker /usr/libexec/docker* /etc/docker &> /dev/null || : if [ $1 -eq 1 ]; then restorecon -R /var/lib/docker &> /dev/null || : fi fiif [ $1 -eq 0 ]; then /usr/sbin/semodule -n -r container docker &> /dev/null || : if /usr/sbin/selinuxenabled ; then /usr/sbin/load_policy /usr/sbin/restorecon -R /usr/bin/docker* /var/run/containerd.sock /var/run/docker.sock /var/run/docker.pid /etc/docker /var/log/docker /var/log/lxc /var/lock/lxc /usr/lib/systemd/system/docker.service /usr/lib/systemd/system/docker-containerd.service /usr/lib/systemd/system/docker-latest.service /usr/lib/systemd/system/docker-latest-containerd.service /etc/docker /usr/libexec/docker* /etc/docker &> /dev/null || : fi fi #define license tag if not already defined&;0NA큤AAA큤A큤Z_Z&Z_Z_Z_Z&Z_Z_093be781f9916163b4f01d3f7edd672d735d3d8347b5aa643cfa3c58057c6d5dfc6217a38cd557adbe6ba5b7e219411cf816d86ad270db71fed1fc1d348517d122ca58993af5c40363e65191aa1fc69ac77f39dad1144ab5a13fd562b24748b6rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootcontainer-selinux-2.42-1.gitad8f0f7.el7.src.rpmcontainer-selinuxdocker-engine-selinuxdocker-selinux       /bin/sh/bin/shlibselinux-utilspolicycoreutilspolicycoreutils-pythonrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)selinux-policyselinux-policy-baseselinux-policy-targetedrpmlib(PayloadIsXz)2.5-113.0.4-14.6.0-14.0-13.13.1-393.13.1-393.13.1-395.2-14.11.3ZZ`@ZTZS]@ZP@Z/ZOZZY@Y|YYdYA@YYoIYcl@Y[@YA%@YA%@Y6@X@XO@X+X@XX@XXX@X~@Xv@XtXp@XoXoXoXWDan Walsh - 2.42-1Dan Walsh - 2.41-1Dan Walsh - 2.40-1Dan Walsh - 2.39-1Dan Walsh - 2.38-1Dan Walsh - 2.37-1Dan Walsh - 2.36-1Dan Walsh - 2.33-1Dan Walsh - 2.32-1Dan Walsh - 2.31-1Dan Walsh - 2:2.30-2.git7f2de1aDan Walsh - 2:2.30-1.git7f2de1aDan Walsh - 2:2.28-1.git85ce147Lokesh Mandvekar - 2:2.24-1.gitaeff029Lokesh Mandvekar - 2:2.21-2.gitba103acLokesh Mandvekar - 2:2.21-1Lokesh Mandvekar - 2:2.20-2Frantisek Kluknavsky - 2:2.20-1.1Lokesh Mandvekar - 2:2.19-2.1Dan Walsh - 2:2.19-1Lokesh Mandvekar - 2:2.15-1.1Dan Walsh - 2:2.10-2.1Dan Walsh - 2:2.10-1Lokesh Mandvekar - 2:2.9-4Lokesh Mandvekar - 2:2.9-3Lokesh Mandvekar - 2:2.9-2Lokesh Mandvekar - 2:2.8-2Lokesh Mandvekar - 2:2.7-1Lokesh Mandvekar - 2:2.4-2Dan Walsh - 2:2.4-1Dan Walsh - 2:2.3-1Lokesh Mandvekar - 2:2.2-4Jonathan Lebon - 2:2.2-3Lokesh Mandvekar - 2:2.2-2Lokesh Mandvekar - 2:2.2-1Lokesh Mandvekar - 2:2.0-2Lokesh Mandvekar - 2:2.0-1Lokesh Mandvekar - 2:1.12.4-29- Remove typebounds access rules- Add typebounds calls for container_runtime_t on spc_t and svirt_lxc_net_t- Allow container_runtime_t to use user ttys - Fixes bounds check for container_t- Allow container runtimes to use interited terminals. This helps satisfy the bounds check of container_t versus container_runtime_t.- Allow container runtimes to mmap container_file_t devices - Add labeling for rhel push plugin- Allow containers to use inherited ttys - Allow ostree to handle labels under /var/lib/containers/ostree- Allow containers to relabelto/from all file types to container_file_t - Allow container to map chr_files labeled container_file_t- Allow containers to read /etc/resolv.conf and /etc/hosts if volume - mounted into container.- Make sure users creating content in /var/lib with right labels- Allow the container runtime to dbus chat with dnsmasq - add dontaudit rules for container trying to write to /proc- Relabel /etc/docker directory- bump to v2.30 - Allow containers to create files on tmpfs file systems - Dontaudit containers attempts to write to /proc- bump to v2.28- bump to v2.24- Resolves: #1469792 - built @origin/RHEL-1.12 commit ba103ac- Resolves: #1469661 - bump to v2.21 - built commit 333854a- Resolves: #1463549 - built commit 532fa20- rebase- update release tag to isolate from 7.3- Fix mcs transition problem on stdin/stdout/stderr - Add labels for CRI-O - Allow containers to use tunnel sockets- Resolves: #1451289 - rebase to v2.15 - built @origin/RHEL-1.12 commit 583ca40- Make sure we have a late enough version of policycoreutils- Update to the latest container-selinux patch from upstream - Label files under /usr/libexec/lxc as container_runtime_exec_t - Give container_t access to XFRM sockets - Allow spc_t to dbus chat with init system - Allow containers to read cgroup configuration mounted into a container- Resolves: #1425574 - built commit 79a6d70- Resolves: #1420591 - built @origin/RHEL-1.12 commit 8f876c4- built @origin/RHEL-1.12 commit 33cb78b-- built origin/RHEL-1.12 commit 21dd37b- correct version-release in changelog entries- Add typebounds statement for container_t from container_runtime_t - We should only label runc not runc*- Fix labeling on /usr/bin/runc.* - Add sandbox_net_domain access to container.te - Remove containers ability to look at /etc content- use upstream's RHEL-1.12 branch, commit 56c32da for CentOS 7- properly disable docker module in %post- depend on selinux-policy-targeted - relabel docker-latest* files as well- bump to v2.2 - additional labeling for ocid- install policy at level 200 - From: Dan Walsh - Resolves: #1406517 - bump to v2.0 (first upload to Fedora as a standalone package) - include projectatomic/RHEL-1.12 branch commit for building on centos/rhel- new package (separated from docker)/bin/sh/bin/shcontainer-selinuxdocker-selinux2:2.42-1.gitad8f0f7.el72:2.42-1.gitad8f0f7.el72:2.42-1.gitad8f0f7.el7 2:1.12.5-142:1.12.4-28container-selinux-2.42README.mddevelincludeservicescontainer.ifpackagescontainer.pp.bz2/usr/share/doc//usr/share/doc/container-selinux-2.42//usr/share/selinux//usr/share/selinux/devel//usr/share/selinux/devel/include//usr/share/selinux/devel/include/services//usr/share/selinux/packages/-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -m64 -mtune=genericdrpmxz2noarch-redhat-linux-gnudirectoryASCII text?7zXZ !#,TjO]"k%xĉNμ5#+mz qw+Es2#Qbg}Yѻ+s]K&Bmn~8 > 8[E{nbIQK<@aLb2rG]XCYŧGz񟱔풏UEO$U&<(J'eZgȉa,B.sehd(Д#sowA! w(,,*c/ۺR.]0^pҝ@*7-E1XI%s$ k?+]pfŪR骗Wl QBHNm߻e8ٖIlNdn!vQV [Kz;=k'{H︯׎v-d\JCSN2d@/ހS̗ͦ w]|m'Y!.my4gHH1 )rw xڄǎ/gԍf`i'eXD ^vrT+*au8 :}m|h2BbYAXzt!XUU]\@ ; \B-"mIbUdK*XBB-8յKd|6TBVj;Sk;|inUfgYJ\# >,vss-lW<$;xTO!dxn} xQLj}(l^^7b.SY( }A$2n©b v\X ~P9AbaM4=X>j<^d.@~t _)KaBZ" P|r,wm} KIM¨+ifX9@Q=#ϯ%DqXv:ڴs (:5Ϯ'Z\2&Q>KsLGikoA$0@R3Ȟ%TU]skw6wW Pe!T|ԕ^[ ]AO],+F2mMLwj|,d/;mȍ 6Vo7& e(LgR0]{iLÒ͢_J [|k8ΓM𕳍-'%1mGI1__/h-GPW#<+skVmnGp[|ۓ媣 ʵ2W>8Q^}5/mˮ!39X^]La OG޿kvx%K/G i?zV!:0v]d˲ %٩e& \F9B=)$af|ރIuhI-:N=Hqx1x$p^d,-ebtJ vVDEڙ⼣;?>AL* Z}h]l ^Wvm VLPM)8wU">K5uxF4'=Ix۽TlfK̲5Z))Tss5hlouR-_&v6v+sժw;.ugzU-.AF 'ZSߥ]5D=$'RfY[,گ7 WƢ:  oUj]#UЃ{Vy"7$k)F-LUPE\ڙ0B7ӫC Ơ/G_3[߁Ewt\DY)A&2)9iv'=H="VxI3hf'v`t4RpĮFgʎ +]YN7q1E‘b/ˬCAp8--X^/$Wsjֽ%p*]>Reg\ʪ 0l/:6Ym1:vBw37ZGs/-?CuUC^vRJ;rM/9hDmu\$],:3Y괾ޥUjNJ&ްƻ؇gt;G(|=lGKs]њ\g ?k(A yuQy2{29_<{x 났VF-d!%gXP+:wͫ |&%v'{' p]w~xJmpo)iU=a?QÎث{|({ V8|R\!긷{l z=4D!_k/};U͝ ݂S7U ]U1Rq@?40jӬS:Mj19Y9'F'W܇Y[gj jZ^JZ<29$I%owU[ ĈIF9zxFd釲[O$(^Ҟ}k8'Hmv{'._*:&YA+/v|dj GJ@]B@E㶹*- FH\֛ շ4ʐH4kq `߀Dܳ#X0$'2,`拏><|q,%:«-?z!D ^Gq=Pa3 ̆t+0 MNaYFja.s:wzdQ<ز"-R݁E bMZyƑvlU&J$l;mMJ/pHEHQٺ=n h/ͭ>eUǰݙ?[S:+=6k.ٔsKVq41{K+>S%cĴu5_r3gK9#qmD=y+!feiB4#J gI }IF/QBGyYw)1yڈ/a>떼dEs%5-N}9޷aYj Lc?+h$ [# JoX/M\V~$ ľ E xf }sFM #LuZ9bh+Kp>&?~kXMN S՛5P:XBő6jBi+ 7h#|pű cx"}nas_?jT3gvxlKm;4J|H B8"FĐǏSN#FBU(8)ȣL_?jC0oƕݣ:5)FhrL"et&FʹP JmG⥖?j%f^$m6~7v>[B%?VZYV~Vc莲4c[wF, @#VzLPq %Z΁&H 3\WI8',_/dW2]Gb!Q:#ͮ%i,sV Fx\p!&j[^F KSkP/܈_5e2pL6flU9Z ܮ} tRzuZpD:IsF8uWjpiFzٻ:cc0=(qAIQӘBX>PSssTomߜ6Q E!|),. Cި m}p=2MbpUQ ȆFbP0@t.7D yI\Lwf[:9D^rYki39kFg`]+Ota|Xc |'cQoarh5j4Q<:\;e0r*0X&drâ +\;E+UcbV5"ZEPCK "",jxdG?&=g ?s P@PQ \v}ʯr(9}0&Cm)8Zm'BkDg$=ZwG{?i'oA^tOT@.|a`mv<.P7rG~[ZX Q\1/ 5ܨ^ z* )lO‚QsP'YG.nCtSJo,,"Y-3~YE(5FTbXŋN&6V惮 ^T 9w)a>_K?Kfhw-V^Ψ=> X$h3 knYxxo<2:n8Mt9oQ$ьAE: SBl/5NcghD9n|$UKCC:~1JB0 5G* ?}?9J mLh!IJ~0&i50%CNř\jB8RhЖl8QDD}~CQkϟ$L@o{-^%>_ap8 eڋfW|52Ped n3np]X8X=oS})Y"SQZY-fpƍy WE4 f"qq!c!UP<1}V;#!K{Si&y^!ѣ2:~|/źS SY<gzu;@d%7TwaB=bŤ-LVR,-!NpG_Tڄ]h z&V(P諮/͞@$ ~tANԞES] VS'0K; ̒%GSxK&Mm} ^d&>'ÁLgX ܑX,&ρ Fp%i>KۊdpVY|n6He8@0@@pKJkbPL!C(lTf 9rjOw%P39<4sB?C OHjh|rjq BƳ奆cЇ6Ԕ u3f"vlVb|7nD 5I(qѵcNަ;$MHd :PrဎE`]p"SR J\{i@'MJndL6j 95.YH+I}0:>tڹgz ˕"8CAҦ֥DR?y*WtLÓT.vU7qGdoTCٺJpNGhbhm?J\o!&%e+08B|q]7Vq ]}ɲV ¯msB@o%xc{q5'l!cV%=[33{Wi:Ȍ-f}Ŵ+IWBWqIkGT;[(LXrUmq GB#^B!R }yoe 4JWo7.Z uZQuVs 5fCMq@L1;fI9:-Yf3_X]s>t2!^.eTfvܴbl9S&PJ<syq=/Gu!ȠfjG`ACO侖|bLU9pV9;-"3ׂ t5l"<:LnM]H#9-SS7 BwQH[eݏgsq!r86R~ôeӁ>WZo*1eR1rӎ9;tB45?o0QkaЄ7dMQp#c= 8h&5,|1ж7eD',A%gݑ,m ~+Ev^m+7n/Eϑj~HέPkӪVJ.+MbH*qUdG?<&j29Ƴ(Wδ%h.Rsn'#dtE;Vq`P *地8_uA(sz1@a2&#W\y˿)"(~3O{bQ/bHV^ˤ]`l5]\th0Ioxt\faT|*ccY9 KHCa?ꥈBs/U'K'Nl4TC|&ɨ~g)FF#3+:jU~1 (|(Zh`~s]p>e  ^@x9TCHoK` >~5 1j.yLfRt@)r|`*,5J*̧e@Hh?z)|J*f?KD6D|1x] n G .]~ '! Kh)'^( l:obm7Oˀ0TXrHEr'Ldnςqpu}O^t0,jc&  hƁ#ŦQP̤OT wgf8LP`1G,,YY*8 dpu /p|5]e`u13M-Q6BR-Ert62d$W7LRG]5_},A\keavLЁ-I3IR^D!XRMΰNMt}y7ͫi:V |v‡ xL;1~(Xi 7Q]3`d2 7p"Cp@`Yu a%gvȏb gQJAVüm:/͙ea`!WW䌱Inw_7jg]ba[xp6^Kj3~A'ӣT$'6Q"(=~K5r3N afXVM <ʘ%ᇡ3Ӛ~B~3Byfb\g1k&yǞפ;_~kք=TDv ۱UȽ?\#4X7SYߺ0s`v"uNqM<> 0Z3?Z} Cwv  )?\no=ߪ?wkDl;{ >{IwUoEiC[P*Ȁ-NuI|oyD^5݃ջ{ xlUE9%3ld`Ebӗ-zjko{G"ʯ<;>+uhP%X}K!0VXG4":'Y ] 9F!:%k@qh~Buo1&um3Psm&t R$~{ fqOYG |O򥾍¯ wm,TFAk:!7̯o^\q>ĩҋ\C^`lW8`^#)c{){2ի`5 TL60sHvr8I)˕vzk/iryi(_Q(Rq,D ؔ = ./i/td$[~pH,ZEǒf/ ."l4fSW\\S<:u]ֺZmM1 KfFoh#B cTEe!aa aFu;)`xj9хL2a4{J~V.5Qv0Ԡ <j,$0(a\*@sRfpt}SYp&CCV)=}]׆~ؔ:V8%!HaP%4+v\iNR׻Q\(l]X2 5{p5C$W, ~f>D >Sgt{4BBe'սDmׅZ2بBo0 ,O'x*?R-q#ij=3{>NsX)lr1)O1e,E{M A޵5 G.a|PXewW*q0&fL%W"1G.˼nt#qe,S>`ZzKoVo ݻsg^*t+ڢWG@sFByZc\w% _9Go]8D`W"rKh}~)O>_FL!ˀ*uLi!D+*2IYnZ G7 E/J˜+:m:ɶŏ}0U=wS?f|)'yls+X}?p(LGbTs7- fKdɳyCNo0xL}:r=̘;oJ٥Z(]0. -b ]xp,|H}N젎iDRD>}df 敫߉U|IXf!XLfPW7+5?k"ǪXz̅_ U=ZgE[hW'b{Rܑf)ZJqSUs4JEx GH=~b%=V VrWo摢s2)) t&|~~oZY5JlX>v)eE5rLN0(XsٴP.#>xF2M u4ˤ@A+ʨ> ^RHqbɠﷷP5Hzvʺ8Q_Vs .زυsӴSs6͛*!/Mz:Z-lR3WzA`_B[ 7zcqzv6ܙ .< 8jkQxzzI,>Qv!RUԈA/G;#.'Am5l<\lL;ߜT艣\^4hY{bof*F80k6f? @M2b9*mR"u"%P~"GnTuM4/\MO [Ԗ1[ߋ5o#֟VLaVW0Q|\ng)b3I | B56R>`m嫣4hPK?eX#UsLMV>N2X0ZX7dId IRGna|gG!]is =~æs<\:GQ;d gbE x*6OMXy5^ $~{T =S-@\^@nč99{]] E {txl.`q.wSkVQQ5}1=^'_{6-.> ޯhb- 4*4ȯOM էډwBOr%n[\R9 TZVGr{'Xн'ݬ HKŞ-Y)f=Gemeep{% js<5;6? 8AQ>ւ1=B ~W58xVAbާfn#nr#R+_xm06IRd6QQM:#C(3 ɝ Nw;5qhR#܄g7!(Pd W9}ܣFT _rUs^1֘>ֆ76gfU'M3fjʯ2Zg!pRju@x7d*OR=mK%)?!Zklҁ+H2?@ !,fa& MWFYYTiG_0srSkM/s)bݑOdPS aY*@?D 0JΆº^Y}60\%M\yfFj| V;9)vݵI.+U0:J9ݦƁg7WNS0۪#X߄#wŸ36Ͽ[rce $#p9v|WqC,Us6%Wò:ËbP\;Y!KBhzxHqǑr~,BԖw6BRW9A85#JGX8wcNsXgփts$sj_4ST&f{`rJN; 6sAf `3͂q6qc{[M@LVHkJD;)0p('c 0ф`%T?3<2]2ЌVD43LqR_| "D6vJWQp;Muz4&L*yO!hjͫ>*:\ EEL|P/5|=VfYĦƒ@Oɾ/&#;J& w3ܒ`e; =7qDX;)Qq LD^U-f&W'R~|`[H'DSZ-vd@[HL@|Y20]wx+c]枨|u,pJkՍ[Ƭ<!z9G9&MKUzF_^u$}p;>@S)6 fi$&:ghavݨvm&|ڮFIYS ޶~gYa@`Eðn{rx$>b˷U Ckh0ZƊscbv "r_^c*:b Xي%%. diZpt~mi&?Ldyݽ 4 -r@uLmΔ}nsMq4rO{%Gbai ;jJ]c=0o|ܠqif# %7.fDۛfR"u@e~n^4h<݀dX~oޑ_zT Uŧ\wׂ1޴dDk=e;uoMy:NKf-BzGŒ ƒ)A0temWp|S2ZǚjC'6c-m5&?b+Iy,Zdk|@g!i[ߣʋjmf;m>Z p%+!6Aۏ:+<aRtz7s =alU*»z[S2$#6K94[$rh{E }J]!M5]U #p<9:#4qv/}  md2-xěB8OELEQ&`D DE@;GŦXWv#6m!1|E c_\xsE4H.n_jK"_9+$+]1M MV`ƱTY8 ݶbO$ P\;of؀I&/[V%Z +|cˆ4eͦqee[ےL &#ijN69zrogO@48ܷUed̏l7@}rWl URUΤT.j]V朄_QulU='Cqvd4?1QHza], hW%K!IR+ymՀ/S,[Y tw&cqq3$"QO_0C[R8߸njB$"PĬz4cFX;~3iA@jZ`sv˧d8JrZtóUQHwƥriHpdz^#wQMUv0ૌ27r߉06k9؂уn#wYMQ6○V{ A@G.>5">W! 9OǸW]"RХ eb?:DSiЅ%Ru~X =|ܱ5*\ᦀ5Hmρ.˖}pk'k]ai=Qצ%UXdK_tRص Ek]xExx, |4x m#XGX&WtMQIN]J\ u2wcyRj0U/XfnfɕKcL;ғFh [J:\MA˨yi;!W]P֝gBݱY;JcAٶҚ@8!9AF5 ( ćNwQIU`=.kEbBX;.xr ҆A8tR, -m_Z>j x5U>Z_5^j)X*m6AӅ 4͏$~,rZ렙CZ&[} 2'1(%٬{ަH6Zww&c8# ͼmij~\/9G K_G.m5$qÙHRkPfH-R=!sے^-4t3(5.&&]lMZyw2 @Xoc OB :D.r\&I7ۦd&b̃AS ^QUG9^uՃb6Od$[q&rñ8Zfr7nW @I^ ZF﹙fN7gqŖP=#eN "0>g*,%DVq<_7 Z,Fe3vQ_L"^E7]T4)bI4 3cp]N߮s4 >. c(Ik5_3$urss ]"1y"pgl o&;+rEgH{aK9f-})lu@+:?MekDط ӥ%0YT'b㵻 #s";\6SKcJxC,nQ_5 K9KM1O`}yc;,?;8q}l̡wxk^ p[A՘6㌥cOkwcV/.ꦕW xނUBT#lm+pF\5\ʃʰstE:ŒQހ]=/n^WJvv|.=7e_qt 6E  =Fo^f\$)BMDT20wW GA}*We#'tbWlb`HT$4[|]TgL/ Eɒq|?S}Q1WC 7xbߌl< 1H'1MtsRΆDXR,ƩflbYf @U4cUH-,x=$~(x9ޜ4 ʫE%f>S=#c|n6RU-܎s+te:) o_ٻG$-늿;g}t&,7zXg@/hQPcOVxFr:? AfKS!}!( ^;;l/5^9]\{^R)0ǕN@G/= ÄD,F<){\;[R Uȓȃ=6lqJyl9|}WU#W2Xܰk[4VeĥE&%ZJW!)|,+=24cSˉlN^ ȭC 2{E_nVK4U*BrѝKF1OMuE ;: 4Mf=pGMt{" @WR? z,7+ZRf R"U'ߡQHN48Y4w?"O̒iLDc{[^Э U[`O@lS0I?T<}K7W}.9 x ͇aeД1j*<1}T'x[bR>0=^r݃&\mlk@\G䛳*{{C`w[EYnHr׾2rt-]< Y(!M Q