container-selinux-2:2.42-1.gitad8f0f7.el7$>wlp%|m(KSn>?!?!d, 0 X (.5W       0 X      ( ;8 D&9 &:-&>P@XB`GHIXYZ [(\@]`^b d!%e!*f!-l!/t!Hu!hv!w!x!!Ccontainer-selinux2.421.gitad8f0f7.el7SELinux policies for container runtimesSELinux policy modules for use with container runtimes.Z_x86-01.bsys.centos.org\CentOSGPLv2CentOS BuildSystem Unspecifiedhttps://github.com/projectatomic/container-selinuxlinuxnoarch# Install all modules in a single transaction if [ $1 -eq 1 ]; then /usr/sbin/setsebool -P -N virt_use_nfs=1 virt_sandbox_use_all_caps=1 fi export MODULES=""; for x in container; do MODULES+=/usr/share/selinux/packages/$x.pp.bz2; MODULES+=" "; done; /usr/sbin/semodule -n -s targeted -r container 2> /dev/null /usr/sbin/semodule -n -s targeted -d docker 2> /dev/null /usr/sbin/semodule -n -s targeted -d gear 2> /dev/null /usr/sbin/semodule -n -X 200 -s targeted -i $MODULES > /dev/null if /usr/sbin/selinuxenabled ; then /usr/sbin/load_policy /usr/sbin/restorecon -R /usr/bin/docker* /var/run/containerd.sock /var/run/docker.sock /var/run/docker.pid /etc/docker /var/log/docker /var/log/lxc /var/lock/lxc /usr/lib/systemd/system/docker.service /usr/lib/systemd/system/docker-containerd.service /usr/lib/systemd/system/docker-latest.service /usr/lib/systemd/system/docker-latest-containerd.service /etc/docker /usr/libexec/docker* /etc/docker &> /dev/null || : if [ $1 -eq 1 ]; then restorecon -R /var/lib/docker &> /dev/null || : fi fiif [ $1 -eq 0 ]; then /usr/sbin/semodule -n -r container docker &> /dev/null || : if /usr/sbin/selinuxenabled ; then /usr/sbin/load_policy /usr/sbin/restorecon -R /usr/bin/docker* /var/run/containerd.sock /var/run/docker.sock /var/run/docker.pid /etc/docker /var/log/docker /var/log/lxc /var/lock/lxc /usr/lib/systemd/system/docker.service /usr/lib/systemd/system/docker-containerd.service /usr/lib/systemd/system/docker-latest.service /usr/lib/systemd/system/docker-latest-containerd.service /etc/docker /usr/libexec/docker* /etc/docker &> /dev/null || : fi fi #define license tag if not already defined&;0NA큤AAA큤A큤Z_Z&Z_Z_Z_Z&Z_Z_093be781f9916163b4f01d3f7edd672d735d3d8347b5aa643cfa3c58057c6d5dfc6217a38cd557adbe6ba5b7e219411cf816d86ad270db71fed1fc1d348517d122ca58993af5c40363e65191aa1fc69ac77f39dad1144ab5a13fd562b24748b6rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootcontainer-selinux-2.42-1.gitad8f0f7.el7.src.rpmcontainer-selinuxdocker-engine-selinuxdocker-selinux       /bin/sh/bin/shlibselinux-utilspolicycoreutilspolicycoreutils-pythonrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)selinux-policyselinux-policy-baseselinux-policy-targetedrpmlib(PayloadIsXz)2.5-113.0.4-14.6.0-14.0-13.13.1-393.13.1-393.13.1-395.2-14.11.3ZZ`@ZTZS]@ZP@Z/ZOZZY@Y|YYdYA@YYoIYcl@Y[@YA%@YA%@Y6@X@XO@X+X@XX@XXX@X~@Xv@XtXp@XoXoXoXWDan Walsh - 2.42-1Dan Walsh - 2.41-1Dan Walsh - 2.40-1Dan Walsh - 2.39-1Dan Walsh - 2.38-1Dan Walsh - 2.37-1Dan Walsh - 2.36-1Dan Walsh - 2.33-1Dan Walsh - 2.32-1Dan Walsh - 2.31-1Dan Walsh - 2:2.30-2.git7f2de1aDan Walsh - 2:2.30-1.git7f2de1aDan Walsh - 2:2.28-1.git85ce147Lokesh Mandvekar - 2:2.24-1.gitaeff029Lokesh Mandvekar - 2:2.21-2.gitba103acLokesh Mandvekar - 2:2.21-1Lokesh Mandvekar - 2:2.20-2Frantisek Kluknavsky - 2:2.20-1.1Lokesh Mandvekar - 2:2.19-2.1Dan Walsh - 2:2.19-1Lokesh Mandvekar - 2:2.15-1.1Dan Walsh - 2:2.10-2.1Dan Walsh - 2:2.10-1Lokesh Mandvekar - 2:2.9-4Lokesh Mandvekar - 2:2.9-3Lokesh Mandvekar - 2:2.9-2Lokesh Mandvekar - 2:2.8-2Lokesh Mandvekar - 2:2.7-1Lokesh Mandvekar - 2:2.4-2Dan Walsh - 2:2.4-1Dan Walsh - 2:2.3-1Lokesh Mandvekar - 2:2.2-4Jonathan Lebon - 2:2.2-3Lokesh Mandvekar - 2:2.2-2Lokesh Mandvekar - 2:2.2-1Lokesh Mandvekar - 2:2.0-2Lokesh Mandvekar - 2:2.0-1Lokesh Mandvekar - 2:1.12.4-29- Remove typebounds access rules- Add typebounds calls for container_runtime_t on spc_t and svirt_lxc_net_t- Allow container_runtime_t to use user ttys - Fixes bounds check for container_t- Allow container runtimes to use interited terminals. This helps satisfy the bounds check of container_t versus container_runtime_t.- Allow container runtimes to mmap container_file_t devices - Add labeling for rhel push plugin- Allow containers to use inherited ttys - Allow ostree to handle labels under /var/lib/containers/ostree- Allow containers to relabelto/from all file types to container_file_t - Allow container to map chr_files labeled container_file_t- Allow containers to read /etc/resolv.conf and /etc/hosts if volume - mounted into container.- Make sure users creating content in /var/lib with right labels- Allow the container runtime to dbus chat with dnsmasq - add dontaudit rules for container trying to write to /proc- Relabel /etc/docker directory- bump to v2.30 - Allow containers to create files on tmpfs file systems - Dontaudit containers attempts to write to /proc- bump to v2.28- bump to v2.24- Resolves: #1469792 - built @origin/RHEL-1.12 commit ba103ac- Resolves: #1469661 - bump to v2.21 - built commit 333854a- Resolves: #1463549 - built commit 532fa20- rebase- update release tag to isolate from 7.3- Fix mcs transition problem on stdin/stdout/stderr - Add labels for CRI-O - Allow containers to use tunnel sockets- Resolves: #1451289 - rebase to v2.15 - built @origin/RHEL-1.12 commit 583ca40- Make sure we have a late enough version of policycoreutils- Update to the latest container-selinux patch from upstream - Label files under /usr/libexec/lxc as container_runtime_exec_t - Give container_t access to XFRM sockets - Allow spc_t to dbus chat with init system - Allow containers to read cgroup configuration mounted into a container- Resolves: #1425574 - built commit 79a6d70- Resolves: #1420591 - built @origin/RHEL-1.12 commit 8f876c4- built @origin/RHEL-1.12 commit 33cb78b-- built origin/RHEL-1.12 commit 21dd37b- correct version-release in changelog entries- Add typebounds statement for container_t from container_runtime_t - We should only label runc not runc*- Fix labeling on /usr/bin/runc.* - Add sandbox_net_domain access to container.te - Remove containers ability to look at /etc content- use upstream's RHEL-1.12 branch, commit 56c32da for CentOS 7- properly disable docker module in %post- depend on selinux-policy-targeted - relabel docker-latest* files as well- bump to v2.2 - additional labeling for ocid- install policy at level 200 - From: Dan Walsh - Resolves: #1406517 - bump to v2.0 (first upload to Fedora as a standalone package) - include projectatomic/RHEL-1.12 branch commit for building on centos/rhel- new package (separated from docker)/bin/sh/bin/shcontainer-selinuxdocker-selinux2:2.42-1.gitad8f0f7.el72:2.42-1.gitad8f0f7.el72:2.42-1.gitad8f0f7.el7 2:1.12.5-142:1.12.4-28container-selinux-2.42README.mddevelincludeservicescontainer.ifpackagescontainer.pp.bz2/usr/share/doc//usr/share/doc/container-selinux-2.42//usr/share/selinux//usr/share/selinux/devel//usr/share/selinux/devel/include//usr/share/selinux/devel/include/services//usr/share/selinux/packages/-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -m64 -mtune=genericdrpmxz2noarch-redhat-linux-gnudirectoryASCII text?7zXZ !#,V)Q ]"k%xĉNμ5#+mz qpw!CWp,-'%CCr5cV܋2b#Es=)xH|\'$Ât2 p! {_XJ=<"g~lpfh冠 X/,OKKT0O_dFgcjy+`3` r}vC,$^E6ƝIFi |rvH[3&9 KeUeÕNt$39) %Q~mj|~pSW@*03kapZQw}.7)>ωUv:pal,wfE%wG\!By̖)[lп1,<[G7ȽȈCcV" `h jj'Cr#G.}3eAۃ9F1OI%4^}V&֘XX_ }uJjt#jVxPM_7): vA)mO-ސ{p%'wy%RaٽmkC[ix~z7[LԎe;硗K699Ӆh-[b/)-ZJJ \=`a.PGa`qurm!s8y1X*պϡ'`B#B2~-tr!yo.RC>eFG?*3~ SvƎ۩{f[/oپfvhLg=^/x8t%u)(@Aev{>Nw]嫋QEu6ظ{H+@n\E[y400?7: Fm\Q疝͈me,ͤC@KK͙u]v&~7ҭkmIP22_Ed) ΀L1Ւoqv+Kh A\B-\% ~L]j 8}E>Sx_)#Ѩ*a:쬩 PN>zPa 9'j! !ȷ@_Nv#ɾ#g.y;3\&cHtͅ@E{쭽}p7K6epJ~*mHt}5ݣ1F2Ot~9z1|o$dhj ک8.UZ{"?T|"C j h2""; =/ܣ@GQ0D /w lAH>@7gn޻gF;Bt_R\:,]z-9!P#"wx3$(H Q8əxlʁ,`&Y-;u?w.CJokBC8ů=Sukoy5OE{:&i =,ţ7!t[{U \tzk{juD09$!ͩUؼmSZ5*r^{oduc/SX&Yq՝S{3ɫ}<3Q7*]+,ŁokH0seLqP?kvH)apc9AD*Xd{y_r.3n&B$YW r_ߵ& K!޼C#B{.rW^Q]@,}/?)icQ"(/cjW- M "%o$ߛŴ T_PNMmSeSwT^y( BN%'lcO!7ijGZ݌siϮpbF(ѝJuT䲩if8yENUgjr|͇_<4f`q堇xjȁc{oj7d8X!I4Zm_vЭt.`˒C؀)ji x/ߺ߁%~GHP/ض^D:#G+Pʾ7<.? ONV_z9_if R"/k) 0 b^fz&;Bh!㭼D Cʿ #I8:M37^i"t^0ztQD[,3Zim.wXsvAo$XC8 }MZr?WO4Tf?(>,/EBɞ| mꁤ;58o*׻O-Qs*A:hTuz{qhL-G[2Ճ-ZsӀA X 68Ql#l#vg:<,>7>DS pbNcl`-~CGŸ^4D1[ 8o@d!uPܮleV=z;C0rOn(;[ }m9N^M 4d ޙ8";~ZcHo9] 缟u"Оj`XgF|! ?p~`Ac̲[97_PaywlS1$&$"Sb˿FŇPIHDطiMDpRt-n>tCy)ڮ࡮QEg uI~|K,f *J al=0.sn~odynθ-vη`ؔ~jwomb{ie7n`(@jF2_jΟ4:r$Nܣ9-ӟ+;ap ZbtsFU_7}A-(*o  +Oy(̓݃Z_72J{ﺨ,;'nSXܿKD2bBIDC?vE_72'*s@!$kckd<<8C `5CQ  {bdGƧN_z=y8E,Dr+iL䰲>N7*+h7Û&gęFp.%"i2/ k22zn b/v^=-(t\6*\S(9X?4n>;IUwV dq^KSYCKCC{}Y tE9TU9Uj]Od7D2?RoRl^XvwtҔ ѶSﭩ/Aɺӣ3B<$#T>"d#v'._ BD RU>V T*Y D%ALƥMC}o^YZoBMa1 Ȭw3kW!|9n|?F,O)UclIrym5X|Ix= ]g- ߓq!۹S@#}D@Fs3SIíDZZ}uG }'R{lĽMDqATT*Z^CL%Åj0Fr osΟ -q൩gm/?P}a=Ъ?8ԏ|HsE2a2USUCf/Yɇu)ADnX̑HCh=2bɵ #^_'\-Q}_ 3-dlGdMW^>|RYd{v闲Z/x5cPwo6fY Pw&cf#\C(*iU+M34ps, CidoUF[ohӸ0HnuY(הwwymp aGlD/F},AbgagZ0mMR۫=C( A kP<$Vh*./i,s, xH߂Ttq}&f F D8yH4N<v׃HѪ .];?.}-NdO*Z~q _' @]AێC?mw m>a^N ^uQs4XY7/R{_ YLnbݣbPA%2'[#w.6ZFiazP'rI8y l=Fz&27&--=+8u__SS'QV+(\PmAq}M#w1=ҏ<̀B^xn._bN! %XXknv L&ioWIt5,q@%H+ןFFmj0r:3>cQGR/@5&Q?avD$Rm,յ@GA ).0ue=!ZAݩX:p xK N,mLi#Ƶ}#ȗy׏BMr)ɆJ jp N;1"*.ZW|loyґpeNA`sCp> MׅzꉕA #Y*9]#@z[".7A+^vY.˓xYWc7$; ULqitq TyRsC a߾)&Nʉ-ӈLh8'BvVI9m>b$NSM]|Qo gnsgE[VDs*"]csĩx5~[ vyx<~HB%ç$|nŬU}RR<|wVD ̷ `wn^+Cf=+$@BE3- 3($i%U=M^{֣;W)y?mnrKeL"6 hs҃bN2?c(C6Zc&d8@ rWî!?}\7Ӵ*p^>Z1"X7KkBc,+ wsR&K xH)e7M.'y=xl#xs g^grRe5џ!BUndMXk0M<k) GA†nͬ0P^SvӤhD E—Z7羍M,)SP9Xw`T TNsN\x;| 34_r N=xTL1]Dέ?zZ!F<6%m d Tt0LN9Y Ur8z(C`&;?AYMI[TE, L;8ӓ0#Ft 挓 J_h|)ƻe Hq^a?R>.V "A8#"}no2gtV_6ݶHemlvEx+]4=μ`]zo~@v6yJNCHnkڞGLOm*˶%cOОtUN/[e-g7(h6k+la(yOfOΩ6꧶uq2Ւ{ e[~TVinFjS>JFG$+Ime3Ғ4!WC:(0;޹S qP=06蕶q}=2\")JzIz#sn6YK^R->X/oLxCmGv|k+Ԁ@ 屮ށME|v3"+Eݔ*F\l/g>ZuqDqdmVI˯,q9EB~yxZ2SrCTv@^ :zoqmؽK"IdUO@zG(?$"Cܸ:-+$8гu%E0m2A!^UAE@r1R"Gz캔 Mu F6xݎYc8=OoJ9<X}&P;v{+xkGhW 3Sd#i$Ǜcw%C t*^9d.,&$i<:|,H5b Lapt`ff]IZO[ 2;oeܜc<4v+9iMXY~;lvb!0}c)1kS Uir O".{G}ѻxyf>AdqY?نX;1"M%:4;[|y,F, Z-\&_ɯŎx4YGmzIGx6譱 x0[[nyZ_ ~/A&PHq#¡uڷݻ7BϰV4KR|>Z3OhQ$w|**;V7ejxrM=|K*?j UEc2F}ʛoғ|pneMDXᨬxCY Dy@~w.zsyn52%ٷMnzE'%E9?b$hdVi[(ѝ`}YF{=Y'GrKoxP/&g4i^[G#ӥ< 4X̔o,U*aea0ʤvw)SJX_tHK-NB,(B"0EꭣwоjAcP _+ Y1J#FL֔jv箌UqY`dl$g,DOW[) vsaL~K@G>H%v%$ x't:5qvF! T/6]DiI>1L[h&{ҭ QN4ʡ}LŪzciCz3<>Ҥ;4y\&rЃvt|u9pPvWZ="y[$MNG}U٢)߇ڱLj꾂)bAಒ > HYd/Gζ*+&9{=(b몋'cF䙖;dxTyj8N29:X,Xҿ IQsh{ρ6}}p`=Xm+޽%L!-y8bth,7VW0 Sa5*ʐHz1JKM$9?Ѽ6 YJn J^;f>SCQʊً_Hu `U]ʢDX`DN7J~u&ZTZZCەv4bl{`;B$BAdvSt=ۊAӆ8ptK|Q6lG%? 23.X?Q-؆sk'.s t?3_!.<. >b.îɕNaAA'-f\&q$]̖e*2P?-$"hC+)~&a3@)27I#ᑠ8_0h)in2vn \gH+o1LW`QD [/>Q^N0,bMm\[4 p_*P?/형4(.qfp 4<єug'"FyYJBQA'7[)O-O\'2+nĔ." EZ3Bϳ:-$ʧ-/w\J/(+oԧ  (q*Le0-ؤ)&pDM R&iN(,9ZQ4I3Yګh$zN`>ma)Z{G۝o}ʟSE36?꓎ st肬p3,L9X䵷,dg"(d4Vqw+2< >Ih%K b'2Gv8ڲ9AѿU\2 ]V_#=]3Kgo(lԳD[B_ƻi*C.$q2(Y'a Ȝ2m4e/g!QR @AxCHE)7h'5TQ?lgLQD]aHEhuS¼x^UM6vTcl E>}Qx +]?-j\zXgx}wL}( &aSL(i7c%>Z"r:Y;X?X-;vKZuJhTT0lPN^j2˞ūTkY\Ӄgf'>^w7X(WE+d+Coјڠ5̈́d}tCc^”2 ,=C/x HrPc=pC-%n&46YY2U6c S: "{x5fW:S3̘,&CmfP9 p<0Jȋ/ŪS !~ ~4_ϣL˯Gwcc9=֙q>r0c6ViY^1ܲ)yqi"H NIoXH+}=OlKbjw\Ly *wLV8;鶻!;bXٗG܂ ˕ =/5Tޑj!;/M߂{ *i,@cr>=wO\<|Tฒ9 3{+m;-Fje` #UGO B!ta^40%) <>ScYi3+^F-uZ78nƜ<=JH"ʇ):O~*<89 bUbEX,CҌDJu0:s!a,3} #at:!ǜ& {hG"1X\/}ZPn~ָ?4rQ8BN$Ү]J=;HK{͊;5b &QnOwZVgy43M0m vjc#ɔ*TlT6Y[oU*دۄSaޒMޮ!ެ+# 2 !'|fIYz)M*A'.} D8# +9eO 9%v o`'nc8{Q2B aICsb~ȝXΈȔpBnBw sۃ<0H w"){q6y"fs.'o5CŮ{ B4뗵kbqկ >r)cq͠VD)A҈Q{9lߞwV"2 ѷ~9L0,*g mniT-y z -=z?3/ ݸ;oZj-s.WhF1v Eup%ҟ@5~L͓#Ռ< zѲі-$^hե6%$40fé i*x.fGfJ.{X@3g݊!G]^ߪ 3_Ä9 ZL Y==%ȦF]<0V?wJ*[y®PG?mJ\_HF! ڶ2P[Nrh =^]DB:2[qPgw6 X^nEC^l[X$vvlj]/ IE&,8iy }t93]1?;籮"q|_S+X]*8iQzU:OSZܰ:FzfInAT]dFFC~B1}aX?Y&kd|u~|XЀ9=ĐwmT_3*0 0s4*5 >u ~n<Ru+tu]h5`m(k$ iCW O{hJ!{p[۶a0gu)j.T>W=U_bhr|{:7콃:MM?Ӆq.'"BzyxvӞ/Wț-9;maŃnn{;;B!_ wZ8K =_]p%5*z!T/]r8ѨcR(<r2f n)?h(xʱ@I\zOzĆU4 U43tH GcVZl1]آ{.},.0;;7^>WvGh :i'=B!%{jP +Q|4|vb<҆wSOă,RqSm9OVAr`NZ>TF>Zmb AQ'Ǟ05;J'G1fQl14%Ɵ-D{ 2iBTU^@T<?#IALo$¦Z)6X>r%n?r#Ű0%%p($H߂W$);!L:ɠ{q0{6 =ڣR֮U.eu 5-[L 7Tbgh <r*O%JYkl>*i~Xzi6pGЎ?IrQ~ QJiږBg M^*8P|Pd#<@x/ fStW?]7QgթE[C֦6I˙kz6(bț_W /D}sZh۝ 6iI6T1u;ϘϾhqr+3P֋eHѕ/b|_x׀[^I͘VwX 1#OAq'tw߷SHF˂-zS2[x/a_G fn(křt Qr ĥkBI&Xb6{]B8R3Fҡ{PW#jCl[.GA~ h,w䤸PMfщլR'RyܺMdQ4D&j]݆c9Pg}` ECa21ϥ=QyO" }#v#{Sؘ徔zsѶ ۜ0*mIZ$Lgۂ&FO_tv* ?t"7ZmŠ`w},i*Ī+@0jIj|{>Oqmwruo*| JTQ-;Z. bJ~ :IrB_98vV},pCg[C{19\筒J yؽz<.x3d {&b^%;XcM>tw RSc|W7OSUñ ;)Jm^_*7CCAE+Hvs E\2Z{ZHCJizOEƶ7['ASPi3cX̗&H:Bjl7WC# ءj O];b8m:fa3g7/Y-ilJ^;b4BNIUp9VfԄ6z q'!rU0R"^tE-XRsTʟ |aNaGIzx]T1 no,OXB K! Gl;x "&/9Y8j~%5d4R i =IOP:?fFlb3~.v}J.#Ϊ(7͐ryO~9HJBP$ÞG񇼱اl[Ti@K)V>b9. dY.Ndth ۍ`0csFEC`)F̃цQXgW=.t&?zSu?NKȖF;벞SƩ7\Vyӗ eR2,pnQq0˼SвErꔻrf3uJԹ\q@;t:4j[;\/oT! ZqkN&y]TRw!5|O}rDlvAuRP"ReAJ@Vρ4ve;L'&mZ|>^;o/M~Y;qez+ \KUk4@ԨDb] ˏ+ɬ5HgO7TmL1]! w`9޽^VypbgЃm;%A@@G6.O8dw 0rMISWMP GG8)miie7V@]/Fwp;yZG\RVIޚP'JY As\P%Pw:lʸLgo]qj#@I|v.̪ E#lQB+APU #F"5bO}[D+ʊmy7zX0[Y{U>zbul9"npÐ\Ru>@[aƻ6j$cA`p%.։%ÿÏB[,#3kt=9mࠊv iTKÜum45}~!zI!>Aq"! ڱ)\>bɫ!_AMuIQT}ڈ.)%wsIYJ6}qH6}|ge=#uN~i/^*&5XCo QtUVÉ#0I]NQ;]`jBylܜHp. d3yPI{tUJU8(⶞ZGaOa~qoe %4<'iˈSnqIP۷O >1٥]cPx2!Q Er?R'ڋ폇poY8%k*% s<@s5)3CqkZJX]^Ȋ uP8́@S$>6' VWE&a6uaH/L Q䅽 5uNNJ}oai]TtbJx< ֳSPg)WWSwǁ Wx8yKtfKo'Ij~qSұ}J#ɶpdL TVIS  O`%F5ޠdZӃ`wǂBPRVwbLY۲W@^d [נB9x :UӊM|Q>t#F/Ga0Wlݞ؞OMo04 6QtS_ymJK "XrNgr`#mz 2zDrר,$_?k鄤`?T dSZ B<5itG#Zj$Nk4,\he.߾&$U4G~Ix{< ZAkҬyd0%@t5Gsuu;UAP(4@a)%'E ƄAs#+hL+<0ֹۨjh፶;D1"~쳨AĘKb$JT.c1z뼟infg VWǶl# eY{-Uy)]u8Qs bS8ѭ%Ƹ|\@ڶ9Ǹs>P9&y󻷅*~djj'qq^+&̄JC<gieR0eeF[ܟ>z݃?j0Gʰ;R%{,\^Qq:\K3ߩ8]tTC<\i:dݻ$ް勅U*ZNnNug0β5'*)RJN}ݴ fF;yJ%KE[xݨ7vyra0AKV \B*(?;?ƛtP͎u7Ho۱ @'}%ɧwT*9\Ї՛U^*s2+ЭZx>sZ#pZz5":'*JJ'-Du 愻dD,ю@Hz[{}k68l`yLӰ~Ùf-P]()qxhYV4nIϲŒ8IgxG\wU 0uG7"ҹQ/lVV 0RcP*t/ѓWY]?/J`ɫSuGP&}6 G^neTEl]f&kJEp V., @˂y b!rp=pŇG"viԂۓ| jդ稯.kdFmדTb-vwUk7tQ' p+N gu~;oz#(p!CE|1 ?{ifRpA'f򻋦^9X֛ҭXGO~`:݉q|U%@> ]: 8&/g<%Ⱥm իoV  JtMO3`ɿZ**J @5H%Kj9`UY1 l-:KMAmsׯS%f?«'CIu_Ehה._gGR8áՇ^I2A/\D!mW/ApgTSufpև€.OtaE kE 2p" {vb?RZ#ub\/z芔 tXXrkh)(~Q/LiD:>*BoH$}ʛ ^GFn}&X$(<_?6K >IfcŸ vyx8MƯkG'wAE܉I>; /UrշP m7;RYI(re9]kL6j`bӫO US,b0P\ޠj:R0\"`8"n_!P/)_dˉxxu)\x81/sڷN̂5C9d'A)~Z)T3% 7vxuZU X.5ޙvkpM `e-(Gڿl=13wSZjȫTsX$N?z##!Q@@V:K 6=ycQb>zgq$-tzF$\N׮Mj+~);ŋJQ r!t4>aӅoF؂2Zz%ID`_|Y 7X<EQNhٻ{v֩=!^DWC=ZgM"}h44KAh"׾ Pqztt+h^pfؘvwdN /guic?uZHtVMi=PTٮg- x=IA{z?k>4=a~cxvͤUeV_d_",j؁tնUUa2L *^SU=?a?IHh5)5 WEh/ζ1샘(v|A3 "\ƃ $Ks3;h44:&EeFoS^3Lg͋1TNFV mi@&kp_s"^lu-j:>yv{^2?ͨ&Pˊ>c`x TL1Ӡq2ϜS7 %S. >ݻ(A'y.j]RF>$ŢNе:r% 'GB{utZ^R5kr1gDԢ:Y YZ