evmctl-1.3.2-1.38 >
A `Cdp9|= 6kFtqR^Qu 6۪
*kL ;_@Bhh8ul^|>) K.siU ?%x/=d[ V(5>3T0zI/u}!v{n#?QW{S.$}bIFI{%"!E4L^*b@taV^
WHl+IċNetze14b2846657f0c3ef44e04c1fd889cb3b3e9cc1d fdd8d6db89b3bb23079938f4ae27df8a5eb78a655f9ee590f12b870db336ce66 `Cdp9|l=}_y{ .vt_Qԩ)O/ ~+?<0FapIT0ǟv%ߴ
[ XeJuY,n:%oDYl! a1v{& <(0`uZp}qvM5sU:/@oAVyYYR<8Ldrٴ
_Vb H)`tOs\u}EbccX H > p A ) ? ) d , ! B T j x
J
L T ^ h ( ; 8 D 9 : B &/ F &= G &P H &X I &` X &d Y &p Z & [ & \ & ] & ^ & b & c '{ d ' e ' f ' l ' u ' v ( w )< x )D y )L z ) ) ) ) ) C evmctl 1.3.2 1.38 IMA/EVM signing utility The evmctl utility can be used for producing and verifying digital signatures,
which are used by Linux kernel integrity subsystem (IMA/EVM). It can be also
used to import keys into the kernel keyring. `Cdsheep15 SUSE Linux Enterprise 15 SUSE LLC LGPL-2.1-or-later https://www.suse.com/ System/Kernel http://sourceforge.net/projects/linux-ima/ linux x86_64 큤 `Cd`Cd0e0ae737471ba9d327b08dd1126659837e68469222c2699226813b14300b1411 b957ecbd0f2d287b1ac6a6d1862c000003807f0218533063f5d6b9cdf7f387ca root root root root ima-evm-utils-1.3.2-1.38.src.rpm evmctl evmctl(x86-64) ima-evm-utils @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
libc.so.6()(64bit) libc.so.6(GLIBC_2.14)(64bit) libc.so.6(GLIBC_2.2.5)(64bit) libc.so.6(GLIBC_2.3)(64bit) libc.so.6(GLIBC_2.3.4)(64bit) libc.so.6(GLIBC_2.4)(64bit) libc.so.6(GLIBC_2.7)(64bit) libc.so.6(GLIBC_2.8)(64bit) libcrypto.so.1.1()(64bit) libcrypto.so.1.1(OPENSSL_1_1_0)(64bit) libimaevm.so.2()(64bit) libkeyutils.so.1()(64bit) libkeyutils.so.1(KEYUTILS_0.3)(64bit) libtss2-esys.so.0()(64bit) libtss2-rc.so.0()(64bit) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.1 __u_6|_{_*@_*@_*@]@1@[ZZ@ZYY@YY]V%@V^@Tpvorel@suse.cz pvorel@suse.cz pvorel@suse.cz pvorel@suse.cz pvorel@suse.cz pvorel@suse.cz pvorel@suse.cz pvorel@suse.cz meissner@suse.com pvorel@suse.cz mpluskal@suse.com meissner@suse.com matthias.gerstner@suse.com jengelh@inai.de matthias.gerstner@suse.com meissner@suse.com meissner@suse.com p.drouand@gmail.com p.drouand@gmail.com - Update to version 1.3.2
* Bugfixes: importing keys
* NEW: Docker based travis distro testing
* Travis bugfixes, code cleanup, software version update,
and script removal
* Initial travis testing
- Remove 0001-help-Add-missing-new-line-for-ignore-violations.patch
(patch from this release)
- Add make check + dependencies (getfattr => attr, xxd => vim) - Fix missing new line in help
(0001-help-Add-missing-new-line-for-ignore-violations.patch) - Update to version 1.3.1
* "--pcrs" support for per crypto algorithm
* Drop/rename "ima_measurement" options
* Moved this summary from "Changelog" to "NEWS", removing
requirement for GNU empty files
* Distro build fixes
* Remove 0001-pcr_tss-Fix-compilation-for-old-compilers.patch (from this
release) - Use %autosetup -p1 - Remove suse_version check for tpm2-0-tss-devel as the package is available
for back as far as SLE 12 SP2 and respective openSUSE versions (also check
was wrong, should have been 1500). - Fixes from previous SR (reported by fvogt):
* Move ibmtss runtime dependency to evmctl package
* Remove dependencies to devel package (should not be needed) - Update to version 1.3
version 1.3 new features:
* NEW ima-evm-utils regression test infrastructure with two initial
tests:
- ima_hash.test: calculate/verify different crypto hash algorithms
- sign_verify.test: EVM and IMA sign/verify signature tests
* TPM 2.0 support
- Calculate the new per TPM 2.0 bank template data digest
- Support original padding the SHA1 template data digest
- Compare ALL the re-calculated TPM 2.0 bank PCRs against the
TPM 2.0 bank PCR values
- Calculate the per TPM bank "boot_aggregate" values, including
PCRs 8 & 9 in calculation
- Support reading the per TPM 2.0 Bank PCRs using Intel's TSS
- boot_aggregate.test: compare the calculated "boot_aggregate"
values with the "boot_aggregate" value included in the IMA
measurement.
* TPM 1.2 support
- Additionally support reading the TPM 1.2 PCRs from a supplied file
("--pcrs" option)
* Based on original IMA LTP and standalone version support
- Calculate the TPM 1.2 "boot_aggregate" based on the exported
TPM 1.2 BIOS event log.
- In addition to verifying the IMA measurement list against the
the TPM PCRs, verify the IMA template data digest against the
template data. (Based on LTP "--verify" option.)
- Ignore file measurement violations while verifying the IMA
measurment list. (Based on LTP "--validate" option.)
- Verify the file data signature included in the measurement list
based on the file hash also included in the measurement list
(--verify-sig)
- Support original "ima" template (mixed templates not supported)
* Support "sm3" crypto name
Bug fixes and code cleanup:
* Don't exit with -1 on failure, exit with 125
* On signature verification failure, include pathname.
* Provide minimal hash_info.h file in case one doesn't exist, needed
by the ima-evm-utils regression tests.
* On systems with TPM 1.2, skip "boot_aggregate.test" using sample logs
* Fix hash_algo type comparison mismatch
* Simplify/clean up code
* Address compiler complaints and failures
* Fix memory allocations and leaks
* Sanity check provided input files are regular files
* Revert making "tsspcrread" a compile build time decision.
* Limit additional messages based on log level (-v)
- Add patch 0001-pcr_tss-Fix-compilation-for-old-compilers.patch
- Upstream bumped soname to 2.0.0
- Add tpm2-0-tss-devel for Tumbleweed as build dependency, for the rest ibmtss
as runtime dependency (needed for for reading PCR in ima_boot_aggregate cmd;
better to use libtss2-esys and libtss2-rc than require tsspcrread binary in
runtime, but tpm2-0-tss-devel is available only for Tumbleweed) + the same
logic as runtime dependency for devel package
- Mark COPYING as %license - Update to version 1.2.1 (included changes of unreleased v1.2)
version 1.2 new features:
* Generate EVM signatures based on the specified hash algorithm
* include "security.apparmor" in EVM signature
* Add support for writing & verifying "user.xxxx" xattrs for testing
* Support Strebog/Gost hash functions
* Add OpenSSL engine support
* Use of EVP_PKEY OpenSSL API to generate/verify v2 signatures
* Support verifying multiple signatures at once
* Support new template "buf" field and warn about other unknown fields
* Improve OpenSSL error reporting
* Support reading TPM 2.0 PCRs using tsspcrread
Bug fixes and code cleanup:
* Update manpage stylesheet detection
* Fix xattr.h include file
* On error when reading TPM PCRs, don't log gargabe
* Properly return keyid string to calc_keyid_v1/v2 callers, caused by
limiting keyid output to verbose mode
* Fix hash buffer overflow caused by EVM support for larger hashes,
defined MAX_DIGEST_SIZE and MAX_SIGNATURE_SIZE, and added "asserts".
* Linked with libcrypto instead of OpenSSL
* Updated Autotools, replacing INCLUDES with AM_CPPFLAGS
* Include new "hash-info.gen" in tar
* Log the hash algorithm, not just the hash value
* Fixed memory leaks in: EV_MD_CTX, init_public_keys
* Fixed other warnings/bugs discovered by clang, coverity
* Remove indirect calls in verify_hash() to improve code readability
* Don't fallback to using sha1
* Namespace some too generic object names
* Make functions/arrays static if possible
- Upstream bumped soname to 1.0.0 in v1.2
- Drop ima-evm-utils-xattr.patch and ima-evm-utils-fix-docbook-xsl-directory.patch (included in v1.2) - ima-evm-utils-xattr.patch: xattr.h is now libattr.h - Update to version 1.1
* Support the new openssl 1.1 api
* Support for validating multiple pcrs
* Verify the measurement list signature based on the list digest
* Verify the "ima-sig" measurement list using multiple keys
* Fixed parsing the measurement template data field length
* Portable & immutable EVM signatures (new format)
* Multiple fixes that have been lingering in the next branch. Some
are for experimental features that are not yet supported in the
kernel.
- Drop ima-evm-utils-openssl1.patch (not needed any more as IMA got
backward compatible support for openssl 1.1). - Small spec file cleanup with spec-cleaner - ima-evm-utils-openssl1.patch: allow building against openssl 1.1 (bsc#1066947) - added openssl-devel dependency to ima-evm-utils-devel. otherwise the ima
header can't be included if the openssl headers are missing - No need to remove .a files which don't exist.
- Drop extraneous ldconfig call on preun.
- Update RPM groups and descriptions. - ima-evm-utils-fix-docbook-xsl-directory.patch: adjusted to refer to the
"current" version of stylesheet to make the build work again
- adjusted spec file to apply stylesheet patch to SLE12 as well - Add ima-evm-utils to SLES. (FATE#321603) - ima-evm-utils-fix-docbook-xsl-directory.patch:
fixed the nwalsh docbook directory again - Update to version 1.0
* Recursive hashing
* Immutable EVM signatures (experimental)
* Command 'ima_clear' to remove xattrs
* Support for passing password to the library
* Support for asking password safely from the user - Update to version 0.9
* Updated README
* man page generated and added to the package
* Use additional SMACK xattrs for EVM signature generation
* Signing functions moved to libimaevm for external use (RPM)
* Fixed setting of correct hash header
- Add additional requirements; asciidoc, docbook-xsl-stylesheets,
libattr-devel and libxslt-tools
- Remove COPYING from sources; upstream provides one now
- Remove automake.patch; "test" directory isn't provided by upstream
anymore
- Remove ima-evm-utils-xattr.patch; libimaevm0 does link against
libattr now
- Split package in three subpackage
* libimaevm0: contains shared library
* -devel: contains header and examples files
* evmctl: the kernel signing tool
- Add ima-evm-utils-fix-docbook-xsl-directory.patch; fix path
where Make is looking for docbook.xsl ima-evm-utils sheep15 1615029456 1.3.2-1.38 1.3.2-1.38 1.3.2 1.3.2 evmctl evmctl.1.gz /usr/bin/ /usr/share/man/man1/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:SLE-15-SP3:GA/standard/49fd1be082e0473436a94d5bb7ede3c2-ima-evm-utils cpio xz 5 x86_64-suse-linux ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=25034424311d18da5af2b67a6169866d3690d8c1, for GNU/Linux 3.2.0, stripped troff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix) R R R R R R R R R R R
R R R
R `:͔'_s utf-8 ffa5742e27141d901ea2d8917de0eec62e6c92020646c70ad863559f41461504 ? 7zXZ
! t/Gg]
crv9wJ)zi7w֡Zc/L±l0K:] {0 jBcREwl-7Sf/@i:!^+bsw,D"
K|jS-2ɓB· YwCd|
KJ!,_>Ş#VmGv>kQuJ+iI,4nZ$ ŵU%!i[6G.$ ć`Wg }sQkU77D?/\>άMΦ'Q1DFH/{4 &PHu&.~ pѾ
°>jpi.4 \9ω*f}RtmBBaOe皵y\ sdF/]Ύd xry32HDT?ޡSR/O o^3Ͳ1 drL{GxUR%ɚAF!woP3N 9|%#;ܱ= 2ͷ TAU~N&Sxy>T7)ej. uzCl-&ќn n~h7GHc++* {<)-$|L]4^⑄[lD.H%KC@z
G~.BYT(/a%T(eY>t
+yތETR:#2#뉭08Mv W^V SC1W a_|d
F7vZQS~u:Jr\%cej}v EݢvMu> }[:OrMr5o-@{M[%Ub V.C !fgpg_ 3mP bcuDFP o'<:右|廑2E - a0 ,_`m}% r,rZ{ӗ @eLst`=G!l
@jQ)Ȍs}{,pD/Dy nTBpl ~W*% N]h H&Ѿ}@ԪU!wf~AÿmU
yAσ>3w qio6"Sޜķ{QKA`DE50AtixQP-b #7 nwq8GFnaݞ[4j@B֍ZvD@fNE{ Vk vl舒w2nIx~0
әEZ7ieTg{86'?Ŀv/UBfMY+Ņ@;Bmy^CD %Y5e7ff(\QـxTf6cjP3C$O Qs f֖_tý6Îz- ГhE/>ޛ'\y`Sܖy =]d
߹a]>XW2Z=\jeI|} Q RG=U<ˡ cpB1QZ}kcӴĐ
k\Ս( M6לю0{9$ 5Qv;ܽ/\Qdi]ı~ 3'U q,=W}I;'?CwE4䶰Zi=vA@SUJIZ9SO*3cݨk9D+c7I)q,zB~بxBɄ5vnjړbWq&2C6TƉ'"4FЊ ]Iv*Ή сC^4RDrsUa'(Y $Z:}5-*%YUlL:}m"o I#?}q 2I@T&1Nȍ,M xz{b3}&e̢WCdܧd4,﷾^ޗ{Մ,6xWm&8n!.5Lʈ87});IFl cːREld$5
sSi55}6^K6palGy X*dp /w9EZ+?aǀկ\q5Qח7C#1r_' y \ 5mB皿s2?f9/JZs~9U{0ә*( $PG$@0'@
m^82X 7n!r%A >E87eبc\O7_V F*^g* a:C ׁg6Rh
1ZG) YpOCX;%}yA̾0?[ fsMT7`Рe`^Rݞ[>`c
,}Ɍ·t2! TU
*.T9{Eǀsj`1'Ɨa> i9ji4߳
'
,i!HoٖEm{M}S!H:Z%e/p*Ug)l qBdS`!#PTqs3l e
*;MxrrU:QTɑRm0(SZdCE+g0@N9 m| % "D[f! 6~T tGaʘ~n[7QG`Z^R<0fMҊnG& |0zy7_p潙zWKw<l0pAK6n݈־]x9Z(O<5=ȚymT:
PN4cǔ
zv G"ur1{ O
FCquc&vD M8U D1XF MvO qx3?u<hjLז ܣ ]]8Z|gI֡@ǵM02⓰[ׁbwXzJ](UK|UtzBw|Q/P
z"R;1us-9^Rk{&^TЙ؛VKʅ[B@|=`-.)jzng7 =.N3`ے˵ֲ|y UXj$~]"BI߯ S=p!\gXW|j]~Ň3(v~/I!n7 _Ͳ]2ax-\@$uYJ? L jL\[y3à;!285:Qz2+̨@[Z
+갠*n 5F㣔5,Ƅ{'h8 {>b ߜ9@GHF_Y*IE $s->!=r鯵A`C?g E˰4R;"$wC 7|]">Ǽi0q+X/""
b :
Ұ HFn^ bI
k~$ ࡹ~!LD)NQm퇳I|zKi]\, B*d|Og0o;>Kdk" X 2-z?Cir23s]A0\쒛0D :|uA vcxPmyk%JVnDz覍b~̷ )LۜStSuL}5 qXOD
pgT/
?U@1hk}Cq7tW#! WF_1!L0MCJfHH 3Da'>6ʤoA: z}~OhOkon{t:O T|NDaNH *CQa[0bhiσ܂jGS6gr| p9Q%y=xaK_5k)b[-r97\J^zNcB88_B?7uK(6;n&~z>q^G@ #> INMEV7hflϑ[
w%ỌD }M謷:c<@Wu ?N [Eh:ʵ_35i8÷c#)$7l+.N3 UWՁtw/A~3<ZQq6E$UiP+仃GwP<E
4IЫ9\6"zB\[8bPs~3FiTGQ[[XdS ( xY ܜ@0@y؝UyL"7 @'Q #b <9J7,:8{
'u
ydKc RC1b~gz:CbR Ja
5 TaIq bkro- FjvTy q:unRjWn(OPM3o۔EsZ=
D:rtυ2G^cyRvG 5KΥ2kp83^-?oTp2U./%$20ǁ#PjB
q<
;Lϗ,u9p%Ԩ$l\]he]J0~ο uOSb/";j g۱nx&XSn:C|" -]]# ʋ,Ukjb#:sN?$$V 0* 1 tp x
7(#muHSZ{70g;
"nzt\X.ZFR?BTU4_{yg OAQ
ciu Iq>i\#ޑ_:=nBF02$K6IhZ6[.c9ǁ-jI5
X ݗBSQ7#cA^.er ">4"䌧P
{34 SYo
*"CʢM"" Yŷ6
Vz/N0oH[bxv54WD*+mZ3
ok 0$8eF tntuh @ |fS]3' i]%C7A)3Oj KUf 30I W% @gs]lB.P&s
"VΒkdiSC' %K ""}>u JS52cXfm -~)!8'Ht ?w{Ch/Dc96Bi"e'o뱌 ,
L gmb)8|ѭYUXxdV+;4̙턩mŔ}Q" ua4Wۜ
WWTINJĜ_9"$v&Aը^\7z(ƛ&fΞ**j3Mh=f4xzޯ xB)
!Ͻ7[>kD0Vv(zc?;Juˢ jg@ iz@
/X[7Ƌ=ϻ:T =PK'rܗgS_YwaL
a$jΫn 9M i3TCpdO,%>da̫IUfڴmQwMHT-T{?qyX,w18t
Z@NR Zvj xdgŠۦh2PJ?ߌU4ͻt]"Jcz`B˭[x;.p儉yI7Ϝ75ăI$ =!j_pm+Kٔav^9Iw?Cq֖efF,kʕ. 3O*Nt4q>/9}𦞯h &jj~N2O
L9?_Gb hѳ1"v* gޙDdqc+=IB>X|c1xU9^9t͆:$%NdxuΒQOvi
kbRY#8Fq>f 41kcII2 PTu-am~\t>>>7fi'3IJ2,dY7pbJ7>#@h7C#1w
kK@ َ hYqOF0pyx!-((.zPڌ H2 =t\(:XbHh̴e8vqR5Eu= ]d?q8*c!ջ!n8>6fIV]<' J 3+=Ye^ Q΄bdEkPј/vz4ZW卫At~!C:Gف7hOO1v+߂N~y<)N`
mDXv`5b-TFV!Z S g_HTVL'b>\Ϫ@ł
ćT Ȑj/aRڧYb^(==aå (
ZI cF iv$(_~ސ
&8HYN0>gr/>Ic<.iFYrSͶWY9ol,$5?o_Tj4zRKJ ,K` 9nr+=*z2^'aJg
LTkP8ۡԬ@z M~z^X;;i<~8XeOlL :9DԶ
= a
u,ZG
cOZ@$U[l
L$&4/Xi|.f 'EyCE5qf%
Uȶ%VDpYw{ DG/AZ>YUx(ZۄQǗVB μ)˃f˛SͧIH[ B"|T,|)Ķ6X~J1+H WUZ#]A,`߶k@? ^]ᰴ:FguUح4@jܰ8C 0#o?^9Yib4ʿ`Sm ~;ۇ@87u~lGI2JFDHg#doVRt ʰ۶QTtQ-{X܉|e-cy
-J>;v%\ b*DY9nw
(dے4AG 5u@93G(cw(mcb$]t$:9KfXGezյJw jO)IM8=6ny1|:A/1|ʍNfJP]zmt00k..ȳq#fntK?Tv^Bzh#l|5$4Gh^,ؼ|˙鎽@i@g 2,4L͊L]K>5a]C.+;RMs
l JGNd
Q=v("[
jEU]9!>vhb4};IcjB-UMSYD`.30@^Xje.I /#/4?$OX
@5T3 ^Ny` E2qM{{W \N U+e"-R ||{Wq} uIb]l}HP'dbtx}z& AJcK R5J:L`ȸbwa/2~tbQ@E(uIwirPw1UF~w4oZ2'Q lD
9(Ķ4 ZCb1y
IE\EBxbU'r;\iV%D8˭+ ƉOBhk5`j
~vq8Vs.pD, L(uk)}1dGIm20 SzvM
_N @
9VN9@IU b4ܫ &kU*;Gɏ8 bWuqUk$ XzDkϋw~U$-Yy8y}~CoD4U3DyF r?bG` 쩓 Uu9
:(uv4fo
;8.)/#1m 0&yb;=BS~#97'KpAQ1cUa72xibIT)h2urI8_pfr.rY 0TGEa !Ôd&x@&m_/l"a/ƽ X Nu#<( _4b~K:EŮa_a<մ/rr%KW!Vt9Eq~
ionZf X4OK9Z(Iy$b Z b$nl 87L?19:d k<1ʓ`W .%){;ɘ4bֱʭ%+gso R]\MVVjNN}_UFLϼ\414RXZQ$>)h˴Ș!`1D)EdhhtlGKܨ nTBH`OvUa(| ECƬ0B lP="VϸTe5itm4:Fن]efC8Ǝ47T
402D4O#z= ,c#R_)q[Uh-j+GL1`َ I*ABsN+M\ׂ\ס-N$K48!i"_*ƪKrȠ tƥYU
` Kou*BPN+MƋ!5*
b&O > B}~YpK!)XV<[{ܩC8hۺŮ@x;IIJ^<$2lU >5YK|
@ V',Cj<T{҅:TW OJfFʽNtMH$JQӏQ&JX` nz?A|O*Ms
E%n*fe:;!]@ 4<3U߂;%>R NJEq {-OkY0&pjl,ofgc nRv.? .)淳TOor%y J ]dX2^pP5,?Z۾I 5
nYFZIQ{j;gJԞvW./b`U镜W]q'HQp&LAҘ4E q:%XζMr^ƴ/ \p%@2)ַ?|O-ֺ q<+riY˻wTD\2ݲG`B %%wYNcH}l C>T zYA# "{MnHN3^bE m V7SZt ( Xa|* R5#%aEz̹ac1$eaO2g)f}vం*(ZOZ
^aəFppCzսdS uѹS 'q`Il
]
r4BM%ӛ6474
DЊJW c>>J0Yv%s:@a $ԯI!/sIKeͧA0:Bc v v`r l|[vJ:A
gBS E9fCk1 gGm<^r5#,{ ؟oa/"-ЦaRM*6HՐOH eG
SxYJ. G 4g
A.)H0t% p Ȓig {I TI-fo#送#(4JRq2`˩/ēn9 ߉_c]?^m208=TlZ` G -QxK)E{'0>Q2tB$g['k
xx%uILe:=[i[)ҩJ-z8SOܟ/I@1%3o-?e]/dnU߷\ELk8Ai<4 zJ&ULt- Fj MfGpZH9!xI2GyClWnFmloO"#f&g?E {@0a uK)ԥf\ ;@ ?vd{CXW/|<}OL?+ sԩRjW#94"^ӟ }SnqAA;1y}$_>zeM?QrA(4Xg|Mđ"V# [)f6 5\;$WA]q[2(1 sd
PYʦ:RnQ,?'+m,?U&zNTX10Sa $ͮ-иl(ElLϗ{ kޚE1|4ٷCUIv5m0=L nuW)!
|'E R>gTvpb%1+ Z/; NTh*) Sf#N/6Emxtbp6χÓ1%2W{d &l3 DT$- cʨ=ԭ9Aۦ aNBKuv+?=H,nx4Slc4I^z$?8o? gN?Mu5$GDzmSj֞6[mw|Ne~vB:l
^Ο@Ҁ
^Kul,&W/$QҤ$2I J j O>l=dMnD/
tͤG: Y,>H)6
Rr|Q8 rLp4Fjj?De#;4T; Dž5\y 'U+(@H3İ(f +A03r
}-*CUEsQBup4b|vnHٲSt.Em 4+59]@!ZհIyّu$lg SԄJm2b֏ F(ē0 jcz2' 7v`:c<ʹoQ9x O.f:Ц&n$)uj 1Ѿy&@s2 :(!,˳ t0n 0܊ WrJo)0ffM>&dPc/GFgSK Щƀx aq PvXb$kuA7نFQQnc4K`"gp̗M %/&n#~! In |s0izTj ]/%9Y&
PiYG|c Nk(vӚ6aXH?"4Dg@82~j1 ͓aQH`E8 (BiO? ; )C
l " E{@ nUDN3vl,e`ā{gKƔIHݨV>@c)d,L)*@"_/g|* zvϫhb[ ˍc/2V܆l4@&,R,43CdIEw;fϘd,
g7M,@.ws5w!iH~Hs -wճ6eUFoT9L*`,AnȨwbMĽq>矋CcgrK6{0͵Dנ]A'v O=䰛ey]Ļ>qպPO=~P"_# 1;̈́ h@uL/ǔuOG*J* 7{ pr$v.hk,
FpL-(>.!T1z PoN\ؐi./E2`-aM?koI[E7j_cb=gX%?j ?;`w\| p`L^װıej1]ݨ&lf'|I3mx]8 Pl?c(ru6DFm%Bg!Օr}#T̋< hbp"6+FC!) zcZ Rba*60<z29U?RTce0,WH: d>}j\[4s 7V|,J.9섒$\G lvs (JeDzyR 3u(zl[c cY.]ů.
{Y]*Ux(ѼyQcڌ=]^.Ɖq(1 V'_mw
Jp þwM68=Y-.șJdǪJB+#`|}
-Ʀ2*Ђr^K(Og5U2?p5*jęokKgt'䌁ZI(Yr-`aAK i&@LBvN~l&)@ =̂> vыw@i RT+-"Vl,@^Y#ߔOxhh
9 r
1V*kKJj6g
*mӃn:xЧ,Ǿ9&Kzr.mZ: aJ 5Xd 'yҨ/fG_b֕0BsWJ{]yzlk
QT5ZFD."2NN5PZ4d
n&աay5g5NJ7]^!b+6:':>#yX'i>;]hX]ȕtl
w D
T:c,yRw7gsH{Ab>/hVw`vu} JOʩi>'˧֪F=s- ˉe 6P
ĝ
d &y
)9PJvJŃOE2 ȗ;Qp4! {)ދK(5:A 1w_Fqy;rG;7nƥ&yzh~\Mb8u*} $ J#AWN:T tpҖp3f5̾xL
NlU ( Dg1҉J}]Qw*8CVb-CG :|b5VX0in7xkcIgr٦aͨSc4ᥚR?L ^"u&F[9ϖ
PmIkC=9gͣ4Yqн Tx{MFr
0m08Ku9kZT77#FQi*vT&dǛׇd ,#.a*M?m?+cDg1PxX<^^ilR3 ͐Ð4 2Ɖ+E(".Yq1iz'\^X4IM焻C.?fo \)^xⳌ[ZJx~Rf!> j;0H_UN S1I iD 똲kJ:Dѩ5OdvY9&gGT$:e@緋w 9. =b`$]"a{3K}K*Ek =܌@qiȆW$x;cWL{t;mQޓP؉Yd]r7Nn BY A6F|˥]>`b{³G^2xS9He u B&C@F'`$GYm7[,d Nm +^/y]Ȅ%ZIF/p9 |7ӻկ$mFivJԚaJA霣/:Ӯ7f,TĹ= 2z e]V.9Kγ'pgYxWdv"+KsNry2ϔOsG'Az=GϠ4܁{v%VgM*`kAcQv
|}ꤨcPB ad0XeL99ALޅb+@bW4oiBr,D%jx4,̻)!=}oΏ"K77!>h-LalũS˯ 8H/ ʩCuSK p >a/jƙ(I#dBl K 2bQY=0 'SzmGdFf1i*@=o 1 Í g) ^v ݓ۔=\/к{amg{pg#KT_0p k8QW-SQ)YLw]ucDoȯGst=Z-1ԺxO $E; MGj'*sSڄ7\ Rd :J6GǸFf %sqޏ~_ˮ!#r 3
OAp 7Ҝ幏 ľ
Vk|v"rG")W1o<
X inUcF>sJcĠtz..X KM\"Xl<[Zqw9_{JkW n(7AB(I:az̃X1I#tS½Қ 7tl5!ɺd,I_>R82wؽUZ}U*["t4=Ibh a뽷'D%Ur O m
>%@/A," lG^fp~dj1N[`=:*pe9qūK?4-B6u;8_68yI@?B ` Y?TcWRCJئ1KH@z6
,rLdQ~;T)ڒrddJ 1$~5sqj-Ҟʇ*ƛK[} E$r:xkB Zs48@+2얙,kֳ=*ʿyˉ?Y0U.)6O5Î;]ѪbFBi ;/PYp.7n50jM ^`r [v鵒o9k"nt=) ϥFz ՚cÁc5^6h ʾ{\؇g!磂$0 %ӱS~!*= #C> @v
ko6<Asb^dIBh4r#L" 3qZOaIr6 <̉ ;&Pqd5 ƔyA m7(G^<i8YWzŻpQ}] >:l&A,̰^QRMd YG
P͉U6uΑhOq>d橻BK:ԉsԟK˒&#EL ctOjZ#(F3 4i_:ÚP ͍Uqƚ >CXpc loꪲ U~0)מʢz#dp$>6 (ͧwJIpPFr
vm0\$L"QQlBCAZǐa28;\ ,QSkhglXIZsK`aa (+K@j
&`ܾ9- #9SFu + n719sxLj&@if(CsNz,xj{aDdpqr乶ΈMK@
#]u_P=CHUw 7uz ~/{ƁOxQ P kƄJ)l-<~JT+=p)u #f 58{p'YٰHPs]eh,gӶChTdMY$JHcѴ-ƍ Kn'ϡNk`n_q:3%\!o/#j$F2+d+ZBտ c*5֗˯9T7J^] nH,rց6;X3u6˹(գ.]"
uW#NsXr`YtGn UEQFE+&C4G8k"/z0*= YWJS8+Nm ,d # r4<4q cۡ?V[_#>"!͆&X_}T+X26L]PgS"hNMKl i4}'cEX Ҩ:lȴ(S%J(q ٴD:ʐ ~{[nD)]xZr41sNp9%c wQ#~
ce76V+F&F/Zqb=,-.MU8w4oN4"F٤ ~!zs[?v.Cq8A OF`R0<_>,L,u~wVJA !YH=sF}778825. l Tx
#J^xQ^ooq04QuV [
+9x&1dYr!p?`QWR,JGabԆ[fh^(w}@Zs
Ù -z8T|RSMAױ^Y{mL* ) d#@(Wmڮ gnjm`H*w6U'C/)b;+!ȸW sa}cބ\}{ c
L94ʢЁU_sh; 皺0d9Do) '?cjyJL6Slhg9[!#d'(ΤAC OѢԴ&= o@{? wC9%>?o#D呆۵ݕ^gmқM$N@Wr+Ds~eX9!J^ Q_ g 8`C"ALZD4t-P&7L0$/4ND"ǖL4,"423;J j\!3>z*'|[ {8Hp ;&lzf!nS!@mq(H8żxcX0peVzy;} M)aBtHD M`+MIp Jb ~
YZ