container-selinux-2:2.55-1.el7$>![5|N>?'?'td  $ L ")?       4 \ |   ( 8 09 0:0>#@#B#G#H$I$<X$DY$PZ$x[$\$]$^%b%d&e&f&l&t&u&v'w'0x'P'pCcontainer-selinux2.551.el7SELinux policies for container runtimesSELinux policy modules for use with container runtimes.Zx86-01.bsys.centos.orgoCentOSGPLv2CentOS BuildSystem Unspecifiedhttps://github.com/projectatomic/container-selinuxlinuxnoarch# Install all modules in a single transaction if [ $1 -eq 1 ]; then /usr/sbin/setsebool -P -N virt_use_nfs=1 virt_sandbox_use_all_caps=1 fi export MODULES=""; for x in container; do MODULES+=/usr/share/selinux/packages/$x.pp.bz2; MODULES+=" "; done; /usr/sbin/semodule -n -s targeted -r container 2> /dev/null /usr/sbin/semodule -n -s targeted -d docker 2> /dev/null /usr/sbin/semodule -n -s targeted -d gear 2> /dev/null /usr/sbin/semodule -n -X 200 -s targeted -i $MODULES > /dev/null if /usr/sbin/selinuxenabled ; then /usr/sbin/load_policy /usr/sbin/restorecon -R /usr/bin/docker* /var/run/containerd.sock /var/run/docker.sock /var/run/docker.pid /etc/docker /var/log/docker /var/log/lxc /var/lock/lxc /usr/lib/systemd/system/docker.service /usr/lib/systemd/system/docker-containerd.service /usr/lib/systemd/system/docker-latest.service /usr/lib/systemd/system/docker-latest-containerd.service /etc/docker /usr/libexec/docker* &> /dev/null || : if [ $1 -eq 1 ]; then restorecon -R /var/lib/docker &> /dev/null || : fi fiif [ $1 -eq 0 ]; then /usr/sbin/semodule -n -r container docker &> /dev/null || : if /usr/sbin/selinuxenabled ; then /usr/sbin/load_policy /usr/sbin/restorecon -R /usr/bin/docker* /var/run/containerd.sock /var/run/docker.sock /var/run/docker.pid /etc/docker /var/log/docker /var/log/lxc /var/lock/lxc /usr/lib/systemd/system/docker.service /usr/lib/systemd/system/docker-containerd.service /usr/lib/systemd/system/docker-latest.service /usr/lib/systemd/system/docker-latest-containerd.service /etc/docker /usr/libexec/docker* &> /dev/null || : fi fi #define license tag if not already defined&>PlA큤AAA큤A큤ZZ=ZZZZ=ZZ093be781f9916163b4f01d3f7edd672d735d3d8347b5aa643cfa3c58057c6d5d97d35871d6dcbbeddc0e5d72140fac6e392d5576c1c630518591023309742ba43e407b3cfd77fbb58ce25a41839c9d399027ce6dd3298e8ae81b054c734011d7rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootcontainer-selinux-2.55-1.el7.src.rpmcontainer-selinuxdocker-engine-selinuxdocker-selinux       /bin/sh/bin/shlibselinux-utilspolicycoreutilspolicycoreutils-pythonrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)selinux-policyselinux-policy-baseselinux-policy-targetedrpmlib(PayloadIsXz)2.5-113.0.4-14.6.0-14.0-13.13.1-1833.13.1-1833.13.1-1835.2-14.11.3ZZ%Z%Z@Z - 2.55-1Dan Walsh - 2.52-1Dan Walsh - 2.51-1Dan Walsh - 2.50-1Dan Walsh - 2.49-1Dan Walsh - 2.48-1Dan Walsh - 2.41-1Dan Walsh - 2.40-1Dan Walsh - 2.39-1Dan Walsh - 2.38-1Dan Walsh - 2.37-1Dan Walsh - 2.36-1Dan Walsh - 2.35-1Dan Walsh - 2.34-1Dan Walsh - 2.33-1Dan Walsh - 2.32-1Dan Walsh - 2.31-1Dan Walsh - 2.29-1Dan Walsh - 2.28-1Dan Walsh - 2.27-1Dan Walsh - 2.24-1Dan Walsh - 2.23-1Dan Walsh - 2.22-1Troy Dawson - 2.21-3Fedora Release Engineering - 2:2.21-2Dan Walsh - 2.21-1Dan Walsh - 2.20-2Dan Walsh - 2.20-1Lokesh Mandvekar - 2:2.19-2.1Dan Walsh - 2:2.19-1Lokesh Mandvekar - 2:2.15-1.1Dan Walsh - 2:2.10-2.1Dan Walsh - 2:2.10-1Lokesh Mandvekar - 2:2.9-4Lokesh Mandvekar - 2:2.9-3Lokesh Mandvekar - 2:2.9-2Lokesh Mandvekar - 2:2.8-2Lokesh Mandvekar - 2:2.7-1Lokesh Mandvekar - 2:2.4-2Dan Walsh - 2:2.4-1Dan Walsh - 2:2.3-1Lokesh Mandvekar - 2:2.2-4Jonathan Lebon - 2:2.2-3Lokesh Mandvekar - 2:2.2-2Lokesh Mandvekar - 2:2.2-1Lokesh Mandvekar - 2:2.0-2Lokesh Mandvekar - 2:2.0-1Lokesh Mandvekar - 2:1.12.4-29Allow iptables to read container state Dontaudit attempts from containers to write to /proc/self Allow spc_t to change attributes on container_runtime_t fifo files- Add better support for writing custom selinux policy for customer container domains.- Allow shell_exec_t as a container_runtime_t entrypoint- Allow bin_t as a container_runtime_t entrypoint- Add support for MLS running container runtimes - Add missing allow rules for running systemd in a container- Update policy to match master branch - Remove typebounds and replace with nnp_transition and nosuid_transition calls- Add support to nnp_transition for container domains - Eliminates need for typebounds.- Allow container_runtime_t to use user ttys - Fixes bounds check for container_t- Allow container runtimes to use interited terminals. This helps satisfy the bounds check of container_t versus container_runtime_t.- Allow container runtimes to mmap container_file_t devices - Add labeling for rhel push plugin- Allow containers to use inherited ttys - Allow ostree to handle labels under /var/lib/containers/ostree- Allow containers to relabelto/from all file types to container_file_t- Allow container to map chr_files labeled container_file_t- Dontaudit container processes getattr on kernel file systems- Allow containers to read /etc/resolv.conf and /etc/hosts if volume - mounted into container.- Make sure users creating content in /var/lib with right labels- Allow the container runtime to dbus chat with dnsmasq - add dontaudit rules for container trying to write to /proc- Add support for lxcd - Add support for labeling of tmpfs storage created within a container.- Allow a container to umount a container_file_t filesystem- Allow container runtimes to work with the netfilter sockets - Allow container_file_t to be an entrypoint for VM's - Allow spc_t domains to transition to svirt_t- Make sure container_runtime_t has all access of container_t- Allow container runtimes to create sockets in tmp dirs- Add additonal support for crio labeling.- Fixup spec file conditionals- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- Allow containers to execmod on container_share_t files.- Relabel runc and crio executables- Allow container processes to getsession- update release tag to isolate from 7.3- Fix mcs transition problem on stdin/stdout/stderr - Add labels for CRI-O - Allow containers to use tunnel sockets- Resolves: #1451289 - rebase to v2.15 - built @origin/RHEL-1.12 commit 583ca40- Make sure we have a late enough version of policycoreutils- Update to the latest container-selinux patch from upstream - Label files under /usr/libexec/lxc as container_runtime_exec_t - Give container_t access to XFRM sockets - Allow spc_t to dbus chat with init system - Allow containers to read cgroup configuration mounted into a container- Resolves: #1425574 - built commit 79a6d70- Resolves: #1420591 - built @origin/RHEL-1.12 commit 8f876c4- built @origin/RHEL-1.12 commit 33cb78b-- built origin/RHEL-1.12 commit 21dd37b- correct version-release in changelog entries- Add typebounds statement for container_t from container_runtime_t - We should only label runc not runc*- Fix labeling on /usr/bin/runc.* - Add sandbox_net_domain access to container.te - Remove containers ability to look at /etc content- use upstream's RHEL-1.12 branch, commit 56c32da for CentOS 7- properly disable docker module in %post- depend on selinux-policy-targeted - relabel docker-latest* files as well- bump to v2.2 - additional labeling for ocid- install policy at level 200 - From: Dan Walsh - Resolves: #1406517 - bump to v2.0 (first upload to Fedora as a standalone package) - include projectatomic/RHEL-1.12 branch commit for building on centos/rhel- new package (separated from docker)/bin/sh/bin/shcontainer-selinuxdocker-selinux2:2.55-1.el72:2.55-1.el72:2.55-1.el7 2:1.12.5-142:1.12.4-28container-selinux-2.55README.mddevelincludeservicescontainer.ifpackagescontainer.pp.bz2/usr/share/doc//usr/share/doc/container-selinux-2.55//usr/share/selinux//usr/share/selinux/devel//usr/share/selinux/devel/include//usr/share/selinux/devel/include/services//usr/share/selinux/packages/-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -m32 -march=x86-64 -mtune=generic -mfpmath=sse -fasynchronous-unwind-tablesdrpmxz2noarch-redhat-linux-gnudirectoryASCII text?7zXZ !#,XS#]"k%xĉNμ5#+mz q{@gPȃFG=uǝ<%Пv!8)级}֨:*ZF o>fȻ@}׿ Y]X%,pv +"ƨ Mn0#[AXiu`daV1 'AJ6S^ĩAtoNGڑTBlp5zW`t!Ч"/#;Q-i| ѝI[ XHq?1(^J#Cd9^MuAw=8(ҝfʢ+cxkP奏ߙJ>>xZjeVIbv؄xި*DT0z_A/N>4|f3HȘW8!åܙ!Ի 4j;k2mFQMkɭ;܌绢">$#韠_ܚ1O> ._/^3BfEQpudNg4*nhxZEY~B 0Yت W($gs_QZ.N0<9+ɫU ;/Y!_)8fIJDZplEjnKCSL?7zL'--+`[vn}\UFl:5ͤόa_9=Ae ^1WH KDXFsͰVAvZZϭ{XhC)y}_X]m 5GmɍyC͓,}-A1@Gcr#>)s '3høYF +UYI^y3sp4j|)\K׶DS0on M'lO-ftqfq5#~xR[^IC nvM$l6,xoiX8XD>KwCE ҍ$Ty5c`% 1HP@"</vdxQ`XNX <_&u)WPoTNY؜ϭn䃖;3 2s_}pz@EsBCYgc-_.#u?=ZR^5!!NHoXvh5qd,Q؏afܚ7~!-'å&PqZV*fM-+8NesK>iN^j!D*֛Oʡ1#oxDž/'OY0V>ހM ~m%EX8(<< 66|Ō/8 t=7I}ܪ2Z! OM1+ZƿGK& D_G W]&=9"ԄlS'Zj8 W@{ ٯf2wXII\N5JEY[Dem_׮N>CBR78 ]ARXkb 5["R4!T_(k~GF.ԅ17nկ G]p.GDd@皸9w~AW7^w;+9`@fa[!<Ͽ7 r}^IPϖjι;je+8ۛrظݤr ׋$>f2YjNұz>I@2$>~W+_o3FdӮij+7_8FЪw;$aȪ3;t=S-R!jBnZWk&*%#YoDym UkҧO7֟9; | v &eX+n٢ Y`j|Ya6)SߪK .k;IM嚼t92w5|*3 _ \IsJۨ\+/+]|y4J`!_p"ޅ/cV!{k΂tӆ4=$.gSʄ _sl9d`ӊ>b?9$`0FO";7`E3Y-[60ל^,7=/ث *Riqdv >?bF :)!&('*NMxӑ7; Y ` /g(R#`c`Cq"81f:br\jT{2s4tu]#A5fo8]XIJR=3Pg@ M^U9Pն|gE];2W"݅0rm"m5.L죽m Lui};HLq9S^{ʚ%G[< $ p^lI5uVP,6npqFb >ٮ8ŮH㸈ġ#*{S0fcH35#훺͎}aTs6hY."Eq#ƃRU%tȞVt*V M;{4L1Z;C?SN n#נ. lCGr=[LdXr).4!Yk ⌠an5 Bă3[,%u"s*DžH#(8v@'g;l, },*ag[ZT+d2ƻí,נ!bzG=ʷ𤛭2|Ǡz!ʗNݎK~Y.3(Ǝ 74kftc4pơ3][m؄VljpnXѲ+7^Y`)bZGxp?_h#S2HM?S힓ϼE rB5j3ї= sݬW8Mgŝ*>nM͔i};jʽ8rWo45;0ǺWIFx"`j;I>I1c(ҖjK<1[0fQ#ur'8i偑_C9sqΛ֊fۜЮh"~D bT6fLᮟiC;!`^x,jyO_ w3|st #U29D*P@ @=Jݍ:q\3]xDc}gxs꾮Lu/m4/. b0ȅ}WD[%D~(Rm{jxI Dd>1(۰Pp3(vTYQ $: 2S~J%`hQf*-:/QbfRs`!4\KY.6*>(lן-0RWǺL 1CB阫! :ҕW>7[o|7AFܯ\Kܛ*uvu;tjAj܃'|b~a^Ik"UEOb#ߍ-  T+.'P_l̖~i+ ܹͦ -D[[MX 1ͲaVKu ̆NL:M[%%Di[m y 'BF_0ׯ=QaҒN3srEII6\ę2ZqI54,+cԟl'(̷.:P]0rB9\&{v'>xN' Q_xg7Gm7ZZi%$./&Oʰ1?s1  jDt,EP Q\MGikO`1->dY C?~oYwP гN*2etw;yMWvLj/rCf밝SP9Z5.is^0X+m>=:Z]3;*MA!1DbdV ȿYEYD# %"Nհ !H-.t2*Ve'Ȩ{ʏijd.m##vHIN8Z2)X<`OWy _Bl]rCs 1a: /r#M8iq*Enj;^jbN}^y}e )8ssRf6E'ŔtF?"V?~p`Bln_@ AC8(RMܩgrʼ## ہFA#%Ѭ 0AttP?R7(+A9owWp|?0 \  d1li(ߊR5*]%`3"9g0%r,㗓|3Pq̄P ?i:s=0817jPŰwwg1;@Tئ&@p,`UVlB16!c?o]Z8){AUJN ׃!RXQh54y) 輜2A4zV "ܘ[Bsa\'1gǑZ@.c(pٲ۱ ))q4ɣ{ v )c93VxO{^Aj'ʒee}W1H?uB+=UrV- q{M[R-p⇌H<4ux0h&Qe65 k@q Ym ΎkЍEXNtY7Ɨӹex;Bd+o[z6Fca5Y@8:fQ|4.K˯)&qmh>\`V8[SpQA ͣVlqTt43W1 4S9[>C7n6cb[Z{Ի|?{z'lxGɮى3 I7 vAk|vR79$ 4=jL.#(Bstó#o^Au<^[*]7 ]:n 1:H}{G=b<22{uL0EBT-6TܣLyH_O\I(mû+ʫjv4\̥g\{gW 9Ǎ!NUuşN.740RU#ލidp_ٔW!`Y~xu9]4jT8|G%A%P =x);Ho0<*S 9x!S'2Fћ-x. /X^8 R3D["5^ߣ|AAxz4~TMŹ]I#d=/7|*DHXbO;ߪǦ WM2rM4b<ΰI j.f lnx#>ڼe(G6mc}_cǡbTs C|F ImIݖ,#Iu]rFu T\Fn$kOT87f4Fֿv#nG GaLM/"쾦q"<*)Y!})cg*!hE)0G/cйg>?ʵ"M<$SB wd#86lkiJDG8ٝ\S9'd)vsƷՎii^6wՄQ[R?ͅtA'͏lU#5& 5݃jWZ4oV 3K55 A{RkÅγr&0 F+!~#MP JAF#13s::/\}x~ax,f[Vƿ%6>Z#WQxs&nK Wt2S({.EroSշ,%ηyh0G[!xo ):AEȅ&s qS Gfޱȵ0Ӹx5uq{^hӾ07ܔz&eT?"Ih5[rg&qu`IFkڰYֹZzLmStI'"t:I47mãby3_},yB.YB]W016L9>^v4a!ҼA̐_GS\_$F0 ?%S(Vj0^-pK 7g}AXh_Q?Z*VIWyb?Ȕv i!H;G2[1~1lP3H8e(Y-k }](n$[ϨCPTf k#vDx}W}z69Vꢰl5@+sV@ǚMOi ?I?#%`LWoS5FZ\3iq&2ICӔ$0~}0j&4@Hi$(BD_(qV%Aee/HL[ 'a]j1n;jy>jth% "б{*%M83b  E p;{֞${Q(_$Yef4ې[:k'fC6:{g}m;XX )mq̾\&~ X Zę2pYLj 4qɁC)/ 䜗'ci_>'&RWÌ"uI:eSqTVi4t!v=tEOj1=*5a-oC1H-(=?Kϟw8lݬvt9'8pU{/QCc+2"5h$tB79*XQ 6r9ά', -d/40p%zRW'?r/?1դ~k.`:/{Z^U eg 4iP'z&ʢ :Dq?{@aSP)TePvOSqh|=>էLOtСmMJ@eh%u~i8Wmf)DNihuOM5=/H z6ruKؘ/5~h78dV7:tK$ EWVaíg@(X .pj̀W5䘀oX݈Qɰ' 0x7sO欀u:Vu[:@)i-^PΑʢD )a[\>L6'_ =n9_*6'z a><;[ກ$2 &^67?´0hEv%(b #- mN`UUA-v4A^b^cz}jl>ܱ%7_';yĮn |>7Uu.\R48giVx]kyIyr7N'M]-nAO q#L㩡^bȐ{=7edE ]/j@mU'guנMU(##P"4NCLqykY_]eQS+Hwxݕ)8)JLeSjG5Ü8ߑM"+դ/8iD6MHhC*wx#Xpc1f~6"J,F XE3g0V DkSb_n f~sBPrs7 ƶub3LFi=A3IЁHH ^@ksE35ƅ9_4G O@+zةQW-OtW6Yu; ºDb3%npqcHdc5aoxfEݭ:V=$h-9ɛ[VMCIkqGn.aAP, ĽE+rpؖȝzOZt;HPُЧ9v FD>܋j+%c2,ۈC)IkKL׷"n|Y%pY=;ӎR9KtjH( IƎ7-]]h''P30d5Wݑ!*D"Fq` 'ݍY*vAZly\]w6W[vWf$a#lc+`,pŔ5,؛&L{k|+20 DH:܌,Xv fu^f2Ma,ї2~z k{!`h>MCEl6ˋ" x.t%=/h'o&-m+(2X?31IY~62hDU xDb>l1e֩oVVDx"5臀 $sʍP&Sܣĭ-+SmSHH1*̇2aYQ†s#-Bj|pg89'cds;Md? V;@tm3i4er?m]V`fᝓZ,jKu;xDqM^,&&IuիѢВy->{:]!b~JPN; l8>fKa2W TןU\~"qEc@EE-1y}j $UmDK˝ `A!ҸZW[&u͵tu_G^yj_]ϦӺ_^=REV!nc 1Af1󜤽:x:^ߦ۫ %ψmh;uSvB3eiuȲSz4%|jQy/Mb1VJ'3;w4 22를MoG%tW7H?t g#^v-q9(ege R*P$v2)0lzq<.sF)&KunK7WM {n#VxP|(U1~lI4-&0< #~O馝N!c)%jzI1C+,Q2>Bj&0(TY= м?*n/ъ)Tyx\fY{!|V᛺qAfÐBqk?B[gۜMJ;~(q]CuQf{|>BP>Pĥ H1LO'o3%KL'Om24W.>x$3l2O `Cui{ u bܩ.T"mժ./=ː="aw|0IYxw"(#QϹ+QCDX?g=*)CmJvmCEzFK˃E`.wΓ׬V76YBAMhG)uxjBL+·l ϖ1x>gp+ x]\i+/<[-9mh *bڑQPnGZgHBr-B,1>Zy1³Bj)R˴Y9W܃&i z8`` Ӿ@,tv1gr,&{P zS;+x4Rx;a5)a̡%"7ua]va'KjNF,-_#kKV ͚yEoPD&2\@xyGш=4MqcөqCCMFX)Zv8 dM)MT(R r  [vQX7vEGF/wV8(mg]zª p%is W_cĆ420H[$kG֢@_ukE%:jeqxIXq^^)sʄap*ޯ:'И>5r(ihuZ+w_/UW_8;C;/*bnr%də8 D,xe,L rY"$RufA%wre-ѭt%4$Z>f~}4=\ k7G fMK 4V}2$4OîrMr0;{Xt`8S}*$BcTKdJ*B;hQcx +vS=1 TT7ͷMH`q}R~ӕp$Aᒅ Oy.)\n\"UN ]z=HyQ]귃REvK(Mo< $ڷL}qH+Ic8=iD炴L,#מ*#"̂\1Pc_3|A0)"(pjsJ0"*tZ-ۉܔE`2^hiw?xNUCG8hm]']8nuQfBxʣ2`\+'?]>O}y֜w^'Ņ~(뚬z,َ&u"j;/S8t.CwHBR%?Q۫RaM;/F355-GmJa7Ż{6H2jB_ ;DQ8rRAx;\@!5]eAS0nQ\M @xn^Z#5g[YѶ]F}:=K% 9௏ U:[XIp[P̻aE|Zߚ|=dUv缆zeK4H1by2T><Wlr+l7zAuƌ~&B]Ui4MQ_~N?܀V}hen㘕f7~ fA0}%"iH R}0S8X@t` #Wvb =(?5|= if"O f@l!1B؀ 1pj/R\TK,9@5cIS4@1`{–s9)rA(08X^lx0"UEɀ[y`Q5a|b{CcqM{pb_˒z@Z7Bp+IQ jͯjzFm*<-]DWd\p]nDWkFm8`ZG9iO*Ap {wT[ygA% 1;q2%')OՕ Ac}>,;iDw]ArdF m'dZa&_wjŽ|J۟?6'6K{D"Pn ڂ~FuSo(ɠ3,rq|y"6| dQXMThxvN `)<tSر)W{#̺\al]G;pE F6f+ LPu,MtA5E=q4IrW(L^KbYrY辎?5_4yh_I!L繦E7)`D(oqA@G_ ;ĕn8̈́}<\+1Ƽ;Sp:D![21q\X4e\t(N&~KXt>MͽQg> L W_(ق-Ss$)  m5 Ռz.Ը )RC2mUȜ[JpF2! u {69ylmIH8V2틭~{;АHۺg\aztD/|+w b֓R/'\?KC? Yz:_e޹k+Z/W{ACWJ/tWu3Bc$CeYBΠc(Q**گ4?p~WƒCѨ~L pIJּn__ljt^M/ܜD-k|'\: kVm,:G]nmwMS5//KFÆ<'BY%_bXϣ+󚪘 5G BDK %>l!|Gdm3W%=eUǘ.YpH$|D/{J8#WdMf=ҝ`Ipxyl"M܀F]i$!ZjHH5F-}\9zU -2"J%e&IGMўkR1[zЌ25䏓"ok (mnKDdt=j3@ۧ6``řY}En;JC'Erwh&nJ>|lb4YD GyiႿ8rOzD>rq}JH8+k}ڢD~>Gʢ,%ϳӿ~Ѥ[O]z($G/Ӗ y*ڜH-9Rex[q;J엞dG) {"`ˤt(:^vyj4}Ń/Qɂ?-~X|n&=|Eb'|&16i]GӝQ8\MQϚGr\7_U_bM;ZbHS*&n[tj-u<,9|{EQ-dUZS6S8h:%% g҉TJZ['2W+@|x}Ќi"ͺeݟ4%ģ 3KGtӸP 吳vQ@DZvx(b5t菠WƤ,x~,׾yEkI_fUDWW(7s s9ǣD"u܈j}*􀐇*YNkE*]TgXyanbt1!x>Ԭslrw=rD%TU^ ݾ?Nw,6%ZWzUtjϜɨW:+y.ؒ^\cD“%gsҙ=T$Adwk+mm\H8m:<#Rq MG- JeC'S(iTQ!:|pXdiOrB58e(:7̊K&K5s%Zfa\dϵHY{1a^G'Q2}՚`R #p8.,=s ZA u# RöFQ=̢ qw@R.u쬀TǠ*7v/3zָ.ӈR݂ZmΪGA#Li7^hPl=x$b&52rne]Hs]<23ƴ- /=qu,s. 琮%W-7EI:ƒ1[IN3xba)`PXaܘA^*r/7UZY ڛl\dES 5ݝ?]X6dUtWSEM&|'ZDW[hlVY)1ɱ R+Aw& J (iȑ*_AJE4vd#6pӿ0dB1 P;CR 4L_]2(H9̚pʪ'yƞ#7&U81&zz>`#SS.#a%{_oC$8֧6m[Lnz ofvIixH! :Ž 8xK:2CuW7m.d3ƽ3^B<F^xfy)OXN{tUƬ˦=ծ4b)yB+Kί,;A>\2 Cĵ@Ԃg9Kْ[\o{ίXV;@(LWDT0 =r#ҿ#7¸vQ(NgU掼 AYU&!%0_>S%&Ci)l2FFv}InNF8Kg},j'ZX{xHjb}$44@൐IrжOm6vB8ꙌQ뵕y*sypFX/F:Bzpi4`&K⅃ǎwnRRρ9d_@-]xnTvz\ q@, 6t޷1' ?sᒘE|"X{ LCb%幑W(vgɵ>?<~]st$a^ ,a/|4 G dbv6L>B|XӝpF.YY豶YqL8YBW\<5Fћ<ɪ /9 HKl]V<94CqI6TkQp̒pP"A ^خځ9)n^o>{mo[;m+P\dL)e|RT0e#)˜}DZx|8ĉ#MB# Pr̒[e娺=;W{]l}O6Sv?Y~FJ{e3CNdM,Ǭ'۔[i(xߟ1Ɔ`}OD2Ha>?`ky;ڱ${Xܢgue5Թ.)³wgb'H+v3=G FS}h|t ]$C`0q|\Ж1Q*8UY+؀HHf[2q$*߸35YGUhϐm^  "AźݠPW/ML(S'r" 'mPB5Y7kR$<1ǰpV+ܗ;Chpc+vT# Mx)M3.j0 N(z  uO.Sv2T6,ه# ^,R,P*<茂M'\NBǵfJ|lWo_$Ʀo@n*R@E q dj@~<>Q O yvI``Y`,JeMozk3 ;ɪQ  cY w=djgy0+oxČT%JenV80BX6gz[e !-ۑVW`4jeT_˿?l fd: a`#^C<ۆr0~E7Ȇ0=/pjkIvh؇g>FOLd+y78 헨4k/d, MG)z][%`2*aD+4QTwm&hu鬜$Yp[ < xb}cc{D\Lr:8Fvb"_$hބ*[vV[MR/̤ϴ[?N;iH4tbD^Ƅ֕EcȐKF^\,^@]Oi>6 w_V\x FG}shbn#Xog6Pj4@Sx#ғNG8(::銕d_}kS SL;ENjʸŶV=shށ@$ Gxx)bq@"+ʴvqfƩ7Hh"ฬpS-צʯ߶ YZ