evmctl-1.3.2-1.38 >  A `Chp9|ay/nb :-:ccƓw)!!kT9kܷ7T$l[N@s}sɶ뫀m< ]=) _elG|oz3oǤ/WH89Ыl ["Pbq$;@B%<< YOH1Ufzϒٮslz cWY=_(z.O-zLEF܇1t9؜ɉO/97bfe9c74989d2c83f76ded928d6142654c4f94b38a289cb236280e3a793122e1af3fc631cb79a233b7e43f75a9e3b194db9125e`Chp9|z&7NEI"ZW zoZ)[Ut0QPP]0ؔh.8$⠊7Tv)#.]06'ؔ^{e:/[0͞EhOy?Huޢٳ1lP\C'[+ BVHz\ pưLzt<=?J_L u F op<KKg$uY*~D/O%~5^/ܯ~|[S)>pA),?)d   , %FX n|    R T\fp  T (y89:B%kF%yG%H%I%X%Y%Z%[%\%]%^%b&c&d'e'f'"l'$u'8v'@w(x(y( z(((()Cevmctl1.3.21.38IMA/EVM signing utilityThe evmctl utility can be used for producing and verifying digital signatures, which are used by Linux kernel integrity subsystem (IMA/EVM). It can be also used to import keys into the kernel keyring.`Chcabernet'SUSE Linux Enterprise 15SUSE LLC LGPL-2.1-or-laterhttps://www.suse.com/System/Kernelhttp://sourceforge.net/projects/linux-ima/linuxppc64le큤`Ch`Ch88abfe37589096f43a7e49c7d6036f5c9612f7bd55d4bb84fa6eca9256c04684b957ecbd0f2d287b1ac6a6d1862c000003807f0218533063f5d6b9cdf7f387carootrootrootrootima-evm-utils-1.3.2-1.38.src.rpmevmctlevmctl(ppc-64)ima-evm-utils@@@@@@@@@    libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libcrypto.so.1.1()(64bit)libcrypto.so.1.1(OPENSSL_1_1_0)(64bit)libimaevm.so.2()(64bit)libkeyutils.so.1()(64bit)libkeyutils.so.1(KEYUTILS_0.3)(64bit)libtss2-esys.so.0()(64bit)libtss2-rc.so.0()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.1__u_6|_{_*@_*@_*@]@1@[ZZ@ZYY@YY]V%@V^@Tpvorel@suse.czpvorel@suse.czpvorel@suse.czpvorel@suse.czpvorel@suse.czpvorel@suse.czpvorel@suse.czpvorel@suse.czmeissner@suse.compvorel@suse.czmpluskal@suse.commeissner@suse.commatthias.gerstner@suse.comjengelh@inai.dematthias.gerstner@suse.commeissner@suse.commeissner@suse.comp.drouand@gmail.comp.drouand@gmail.com- Update to version 1.3.2 * Bugfixes: importing keys * NEW: Docker based travis distro testing * Travis bugfixes, code cleanup, software version update, and script removal * Initial travis testing - Remove 0001-help-Add-missing-new-line-for-ignore-violations.patch (patch from this release) - Add make check + dependencies (getfattr => attr, xxd => vim)- Fix missing new line in help (0001-help-Add-missing-new-line-for-ignore-violations.patch)- Update to version 1.3.1 * "--pcrs" support for per crypto algorithm * Drop/rename "ima_measurement" options * Moved this summary from "Changelog" to "NEWS", removing requirement for GNU empty files * Distro build fixes * Remove 0001-pcr_tss-Fix-compilation-for-old-compilers.patch (from this release)- Use %autosetup -p1- Remove suse_version check for tpm2-0-tss-devel as the package is available for back as far as SLE 12 SP2 and respective openSUSE versions (also check was wrong, should have been 1500).- Fixes from previous SR (reported by fvogt): * Move ibmtss runtime dependency to evmctl package * Remove dependencies to devel package (should not be needed)- Update to version 1.3 version 1.3 new features: * NEW ima-evm-utils regression test infrastructure with two initial tests: - ima_hash.test: calculate/verify different crypto hash algorithms - sign_verify.test: EVM and IMA sign/verify signature tests * TPM 2.0 support - Calculate the new per TPM 2.0 bank template data digest - Support original padding the SHA1 template data digest - Compare ALL the re-calculated TPM 2.0 bank PCRs against the TPM 2.0 bank PCR values - Calculate the per TPM bank "boot_aggregate" values, including PCRs 8 & 9 in calculation - Support reading the per TPM 2.0 Bank PCRs using Intel's TSS - boot_aggregate.test: compare the calculated "boot_aggregate" values with the "boot_aggregate" value included in the IMA measurement. * TPM 1.2 support - Additionally support reading the TPM 1.2 PCRs from a supplied file ("--pcrs" option) * Based on original IMA LTP and standalone version support - Calculate the TPM 1.2 "boot_aggregate" based on the exported TPM 1.2 BIOS event log. - In addition to verifying the IMA measurement list against the the TPM PCRs, verify the IMA template data digest against the template data. (Based on LTP "--verify" option.) - Ignore file measurement violations while verifying the IMA measurment list. (Based on LTP "--validate" option.) - Verify the file data signature included in the measurement list based on the file hash also included in the measurement list (--verify-sig) - Support original "ima" template (mixed templates not supported) * Support "sm3" crypto name Bug fixes and code cleanup: * Don't exit with -1 on failure, exit with 125 * On signature verification failure, include pathname. * Provide minimal hash_info.h file in case one doesn't exist, needed by the ima-evm-utils regression tests. * On systems with TPM 1.2, skip "boot_aggregate.test" using sample logs * Fix hash_algo type comparison mismatch * Simplify/clean up code * Address compiler complaints and failures * Fix memory allocations and leaks * Sanity check provided input files are regular files * Revert making "tsspcrread" a compile build time decision. * Limit additional messages based on log level (-v) - Add patch 0001-pcr_tss-Fix-compilation-for-old-compilers.patch - Upstream bumped soname to 2.0.0 - Add tpm2-0-tss-devel for Tumbleweed as build dependency, for the rest ibmtss as runtime dependency (needed for for reading PCR in ima_boot_aggregate cmd; better to use libtss2-esys and libtss2-rc than require tsspcrread binary in runtime, but tpm2-0-tss-devel is available only for Tumbleweed) + the same logic as runtime dependency for devel package - Mark COPYING as %license- Update to version 1.2.1 (included changes of unreleased v1.2) version 1.2 new features: * Generate EVM signatures based on the specified hash algorithm * include "security.apparmor" in EVM signature * Add support for writing & verifying "user.xxxx" xattrs for testing * Support Strebog/Gost hash functions * Add OpenSSL engine support * Use of EVP_PKEY OpenSSL API to generate/verify v2 signatures * Support verifying multiple signatures at once * Support new template "buf" field and warn about other unknown fields * Improve OpenSSL error reporting * Support reading TPM 2.0 PCRs using tsspcrread Bug fixes and code cleanup: * Update manpage stylesheet detection * Fix xattr.h include file * On error when reading TPM PCRs, don't log gargabe * Properly return keyid string to calc_keyid_v1/v2 callers, caused by limiting keyid output to verbose mode * Fix hash buffer overflow caused by EVM support for larger hashes, defined MAX_DIGEST_SIZE and MAX_SIGNATURE_SIZE, and added "asserts". * Linked with libcrypto instead of OpenSSL * Updated Autotools, replacing INCLUDES with AM_CPPFLAGS * Include new "hash-info.gen" in tar * Log the hash algorithm, not just the hash value * Fixed memory leaks in: EV_MD_CTX, init_public_keys * Fixed other warnings/bugs discovered by clang, coverity * Remove indirect calls in verify_hash() to improve code readability * Don't fallback to using sha1 * Namespace some too generic object names * Make functions/arrays static if possible - Upstream bumped soname to 1.0.0 in v1.2 - Drop ima-evm-utils-xattr.patch and ima-evm-utils-fix-docbook-xsl-directory.patch (included in v1.2)- ima-evm-utils-xattr.patch: xattr.h is now libattr.h- Update to version 1.1 * Support the new openssl 1.1 api * Support for validating multiple pcrs * Verify the measurement list signature based on the list digest * Verify the "ima-sig" measurement list using multiple keys * Fixed parsing the measurement template data field length * Portable & immutable EVM signatures (new format) * Multiple fixes that have been lingering in the next branch. Some are for experimental features that are not yet supported in the kernel. - Drop ima-evm-utils-openssl1.patch (not needed any more as IMA got backward compatible support for openssl 1.1).- Small spec file cleanup with spec-cleaner- ima-evm-utils-openssl1.patch: allow building against openssl 1.1 (bsc#1066947)- added openssl-devel dependency to ima-evm-utils-devel. otherwise the ima header can't be included if the openssl headers are missing- No need to remove .a files which don't exist. - Drop extraneous ldconfig call on preun. - Update RPM groups and descriptions.- ima-evm-utils-fix-docbook-xsl-directory.patch: adjusted to refer to the "current" version of stylesheet to make the build work again - adjusted spec file to apply stylesheet patch to SLE12 as well- Add ima-evm-utils to SLES. (FATE#321603)- ima-evm-utils-fix-docbook-xsl-directory.patch: fixed the nwalsh docbook directory again- Update to version 1.0 * Recursive hashing * Immutable EVM signatures (experimental) * Command 'ima_clear' to remove xattrs * Support for passing password to the library * Support for asking password safely from the user- Update to version 0.9 * Updated README * man page generated and added to the package * Use additional SMACK xattrs for EVM signature generation * Signing functions moved to libimaevm for external use (RPM) * Fixed setting of correct hash header - Add additional requirements; asciidoc, docbook-xsl-stylesheets, libattr-devel and libxslt-tools - Remove COPYING from sources; upstream provides one now - Remove automake.patch; "test" directory isn't provided by upstream anymore - Remove ima-evm-utils-xattr.patch; libimaevm0 does link against libattr now - Split package in three subpackage * libimaevm0: contains shared library * -devel: contains header and examples files * evmctl: the kernel signing tool - Add ima-evm-utils-fix-docbook-xsl-directory.patch; fix path where Make is looking for docbook.xslima-evm-utilscabernet 16150304601.3.2-1.381.3.2-1.381.3.21.3.2evmctlevmctl.1.gz/usr/bin//usr/share/man/man1/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:SLE-15-SP3:GA/standard/49fd1be082e0473436a94d5bb7ede3c2-ima-evm-utilscpioxz5ppc64le-suse-linuxELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=ec439658a1c87de42638bb6aef3858d7d31c89e4, for GNU/Linux 3.10.0, strippedtroff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix) RRRRRRRRR6&?ޕ]utf-8c5124708c695dc12a3f92bdf724498d70f5b5338511f07884899d6b55c89e207?7zXZ !t/)qB] crv9wJ)N#J rH #tF+#Lx/Vnja2*.2; 1Д?-ݡIG_Lx$œE`sCs c"nR+򅣲cz;=`#2O~=W#!$,_pX{\ OLHjQ ʥsUncMdZ2n}2$Q*"d|J,f+MOxfD/!{> 532JKv5d\ϋ_ M'2W]/^vtC|<CÙ9۸V]2|+7a텳*p}v L7Cul )tCr[ahQքҒu7R0䥇lǰVIlܹf4auJp JWrCi&4?h-Q%/y &@ 0i`Qvl&9c!ΖG$sg(( o@gl@ 7Շ)ڈR*1!O|JA8)V$+)q<8>. t &Iy:G~Bpo+_L+2}N\s#%Ui \CYzGh>Z uY8Mm3j[uE' ioEiN`_ rAJ; 'ɱ%ޥ.k'CKU>?r >,<\ 1+4dS7M4iԽen5ƍ7Y/\1E쥄v|G}rdSA C[ƂZל-YN=;ڍN/׼Ny{(!s= +/QHZ2m|ήTk#ҾRGqs.NG"~.N^ `%ګ6{ I4}K/*t .ZsBXuJ0ED-*͊R(sbF=ɫn18m" H[CکI0 /5V[yv-8rpA͋ye@?0'n/$051IMzH!qNIlM?〧"+YRG=xҳWp&)6):Lt,mTn#e&t+N@HjOQaw@]W;%X6'wKOc҄'Ak85Ւ atqwJad3[f)p{Ci@ ItEnpn1w0n_i_dف#RS~ۛV0zsOt}wT-cޚeF\ݦre' IB qL1eVs}Vf#qְ{.=7  cߜ tТ?A Q#yW,˫(':!j[GqEඞ,+&teY)~"Z7j ӟ?+`o5]fU1XNoc҄ CnӰw+Z8jV^BXc/L_bE2KLq?_Z0ޛݽq@bƽW5 dcs>M%J_ 5!$FM̊ Ehg#tNv>rLߜ>X ľ,$M!x0$kKv[#BZz:t@$)l̋K1'nw^c8h!aOײg`Ϥ"c&Mlz坭y\j|˶H V=1/ Ljr)e!8r[lRӫ 픇nׄ?##Sz1`*#uZ2'#q- ?C6&Rg?QZ%JsAE-Lۭ$WliFf2 =Ѹ'si女H95׍~ݺZ1k +&sI?/kӿť"8ʅsg+)%c1B%u56BHQ0by [3nsn sKRXi] 8T'@t9]A$7s%T!o rAZbʸLj!" pZ$a֏1?܇u$`]֔gyi"s1kȨҮv׉ϑ+9}%oasOzMknrR7;5EۣJ~ a_+Ē!r x@/rl(ogSD|c $Cb&WnT>"k&ˡNgYҭ 1pg ;tM}&M5c=8M\JQk#-XKcɣ;ow2VqgV))DHNSSTu:`zT̠E 򍃓:;5Zh R oXBZvo ލwx,d?6K+g­˃7LQ,.I s`4NۖM^?VG06s@ ,j(PJ|BT@^HS]O؏AfX GcQ 9IѮ&= Mưylt,9ZH>q.%>)zP ^ Z+sz.PQ NԦ]!T/Af(5祉 fѐUA|_ [@w|A0_[R_ U7'T?7 ojCF&DHR92ſ2.}r0FJ5E}UʽR ETHӶzB-$o2 87teRWk҅6d\Q~ZEFF-zd)7n|\<,} bi;=,GE'LhtNsDΪ >IIÕ&'|FlfZYr̤/i@d)όl&5ץ(=~/ż??A;紀A, jLԚ:?dX1k,MHzG*_떌|fE%vbnԸp7D.DsR`w+0\Ni O`uƍ"z_" +Z;zxVpWĕS*FzUhǫ/ꌼc`*SA䌳dpwsWwCy=- 92ynʜ+9ņ,B)v\ͯR ݮ%^qY.bIyS;ZWgI.v3ʫ?IƳvLuIlHnD|]DE2\|"Dqcϛ-M^n)6 V?[K/aqIJD.Hn\ukCb<:Ѱ5>*)O:Zk`dHmܞ~.h]'o&:$_!ʉ\cMHJkC:(@O%"'_[)]CF3t.sܚѭZϬ03. ( 4ՋsX֭W/fC;zCHӻ?ާV#pd(KYF{b`ei~YXrkg_ª4;8h.fL31TFJ=1!NcBw/L`O1H }*MB2K9ʘt*p7:![33D6[@SN?e@㢫Ua%.~ZoXץ9CZ A|#3b]YZ}ptP̉xC)*{ZSg?S_??mu{0sjl +Hy& D%N8+uo~AI^O/._Sx,%*|mɥ2Ԛ z8I#kNTn&$@aܟ vVr+ Mpg̭ro)ƹP_}$&@we}xkjX~Owxk6]0G%i},knoyEND^7Y+ڱxht.XI296}RUE6YEhcz_[x YR;yh>䀌R{>6QBR1EۀʖX<8.GIY]s&Qy)$ZD.dfz+ǀ.R1dM Va9װ#Yr{VWCԃj1G4E/I>e ߑq )]]0 B $Te.Wę' ; svK!'p3x@o37N %+ S ^m`O_߁'-1Bwܪ@DXsSZ"s1#` '@I3gp" Ud 2>L['ڿEsZ+4few]ZKuXiiHC6>m@+xz'9aڇkzC{>=H\l6ׁEkX8%yL_˄T́s3x"K=K1@^ZN0Yt Izӗ9hzv& cb@ kw/ަ.8~޲1DI^H^2d$M)sOkleȬi}pv\EI&. Ln$iEiXRH `JK+3nncd2M]׀o z{p"7puZP?_/9&iInqi8{E??¼Z.Ec{JT#R?=Pn{DbZG3h5WXkl lU*":kt R,PD 8Ϛ:9KBQΤ8~ν2v b;^$ڪ?HǻFpo-ւG!B.n%r{dWʰxWz7DyG>Fu# W&pT>]qo*fmW#FrY7fsڰ碑]8p7@<-,^.IH/OXm0,ZHkm2ƕGœox z|v6dsP!;onLè,gvv^Ub~S P)Qڕz ~ٶnӭ cfO wE9OWG#rjD_8QӅ-05XwO%؅jF^$@"c}t[*Q}"dI>br?$ dLHjja:FEX NelZVmWQzskXLqy5R}#%3 5u?{/Z'$|pBh yRJm8~ɕGR0Zֽ }+I?T?⟇aoQ=>H0&.z FJ~Zdu=iG1I`(T_3diyu+"[H5uNwA.\u/WjBEq-Tc+bg{5Dp8 .@T$`d50;uMo2V70S 34 ^ &[c}7pc z5GSi䷠dO>0~Of`b-z4W}%k3L`?-2Z/{6k ]>xVz">o1V8*3ho_n$AU 1kq1)j̷# I4vIH \ ?\BG]ojRC赒-*5TsP+{ $]7.l=5&1X)CtY7/\le"UUl#N|'ki["( ;R9w0S4c></ @ٱ_I Bð9r7`OH+Tfgw!Rq]* 84eE,4kT"m|a˰-e@Μ+o/1T3p5ASb _Sԉ"lj;eG—qԇ;4}·[D֒2bzH>F3[reRmccdɊz@s% 1P-Sf|:K<j"+jj*|zs^HP~~YM褟4]2EC YDi "NURJWA_q{wZ-L`x"siOGs4ZWl _b;!$+kKFF^TKIܔw*&lю/qlÑFrITU&9lOzfԡz0ޡEu~Oaq\QVK;G^4sza đ;4DdP 5zTx(RQxߝr}vFA2-4Ve%C|A3/ԋF}{-EAG"-i`FpWfnX `2$ޫ#5én]>֢ʼ>VJn$AݑoEFݞu&GJiZmOS0v2WargTz&ޝ:lכ-",}Xc7 cz2n 7ص\А|KM , ^VQ{9_s?M/LEWr;G?@8}  Î,w9`F7Dw4˴T W*o9JSW2BߧR/q R4p<^܀wAA+VeO%a"tjL 4=.LLy9H?SBrt0z/vi}WoQ5 Uէ.SǢ(bmJ'XUp;pa.D\]F~ƣd<)e0,C+M> f;@$;| @X s U"?;~6I;oB~XFTƸ{U.R)Vkkː)ɬl6A=WڼsҖ:7yJIjl/VyǒTh\\5( *t}ѡi܍<4vB=_fu8Y  J[[eJsqڏB/%&f}le׏T S.yK'?bBK0SU0 ^G Em%M5x'@H9ށdhG}QyI+~p֤ػnpu"uqJdtf*U,eؼԨxko&ח9߾ ޲u)u"EzS4l8! sNcĒΛKKk!;kŽGQiۍ/|R C9Ψo63т~|P<@*TZe2 h>|=P/LB>ʃ'$R6C$\+#|A߼N!M* 4Y%X@ӭDFű/]1ji%UJI -M k, mMA1ϯ́D:\WI E$.+~b} (~aXյGYZ ]:b#aZ͹ԭ?gFj_%Q4q{Q@xήm_]FKH,4R ~3vJq,ŀtFx1ָ(Z:C0 ֑[DS6װ_>Jmޑ||סr,D'ӶhrHņjnrԇEfv9NJ%j:1_bH*X\&fG$(¬vQpgZAD+JGlB$ΐkPӽ}Ԋ]mF|pF d=B9# ԅYW!W,~SNxg~ `~m|X0qZXH@LW _" P9߱Fկcѥz#-d, 2a_;+Mt/+q8Sw50\Q0 JXb#p~5:MtNT2)D/YuMAǺGsnc̘'W3`oc7dLQWyf԰#ye;"%X)0+u Xdb.op.Sے%zFOJߧ9!Mş&9gF xGH6XlOjO^ݓKn!fPk}5BN6e':dbYonr,nN;݆FJqOzj Z7+߯Iq9t_/ATPwU뚼9 Y@|~o_c/$szy*Nc!%,r1`AvxH.awPi뼐 c˘g$ZqȲ$y /,P{ Gy&(#| Od?[Aw$WNwjg =FI"$,x!qD%$Q-F!9zyJ\0<` ~Y@ZX|ns`wnЊZXye4(ޕ U^ +lh(k(lBuיG-W /Ԥ|Jŋ_6J״NʐTu_FLm4]tQ!KS+kp}>u )>(к˺>mVƭ6 9[`{ėd45 ؖ&\fJ~}}RruFBҧ TFaI|x!&•:5u1 _>֨hc=NE(ɇ~*z𡩁VF dh_Yewg(QЬ׏DGp]ggdsYnKf8%LK'^B mnOi 9Na%@KGl+>. XxG'T '7M-$ dCM|kIJ5to샪+9Cv:~IHI:Z "Yv+Ej,5o:,2FnTMB~T_M\0ڰڀ:Qpcl$z8y8^A3x{[ J]씐E_Xظv*U7"wؖZzDˣ:x!= K)ҝoS&'uwWiNoe%>w:5l4@3T,Ʋ}>x᲍p3R #4L̺)NS?.u]wVKfԫ&؈ H_%M` tylpX RMT\ .qy}xM cHhPYaJXRxlRwkMKXyH[5!PHpYs9u*2RFkA'_o ddˬJhǿ$ hS}(Ou%+2~?6WQDS;_ͱ£ˆd8s+xԣܷq_+IB5<*U'Ma{*0V~7 Mtuc=4zGP&:f:HyQ>>2DS4\^*[p힅!)Ļ~1s;Wy|')"":NF@(f#誃S#k[X?WMf}7.;gdfJ׼%/W)t4q9»xI e9%XdTN1b.dx[SI}q2]^+ wUGϸ3e hfT7Wob9dvYB<Ejnj\Rq.)L[<ҿ?B1e>`*Ψ 5F>Zq~D!4vnŤ@;"Z=c"844Q2jQl~gt*,rU2b}(ED:Hs稰{!7Q3H) 2kɺo8vt!0~Dju Kĉa)#EށD"x8 ,>sC wYґʎe,{|:Q,Ӆd[5GYI|6¾:߯,4rя6 ?f Agg/qN.Q r3~)Zj ֺmJ.kݐ Dpi/ˈ5Ueox-Zoُl8Z|UjFNQ%X -*[׎'M9'<)T>vNWFAmwڊ_fq\vTX6ްs"~iA Vj:9a[@[~ ypnu {H D<ձ}37# s غHBQ!T3DD}dCQ5GzKgF)U*Z<= ggm9qtRF -v-OF$띩q&OIRRE0<;]_n ͟(odx,^Aw(V/ 1NwY*cs5ۧe( ܀1HV_YӸLIg@!uC3m$ :]~y؇ DZyZ L)y'{m7åqJYL(a+ 4nr0褕oIiBp-VJMd/tP I4?*י;w~ӦE^CfF2c J\Z[ـ@Ӊ6en[WJ?5sP"m0E`hShn]rבf\xT׶LͭeMc#19reMSC43"+p,TuQV {C?n0Xq%ht QJ1W0((b(tBˌy]>Gm]ɑ6ʌtKf (6هonL9jFEh7N{St(y.31U$VZysu ldĹCӾ Ż8X` 22[^f!ߗ;"H Af~ݏ,^I' qCBt vuz6aZHJl 6xtu~w~AVB/29UB.#Dl$ʤF~VW:ss0\$,{ CLҡLa? 쒊첼lF}X'`G"- CzwfT_4 RoK?Ya?k]|kDiXZ4Bn p-kmGZ9VTwE.{KAn7Skrx-Mr1@+oE|Jc 2Jo @|j7(?5LwCƧdi-!X,94$q4dem~ w'J*XIjm_UW QAvm<bè9l+&0DPi&h9E̜:U]#Uw|Lcn_0V: *Q. {\ Ag P*{P V>BgP!Ō a@2_[deSZA.Oho$mֱ|L`x}%ݲ]e,O!^YhfSR^(ߓbx|&<V8=Ij! [$⎂ةڊۀ0I 赐pKFI#K#M %ubwFXL x+?n B^2vJT^xs%t߸E}Y, ͪ؃_t_-dM\ .@h,(C3`{2cT .z-T3}KWƦ)5Ss2䇗:ʓJ_}ns~s-0;ڳs`3Y*$_ҠKˇF$wXˆ}̪l&?{/ZjHBH, Qn6ʛe\0:aʅ J|I=KWjFxo1WOW1b ,g/ڤyDw}{p'SF:?Qw.!JWBr _ ,<@޴FYadd8~XbA8WBV V,0x^ڙYra:SbI?"{ۻCshAc] U2s S+?ƽӹW8`ӧ*wJDZ1N))x!Ui ;}6W`9u>r`Չr'6k6֗u߯%U:,v,u2\YLpC!P}?H{mZ?%U*_?NفH Pi}" EFo N\}?b٬κtetRCٛU lh? } ^*!!W1TfmXUV6[;.mz$8=Ǜ6vqq$рm!?\b}q~tanOXg-/Qk>u,gxJگ^ 4Ds.q3|WY]ٳ;":u+@"]=?r1O5۽ cB_YRd3Z֜Z㙛MmjR< f{}fL5&_&o5;X(g0\`;ʴ!WgT˴ޤ)xhLh])*Y5u4 f踌9&6>=Bh"r h텓\×cTwsB̊--&nײkobJ)O]&lĀ&1 vCRRUOQ4<"=7,XM(B\A9> ~sŶ6H'1 DPC`QV[{Vj؅UlC&My+A  E`[@Y!lou`_^OX]oI)_ 1R%p%f+?S;fs\TK'V(r!haWRfvQHVuϓehs_lGrp¥I@D08KGhP>LCҷ mr.-NtE:7F*>lv4Mp y.?W0&gTDj u:}G 䅻U)DcT(wOҡ}pUxy^;%Ԑe+0Zp!aBdǜUCÌbzld,L`Y7'8*5@m:pa:JͶUc׮)<7W`$囤;} q":H aIsɷSH,>^j;w2问PB:BdO(8;FLsba3x/&AYH7SrR~bx[ ݃}2O߶k D"} Ð+Q3c5Psfga,%߬6.+bRd}war_ RPy R|7m 4(Ǭ; ?/wYBpԳiH{[!@/ t=60JG(W#v EP2~fQ)T6'k)ɐR C^8p4>/=kn~gZhQnaƺql9I`U 8 ]`~G/&5:0\P*84+"IqR"L~93=Ʀ̧\QNn> 9!^)9t4bOi])[(j;hI/uG>%Ź[jЏ 9hv{`+RJ[zjn6%XqB Bsbe^vBJR<!I1rD@u?X 97%$=YH Ul"&5.c.2XE&%zO꤉D$?;g0 pVw%X)?ΰ507E嬁ЁkbNE1*J"ч&5>d!TKY}h5h<#)T] Wp~q_T{ #6gNDw+Wc%9c@moel3#wreYcVō(nƘA;T`HѺe dphۣ_Jm8pɗNڽ{fG5éQv &0"XL %SnJZo͏ۡ6"Es_hmvgxs59Dm-9S-[yV1I>>(bZ%=E o& 5Q .:ýC:ۊmaй@R}rXEjؼ~7OϬ, 8FoД-J"R{=Ur2<`Z~o,V?gâ\/-\p{pp=PAҭZHO.I '"-\ɶmQTs_IղsE|g_mr[TNfC`=RO&t1D] ܯHT[n> WkQ,`(I(*Qx~/!Ѿ.V$ dNSAX> |W{wjw=Oj\j;S82"ᾆHr]l5s_j(b4MWN B=Ml9 a3cAbh; }\4dhXH8:E|q׆`XUf1_kf\Gl> *+Hyfkdo7Hl V9:p(+^*0L_CO]F\fF@cM\ݶN!iO[/9 1 8w[,}|[]ܝLbZpre,T6;c(QYȤxuJs"A{0pq YE")Í䃳0c$d݃ &ŌJ֌P$HZ}U$4Z[g&Obpy\}͠5l oChpvO6 ҽh ~*R ז9Y4u@?C~e|f _]A+ib# ZWiBF*-7\Ú ŹU4jYF=VF¯@Ɩ>J|`IG,v\Bz؈{d42,_7MGY`?7xy排@̦TVïI7m2z6T=1-b_OJآkEm5#U]9ND- z@OPi[*؁_]jxQ){i&RJVgDţ>6 \&(\%@ K]]4-o6.16Mg9&rZQ."#΅h)8[Sq " bX[bi=gJbgpx ϐ7*6>Q !!le%e=DE0ZҐ*XZ>nk%r&COUlo&3m)޳魍_ Wrv*<w\-ũEv[SVV c&6 Ÿ RH(V"Gcpt)@CaDx%}*{ oԠߑA˝G `Q /z ;H1^(C;Ӗ$ FlrieL*p}Ti8/!/Q z1`=?ۂ=$%8 J%LB\|!| Օ<bntKlC;P}gn\vyiR ǔތ4FU-^0/$0mqJ֘iI2ȴSoO&Qjar[9[?C* ɳ\Fq-&U5Rۭ'9ڟdk]ǴhD&\á-2z]wPC :̋(sIvΔrk@YBVk@ DVA]2o s,m0y^IȶClA͛n^9x֋<`&wk|0KP,2I]QB"Baa>p\ 8O ب(F#H&t0YY^1R^Τ%a<o'u;\SJ3}>6R B ;~#Dݥ{8k|Xk:,Y_0ܙ-),(LFfAqpd ϳ$=apJ3鴢N!O⧡k&e{Id6Jk5ySwjaӣNEK:OLqoVD{RR2߷5%:!'%S'otzY[Mu@2^o/-oEAxkl[^aӂ |Ye:(fb--=yM:uA)Ӆwt?I5̦,!Y!%um 2g^rr̕/Hzk~%oKBe:Q DO e\j{>Ю[{JZ2ίRhN->U$zl.0uDɟPMcWM|:bAjȀ~Ef̳$6kFԈVt˵C{fxCz!\\xyL/w5dݡVa [NA?g7h`"QyQI"#IUꀊf0%6IMԠ{ơ}Ӏ}{-"x&BERA ׳A^K#h&>+cqF`` srAAAp30bSaI+ZÛ^sn *SSϲqYHىhcQ[PM:} ~,(,CQK:rL'(EN2A ] '"CmY0ZE]qVp0L*9nnusÈ <2u`Ku8_ l1Gv8(S2ՠ~#hq)P`cA`y@ Oڣ=츳RO56y:IHx84UwB&墷e@Vfe&% ոE˗mOI+DBxڮKـ2 ݄\{Kb5_12<0ԑu|hě1n1aVV][?ҷDc1.f0~ ʖ"L7C6ʐpU}ԥ CLINeAָD%Iaճ%WuZ \g6-"yA nf`!:jюG0tZ|akHz=Fř |5\pG+`iNNDxo?'[Y_g95^=p+zk@+}+1ocyz)୉4|zZmi Įm0*.?o>ZYʤ-* \'8]9XUivmWpPQGYb}9yiU`I~3śpfCt{1v-qթ+Z+3Nu <"b0^OCMx'/ǺT,h0p@fnd`5z]Y*&G$=TJ+{ͥ6d}WXyycT=E;2PW%Y G% ~Oò^ܓ¡ ~X;6Ŋ5t#7\,L ~}4B.8G(Y_tPm]^[ h;4Rf0Ȥ3ǥ8JRCOunE"bvM~X;*<˗|-6U(/kc,2=4_=ȳN8 T7 <t×yj pDpU)X3.1gNsޘw짛yJdCqm+f^cbPx♮'\[%<~.hmZIdHDM]pD;!q[J&}Sq,9MȊ:Aڗ3nYG"@vq^9߄ yuYQJ7!Hql$$1AGwA PntnI( x,hw`  %5t!lytXfdv/A~ &O~ORO-dJ?;6)u}!r>P# !Z$4F9]_B<ڴ+~oS`*t}1"2}h.LTy\i7(]ofuWnr_ח7ݷȂ /U `3$j+Z?6*~xyvj"'k. x`T+J%b.) feªM^|l_1Vs{ ?6].drWڰ3F9&7(Է k ] YHm]=BwS2B@dhtBcJ+XM==s#qZPuutHoj0PA&pߑܕg:Z;j$ $feI rx"3$_|ըʵ>t=Cw'\P* :m{Vƈ7kĄ,.2R뵀n:oϨo@]S;gx@ ݴܦ0OvS2.(f҇i/N&_dWj6`{lxbbfF&Eݗ8E/SѰp^cBuaoTRYH &\qrh w`"_^wif AJ[v O )Kkquj%s|g+?H}Xtϐ9X ^'w? y_I>StX9V $:0+ySK3xJ2LXa&t03>n=D `VEŃzi\ǫa ;JӄV̫" +<W%CbMGLjbɹ䵕1tmޑ: f n{܂#DnH?>l㦌 7 p"zOFa|.|'4콥9>c1VUNJq_J?ȓ[~5e>6 -V~sy&SBV[U!{ԁe ,=DO"1O ئn+OK+Ǭ)$3TНcӽ(d2 cň;7$ISz  QH[#F s{E)A-c}]T 7Ϻ|7;^ї贔vnĺ_,*Za˸;#5_%@ecO4nB8 W)xn-EE _pmG Y#<S@zx ~MT("ê[u*I_ɆXy_z2O8mgQ(ִs dRBEϑqɧTl2t-+T <> C>xxMy %t ouxrjӉ+5 )}#I>ZtWHM8TNyyu2lv w{i@ 77|8&Ϫw|V0_)zzAWZCY눇 E erudꊳ0ƾ5Pj0EI:9Ǐ ʌqg*gf 6)7d? Brvez!8ݩ1o