evmctl-1.3.2-1.38 >  A `Ch&p9|Xl; y!~P`hC0& gAHX$.}!C)b ̲ݙ'cZ9g[e4 T*ORq󞿭ZO0H`y`G$3ٱxYm!DW<=Dj꾆[J1(Yi^NBt"y(.)WXfV_B8j~PF sȌ7g|xz!1HO<=]wֿrxKg>?+-_0dٻUAOۯ 栥df̈́>pA)?)d   , %FX n|    N PXbl(8(9t:B&F&!G&8H&@I&HX&LY&XZ&t[&x\&]&^&b&c'cd'e'f'l'u'v'w)x)$y),z)d)t)x)~)Cevmctl1.3.21.38IMA/EVM signing utilityThe evmctl utility can be used for producing and verifying digital signatures, which are used by Linux kernel integrity subsystem (IMA/EVM). It can be also used to import keys into the kernel keyring.`Chs390zp32SUSE Linux Enterprise 15SUSE LLC LGPL-2.1-or-laterhttps://www.suse.com/System/Kernelhttp://sourceforge.net/projects/linux-ima/linuxs390x큤`Ch`Chf1731fe11cc8c4544000addb946e00578dc4a2f9ce1fb8737c218cf92d19ee8ab957ecbd0f2d287b1ac6a6d1862c000003807f0218533063f5d6b9cdf7f387carootrootrootrootima-evm-utils-1.3.2-1.38.src.rpmevmctlevmctl(s390-64)ima-evm-utils@@@@@@@@@@@@@@    libc.so.6()(64bit)libc.so.6(GLIBC_2.2)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.7)(64bit)libc.so.6(GLIBC_2.8)(64bit)libcrypto.so.1.1()(64bit)libcrypto.so.1.1(OPENSSL_1_1_0)(64bit)libimaevm.so.2()(64bit)libkeyutils.so.1()(64bit)libkeyutils.so.1(KEYUTILS_0.3)(64bit)libtss2-esys.so.0()(64bit)libtss2-rc.so.0()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.1__u_6|_{_*@_*@_*@]@1@[ZZ@ZYY@YY]V%@V^@Tpvorel@suse.czpvorel@suse.czpvorel@suse.czpvorel@suse.czpvorel@suse.czpvorel@suse.czpvorel@suse.czpvorel@suse.czmeissner@suse.compvorel@suse.czmpluskal@suse.commeissner@suse.commatthias.gerstner@suse.comjengelh@inai.dematthias.gerstner@suse.commeissner@suse.commeissner@suse.comp.drouand@gmail.comp.drouand@gmail.com- Update to version 1.3.2 * Bugfixes: importing keys * NEW: Docker based travis distro testing * Travis bugfixes, code cleanup, software version update, and script removal * Initial travis testing - Remove 0001-help-Add-missing-new-line-for-ignore-violations.patch (patch from this release) - Add make check + dependencies (getfattr => attr, xxd => vim)- Fix missing new line in help (0001-help-Add-missing-new-line-for-ignore-violations.patch)- Update to version 1.3.1 * "--pcrs" support for per crypto algorithm * Drop/rename "ima_measurement" options * Moved this summary from "Changelog" to "NEWS", removing requirement for GNU empty files * Distro build fixes * Remove 0001-pcr_tss-Fix-compilation-for-old-compilers.patch (from this release)- Use %autosetup -p1- Remove suse_version check for tpm2-0-tss-devel as the package is available for back as far as SLE 12 SP2 and respective openSUSE versions (also check was wrong, should have been 1500).- Fixes from previous SR (reported by fvogt): * Move ibmtss runtime dependency to evmctl package * Remove dependencies to devel package (should not be needed)- Update to version 1.3 version 1.3 new features: * NEW ima-evm-utils regression test infrastructure with two initial tests: - ima_hash.test: calculate/verify different crypto hash algorithms - sign_verify.test: EVM and IMA sign/verify signature tests * TPM 2.0 support - Calculate the new per TPM 2.0 bank template data digest - Support original padding the SHA1 template data digest - Compare ALL the re-calculated TPM 2.0 bank PCRs against the TPM 2.0 bank PCR values - Calculate the per TPM bank "boot_aggregate" values, including PCRs 8 & 9 in calculation - Support reading the per TPM 2.0 Bank PCRs using Intel's TSS - boot_aggregate.test: compare the calculated "boot_aggregate" values with the "boot_aggregate" value included in the IMA measurement. * TPM 1.2 support - Additionally support reading the TPM 1.2 PCRs from a supplied file ("--pcrs" option) * Based on original IMA LTP and standalone version support - Calculate the TPM 1.2 "boot_aggregate" based on the exported TPM 1.2 BIOS event log. - In addition to verifying the IMA measurement list against the the TPM PCRs, verify the IMA template data digest against the template data. (Based on LTP "--verify" option.) - Ignore file measurement violations while verifying the IMA measurment list. (Based on LTP "--validate" option.) - Verify the file data signature included in the measurement list based on the file hash also included in the measurement list (--verify-sig) - Support original "ima" template (mixed templates not supported) * Support "sm3" crypto name Bug fixes and code cleanup: * Don't exit with -1 on failure, exit with 125 * On signature verification failure, include pathname. * Provide minimal hash_info.h file in case one doesn't exist, needed by the ima-evm-utils regression tests. * On systems with TPM 1.2, skip "boot_aggregate.test" using sample logs * Fix hash_algo type comparison mismatch * Simplify/clean up code * Address compiler complaints and failures * Fix memory allocations and leaks * Sanity check provided input files are regular files * Revert making "tsspcrread" a compile build time decision. * Limit additional messages based on log level (-v) - Add patch 0001-pcr_tss-Fix-compilation-for-old-compilers.patch - Upstream bumped soname to 2.0.0 - Add tpm2-0-tss-devel for Tumbleweed as build dependency, for the rest ibmtss as runtime dependency (needed for for reading PCR in ima_boot_aggregate cmd; better to use libtss2-esys and libtss2-rc than require tsspcrread binary in runtime, but tpm2-0-tss-devel is available only for Tumbleweed) + the same logic as runtime dependency for devel package - Mark COPYING as %license- Update to version 1.2.1 (included changes of unreleased v1.2) version 1.2 new features: * Generate EVM signatures based on the specified hash algorithm * include "security.apparmor" in EVM signature * Add support for writing & verifying "user.xxxx" xattrs for testing * Support Strebog/Gost hash functions * Add OpenSSL engine support * Use of EVP_PKEY OpenSSL API to generate/verify v2 signatures * Support verifying multiple signatures at once * Support new template "buf" field and warn about other unknown fields * Improve OpenSSL error reporting * Support reading TPM 2.0 PCRs using tsspcrread Bug fixes and code cleanup: * Update manpage stylesheet detection * Fix xattr.h include file * On error when reading TPM PCRs, don't log gargabe * Properly return keyid string to calc_keyid_v1/v2 callers, caused by limiting keyid output to verbose mode * Fix hash buffer overflow caused by EVM support for larger hashes, defined MAX_DIGEST_SIZE and MAX_SIGNATURE_SIZE, and added "asserts". * Linked with libcrypto instead of OpenSSL * Updated Autotools, replacing INCLUDES with AM_CPPFLAGS * Include new "hash-info.gen" in tar * Log the hash algorithm, not just the hash value * Fixed memory leaks in: EV_MD_CTX, init_public_keys * Fixed other warnings/bugs discovered by clang, coverity * Remove indirect calls in verify_hash() to improve code readability * Don't fallback to using sha1 * Namespace some too generic object names * Make functions/arrays static if possible - Upstream bumped soname to 1.0.0 in v1.2 - Drop ima-evm-utils-xattr.patch and ima-evm-utils-fix-docbook-xsl-directory.patch (included in v1.2)- ima-evm-utils-xattr.patch: xattr.h is now libattr.h- Update to version 1.1 * Support the new openssl 1.1 api * Support for validating multiple pcrs * Verify the measurement list signature based on the list digest * Verify the "ima-sig" measurement list using multiple keys * Fixed parsing the measurement template data field length * Portable & immutable EVM signatures (new format) * Multiple fixes that have been lingering in the next branch. Some are for experimental features that are not yet supported in the kernel. - Drop ima-evm-utils-openssl1.patch (not needed any more as IMA got backward compatible support for openssl 1.1).- Small spec file cleanup with spec-cleaner- ima-evm-utils-openssl1.patch: allow building against openssl 1.1 (bsc#1066947)- added openssl-devel dependency to ima-evm-utils-devel. otherwise the ima header can't be included if the openssl headers are missing- No need to remove .a files which don't exist. - Drop extraneous ldconfig call on preun. - Update RPM groups and descriptions.- ima-evm-utils-fix-docbook-xsl-directory.patch: adjusted to refer to the "current" version of stylesheet to make the build work again - adjusted spec file to apply stylesheet patch to SLE12 as well- Add ima-evm-utils to SLES. (FATE#321603)- ima-evm-utils-fix-docbook-xsl-directory.patch: fixed the nwalsh docbook directory again- Update to version 1.0 * Recursive hashing * Immutable EVM signatures (experimental) * Command 'ima_clear' to remove xattrs * Support for passing password to the library * Support for asking password safely from the user- Update to version 0.9 * Updated README * man page generated and added to the package * Use additional SMACK xattrs for EVM signature generation * Signing functions moved to libimaevm for external use (RPM) * Fixed setting of correct hash header - Add additional requirements; asciidoc, docbook-xsl-stylesheets, libattr-devel and libxslt-tools - Remove COPYING from sources; upstream provides one now - Remove automake.patch; "test" directory isn't provided by upstream anymore - Remove ima-evm-utils-xattr.patch; libimaevm0 does link against libattr now - Split package in three subpackage * libimaevm0: contains shared library * -devel: contains header and examples files * evmctl: the kernel signing tool - Add ima-evm-utils-fix-docbook-xsl-directory.patch; fix path where Make is looking for docbook.xslima-evm-utilss390zp32 16150304781.3.2-1.381.3.2-1.381.3.21.3.2evmctlevmctl.1.gz/usr/bin//usr/share/man/man1/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:SLE-15-SP3:GA/standard/49fd1be082e0473436a94d5bb7ede3c2-ima-evm-utilscpioxz5s390x-suse-linuxELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=31a85b6a79171fd9c61d67f109956a7e00e2e4a9, for GNU/Linux 3.2.0, strippedtroff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)R RRRRRRRR R RR R R̓xv?iutf-8b509ec70612862b824cabe77b4e62af754b0abbdbd4781c0ac3070aec2372221?7zXZ !t/dK] crv9wJ). vvQLG'Ǣ) Wv14/obRXMĵhei$ Sh2Yƚ.LbՂٔs+i,UTBOHY@ džeq煼է-σslNX= ܡrT[%RnKjJ[B<+I&~ ,6&<Q8Did[ Kk&`ڵޓuKқ,2 \[/ b}^Ψ:Xc Q^?% cK֔)gq̣H"^ ѹlxj4sn G@H=hXɧ]qT?әĶb<7\K9i=KzHd Odg-`yӄ>+l[*':]nZMkR_b=lMЍO !VsBC#ߌýa|(5DĢvX+s|7@ю7Yfm 5'^4T~a,u s{qb?J:u(dW/% ||;k옹Xb\l&a)j1_ҵ殆,,ܒ0}sI|kB@5tf "``rgƮ«Ma h|}ͽ\fǵ Rq?r!99y"6t'OM$0~w2枚v (Qr/}n?/c Vs69GYYߘBC(:fӌ"oLĝ4fMK-p+ܠgzM9=956.ra =W,rc%G#r0Z<[FC KX iq^GR uZQ&JC?MܹU>yoxАKer0`,f ^2($or4 @δLJj`(b. P6_0:Ng(2D0GϙѰAvrv~S1MX,Fnu7{ah!lSj1JSDQ.ӹ= mAZǥQ~/ Vdla'R}FV_0}"(BJ Mːp3~.PzU^=q&X~m-JbDiNۀ΀}UXmz f|FYסJ{'$|X% k~!=H9kfP}Sw(\1yx % Բ9)r: Hj_@gg';Iuiј!(0<)U=5[Jaڲ=FT>9PX˟,:TjW.  8Zt :wY]`8Cn±82W}s2@8cus>dx2PaA* `0! hiE\{V'~QR"$BJUHEWl~ +"AbX5E 3CD Ӱ7R];$ CsLycrҮƁha" y5^-bd}=O7G K3Q3'xZꮶ[ܐ("=+˴̌ +.X\)SKWr0vCJ5}~d$6i*"X!cHE8>tz>zY ]vlt(cZcn`(Dhy3 c ߘT6 ò?,ȫ!/YJie;V7O͘a ݕ4)!JfyoWg9EW.K> p⍐kCP;s$Ag-9>q0eAGq t) Pp%u Y!񜌫m {R5V=`UȮ.#Mޢ `3p=1\~;d2ɥSŘ rDǹgTƞj(_r\!i#<dpl G{哌ˏ $+/^2kuv(.Z',rL |//+%tdG"ED%n%kamEYgIUFe|#SOA-Y; yu*2 7pjqB,6MO_2`^6l \Cٖ>Zym}hq4_5oOY%B-Te.ҏAfJ8a,k85Hv%n F;D}^Wzz0"퀆;--"X6b(sVݷ[BOJ~Ɂc^@#jbwjw^X;+їSrBA| |V۽}2=Tce=?06'EnnJ $ޖ&5N?\>?;xI)ۃ4y|!f֨dc3D sAM.o#2gX/F>B1<"bQ)af`HΨ2\R5ͻI]Ieh< (5ٮ!B>*M %WxۨYK < W(}HʄngL崭1{*U6cHJ7,7E4hZѵ8^{E͛(垝Y7aY#tSpt^GFŌnMALUܭ9|p}Z+131!3Q3]sI' ㍀$lBlvy bt(2I'TSgR}oeJU KG=8A'c9R۰|?N-7vۻNBΦPvhXiNV kC3u_x#fuV+0ȧ=3 tz" AHNl@WU@RF͸#Dr2'5DYm%rc j+C6 mKR;ZuY'6_vTRW[tg\PVsT|jTfHe'tD(aBbViy?<3Vfh1(i*xR`M^sKmt CbQ3\֚B1 MY,kC9M4cGyވ%0pj^#rv~zP#G> }}y5X*¬Gn~Q}+":8=M8j}Y:~"D7lgm0/BD-fޔh4*O\JB! j71{ :kjT鼘2P@`22ßR3x)+͇t a^귺uv]lv"/qI>נz56x7T1'H[?5z46 =/?|70QrM?AVs/4?ڗ*G y^}XV'ej4R1|eR*Fe*˺6ˏE,~g*qQFD/V.9^AI*ȍrew)^b BDGɿ H.cLۭ WU^dxtnG`IUpjlXiLAW sBI۵Խ+ ;jT=B ćt5JU~N`)Œت<ؕYxv@]LZ0”a؜wlEz[U$?+Y-tuu$48rx^a_b B7|z/+Y//βZOQ11n(?'jgoA+9ݣ7Ym4̏9tvqѫː'->h=9u9 rDʳY_YB*YnORE,n[ܻ1i{l'2]6u"| 9뎍'}kWlL I)M2+Pc^A>yوAT|dD2BK\N$D:EI羟ĥlGBXy7lJ=4TN !4߁_L DA܅N>H὾扶 G_+(-QJD*V9u|:Ŭkb?c~Y˯R.*zyI~STQOЭGt>_tMWT(~̈ޛBu}m|1q1gs !qdEu @]eݸ3mV/T}QJ3K,8JTV4ooGaΝ|-uiG}fusL!́fY PJ"#vq\`5A]-J1qu_?zمZ?Hfu^N> YƆa}ϟ,S=h84sh]"k#Kʮ'ޭR4)2$[j6O"$H"v_kHSLN$*n~ [\zN";/+5 r!pKP]3oO fr{1iO5Ϧ~3L= s}YuXh$CR9ςT9iENހ@qʙ}q VaL}f$dP@494GRqf԰B>CxwaB%2B1ȮpPG6RZ)+2jtl]Etv >nximiٿ5kbnTC=|M~rIz? ^gwM-\0zFuacǏa*/FEtGH*|AJPcnIț{ ڌ=#ֶd͇ Xnq3xKϾTe+d*n!ѷW?)ah{SFV{ w9zѴQI5罣yO}(1zeQj;/})NԚ/xqu4ѣRGTd褨 SN_Pg@وonlΚQF[/O)rIח k.T{pvW{b\+a"TU7Of@hZr &:ڎK8zc6:R҈1~3Ŗ@clj8s ]+r %T}=ƘaRA&)jぺ|} ψwf/Aw4&LLdϘɢeȲoTF*F.RTsn}hᬸ~s о^mG+Qָ<Ƨ"*֡.(Q>5?"v'&m[ynN%'DF'apue1v a׀ ?/F|{jvMa9.xa.}|*h xEcl쓜 1L8dKn0^CD (iZL_UPBj=*5yx_1XH K? 6/K \V'+?}%awpaɸ@UXU8+:K,tXe]^eu^&m#ԘI14¼0BRqx ^s>ad\4W~4&s$81Qom'2A&,U7 NG{F ,r׊!&% Id{J Q|5B7e`].*:k6=V&Y4tDm2Vo lY1>jnմD?/\eBSq|ñ+ djSOvđD7aL'_-$ ^( =vDRdi"0=r)a~;h@JsI=ih:d 1)hNJ^.R~_Ƭ˞̾XN+L茆#<w!9a@omҢƿy82PbEcL% r'0 #qI][^I r>[fQx>\E J~sZ <9wی+T&:Y*ܾ ds="7Al>S "QM*pa^rz,BVnesQMƣkɧ>)k(o۝)VfI4?"ZDsIҳ'6cTfzv.z&caY˚uլebZӎPۻ,4G"xZ XmDĢ;x[ YW> 7󖐔"'ނS&Wc"fןal.!iR~BHa ^ݹ2Iv-ge\?ؕŔ*ܿ7#tԓQDm>.F!KHF2kggݣ "np앩iVr+e!4E.h'LWF| ބjQKj ^{%Nz氻6|n?LMe~ $>Ǚ\MX^ )vbJ 6Dc$cnK!j T20"{7ɨ8t)^ǽ$IOg>TbN>+2)oÄKEC%71HV!MHؗ8ף:gyv9sgvFoXo1^?*N85 YpQm׫׶+R9Ξ4 rʹ[Efءܫl`$E  q4XL. 3hzl)D ]J*ﲠKVY(o'Ay9: 9iR!D6h6bbm9ljXIX~pe|#lCr"y%}cuE h Q! rgi)eۉ&iZ$I-{s\i1)_MJLO(9ܤo:+tŀ sg䈡3z /IRks RMpȌ(*N_,~ ەx;5,boYY2aqМGUr3Rku!P o@-=5;[{C"M ۊ6'bJء|hw\ {}Ձkk(!^__(yg Rq7B34y#kϦLRz2?-ES} JГ9$ٿ(h9glP}y㏠؍Nm>,ê$s"ߚ-ޘx{ zjW_` uSܲcDT1ťf(eK"VS=pFA$kA_w8U<ў0C๙RGfd1"OXYdӺ/eHJA*0iğѽhjgIF+,*%/.[PuwȥLaE\"Z=mkĐ7;qqmHζͿO9qzY`nG:ـL]!C].QuOc}Sj믃}OŠƒ>;Iep!@Q"y]խ&-ؘqGose #/eeX+vY-d:@ \'R`R@.ɳy^S!*4y.ſ>w~yíkdOmpI8ٷN{RZ{m_}:,(3P `鸹 0z`%#eZSi]Fv3CdRKS;0(Gd=[;lN,YUz V2%aEn*5! z.İ7n}yQǂT)wN6~l_,ګj] 5^.LZG1TAx 0)a[k+mjv紪 Xd~'w'IM1ux es>^O'ٸsko9V\ Ayye^ܥI;E6B(tpv Γ ݦNbauh<\/v_H^w:_R Rq ԣjW)k|ƬAAU%N>5P2:ڮ1چ .nƽ50Z\aڜ8,pĕ6Sik'dk.]?eg4ׂhKԣċjEܠ\?R!÷)mI+Ffw4Ř vUHh3XM(%P.c%ji]NWD/)hݘ9Kqˈ!]%Kk3l/xB+#Ky[N3U7DZ@wky|c?bs/Y5<xQ=ΛQ2>:HRڧ[>]%W7hҷy䩅EʭVĄON|NvRH;6!%:P͖9 =_6 `bjpSo8EsRj[8H`b[WY49x5Oo$ߴV*L:"n^,sAryAjXkI#D?{/JP; 8Za?N.̀ _+{Iw¾'{K 3B?^<7oz H{|;#ptJssw-o'[h;Ke0GDJ\]~.78"$, Ay`X 6.|HENHw i;PNae(I5b :y)}x9Li}8X.zK|0 S p  3I*|mW1ܚL5a0s~η7PfHlIAmJs=uڶSCSjZiQl-@CIQ JUL䠅\NT||*\6qlVͶYm|?#:Pt-%=ܑNeZJZW~9fB <>vE.qge- 6JzӹǴGã{MvcZ;A_(]pjrClۜuK/;+R>Q &j#/SoƜe>=ƒ(|@SbnXBc0yU0V"ڌR0{2A'(nV2;XsK7O]#]}0[xH<{fjx~ gld@]T)+(v}t;€KM1=r9LMOlŷ!0;Iq-1TiK= UB039I9<;CY/maPAVOGLalDBbD# Մ " -e`=hD{UFpȢe:2 ߙggU% г{N/7.E٨C O@ld^Rqs"\rcIh9ZQ'|v*P* >]aٮǢXSw(8Uxp8)l36)\XŇf"0uؗ jN8X4;Djv80YSڦ;hgK~Xi_L +ɞ.–Xl\:^cΎN FQ%Px'ppFaN/ [1Kf EwHF83]AiA'{@lX*QȟHI⛑w9wAz|%;TEKr^zEs$<Z9!zo%e7ͼWIScۺBy\8`8U}Tu{^י &b2MhmNe'Jz*Wz0#A3>5v7z>.JƬ'S&@ %QIT/BO.T=P+/Qzz;>>n>Ϡ>! c_)e/:keН-rsD|m֔T kPѐ77ꩯ۔QukBLp>oOF$}N}(ӛhضٲ2MquAm^-Ĕ;=7JLZ':JmPpbݵ6j1+:FRi *fD@t!"OYY" vMtča4|y1tc {`k3IhkG$W=T:rGhU+B(!:1Qμ`ϮXD2x. |4^Z<F,:oZ`Iq5JfPsTVb2qכXp\d@^=Aub_3 o |&8> v<>ÜWH2xfSo?cNKH@B`::ߙq:amXr˪ 돬BHX>vICLuvB􆙴 x56KȇJ7/yOrd$-*SG&ÁAY./N3izآyjjN;R4r&m81rF#`5O0RIcnZ>ƪA#D |)qpp7W]=Ky3)qC(!}ٴ"MڑB 2jf\٧7ڢ ֭V)%!t%9/v?"zQR2%4Poށ,7BQ#6Q]wA@wwͅoc#^jVe0Y$7aP/ X1"fˆ g3$Ӂ t1BoR12D֠6k~®:OHtuYR$إA|&(%~ɜv[JTm"u*iSinDMCpκhTr` vL&Zʡ#_lנ?˲HnG$UB>hmWlf\`#׌J5^C=o^`'\0Ҍvf1w('.tGޥ129Պ.W|Į"1m[U.g*Hʲ\,I% lWHYږ͍|%RzMM "ޟ&73F䞇G;:j.}O{JiЎRxFNr =c$]GM. x.@>JU$ =$,Li}셮MIѢј 7k[oaaWCt ُ0Z!ZKPlKez,þ--q#d6oXjKCJ(0|Cg +W~@ӟSD3_,y -!r jTo T9.v#+<Ҡlcؼ81|~#Ai!~6΋7҇%8rQ`#7C[d D+04YGԸupظ^6E(Q-NcGmEA:K1&T{J؇{eUJ99c.TR_QѫzNDa)wwXHHxēN^gB}U 1K%V0KiP^2$~C*j`%kl9U u-Esb,5$YGs[}V5aZ&Z$}mlƒuV{),H*s ;_נi8`vVdقH(Q{$jV-eziG c)bc"7@mCܞ[TLIӽcឣ7ߖ.He\~ZD<=0A.~XZ+  #q`&<Wh3]3q]|^8z8s7M#*2095l&[VS&>P݃z7n 9JgpY7sZR H JJFFaW۵5c|"fEƂȉy (.CP~'Ts.:qc.f j]Q-vE³M;n)) _v ņ`g,X~BZu'^583WkGŵ6j03fL:}sݨ؉Y2Sx'֨ ¶9k@9 -:.Rf;,EγY:JֻtOs\o%}TXœ^)h AvQ,^2Ru㼽ZGw@n6^O澣6+L<2/YUB&qu_/'uJYm1PLY8xz]2'M-{FAUOF>#UF"M}lb Q^e:ZV09l2s":-TEZvXcl8SA?NVz|v%d'rQ#jȾO1~!'!o#e%v\f˜דUNJx~Y0ŠdLOGoRoB~H$]%TeEJi+ivcϱߘsR&/Pmz?=sNYVo;UfM:C1!e7Ɗܓӭ|Ԝm,{$bzFA nk>ϾHf \PiA`ڬh UG׃B³5lĞe~폁Cx,(H /~@0[Kp)ߐޛs4Wa 2}PU_8RԄR(֎oK)NcMu=Utxi[m) |Vhi$ V\7vI9POhr߂ t[=>Hb!SMؔX秬XX0\+u1w1CG.:ݑNJ-A],$I %5zZr61`~_n1v[lMF*Ȓ$/*fHa"WgJcJW:=!9Rڎmj4a~ĤbjQ̬q-wQ4hşGHA~$M颰Σ6=м ąă%X% ;7ieh=.=N74M!" dY >s vQ"f*fyE|&B]si~_.õŽkS̤ (tP*']S.kJ}*ҳ9rvG7&r/#Ednk=maTV~Ho<M"_4GO0^Q6;M 1v^.vC1`a!{⁰u۽4!<{?f̣֨EQ$1)Z(f琔Ƿ&])gF? Yk{w_(:XS|Or FPV!?[_gCբ9gUм=V ujm|6h{mcK\d |;~fj8d@#i0^"k(U:ӂ_EFjT`Ǧok&-[,_@%!"SKCWV gX=1LMu_\^rYb>=}rN1D/:AށA'MIuJXwthX(.]z$?̱%/tD#ۙ)S{0٨ѓ@z s?}GA |7gn 7w\H^oTPvW>qtWQB۵/Pl&ayܫf Z·貈LWfwԜ;BoV2,T9("> ߀o9Mc$*"|t{:|O?l[\"ߺ'Xעt;sdYI|BΆGd6]pWQOk@`Ij/A3CsN#:^*I.]9! >lXx۾UHt qEKޅ , ˅}X꽫%97%v_>_|_#}׉x5^üUY&!+F^70#j>,z]u($,Mt~yҀB̉ގ|i׉ܠ T @--NQ׮(hv 6b^U])Hj҈K8 o)O)ju" YIRc@84K0SRNnư6XCo} 4'%akgo=cz5>Ti[eh8_3p7D_u2`js7 8G<8?N"yu{F_ۇl, -gdwZpC˫${=K+J2O88ݏE*fg=+^%dzx25@}g M4@:`)pOȸ㊰k^yf ྡྷ\ S2)ᒁRUvW@;.) . Vp,S"˃: ĖaָռCmG=F)ܵv+ mEIxR&jwH/w9/T媮y<n,;ܼQ9W' \'vى(ᚐWEC{G ɕ;W۹=msD~tɍp.iCSڶŧfԼtPv wؼ%4fIv? eaifƟĕ7YǔH ,KdVyI2*Nz}9R "qCڱiDN &dn N:L? x[{/%*GzS+ζº'&YJ=v&CÎ2U:S ʐ߽-ˀfVc_GX' 3cF+nOD Vp&#ǘ"[&md>žtH7Y%jY/)9jltVsa࣋ŋtޫ"{GJ_z2S= ʏ6̴K0^זɊɑ#?)?+¿ N q]Tl@=CU {FqgkLj 3XR 94BE}tl2(yk@@aX.Iɽ6X2LA0q[T'@NwB.|e12GjUĮ,FSik[pHMVs' Upj0;ْJ؃,`^(NЊV$h#5ꡭ2`ճ$f<h$ծ:޲r+.jE J2[em5<+Ru3qoD_筿Nϓ7l~>o_`c!NcC5}Y3!e'm\7AEOU/aq lX/ Ւu8fHwhnd(OxoW0 %$wΚC[r#N /b ww7ׯ*PƐ!S@b?K9d#A렐uMP316]=cӚo#%o+Df JExB'kQBlIw^GڵN&i*֊yJ*bWuT<Ķosv"ԫPPw dc_'MEIe7i Ͽٝ4:"#xu ԰B۹T@xgw)E"o۸i ga+WTJYs 2  6l&֌\Y7`q0^ca ևIDdθu)U|4Jj󑸒"saW+T g?8,KALȵTߑJԵӡܰE̹eW'<7Û Q"fde;&`WCXkdgT#E {okJPy^Οb5-]E6@A_wu ^+OԱuYd\#p^ȥ™~HGET]xv h:[vzLվ& vM `v~!bKagiBH*2odƻ[8EdZ < D>3fp6 )xi%As,ݔ2ؿQ7/f~f71BSv0{iQ`̡:KqWԀ3. ,>q,;.2P̿ma%R 4Jj"){Y 4>L +G[o蕰 -v\ 3-]>ԉ H`4pd5I~ ,+N*Sm$^;GKN*l࢛qj).uQ4 T\`\"G$nZd1z nPu}afT1T4ޫsPk[R*.OCwtF q7 %w,ָeR7,PˆH5&ړl}[exT~w*#_hIR& Nƭ`Xa=DZL\iŞayulMg}{lM\o,-g fC(~~֟gHu,},Eg\+꩓:Y?`7LB{ver_V+ngdgnOz n[Tzl@dRZ'V|.}jG x~Qܝǽv-24zQBݧujˣ&$8v#d>#WBZPCۭkXRE߲P |274HntOsHwe1z׍ ΀݅Eq%?Y\-" 5UPD8^ '2+v{{UxCS?2 bџjnn3[I%AGku`Ϭl>kQ};{Nh՟fàד 7B6cBzonODk./S!~; -\CSC+ؓx7v:GbQl+=JV./Z1 F떾6@uP';{!Jچ rhGs6|@i;$|1bڒ܍g)Nѡ| /TԩQ\{<9)]9TTX2gDW_!eo"yopGA1^Iŝ\s- x\_<|j,3bI %n{1;وZZ*3'mz;DFZF U3X&w˜>9[eRAo(fOnf-<.3Fh<*+i=zs!6%rJj9Z87pM \,i%V%?Z1tsur-S 'ޖה+F!$5,v"V6{眱V/A~S0Oo̚QtʬYM;G/+Y/.u;^*_ڔj]ӣ=R3[F'L+ZEԐzʪw%]/~>lt 5qAFF'+.[@\o|;S>%дvV <QwM28U ewj4N]γo,:s YZ