evmctl-1.3.2-1.38 >  A `Cmp9| DpG+J6ҶK7Ę^A0sՠHْA[6zɢ6JflC05t c*9hSP&I7?മ #h9rʸ~+ڃ7/F0 HPG CwᏴQZcE-%(M=p0 0K]١-Wk;mכePFZPQ-o&;-ߌ:'XWI^T aANA98< \2)rJ$E-VY @ eKaUB{qI1|g'_)%8pA)?)|d   , )J\ r    V X`jt(89(:wB%F%G%H%I&X&Y&Z&,[&0\&8]&@^&Sb&rc'd'ze'f'l'u'v'w(x(y( z)),)0)6)xCevmctl1.3.21.38IMA/EVM signing utilityThe evmctl utility can be used for producing and verifying digital signatures, which are used by Linux kernel integrity subsystem (IMA/EVM). It can be also used to import keys into the kernel keyring.`Clibs-centriq-3(2SUSE Linux Enterprise 15SUSE LLC LGPL-2.1-or-laterhttps://www.suse.com/System/Kernelhttp://sourceforge.net/projects/linux-ima/linuxaarch64큤`Cl`Cl09fe71dd1c9e55c613d189438750bf008f7372bb61b201e45b5f626ea5fd6f14b957ecbd0f2d287b1ac6a6d1862c000003807f0218533063f5d6b9cdf7f387carootrootrootrootima-evm-utils-1.3.2-1.38.src.rpmevmctlevmctl(aarch-64)ima-evm-utils@@@@@@@@@@@    ld-linux-aarch64.so.1()(64bit)ld-linux-aarch64.so.1(GLIBC_2.17)(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libcrypto.so.1.1()(64bit)libcrypto.so.1.1(OPENSSL_1_1_0)(64bit)libimaevm.so.2()(64bit)libkeyutils.so.1()(64bit)libkeyutils.so.1(KEYUTILS_0.3)(64bit)libtss2-esys.so.0()(64bit)libtss2-rc.so.0()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.1__u_6|_{_*@_*@_*@]@1@[ZZ@ZYY@YY]V%@V^@Tpvorel@suse.czpvorel@suse.czpvorel@suse.czpvorel@suse.czpvorel@suse.czpvorel@suse.czpvorel@suse.czpvorel@suse.czmeissner@suse.compvorel@suse.czmpluskal@suse.commeissner@suse.commatthias.gerstner@suse.comjengelh@inai.dematthias.gerstner@suse.commeissner@suse.commeissner@suse.comp.drouand@gmail.comp.drouand@gmail.com- Update to version 1.3.2 * Bugfixes: importing keys * NEW: Docker based travis distro testing * Travis bugfixes, code cleanup, software version update, and script removal * Initial travis testing - Remove 0001-help-Add-missing-new-line-for-ignore-violations.patch (patch from this release) - Add make check + dependencies (getfattr => attr, xxd => vim)- Fix missing new line in help (0001-help-Add-missing-new-line-for-ignore-violations.patch)- Update to version 1.3.1 * "--pcrs" support for per crypto algorithm * Drop/rename "ima_measurement" options * Moved this summary from "Changelog" to "NEWS", removing requirement for GNU empty files * Distro build fixes * Remove 0001-pcr_tss-Fix-compilation-for-old-compilers.patch (from this release)- Use %autosetup -p1- Remove suse_version check for tpm2-0-tss-devel as the package is available for back as far as SLE 12 SP2 and respective openSUSE versions (also check was wrong, should have been 1500).- Fixes from previous SR (reported by fvogt): * Move ibmtss runtime dependency to evmctl package * Remove dependencies to devel package (should not be needed)- Update to version 1.3 version 1.3 new features: * NEW ima-evm-utils regression test infrastructure with two initial tests: - ima_hash.test: calculate/verify different crypto hash algorithms - sign_verify.test: EVM and IMA sign/verify signature tests * TPM 2.0 support - Calculate the new per TPM 2.0 bank template data digest - Support original padding the SHA1 template data digest - Compare ALL the re-calculated TPM 2.0 bank PCRs against the TPM 2.0 bank PCR values - Calculate the per TPM bank "boot_aggregate" values, including PCRs 8 & 9 in calculation - Support reading the per TPM 2.0 Bank PCRs using Intel's TSS - boot_aggregate.test: compare the calculated "boot_aggregate" values with the "boot_aggregate" value included in the IMA measurement. * TPM 1.2 support - Additionally support reading the TPM 1.2 PCRs from a supplied file ("--pcrs" option) * Based on original IMA LTP and standalone version support - Calculate the TPM 1.2 "boot_aggregate" based on the exported TPM 1.2 BIOS event log. - In addition to verifying the IMA measurement list against the the TPM PCRs, verify the IMA template data digest against the template data. (Based on LTP "--verify" option.) - Ignore file measurement violations while verifying the IMA measurment list. (Based on LTP "--validate" option.) - Verify the file data signature included in the measurement list based on the file hash also included in the measurement list (--verify-sig) - Support original "ima" template (mixed templates not supported) * Support "sm3" crypto name Bug fixes and code cleanup: * Don't exit with -1 on failure, exit with 125 * On signature verification failure, include pathname. * Provide minimal hash_info.h file in case one doesn't exist, needed by the ima-evm-utils regression tests. * On systems with TPM 1.2, skip "boot_aggregate.test" using sample logs * Fix hash_algo type comparison mismatch * Simplify/clean up code * Address compiler complaints and failures * Fix memory allocations and leaks * Sanity check provided input files are regular files * Revert making "tsspcrread" a compile build time decision. * Limit additional messages based on log level (-v) - Add patch 0001-pcr_tss-Fix-compilation-for-old-compilers.patch - Upstream bumped soname to 2.0.0 - Add tpm2-0-tss-devel for Tumbleweed as build dependency, for the rest ibmtss as runtime dependency (needed for for reading PCR in ima_boot_aggregate cmd; better to use libtss2-esys and libtss2-rc than require tsspcrread binary in runtime, but tpm2-0-tss-devel is available only for Tumbleweed) + the same logic as runtime dependency for devel package - Mark COPYING as %license- Update to version 1.2.1 (included changes of unreleased v1.2) version 1.2 new features: * Generate EVM signatures based on the specified hash algorithm * include "security.apparmor" in EVM signature * Add support for writing & verifying "user.xxxx" xattrs for testing * Support Strebog/Gost hash functions * Add OpenSSL engine support * Use of EVP_PKEY OpenSSL API to generate/verify v2 signatures * Support verifying multiple signatures at once * Support new template "buf" field and warn about other unknown fields * Improve OpenSSL error reporting * Support reading TPM 2.0 PCRs using tsspcrread Bug fixes and code cleanup: * Update manpage stylesheet detection * Fix xattr.h include file * On error when reading TPM PCRs, don't log gargabe * Properly return keyid string to calc_keyid_v1/v2 callers, caused by limiting keyid output to verbose mode * Fix hash buffer overflow caused by EVM support for larger hashes, defined MAX_DIGEST_SIZE and MAX_SIGNATURE_SIZE, and added "asserts". * Linked with libcrypto instead of OpenSSL * Updated Autotools, replacing INCLUDES with AM_CPPFLAGS * Include new "hash-info.gen" in tar * Log the hash algorithm, not just the hash value * Fixed memory leaks in: EV_MD_CTX, init_public_keys * Fixed other warnings/bugs discovered by clang, coverity * Remove indirect calls in verify_hash() to improve code readability * Don't fallback to using sha1 * Namespace some too generic object names * Make functions/arrays static if possible - Upstream bumped soname to 1.0.0 in v1.2 - Drop ima-evm-utils-xattr.patch and ima-evm-utils-fix-docbook-xsl-directory.patch (included in v1.2)- ima-evm-utils-xattr.patch: xattr.h is now libattr.h- Update to version 1.1 * Support the new openssl 1.1 api * Support for validating multiple pcrs * Verify the measurement list signature based on the list digest * Verify the "ima-sig" measurement list using multiple keys * Fixed parsing the measurement template data field length * Portable & immutable EVM signatures (new format) * Multiple fixes that have been lingering in the next branch. Some are for experimental features that are not yet supported in the kernel. - Drop ima-evm-utils-openssl1.patch (not needed any more as IMA got backward compatible support for openssl 1.1).- Small spec file cleanup with spec-cleaner- ima-evm-utils-openssl1.patch: allow building against openssl 1.1 (bsc#1066947)- added openssl-devel dependency to ima-evm-utils-devel. otherwise the ima header can't be included if the openssl headers are missing- No need to remove .a files which don't exist. - Drop extraneous ldconfig call on preun. - Update RPM groups and descriptions.- ima-evm-utils-fix-docbook-xsl-directory.patch: adjusted to refer to the "current" version of stylesheet to make the build work again - adjusted spec file to apply stylesheet patch to SLE12 as well- Add ima-evm-utils to SLES. (FATE#321603)- ima-evm-utils-fix-docbook-xsl-directory.patch: fixed the nwalsh docbook directory again- Update to version 1.0 * Recursive hashing * Immutable EVM signatures (experimental) * Command 'ima_clear' to remove xattrs * Support for passing password to the library * Support for asking password safely from the user- Update to version 0.9 * Updated README * man page generated and added to the package * Use additional SMACK xattrs for EVM signature generation * Signing functions moved to libimaevm for external use (RPM) * Fixed setting of correct hash header - Add additional requirements; asciidoc, docbook-xsl-stylesheets, libattr-devel and libxslt-tools - Remove COPYING from sources; upstream provides one now - Remove automake.patch; "test" directory isn't provided by upstream anymore - Remove ima-evm-utils-xattr.patch; libimaevm0 does link against libattr now - Split package in three subpackage * libimaevm0: contains shared library * -devel: contains header and examples files * evmctl: the kernel signing tool - Add ima-evm-utils-fix-docbook-xsl-directory.patch; fix path where Make is looking for docbook.xslima-evm-utilsibs-centriq-3 16150315091.3.2-1.381.3.2-1.381.3.21.3.2evmctlevmctl.1.gz/usr/bin//usr/share/man/man1/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:SLE-15-SP3:GA/standard/49fd1be082e0473436a94d5bb7ede3c2-ima-evm-utilscpioxz5aarch64-suse-linuxELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=954ba545ff91729b48d160ff62fc195f1f59e1b5, for GNU/Linux 3.7.0, strippedtroff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix) RRRRRRRR R RRx1cղmutf-8b16f86398aec20162fea3632e5c518a19dcb1441ae2d85eb9d3980824cd54d18?7zXZ !t/)d] crv9wJ)tChj|N(}r (F߅E1irgd@:YkעQ5Сjߵ=:ԧzc=tw 0zYhEǃWvBbUkyM |[z Zzf$;!LזB8X ~l.@3*$:18X5LQ%&lUI)4†.6]2lM%dF ^ I_*IMݿ!a"ݗ^lkhl@}~s3u*J}{ϏÔ\yysB(Ik JW KƿXe4'Q,*֤ҍ_`Rcq,}C]%WFFBŅ42aU+Dȴ&hދ)OCA4nPqF1,H+:'oػgm~!^[ &cҼ: 92FN.`ܧE߲7WDDTz{7F\N>T=;Wb5`T? {uw_-۔y2"b@ V>u6c)lgއ۳(Urt[$e-q&wQqogm7)ªD3*ǖyl"ýO1QJZmqH䊍HC Bq5w7ݙ C\ %H`-Uq<5I΍ϐ^@YZ±?kӛjW^{%_H.[zOc;9}5|m4ˈ*ɚQqK)hDSJkOU]dQNz+~]a>brXm IwS)ҰrI2|-hI2brl^tymOsM|J559%Y;,tAi%Y}Rb(i..i.<*t!Cҡr[—^8=@BXs2*$oԂj*}x4 *Eq=+Lnu Ŷ/aDgx7֞Gc؍A \h"LU|UCˁR*OP.<+AoRV7H;~ +AXپX:24BzWV3keFzlQ*]):WE8ڶ-@_.4d]M_k9 md6Ґv#s{o^l>;qlae߻2~/Uۯ'[ &gkÁD_fi+RCugJz eqJVQ_N߇lE4sKF>#Q<ٳlrb?1FW]O_(nP-wet\J)b6*\i[s.hS:Fw5:Wwcrm.g~ ^MXS +,5U_QnJ0|d}sfmDdEDg6+˴g5:ZY>1RV*3aeW%wœ1 ɬt#RAsm4>~Dl61 Ёw?IGz8 o%Qn8#5T| zEUpm }p @ȹ9QJeKBl`zHn(_d5׃fKt=놦]c5R_uAI} Yi:-Y[qjP M6o}|@/gc `2SI,CT [\=kHobI֚.1D/e2P{+j1&[SZkyX;D9E Y"--PNY7F3Ƽ̓B\WgA./<zxӆ,}jD{J958xωՅꍿtөdj ܽ_HA gnpG%䞂l(B!1mѨ;u\*׉ԏf}g#)ڡ-f f4M3:&EW+xZZYxҚ~'J^biǻQn @`i#_LJ%-=r3PO<{.!>e2=V4 LwgQMtǺWW>2uvDKԁQRiJ|nULFb4\;ħ~ԒIlS$pj(k覎s$EXBVy+>W5mўV66yYF@̥&@=_fT(^ó;d =󎒴- 6-ѨLA1ʧB^^P4uģQgرP=LYrMo![l0S{Cji6_"SK~yQ~:Bh&- 8у_"Ӛ[-u /SC$fq=iVJL`vJ: &:AqqC8~2ffpI7 pjmjNUjNcms0^r2eɵI urA@6FUz. NJ覯HW^4'U݃/;^!F5')7xsg_Ue lpc71uмiC겅B,ŧ`{'!݁Qw65օ䮑jF5Jo#z!6s}yz _C8kZzҽ:^":gŬ`ÒLUυ^ʹ=wtuo`?Jh!. ÞܺQ|yqb!.+ɖЍ-#j;N'OD,;#~bk#R,p '/sIZϖ$4*e?Mc[\Wyh_diCI! Ef龜~;Q$? A! S(Oo,kc Y/ɘ:M.vQ2T`I31qdZ' "n }%+'*uo"e(]4 xvuki& JMkAZE}`A"W5T./QH&J}"V}GS9rT\aC%ә:֎ ?}RҔE J&. ̱DYœdEV-Pwy"w6IH,5?I"h)IؾlEyū.} CPO/u2x x/SÜ+@&KQ0Jt^Rv}cRFǠ$a&VA1I$(@?-+oPP z#P18A>}tHk8}5kEG<)UNUX-zf%SCw8)/;,tIDEB]rM-QiK3|l@mklFqJ_؇za7r4t֘ԓ첯 ^ B"&( 0S's~lu|oW9bئ) 4qջb>C׈>>WwjVZSodwD>i$,m5s&2 ԢljT2X֩{+bJWYo-M!3>cf\N]rv|éUGPmUs#NJ0:`+GAw]Uњf␒[3|[@-h py~Nm4)I"OfrLU+Z!Yt L-H5f]EEZ,XؤtqHbKtO.[z쫴;Bn%[ƘM/Ɨ 9Rܫ;l<Փbau? AݕI&!YEÆ@-x= )Y[徨!rFzL^`;+'@d1d#Z"E{zX Ȁ r7(OFpGeaYF3cvsF5ȟ~$ҙ;6lN3<]Oq@iJϨ^pYpUJ_{4QDq=j7RnƉ0˛-x#i0e,&GBvnMZұ[&C&T 2 YGh B5UuMx SOs?6[O4d?I\l5fGXPe#1rMzYK^i9*%KH 1+j-E)XuVw:I Yw_LrD.zf%<Gub(̤v7JGhܬSOWk.x6S(R?I^{9Ԁ{vtV $_}\0U d*W+LH3pa,LG3Q-6o mVom4Ġmހć} 9W8l#bEPE5Av%Ѥ3'%il c=:_tw.-asOJ: e?P0[!q:Ede㮞AXo>+zlBEzj/'9lTN=^Ljb]7^\T\QT urcwo9DaOvvwґ~ٌUȑI2Z'9:І/YE5T(Db}MP-Hi(b- wh =czW-Ntd /8n@Nej9Dd[ stD> lDvc{]l ?Vцq`]??=_g/; /~?7w;<>UZS|I _3g`cmO͓re Fwo^gX9cbXdSK|#ٵU߶?Lѯ!ɖ"z҈A?üJŜuN%ifQʔ "9;x2v$&VԞ< xϰccr9gl,! ۲:du9!\. i |B+H|&6`zGF!S6wN-@z+F:Bj3d)jL"'7@* sOmŚKJXRkωox!yDx⓼9AjOSW!ՕIޑXPGB0ʠ^hhƩiF;FC-7!!tx*BMx~󿳉_F˺7D` = ts ;I|S̼ǭ^.68i%Q$s昼nj)"u%&l! WrP;kǗiG̶:¾<2̃Z(،jk),ݑj$Ww=4c5'_)w#[uWe d~Rgd%1(NƠXƞ %r,q(୩H"J)t]}n5~%DEW"m{9o2 -P_v@9'qENni9/,irD _m X]OLZ|r6looR8g.(Jjv[@WbKHDXnBP bG52q:AW R ~%"">pUOr@ggci&EP4L=Gw[ xlݸhk$49ߖ w<x, 6N;d^aHX@NW4z3g|N8#Y̴%\$rCOȓrewK7daQ8g Ux#/x7i \b"/I];i7G6L_L^, tpwxڸBD)Q>o  iU%7+UV+;9gՄ5DŽl"1vx0H|sSʗ~j7̫Q;bw{<0[#P)C0`2~;aU#K UkY9-YԔ䴡o Ӭ8G'Zf#GSrQ:Iu߇ծj ~d#'J@: AKFy=KA&߁݉pxP99氆}Mt~3?CX G~t~MK['v}Ec['Jz=~Kk#WQ[.c4!趫OHUʪh7=w'4CvZ<&q U'&. oNBO7G]4 79|GvSiR5#H/v wXM_H mOE'S>|E[.w$Q#ZXNENPK-iײŒ Pġ:#gJ>2!Pc.. ~h?"*uAyw T-bZ5o~cuzfPyCq;2GKcp)Sbu_ %Q|-`ZhּI,x05ߗ-}Z~mݴgju_Vdvd5vTnΥ\.0P"gPfs>l{y,P+mv'.fedk0U6[Sn-J!'Q,럓 Z(_=!& ">c7\neW-XзeǓxgc#_gZiJF%)ŷ*Chg?oʴۇrI|Y=\|Lc,vLYt㲫D_;P֐c7QY vY"'O{{w!=ʲ1nLOѨ+#rX7eӺޱ: )#j+c6r8 5ڔD6 zƆFNY{9Y^‡1SCHd[s$ k\Z~ 2W_V鮄q*C= >8k򶨗l<ί?$eU¼0A31  kH:ўZZ;MgɥJ?ntv?⊩2Mḩ+f.[2m&7Psŭ64g5Y=sCȚ"i n.9Rz9"vw )?-Zd2 ؄u[^vRrM~!?{V y5Ms.tT(0>vߺi7)֢mRQO'GM4tqT1Ӫ!T5< >p# ҷ B0kKTo|_ <܁n̒ 8>LÅhMo atHCz(a>m@ x𙎖||g kս-S-C>~x>I@6x30P+$SԜBџ}c-Nnok, B(XF#q3LFvJp\˄<%9;t|f,-HD4lV>FXe cMTT+>aم6k}t hbVY 5kv T+Oa35FїZ8XzlADx@Yx,%yiT <) xNuSp"uK 20D&/eYd=< mOqEJ6#Eel&}&94м}uiTΥ1k1ZGO& 2Ԍ2(/#J_3яGF\XT$ā*pbFɞwkԛ`% ]&:ԈE$|냈 m!{=TV{KǠW>'{x项666-K0#6h bk-{{ly*g3m^2!r 4v`ht@c$g9!yZ} ~?' Frш"A x5mI1Z] R)+Fٕu,CjYd*$.Aڿ!hhЋK7h9sI$QPWk_N߆#YX{Q y~\K3?G)(6]J{ZQF{$7bxZVtA4B06'lU.O+ 84z `0C$<3aN<ay\1@seqt35|1ڀex-@+Rw.*_ސ+ס<2wD .f:|սQ3,$y*ݍ9`/txmJ>EVV1Lv:Vv%?ilh K^7pxĽݗX.|k)T'i,IG7>"i\V`56Rcq'#oNU'<~^QwE'Y+Taw5Ű$k]F 6ącݍ;OEPT .);20a/c̭2:Y:z}%*x-QDn$Hq> sPϣuj>;Rh#yݵS |Ѹod9ufl۔­Pw^H02%?xix7Q]S/FIM$~qUN'N$;J#}rX٠/rWXͪJ.oNm ü)|>ÌRF.AYO9f)zQz 7xq[­(%Ur6,ڗ3Yv#'{+Tu[5ل]zȂ\=H2~[ pNFk\#{kɒꓦF1<ţ@ |BC=:^<2qsVK1Zo--?W%mTm$Z1/g gތ%Ws}YsCVixU"FQ @؁_~ev{!}g__|6 ׹.$9TQS^ںC\%A}/KjːƲyu!,f~WƄI`O^;ƦG#xNh# PXBTT?OI>I;eޕDs`laGƂNgP"(D:š=,7ٵsIIDqj_kG"Q"`46C>ffwyJ2X郸z8^a5?ZMEN \m'n*=ue6XN5m.%S09jUV Dװ/-/璉Rh8ZЊ{"^Dyk<ÑbX~zh!qeMB8AHW^AoJХj?ÂO|# mmqG6~R' ToP|Ѐ⑖]k7xqLn#.nkk; ?ݕ|{s4xJh\fwO o:h|%)D<$.qtG%EQB3,vj! Y^F~U J!ڒ̂G jՒ46;ލrXXdc z+Cp-A-WTY鉀'86뵤G#u-Z,'B͒9~ =W]@!{9aciV}U}]•׹Xg*fG:4E!yb[q%3,D Fq A 6FTwQɿTJ , E<ĘFXdT"wIJ~=dE7?׸EY>G o.f)0qk@ѹ% \۽>"(W .:[XSfvggg{ m6oF6 [Ŗ6FNo5rsnu%(|)M(VS(ixsu@c%P[34c$(wzZMnb0B!EPd)ĬMy_nda7 /'M>mw+ c5gL}Zf/ z Kn5.uŝ(לɞY/ǟgYFrtW]1rTi3E3Ztn %W*FjmLfm,5'o)F_} EH>lITvWt{ɺ#jKRvxyNts` & +c!LJ[NZ%/X <#j5]JxK:J 6QӪ;fʬj˴Yޚ{9\,Øt](*=rHr.O=V/0VXNr}@fpw5>35s]Cs [aYΡc-Kv^y;lv@իˎˎpX!j_fo51$)Fb7 _f1W+ !_{ T-/&S{3Qg.WOX`Wc0\"46?SOHkYKCU]hcr gy7C T3RAb=./4 zQbaDbD}kzvJ_Tf%LԳz  m eⶔQ"q[P Xe׻)fazAvl EOZFט[+ۂ8 ;T~V#IznvDVfE[O=`bW uEGʢ}n]\qWVTxĪ-M?E'۱x2FPpH2> /9LJȯuFؤAƪ C/T\ÿmbr~m]iclTd*6`KZ  3eI1rs^eGJ=JH8b% ⶞44F\?wC^a`ksK/J`iLc,aqg̪2"v&nJt>z1%9ky@Nٝ)recN&Lk케?pQ;73ZB!|?ˆ*:E֤NEkMDZ]K%vR-t "pSbNRLO<;ٷBvx$' ړ*[ hqЁ!;OSG5Z֤E֊ # VxF 4-e~¤#/l s%lYۦR_ByLbDUeVjCNpVGHW`fr+׫ ï/ ]̃lL[{L{Ύ1 os"'9 .dn z^l(k'RLO ?3$7}qɬC"{IR6!B2bҟȮKvy3J.N9K 5s#|$CAv=xZ7pC艜ʟg~qsw$gjDJ ƍ$ }n;Pfi7,RѠi#䶴#X]"~2Oq !SxѴ"Gw>9Z#g6_mDl. o*:DMVapD$bcҹšIlc-z8GRvUV&TH3_BQY;$߿ - Ύ}}$zag@nY*gǐҡ8ig*$,C=&$Q- $xlR+q@DLs|.;p0LpFyn82Qt PSSeP' 7Ò񈂝 5C*@s<(lSƼsqqpwbwj1btK˔kj2G쮨ktX=X.O9cҷu?#R:fH,(}w%sT~3l.Jk!3EgiW{1IjjuXj:_A1$#\6t*N~cSkg&kmHQ dv7P74!70#\5j obRWyzA 'r_M:WNST%@DDcųHvv;'TbϟbS9>S5Mn/a܅ |s XչG\"MWt}p*qpz]2ϑR1ͨjD^%=MS(͚{sy dmxX+f[+o_竀Bxf7ڣ tM%*9*&a@tG+w@O7u& Q h-^#9^a+b.!gS^8G`Xr-gMOF8S58.ܤ.JSjQ3{Iu떐rۂmI{\XHԜn9Glۉ&ʆZvN}.J2YU/ů8pxgFWO5_I'5NEma:r "'"_+28顭W/=͗+SvGp6ut} ݩ)h=M)f~.ƙ؏iq&ZVڔ!k1Y=>p$o-BKMLYt݌`表)/avq:Bʢ1zd&Qg`F+[ѣZ-QxzW{9ٞ;=cwnv("Z$wqXc*#(rmwŗNΖn_us0R!!]M ' "nžDJ_pK2·{쒭22q !x'TˣT~jK z[H5dO"w oeBWUŊZַd X#?$Ymgm7b?, Ɏ ux_v5bDE*1sX 8l,f}k(;RG1M6Z3ޗ7%9rM͗Kx$Wrw2ox o'J .=얓g\ Klړg)=M ?7,n g\h9n' {DӠ=5"4T½Et9 Eulދ34Iw +1J*$B_ij&{k26" mDJ5zsT3f*VJ;a*n ?K9<]DT#O#:UUIl$!q?ۜmxQX_jVU.CclRGg tas+z\3A|vkK+MQXr==;'Vʏ!<֟/e -Ʉs㉕jɇw<&A۷.b;grjTπhlʫD.+ˉ8i Goeq-Lqұ_mg& ,Eظ&\ D-9ū͋1;}>r{*OߗI魾3م)B,}W`>"X[1&`f+lMfj)2̜҄ Ctpthne^^FYJWz`eEV 9=4D)9~!M#&ǟe,I0F };L`rkzkAԉb$/ ڹqXC7+&؎||͡*)3 @gLku#mΐb:O(` =h|B0Sb#:#QFk[y#\80)F۩}{X*0hDٯZNū\(ڳI5v[@ VND֬t# rkħNJSޏM<hPdYK$_-렷tLzu2 0$aצ'2+-8XÐKt (U)<_6=<ٗGq?⦌њI=e@B󖗤K-"5ۃ 2VI=mft ˔gxB6YE>Ձc7dOLp9H|!oџ&r~g4,ޞŲ5$،k ͌O̅B0{2{56jN <Gֶ2wujGɹSo VA3$SۮuɖТE{fN91O0W^p==,})tPdZSm F(3*um(.E&M:pĤyvM«HY>YT̉6m³Y1UM\t`F9el@ p ǖ.dhFSJTBVFQg./'h*czݦI'jpb:șy\IXۅD%lA9 D{_{.OK])F#Ӷk{yomO(ms;Q4!|k)8QK1ѳ LoZc'3O`Kx ꭁ>PBCJ ))&ǔ(8TFR/1F@p"JQV;EqFBc3&M.8%UkKϳ YԽ{%֣uJHe0hjy1D]C]-Pf g"|cs&[{'d`}4.p%t D|ycT!d{AzoM=-{4&WR*\!Z\I3M15࠮xs<v[8/NTB%#~PDc \N{2;nU| {pK;f+qC,gmΒ8{]zbѡvYx΁?LK`șڼWB<|.iS0G=@.W9RWB)n?-'AAj]®PREw0%nרhD6^H !ˋ!_M?9mM-0HpXBI\G117CkAFcW:0[%RQ\ޗKrv EM F?|+!˜PHj*xaX25CleH=}t(DCC ,i?X)' =G0b o;+p{ / ±{P*z@$jޑXVfI YZ'?`gJ_v7(^#a, K+uY7~B^,Hܿe ƬW8.x GIeJ.|2T[TAM (7'C?hլ5\*R5_EQ1՞NH7߫ԗY~v̔h@+RqxfLr[/Ϭ.=Qlku=ST19Cj{xt}Փ8RtBwEDIÂ|XdSTJF؛ =K0pz[5?\9hʶ ׎|PRs݉pLk|orcw{숂3t֋`ɿ~i=$fۖT8ݑIҴ].UfDPPiǮNpuHP(ӒMAH\7 |^b[Țze?.w)IV`\A{iP8־_5"x`1w_"lD66}7qÈKG!ARMr O?@by-,l >+@_`ռ*dκ1&+JU̐>rASʯJ8qqq Br5l<'mH 떂P,? lOn8R*ç8GNZ| ldmq],^aܝuoYZ~ړu,_Nkna 2Eъ`u2`r4dn Ğ6lн3pBבRJO/^;ߎU/3M3B@oO^)'F\+=aʢ"JaF|ywOԱKZ[}VE$5A6Kc%JOB,wȋ]\~zc&E?2,o*'1!A}6mtSY"wӂ >-CE2pGH'(>HJa>[֬ϨO..5"lBm$:c;}dFWD2_A}/8?Vq[!V`cԖlYc\KdMNNnM]ksUY C=8w e+`#NQ#%OaHB/o9G ' )h>p)Vt8!?'*K. PoxNtBZb7,ca OA_ KzDQk(wj}Js$EC2Lɸn@l]&xb\LDX}P(RPrA9?k!l]ǀmQ. nKBM}Ww#I/6FrK}'8B%mcs=Gbr^&k/qm^~vk3V0ql 2U"_W`#ad G,ʟjP _RSɘ{P5d%,ƌ+\: Hs׵F04Tv I89k:Zg^`yq+،xЫ7m+C@ɣx;l7ke *S,8J!*IaI}:y _!/#wk(Uhp]l=zVĹj4dCdKT}a3rcR -(H\W雾*_8p~T鷉hc"Fc&٣9y߀ӲW q cRjsKUc[[b+e >tR-ꑋ|u@T}7`q=[rxs,BgEXu==M@U;wnXb8 .f"i"5r2&Υ{Q?\쭂.=Iu4 scVZdvإ 7t 8pB4b";,46dVNVZA"7fe6K'gb33N_laGSeXYrf00,b:+tl{Ѧu17x/yl Gnϳa&[NFn  PM*Ti-% Q-IQuzHJ:88--4x0gKв(ρ)7ARGD5f2?&}>tmȜo:ɟ&b!D-~Fo'\zSnS O *Ad71` ] P~8c,M֐ÌwtP>YܤlFʹ#~T&e%.7<|GBD qXmpMRB;_#^"o@ԑ 8K؝?N蓕IF) Πtgϖ77oV^SFR$ۼmk8k8ITJmܒ!绸hoPH$t18?_gFlݥnRP}0_wbTRքC$kTdW_%ҪcѶN~`D@E)'Aɰ w_*Gץ ڦNgj˼=z`XA]c(ê~} %j`,;Fi~=ecՑV<]5N#[D=!Q2Ѯ-ŬYM9 .إb -Ye8lt7Rj)=]JNqEM ?1*0c1X=[=j|}Jfe{"2\I0`0v$3 ı-͢STZga R(btD~0mTobNP# "$>6+*.Y |>R#PqpIFǘ՘eVIV?p3p ݒA wlhTM}o<~g2㷶 YZ